Crypto Jurisdiction Index · 2026.1

Where to license a crypto business, scored

Twelve crypto-licensing jurisdictions — EU and non-EU — assessed across five equally-weighted pillars. The scores are editorial assessments by the Crypto Law Index editorial team, built on published regulatory frameworks, regulator practice, and practitioner-reported experience. Higher is more favourable.

Not sure which fits? Try the Jurisdiction Finder →

# Jurisdiction Speed Maturity Banking Cost Reach Total
1 Lithuania EU Bank of Lithuania EU passport 18 16 13 15 15 77/100
2 Estonia EU Finantsinspektsioon (FSA) EU passport 13 17 14 12 17 73/100
3 Switzerland Non-EU FINMA No EU passport 13 18 15 9 14 69/100
4 Germany EU BaFin EU passport 9 18 16 7 18 68/100
5 France EU AMF EU passport 12 16 13 10 16 67/100
6 Cyprus EU CySEC EU passport 16 13 10 16 11 66/100
7 Ireland EU Central Bank of Ireland (CBI) EU passport 8 17 15 8 17 65/100
8 UAE — Dubai (VARA) Non-EU Virtual Assets Regulatory Authority (VARA) No EU passport 15 14 13 11 11 64/100
9 Malta EU MFSA EU passport 10 15 14 10 14 63/100
10 Czech Republic EU ČNB (Czech National Bank) EU passport 12 13 11 13 12 61/100
11 Canada Non-EU FINTRAC No EU passport 15 11 10 14 9 59/100
12 Poland EU KNF EU passport 9 10 11 13 13 56/100

Each pillar is scored out of 20; the total is out of 100. Cell shading is a visual heat-map of the pillar score. Scores are editorial assessments, not claims of objective fact — see the methodology below.

How each jurisdiction scores

#1

Lithuania

EU · Bank of Lithuania · MiCA CASP

77/100

The default high-throughput EU route — fast, predictable, full EU passport. Strongest for firms optimising speed without needing a specific domestic market.

Timeline
4-6 months (practitioner-reported)
Capital
€50,000 - €150,000 (MiCA Annex IV)
  • Licensing speed 18/20 The EU’s highest-throughput CASP jurisdiction in practitioner reports — clean files commonly clear in 4-6 months.
  • Regulatory maturity 16/20 Early MiCA mover with a built-out process; the Bank of Lithuania had its CASP machine running ahead of most peers.
  • Banking access 13/20 Reasonable EU banking access, helped by a deep domestic EMI sector, though CASP banking still takes work.
  • Cost efficiency 15/20 Mid-range establishment and counsel cost; faster timelines reduce opportunity cost.
  • Reputation & reach 15/20 Full EU passport; mid-tier supervisory reputation — solid, below the premium-reputation jurisdictions.
Full analysis →
#2

Estonia

EU · Finantsinspektsioon (FSA) · MiCA CASP

73/100

The premium-reputation EU route. Slower and stricter than Lithuania, but the supervisory reputation helps with banking and institutional counterparties.

Timeline
5-7 months (practitioner-reported)
Capital
€50,000 - €150,000 (MiCA Annex IV)
  • Licensing speed 13/20 Slower than Lithuania — the FSA applies a stringent substance review that adds time to the process.
  • Regulatory maturity 17/20 Mature framework under the Crypto Markets Act; the FSA has long supervisory experience with crypto firms.
  • Banking access 14/20 Strong supervisory reputation supports downstream EU banking and counterparty access.
  • Cost efficiency 12/20 Higher substance cost than the lighter jurisdictions — strict residency and MLRO expectations.
  • Reputation & reach 17/20 Full EU passport plus a top-tier supervisory reputation among EU mid-size jurisdictions.
Full analysis →
#3

Switzerland

Non-EU · FINMA · SRO membership / FINMA authorisation

69/100

A mature, high-certainty framework with excellent banking — but no EU passport. Best for non-EU-centred businesses valuing Swiss legal certainty.

Timeline
SRO ~2-3 months; FINMA authorisation longer
Capital
Model-dependent (SRO vs FINMA route)
  • Licensing speed 13/20 SRO membership is relatively quick; direct FINMA authorisation, where triggered, is a longer process.
  • Regulatory maturity 18/20 A long-established financial-market framework — the DLT Act, AMLA, and FINMA rules — with high legal certainty.
  • Banking access 15/20 Switzerland’s mature crypto-banking ecosystem is among the strongest globally.
  • Cost efficiency 9/20 Higher-cost jurisdiction; Swiss establishment and operating costs are significant.
  • Reputation & reach 14/20 Strong reputation, but no EU passport — a Swiss licence does not reach the EU single market.
Full analysis →
#4

Germany

EU · BaFin · MiCA CASP

68/100

The heavyweight EU route — the largest market, the strongest reputation, the deepest banking, and the highest cost and longest timeline.

Timeline
Practitioner-reported among the longer EU processes
Capital
€50,000 - €150,000 (MiCA Annex IV)
  • Licensing speed 9/20 Among the slower EU processes — BaFin applies a rigorous, banking-grade review.
  • Regulatory maturity 18/20 A deeply built-out supervisory framework; BaFin is one of the most experienced EU financial regulators.
  • Banking access 16/20 The largest EU economy with the deepest banking market — strong operational access.
  • Cost efficiency 7/20 The highest-cost EU jurisdiction — application, counsel, and substance costs are all at the top.
  • Reputation & reach 18/20 Full EU passport plus the strongest single-market reputation and the largest domestic market.
Full analysis →
#5

France

EU · AMF · MiCA CASP

67/100

A large, credible EU market with a fast-track for existing French PSANs and a hard 1 July 2026 transition deadline.

Timeline
Fast-track 3-6 months for existing PSANs
Capital
€50,000 - €150,000 (MiCA Annex IV)
  • Licensing speed 12/20 A fast-track exists for existing French PSANs; fresh entrants face a standard, longer process.
  • Regulatory maturity 16/20 France was an early national mover with the 2019 PACTE-law PSAN regime — a mature supervisory base.
  • Banking access 13/20 A large economy with reasonable banking access, in line with major EU markets.
  • Cost efficiency 10/20 Mid-to-higher cost — a developed market with corresponding establishment and counsel costs.
  • Reputation & reach 16/20 Full EU passport; a credible, well-regarded regulator and a large domestic market.
Full analysis →
#6

Cyprus

EU · CySEC · MiCA CASP

66/100

The cost-efficient EU route — fast and cheaper, with a lighter substance posture. The watch-point is post-licence banking access.

Timeline
4-7 months (practitioner-reported)
Capital
€50,000 - €150,000 (MiCA Annex IV)
  • Licensing speed 16/20 Operationally efficient — CySEC processes clean files relatively fast.
  • Regulatory maturity 13/20 A newer crypto-supervisory base than the early movers; the framework is still settling.
  • Banking access 10/20 The weakest point — domestic banks remain reluctant to onboard CASPs even post-authorisation.
  • Cost efficiency 16/20 The most cost-efficient active EU jurisdiction — lighter substance and lower establishment cost.
  • Reputation & reach 11/20 Full EU passport; mixed crypto-specific reputation relative to the strict-end jurisdictions.
Full analysis →
#7

Ireland

EU · Central Bank of Ireland (CBI) · MiCA CASP

65/100

The strict, premium EU route — banking-grade review, sceptical of retail-speculative models. Strong for firms anchoring EU operations to UK/US access.

Timeline
3-6 months for a clean file (CBI guidance)
Capital
€50,000 - €150,000 (MiCA Annex IV)
  • Licensing speed 8/20 The CBI applies a high authorisation threshold; complex or retail-speculative models can take well beyond the headline timeline.
  • Regulatory maturity 17/20 A banking-grade supervisory framework — the CBI applies financial-institution discipline to CASPs.
  • Banking access 15/20 A strong financial centre with good banking infrastructure and downstream UK/US counterparty access.
  • Cost efficiency 8/20 A high-cost jurisdiction — substance, governance, and counsel costs are all near the top.
  • Reputation & reach 17/20 Full EU passport plus a premium reputation, particularly valuable for UK and US institutional access.
Full analysis →
#8

UAE — Dubai (VARA)

Non-EU · Virtual Assets Regulatory Authority (VARA) · VARA VASP licence (activity-by-activity)

64/100

The leading Gulf hub — a modern, activity-by-activity regime. No EU passport; the right answer when the market is the Gulf and non-EU.

Timeline
4-7 months (practitioner-reported)
Capital
Activity-dependent + expense-based capital
  • Licensing speed 15/20 A defined process with practitioner-reported 4-7 month timelines, varying with the number of activity categories.
  • Regulatory maturity 14/20 A purpose-built modern regime with category-specific rules and an operational-resilience framework.
  • Banking access 13/20 A growing crypto-banking ecosystem in the UAE, supportive of licensed VASPs.
  • Cost efficiency 11/20 Activity-by-activity licensing means multi-service firms accumulate cost across several category approvals.
  • Reputation & reach 11/20 A Dubai licence — not an EU passport and not a UAE-federal licence; reach is the Gulf and non-EU markets.
Full analysis →
#9

Malta

EU · MFSA · MiCA CASP

63/100

The strictest substance bar in the EU — mandatory MLRO/Compliance separation above the small-firm threshold. Deep local practice base; slower and substance-heavy.

Timeline
7-10 months (practitioner-reported)
Capital
€50,000 - €150,000 (MiCA Annex IV)
  • Licensing speed 10/20 Among the slower EU timelines — the MFSA applies a demanding substance review.
  • Regulatory maturity 15/20 A domestic crypto-services regime since 2018 (the VFA Act) gives Malta a deep practice base.
  • Banking access 14/20 Counter-intuitively solid — some Malta-domiciled banks onboard authorised CASPs.
  • Cost efficiency 10/20 A high salaried-headcount floor, driven by the strict functional-separation substance expectations.
  • Reputation & reach 14/20 Full EU passport; strong reputation in iGaming and digital-asset sub-sectors.
Full analysis →
#10

Czech Republic

EU · ČNB (Czech National Bank) · MiCA CASP

61/100

A solid CEE mid-tier option — ČNB supervision, reasonable cost and timeline, useful for German- and Austrian-adjacent founders.

Timeline
6-8 months (practitioner-reported)
Capital
€50,000 - €150,000 (MiCA Annex IV)
  • Licensing speed 12/20 Mid-range timelines; the ČNB took over MiCA supervision and is building caseload capacity.
  • Regulatory maturity 13/20 A newer supervisory base — crypto moved to the ČNB from a prior trade-licence regime.
  • Banking access 11/20 Adequate banking access, in line with the CEE mid-tier.
  • Cost efficiency 13/20 Mid-range cost — reasonable establishment and counsel costs for a CEE jurisdiction.
  • Reputation & reach 12/20 Full EU passport; a credible central-bank regulator, mid-tier crypto reputation.
Full analysis →
#11

Canada

Non-EU · FINTRAC · MSB registration (virtual currency dealer)

59/100

A fast, low-fee AML registration — not a financial-services licence and no EU reach. FINTRAC’s 2026 enforcement has ended the light-touch era.

Timeline
Registration relatively quick; compliance build is the real work
Capital
No prudential capital floor on the MSB registration itself
  • Licensing speed 15/20 MSB registration with FINTRAC is administratively quick — there is no FINTRAC registration fee.
  • Regulatory maturity 11/20 An AML/CFT registration, not a prudential financial-services regime; lighter in structure than MiCA.
  • Banking access 10/20 Banking access for crypto MSBs is a recognised friction point in the Canadian market.
  • Cost efficiency 14/20 No registration fee and no prudential capital floor; the cost is the AML compliance programme.
  • Reputation & reach 9/20 A Canadian registration — no EU passport. FINTRAC enforcement intensified sharply through 2026.
Full analysis →
#12

Poland

EU · KNF · MiCA CASP

56/100

The largest CEE market, but a later and slower MiCA mover. Strongest fit for a business genuinely centred on the Polish domestic market.

Timeline
6-9 months (practitioner-reported)
Capital
€50,000 - €150,000 (MiCA Annex IV)
  • Licensing speed 9/20 Practitioner-reported timelines around 6-9 months; a later mover than the early EU jurisdictions.
  • Regulatory maturity 10/20 Poland’s domestic MiCA implementation was delayed by political and legislative complications.
  • Banking access 11/20 Adequate banking access, in line with the CEE mid-tier.
  • Cost efficiency 13/20 Mid-range cost; a moderate application fee and a revenue-linked annual supervisory fee.
  • Reputation & reach 13/20 Full EU passport; the largest economy in Central and Eastern Europe — a real domestic-market advantage.
Full analysis →

Methodology

The Crypto Jurisdiction Index scores each jurisdiction on five equally-weighted pillars, 20 points each, 100 in total. The scores are editorial assessments by the Crypto Law Index editorial team — informed by published regulatory frameworks, regulator practice, and practitioner-reported experience. They are a structured comparison aid, not a claim of objective fact, and the right jurisdiction for a specific firm depends on its business model and target market.

PillarWeightWhat it measures
Licensing speed 20 How fast and predictable authorisation is, from filing to decision.
Regulatory maturity 20 Clarity of the framework and how settled and built-out the regime is.
Banking access 20 How realistic operating and client-money banking is once licensed.
Cost efficiency 20 Total cost of getting and staying licensed, relative to peers.
Reputation & reach 20 Supervisory reputation and market reach — the EU passport weighs heavily.

Tax treatment varies significantly by jurisdiction and entity structure; it is discussed qualitatively in each jurisdiction guide rather than scored, because a single tax score cannot fairly capture the variation. For the firm-level ranking of crypto-licensing counsel, see the CLPAI methodology.