Crypto License in Lithuania

Existing VASP operators registered before 30 December 2024 benefited from transitional provisions permitting continued operations until 31 July 2025, provided a complete CASP application was submitted to the Bank of Lithuania before that deadline.

MiCA establishes a clearly defined regulatory perimeter under Article 3. The following entities require CASP authorization from the Bank of Lithuania before commencing operations in Lithuania.

In scope (authorization required):

• Centralized cryptocurrency exchanges (CEX) and DEX platforms where developers or operators retain the ability to modify smart contracts or manage key protocol functions;
• Exchange service providers facilitating crypto-to-crypto and crypto-to-fiat conversions;
• Custodial wallet operators providing storage services with encrypted private keys on behalf of clients;
• Platforms engaged in the placement and marketing of crypto-assets to third parties;
• Entities receiving and transmitting client orders for crypto-asset transactions;
• Portfolio management services handling discretionary crypto-asset allocation for clients;
• Advisory firms providing recommendations on crypto-asset acquisitions or disposals.

Out of scope (no authorization required):

• Self-custody solutions where users maintain exclusive control over private keys
• Fully decentralized protocols (DeFi) operating without identifiable central operators capable of protocol modification
• Technical infrastructure providers delivering hardware, software, or node services without direct access to client assets

Determining whether a business model triggers licensing obligations requires careful analysis. Operational structures frequently blur the distinction between custodial and non-custodial arrangements, and ostensibly decentralized protocols can retain centralized control elements that bring them within the MiCA perimeter.

The Regulators

The Bank of Lithuania (BoL) acts as the single licensing window. It reviews applications, grants authorizations, and conducts ongoing prudential supervision. The Financial Crime Investigation Service (FCIS) operates independently, monitoring AML/CTF compliance, conducting audits, and reviewing transaction data across the licensed sector.

Key Personnel Required

The company must appoint a dedicated AML Compliance Officer who is a permanent tax resident of Lithuania. This requirement is absolute. No exemptions exist. The board of directors must demonstrate an impeccable track record and at least three years of management experience in crypto or financial services. These personnel requirements are verified during the application review process.

MiCA structures CASP authorization across three classes based on service scope and risk profile. Each class sets a minimum fully paid-up share capital requirement. Capital may be denominated in qualifying crypto-assets, provided valuation is certified by a sworn appraiser (prisiekęs vertintojas).

Class 1 (EUR 50,000 minimum capital) covers advisory-focused and order-routing businesses. This class applies to entities providing investment advice on crypto-assets, reception and transmission of orders, portfolio management, and transfer services on behalf of clients.

Class 2 (EUR 125,000 minimum capital) is the standard authorization for businesses offering crypto exchange and custodial wallet services. In addition to all Class 1 activities, it covers custody and administration of client crypto-assets and exchange between fiat and crypto or between crypto instruments.

Class 3 (EUR 150,000 minimum capital) encompasses all Class 1 and 2 services and adds the operation of a trading platform. This is the most comprehensive class and carries the most extensive compliance obligations. Businesses offering full trading platform functionality alongside exchange and custody services require Class 3 authorization.

A CASP license from the Bank of Lithuania is a passport to the entire European single market. One authorization grants the right to provide licensed crypto-asset services across all 27 EU member states and the European Economic Area without obtaining additional national permits from each country.

Lithuania operates as a recognized fintech and digital-asset hub within the EU. The Bank of Lithuania has established a reputation for structured, transparent licensing that gives applicants clear criteria before submission. That predictability, combined with full EU market access, makes Lithuania one of the primary destinations for crypto businesses seeking European regulatory authorization. A company licensed here can target clients in Germany, France, the Netherlands, or any other EU market from day one, without additional regulatory filings in those jurisdictions.

Clear regulatory environment. Lithuania integrated MiCA standards ahead of the January 2026 enforcement deadline. Applicants know what the Bank of Lithuania requires before submitting, reducing application risk compared to jurisdictions still developing their MiCA implementation rules.

EU passporting rights. A single CASP authorization grants access to serve clients across all 27 EU member states, a combined consumer base exceeding 450 million individuals, without requiring separate national licenses.

Competitive review timelines. CASP license applications typically undergo assessment within 3 to 6 months, subject to documentation completeness and the regulator’s prevailing caseload.

Favorable tax environment. The standard Corporate Income Tax rate is 16%. Small enterprises with fewer than 10 employees and annual revenue below EUR 300,000 benefit from a 0% rate in their first fiscal year, transitioning to 6% in subsequent periods. These reduced rates apply only to qualifying companies meeting both the employee and revenue thresholds. Cryptocurrency exchange services are exempt from VAT under European Court of Justice jurisprudence. Dividend distributions attract a 15% withholding tax. Lithuania is an OECD member with an extensive network of double taxation treaties, offering structuring advantages for international crypto groups establishing their EU operational hub.

Fintech ecosystem. Vilnius has emerged as a prominent European fintech hub, hosting digital asset businesses, payment institutions, and EMIs. That concentration creates practical synergies for new market entrants, particularly around banking infrastructure and talent.

Streamlined incorporation. UAB formation completes within approximately two weeks. The entire process from incorporation through license application submission can be conducted remotely via the LBIS e-portal.

Accessible banking infrastructure. Lithuania hosts a developed network of EMIs and fintech payment providers that specialize in onboarding crypto companies. EMI accounts provide access to SEPA payment rails, a practical requirement for EU-facing crypto businesses.

100% foreign ownership. Foreign nationals can own 100% of a Lithuanian UAB with no local shareholder requirement. This provides founders full control from incorporation, with the flexibility to bring in local management for substance compliance through separate employment arrangements.

Regulatory experience. The Bank of Lithuania has supervised crypto-asset operators for years, having registered hundreds of virtual currency companies under the previous VASP framework. That institutional experience translates into a structured application review process.

The total cost of obtaining a crypto license in Lithuania depends on the CASP class and the applicant’s starting position. The aggregate launch budget for establishing a fully licensed CASP operation in Lithuania typically runs from EUR 70,000 to EUR 200,000 all-in, covering mandatory share capital, professional fees for company formation, compliance documentation, local substance arrangements, and regulatory representation throughout the review.

Professional fee scope varies by class: Class 3 applications require more extensive documentation and governance structuring than Class 1. Applicants building from scratch incur higher costs than those with existing corporate infrastructure in the EU. LegalBison provides scoped project proposals once the intended service scope and starting point are defined.

Corporate requirement. Applicants must establish a UAB (Uždaroji akcinė bendrovė), the Lithuanian private limited liability company form, with a registered legal address in Lithuania. The Bank of Lithuania will not grant licenses to shell companies: demonstrable operational substance is required, meaning that a material portion of business activities, decision-making, and client-facing operations must occur within Lithuania.

Capital requirement. Minimum own funds range from EUR 50,000 to EUR 150,000 by class. These thresholds represent permanent prudential obligations subject to ongoing supervisory monitoring, not one-time capitalization requirements. The Bank of Lithuania also requires the maintenance of additional capital buffers proportionate to operational risk. Capital contributions may be denominated in qualifying crypto-assets, provided the valuation is certified by a sworn appraiser.

Governance requirement. All directors, senior managers, and ultimate beneficial owners (UBOs) holding qualifying stakes must satisfy the fit and proper assessment conducted by the Bank of Lithuania. This requires an absence of criminal convictions related to financial crimes, money laundering, or fraud, alongside a minimum of three years of professional experience in financial services, technology, or related sectors.

Staffing requirement. The organizational structure must include a Chief Executive Officer, Chief Compliance Officer, and Money Laundering Reporting Officer, with a minimum of three qualified professionals with Lithuanian presence. Smaller operators may combine the CCO and MLRO functions within a single role, subject to regulatory approval.

AML/CTF requirement. Comprehensive internal control frameworks must be documented and operationally implemented before license approval. These include KYC policies, risk-based transaction monitoring systems, suspicious activity reporting procedures aligned with FNTT requirements, and Travel Rule compliance mechanisms for crypto-asset transfers.

Bank account requirement. Since 1 January 2025, applicants must maintain a corporate bank account with either a Lithuanian credit institution or a foreign bank operating a licensed branch within Lithuania. Annual financial statements require certification by a Lithuanian-registered auditor.

Substance requirement. A registered office address in Lithuania is the foundational requirement. Virtual office arrangements are permissible at the initial licensing stage only, with the applicant required to demonstrate a credible plan for establishing physical premises as operations scale. The AML Compliance Officer must be a Lithuanian tax resident. EU residency alone does not satisfy this requirement.

From 1 January 2026, provision of crypto-asset services without valid CASP authorization constitutes a regulatory breach carrying potential criminal liability under Lithuanian law. Businesses that have not yet applied are already in breach of MiCA compliance requirements. The correct response is to engage the licensing process without delay. The authorization timeline runs 4 to 7 months under standard conditions.