Malta | MiCA (CASP) License & Regulation

Overview

Malta is actively implementing the Markets in Crypto-Assets Regulation (MiCA) for Crypto-Asset Service Providers (CASPs). Its existing Virtual Asset Service Provider (VASP) regime is transitioning toward MiCA-aligned authorization and supervision under the Malta Financial Services Authority (MFSA).

As an English-speaking EU jurisdiction with a long virtual-asset regulatory track record, Malta is typically considered by teams seeking high credibility, a structured supervisory approach, and a well-understood corporate setup environment.

National Competent Authority (NCA)

• Authority: Malta Financial Services Authority (MFSA)
• Role: Supervises MiCA authorizations for CASPs
• Framework: Transition from Malta’s VASP regime to MiCA under EU Regulation (EU) 2023/1114

Grandfathering for Existing VASPs

• Who qualifies: Entities licensed/registered under the applicable pre-MiCA regime before 30 December 2024
• Transitional period: Up to 1 July 2026 (subject to MiCA transition rules and local implementation)
• Legal basis: MiCA transitional provisions (incl. Article 143)
• Action: Submit a CASP application within the required window to maintain operational continuity

Company Formation (Pre-Requirement)

To apply for a CASP authorization, the applicant typically establishes a Malta entity (commonly an LLC structure) with appropriate governance and documentation readiness.

• Indicative incorporation timeline: ~5–10 working days (often ~2 weeks if remote setup is used)
• Common inputs: IDs for shareholders/directors/UBOs, company name options, corporate email, activity outline, POA/notarization where applicable
• Substance: Registered office; governance separation and role clarity are important (requirements are model-dependent)

Taxation (High-level)

• Headline corporate tax: 35%
• Effective rate (commonly referenced): 0%–10% depending on structure and shareholder refund mechanics
• Mechanism: Full imputation system (tax paid at company level may be partially refundable to shareholders)
• Note: Always confirm eligibility and treaty impact with qualified tax advisors

Step-by-Step — Malta CASP Authorization (Typical Flow)

Stage 1 — Incorporation (≈ 2 weeks)

• Form the entity and establish the registered office
• Complete shareholder/UBO documentation and governance appointments
• Set baseline policies and operational scope mapping

Stage 2 — Application Submission (≈ 1–2 weeks)

• Submit via the MFSA’s applicable portal/process (as published at the time of filing)
• Provide business plan, governance model, ownership structure, operational and substance plan

Stage 3 — MFSA Review & Clarifications (≈ 2–3 months)

• Acknowledgment and completeness checks
• Requests for information (RFI) and remediation cycles as needed
• Decision following satisfactory review

Stage 4 — Banking & Capital (≈ 1 month)

• Open corporate account(s) and deposit capital (where required)
• Prepare KYB pack (policies, contracts, governance evidence, safeguarding narrative)

Indicative total timeline: often ~3 months end-to-end in well-prepared cases, but timing varies significantly by scope, documentation quality, and regulatory/banking cycles.

Key Requirements (At a Glance)

• Entity: Maltese company with registered office and clear governance
• Capital (MiCA classes): €50,000 (Class 1) / €125,000 (Class 2) / €150,000 (Class 3)
• Governance: Fit-and-proper management; transparent ownership
• AML/CFT: MiCA-aligned controls (EU AML regime + local expectations)
• Substance: Adequate presence and role coverage (model-dependent)
• Reporting: Ongoing prudential, operational, and AML reporting
• Banking: Strong KYB readiness and safeguarding narrative improve onboarding

FAQ — MiCA (CASP) in Malta

• How much does a CASP authorization cost?
  Capital (€50k–€150k) + supervisory/application fees + professional advisory and operational setup costs.
• How long does it take?
  Commonly 2–4 months depending on feedback loops, scope complexity, and banking timelines.
• Key requirements?
  Entity + governance + MiCA-grade documentation (ownership, operations, safeguarding, AML, ICT, risk, disclosures).
• Is Malta right for my business?
  Often a strong fit for well-prepared teams seeking EU legitimacy and a mature supervisory environment.
• Token issuance?
  Token issuance falls under MiCA token categories and disclosure rules; the exact process depends on the token type and offering model.

CryptoWisely.io Comment

Disclaimer: Informational only and not legal/tax advice. Always verify the latest MFSA requirements and MiCA implementation details before proceeding.