Crypto exchange licence · Comparison
Crypto Exchange License: Jurisdictions Compared (2026)
Founders ask 'where do we get a crypto exchange licence' as if the answer is a place. It is not — it is seven different regimes, with seven different rulebooks. The choice is which market the exchange actually serves, not which licence is easiest.
A crypto exchange licence in 2026 is the regulatory authorisation a centralised crypto-asset trading platform needs to operate in a given jurisdiction — most commonly granted as a MiCA CASP Class 3 authorisation in the EU, a VARA exchange licence in Dubai, a Major Payment Institution licence under Singapore's Payment Services Act, an SFC VATP licence in Hong Kong, FCA cryptoasset registration in the UK, a DLT trading venue or related licence with FINMA in Switzerland, and a combination of state money-transmitter licences with FinCEN MSB registration in the United States.
Quick facts
| Parameter | Value |
|---|---|
| EU | MiCA CASP authorisation — Class 3 (operation of a trading platform), €150,000 Annex IV own-funds floor, passports across 27 member states |
| UAE — Dubai | VARA — Virtual Assets Regulatory Authority — issues exchange-services licences in Dubai under the bespoke virtual-asset framework |
| Singapore | Payment Services Act 2019 (DPT services) under the MAS, with SPI and MPI licence classes by transaction volume |
| Hong Kong | SFC Virtual Asset Trading Platform (VATP) licence under Cap. 615, in force from 1 June 2023 |
| United Kingdom | FCA cryptoasset registration under MLR 2017 — AML-only; broader regime being phased in under FSMA 2023 |
| Switzerland | FINMA — DLT trading venue or related licences depending on the model, alongside SRO/AML supervision |
| United States | State-by-state money-transmitter licences plus FinCEN MSB registration; New York adds the BitLicense |
A licence, in seven flavours
The question every founder asks first — where do we get a crypto exchange licence — sounds like a single decision. It is not. There is no global “crypto exchange licence.” There are seven or eight regimes, each running its own rulebook, capital, scope, and supervisory style. The honest work is not searching for the easiest one. It is choosing the one whose market the exchange actually serves.
This is the 2026 comparison.
EU — MiCA CASP authorisation
The most comprehensive crypto regime in the world today is also the one with the single authorisation that reaches the most markets: under Regulation (EU) 2023/1114 (MiCA), a CASP authorisation issued by any one of the 27 EU national competent authorities passports across all 27 member states under the EU passport mechanism.
For a centralised exchange, the relevant licence class is MiCA Class 3 — operation of a trading platform — with the €150,000 own-funds floor under Annex IV. The full rules sit in the crypto licensing pillar guide; the comparison of EU member-state homes for the licence is in the Crypto Jurisdiction Index.
UAE — Dubai VARA
Dubai built a bespoke crypto-regulator from scratch. VARA — the Virtual Assets Regulatory Authority — issues activity-specific licences for crypto-asset businesses, including exchange-services licences for trading platforms. The framework runs alongside the UAE’s free-zone company-formation regime; for that side, see our UAE crypto company formation guide.
VARA’s scope is Dubai, not the wider EU or non-EU markets. For how VARA compares to MiCA specifically, see MiCA vs Dubai VARA.
Singapore — MAS PSA
Singapore licenses crypto firms under the Payment Services Act 2019, supervised by the Monetary Authority of Singapore. For an exchange, the relevant authorisation is a Digital Payment Token services licence, with the Standard Payment Institution and Major Payment Institution classes distinguished by transaction-volume thresholds. MAS is deliberate and selective — see the full picture in our Singapore MAS practitioner guide.
Hong Kong — SFC VATP
Hong Kong introduced the VASP regime under Cap. 615 on 1 June 2023, with the SFC issuing Virtual Asset Trading Platform (VATP) licences for centralised exchanges. Where the assets are securities, SFO Type 1 and Type 7 licences apply in parallel. The standard is investor-protection-heavy; details in the Hong Kong SFC practitioner guide.
United Kingdom — FCA registration
The UK currently runs a narrower regime than the others on this list. FCA cryptoasset registration under MLR 2017 is anti-money-laundering only — not a full licence. A broader authorisation regime is being phased in under FSMA 2023, but as of 2026 the comprehensive British framework is partly built, not fully live. The full comparison sits in our UK FCA vs EU MiCA piece.
Switzerland — FINMA
Switzerland does not have a standalone crypto law. It runs an established financial-market framework — the DLT Act, AMLA, and FINMA rules — with licensing through SRO membership or direct FINMA authorisation depending on the model. For a trading platform, FINMA’s DLT trading venue licence is the relevant route. The full picture is in Switzerland vs EU MiCA.
United States — state map plus FinCEN
The US has no federal “crypto exchange licence.” A platform serving US users typically needs:
- State-by-state money-transmitter licences (MTLs) across the states where it operates
- FinCEN MSB registration at federal level for AML purposes
- New York’s BitLicense, in addition, for serving New York residents
The US is the most administratively heavy of the major markets on this list — the licence stack is many things, not one.
The cross-jurisdiction comparison, side by side
| Jurisdiction | Regulator | Core exchange licence | EU passport |
|---|---|---|---|
| EU | National CA (per member state) | MiCA CASP Class 3 — €150k Annex IV | Yes — 27 member states |
| UAE — Dubai | VARA | Exchange-services licence | No |
| Singapore | MAS | PSA — DPT services (SPI / MPI) | No |
| Hong Kong | SFC | VATP under Cap. 615 (and SFO Type 1/7 if securities) | No |
| UK | FCA | Cryptoasset registration (AML-only) | No |
| Switzerland | FINMA | DLT trading venue or related licences | No |
| US | State regulators + FinCEN | State MTLs + FinCEN MSB (+ NY BitLicense) | No |
What the table shows is the MiCA passport asymmetry: only one of these licences reaches multiple markets at once. Every other column is single-jurisdiction.
How to pick
The decision is not “which regulator is lightest.” It is, in order:
- Where are the customers? A firm serving EU customers needs MiCA. A firm serving Singapore needs MAS. A firm serving Hong Kong needs the SFC. There is no shortcut around this.
- Where is the business actually based? Substance is enforced in every credible jurisdiction — nameplate offices do not pass.
- Multi-market? Two or more licences, in parallel. Plan it that way.
Use the Best Jurisdiction Finder to weight the decision against your model.
Working with counsel on jurisdiction choice
The diagnostic for counsel: ask them to anchor the recommendation on the customer market and the realistic substance build — not on a regulator’s reputation in isolation or on capital numbers alone. Counsel that pitches the same jurisdiction to every founder, regardless of the target market, has skipped the decision that actually matters. The firms in our index with cross-jurisdictional crypto-exchange experience are listed below.
Pitfalls and nuances
1 Looking for the lightest regulator
Every credible jurisdiction now runs a demanding crypto-exchange process. The pre-MiCA era of regulatory arbitrage — Estonia's early VASP regime, Lithuania's pre-2023 light registrations, certain offshore licences — has substantially closed. A founder shortlisting on 'easiest' is shopping a year that has passed; the credible regulators all expect substance, capital, and a complete file.
2 Confusing AML registration with a full exchange licence
The UK's FCA cryptoasset registration is anti-money-laundering only and does not give consumers the protections of a full FCA authorisation. Some pre-MiCA EU national registrations were similar. Marketing an AML registration externally as 'we're licensed' overstates what the registration covers and is the kind of misrepresentation supervisors notice.
3 Assuming one licence covers another market
A MiCA CASP authorisation does not reach the UK, Singapore, Hong Kong, the US, or the UAE. A VARA licence does not reach the EU. A Singapore MAS licence does not reach Europe. The cross-jurisdictional model is multiple licences in parallel, not one licence that travels. Plan multi-market projects as multi-licence projects.
4 Choosing on capital floors alone
MiCA's Annex IV €150,000 own-funds floor for Class 3 platforms is a real but modest figure against the total cost of running a credible exchange — substance, technology, compliance staffing, banking, custody arrangements, and post-grant supervision dwarf the headline capital. Picking the jurisdiction on its capital number alone misses the rest of the project economics.
Frequently asked questions
Is a crypto exchange licence the same in every country?
No. Each jurisdiction runs its own regime — MiCA in the EU, VARA in Dubai, MAS in Singapore, SFC in Hong Kong, FCA in the UK, FINMA in Switzerland, and state-level licensing in the US.
Which crypto exchange licence is the most comprehensive?
MiCA's CASP authorisation in the EU and Hong Kong's SFC VATP licence are among the most comprehensive — covering capital, governance, custody, conduct, and investor protection. The UK's FCA cryptoasset registration is currently AML-only.
Can one crypto exchange licence cover multiple markets?
Within the EU, a MiCA CASP authorisation passports across all 27 member states. Across the EU, UAE, Singapore, Hong Kong, UK, Switzerland, and the US, separate authorisations are required — there is no global passport.
What is the easiest jurisdiction for a crypto exchange licence?
There is no easy serious jurisdiction. Every regulator with a credible reputation runs a demanding process. The choice should be made on which market the exchange serves, not on which regulator is lightest.
Get matched
Working through a crypto-licensing decision?
Get an editorial shortlist of firms matched to your business — customer market, model, jurisdiction, and stage. Free, and not influenced by sponsorship.
Get a firm shortlist →Sources cited
- Regulation (EU) 2023/1114 (MiCA) — regulation
- VARA — Virtual Assets Regulatory Authority (Dubai) — regulator
- Monetary Authority of Singapore — Payment Services Act — regulator
- SFC — Virtual assets and the VASP regime — regulator
- FCA — Cryptoassets — regulator
- FINMA — Swiss Financial Market Supervisory Authority — regulator