Crypto Company Substance Requirements: Directors, Office, MLRO
Crypto company substance requirements are the minimum operational and physical presence criteria that regulators expect from licensed crypto businesses. In 2026, with MiCA fully in force across the EU and global regulators tightening oversight, substance is no longer optional. Regulators want to see real people managing real operations from a real location. This page explains what you need: directors, a physical office, and a qualified MLRO. We cover the rules for Estonia, Lithuania, Panama, and other key jurisdictions.
At Consulting24, we have helped over 500 crypto firms obtain licenses. We deliver directly in Estonia, Lithuania, and Panama, and advise on all other jurisdictions. Whether you are starting a new venture or restructuring an existing one, understanding substance requirements is the first step to a compliant and sustainable crypto business.
What Are Crypto Company Substance Requirements?
Crypto company substance requirements refer to the tangible and intangible elements that prove your business is not a shell or mailbox company. Regulators want to see that your company has a real physical office, employs local or suitably qualified directors, and has a dedicated Money Laundering Reporting Officer (MLRO) who is actively involved in compliance. These requirements are designed to prevent money laundering, terrorist financing, and other financial crimes.
Substance is assessed through several factors: the location of key decision-making, the presence of employees, the use of local bank accounts, and the frequency of board meetings held in the jurisdiction. For example, Lithuania's regulator requires that at least one director is a resident of the EEA, while Estonia expects the management board to be accessible and involved in daily operations. Panama, on the other hand, has more flexible substance rules but still expects a registered agent and a physical address.
Understanding these nuances is critical. Failure to meet substance requirements can lead to license revocation, fines, or even criminal liability. Consulting24 helps you design a substance structure that satisfies the regulator without unnecessary overhead.
Who Needs to Comply with Substance Requirements?
Any company applying for or holding a crypto license must demonstrate substance. This includes:
- Virtual asset service providers (VASPs) in the EU under MiCA
- Exchange platforms, wallet providers, and custodians
- Companies offering crypto-to-fiat conversion services
- Decentralized finance (DeFi) projects that are transitioning to regulated models
- Any entity that handles customer funds or facilitates transfers
Even if you operate remotely, the regulator expects a local presence. For example, a company licensed in Lithuania must have a registered office in the country, a local director (or at least EEA-resident), and an MLRO who is either an employee or a contracted service provider. Panama does not require local directors but does require a resident agent and a physical address. The key is to match your business model with the jurisdiction's substance expectations.
If you are unsure which jurisdiction suits your needs, explore our jurisdictions page for a comparison of substance rules across countries.
License Type & Regulator
Each jurisdiction has its own license type and regulatory body. Under MiCA, EU member states issue a CASP (Crypto Asset Service Provider) license, which is passportable across the EU. The national regulator (e.g., Bank of Lithuania, Estonian Financial Supervision Authority) oversees compliance with substance rules.
In Lithuania, the license is called a “Virtual Asset Service Provider” license, regulated by the Bank of Lithuania and the Financial Crime Investigation Service. Estonia issues a “Virtual Asset Service Provider” license under the Financial Intelligence Unit. Panama does not have a specific crypto license; instead, companies operate under a general business license with a registered agent, regulated by the Superintendencia de Bancos de Panama for AML purposes.
For a detailed breakdown of license types and regulators, see our exchange license page.
Cost & Timeline
| Jurisdiction | License Cost (approx.) | Setup Cost (incl. substance) | Timeline |
|---|---|---|---|
| Lithuania | EUR 1,500 - 3,500 | EUR 15,000 - 25,000 | 3-6 months |
| Estonia | EUR 3,300 - 10,000 | EUR 12,000 - 20,000 | 2-4 months |
| Panama | EUR 6,000 flat | EUR 6,000 (all-in) | 2-4 weeks |
| Other EU (MiCA) | EUR 50,000 - 150,000 (capital) | EUR 20,000 - 50,000 | 6-12 months |
Costs vary based on the complexity of your business model and the substance requirements. Panama offers the fastest and most cost-effective route, but it may not be suitable for all business types. Consulting24 provides transparent pricing and a fixed fee for Panama company setup at EUR 6,000. For exact pricing tailored to your situation, contact us for a consultation.
Capital Requirement
Capital requirements are a key part of substance. Under MiCA, EU CASP licenses require minimum capital based on the services offered: EUR 50,000 for simple custody/wallet services, EUR 125,000 for exchange services, and EUR 150,000 for services involving both custody and exchange. This capital must be maintained and can be in cash or liquid assets.
Lithuania and Estonia, as EU members, apply these MiCA tiers. However, Estonia has a lower minimum of EUR 12,000 for certain license types (pre-MiCA transitional), but as of 2026, new applicants must meet MiCA levels. Panama has no minimum capital requirement for a general business license, but the company must show it has sufficient funds to operate.
Capital is not just a number on paper. Regulators expect the capital to be held in a local bank account and used for operational expenses. Failing to maintain capital can trigger a review of your substance.
Tax Treatment
Tax treatment varies significantly. In Lithuania, corporate income tax is 15% (or 5% for small companies under certain conditions). Estonia has a unique 0% corporate tax on retained profits (20% on distributions). Panama taxes only income sourced within Panama (territorial tax system), with rates from 0% to 25% depending on activity. Crypto gains may be exempt if sourced abroad.
Substance requirements affect tax residency. If your company has a physical office and local directors, it may become a tax resident in that jurisdiction. This can be advantageous if the jurisdiction has low or no tax on crypto gains. However, you must also consider your personal tax situation. Consulting24 advises on tax-efficient structures that align with substance rules.
For more on tax implications, see our cost page.
Allowed Activities
With a crypto license and proper substance, you can conduct a range of activities: exchanging crypto for fiat, exchanging crypto for crypto, operating a crypto wallet, providing custody services, running a crypto ATM network, issuing stablecoins (subject to additional rules), and offering advisory services. Under MiCA, the license covers all EU markets via passporting.
Panama allows any legal business activity, including crypto services, but does not have a specific license. This means you can operate a crypto exchange or wallet without a dedicated license, but you must comply with AML laws and have a registered agent. However, banks may be hesitant to work with unlicensed crypto firms, so substance and a clear license are often necessary for banking.
Each jurisdiction has a list of prohibited activities. For example, Estonia does not allow anonymous transactions. Lithuania restricts certain high-risk tokens. Always check the specific rules for your target jurisdiction.
Step-by-Step Process
- Choose a jurisdiction based on your business model, substance requirements, and budget. Consult with experts like Consulting24.
- Incorporate a company with a local registered office and, if required, a local director or shareholder.
- Appoint an MLRO who is qualified and available. This can be an employee or an external service provider.
- Prepare documentation: business plan, AML policies, risk assessment, financial projections, and proof of capital.
- Submit the application to the regulator. This may include background checks on directors and MLRO.
- Undergo a site visit or interview (common in Lithuania and Estonia). Regulators may inspect your office and meet your team.
- Receive the license and begin operations. Maintain ongoing compliance with reporting and audits.
The process can take from 2 weeks (Panama) to 12 months (some EU countries). Consulting24 manages the entire process, from company setup to license application. See our application process page for details.
Banking & Payments
Banking is often the hardest part for crypto companies. Many banks are reluctant to open accounts for crypto businesses due to perceived risk. Substance helps: having a physical office, local directors, and a clear AML framework makes banks more comfortable. In Lithuania, several banks (e.g., Revolut, Swedbank) accept crypto firms with a license. Estonia has fewer options, but payment processors and EMI licenses can help.
Panama offers a more open banking environment, but international wire transfers can be slow. Many Panama-based crypto firms use US-based correspondent banks or crypto-friendly EMIs. Consulting24 can introduce you to banking partners that understand crypto.
For a list of crypto-friendly banks and payment providers, visit our company setup page.
Benefits of Meeting Substance Requirements
Meeting substance requirements is not just a regulatory burden; it brings real benefits:
- Banking access: Banks are more likely to open accounts for companies with real presence.
- Investor confidence: Investors and partners see substance as a sign of professionalism and longevity.
- Regulatory trust: Regulators are less likely to audit or penalize compliant firms.
- Tax efficiency: Proper substance can help establish tax residency in a low-tax jurisdiction.
- Passporting rights: Under MiCA, a license in one EU country allows operations across the EU.
Substance also protects you from being classified as a “high-risk” jurisdiction, which can affect your ability to transact with banks and partners. Investing in substance is an investment in your company's future.
Compliance & Trust
Compliance is the backbone of substance. You must have written AML/CFT policies, conduct customer due diligence (CDD), and report suspicious transactions. The MLRO is responsible for overseeing compliance. Regulators expect the MLRO to be actively involved, not just a name on paper. In Lithuania, the MLRO must be a resident of the EEA and have relevant experience.
Trust is built through transparency. Publish your license number, your physical address, and your MLRO's credentials on your website. This helps customers and partners verify your legitimacy. Consulting24 provides ongoing compliance support to ensure you stay on top of regulatory changes.
This is general guidance, not legal advice. Always consult with a qualified lawyer for your specific situation.
Common Mistakes
- Using a virtual office: Regulators require a physical office where you actually work. A virtual address is not sufficient.
- Appointing a “paper” MLRO: The MLRO must be actively involved and reachable. Regulators may interview the MLRO.
- Ignoring local director requirements: Some jurisdictions require a local director (e.g., Lithuania). Using a nominee director without real authority can be seen as lack of substance.
- Not maintaining capital: Capital must be kept in the company and used for operations. Withdrawing capital can trigger a review.
- Failing to update substance: If your office moves or your MLRO leaves, you must update the regulator promptly.
Avoiding these mistakes saves time and money. Consulting24's experience with 500+ licenses helps you navigate these pitfalls.
Alternatives & Comparison
When comparing jurisdictions, consider substance requirements alongside cost, timeline, and business fit. Below is a comparison of Panama with two other popular jurisdictions:
| Factor | Panama | Lithuania | Estonia |
|---|---|---|---|
| License Cost | EUR 6,000 flat | EUR 1,500-3,500 + setup | EUR 3,300-10,000 + setup |
| Capital Requirement | None | EUR 50,000+ | EUR 50,000+ |
| Physical Office Required | Registered address only | Yes, physical office | Yes, physical office |
| Local Director Required | No (resident agent) | Yes (EEA resident) | No, but management board must be accessible |
| MLRO Required | Yes, but can be external | Yes, must be EEA resident | Yes, must be accessible |
| Tax on Crypto | Territorial (0% if sourced abroad) | 15% corporate tax | 0% on retained profits |
| Banking Access | Moderate | Good | Moderate |
| Timeline | 2-4 weeks | 3-6 months | 2-4 months |
Panama is ideal for startups wanting speed and low cost, but it may not offer the same regulatory clarity as an EU license. Lithuania and Estonia provide EU passporting but come with higher substance demands. For a detailed comparison, see our vs Lithuania page.
How Consulting24 Can Help
Consulting24 has obtained over 500 crypto licenses worldwide. We deliver directly in Estonia, Lithuania, and Panama, and advise on all other jurisdictions. Our services include company incorporation, license application, MLRO placement, office setup, and ongoing compliance. We tailor substance solutions to your business model.
Our Panama package is a flat EUR 6,000, covering company registration, registered agent, and initial compliance setup. For other jurisdictions, we provide a full scope of work with transparent pricing. Contact us to discuss your project.
Ready to start? Book a consultation with our experts on WhatsApp. We will help you choose the right jurisdiction and set up your crypto company with proper substance.
Frequently asked questions
What is the minimum substance requirement for a crypto license in Lithuania?
Lithuania requires a physical office, at least one director who is a resident of the EEA, and a qualified MLRO. The company must also maintain minimum capital of EUR 50,000 (or higher depending on services) and hold board meetings locally.
Can I use a virtual office for my crypto company?
No. Most regulators, especially under MiCA, require a physical office where you conduct business. A virtual office or PO box is not considered sufficient substance and may lead to license rejection or revocation.
Does Panama require a local director for a crypto company?
Panama does not require a local director, but you must have a resident agent (a local lawyer or firm) and a registered office address. The resident agent handles official communications but does not manage the company.
What qualifications does an MLRO need?
An MLRO should have knowledge of AML regulations, experience in compliance, and be able to dedicate time to the role. Some jurisdictions require the MLRO to be a local resident or EEA resident. Certifications like CAMS are beneficial.
How long does it take to meet substance requirements?
Setting up substance (office, director, MLRO) can take 2-4 weeks in Panama, and 1-3 months in EU jurisdictions, depending on availability of local directors and office space. The license application process adds additional time.
Is there a minimum capital requirement for a crypto license in Panama?
No, Panama does not have a statutory minimum capital for a general business license. However, you must demonstrate that you have sufficient funds to operate your business. The company's capital is declared in the incorporation documents.
Can I outsource the MLRO role?
Yes, many jurisdictions allow outsourcing the MLRO to a qualified third party, as long as the MLRO is independent and has direct access to senior management. The regulator must be informed and the MLRO must be available for inspections.
What happens if I fail to maintain substance requirements?
Regulators can suspend or revoke your license, impose fines, or even pursue criminal charges for non-compliance. Your company may also be blacklisted by banks and partners, making operations impossible.
Do I need a physical office if I operate a DeFi protocol?
If your DeFi protocol is structured as a company with a license, yes. Regulators look at the legal entity, not just the technology. Even if operations are automated, the company must have substance. Some jurisdictions offer lighter requirements for DeFi, but this is evolving.
Can Consulting24 help me find a local director or MLRO?
Yes, Consulting24 can connect you with trusted local directors and MLRO service providers in the jurisdictions we serve. We ensure they meet regulatory requirements and are actively engaged in your business.
Official sources
Related jurisdictions
Talk to a crypto-licensing expert
500+ licenses across Estonia, Lithuania, Panama and beyond. Tell us your model and we'll map the right route — honestly.
💬 Talk to an expertFree consultationGeneral guidance, not legal advice. Rules and fees evolve — we confirm current requirements for your case.