Austria FMA CASP Authorisation 2026 — Practitioner Guide

Vienna as a DACH alternative

Austria is a credible DACH-region alternative to Germany for MiCA passport-hub strategy. The FMA is a serious supervisor with banking-grade expectations, Vienna is a substantive Central European financial centre, and Austrian substance is meaningfully cheaper than German substance. For platforms that want DACH reputational signal without BaFin-level cost and substance, Austria is the principal alternative.

The trade-off relative to Germany is supervisory pipeline volume and case-team depth. BaFin handles a much larger CASP authorisation pipeline; FMA handles a smaller one. The smaller pipeline produces closer supervisor engagement on each file — which can be either a benefit (substantive dialogue) or a friction (every issue surfaces in the engagement) depending on the applicant’s preparation quality.

The single-supervisor model

Austria designed its MiCA implementation around the FMA as a single supervisor. The FMA handles:

• CASP authorisation under MiCA Article 63
• Prudential supervision under MiCA Article 67
• Conduct supervision under MiCA Articles 66-73
• Consumer protection and marketing communications under MiCA Articles 6-7
• AML/CFT supervision

The single-supervisor model produces administrative simplicity for the applicant — one case team, one application file, one supervisory dialogue. The trade-off is that the FMA is a high-standards supervisor and the bar is uniformly high across the conduct, prudential, and AML dimensions.

The Austrian Financial Intelligence Unit (A-FIU) within the Federal Criminal Police Office receives suspicious-transaction reports separately from the FMA’s supervisory engagement.

The pre-MiCA register and its transition

The FMA operated a pre-MiCA crypto-service-provider register under the Financial Market Authority Crypto-Service-Provider Regulation. The register required Austrian VASPs to comply with AML and basic conduct requirements but was not substantively supervised in the way MiCA contemplates.

At MiCA application, the register wound down. Registered VASPs had 12 months to file a CASP authorisation application with the FMA. The transitional regime granted operational continuity, not authorisation. By mid-2026 the steady-state regime is the live pathway.

What the FMA looks for

The FMA’s CASP application standards reflect its broader Austrian financial-services supervisory tradition. The recurring themes:

Banking-grade governance. A management body sized for the planned operations with formal fit-and-proper assessments. Independent directors expected for substantial files. Three-lines-of-defence framework with independent compliance, risk-management, and internal-audit functions. The FMA’s banking-supervision background informs the expectations — venture-stage governance arrangements do not pass FMA review.

Real substance in Austria. Registered office in Austria with documented lease. At least one senior manager resident in Austria with documented working presence. Compliance and operational-control functions staffed with Austria-resident professionals at a level proportionate to the planned business. The FMA does not accept letterbox arrangements.

Prudential rigour. Article 67 own-funds calculation reviewed in detail. The FMA’s banking-supervision tradition produces granular review of capital composition, deductions, and ongoing compliance. ICT risk-management framework consistent with DORA expectations.

AML programme. Fully developed AML programme with MLRO appointed, customer due-diligence procedures, transaction-monitoring tooling, sanctions screening, and STR reporting to A-FIU. The FMA’s AML supervisory practice draws on its broader banking AML experience.

Consumer protection in German. Client-facing materials in German for Austrian-targeted services. Compliance with the FMA’s consumer-protection rules under both MiCA Article 7 and Austrian consumer law overlays.

The realistic Austrian timeline

The FMA’s substantive review takes time. The five-month MiCA Article 63 clock is the statutory floor, but pre-screen, supervisory dialogue, and the rigorous case-team review typically extend the end-to-end timeline:

• Pre-filing preparation including German translation: 8-12 weeks
• FMA pre-screen and completeness cycle: 4-8 weeks
• Active five-month clock: 18-22 weeks
• Decision and onboarding: 2-4 weeks

Seven to ten months end-to-end is the working assumption. Smaller and simpler files for Class 1 services sometimes complete faster — five to seven months — but the longer timeline is standard for substantial files.

When Austria is the right home supervisor

Austria works well for:

• Platforms with a DACH-region customer focus that want the regional reputational signal at lower cost than Germany
• Operations with German-speaking management capacity already in place
• Businesses that value supervisor accessibility — the FMA’s smaller pipeline permits closer engagement
• Central European-headquartered groups looking for a serious EU supervisor

Austria is a weaker fit if the priority is the lowest-friction or fastest authorisation. The FMA is not a fast supervisor by EU standards, the German-language filing requirement is real, and the banking-grade substance expectations rule out venture-stage operating models.

For a buyer triaging EU options: Austria sits in the upper tier alongside Germany, Ireland, Luxembourg, and France — heavy substance, rigorous supervisor, strong reputational signal. The distinguishing feature relative to Germany is materially lower setup cost and a more accessible regulator dialogue. The distinguishing feature relative to Lithuania or Cyprus is the institutional weight of the authorisation and the operating market depth in Vienna.