CASP License Luxembourg
Your Complete MiCA Compliance Guide for 2025
A CASP (Crypto-Asset Service Provider) license is mandatory to run a crypto business in Luxembourg and across the EU under MiCA/MiCAR (Regulation 2023/1114). The CSSF (Commission de Surveillance du Secteur Financier) is the authority overseeing this regulation locally
MiCA Timeline for Luxembourg
- 30 June 2024 – MiCA provisions for Asset-Referenced Tokens (ARTs) and E‑Money Tokens (EMTs) took effect
- 30 December 2024 – Full MiCA regulations (including CASPs) became applicable
- 1 July 2026 – End of transitional period (18 months). Existing VASPs registered before Dec 30, 2024, must obtain full CASP authorization by this date
Licensure Options
- Full CASP Authorization (Article 62 MiCA) – For new entrants not already regulated.
- Notification Only (Article 60 MiCA) – For credit institutions, EMI, MiFID firms, UCITS/AIFMs already under CSSF oversight that wish to extend crypto services
How to Register as a CASP in Luxembourg
- Set Up a Luxembourg Entity – Incorporate and obtain a company registration number
- Initial CSSF Engagement – Begin with preliminary contact to align expectations
- Submit Application / Notification – Under Article 62 or 60 MiCA
- Prepare Documentation – Business plan, wallet/account diagrams, AML/CFT framework, board structure, internal policies, capital adequacy proof, etc.
- Post-Approval Requirements – Maintain AML/CFT policies (article 64), perform CDD (article 68), ensure operational transparency, risk management, ongoing reporting, and capital adequacy.
Services Requiring CASP Registration
- Crypto custody and wallet administration
- Trading platform operations
- Fiat-to-crypto & crypto-to-crypto exchange
- Order execution and reception/transmission
- Investment advice & portfolio management in crypto
- Crypto transfer and payment services
AML, Travel Rule & Governance
- AML/CFT Framework: Comply with MiCA articles and Luxembourg’s AML regime under CSSF circulars 25/878 and 25/879, implementing EBA & ESMA guidelines
- Travel Rule Enforcement: Must accompany transfers ≥ €1,000 or self-hosted transactions with full originator/beneficiary info
- Governance Standards: Meet CSSF criteria for board suitability, shareholder thresholds, risk oversight under updated circulars .
Scorechain Solution for MiCA Compliance?
By leveraging Scorechain’s compliance suite, Luxembourg CASPs can:
- Navigate MiCA + CSSF requirements seamlessly
- Automate AML/CFT risk monitoring and Travel Rule adherence
- Maintain transparent reporting with audit-ready logs
- Empower internal governance and satisfy board suitability standards
Be fully MiCA-ready and CSSF-compliant, book a demo today!
