CASP License Luxembourg

Your Complete MiCA Compliance Guide for 2025

A CASP (Crypto-Asset Service Provider) license is mandatory to run a crypto business in Luxembourg and across the EU under MiCA/MiCAR (Regulation 2023/1114). The CSSF (Commission de Surveillance du Secteur Financier) is the authority overseeing this regulation locally

MiCA Timeline for Luxembourg

• 30 June 2024 – MiCA provisions for Asset-Referenced Tokens (ARTs) and E‑Money Tokens (EMTs) took effect
  
  
• 30 December 2024 – Full MiCA regulations (including CASPs) became applicable
  
  
• 1 July 2026 – End of transitional period (18 months). Existing VASPs registered before Dec 30, 2024, must obtain full CASP authorization by this date
  
  

Licensure Options

1. Full CASP Authorization (Article 62 MiCA) – For new entrants not already regulated.
   
   
2. Notification Only (Article 60 MiCA) – For credit institutions, EMI, MiFID firms, UCITS/AIFMs already under CSSF oversight that wish to extend crypto services 

How to Register as a CASP in Luxembourg

1. Set Up a Luxembourg Entity – Incorporate and obtain a company registration number
2. Initial CSSF Engagement – Begin with preliminary contact to align expectations 
3. Submit Application / Notification – Under Article 62 or 60 MiCA
4. Prepare Documentation – Business plan, wallet/account diagrams, AML/CFT framework, board structure, internal policies, capital adequacy proof, etc.
5. Post-Approval Requirements – Maintain AML/CFT policies (article 64), perform CDD (article 68), ensure operational transparency, risk management, ongoing reporting, and capital adequacy.
   
   

Services Requiring CASP Registration

• Crypto custody and wallet administration
  
  
• Trading platform operations
  
  
• Fiat-to-crypto & crypto-to-crypto exchange
  
  
• Order execution and reception/transmission
  
  
• Investment advice & portfolio management in crypto
  
  
• Crypto transfer and payment services 

AML, Travel Rule & Governance

• AML/CFT Framework: Comply with MiCA articles and Luxembourg’s AML regime under CSSF circulars 25/878 and 25/879, implementing EBA & ESMA guidelines
  
  
• Travel Rule Enforcement: Must accompany transfers ≥ €1,000 or self-hosted transactions with full originator/beneficiary info
  
  
• Governance Standards: Meet CSSF criteria for board suitability, shareholder thresholds, risk oversight under updated circulars .
  
  

Scorechain Solution for MiCA Compliance?

By leveraging Scorechain’s compliance suite, Luxembourg CASPs can:

• Navigate MiCA + CSSF requirements seamlessly
  
  
• Automate AML/CFT risk monitoring and Travel Rule adherence
  
  
• Maintain transparent reporting with audit-ready logs
  
  
• Empower internal governance and satisfy board suitability standards
  
  

Be fully MiCA-ready and CSSF-compliant, book a demo today!

‍