What is a Lithuanian VASP license? Which businesses are applicable?
LithuaniaVASP(Virtual asset service provider)Usually used to cover business activities related to crypto assets (such as exchange and matching between virtual assets and legal currency/virtual assets)、Escrow/Wallet Management、Transfer of virtual assets on behalf of clients, etc.)。For B2B teams，The core value of VASP is not “nominal access”，It’s about being acceptable to financial institutions and partners.Compliance explainability：governance structure、control measures、Whether transaction monitoring and evidence traces meet EU AML/CFT expectations。
Once the Bank of Lithuania (BoL) approves your CASP license，Your crypto business will receive EU Passporting Right。This means you don’t need to be in Germany、France、Spain and others 26 EU member states have repeatedly applied for expensive local licenses，can be directly shipped to the entire European Union 4 Billions of customers provide crypto asset services legally and compliantly。
need special attention：MiCA is gradually being implemented at the EU level，Some businesses will enter higher-level regulatory frameworks and transition arrangements。Positioning and sustainability of VASPs in Lithuania，Should be combined with your business scope、Customer country/region、Evaluate marketing reach methods and capital flow design，Avoid "mismatch between license and business" leading to subsequent bank rejection、Frequent review or required to upgrade qualifications。
deal、hosting、OTC、Fiat currency deposits and withdrawals、Brokerage/matching、Modules such as institutional APIs are mapped item by item to regulatory activity types and control requirements.。
Disassemble the source/destination of customer funds、payment channel、On-chain address ownership and third-party service provider responsibilities，Create an auditable capital flow map。
policy document、System log、Alarm handling、Approval records、Training and random inspection reports are organized into a "Regulatory Inspection Material Catalog"。
Prepare compliance package and Q&A library based on bank due diligence logic，Reduce the cost of repeated replacement parts for account opening and channel docking。
Regulatory concerns：governance、actual controller、Compliance function
Lithuania and within the EU AML framework，Regulatory and financial agencies usually focus their review on “Who controls the company、How companies control risks、Whether the control can be verified”。For VASPs，It is recommended to build governance and compliance functions according to the following dimensions：
- Actual Controllers and Equity Transparency：UBO identification、Equity chain penetration、controlled protocol、Voting rights and concerted action arrangements need to be explainable。
- Director/Office Competencies and Character：Relevant experience、No bad records、time investment、Match business size。
- three lines of defense：Business line self-control (KYC and front-line review)、Compliance/MLRO (Second Line Rules and Monitoring)、Internal Audit/external audit(Three-line verification)。
- Outsourcing andIT governance：Wallet/risk control/customer service/development outsourcing needs to be contracted、Permission isolation、SLA and Audit Rights Terms。
We will convert the above points into an implementable organizational chart、Job description、Permission matrix and meeting/approval trace template，Ensure compliance without slowing down product iterations。
core compliance system：AML/CFT、sanctions、Travel Rule and Audit Traces
For VASPs，We recommend dividing the compliance system into “institutional layers” + process layer + System layer + "Evidence Layer" four-piece set：
- Institutional level：AML/CFT Policy、KYC/KYB policy、Sanctions and PEP Policy、Suspicious Transaction Identification and Reporting Policy、Recordkeeping and Data Governance Policy、Compliance training and random inspection system。
- process layer：Account opening and due diligence layering、Enhance due diligence trigger conditions、Continuous due diligence (event-driven/cyclical review)、Alarm triage and upgrade、Freezing/Restrictive Measures、STR/SAR workflow。
- System layer：Customer Risk Score、List screening、Transaction monitoring (on-chain/off-chain)、Address Risk Label、Equipment/behavior risk control、Case management and reporting。
- evidence layer：input for every decision、rule、approver、Timestamps and results traceable，Support sampling review and regulatory inspection。
If system selection and implementation are required，Can be integrated with the following capability modules：KYC identity verification system、transaction monitoring system、risk assessment system。
Change customer type、area、Source of funds、Product functions and behavioral characteristics are quantified into scorecards，Match differentiated due diligence depth。
sanction list、Regional restrictions、IP/device fingerprint and payment channel risk control linkage，Reduce "bypass paths"。
Establish processes and records for information transmission and counterparty verification of virtual asset transfers，Facilitate connection with compliance partners。
Preset evidence directory and export template for regulatory/bank questionnaires，Significantly reduce repeated patching。
Application path and project process (from gap analysis to operability)
Sort out product modules、Customer type and capital/upstream flow，Determine whether it constitutes VASP and potential MiCA transition impact。
Determine equity and UBO disclosure standards、Director/management placement、MLRO/Compliance Position Responsibilities and Authority Matrix。
Export policy document、SOP、risk scoring model、Monitoring scenario library and case management closed loop。
Assemble application package according to regulatory standards，Prepare interview question and answer library and supplement strategies，Reduce the risk of information inconsistency。
Prepare KYC due diligence package、Fund flow description、Audit trace examples and compliance certification materials，Improve account opening success rate。
Conduct a “supervisory inspection” drill：Sample customer files、Alarm handling、freeze record、Report link and log export。
Lithuania VASP application fees and budget
| Expenses/Capital Projects | Basic consulting/token sale (Class 1 Serve) | Asset custody/encrypted fiat currency exchange (Class 2 Serve) | Cryptoasset trading platform operation (Class 3 Serve) | Notes and explanations |
|---|---|---|---|---|
| Main business functions | Provide crypto investment advisory、Token distribution consultation、Order receiving/sending。 | Cryptocurrency Wallet Hosting、Fiat and cryptocurrency deposits, withdrawals/exchange services。 | Centralized Crypto Exchange (Exchange)、Spot/derivatives matching。 | Different business categories directly determine the minimum standing capital threshold.。 |
| 1. Official application fee | Approximately €2,425 | Approximately €2,425 | Approximately €2,425 | Official examination fee charged by the Bank of Lithuania (BoL)，Usually paid before approval or upon submission。 |
| 2. Minimum initial equity capital(Standing capital requirements) | €50,000 | €125,000 | €150,000 | The capital must be truly injected by the shareholder into a special account of an EU credit institution.，Can be injected in batches。 |
| 3. Official annual maintenance fee | €0 | €0 | €0 | Lithuania does not charge a separate fixed annual license renewal fee under the MiCA framework。 |
Bank account opening and channels：How to make financial institutions willing to cooperate
For VASP business implementation，“Available bank accounts/fiat channels” is usually more important than “getting qualifications”。Due diligence by financial institutions usually focuses on the following materials and capabilities:：
- Business model and cash flow description：Full link from customer deposit to withdrawal、Counterparties and controls at each link。
- Customer and Territory Strategy：target market、prohibited market、Reach methods and marketing compliance boundaries。
- AML and Transaction Monitoring Evidence：Sample alarm、Disposal records、Freeze/deny cases、Sampling inspection report、training records。
- Auditing and reporting capabilities：Exportable、Reproducible、Interpretable (rule basis/threshold source/approval link)。
If you need to cooperate with European financial institutions in account opening and channel assessment，Can be referenced：European bank account opening；If involvedCross-border servicesBorders and multi-jurisdictional reach：Cross-border business compliance。
policy、process、System screenshot、Log sample、Contract terms and organizational structure are archived by questionnaire fields，Shorten round trip cycle。
Output bank/EMI-oriented fund flow diagrams and control point annotations，Explain risks and mitigation measures at each node。
Preset EDD package、Provenance Checklist、Address Risk Strategy and Deny/Exit SOP，Reduce channel concerns。
External publicity and user terms are consistent with compliance standards，Avoid "promised benefits/misleading statements" triggering red lines for partners。
Lithuania MiCA/CASP License FAQs(FAQ)
cannot。2025Low-threshold VASP registration has been completely terminated after December 31, 2020。All businesses providing crypto services in Lithuania must apply for a formal MiCA CASP license from the Central Bank of Lithuania，Otherwise, it is an illegal financial activity and will face criminal prosecution.。
The regulatory entity under the MiCA framework has been completely changed from the past FCIS to the Central Bank of Lithuania (Bank of Lithuania).。All CASP authorizations、Review and ongoing supervision are carried out by the central bank。
The legal minimum paid-in capital for an exchange or custodian (Class 2/3) is €125,000，Full payment must be made before application。This fund is a permanent self-owned fund maintenance requirement，The license cannot be withdrawn during its validity period，And must pass strict legality audit of funding sources。
Can。MiCA CASP authorization supports EU passport rights，After obtaining the license, pass a simple cross-border filing notification，Can legally provide encryption services to customers in 27 EU countries，No need to apply separately country by country。
absolutely necessary。Lithuania implements strict substantive business review，Must have real physical office，and employ at least one local, full-time MLRO，The person must pass the central bank’s fit and proper review。Purely empty shells or remote operations will directly lead to rejection of the application.。
Can。Lithuania allows 100% foreign ownership，Foreigners can fully serve as shareholders and directors，However, all directors/actual controllers must have no criminal record、Strict penetrating review of good reputation and professional background。
Under MiCA’s high regulatory standards，The central bank review cycle is usually 6-9 months，Far from comparable to VASP weeks in the past。Actual duration depends on file quality、Completeness of compliance system and speed of response to central bank inquiries。
including but not limited to：3Year-round financial forecasts and business plans、Comprehensive IT system architecture and network security manual、EU Travel Regulation (TFR) compliant money tracking solution、AML/KYC Compliance Handbook、Detailed background investigation report of shareholders/directors and proof of capital sources。
Need to continue to maintain capital adequacy ratio、Customer asset isolation、Perform AML/KYC and transaction monitoring、Submit financial prudence returns (FRR) to the central bank on time、Suspicious Transaction Report (STR)，and subject to annual mandatory external audits。Major changes require prior notification。
The EU TFR requires licensed institutions to attach and save the true identity information of both parties to the transaction when processing on-chain transfers.。Technology solutions must be deployed，Ensure instant transfer between wallets、Securely exchange and store sponsor and beneficiary data。
Extremely severe。Those who provide services to EU residents without a MiCA license，Will face website blocking、huge fines，In serious cases, relevant executives may be held criminally liable，Penalty of up to 4 years in prison。
The original VASP can use the transition period to continue operating until early 2026.，However, a CASP authorization application must be submitted to the central bank before。Those who fail to convert after the expiration date will lose their operating qualifications.，Prohibited from continuing to provide any encryption services。
comprehensive law、Compliance consulting、System construction、Office rental、Local staff salaries and central bank application fees, etc.，Total first-year costs are typically in the order of hundreds of thousands of euros。It is recommended to entrust professional organizations such as Hong Kong Information Communications to conduct accurate calculations and planning.。
Can。Lithuania legally exempts cryptocurrency exchange services from value-added tax (VAT)。The standard corporate income tax rate is 15%，Qualified small and micro enterprises can enjoy preferential tax rates as low as 0-5%。
Conditionally allowed。Licensed CASP can organize the issuance of utility tokens，But if it involves security tokens，You must apply for an investment company license separately，Trigger dual supervision，The threshold is extremely high。
