Regulatory framework and license scope
Malta CASP applications now included in MiCA framework。Classification is based on actual crypto asset services provided，Rather than continuing with history VFA Categories 1 to 4：
- Class 1：Execute orders on behalf of customers、Placing、transfer service、Receive and deliver orders、Providing advice and portfolio management。
- Class 2：In Class 1 On the basis of adding customer encrypted asset custody and management、Cryptoasset exchange with funds or other cryptoassets。
- Class 3：In Class 2 Add crypto asset trading platform operations based on。
The same project must first determine whether the token is a financial instrument、electronic currency token、Asset Reference Token or other MiCA Crypto-Asset。Can cross-border services be provided after obtaining authorization?，Depends on scope of approval and MiCA notification process。
official basis：EUR-Lex MiCA Regulation；MFSA Crypto-Assets。
Suitable for institutional clients、Bank channels and payment partners establish digital asset business with compliance and credibility。
Supervision pays more attention to board governance、Whether the control function and internal risk control are "sustainably operating"，rather than just complete files。
Available with offshore holdings、Taxation and fund routing collaborative design，Improve cross-border operational efficiency。
Application conditions and organizational governance requirements
MFSA ApprovalHighlights usually include：Equity and Beneficial Ownership Transparency、Suitability of directors and key management personnel、Risk management and internal control、AML/CFT system、IT and network security、Customer asset isolation and outsourcing management。For B2B organizations，Supervision pays particular attention to “who is responsible、How to supervise、How to leave a mark”。
It is recommended to complete the three-tier documentation before submission：1) Board Level Policies；2) Department-level SOP；3) system level evidence (log、threshold、Alarm、audit trail)。If you need to build a group entity simultaneously，CompatibleRegister an offshore companyandOffshore tax optimizationplan。
Clarify board oversight responsibilities，Establish a division of responsibilities for compliance/risk control/internal audit，Reduce uncertainty about regulatory inquiries。
KYC、EDD、On-chain monitoring、Report suspicious transactions、Sanctions screening and training mechanisms need to form a closed loop。
Hot and cold wallet strategies、Key management、access control、Business continuity and disaster recovery need to be testable、Can be reviewed。
Application process and expected lead time
to product、capital flow、Customer type、Regional coverage for regulatory classification，Confirm license plate path。
Complete the physical structure、Director and key position appointments、Establishment of control functions。
Form governance documents、AML system、Risk and IT security documents and operational SOPs。
Carry out regulatory communication、Submit application materials and respond to inquiries about supplementary documents。
Complete rectification verification according to regulatory conditions，Conduct regulated operations after obtaining approval。
Typical cycles are affected by business complexity、The impact of personnel availability and inquiry rounds，Usually 6-12 months。If custody is involved、Self-operated or complex derived functions，The cycle may be extended。It is recommended that “license application、Bank account opening、Audit preparation、tax structure"Parallel advancement，Can be referencedOffshore bank account openingandOffshore private banking servicesmatching path。
Application fee budget and cost control
| MiCA CASP Category | Core service scope | Application fee | minimum capital | Annual basic supervision fee |
|---|---|---|---|---|
| Class 1 | implement、Placing、transfer、order delivery、Advice and Portfolio Management | 10,000 EUR | 50,000 EUR | 10,000 EUR |
| Class 2 | Class 1 Add custody and crypto asset exchange | 20,000 EUR | 125,000 EUR | 25,000 EUR |
| Class 3 | Class 2 Add trading platform operation | 25,000 EUR | 150,000 EUR | 50,000 EUR |
The annual regulatory fee also includes each approved service 2,000 EUR，and 0.05% of trading volume (max. 250,000 EUR)。When multiple categories are involved，Application fees and annual base fees are calculated based on the highest applicable category。The concessionary application fee for historical VFA licensees applying for MiCA during the statutory transition period should not be written as the standard fee for all new applicants。
Official basis and last verification date：2026August。Malta Markets in Crypto-Assets Act Fees Regulations；MiCA Annex IV Minimum Capital Requirements。
Continuous compliance and regulatory interaction after licensing
Approval is just the starting point。Quarterly compliance meetings should be established after obtaining a license、annual risk assessment、Abnormal event reporting mechanism and outsourcing review process。Regulation usually focuses on：Transaction monitoringeffectiveness、Customer asset protection、Complaint handling、Financially sound、Evidence of board oversight。
For organizations planning to expand into Asia or North America，Can be evaluated simultaneouslyDigital Bank License Application、Singapore MAS payment licenseandUS MSB license，Form a multi-license compliance matrix。
Communicate major changes upfront，Reduce post-rectification costs and business interruption risks。
Keep logs and approval tracks of all critical control points，Support spot checks and annual reviews。
Unified Group Compliance Base，Then make localized supplements by judicial district.，Improve copy efficiency。
Malta Blockchain/MFSA License FAQs(FAQ)
The current MiCA CASP is divided into Class 1、Class 2 and Class 3。Class 1 override execution、Placing、transfer、order delivery、Advice and Portfolio Management；Class 2 Increase custody and crypto asset exchange；Class 3 Increase trading platform operations。History VFA Classes 1 to 4 should not continue as current classifications for new applications。
Before applying, it must be determined that the relevant assets are financial instruments、electronic currency token、Asset Reference Token or other MiCA Crypto-Asset，Because different classifications will trigger different regulations and authorization paths。The historical VFA Financial Instrument Test cannot be summarized as the same independent approval that all MiCA CASP applications must pass。
EU cross-border passport rights depend on whether the institution has obtained CASP authorization under MiCA、Approved service scope and completion of corresponding cross-border notification。Historical VFA licenses are not automatically equivalent to MiCA CASP licenses，It cannot be assumed that all business can be carried out in all EU member states just by simple filing.。Applicants should refer to the current requirements of the MFSA and target market authorities.。
MFSA will review the actual management of the applicant in Malta、governance、personnel、system、Risk control and outsourcing arrangements。Required physical location、Local personnel and functional configuration should be based on the applied MiCA service、Business scale and regulatory communication determined，Single office or fixed headcount requirements cannot be applied to all applications。
Strict separation of powers and responsibilities must be implemented with local resident。CEO must be appointed locally、Compliance officer、Anti-Money Laundering Reporting Officer (MLRO) and Risk Control Officer，All personnel are required to pass the MFSA “Fit and Proper” review，Cover experience、Reputation、Source of funds and no criminal record。The board of directors must consist of at least 2 directors and 1 local company secretary。
Current MiCA CASP applications should be submitted in accordance with MiCA Article 62 and the MFSA’s current procedures，The VFA Agent requirements under the historical VFA system cannot be directly written into unified rules for all new applications.。Applicants may still hire local law as needed、Compliance and Technology Consultant，However, the service fee is not an official fee。
MiCA Annex IV regulations Class 1、Class 2 and Class 3 The minimum capital of 50,000、125,000 and 150,000 EUR。Actual prudential protection must also be calculated based on applicable requirements such as fixed management expenses in the previous year.，Cannot continue to use historical VFA Category 3 or 4 730,000 Euro as current CASP unified threshold。
MiCA Article 63，Generally, after receiving the application, the competent authority 5 Confirm receipt within 1 working day、exist 25 Check completeness within 1 working day，and after complete application 40 Make an approval or rejection decision within 10 working days。Preliminary preparation、missing data、Replenishment parts and business complexity are not included in these legal processing nodes.，Therefore, it is not possible to commit to a fixed total project cycle。
The official application fee for new applications is Class 1：10,000 EUR、Class 2：20,000 EUR、Class 3：25,000 EUR。The annual basic supervision fees are respectively 10,000、25,000 and 50,000 EUR，Plus each approved service 2,000 Euros and 0.05% of trading volume (max. 250,000 EUR)。Professional consultant、personnel、system、Audit and office costs are not official fees。
After obtaining the license, capital adequacy must be maintained and client assets must be segregated，Enforce strict AML/KYC、Transaction monitoring and suspicious transaction reporting，Submit regular compliance reports、Risk management report and annual audited financial report，Major changes require prior approval from the MFSA，and subject to ongoing on-site and off-site inspections。
Malta is the jurisdiction with the most competitive corporate income tax rates in the EU。Through reasonable tax planning and tax refund mechanism，The actual effective corporate tax rate can be as low as 5%，and has an extensive network of double taxation treaties，It is also more flexible on profit remittance and dividend distribution。
Customer funds must be segregated from the company's own funds.，Set up separate bank and wallet accounts。Hot and cold wallet management must adopt a multi-signature or threshold signature architecture，And establish a complete private key backup、Disaster recovery and regular security audit mechanism，Ensure customer assets are protected even in extreme circumstances。
MFSA has the power to publicly condemn、Large administrative fines (which can range from hundreds of thousands to millions of euros)，Or even revoke the license directly。If it involves concealing a safety incident、Assisting in money laundering or misappropriation of customer assets, etc.，Will be transferred to judicial authorities to investigate the criminal liability of directors and senior executives。
Most of them failed to meet the substantive requirements：White paper or business model unclear、The source of funds cannot be fully proven、Insufficient qualifications of key personnel、Weak compliance and risk control systems、Insufficient local presence、Failed financial instrument test，Or the material is still incomplete after multiple corrections.。
