Best EU Jurisdiction for MiCA CASP in 2026: A Practical Comparison

What should you optimise for when choosing a MiCA jurisdiction?

The right jurisdiction depends entirely on the founder’s optimisation priority — speed-to-licence, supervisory reputation, total cost, language fit, or existing local presence — and the optimal answer differs per priority.

The right MiCA CASP jurisdiction depends entirely on what the founder is optimising for. Five common optimisation priorities, each with a different optimal answer:

1. Speed to operating licence → Lithuania
2. Supervisory reputation for institutional counterparties → Germany or Netherlands
3. Total cost of authorisation → Czech Republic or Cyprus
4. Familiar legal language and culture → home jurisdiction (often)
5. Existing local presence and team → wherever the team already is

There is no universal “best” answer. Counsel that recommends a single jurisdiction without first establishing the optimisation priority is providing a generic answer to a specific question. Founders should run their own decision matrix before delegating the choice to counsel.

Which EU jurisdictions are actively processing CASP files?

Lithuania, Estonia, Czech Republic, Cyprus, Malta, and Ireland process the bulk of MiCA CASP files in 2026, with the Netherlands and France serving as the two heavier Tier 1 passport-hub options for platforms that weight supervisory reputation over speed. They differ on timeline, cost, supervisory rigour, and downstream passporting reputation.

For platforms planning to authorise in one member state and passport everywhere else under Article 65, the choice of home supervisor is the strategic decision. Once authorised, a CASP passports services into the other 26 member states on a 15-working-day notification. So the right comparison is not only “where is it fastest” but “what kind of regulator do you want supervising the business for its operating life.” The eight profiles below run from fast-and-mid-reputation to slow-and-premium.

Lithuania — fast, predictable, mid-tier reputation

Timeline (practitioner-reported): 4-6 months from complete application for clean files

Capital: Standard MiCA tiers (€50K / €125K / €150K)

Application fees: Base + service-specific add-ons set by Bank of Lithuania regulation; consult current schedule

Supervisory tone: Operationally efficient, willing to engage in pre-clearance, applies substance review without gold-plating beyond MiCA

Reputation: Mid-tier within EU. Stronger than Czech Republic, weaker than Estonia, Germany or Ireland.

Best for: Mid-sized firms prioritising speed without sacrificing substance. Class 1 and Class 2 firms particularly. Custody at scale less obvious.

Estonia — slower, stricter, premium reputation

Timeline (practitioner-reported): 5-7 months from complete application

Capital: Standard MiCA tiers; FSA practice signals heightened expectations for Class 3 custody firms

Application fees: €3,000 per the FSA published fee for CASP authorisation processing

Supervisory tone: Stringent substance review. FSA has flagged substance shortfalls in supervisory correspondence on transitional applications. Resident-director interview is genuinely substantive.

Reputation: Top-tier within EU mid-size jurisdictions. Strong reputation for downstream passporting.

Best for: Firms where supervisory reputation matters for institutional counterparties or downstream banking relationships. Custody-heavy operating models. Founders willing to invest in genuine substance.

Czech Republic — newest entrant, capacity-constrained

Timeline (practitioner-reported): 6-8 months from complete application

Capital: Standard MiCA tiers

Application fees: Per ČNB published fee schedule + service-specific add-ons; consult current schedule

Supervisory tone: Moved from prior trade-licence regime to ČNB MiCA supervision (ČNB became MiCA-competent from 15 February 2025; first six authorisations issued 11 February 2026). Building capacity. Pre-application engagement is constructive but iteration cycles can be long.

Reputation: Improving as ČNB takes over. Currently middle of EU pack.

Best for: German and Austrian founders (geographic and language proximity). Founders willing to wait for the ČNB to fully build out CASP supervision capacity.

Cyprus — fast, low-cost, watch substance

Timeline (practitioner-reported): 4-7 months from complete application

Capital: Standard MiCA tiers

Application fees: Set by CySEC fee regulation; base + service-specific add-ons

Supervisory tone: Operationally efficient. Industry comments characterise CySEC’s substance review as lighter than Estonia or Malta. This may shift as supervisory capacity grows.

Reputation: Mixed. Strong for fund and forex work; mixed for crypto licensing where substance discipline matters.

Best for: Cost-conscious founders with genuinely Cyprus-based operations. Less obvious for letter-box-style substance models.

Malta — strict substance, slower

Timeline (practitioner-reported): 7-10 months from complete application

Capital: Standard MiCA tiers, with MFSA-specific governance expectations on Class 3 setups (separated MLRO/Compliance Officer above the small-firm threshold)

Application fees: Per MFSA published fee schedule; consult current schedule

Supervisory tone: Highly stringent. MFSA has applied the substance discipline developed under the 2018 VFA Act (Cap. 590) to MiCA CASP files. Substance-grounds deficiencies in supervisory correspondence are common.

Reputation: Strong reputation in iGaming and digital-asset sub-sectors.

Best for: Firms with iGaming-adjacent operations, founders with genuinely Malta-based teams. Less obvious for plain CASP-only files.

Ireland — premium, slow, expensive

Timeline (practitioner-reported): 10-14 months from complete application

Capital: Standard MiCA tiers; Central Bank of Ireland has additional own-funds expectations

Application fees: Per CBI published fee schedule; among the higher in the EU

Supervisory tone: Very stringent. Central Bank of Ireland is among the slowest and most demanding EU regulators. Substance discipline is high.

Reputation: Premium. An Irish CASP licence carries significant weight in passporting and institutional counterparty discussions.

Best for: Large, well-capitalised firms with US and UK adjacent operations. Founders who can afford the timeline cost in exchange for premium reputation.

Netherlands — practical middle ground, English filing

Timeline (practitioner-reported): AFM is one of the more efficient EU NCAs; process is professional and reasonably fast

Capital: Standard MiCA tiers

Application fees: Per AFM published fee schedule; consult current schedule

Supervisory tone: Substance review is real but proportionate. The AFM accepts English-language application files — one of only two EU NCAs that does — and the Amsterdam business environment supports an English-speaking operational stack. AML supervision sits with DNB in parallel to AFM authorisation, so the engagement is two-headed.

Reputation: Tier 1 for markets-conduct supervision. Strong signal without the Irish substance lift.

Best for: International platforms wanting institutional signal without Ireland’s substance bar. Operations that prioritise an English-language administrative environment. Northern European or DACH customer focus. Bank access for crypto firms is mixed — Dutch tier-1 banks are cautious.

France — strictest of the hubs, French-market signal

Timeline (practitioner-reported): 9-12 months for first-time files — the longest of the serious hubs

Capital: Standard MiCA tiers; corporate tax 25%

Application fees: Per AMF published fee schedule; consult current schedule

Supervisory tone: The AMF is one of the EU’s most sophisticated markets supervisors, building on the PSAN regime it ran under the PACTE law from 2019. The French framework is the heaviest of the hub options — most rigorous review, deepest substance, and a French-language application file required. AML supervision sits with ACPR in parallel.

Reputation: Highest in continental Europe. French institutional customers favour AMF-supervised platforms.

Best for: Platforms with a French or French-speaking customer base, or that need French-institutional credibility. Note that bank access is historically difficult — French tier-1 banks remain cautious on CASPs even with French authorisation, so budget for that friction.

Cited expert

[ESMA](/glossary/esma/) is actively contributing to MiCA's effective implementation, in close cooperation with the European Banking Authority and National Competent Authorities, including through intense supervisory convergence efforts, information sharing, and guidelines.

Which jurisdiction fits which founder profile?

The matrix below maps eight common founder profiles to a first-choice and second-choice jurisdiction — useful as a starting heuristic before a structured conversation with multi-jurisdiction counsel.

A simple decision matrix for the most common founder profiles:

Founder profile	First choice	Second choice
First-time CASP, Class 2, EU-only operating model	Lithuania	Cyprus
Class 3 custody, institutional counterparties	Estonia	Germany (full BaFin path)
US-EU bridge, token-issuance work	Ireland	Cyprus
Cost-constrained, Class 1 advisory	Czech Republic	Bulgaria
Existing Estonian VASP	Estonia (transition)	Lithuania (re-domicile)
Existing Lithuanian VASP	Lithuania (transition)	Czech Republic (re-domicile)
iGaming-adjacent, Maltese operations	Malta	Cyprus
German-speaking, DACH operations	Czech Republic	Germany (BaFin)

The matrix is a starting heuristic, not a recommendation. A specific founder’s optimal choice depends on factors that don’t fit a matrix — board composition, existing banking relationships, customer base distribution, capital position. The right next step is a structured conversation with counsel that has filed in multiple of these jurisdictions, not a single-jurisdiction firm whose recommendation is by definition self-confirming.

How do the four serious passport hubs compare side by side?

For a pan-EU platform without unusual constraints, four jurisdictions are the default starting set — Lithuania, Ireland, Netherlands, France. The passport works from all four; the choice is about timeline, cost, English-filing accommodation, institutional signal, substance lift, bank access, and tax.

Factor	Lithuania	Ireland	Netherlands	France
Timeline	Fastest	Medium	Medium	Slowest
Cost	Lowest	High	Medium-high	High
English filing	No (LT)	Yes	Yes	No (FR)
Institutional signal	Lower	Highest	High	Highest
Substance threshold	Low-medium	High	Medium	High
Bank access	Easy	Easy	Medium	Hard
Tax	15% CIT	12.5% CIT	25.8% CIT	25% CIT
Pan-EU passport works	Yes	Yes	Yes	Yes
Best for	Speed/cost	Institutional	Practical middle	French market

One criterion founders routinely miss: the AML supervisor is often a different authority from the MiCA NCA. Bank of Lithuania for MiCA but FCIS for AML; CBI for both in Ireland; AFM for MiCA but DNB for AML in the Netherlands; AMF for MiCA but ACPR for AML in France. The combined supervisory map shapes the day-to-day engagement and should inform the hub choice — not just the authorisation timeline.

Germany vs France, head to head

Germany and France are the EU’s two largest economies, and both took crypto seriously years before MiCA. They land on the same shortlist for reasons of weight, not because either is the lighter touch. Neither is light. The honest question is narrower: where does this particular business belong, given that the licence is the same MiCA instrument either way?

Germany supervises crypto through BaFin, the Federal Financial Supervisory Authority. From 2020, Germany ran a crypto-custody licence under the German Banking Act (KWG), treating crypto custody as a regulated financial service before most of the EU had any framework at all. That gave BaFin years of crypto-supervisory experience and a population of licensed firms. Under MiCA, the crypto-custody permission gives way to the full CASP authorisation. BaFin is a large, methodical regulator with a deep prudential tradition — and it brings that exacting style to crypto.

France moved early too, on a different track. From 2019, under the PACTE law, France ran the PSAN regime — prestataire de services sur actifs numériques, the digital-asset service provider framework — supervised by the AMF. The PSAN regime had a registration tier and an optional fuller licence, and France used it to build a regulated crypto sector ahead of the EU. Under MiCA, the PSAN framework gives way to the CASP authorisation. Like BaFin, the AMF carries real crypto experience into MiCA, and like BaFin it is a demanding, deliberate supervisor.

Dimension	Germany (BaFin)	France (AMF)
Regulator	Federal Financial Supervisory Authority	Autorité des marchés financiers
Pre-MiCA regime	Crypto-custody licence under the Banking Act (2020)	PSAN regime under the PACTE law (2019)
Crypto experience	Several years, prudential-supervision tradition	Several years, markets-supervision tradition
MiCA capital	Annex IV floors — €50k / €125k / €150k	Annex IV floors — €50k / €125k / €150k
EU passport	Yes — via the EU passport mechanism notification	Yes — via the EU passport mechanism notification
Process style	Thorough, methodical, demanding	Thorough, methodical, demanding
Best fit	Business or investors centred on Germany	Business or investors centred on France

The table makes the real point. On the mechanics — capital, passport, rigour — Germany and France are level. MiCA flattened them, and neither regulator offers a shortcut. The deciding column is the last one.

So the decision is presence, not paperwork. A CASP whose customers, team, banking relationships, or investors are centred in Germany belongs in Germany; the same holds for France. Authorisation in the home market of the business is coherent — it puts the licence where the activity, the relationships, and the supervisory conversations naturally sit. A firm with no real link to either market gains little from a German or French base. It takes on the cost of substance in an expensive jurisdiction and a demanding regulator, in exchange for prestige it could source more cheaply elsewhere. For that firm, the question is not Germany versus France — it is whether either is the right answer at all. The practitioner guides to Germany and France go deeper on each.

How should you choose counsel for jurisdiction selection?

Pick counsel that asks structured questions before recommending — capital position, customer-base geography, banking relationships, existing presence, regulatory-reputation requirements, timeline — rather than counsel that recommends a jurisdiction in the first call.

The single most useful diagnostic on counsel quality at the jurisdiction-selection stage is whether the counsel asks the founder questions or recommends a jurisdiction immediately. Counsel that immediately recommends “Lithuania” or “Estonia” without a structured conversation about the founder’s optimisation priorities is providing a generic answer, not advice.

Counsel that runs a structured conversation — covering capital position, customer-base geography, banking relationships, existing presence, regulatory-reputation requirements, and timeline constraints — and only then recommends a jurisdiction is providing the kind of advice that actually moves the needle. The firms in our index that score highest on the practice-tested track-record pillar of the CLPAI methodology typically operate this way.