CASP License Estonia
Estonian FIU licences ended on 1 July 2026. Finantsinspektsioon now authorises CASPs. See the EUR 3,000 fee, capital by class, review timeline and AML duties.
Estonian FIU licences ended on 1 July 2026. Finantsinspektsioon now authorises CASPs. See the EUR 3,000 fee, capital by class, review timeline and AML duties.
Estonia’s virtual currency licences were issued by the Financial Intelligence Unit (FIU). The FIU announced that it would cancel the register data for those licences on 1 July 2026, the day the MiCA transition period ended. Since then, crypto-asset services in Estonia may only be provided by a company authorised by Finantsinspektsioon or by another EEA supervisor.
A company without an authorisation must not take new clients, open new accounts or actively market its services in the EEA. One that is still waiting for a decision must limit its activity until it arrives. Both must tell clients how the service will end or be limited and how to withdraw their assets or move them to an authorised provider.
A CASP license is an authorisation to provide crypto-asset services under MiCA. In Estonia the authority is Finantsinspektsioon. The FIU’s remaining role is AML: authorised providers are obliged entities and report suspicious transactions to it. The FIU’s head said that AML documentation alone is not enough, and that safeguarding of client assets and cyber resilience also need supervision.
You need a CASP authorisation if your business provides services such as:
Banks and some other regulated firms can offer crypto-asset services after notifying their home supervisor under MiCA Article 60, at least 40 working days before they start. Cross-border providers authorised in other EEA countries can also serve Estonian clients, and the country-by-country CASP guide compares the routes. The register page read on 30 October 2026 listed one Estonia-based CASP, so check the live register before you rely on it.
To apply for and keep a CASP license in Estonia, you must meet these requirements:
MiCA Article 63 sets the timetable, and the portal on the Finantsinspektsioon site is where the file goes in:
The file covers governance, internal controls, AML and counter-terrorist financing policies, ICT security, how client assets and funds are kept separate, and complaints handling. Custody, trading platforms, order execution, advice and transfer services each need extra documents. Since March 2026, Finantsinspektsioon has asked applicants to include a wind-down plan.
Scorechain covers the screening and monitoring side of these duties. Your team keeps customer identification, Travel Rule decisions and reporting to the FIU.
Finantsinspektsioon had 10 applications in progress by March 2026 and the register lists one authorised Estonia-based CASP, so the file has to show how you will screen, monitor and document from the first day. Scorechain has supported 200+ organisations with AML compliance, blockchain analytics and regulatory risk management.
To see wallet screening and transaction monitoring on your own flows before you file, book a demo with the Scorechain team.
No. The FIU announced that it would cancel the register data for the old licences on 1 July 2026, when the MiCA transition period ended. Since then, crypto-asset services in Estonia need an authorisation from Finantsinspektsioon or from another EEA supervisor. A firm still waiting for a decision must limit its activity until it arrives.
The application goes through the Finantsinspektsioon portal, with a EUR 3,000 processing fee. It is in Estonian, and supporting documents can be in English if the application says so. The file covers governance, internal controls, AML and counter-terrorist financing policies, ICT security, how client assets and funds are kept separate, and complaints handling. Custody, trading platforms, order execution, advice and transfer services each need extra documents. Since March 2026, Finantsinspektsioon has asked applicants to include a wind-down plan.
Use the Finantsinspektsioon register of supervised entities. It lists Estonia-based CASPs and, separately, cross-border CASPs authorised in other EEA countries. The register page read on 30 October 2026 listed one Estonia-based CASP, Lightspark Payments Europe AS, so check the live register before relying on any list.
Finantsinspektsioon expects the provider to protect clients and avoid unjustifiable financial harm. It must tell clients clearly and in good time how the service will end, the deadlines, and how to withdraw their assets or move them to an authorised provider. ESMA says offboarding can mean moving assets to an authorised CASP or to a self-hosted wallet.
Not a separate one. Credit institutions and some other regulated firms can offer crypto-asset services after notifying their home supervisor under MiCA Article 60, at least 40 working days before they start.
From wallet screening and KYT monitoring to deep-dive investigations, Scorechain gives you everything you need to stay compliant, secure, and audit-ready.
