Crypto licensing law firm Netherlands — AFM CASP counsel

Why Netherlands matters in EU MiCA licensing

The Netherlands is one of the premier Western EU MiCA CASP jurisdictions. Amsterdam carries top-tier reputational signal in the European financial-services ecosystem, AFM and DNB apply banking-grade supervisor rigour, and Dutch-licensed CASPs operate with full 27-member-state EU MiCA passport. For operators planning institutional positioning, the Netherlands sits in the same tier as Ireland, Germany, and Luxembourg.

The trade-off is real. Netherlands is not a low-cost MiCA jurisdiction. First-year substance investment runs €500,000-€1,200,000 for a typical mid-tier CASP. The senior compliance hires, the Amsterdam office, the AFM-DNB application work, the AML programme build, and the broader compliance infrastructure produce a cost tier materially above CEE budget-tier jurisdictions.

A Netherlands crypto licensing law firm specialism handles the dual AFM-DNB application work, Dutch substance preparation, AML programme design aligned with Dutch Wwft and EU AMLD6, and ongoing joint-supervisor dialogue. The practice is one of the most sophisticated EU MiCA practices and competes with German BaFin and Irish CBI work for institutional engagements.

The AFM-DNB joint supervisory model

The Netherlands operates a joint supervisory model for CASPs. The Autoriteit Financiële Markten (AFM) leads on conduct supervision, market integrity, and consumer protection — the Dutch equivalent of EU MiFID-style conduct supervisor role. De Nederlandsche Bank (DNB) leads on prudential supervision, AML/CFT, and operational resilience — the prudential supervisor role complementary to the banking supervisor function.

The joint model produces specific operational characteristics. Applicants engage with both supervisors throughout the application process. Information requests come from both AFM and DNB angles. Joint or coordinated examination is normal during application review and ongoing supervision. Decisions are coordinated between the two supervisors.

The model differs from single-supervisor frameworks (Ireland CBI, Finland Fin-FSA) where one authority handles all dimensions. It also differs from sequential frameworks where one supervisor leads and others observe. The Dutch joint model is a genuinely dual-track engagement that requires preparation for both supervisor angles from filing day one.

For operators with mature compliance infrastructure, the joint model produces operational efficiency — the supervisors coordinate so the operator does not duplicate engagement effort. For operators with skeletal arrangements, the joint model surfaces gaps faster than a fragmented framework would.

DNB pre-MiCA VASP register legacy

Netherlands established a Virtual Asset Service Provider (VASP) register at DNB in November 2020 under the Dutch Money Laundering and Terrorist Financing Prevention Act (Wwft). The register was AML-focused — registered VASPs committed to AML/CFT obligations and DNB supervision but were not subject to substantive prudential or conduct regulation.

The Dutch VASP register population was small relative to the larger pre-MiCA registers in Estonia or Lithuania — approximately 30-50 registered VASPs at peak. DNB applied substantive AML and substance expectations even at the registration phase, producing a more selective registered population than the larger registers.

Several enforcement actions during the 2021-2024 period produced DNB enforcement experience and an established case base on Dutch crypto AML expectations. DNB's MiCA CASP supervisor approach draws on this legacy experience — particular attention to AML framework adequacy, beneficial ownership transparency, and substance reality.

VASP-to-CASP migration for currently DNB-registered operators is the principal Dutch MiCA workstream through July 2026. The migration involves substantive uplift from AML-only registration to full MiCA CASP framework including prudential capital, conduct framework, ICT resilience, and ongoing supervisor relationship build.

AFM-DNB application process and timeline

AFM-DNB application review runs 6-9 months typically for clean files. The process is substantively demanding and resembles banking authorisation in operational depth.

Pre-filing engagement is normal practice. AFM and DNB expect pre-filing supervisor dialogue — initial scoping meeting, business model overview, anticipated scope, senior management introductions. Pre-engagement allows the supervisors to surface concerns before formal filing and signals substance expectations specific to the applicant. Filing without pre-engagement is technically possible but typically produces longer real timelines.

Formal application filing includes the comprehensive application package — application form, business plan, financial projections, AML programme documentation, customer due-diligence procedures, business continuity plan, ICT framework documentation including DORA-aligned operational resilience plan, senior management CVs and fitness-and-properness documentation, audited entity financials, and group structure documentation.

Joint supervisor review follows filing. AFM and DNB conduct coordinated document review, multiple rounds of information requests (typically 2-4 rounds), senior management interviews, and joint supervisor dialogue. The dialogue typically focuses on AML framework adequacy, senior management substance, business model coherence, ICT and DORA readiness, and conflicts-of-interest framework.

Approval issues conditionally typical. AFM and DNB jointly grant authorisation, often subject to specific operational conditions — capital pre-funding, specific compliance hires, system implementation milestones, or transitional restrictions on customer-facing activity. Operators meet the conditions during post-approval implementation before commencing licensed operations.

Dutch substance and senior management

Dutch substance expectations are real and operationally significant. Dutch-incorporated entity. Registered Amsterdam or Dutch office (corporate-services-provider address does not meet the expectation for operational headcount). Dutch-resident senior management with documented working presence in the Netherlands. AFM-recognised key persons including dedicated MLRO, head of compliance, head of risk, and other applicable roles.

The fitness-and-properness assessment is intensive. AFM and DNB review senior management against industry experience, regulatory history, criminal record, civil litigation history, and personal integrity dimension. Beneficial owners face equivalent review. The Dutch banking-supervisor lineage at DNB produces banking-grade fitness-and-properness rigour.

Functional substance in the Netherlands. Substantive Dutch AML team, compliance team, risk-management headcount, and operational team. Outsourcing under MiCA Article 73 is permitted but the supervisor expects genuine Dutch oversight of outsourced functions and a credible Dutch team to manage the outsourcing relationship.

Operational infrastructure. Amsterdam office for senior management and core operational team. Dutch employment for headcount. Dutch banking arrangements through one of the major Dutch banks. Dutch customer support capability for Dutch-language customer base. Dutch-located key systems infrastructure or DORA-compliant outsourced equivalent.

Banking access in the Netherlands

Banking access for Dutch-licensed CASPs is materially better than for CASPs in smaller EU jurisdictions but is not automatic. The Dutch banking market is concentrated — ING, ABN AMRO, and Rabobank dominate, with smaller specialised banks in the broader landscape.

ING. Mid-tier engagement with crypto-related accounts. Onboarding for a licensed Dutch CASP typically runs 4-8 months. Accounts are operational once granted with normal correspondent banking and SEPA access. ING applies extended due diligence including substantive AML programme review.

ABN AMRO. Comparable approach to ING. Slightly more conservative on crypto-related onboarding but engagement with licensed CASPs is operational. Account onboarding runs 4-9 months.

Rabobank. More conservative profile. Some onboarding of mid-tier CASPs is possible but extended scrutiny is the norm. Useful as backup banking rather than primary.

EMI alternatives. Several EMI providers offer Dutch IBAN access for licensed CASPs — Wise Business, Revolut Business, and various Dutch-licensed EMI institutions. EMI access is faster (typically 4-8 weeks) and operationally adequate for many use cases. Some operators use EMI for operational payments while pursuing primary Dutch bank account separately.

A Dutch-licensed CASP can typically secure primary Dutch banking within 6-10 months of authorisation. The lag is real and should be budgeted in the operational launch plan.

How Netherlands compares to alternative Western EU jurisdictions

Netherlands versus Ireland. Both premier Western EU MiCA jurisdictions with banking-grade supervisor rigour. Netherlands operates AFM-DNB joint supervision; Ireland operates CBI integrated supervision. Cost tiers and timelines broadly comparable. Choose by market positioning — Netherlands for Benelux focus; Ireland for English-language operations and tech ecosystem fit.

Netherlands versus Germany. Germany BaFin is the most rigorous EU CASP supervisor. Substance bar is the highest in the EU. Cost is highest in the EU. Netherlands is materially lighter than Germany while maintaining premium-tier reputational signal. Choose Germany only for operators where BaFin reputational tier specifically matters.

Netherlands versus Luxembourg. Luxembourg CSSF operates banking-grade supervisor with smaller crypto-applicant population. Luxembourg has stronger fund-vehicle ecosystem; Netherlands has broader EU-market positioning. Cost tiers similar; choose by ecosystem fit.

Netherlands versus Lithuania. Different tiers entirely. Lithuania is budget-tier CEE; Netherlands is premium-tier Western EU. Lithuania at €150-300k first year; Netherlands at €500k-1.2m first year. Choose by strategy — cost-led Lithuania, institutional-positioning Netherlands.