What is a Lithuanian VASP license? Which businesses are applicable?
LithuaniaVASP(Virtual asset service provider)Usually used to cover business activities related to crypto assets (such as exchange and matching between virtual assets and legal currency/virtual assets)、Escrow/Wallet Management、Transfer of virtual assets on behalf of clients, etc.)。For B2B teams，The core value of VASP is not “nominal access”，It’s about being acceptable to financial institutions and partners.Compliance explainability：governance structure、control measures、Whether transaction monitoring and evidence traces meet EU AML/CFT expectations。
Once the Bank of Lithuania (BoL) approves your CASP license，Your crypto business will receive EU Passporting Right。This means you don’t need to be in Germany、France、Spain and others 26 EU member states have repeatedly applied for expensive local licenses，can be directly shipped to the entire European Union 4 Billions of customers provide crypto asset services legally and compliantly。
need special attention：MiCA is gradually being implemented at the EU level，Some businesses will enter higher-level regulatory frameworks and transition arrangements。Positioning and sustainability of VASPs in Lithuania，Should be combined with your business scope、Customer country/region、Evaluate marketing reach methods and capital flow design，Avoid "mismatch between license and business" leading to subsequent bank rejection、Frequent review or required to upgrade qualifications。
deal、hosting、OTC、Fiat currency deposits and withdrawals、Brokerage/matching、Modules such as institutional APIs are mapped item by item to regulatory activity types and control requirements.。
Disassemble the source/destination of customer funds、payment channel、On-chain address ownership and third-party service provider responsibilities，Create an auditable capital flow map。
policy document、System log、Alarm handling、Approval records、Training and random inspection reports are organized into a "Regulatory Inspection Material Catalog"。
Prepare compliance package and Q&A library based on bank due diligence logic，Reduce the cost of repeated replacement parts for account opening and channel docking。
Regulatory concerns：governance、actual controller、Compliance function
Lithuania and within the EU AML framework，Regulatory and financial agencies usually focus their review on “Who controls the company、How companies control risks、Whether the control can be verified”。For VASPs，It is recommended to build governance and compliance functions according to the following dimensions：
- Actual Controllers and Equity Transparency：UBO identification、Equity chain penetration、controlled protocol、Voting rights and concerted action arrangements need to be explainable。
- Director/Office Competencies and Character：Relevant experience、No bad records、time investment、Match business size。
- three lines of defense：Business line self-control (KYC and front-line review)、Compliance/MLRO (Second Line Rules and Monitoring)、Internal Audit/external audit(Three-line verification)。
- Outsourcing andIT governance：Wallet/risk control/customer service/development outsourcing needs to be contracted、Permission isolation、SLA and Audit Rights Terms。
We will convert the above points into an implementable organizational chart、Job description、Permission matrix and meeting/approval trace template，Ensure compliance without slowing down product iterations。
core compliance system：AML/CFT、sanctions、Travel Rule and Audit Traces
For VASPs，We recommend dividing the compliance system into “institutional layers” + process layer + System layer + "Evidence Layer" four-piece set：
- Institutional level：AML/CFT Policy、KYC/KYB policy、Sanctions and PEP Policy、Suspicious Transaction Identification and Reporting Policy、Recordkeeping and Data Governance Policy、Compliance training and random inspection system。
- process layer：Account opening and due diligence layering、Enhance due diligence trigger conditions、Continuous due diligence (event-driven/cyclical review)、Alarm triage and upgrade、Freezing/Restrictive Measures、STR/SAR workflow。
- System layer：Customer Risk Score、List screening、Transaction monitoring (on-chain/off-chain)、Address Risk Label、Equipment/behavior risk control、Case management and reporting。
- evidence layer：input for every decision、rule、approver、Timestamps and results traceable，Support sampling review and regulatory inspection。
If system selection and implementation are required，Can be integrated with the following capability modules：KYC identity verification system、transaction monitoring system、risk assessment system。
Change customer type、area、Source of funds、Product functions and behavioral characteristics are quantified into scorecards，Match differentiated due diligence depth。
sanction list、Regional restrictions、IP/device fingerprint and payment channel risk control linkage，Reduce "bypass paths"。
Establish processes and records for information transmission and counterparty verification of virtual asset transfers，Facilitate connection with compliance partners。
Preset evidence directory and export template for regulatory/bank questionnaires，Significantly reduce repeated patching。
Application path and project process (from gap analysis to operability)
Sort out product modules、Customer type and capital/upstream flow，Determine whether it constitutes VASP and potential MiCA transition impact。
Determine equity and UBO disclosure standards、Director/management placement、MLRO/Compliance Position Responsibilities and Authority Matrix。
Export policy document、SOP、risk scoring model、Monitoring scenario library and case management closed loop。
Assemble application package according to regulatory standards，Prepare interview question and answer library and supplement strategies，Reduce the risk of information inconsistency。
Prepare KYC due diligence package、Fund flow description、Audit trace examples and compliance certification materials，Improve account opening success rate。
Conduct a “supervisory inspection” drill：Sample customer files、Alarm handling、freeze record、Report link and log export。
Lithuania VASP application fees and budget
Prudential capital for Lithuanian MiCA/CASP determined by MiCA service category，However, the application fee must be checked based on the current authorization page of the Bank of Lithuania and the national charging resolution cited therein.。of existing pages 2,425 Euros and "0 annual maintenance fee" are not directly supported on the referenced regulatory page，Therefore it is no longer shown as a definite official amount。
| project | Current official caliber | illustrate |
|---|---|---|
| CASP authorization application fee | Pay according to the national charging decision at the time of submission | The current resolution linked to the authorization page of the Bank of Lithuania shall prevail |
| minimum prudential safeguards | 50,000 / 125,000 / 150,000 EUR | Determined by MiCA Annex IV corresponding service category |
| ongoing regulatory costs | According to current regulatory rules | It cannot be written directly that all CASP fixed annual fees are 0 |
Official basis and last verification date：2026August。Bank of Lithuania Authorisation of Crypto-Asset Service Providers。
Bank account opening and channels：How to make financial institutions willing to cooperate
For VASP business implementation，“Available bank accounts/fiat channels” is usually more important than “getting qualifications”。Due diligence by financial institutions usually focuses on the following materials and capabilities:：
- Business model and cash flow description：Full link from customer deposit to withdrawal、Counterparties and controls at each link。
- Customer and Territory Strategy：target market、prohibited market、Reach methods and marketing compliance boundaries。
- AML and Transaction Monitoring Evidence：Sample alarm、Disposal records、Freeze/deny cases、Sampling inspection report、training records。
- Auditing and reporting capabilities：Exportable、Reproducible、Interpretable (rule basis/threshold source/approval link)。
If you need to cooperate with European financial institutions in account opening and channel assessment，Can be referenced：European bank account opening；If involvedCross-border servicesBorders and multi-jurisdictional reach：Cross-border business compliance。
Lithuania MiCA/CASP verification focus during transition period
Under the EU crypto-asset regulatory framework，CASP business should be based on service type、Customer location、Asset nature and transition arrangements to determine whether authorization is required。The "VASP license" advertised on the website cannot replace the scope of application of MiCA.、Checking of Competent Authorities and Transition Periods。
- List escrow、trading platform、exchange、transfer、Specific services such as order execution or advice。
- Prepare to govern、Equity、Management、risk management、AML/CFT、information security、Customer Assets and Complaints Handling Documents。
- Check with the competent authority、Capital and prudential safeguards、White papers or marketing materials、Outsourcing and reporting requirements。
- Before starting business in different EU countries，Confirm authorization、notify、Transition and local operating restrictions。
Official verification：Lithuanian Bank Crypto Asset Service Provider Information、European Securities and Markets Authority MiCA crypto asset regulatory information。The specific applicable rules shall be subject to the latest announcement by the regulatory agency.。
policy、process、System screenshot、Log sample、Contract terms and organizational structure are archived by questionnaire fields，Shorten round trip cycle。
Output bank/EMI-oriented fund flow diagrams and control point annotations，Explain risks and mitigation measures at each node。
Preset EDD package、Provenance Checklist、Address Risk Strategy and Deny/Exit SOP，Reduce channel concerns。
External publicity and user terms are consistent with compliance standards，Avoid "promised benefits/misleading statements" triggering red lines for partners。
Lithuania MiCA/CASP License FAQs(FAQ)
New projects should be judged according to the actual service, MiCA CASP authorization or the notification path of qualified financial institutions.。Historical anti-money laundering VASP registration does not replace current MiCA authorization；The transition from the old institution is not a license-free channel for new applicants.。 SeeESMA’s MiCA regulatory information and registration portal。
The CASP authorized competent authority is the Bank of Lithuania。MiCA authorization review、National anti-money laundering oversight and suspicious transaction reporting are separate responsibilities，Obtaining CASP authorization should not be construed as eliminating the need to comply with local AML or FIU requirements。 SeeESMA’s MiCA regulatory information and registration portal。
MiCA Annex IV lists 50,000、125,000and €150,000 third tier。Class 1 mainly includes order execution、Placing、transfer、Order receiving and delivery、Proposal and portfolio management；Class 2 adds custody and exchange；Class 3 adds trading platform。The trading platform cannot apply the 125,000 euro tier。 SeeCurrent consolidated text of EU MiCA regulations。
The corresponding minimum amount must also be compared with one quarter of the previous year’s fixed administrative expenses in accordance with Article 67，Use the higher。If the operation is less than one year, use the first 12 months of forecast expenses.。Prudential guarantee can use own funds that comply with regulations、Insurance or equivalent guarantees and combinations thereof，Don’t just look at the company’s registered capital。 SeeCurrent consolidated text of EU MiCA regulations。
Article 59 requires the registered office to be in a Member State where at least some cryptographic services are carried out、The actual place of management is in the EU，At least one director is resident in the EU。Specific Lithuanian personnel and operational arrangements must match service scale and local rules，Just renting an address does not mean you are qualified.。 SeeCurrent consolidated text of EU MiCA regulations。
not enough。Eligible shareholders and members of the governing body are subject to credit and fitness checks；Management must also demonstrate knowledge、Skill、Experience and time available。The application must state the ultimate control relationship，and provide proof of background and funds that meet the requirements.。 SeeCurrent consolidated text of EU MiCA regulations。
Section 62 includes legal entity and LEI information、business plan、Prudential safeguard certificate、governance、Personnel and shareholder qualification information、AML risks and internal controls、going concern、ICT security、Customer asset isolation、complaint，And the hosting corresponding to the service to be applied for、Platform or execution policy。Materials must describe real business，Don’t just fill in the general template。 SeeCurrent consolidated text of EU MiCA regulations。
cannot。Generally confirmed within 5 working days after receipt、25Check completeness within 1 working day、Decision will be made within 40 working days after complete application。Certain requests for additional information may suspend evaluation for up to 20 working days；Preparation and completion of incomplete case files will be charged separately，The result may be approval or rejection。 SeeCurrent consolidated text of EU MiCA regulations。
Official application and ongoing supervision fees are required separately、Prudential protection、personnel、system、Audit and consulting fees。The MiCA minimum coverage amount is not the application fee。This page does not consider amounts or market quotes that are not confirmed by the current national fee schedule as official fees，Applicable items should be checked with the competent authority before submission。 SeeCurrent consolidated text of EU MiCA regulations。
Submit the target member state to the competent authorities of the country in accordance with Article 65、Serve、Information such as expected start date and other activities。The competent authority usually transfers it within 10 working days.；The institution can carry out corresponding cross-border services starting from the 15th calendar day after receiving the transfer notice or at the latest the 15th calendar day after submission.，Still subject to scope of authorization and applicable rules。 SeeCurrent consolidated text of EU MiCA regulations。
The fully self-initiated exception by the customer to Article 61 has limited scope。Proactive marketing to the EU、Promotion or advertising generally cannot be considered customer-initiated，Contractual disclaimers cannot change the facts；This exception does not allow the promotion of new assets or service types to customers。 SeeCurrent consolidated text of EU MiCA regulations。
Do not automatically allow。Article 70，Relevant payment services must be provided by institutions authorized in accordance with payment regulations，Can be performed by CASP itself or a third party。bank、electronic money、Payment and encryption service permissions should be judged separately，and disclose service providers to customers。 SeeCurrent consolidated text of EU MiCA regulations。
Not for use by organizations for self-operation。When Article 70 applies，Client funds that are not electronic currency tokens must generally be deposited into a separately identifiable account with a credit institution or central bank by the end of the next business day after receipt；Custody of crypto assets requires additional legal and operational segregation，and be kept separate from its own assets on the ledger。 SeeCurrent consolidated text of EU MiCA regulations。
Section 75 requires hosting agreement to cover services、custody policy、Safety、communicate、Fees and applicable laws；Establish position registration for each client，And provide position statements at least every three months and when requested by customers。There must also be procedures for returning assets or means of access as quickly as possible。 SeeCurrent consolidated text of EU MiCA regulations。
Article 71 MiCA requires customers to make complaints free of charge。Organizations must make clear announcements、Transparent process，Provide complaint template，Record complaints and handling measures，and inform the customer of the processing results within a reasonable period of time。 SeeCurrent consolidated text of EU MiCA regulations。
not enough。Must be identified、prevention、management and disclosure organization、shareholder、Conflicts between employees and customers and between customers，Indicate the source and mitigation measures prominently on the website，Review policies and correct deficiencies at least annually。 SeeCurrent consolidated text of EU MiCA regulations。
Won't。Section 73 requires licensed bodies to retain the staff and capabilities necessary to oversee outsourcing、Data Access and Regulatory Inspectability，Sign a written agreement，Set up exit and contingency arrangements；Outsourcing does not transfer legal liability or change obligations to the client。 SeeCurrent consolidated text of EU MiCA regulations。
Article 68 Services、Activity、Order and transaction records are generally kept for 5 years；When requested by the competent authority before the expiry of that period，Can be extended to 7 years。National AML and other applicable preservation requirements must also be checked，and ensure that the information is available for regulatory inspection。 SeeCurrent consolidated text of EU MiCA regulations。
Can't。Service provider authorization and token issuance are different systems。electronic currency token、Asset Reference Token、Other crypto assets and financial instruments need to be classified separately；Obtaining CASP authorization cannot replace the issuer's authorization.、White paper obligations or securities business licenses。 SeeESMA’s MiCA regulatory information and registration portal。
New services require application for extended authorization，You cannot operate it first and then re-register it.。Provide hosting、platform、exchange、Institutions performing applicable services such as placement or placement must also prepare an orderly exit plan，Maintain continuity of key services and customer rights and interests。 SeeCurrent consolidated text of EU MiCA regulations。
