Poland | VASP Registration & MiCA Transition 2025

Overview

Poland is widely considered a fast, cost-efficient EU entry point for crypto firms via a national VASP registration model. The framework is administered under the Ministry of Finance (with registration handled through the Tax Administration Chamber in Katowice), while AML supervision and reporting obligations are linked to GIIF (General Inspector of Financial Information). For early-stage exchanges, custodians, and on/off-ramp providers, the primary value is speed-to-market — with the clear expectation of a later MiCA CASP upgrade.

Regulatory Snapshot

• Registration route: National VASP register (AML-first model)
• Competent authority (registration): Ministry of Finance / Tax Administration Chamber in Katowice
• AML authority: GIIF (General Inspector of Financial Information)
• Typical entity: sp. z o.o. (Polish LLC)
• Minimum share capital: PLN 5,000 (statutory minimum for sp. z o.o.)
• Substance: Generally lighter than many EU hubs; banking tends to drive “real substance” needs
• MiCA path: Transition from VASP registration to CASP authorization expected during 2025–2026

Covered Activities

• Custody/safekeeping of crypto-assets or private keys
• Crypto↔fiat exchange and crypto↔crypto exchange
• Transfer of virtual assets (wallet-to-wallet and related services)
• Wallet and on/off-ramp services
• Token activity support where the token is not regulated as a financial instrument (case-by-case)

Activities that overlap with payments, e-money, or securities can trigger additional licensing and supervision requirements outside the VASP registration perimeter.

Why Poland

• Speed: Typically faster than “full prudential-style” jurisdictions
• Cost: Low statutory capital and straightforward incorporation
• Flexibility: Often no strict local director requirement at the registration stage
• Practical fit: Works well for MVP-stage providers preparing for MiCA

Process & Timeline

Stage 1 — Document Preparation (≈ 1 week)

• ID and proof of residence for UBOs/directors
• CVs, competence evidence (experience or training) for management / AML function
• Business description, service scope, and operating model
• AML/KYC policy suite and risk assessment drafts

Stage 2 — Company Incorporation (≈ 1–2 weeks)

• Incorporate a sp. z o.o. and establish a registered address
• Set governance roles and signing rights
• Prepare for banking/EMI onboarding (often the real bottleneck)

Stage 3 — VASP Registration (≈ 6–8 weeks)

• Submit the registration file to the Tax Administration Chamber in Katowice
• Provide AML/CFT documentation, governance structure, and activity scope
• Demonstrate competence and readiness (processes + tooling)
• Iterate through Q&A until accepted into the register

Stage 4 — Banking / EMI Setup (≈ 2–6+ weeks)

• Open operational accounts (Poland or EU)
• Document transaction flows, compliance tooling, and source-of-funds controls
• Registration status helps, but banking remains risk-based and provider-dependent

Planning range: ~2–3 months end-to-end in straightforward cases; faster routes may exist via shelf/ready-made entities, but banking can still extend the timeline.

Key Requirements

• Polish LLC (sp. z o.o.)
• Share capital: PLN 5,000
• Registered address in Poland
• Competence evidence for the persons directing the business (experience and/or AML training)
• AML Officer / AML function (often allowed to be non-resident, but must be effective)
• Risk-based AML/KYC framework and monitoring approach
• Transaction monitoring + sanctions/PEP screening (in-house or outsourced)
• Clean criminal record documentation where requested (case-by-case)

Legal Framework & Supervision

• Poland’s AML regime is built on national law aligned with EU AML directives and FATF principles
• GIIF can inspect and enforce AML controls; reporting duties apply for suspicious activity
• MiCA alignment is expected to replace the national register with a CASP authorization regime

Ongoing Obligations

• Maintain an effective AML function (training, policies, auditability)
• KYC onboarding, PEP/sanctions screening, and risk scoring
• Risk-based monitoring and reporting obligations tied to GIIF expectations
• GDPR-aligned data retention and security
• Recordkeeping, bookkeeping, and operational documentation discipline

Sanctions

• Operating without proper registration can trigger financial penalties
• AML failures can create material fines and personal accountability for responsible persons
• Reputational impact can be more damaging than fines (banking/rail shutdown risk)

Taxation (High-Level)

• CIT (small taxpayers): 9% (subject to eligibility thresholds)
• Standard CIT: 19%
• VAT: Many exchange/custody services are commonly treated as VAT-exempt in EU practice (confirm locally)

MiCA Transition (2025–2026)

Under MiCA, Poland is expected to replace the VASP register with a CASP authorization regime. Existing VASPs should plan for a structured conversion: governance strengthening, ICT resilience controls, customer protection disclosures, own-funds alignment, and audit-ready documentation. The teams that treat 2025 as a build year (controls + evidence) typically transition smoother than those that treat it as a paperwork exercise.

CryptoWisely.io Comment

Disclaimer: Informational only and not legal advice. Always confirm the latest AML requirements and MiCA transition rules with Polish authorities and professional advisors before proceeding.