How to Get a Crypto License in Estonia: Step-by-Step for 2026

Estonia has long been a leading jurisdiction for crypto licensing in Europe. As of 2026, the country operates under the EU's Markets in Crypto-Assets (MiCA) framework, which harmonises rules across member states. If you are wondering how to get a crypto license in Estonia, this guide provides a clear, step-by-step roadmap for 2026.

Whether you are launching a crypto exchange, wallet service, or custodial platform, Estonia offers a regulated path with a flat corporate tax rate and a digital-first environment. Consulting24 has helped over 500 clients obtain crypto licenses, delivering directly in Estonia, Lithuania, and Panama, and advising on other jurisdictions. Read on for the full process.

What Is the Estonia Crypto License?

The Estonia crypto license is a regulatory authorisation under the Virtual Asset Service Provider (VASP) regime, now aligned with MiCA. It allows companies to offer crypto-to-fiat exchange, crypto-to-crypto exchange, wallet custody, and transfer services. The license is issued by the Financial Intelligence Unit (FIU) and, under MiCA, by the Financial Supervision Authority (FSA) for certain activities.

Estonia's e-Residency program makes it possible to apply remotely, but you must have a physical presence in Estonia (a registered office and a local contact). The license is valid across the EU under the MiCA passport. For example, a company licensed in Estonia can serve customers in Germany, France, or Spain without needing additional local authorisation, provided it notifies the host regulator. This passporting right is a key advantage over non-EU jurisdictions like Panama, which does not offer EU-wide recognition.

Under MiCA, the license is formally called a Crypto-Asset Service Provider (CASP) authorization. It covers both AML/CTF supervision and prudential requirements. The dual-regulator system means you must satisfy the FIU on AML grounds and the FSA on capital, governance, and consumer protection. This structure is similar to Lithuania but with a slightly different split of responsibilities. Estonia's digital infrastructure, including e-Residency and X-Road, streamlines many administrative steps, making it one of the most efficient EU jurisdictions for licensing.

Who Needs an Estonia Crypto License?

Any business that provides virtual asset services to customers in Estonia or the EU generally needs a license. This includes:

• Cryptocurrency exchanges (centralised and decentralised if offering custody)
• Wallet providers (custodial)
• Payment processors using crypto
• Brokers and dealers in virtual assets
• Any entity that transfers virtual assets on behalf of clients

If you are a startup, a fintech expanding into crypto, or an established exchange seeking EU passporting, Estonia is a strong choice. For a comparison with other options, see our jurisdictions page. Even if your target market is outside the EU, Estonia can serve as a regulatory anchor for credibility. For example, a crypto exchange based in Asia may choose Estonia to demonstrate compliance with EU standards, which can help attract European investors and partners.

Entities that do not need a license include those offering non-custodial wallets (where the provider never holds private keys), pure software developers, and miners. However, if you offer any service that involves holding or transferring client assets, you likely fall under the VASP definition. Always confirm with a compliance expert, as the line can be blurry. For instance, a staking service that takes custody of tokens would require a license, while a non-custodial staking pool may not.

License Type and Regulator

The license is a Virtual Asset Service Provider (VASP) license. Under MiCA, it is categorised as a CASP (Crypto-Asset Service Provider). The primary regulator is the Financial Intelligence Unit (FIU) for AML/CTF supervision, while the Financial Supervision Authority (FSA) oversees prudential requirements and market conduct under MiCA.

Key points:

• Single license for all crypto services
• Passportable to other EU member states
• Subject to ongoing AML and reporting obligations
• The FIU conducts on-site inspections and can impose fines for non-compliance

The dual-regulator structure means you must satisfy both AML and prudential standards. The FIU focuses on customer due diligence, transaction monitoring, and suspicious activity reporting. The FSA focuses on capital adequacy, governance, and consumer protection. This is similar to Lithuania but with a slightly different split of responsibilities. In practice, you will submit one application that is reviewed by both bodies. The FIU typically takes the lead on initial assessment, while the FSA may conduct additional checks on financial soundness.

Under MiCA, the FSA also has the power to approve white papers for asset-referenced tokens and e-money tokens. If you plan to issue such tokens, you will need a separate approval process. The FSA can also impose sanctions, including fines up to 5% of annual turnover or EUR 5 million, whichever is higher. This underscores the importance of strong compliance from day one.

Cost and Timeline

Exact pricing depends on your business model. Consulting24 offers a fixed fee for full support; contact us for a quote. The timeline can be shorter if you already have a company and AML documentation ready. Some clients have obtained approval in as little as 3 months, while complex cases with multiple service types may take up to 6 months. The state fee is non-refundable, so it is crucial to submit a complete application.

For comparison, Panama offers a flat fee of EUR 6,000 for the license and a faster timeline of 2-4 months, but without EU passporting. Lithuania typically costs EUR 5,000-10,000 and takes 3-4 months, but requires a higher capital of EUR 125,000. Estonia's cost is mid-range, but its tax benefits often offset the higher upfront expense.

Capital Requirement

Under MiCA, the minimum capital requirement for CASPs in Estonia is tiered by service type:

• EUR 50,000 for exchange and wallet services (basic)
• EUR 125,000 for custody of client assets
• EUR 150,000 for dealing on own account or underwriting

These amounts must be fully paid up and maintained. The capital must be in liquid assets (cash or equivalents) and cannot be borrowed. For comparison, Panama has no minimum capital requirement, making it a lower-cost alternative. However, the capital in Estonia serves as a buffer for operational risks and is a sign of seriousness to regulators and partners.

If your business model includes multiple service types, you must meet the highest applicable tier. For example, if you offer both exchange and custody services, you need EUR 125,000. The capital can be held in a bank account or in highly liquid securities, but it must be unencumbered. You must also maintain the capital at all times; if it falls below the threshold, you must notify the FSA immediately. Some companies choose to hold excess capital to demonstrate financial strength, which can help with banking relationships.

Tax Treatment

Estonia has a unique corporate tax system: 0% tax on retained profits, and 20% (or 14% for regular dividends) on distributed profits. This applies to crypto companies as well. VAT is generally 20%, but crypto transactions may be exempt depending on the service (e.g., exchange of crypto for fiat is VAT-exempt in many cases).

Personal income tax for employees is 20%. There are no withholding taxes on dividends paid to non-residents. This makes Estonia tax-efficient for growth-stage companies that reinvest profits. For example, a crypto exchange that earns EUR 1 million in profit and reinvests it pays 0% corporate tax. Only when dividends are distributed does tax apply. This is more favourable than Lithuania's 15% corporate tax or the 12.5% in some other EU countries.

However, the tax treatment of crypto-to-crypto trades can be complex. The Estonian Tax and Customs Board generally treats crypto as a means of payment, so gains from crypto-to-crypto exchanges may be taxable as business income. It is advisable to consult a tax advisor for your specific activities. Estonia also has a thin capitalisation rule that limits interest deductions, but this rarely affects crypto startups. For a detailed comparison, see our Estonia vs Lithuania page.

Allowed Activities

A VASP license in Estonia covers:

• Exchange between virtual assets and fiat currencies
• Exchange between one or more virtual assets
• Transfer of virtual assets
• Custody and administration of virtual assets
• Participation in and provision of financial services related to an issuer's offer or sale of virtual assets

Activities not covered: operating a crypto mining pool, developing software, or providing non-custodial wallets (unless they involve transfer services). If you plan to offer staking or lending, these may require additional authorisation under MiCA or national laws. Always check with a compliance expert.

Under MiCA, the definition of virtual assets is broad and includes all crypto-assets except those that qualify as financial instruments (e.g., security tokens) or e-money. If your token is deemed a security, you may need a MiFID license instead. The FSA can provide guidance on classification. For example, a stablecoin pegged to a fiat currency may be considered e-money and require an e-money license. Estonia's FIU has a pre-screening service where you can submit your business model for a preliminary opinion on whether a license is needed.

Step-by-Step Process

1. Pre-incorporation: Choose a company name, prepare documents (business plan, AML policy, risk assessment). Engage a local compliance officer. The business plan should detail your target market, revenue model, and risk management framework.
2. Company incorporation: Register a private limited company (OÜ) with a minimum share capital of EUR 2,500 (or higher if required by capital tier). Obtain an e-Residency card if applying remotely. The registration can be done online via the e-Business Register.
3. Open a bank account: In Estonia or another EU country. Many banks require a license before opening, so a payment institution account may be needed initially. LHV Bank is known to be crypto-friendly. You may also consider EMI licenses for fiat services.
4. Prepare the application: Draft AML procedures, internal controls, business continuity plan, and capital proof. Engage a local compliance officer. The AML policy must include customer due diligence procedures, transaction monitoring thresholds, and suspicious activity reporting protocols.
5. Submit to FIU: File the application via the FIU portal, pay the state fee, and provide all supporting documents. The FIU may request additional information or conduct an interview. Ensure all documents are in English or Estonian.
6. Review and interview: Typical review time is 1-3 months. Be prepared to explain your business model and AML controls. The FIU may ask for clarifications on your risk assessment or source of funds.
7. Approval and ongoing compliance: Once approved, you must submit annual reports, maintain AML training, and undergo periodic audits. The FSA may also conduct on-site inspections. You must also register with the FSA for prudential supervision.

For a detailed breakdown, see our application process page. Consulting24 can handle the entire process, from company formation to license approval, with a fixed fee. Contact us for a consultation.

Banking and Payments

Opening a bank account for a crypto company in Estonia can be challenging. Traditional banks like Swedbank or SEB often require a license and a track record. Alternative options include:

• Payment institutions (e.g., Monese, PaySera)
• EMI licenses (if you also offer fiat services)
• Specialised crypto-friendly banks (e.g., LHV Bank in Estonia)
• Neobanks like Revolut Business (though they may restrict crypto-related transactions)

Consulting24 can introduce you to banking partners. For a comparison, see Estonia vs Lithuania. In practice, many clients use a multi-bank strategy: one account for operational fiat and another for crypto settlements. Some banks require a minimum deposit or monthly fees. For example, LHV Bank may require a EUR 10,000 minimum balance for corporate accounts. It is also possible to use a payment institution that offers both fiat and crypto accounts, such as BVNK or Clear Junction. These providers often have APIs for automated settlement.

If you plan to serve EU customers, you will need a SEPA-compliant account. Estonia's e-Residency allows you to open accounts remotely, but some banks still require a physical visit. Consulting24 can facilitate introductions to banks that accept crypto clients. We also advise on payment processing for crypto-to-fiat conversions, which may require a separate merchant account.

Benefits of the Estonia Crypto License

• EU passport: Serve clients across the EU with one license.
• Low corporate tax: 0% on retained profits.
• Digital government: e-Residency allows remote management.
• Fast process: Typically 3-6 months.
• Reputation: Estonia is a trusted EU jurisdiction with a transparent regulatory framework.
• Access to EU talent: You can hire remotely within the EU without work permits.

These benefits make Estonia a top choice for EU-focused crypto businesses. However, if your target market is outside the EU or you need a lower-cost entry, Panama may be more suitable. Estonia's e-Residency also allows you to manage the company entirely online, from annual reports to tax filings. The digital identity system (e-ID) enables secure signing of documents and access to government portals. This reduces administrative overhead significantly compared to other EU jurisdictions.

Additionally, Estonia has a supportive startup ecosystem with incubators and accelerators focused on fintech. The government offers grants for research and development, which can be beneficial for crypto startups building proprietary technology. The Tallinn Stock Exchange also lists several crypto-related companies, providing potential exit opportunities.

Compliance and Trust

Compliance is critical. You must appoint a local AML officer, conduct ongoing monitoring, and file suspicious transaction reports. Under MiCA, additional requirements include safeguarding client assets and maintaining insurance (e.g., professional indemnity or cyber insurance). The FIU and FSA have the power to impose fines, revoke licenses, or even refer cases for criminal prosecution.

Consulting24 provides ongoing compliance support, including AML training, transaction monitoring tools, and audit preparation. This guide is for general guidance, not legal advice. Always consult a qualified lawyer for your specific situation. Key compliance tasks include:

• Customer due diligence (CDD) for all clients, including enhanced due diligence for high-risk jurisdictions.
• Transaction monitoring for suspicious activity, with thresholds set by your risk assessment.
• Annual AML audit by an external auditor.
• Reporting to the FIU on a quarterly basis (or as required).
• Maintaining records for at least 5 years after the business relationship ends.

Failure to comply can result in fines of up to EUR 5 million or 5% of annual turnover. In 2025, the FIU fined several VASPs for inadequate AML controls, highlighting the importance of a strong compliance framework. Consulting24 can help you implement a compliance program that meets both Estonian and MiCA standards.

Common Mistakes

• Underestimating capital: Ensure you have the required capital ready before applying. Some applicants try to use borrowed funds, which is not allowed. The capital must be in the company's bank account and fully paid up.
• Poor AML documentation: The FIU scrutinises AML policies; use templates from a compliance expert. Generic policies from the internet are often rejected. Your AML policy must be tailored to your business model and risk profile.
• No local presence: You need a registered office and a local contact person. Virtual offices may not satisfy the requirement. The local contact must be an employee or director, not just a service provider.
• Ignoring MiCA: The regime is fully in force; follow the new rules. Some older guides still reference the old VASP regime. Ensure your application complies with MiCA's capital, governance, and consumer protection requirements.
• Choosing the wrong jurisdiction: Compare with Panama if you want a lower-cost option, or with Lithuania if you prefer a faster timeline. Also consider Czech Republic or Poland for alternative EU bases.
• Delaying bank account opening: Start the bank account process early, as it can take weeks. Some banks require the license to be approved first, creating a chicken-and-egg problem. A payment institution account can serve as a bridge.

By avoiding these pitfalls, you can streamline the application process and reduce the risk of rejection. Consulting24 has seen many applicants fail due to these issues; we help you prepare a complete and compliant application.

Alternatives and Comparison

Estonia is not the only option. Here is how it compares:

For a full comparison, see our jurisdictions page. Each jurisdiction has trade-offs. Estonia offers the best tax treatment for reinvesting profits, while Panama is the cheapest upfront. Lithuania has a faster timeline but higher capital. If you need EU passporting, Estonia or Lithuania are the only options among these. For non-EU markets, Panama is a strong contender. Consulting24 can help you choose the right jurisdiction based on your business model and target market.

For example, a startup with limited capital may prefer Panama, while an established exchange seeking EU clients should choose Estonia. If you already have a company in Lithuania, you can apply for a license there with our support. Contact us for a personalised recommendation.

Official sources

• Estonian Financial Supervision Authority (FSA)

Related jurisdictions

Mardo Soo · CEO, Consulting24Personally advises on jurisdiction selection. 500+ crypto licenses across Estonia, Lithuania & Panama. LinkedIn →

General guidance, not legal advice. Rules and fees evolve — we confirm current requirements for your case.