Malta Crypto License: The Guide to Getting MFSA Approval

Malta called itself the "Blockchain Island" years before most countries had a crypto policy. Many founders still arrive with that image in mind and expect a quick, light-touch process. That picture is outdated.

At Neptune Fiduciaries Group, I've guided founders who thought the Malta VFA license was still the main route. Others assumed a MiCA license in Malta was just a renamed form. Both groups lost time before they learned what the MFSA now expects.

This guide covers how the framework changed, which services you can authorise, the application steps, realistic timelines, and who needs a licence. It also answers the questions founders ask most.

What Is a Malta Crypto License?

A Malta Crypto License is an authorisation from the MFSA that lets a company provide regulated crypto-asset services from Malta. Since MiCA applies across the EU, it is formally a CASP authorisation under Regulation (EU) 2023, not a separate Maltese licence.

In practice, you set up a Maltese company and show the MFSA that it has real substance. That means qualified directors, a working compliance function and secure systems. The regulator also wants clear governance, written policies and proof that the business can protect client assets.

The main appeal is passporting. Once authorised, a CASP can notify other EU member states and offer its services there without applying for a licence in each one. That is why a Malta crypto licence is attractive to exchanges, custodians and brokers who want EU-wide reach from one regulator.

How Malta's Crypto Regulation Moved from the VFA Framework to MiCA

Malta moved early. Its Virtual Financial Assets Act of 2018 gave crypto businesses a clear legal path years before the rest of Europe, and that is why so many firms registered here. MiCA then replaced national frameworks across the EU, and Malta's VFA regime moved into a transition.

Here is what changed in practice:

• From national rules to EU rules: The Malta VFA license was a Maltese regime. The MiCA license Malta is based on EU law, so the rulebook is the same in every member state and you can passport across the bloc.
• Stricter prudential and conduct standards: MiCA sets detailed requirements on capital, governance, complaints handling, conflicts of interest and custody of client assets. Many of these go beyond what the old VFA framework asked for.
• A transition period for existing licence holders: Malta chose a shorter transitional window for firms already licensed under the VFA Act. Firms that did not complete the move to MiCA authorisation can no longer rely on the old licence, so check your own status with the MFSA.
• New focus on market integrity: MiCA adds rules on market abuse, white papers and token categories (asset-referenced tokens and e-money tokens), which the VFA framework did not cover in the same way.

My practical advice is to treat the VFA as history. If you are starting today, you are applying under MiCA, and the application will be judged on EU-level standards. That brings us to the services you can actually offer under it.

Businesses comparing crypto licensing jurisdictions can also explore the Cheapest Crypto License options to identify cost-effective regulatory solutions that align with their business requirements.

Which Crypto Services Can You Get Authorised in Malta?

MiCA defines a closed list of crypto-asset services. Your Malta crypto exchange licence, custody licence, or advisory licence all fall under this list. You apply for the specific services you plan to offer, and the MFSA assesses your business plan against them.

The services covered are:

• Custody and administration of crypto-assets for clients: This covers holding private keys or the means of access on behalf of customers, which carries some of the strictest safeguarding duties.
• Operating a trading platform for crypto-assets: This is the core of a Malta crypto exchange license, where buyers and sellers are matched under non-discretionary rules.
• Execution of orders and reception and transmission of orders: These cover firms that carry out or pass on client orders without running a full trading venue.
• Placing of crypto-assets: This covers marketing newly issued crypto-assets to specific buyers on behalf of an issuer.
• Providing advice and portfolio management on crypto-assets: These services carry suitability duties similar to traditional investment firms.
• Providing transfer services for crypto-assets: This is the movement of crypto between addresses on behalf of clients, which also triggers the EU Travel Rule.

Each additional service increases the capital, staffing, and compliance load, so I usually suggest applying only for what you will genuinely launch with. You can extend the authorisation later. Once the service list is clear, the application itself becomes much easier to plan.

When comparing crypto licensing jurisdictions, it is helpful to explore Which Country Is Best for Crypto Exchange License to understand differences in regulatory requirements, costs, and business opportunities.

How to Apply for a Malta Crypto License Step by Step

The process is demanding, but it is predictable if you prepare in the right order. Here is the sequence I follow with clients applying for a CASP license in Malta.

1. Define your business model and services: Decide exactly which MiCA services you will offer, because this sets your capital class, staffing needs, and the shape of your business plan.
2. Incorporate a Maltese entity: The MFSA authorises companies with a genuine presence in Malta, so set up a local company with a registered office and a clear ownership structure.
3. Appoint fit-and-proper directors and officers: The MFSA vets management on experience, integrity, and competence, and you also need Maltese-based substance, such as a compliance officer and a money laundering reporting officer.
4. Build your compliance and AML framework: Prepare AML/CFT policies, risk assessments, a Travel Rule process, complaints procedures, and safeguarding rules.
5. Prepare the business plan, financials and IT documentation: Include a regulatory business plan, three-year projections, proof of capital and a detailed description of your technology, cybersecurity and custody arrangements.
6. Submit the application to the MFSA: File through the MFSA portal with all supporting documents, and expect a completeness check before the substantive review begins.
7. Respond to MFSA queries and complete authorisation: Answer clarification requests quickly and thoroughly, then finalise the capital injection and any conditions before launch.

The step that most often goes wrong is step 3, because applicants underestimate how closely the MFSA tests substance. Strong preparation here saves months, which leads to the next question founders always ask.

Businesses planning to launch a regulated crypto exchange can explore How to Get a Crypto Exchange License to understand the key application steps, compliance requirements, and licensing considerations.

How Long Does It Take to Get a Malta Crypto License?

Founders usually want one number, but the honest answer has a few moving parts. The statutory clock only starts once your application is complete, and good preparation before that point is what decides your overall timeline.

Here is how it usually breaks down:

• Preparation before filing (about 2 to 4 months): Setting up the entity, appointing directors, drafting policies and the business plan, and arranging capital all happen before you submit.
• Completeness check (up to 25 working days under MiCA): The MFSA first confirms that your file is complete. Gaps at this stage stop the clock from starting.
• Substantive assessment (up to 40 working days, plus pauses): After a complete file, the regulator assesses the application. Information requests can pause this period, so well-prepared documents move much faster.
• Realistic total (about 6 to 12 months): From first preparation to authorisation, most well-organised applicants land in this range. Complex models, such as custody or large exchanges, can take longer.

The biggest delays come from incomplete documents and slow answers to MFSA queries. Applicants with clean, consistent files and ready management usually reach approval sooner. Next, it helps to know whether you need the licence at all.

Before choosing a jurisdiction, businesses should consider How Much Does a Crypto License Cost to compare licensing fees, compliance expenses, and other costs involved in launching a regulated crypto business.

Who Needs a Malta Crypto License?

Any business that provides crypto-asset services as a professional activity to clients in the EU generally needs CASP authorisation. That includes exchanges, wallet and custody providers, brokers, and firms offering crypto advice or portfolio management. If you operate from Malta or target Maltese clients, the MFSA is your regulator.

Token issuers sit in a slightly different position. Issuing certain crypto-assets, such as asset-referenced or e-money tokens, brings its own MiCA obligations, including white paper rules and, in some cases, separate authorisation. Whether you need a Malta crypto licence, a white paper notification or both depends on how your token is classified, so the classification decision comes first.

Some businesses may fall outside CASP rules. A pure software developer who does not hold client assets or run a service for clients, for example, may not need a licence. Even so, I always advise getting a written legal assessment, because regulators judge your actual activity, not the label you give it. A wrong self-assessment is one of the costliest mistakes I see.

Businesses planning to launch a crypto venture can explore Cryptocurrency Business Licensing to understand the legal requirements, licensing procedures, and compliance obligations involved in operating a digital asset business.

How Neptune Fiduciaries Group Supports Your Malta Crypto Licensing

At Neptune Fiduciaries Group, we treat a Malta Crypto License as a structured project, not a form to fill in. Our Crypto Licensing team starts with your business model and maps it to the right MiCA services and capital class. That prevents the wrong application from being filed in the first place.

From there, we help build the pieces the MFSA examines most closely. That includes entity setup, governance and management profiles, AML/CFT manuals, the regulatory business plan and the Travel Rule process. Because licensing often sits inside a wider structure, we also provide Offshore Company Formation and related services so your Maltese entity fits a coherent group setup.

Our approach is practical. We prepare your file so it is complete on the first submission, coordinate answers to regulator queries, and plan your post-licensing obligations. Whether you are launching an exchange, a custody service or a brokerage, we aim to reduce avoidable delays and give you a clear view of costs before you commit.

For personalized guidance on crypto licensing and business setup, visit our Contact Us page to discuss your requirements with our team.

Conclusion

A Malta Crypto License is no longer the lighter, Malta-only VFA route many founders still picture. It is MiCA authorisation granted by the MFSA, with EU-wide passporting as the reward for meeting a high standard. The services you choose set your capital class, your staffing and your timeline.

The founders who do best treat substance as the foundation. They classify their business correctly, build real compliance, appoint credible management, and budget for the full picture, including ongoing audit and reporting. With solid preparation, a 6- to 12-month path is realistic.

If you are considering a Malta crypto licence, start with an honest assessment of your model before any filing. Good structuring early on saves far more time and money than fixing problems during the MFSA review.

FAQs

Is crypto legal in Malta?

Yes. Owning and trading crypto is legal in Malta. Businesses that provide crypto-asset services must be authorised as CASPs under MiCA by the MFSA. Operating without authorisation can lead to enforcement action, so the legal status of the activity depends on whether the provider is licensed.

How much does a crypto license cost in Malta?

The Malta crypto license cost has several parts. MiCA sets minimum capital of €50,000, €125,000, or €150,000 depending on the services offered, or a quarter of the previous year's fixed overheads if that is higher. On top of that come incorporation, MFSA fees, legal and compliance preparation, and annual audit and compliance staffing. Many founders budget roughly €40,000 to €120,000 or more for preparation alone, but this varies by complexity. Confirm current fees directly with the MFSA before finalising your budget.

Does Malta still offer a VFA license?

No, not for new applicants. The Malta VFA licence has been replaced by MiCA CASP authorisation for new crypto businesses. Firms licensed under the old regime had a transition period to move to MiCA, so check your status with the MFSA if you hold a VFA licence.

Can a foreign company apply for a Malta crypto license?

A foreign company cannot get a Malta crypto license directly in its own name. Applicants must set up a Maltese entity with real substance, such as local management, a compliance function, and a registered office. Foreign founders and shareholders can own and control that company, subject to MFSA fit-and-proper checks.