Cyprus crypto license 2026 — CySEC CASP authorisation
Cyprus authorises CASPs through CySEC under the directly applicable MiCA Regulation, with 25 Cypriot CASPs on ESMA's register in October 2026. A national MiCA enforcement bill went to parliament on 8 October 2026. Practitioners report 5-7 month end-to-end timelines.
Last reviewed by the Crypto Law Index editorial desk
Why Cyprus matters in EU crypto licensing
Cyprus is the operationally efficient mid-tier EU MiCA jurisdiction with strong fund and forex adjacency. CySEC built supervisor capacity through CIF authorisation (Cyprus Investment Firm) and AIFM (Alternative Investment Fund Manager) frameworks — that capacity translates well to MiCA CASP review. Typical real timelines run 5-7 months for clean files.
The Cyprus value proposition is the combination of operational efficiency, CySEC's experience with funds and investment firms, strong fund-and-forex ecosystem fit, and the Limassol professional-services base. For operators with fund-affiliated crypto operations or forex-broker heritage, Cyprus produces ecosystem synergies that pure-crypto-specialist jurisdictions cannot match.
The trade-off is the mixed reputational signal. Cyprus's fund-industry history leaves some applicants expecting a light review; operators with skeletal substance should expect heavier supervisor dialogue than that reputation suggests.
CySEC supervisor approach
Cyprus Securities and Exchange Commission is the integrated supervisor for Cyprus securities, funds, and CASPs. The integrated model produces coordinated review across regulated activities. CASP applications run through dedicated case teams with crypto-specific supervisor experience.
Pre-filing engagement is broadly available and helpful. CySEC operates a constructive supervisor dialogue framework that allows applicants to align expectations before formal filing. Pre-engagement reduces real-timeline friction and clarifies substance expectations specific to the applicant profile.
MiCA applies in Cyprus directly. A Finance Ministry notification of November 2024 designated CySEC and the Central Bank of Cyprus as competent authorities, the Central Bank covering certain ART and EMT matters. The Markets in Crypto-Assets Bill of 2026, approved by the cabinet on 10 September 2026 and submitted to the House of Representatives on 8 October 2026, sets the national enforcement framework, including fines of up to EUR 15 million for serious breaches. Cyprus has added no significant substance overlay beyond the MiCA baseline.
VASP-to-MiCA migration in Cyprus
Cyprus had a smaller pre-MiCA crypto-firm population than Estonia, Lithuania, or Czech Republic. Migration pipeline is correspondingly smaller and CySEC has been processing migrations through 2025-2026 without significant supervisor capacity strain. New applicants benefit from the available supervisor bandwidth.
Migration cost in Cyprus runs EUR 150,000-300,000 typically. Cost components are similar to Lithuania — entity formation, Limassol office, senior compliance hires, AML programme uplift, ICT framework, and CySEC application work.
Cost and operational profile
First-year Cyprus CASP operations run EUR 250,000-500,000 typically. Components: Cyprus operating entity formation (EUR 3-5k), Limassol office (EUR 25-50k), senior compliance hires including Cyprus-resident director and MLRO (EUR 150-250k loaded cost), supporting compliance team (EUR 30-60k), CySEC application work (EUR 25-60k), supporting infrastructure (EUR 20-40k).
CySEC sets application and supervision fees under Policy Statement PS-03-2024; check the current schedule before budgeting. Cyprus corporate tax is 15% from 1 January 2026; the rate was 12.5% through 2025.
The main local banks are Bank of Cyprus and Eurobank, which absorbed Hellenic Bank in a 2025 merger. Crypto-firm onboarding involves extended due diligence, so plan it in parallel with authorisation.
What Cyprus crypto licensing counsel typically deliver
- Cyprus CASP application preparation and CySEC pre-clearance engagement
- VASP-to-CASP migration under Article 143 transitional regime
- Cyprus operating entity formation (CYC structure)
- Cyprus-resident director, MLRO, and Limassol substance preparation
- AML programme aligned with Cyprus AML Law and MLD6
- DORA ICT framework and operational resilience documentation
- Cyprus banking onboarding
- Fund-and-forex ecosystem integration where applicable
- Cross-EU passport notification under MiCA Article 65
How Cyprus compares to adjacent jurisdictions
| Jurisdiction | Material difference vs Cyprus |
|---|---|
| Malta | Malta MFSA €350-700k year one vs Cyprus €250-500k. Malta heavier substance bar; Cyprus operationally more efficient. Choose Malta for iGaming-adjacent positioning; Cyprus for fund-and-forex fit. |
| Lithuania | Lithuania €150-300k year one vs Cyprus €250-500k. Lithuania faster (4-6 months) and cheaper; Cyprus has stronger fund-industry ecosystem and Mediterranean positioning. |
| Estonia | Estonia comparable cost (€200-350k year one) but with MTR-legacy supervisor frame; Cyprus has cleaner supervisor frame but mixed reputational signal on substance depth. |
| Ireland | Ireland CBI €500-1.2m year one — premier Western EU positioning. Cyprus is materially cheaper but with less institutional reputational tier. |
Cyprus is the EU jurisdiction supervised by the Cyprus Securities and Exchange Commission (CySEC) where MiCA CASP authorisation is granted by CySEC under the directly applicable Regulation, with one of the larger CASP populations in the EU (25 on ESMA's register in October 2026) and strong fund-and-forex adjacency.
Fast facts
| Parameter | Value |
|---|---|
| Regulator | Cyprus Securities and Exchange Commission (CySEC) |
| Authorisation timeline | 5-7 months end-to-end (practitioner estimate); the statutory decision period is 40 working days from a complete file |
| Initial capital | €50,000 (Class 1) — €150,000 (Class 3) |
| Application fee | CySEC fee schedule under Policy Statement PS-03-2024 |
| Local substance | Registered office and effective management in Cyprus; one director resident in the EU (MiCA Article 59(2)) |
| VASP-to-CASP transition | Ended 1 July 2026 (MiCA default; CySEC Circular C674) |
| Authorised CASPs | 25 Cypriot CASPs on ESMA's interim register (25 October 2026) |
| Best for | Cost-conscious firms with genuinely Cyprus-based operations |
Top counsel for Cyprus CASP work
Firms below are ranked according to the published CLPAI methodology. Featured selections cover firms with documented Cyprus engagement, regardless of where they are headquartered.
Frequently asked questions about Cyprus CASP authorisation
Is Cyprus an operationally efficient regulator for CASP authorisation?
Yes — CySEC is among the most operationally efficient EU regulators, with predictable processing windows and constructive engagement on substantive questions.
How many CASPs has CySEC authorised?
ESMA's interim MiCA register listed 25 Cypriot CASPs on 25 October 2026, the fourth-largest population in the EU after Germany, France and the Netherlands.
Which MiCA class covers placing of crypto-assets?
Class 1 under MiCA Annex IV, with a EUR 50,000 minimum. MiCA has no separate firm-commitment placing category, and Cyprus adds no domestic class of its own.
Pitfalls and nuances in Cyprus
1 Letter-box substance assumption
Founders sometimes assume Cyprus accepts letter-box substance based on its older reputation. MiCA requires a registered office in Cyprus, effective management in the EU and at least one EU-resident director (Article 59(2)), and CySEC reviews whether the people and systems are real.
2 Treating the passport as a second application
Under Article 65 the host authority does not review the notification: CySEC forwards it within 10 working days, and the CASP may start once told, or at the latest from the 15th calendar day after notifying. The real work in each new market is host-state consumer, marketing and tax rules, not a second licence.
Practitioners in Cyprus
Named lawyers from the Crypto Law Index practitioners directory whose jurisdictional coverage includes Cyprus. Editorial picks, sourced from public records.
Regulator and primary sources
The supervisor of CASP authorisations in Cyprus is Cyprus Securities and Exchange Commission (CySEC). The legal basis is MiCA Regulation (EU) 2023/1114, applied directly; CySEC and the Central Bank of Cyprus designated by Finance Ministry notification (November 2024). Visit www.cysec.gov.cy/en-GB/home for the regulator's official guidance, application forms, and supervisory expectations.
For where every EU and EEA state stands — its authority, its national act and when its transitional period ended — see the MiCA implementation tracker.