Regulatory framework and license scope
Malta CASP applications now included in MiCA framework。Classification is based on actual crypto asset services provided，Rather than continuing with history VFA Categories 1 to 4：
- Class 1：Execute orders on behalf of customers、Placing、transfer service、Receive and deliver orders、Providing advice and portfolio management。
- Class 2：In Class 1 On the basis of adding customer encrypted asset custody and management、Cryptoasset exchange with funds or other cryptoassets。
- Class 3：In Class 2 Add crypto asset trading platform operations based on。
The same project must first determine whether the token is a financial instrument、electronic currency token、Asset Reference Token or other MiCA Crypto-Asset。Can cross-border services be provided after obtaining authorization?，Depends on scope of approval and MiCA notification process。
official basis：EUR-Lex MiCA Regulation；MFSA Crypto-Assets。
Suitable for institutional clients、Bank channels and payment partners establish digital asset business with compliance and credibility。
Supervision pays more attention to board governance、Whether the control function and internal risk control are "sustainably operating"，rather than just complete files。
Available with offshore holdings、Taxation and fund routing collaborative design，Improve cross-border operational efficiency。
Application conditions and organizational governance requirements
MFSA ApprovalHighlights usually include：Equity and Beneficial Ownership Transparency、Suitability of directors and key management personnel、Risk management and internal control、AML/CFT system、IT and network security、Customer asset isolation and outsourcing management。For B2B organizations，Supervision pays particular attention to “who is responsible、How to supervise、How to leave a mark”。
It is recommended to complete the three-tier documentation before submission：1) Board Level Policies；2) Department-level SOP；3) system level evidence (log、threshold、Alarm、audit trail)。If you need to build a group entity simultaneously，CompatibleRegister an offshore companyandOffshore tax optimizationplan。
Clarify board oversight responsibilities，Establish a division of responsibilities for compliance/risk control/internal audit，Reduce uncertainty about regulatory inquiries。
KYC、EDD、On-chain monitoring、Report suspicious transactions、Sanctions screening and training mechanisms need to form a closed loop。
Hot and cold wallet strategies、Key management、access control、Business continuity and disaster recovery need to be testable、Can be reviewed。
Application process and expected lead time
to product、capital flow、Customer type、Regional coverage for regulatory classification，Confirm license plate path。
Complete the physical structure、Director and key position appointments、Establishment of control functions。
Form governance documents、AML system、Risk and IT security documents and operational SOPs。
Carry out regulatory communication、Submit application materials and respond to inquiries about supplementary documents。
Complete rectification verification according to regulatory conditions，Conduct regulated operations after obtaining approval。
Typical cycles are affected by business complexity、The impact of personnel availability and inquiry rounds，Usually 6-12 months。If custody is involved、Self-operated or complex derived functions，The cycle may be extended。It is recommended that “license application、Bank account opening、Audit preparation、tax structure"Parallel advancement，Can be referencedOffshore bank account openingandOffshore private banking servicesmatching path。
Application fee budget and cost control
| MiCA CASP Category | Core service scope | Application fee | minimum capital | Annual basic supervision fee |
|---|---|---|---|---|
| Class 1 | implement、Placing、transfer、order delivery、Advice and Portfolio Management | 10,000 EUR | 50,000 EUR | 10,000 EUR |
| Class 2 | Class 1 Add custody and crypto asset exchange | 20,000 EUR | 125,000 EUR | 25,000 EUR |
| Class 3 | Class 2 Add trading platform operation | 25,000 EUR | 150,000 EUR | 50,000 EUR |
The annual regulatory fee also includes each approved service 2,000 EUR，and 0.05% of trading volume (max. 250,000 EUR)。When multiple categories are involved，Application fees and annual base fees are calculated based on the highest applicable category。The concessionary application fee for historical VFA licensees applying for MiCA during the statutory transition period should not be written as the standard fee for all new applicants。
Official basis and last verification date：2026August。Malta Markets in Crypto-Assets Act Fees Regulations；MiCA Annex IV Minimum Capital Requirements。
Continuous compliance and regulatory interaction after licensing
Approval is just the starting point。Quarterly compliance meetings should be established after obtaining a license、annual risk assessment、Abnormal event reporting mechanism and outsourcing review process。Regulation usually focuses on：Transaction monitoringeffectiveness、Customer asset protection、Complaint handling、Financially sound、Evidence of board oversight。
For organizations planning to expand into Asia or North America，Can be evaluated simultaneouslyDigital Bank License Application、Singapore MAS payment licenseandUS MSB license，Form a multi-license compliance matrix。
Communicate major changes upfront，Reduce post-rectification costs and business interruption risks。
Keep logs and approval tracks of all critical control points，Support spot checks and annual reviews。
Unified Group Compliance Base，Then make localized supplements by judicial district.，Improve copy efficiency。
Malta Blockchain/MFSA License FAQs(FAQ)
MFSA regulates crypto asset service providers and related issuers in accordance with the Markets in Crypto-Assets Act (Cap.647) and EU MiCA。The historical VFA system cannot be directly used as the current classification or EU basis for new applications.，Whether pure technology development is subject to supervision needs to be judged based on actual activities.。 SeeMFSA crypto asset supervision and application materials。
Class 1 includes order execution、Placing、transfer、Order receiving and delivery、Proposal and portfolio management；Class 2 adds custody and fiat/currency exchange；Class 3 adds trading platform。Application must specify specific services，Instead of just writing "blockchain license"。 SeeMalta S.L.647.01 Current Charges Regulations。
financial instruments、electronic currency token、Different regimes apply to asset reference tokens and other cryptoassets。CASP business authorization cannot replace the issuer license or securities services license at the same time.；Should be combined with asset rights、Issuance Arrangements and Classification of Client Activities。 SeeMFSA crypto asset supervision and application materials。
Article 59 requires a registered office in the Member State in which at least part of the services are carried out、Effective management is in the EU and at least one director is resident in the EU。The MFSA will also review governance、personnel、Systems and outsourcing arrangements，Must prove that the business has regulatory substance。 SeeCurrent consolidated text of EU MiCA regulations。
Fixed personnel lists or numbers cannot be applied to all businesses。Management must be in good standing、Knowledge、Skill、Experience and enough time invested；Staffing should be adapted to the nature of the service、Size and complexity，And implement responsibilities and independence in conjunction with MFSA and local AML requirements。 SeeCurrent consolidated text of EU MiCA regulations。
New applications must follow MiCA section 62 and the MFSA’s current procedures，不能直接沿用历史VFA Agent作为所有CASP的统一法定前提。聘用法律、合规或技术顾问不免除申请人对资料真实性和运营的责任。 SeeMFSA crypto asset supervision and application materials。
这是MiCA附件IV的三档最低金额。第67条要求与上一年固定管理费用四分之一取较高者；新机构使用首12个月预测费用。system、personnel、审计及营运预算另计，审慎保障也不是付给监管机关的费用。 SeeCurrent consolidated text of EU MiCA regulations。
一般5个工作日确认收件、25个工作日检查完整性、完整申请后40个工作日作批准或拒绝决定。符合法定条件的补充信息请求可暂停至多20个工作日；preparation、补齐案卷及前期沟通不等于法定评估时间。 SeeCurrent consolidated text of EU MiCA regulations。
截至2026年10月14日核对S.L.647.01，第6条的新申请费为Class 1：10,000EUR，Class 2：20,000EUR，Class 3：25,000EUR；跨类按最高适用档收费。历史VFA转制优惠有明确期限，不能用于期限后的普通新申请。 SeeMalta S.L.647.01 Current Charges Regulations。
第6条规定基础费Class 1为10,000欧元、Class 2为25,000欧元、Class 3为50,000欧元，跨类取最高档；另加每项获批服务2,000欧元，以及按法规口径计算交易量的0.05%，交易量部分上限250,000欧元。不能把该上限理解为全部年费上限。 SeeMalta S.L.647.01 Current Charges Regulations。
首次年费按第6(6)条计算适用期间的基础及服务费用，此后年度费一般7月30日缴付。增加服务的适用申请费减25%；停止部分而非全部服务的修改费为1,000欧元。费用通常不退还，按比例计算只适用于法规明确的例外。 SeeMalta S.L.647.01 Current Charges Regulations。
须先符合授权服务范围，并按第65条提交跨境通知资料。After receiving the notification of transfer from the home country’s agency，Or corresponding cross-border services can be carried out from the 15th calendar day after the submission of information at the latest.；Still subject to relevant target market rules。 SeeCurrent consolidated text of EU MiCA regulations。
Customer ownership must be protected、Avoid misappropriation for self-employment，and implement applicable segregation of funds and crypto assets。Custody assets must be separated from own assets on the distributed ledger，and implement legal and operational segregation；Security controls should be designed based on risk，A certain wallet technology cannot be written as a unified requirement for all institutions。 SeeCurrent consolidated text of EU MiCA regulations。
A clear fee must be signed、custody policy、Safe and Responsible Escrow Agreement，Create customer position registration，Issue position statements at least every three months and when requested by clients，and establish asset return procedures。When using other hosted CASPs, authorization conditions must be met and the customer must be informed。 SeeCurrent consolidated text of EU MiCA regulations。
No automatic coverage。Relevant payment services must be provided by institutions authorized in accordance with payment regulations；The issuance of electronic currency tokens and asset reference tokens is otherwise authorized.、Notices and White Paper Rules，should be assessed separately。 SeeMFSA crypto asset supervision and application materials。
MiCA requires free complaint channel、Public handling procedures and complaint templates，Keep records of processing and investigate promptly and fairly。A distinction must be made between internal complaints and external dispute resolution arrangements within the organization，Fee-based consultant communications cannot be used as a substitute for formal complaints mechanisms。 SeeCurrent consolidated text of EU MiCA regulations。
Licensed institutions still bear all obligations，Supervisory capabilities and access to information must be retained，Agree on regulatory cooperation、Data protection、Termination and Withdrawal Terms。Outsourcing arrangements must not impede MFSA inspections or weaken customer protection。 SeeCurrent consolidated text of EU MiCA regulations。
Must be identified、Manage and prominently disclose conflicts of interest on the website，Review relevant policies at least annually。MiCA service、Order and transaction records are generally kept for 5 years，The competent authority may request an extension to 7 years in accordance with regulations.；Other applicable local requirements must be checked separately。 SeeCurrent consolidated text of EU MiCA regulations。
Business-appropriate continuity must be established、ICT response and recovery arrangements。Escrow to which Article 74 applies、platform、exchange、Execution and placement agencies must also have an orderly exit plan，Protect customers and maintain or restore critical activities。 SeeCurrent consolidated text of EU MiCA regulations。
No guarantee。Authorization subject to regulatory decision，Taxation depends on business facts and applicable tax laws，Technology and hosting are still risky。Actual services should be disclosed、Costs and Risks，and continue to follow up on MFSA rules、Reporting requirements and EU supplementary standards。 SeeMFSA crypto asset supervision and application materials。
