Estonia CASP License: MiCA Regulation (EU Framework)

Estonia was one of the first European countries to enforce the MiCA regulation. As a trailblazer for crypto licensing, it was an expected development from a jurisdiction that made a reputation in the blockchain industry. By our lawyers’ assessment, Estonia still stands out as a noteworthy jurisdiction in the pool of European MiCA jurisdictions, especially for virtual currency service providers affected by the new regulatory changes.

The Estonian application of the regulation was done as early as June 2024, with the passing of the Market in Crypto-Assets Act, which serves as the legislative basis for the implementation of MiCA. Under the previous framework, Estonia licensed virtual asset service providers (VASPs), who are now transitioning to the new CASP license under MiCA.

The benefits of choosing Estonia for registering a MiCA-licensed Crypto Asset Services Provider (CASP)

Among all the European member states, Estonia stood out in the past decades for its liberal economy. Famous among entrepreneurs thanks to its 0% corporate income tax and for the high digitisation of its services, Estonia was also the first country to formulate a framework for crypto companies. The first Estonian crypto license in 2017 attracted such an amount of entrepreneurs and investments that a whole industry of corporate services providers was born as a consequence, to assist with the proper set-up of legal entities in Estonia and the conduct of crypto businesses.

To obtain a MiCA CASP license, it is mandatory to register a legal entity in Estonia. Under the Estonian Market in Crypto-Assets Act, the entity must operate as a private limited company (OÜ) or a public limited company (AS). Additionally, the company must appoint a management board consisting of at least two board members, with at least one being a resident in the EU and the place of effective management situated in Estonia. LegalBison, as an Estonian entity, has its roots in this story of successfully attracting industry trailblazers in the country.

Nowadays, Estonia surely benefits from the reputation of having incentivised entrepreneurs and crypto companies. The framework changed, but the 0% tax on undistributed profits remains, and the online infrastructures as well.

When MiCA came out, the Estonian authorities took the matter at hand pretty fast, and the country was the first to be able to enforce MiCA. It helped that the latest Estonian VASP framework was used as one of the bases of work to actually produce the MiCA regulation. As a consequence, existing Estonian VASPs benefit from the longest possible grandfathering period, of 18 months, allowing them to bring activities into compliance by 1 July 2026. This shows Estonia being simultaneously confident in its former framework and being on time with the new MiCA framework. A positive sign to crypto entrepreneurs willing to go for a MiCA license in a jurisdiction that has it figured out from day one.

How to apply for a CASP MiCA license in Estonia?

Applications for an Estonian CASP license are submitted through the Finantsinspektsioon Self-Service Portal. The FSA does not accept paper or email submissions for CASP applications; all documentation must be uploaded through the portal in the formats specified by FSA guidelines.

The statutory timeline operates in two stages. The FSA has 25 working days from receipt of the application to confirm completeness. If the application is complete, a further 40 working days begins for substantive assessment. The regulator may suspend the assessment clock once to request missing information. A final notification period of 5 working days follows a decision. In practice, accounting for preparation time, an end-to-end timeline from incorporation to license grant runs approximately 4 to 6 months for a well-prepared application.

DORA compliance is a mandatory component of the application dossier. The Digital Operational Resilience Act applies to all MiCA-authorized CASPs and requires applicants to submit technical documentation demonstrating ICT risk management frameworks, business continuity plans, incident reporting procedures, and third-party provider oversight policies. DORA compliance is not an ongoing obligation that can be addressed post-authorization; it is assessed as part of the FSA’s initial review.

The application file must also include a programme of operations, governance documentation, AML/CTF policies aligned with FATF standards, capital adequacy evidence, and personnel fitness-and-propriety assessments for board members and qualifying shareholders. LegalBison’s licensing team prepares and reviews all components of the dossier before submission.

Applicants intending to issue Asset-Referenced Tokens (ARTs) or E-Money Tokens (EMTs) are subject to additional white paper obligations under MiCA that sit alongside the CASP authorization process.

Issuers must notify the FSA at least 20 working days before the intended publication date of the white paper. The notification is not a passive filing; the FSA reviews the white paper for regulatory compliance before it may be published or distributed to the public. Failure to notify in advance, or publishing a white paper that does not meet MiCA’s content and format requirements, constitutes a regulatory breach.

White papers must be prepared in conformity with the technical standards published by the European Securities and Markets Authority (ESMA), including the use of XBRL reporting formats for structured data elements. These standards define the required disclosures across issuer identity, token structure, rights and obligations of holders, underlying assets (for ARTs), and redemption mechanisms.

CASP applicants who also plan to issue tokens should coordinate the white paper notification timeline with the CASP application process. The two tracks run in parallel but carry independent deadlines. LegalBison advises on both simultaneously to avoid sequencing delays.

National Competent Authority for MiCA enforcement in Estonia

The sole authority for granting CASP licenses in Estonia is the Estonian Financial Supervision and Resolution Authority (FSA, Finantsinspektsioon). The Financial Intelligence Unit (FIU), which previously handled virtual asset service provider registrations under the anti-money laundering framework, no longer has a licensing role under MiCA. All CASP applications are submitted to, assessed by, and authorized through the FSA.

The FSA is an independent public supervisory body that oversees banks, investment firms, payment institutions, e-money institutions, fund managers, crowdfunding platforms, and, as of July 2024, crypto-asset service providers. Its supervision mandate reflects the reclassification of crypto services from an AML-compliance matter to a financial-services authorization matter, consistent with the broader MiCA framework.

Applications are submitted through the Finantsinspektsioon Self-Service Portal. All documentation must be submitted in conformity with FSA formatting and completeness requirements before the statutory assessment clock begins.

Grandfathering right for existing VASP licensed companies in Estonia

Estonia’s corporate tax structure remains one of the most operationally favorable in the EU for crypto businesses. Revenue generated by an Estonian company is taxed at 0% as long as profits are reinvested rather than distributed. The 20% tax rate applies only at the point of dividend distribution, not on retained earnings.

A significant development for 2026 concerns Estonian resident users rather than the CASP itself. Under guidance issued by the Estonian Tax and Customs Board (ETCB) for the 2026 tax year, Estonian resident users can declare crypto trading losses for income tax purposes only if the platform they used is MiCA-authorized. Unlicensed platforms do not qualify. This creates a material competitive advantage for Estonian-authorized CASPs when acquiring retail users from the Estonian market and, by extension, creates a category distinction between licensed and unlicensed platforms that affects user incentives directly.

Founders and shareholders should confirm whether their country of fiscal residency has a double tax treaty with Estonia before structuring profit distributions. A tax advisor should assess the optimal approach for repatriating earnings from the Estonian entity to the beneficial owners’ jurisdictions.

Setting up a company for a cryptocurrency business in Estonia

Setting up an Estonian limited liability company (OÜ, osaühing) is fast and easy thanks to the digitisation of processes in Estonia. A lot of crypto entrepreneurs and others have been able to open their Estonian company digitally.

Done remotely, the incorporation process in Estonia still requires the notarization or Apostille of the identity documents of the board members. Once this administrative requirement is fulfilled, the process is streamlined. The applicant shall decide on a company name and provide contact details. However, it is important to note that under the Market in Crypto-Assets Act, the company must maintain a registered office in Estonia, and MiCA requires the place of effective management to be in the EU. The set-up of a compliant crypto asset service provider (CASP) in Estonia requires the addition of legal services, which we offer in packaged offers (see below).

Opening a corporate bank account is a mandatory step for the legal and operational setup of a crypto business in Estonia, particularly to meet safeguarding requirements for client funds and minimum capital requirements.

The KrMS establishes three capital tiers, replacing the flat requirements that applied under the previous virtual asset framework. The applicable tier depends on the services the applicant intends to provide.

• Class 1 – EUR 50,000 minimum. Covers advisory services on crypto-assets, portfolio management of crypto-assets, execution of orders on behalf of clients, and transmission of orders. This is the lowest-intensity authorization class;
• Class 2 – EUR 125,000 minimum. Covers exchange services (crypto-asset to fiat and crypto-asset to crypto-asset) and custody and administration of crypto-assets on behalf of clients. Most exchange-focused businesses fall within this class;
• Class 3 – EUR 150,000 minimum. Covers the operation of a trading platform for crypto-assets. This is the most demanding authorization class and carries the highest capital obligation.

These thresholds are sourced from MiCA Regulation (EU) 2023/1114, Article 67, as transposed into Estonian law via the KrMS. The share capital must be fully paid up and deposited prior to application submission. Applicants should note that these figures represent regulatory minimums; the FSA may assess whether capital levels are adequate in light of the projected operational scale of the business.

The cost of an Estonian CASP license in total, covering legal preparation, corporate setup, and capital requirements, typically falls in the low six figures. A preliminary assessment with LegalBison clarifies which class applies to a given business model before any capital commitment is made.

Banking for a CASP licensed company in Estonia

A MiCA license is a big help when it comes to opening a bank account. As the new regulation imposes very strong compliance requirements on CASPs, it also raises the level of trust of banking institutions in licensed entities. Licensed CASPs in Estonia are now regulated similarly to financial institutions, which enhances their trust and legitimacy in the market. Consequently, the regulation aims to facilitate access to banking services for crypto-asset service providers. Subsequently, banks in Estonia that used to be friendly with VASPs at some point in the past are now likely to consider working with crypto companies again.

The process of opening a bank account for a CASP in Estonia is the same as it used to be for VASPs in the past. However, the successful application for a CASP license will definitely help, as it is proof that the company applies a strong level of due diligence and is actively preventing financial crime.

Taxation for cryptocurrency companies in Estonia

Estonia has one of the most advantageous corporate tax rates among non-tax havens and so-called offshore jurisdictions. Revenue generated by Estonian companies is generally not taxed as long as it is not distributed.

Beforehand, the participants of an Estonian crypto licensed company should make sure that their country of fiscal residency has a double tax treaty with Estonia. A tax lawyer shall better advise them on how to properly transfer generated wealth to their personal accounts.

The shift from the old virtual asset regime to MiCA CASP authorization represents a structural change in how Estonia regulates crypto services, not a rebranding exercise. The table below summarizes the key differences.