What is a Lithuanian VASP license? Which businesses are applicable?
Lithuania VASP (Virtual Asset Service Provider)Usually used to cover business activities related to crypto assets (such as exchange and matching between virtual assets and legal currency/virtual assets)、Escrow/Wallet Management、Transfer of virtual assets on behalf of clients, etc.)。For B2B teams，The core value of VASP is not “nominal access”，It’s about being acceptable to financial institutions and partners.Compliance explainability：governance structure、control measures、Whether transaction monitoring and evidence traces meet EU AML/CFT expectations。
需要特别注意：MiCA is gradually being implemented at the EU level，Some businesses will enter higher-level regulatory frameworks and transition arrangements。Positioning and sustainability of VASPs in Lithuania，Should be combined with your business scope、Customer country/region、Evaluate marketing reach methods and capital flow design，Avoid "mismatch between license and business" leading to subsequent bank rejection、Frequent review or required to upgrade qualifications。
deal、hosting、OTC、Fiat currency deposits and withdrawals、Brokerage/matching、Modules such as institutional APIs are mapped item by item to regulatory activity types and control requirements.。
Disassemble the source/destination of customer funds、payment channel、On-chain address ownership and third-party service provider responsibilities，Create an auditable capital flow map。
policy document、System log、Alarm handling、Approval records、Training and random inspection reports are organized into a "Regulatory Inspection Material Catalog"。
Prepare compliance package and Q&A library based on bank due diligence logic，Reduce the cost of repeated replacement parts for account opening and channel docking。
Regulatory concerns：governance、actual controller、Compliance function
Lithuania and within the EU AML framework，Regulatory and financial agencies usually focus their review on “Who controls the company、How companies control risks、Whether the control can be verified”。For VASPs，It is recommended to build governance and compliance functions according to the following dimensions：
- Actual Controllers and Equity Transparency：UBO identification、Equity chain penetration、controlled protocol、Voting rights and concerted action arrangements need to be explainable。
- Director/Office Competencies and Character：Relevant experience、No bad record、time investment、Match business size。
- three lines of defense：Business line self-control (KYC and front-line review)、Compliance/MLRO (Second Line Rules and Monitoring)、Internal audit/external audit (three-line verification)。
- Outsourcing and IT Governance：Wallet/risk control/customer service/development outsourcing needs to be contracted、Permission isolation、SLA and Audit Rights Terms。
We will convert the above points into an implementable organizational chart、Job description、Permission matrix and meeting/approval trace template，Ensure compliance without slowing down product iterations。
core compliance system：AML/CFT、sanctions、Travel Rule and Audit Traces
For VASPs，We recommend dividing the compliance system into “institutional layers” + process layer + System layer + "Evidence Layer" four-piece set：
- Institutional level：AML/CFT Policy、KYC/KYB policy、Sanctions and PEP Policy、Suspicious Transaction Identification and Reporting Policy、Recordkeeping and Data Governance Policy、Compliance training and random inspection system。
- process layer：Account opening and due diligence layering、Enhance due diligence trigger conditions、Continuous due diligence (event-driven/cyclical review)、Alarm triage and upgrade、Freezing/Restrictive Measures、STR/SAR workflow。
- System layer：Customer Risk Score、List screening、Transaction monitoring (on-chain/off-chain)、Address Risk Label、Equipment/behavior risk control、Case management and reporting。
- evidence layer：input for every decision、rule、approver、Timestamps and results traceable，Support sampling review and regulatory inspection。
If system selection and implementation are required，Can be integrated with the following capability modules：KYC identity verification system、transaction monitoring system、risk assessment system。
Change customer type、area、Source of funds、Product functions and behavioral characteristics are quantified into scorecards，Match differentiated due diligence depth。
sanction list、Regional restrictions、IP/device fingerprint and payment channel risk control linkage，Reduce "bypass paths"。
Establish processes and records for information transmission and counterparty verification of virtual asset transfers，Facilitate connection with compliance partners。
Preset evidence directory and export template for regulatory/bank questionnaires，Significantly reduce repeated patching。
Application path and project process (from gap analysis to operability)
Sort out product modules、Customer type and capital/upstream flow，Determine whether it constitutes VASP and potential MiCA transition impact。
Determine equity and UBO disclosure standards、Director/management placement、MLRO/Compliance Position Responsibilities and Authority Matrix。
Export policy document、SOP、risk scoring model、Monitoring scenario library and case management closed loop。
Assemble application package according to regulatory standards，Prepare interview question and answer library and supplement strategies，Reduce the risk of information inconsistency。
Prepare KYC due diligence package、Fund flow description、Audit trace examples and compliance certification materials，Improve account opening success rate。
Conduct a “supervisory inspection” drill：Sample customer files、Alarm handling、freeze record、Report link and log export。
Costs and budgets：Use the benchmarking framework to make project calculations (including cost tables)
Different service scopes、Equity structure、Staffing and system maturity will significantly affect the cost of VASP projects in Lithuania。To facilitate project establishment by the CFO/compliance manager，we provide abenchmarking budget framework(Using the common cost matrix of Hong Kong MSO as a reference)，Used to assess “Government Expenses” + Basic establishment + Fund occupation structure of “Agency and Compliance Construction”。Notice：The following table is a reference for budget modeling，Does not represent Lithuania’s official charging standards；The Lithuanian project needs to be actuarial after determining the business scope and implementation plan.。
| cost module | Cost items (reference caliber) | Reference interval (HKD) | Description (for Lithuanian VASP budget modeling) |
|---|---|---|---|
| Government | Application fee；Fitness/Character Review (Fit & Proper） | 3,310 + 860/people | Used to simulate regulatory fees and key personnel review costs；Lithuania is subject to actual requirements。 |
| Base | Company establishment and secretarial services；Office/physical arrangements | 8,000–15,000；20,000–80,000/year | for evaluation registration、address、Rigid costs of basic operations；If higher specification entities and staffing are used，Costs move up。 |
| Agency | Licensing services；AML document and system construction | 60,000–150,000；20,000–80,000 | used to measure “application package + External investment in “implementation of compliance system”；If system integration/audit drills are included，Budget needs to be increased。 |
| Total | Total standard items (benchmarking) | 150,000–400,000 | Suitable as the project approval range for the board of directors/investment committee；Finally, based on business complexity、People and systems status actuarial。 |
If you are also involved in legal currency deposits and withdrawals、Cross-border payment、Or plan to cooperate in depth with European banks/EMI，It is recommended to split the budget into two levels：(1) License and corporate governance costs + (2) Acceptable compliance and system capability costs for banks’ due diligence，Avoid the structural risk of “obtaining qualifications but being unable to open channels”。
Bank account opening and channels：How to make financial institutions willing to cooperate
For VASP business implementation，“Available bank accounts/fiat channels” is usually more important than “getting qualifications”。Due diligence by financial institutions usually focuses on the following materials and capabilities:：
- Business model and cash flow description：Full link from customer deposit to withdrawal、Counterparties and controls at each link。
- Customer and Territory Strategy：target market、prohibited market、Reach methods and marketing compliance boundaries。
- AML and Transaction Monitoring Evidence：Sample alarm、Disposal records、Freeze/deny cases、Sampling inspection report、training records。
- Auditing and reporting capabilities：Exportable、Reproducible、Interpretable (rule basis/threshold source/approval link)。
If you need to cooperate with European financial institutions in account opening and channel assessment，Can be referenced：European bank account opening；If it involves cross-border service boundaries and multi-jurisdictional access：Cross-border business compliance。
policy、process、System screenshot、Log sample、Contract terms and organizational structure are archived by questionnaire fields，Shorten round trip cycle。
Output bank/EMI-oriented fund flow diagrams and control point annotations，Explain risks and mitigation measures at each node。
Preset EDD package、Provenance Checklist、Address Risk Strategy and Deny/Exit SOP，Reduce channel concerns。
External publicity and user terms are consistent with compliance standards，Avoid "promised benefits/misleading statements" triggering red lines for partners。
FAQ：Key questions most frequently asked by businesses
Judgment needs to be made based on business scope and EU MiCA transition arrangements。Many companies mistakenly regard "registration place" as "European passport"。We will first do service boundary and target market analysis，Assess whether a higher-level EU compliance path or parallel planning is required。
both are important，However, banks and payment partners usually value “verifiable control and evidence chain”：KYC quality、Transaction monitoring coverage、Alarm handling closed loop、Audit traces and personnel performance。
Some functions can be outsourced，But key responsibilities、Authority and accountability must be clear，and requires a contractual SLA、Audit right、Data access and event response mechanism。Outsourcing does not mean immunity from liability。
What is reusable is the institutional structure、Risk methodology and partial process templates，But EU AML and GDPR、And the due diligence standards of cooperative banks still need local adjustments and evidence reconstruction.。Please refer to our experience path for license implementation.：https://www.gxt-hk.com/us-msb-license-application-cases-in-2026/ 。
usually include：Business and Regulatory Mapping Report、Equity and Governance Plans、AML/CFT Policy and SOP、Risk scoring model and monitoring scenario library、Application document list and supplementary document strategy、Bank due diligence compliance package、Compliance drill and rectification checklist before going online。
