How to Apply for a Mica (CASP) Licence in Lithuania Bank of Lithuania Application Guide

If you are a founder, compliance officer or in-house counsel exploring the fastest route to an EU-wide crypto-asset service provider authorisation, this guide walks you through every stage of the MiCA application Lithuania process from entity formation and document packaging to the Bank of Lithuania’s formal decision and post-authorisation obligations. Lithuania has emerged as one of the most practical jurisdictions for small and mid-sized crypto firms seeking a CASP licence under the Markets in Crypto-Assets Regulation (EU) 2023/1114, thanks to the Bank of Lithuania’s English-language guidance, detailed application annexes and responsive supervisory engagement.

Timing is critical. The MiCA transitional window that allowed pre-existing nationally registered VASPs to continue operating closes no later than 1 July 2026 under Article 143(3) of MiCA. Firms that have not secured full CASP authorisation by that date must cease providing crypto-asset services in the EU. Lithuania’s national implementing legislation the Law on Crypto-Asset Markets adopted by the Seimas confirms the Bank of Lithuania’s supervisory remit and supplements MiCA with local procedural requirements. This page synthesises the regulatory framework, document checklists, capital and governance expectations, realistic timelines and common pitfalls into one actionable resource.

Quick Facts MiCA Application Lithuania at a Glance

• Competent authority: Bank of Lithuania (Lietuvos bankas).
• Legal basis: Regulation (EU) 2023/1114 (MiCA), Title V CASP authorisation; supplemented by the Lithuanian Law on Crypto-Asset Markets.
• Completeness check: 25 working days from receipt of an application.
• Decision window: 40 working days after the application is deemed complete.
• Passporting: Once authorised, the CASP may notify its home NCA to passport services across all EU/EEA Member States.
• DORA / ICT resilience: CASPs must comply with the Digital Operational Resilience Act (DORA), including ICT risk management and incident reporting.
• Transitional deadline: National VASP grandfathering expires no later than 1 July 2026.

Typical CASP services covered by a single authorisation include custody and administration of crypto-assets, exchange of crypto-assets for funds or other crypto-assets, operation of a trading platform, placement, portfolio management, transfer services and advice on crypto-assets.

Step-by-Step: The MiCA Licence Lithuania Process

The complete journey from initial scoping to Bank of Lithuania decision typically spans eight steps. Well-prepared small firms can move from project kick-off to submission in 12–20 weeks; add a buffer of four to eight weeks for regulator interaction and supplementary requests.

Step 1 Define Scope of Services and Legal Form

Map the exact CASP services your business will provide against the MiCA service classification. If your firm already holds a MiFID investment-firm licence, credit-institution licence or electronic-money-institution licence, check whether the streamlined Article 60 notification route applies certain regulated financial entities can notify rather than re-apply for a separate CASP authorisation. Choose a Lithuanian legal form suitable for the capital and governance requirements (typically a UAB private limited company).

Step 2 Establish Lithuanian Entity and In-Union Substance

MiCA Article 63 requires a CASP to have its registered office in the Member State where it applies and its place of effective management in the Union. At least one director must be resident in the EU. In practice, the Bank of Lithuania expects substantive local decision-making not a shell entity. Non-EU founders should incorporate a Lithuanian subsidiary or, where structurally appropriate, an EU branch with a local board that demonstrates genuine supervisory oversight. Recruit local senior staff or appoint experienced EU-resident directors who meet the suitability criteria early in the process, as director recruitment often determines the critical path.

Step 3 Prepare the Core Application Package

The Bank of Lithuania publishes application annexes and templates that mirror the information requirements in MiCA Article 62. The core package includes the completed application form (BoL Annex 1, mapped to MiCA Annex V), a business plan covering three to five years with financial forecasts and stress testing, an organisational chart showing reporting lines, and a comprehensive set of internal policies AML/CFT, conflicts of interest, custody and safeguarding, and client-asset segregation. All documents should be indexed against the relevant MiCA article and BoL annex reference to simplify the regulator’s review and reduce the likelihood of completeness-check queries.

Step 4 Prudential and Capital Modelling

MiCA Title V sets minimum own-funds requirements that vary by the scope of CASP services. The Bank of Lithuania provides prudential Excel templates that applicants must complete, showing opening capital, projected capital adequacy and stress scenarios. Applicants offering custody and exchange services face higher capital thresholds than those offering advice or transfer services alone. Ensure that the capital model aligns with both the MiCA requirements and the BoL’s specific prudential tables incomplete or internally inconsistent capital documentation is a frequent cause of delays. Supporting documents include bank statements or auditor confirmations evidencing available capital, and a narrative explaining the capital model assumptions.

Step 5 Governance, Suitability and KYC for Key Function Holders

The Bank of Lithuania assesses the fitness and propriety of directors, senior managers and key function holders against MiCA Article 68 suitability standards. Required documentation includes detailed CVs, professional references, criminal-record checks, tax-residency declarations and conflict-of-interest disclosures. The ESMA supervisory briefing on CASP authorisations emphasises that NCAs should not treat any CASP application as low-risk, and specifically flags governance substance board composition, collective competence and the ability to challenge management decisions as a key supervisory focus. Start gathering suitability documentation immediately; delays in obtaining foreign criminal-record certificates can extend the overall timeline significantly.

Step 6 ICT, Operational Resilience and AML/CFT Readiness

CASPs must demonstrate compliance with DORA’s ICT risk-management and incident-reporting requirements. The application should include an ICT security framework document, a business-continuity and disaster-recovery plan, a cyber-incident management procedure and evidence of third-party ICT risk assessments. AML/CFT readiness is equally critical: provide a detailed AML/CFT policy, evidence of transaction-monitoring system capabilities, KYC onboarding procedures and documentation on sanctions-screening vendors.

Step 7 Submission, Completeness Check and Decision Timeline

Submit the application through the Bank of Lithuania’s designated channel with a consolidated index referencing each MiCA article and BoL annex. The BoL has 25 working days to conduct a completeness check. If the file is incomplete, the clock pauses while the applicant supplements the submission. Once the application is deemed complete, the BoL has 40 working days to reach a decision. In practice, the regulator may issue requests for further information during the assessment, which can suspend the clock. A realistic total duration from first submission to final decision is three to six months for a well-prepared small or mid-sized firm. Build a project plan with buffer weeks for regulator interaction, translation turnarounds and any remediation of governance gaps.

Step 8 Post-Authorisation Obligations

Once the licence is granted, the CASP must comply with ongoing prudential reporting, annual supervisory contributions, regulatory notifications (including passporting notifications under Article 65) and periodic suitability re-assessments. The Bank of Lithuania expects timely filing of prudential returns and prompt notification of material changes to governance, capital or service scope.

Required Documents MiCA Application Documents Lithuania Checklist

The following checklist maps each required document to the relevant MiCA article and Bank of Lithuania annex. Applicants should compile all items in a single indexed file, translated into English and Lithuanian where requested by the BoL.

• Completed application form: BoL Annex 1, cross-referenced to MiCA Annex V includes applicant identity, requested services and regulatory perimeter declaration.
• Business plan (3–5 years): Financial forecasts, revenue model, market analysis, stress-testing scenarios and completed BoL prudential Excel tables.
• Organisational chart and governance framework: Reporting lines, internal-control functions (compliance, risk, internal audit), decision-making procedures and key-function-holder mapping.
• Internal policies: AML/CFT policy, conflicts-of-interest policy, custody and safeguarding procedures, client-asset segregation rules, complaints-handling procedure and outsourcing policy.
• Fit-and-proper documentation: CVs, professional references, criminal-record certificates, tax-residency declarations and suitability self-assessments for all directors, senior managers and key function holders.
• ICT and security documentation: DORA-aligned ICT risk-management framework, business-continuity plan, incident-management procedure and third-party ICT risk assessments.
• Prudential and capital documentation: Proof of paid-up capital (bank confirmation or auditor statement), completed capital-model narrative and prudential Excel templates.
• AML/CFT operational evidence: Transaction-monitoring system description, KYC onboarding flow documentation, sanctions-screening vendor contracts and sample reports.
• Third-party contracts: Custody arrangements, cloud-provider agreements, outsourcing contracts with service-level agreements and conflict-management provisions.
• Corporate documents and shareholder structure: Articles of association, shareholder structure chart, beneficial-ownership information and qualifying-holding notifications where applicable.

Format tip: Present the file as a consolidated PDF with a hyperlinked index. Attach original-language source documents with certified English translations where the Bank of Lithuania requires bilingual submission.

Lithuania vs Other EU NCAs Comparison Table

The following comparison highlights key attributes that matter when selecting a jurisdiction for your MiCA application Lithuania strategy. All NCAs apply the same MiCA statutory timelines, but practical processing speed, language support and supervisory culture differ.

Lithuania’s combination of responsive English-language regulator resources, clear annex-based templates and active supervisory engagement makes it a strong contender for firms that prioritise predictability and speed. Industry observers expect Lithuania to remain among the top three EU destinations for CASP authorisations through 2026 and beyond.

Key Requirements and Eligibility for a Lithuania CASP Licence

Eligible Entity Types

Any legal person established in Lithuania may apply. Credit institutions, MiFID investment firms and electronic-money institutions may benefit from the Article 60 notification pathway, which streamlines certain requirements. All other applicants including fintech start-ups and crypto-native firms must submit a full CASP authorisation application under MiCA Title V.

Capital and Prudential Requirements

MiCA sets minimum own-funds thresholds that vary by the CASP services authorised. The Bank of Lithuania requires applicants to complete its prudential Excel tables, demonstrate that capital is fully paid up and explain the assumptions underlying capital-adequacy projections. EBA and ESMA cross-guidance on calculating ongoing capital requirements should be incorporated into the capital narrative.

Non-EU Applicants

MiCA Article 63 requires a CASP to have its place of effective management in the Union and at least one director resident in the EU. Non-EU groups typically form a Lithuanian subsidiary with a locally resident board a branch structure is also possible, although it introduces additional supervisory-cooperation considerations. Practical options include recruiting an experienced Lithuanian or EU-based CEO, engaging a non-executive director with local market knowledge, or transferring existing senior staff to Vilnius. The key test is whether genuine decision-making occurs within the EU entity.

Common Reasons for Rejection and How to Avoid Them

Based on regulator guidance and ESMA’s supervisory briefing, the most frequent grounds for application refusal or extended delays include:

• Incomplete or poorly documented business plan and prudential tables: Failure to complete the BoL’s Excel templates in full, or internal inconsistencies between financial forecasts and capital modelling. Mitigation: Use the Bank of Lithuania’s own templates and have an independent accountant or auditor review the numbers before submission.
• Governance and management unsuitability: Directors lacking relevant financial-services or crypto-industry experience, or absence of genuine local decision-making. Mitigation: Recruit senior staff who meet MiCA Article 68 suitability criteria and document collective board competence.
• Weak AML/CFT controls: Generic or boilerplate AML policies without evidence of operational implementation, or absence of transaction-monitoring system testing. Mitigation: Conduct a pre-submission AML gap assessment and include sample monitoring reports.
• Over-reliance on outsourcing without effective oversight: ESMA emphasises that CASPs must not outsource core functions to an extent that reduces the entity to an empty shell. Mitigation: Document oversight mechanisms, service-level agreements and escalation procedures for every outsourced function.
• Third-country supervisory cooperation issues: Close links to entities in jurisdictions where effective supervision cannot be exercised. Mitigation: Map group structure and demonstrate that supervisory cooperation agreements are in place or that the EU entity operates independently.

Practical remediation checklist: Conduct a mock completeness review against every BoL annex item; obtain owner sign-offs on all declarations; secure third-party attestations (auditor, AML vendor, ICT assessor); run a governance tabletop exercise documenting board decision-making capability; and resolve any identified gaps before submission.

Pricing Ballpark and Budget Planning Lithuania Crypto Licence Cost

Costs vary significantly by service scope, entity complexity and the extent of remediation required. The following ranges are editorial estimates intended for budget-planning purposes only:

• Small CASP (limited services, e.g. custody only): €40,000–€75,000 for legal and technical application packaging, including policy drafting, capital modelling, AML gap assessment and translations.
• Mid-sized CASP (exchange + custody + trading platform): €80,000–€250,000, reflecting more extensive policy suites, multiple suitability assessments, director-recruitment support, complex capital modelling and multi-service ICT documentation.
• Bank of Lithuania administrative and state fees: Applicants should consult the latest BoL and government fee schedules, which are updated periodically.
• Ongoing compliance costs: Budget for annual supervisory contributions, external audits, prudential returns, continuous AML monitoring and periodic governance reviews.

An accurate cost estimate requires a 30-minute intake call and preliminary document review to assess your firm’s current readiness level and the gap between existing documentation and BoL requirements.

Case Studies Successful MiCA Application Lithuania Outcomes

Case Study 1 Small Custody Provider

Challenge: A two-person crypto custody start-up with a Lithuanian entity but no regulatory experience needed a CASP licence before the transitional deadline. Solution: Comprehensive policy drafting, recruitment of a locally resident compliance officer, completion of BoL prudential tables and a structured pre-application engagement with the Bank of Lithuania. Outcome: Licence granted within four months of the complete-file submission. What we did: AML policy suite, capital model, fit-and-proper documentation and full BoL annex compilation.

Case Study 2 Non-EU Exchange Establishing EU Subsidiary

Challenge: An Asia-Pacific-headquartered exchange needed EU market access and chose Lithuania for its English-language regulatory environment. Solution: Incorporated a Lithuanian UAB, recruited an EU-resident CEO and CFO, developed a substance-demonstrating governance framework, and packaged the full MiCA application. Outcome: Licence granted; firm subsequently passported services to four additional Member States. What we did: Entity formation, director search, business-plan drafting, ICT gap remediation and regulator correspondence management.

Case Study 3 Mid-Sized Trading Platform with Initial Queries

Challenge: A mid-sized European trading platform received multiple requests for further information from the Bank of Lithuania during the assessment phase, putting the timeline at risk. Solution: Rapid remediation of governance documentation, supplementary prudential stress-test scenarios and a restructured outsourcing policy with enhanced oversight provisions. Outcome: Final approval within six months of initial submission. What we did: Query-response management, board-competence matrix enhancement, outsourcing-policy overhaul and supplementary AML evidence package.

Next Steps Engaging with Global Law Experts

If your firm is planning a MiCA application Lithuania submission, the typical engagement pathway begins with an initial intake call (approximately 30 minutes) to assess your current entity structure, service scope and documentation readiness. This is followed by a structured readiness assessment that benchmarks your existing materials against every Bank of Lithuania annex requirement and identifies gaps. The application-packaging phase covers policy drafting, capital modelling, fit-and-proper documentation, BoL template completion and full annex compilation. Throughout the submission and assessment phase, expect support with regulator correspondence, supplementary-information responses and governance remediation. Post-authorisation, ongoing compliance support including prudential reporting, passporting notifications and annual reviews ensures your licence remains in good standing.

Legal and Regulatory Footnotes

Last reviewed: July 3, 2026. The regulatory requirements described on this page are based on MiCA (Regulation (EU) 2023/1114), the Bank of Lithuania’s published CASP authorisation guidance and annexes, ESMA’s supervisory briefing on CASP authorisations, Lithuania’s Law on Crypto-Asset Markets and DORA (Regulation (EU) 2022/2554). Legal and regulatory requirements change; applicants should verify current rules directly with the Bank of Lithuania and consult qualified legal counsel before submitting an application.

Sources

• Regulation (EU) 2023/1114 Markets in Crypto-Assets (MiCA) EUR-Lex
• Authorisation of Crypto-Asset Service Providers (CASPs) Bank of Lithuania
• Supervisory Briefing on the Authorisation of CASPs under MiCA ESMA
• Interim MiCA Register and Transitional Provisions ESMA
• Lietuvos Respublikos kriptoturto rinkų įstatymas (Law on Crypto-Asset Markets) Seimas of the Republic of Lithuania
• Digital Operational Resilience Act (DORA) ESMA