How to Obtain a CASP Licence in Liechtenstein (2026): TVTG, Micar & Eea‑passporting, Step‑by‑step

Obtaining a CASP licence in Liechtenstein has become one of the most strategically significant decisions a crypto-asset business can make in 2026. With MiCAR now fully operational across the European Economic Area and the OECD’s Crypto-Asset Reporting Framework (CARF) entering its implementation phase, the principality offers a unique gateway: a compact, regulator-accessible jurisdiction where applicants can secure a crypto service provider licence and passport it across all 30 EEA member states. This guide maps the complete application process, from corporate formation and TVTG compliance through to FMA engagement, CASP authorisation, and cross-border passporting, so that founders, general counsel and compliance officers can plan each milestone with confidence.

Quick Summary: The CASP Licence Liechtenstein Pathway at a Glance

Any firm wishing to provide regulated crypto-asset services, custody, exchange, brokerage, portfolio management or advisory, within the EEA requires CASP authorisation under MiCAR. Liechtenstein’s domestic tokenisation law Liechtenstein (the TVTG) continues to operate alongside MiCAR, governing token issuance and fiduciary structures. The practical licensing path follows a clear sequence: entity formation → TVTG compliance mapping → informal preliminary discussion with the FMA → MiCAR Article 63 pre-application → full submission → authorisation → EEA passporting notification.

• Regulatory foundation. MiCAR provides the EU-level CASP authorisation framework; the TVTG addresses Liechtenstein-specific token rules; CARF introduces cross-border tax-reporting obligations.
• EEA passporting. A Liechtenstein CASP licence entitles the holder to notify and operate across all EEA member states via MiCAR’s passporting mechanism, without obtaining separate national authorisations.
• Typical timeline. From preliminary FMA engagement to final authorisation decision, industry observers report a realistic end-to-end window of six to twelve months, depending on application completeness.

Regulatory Landscape: TVTG, MiCAR, CARF and How They Interact

Yes, crypto is legal in Liechtenstein. The principality enacted one of the world’s first comprehensive blockchain statutes (the TVTG) in 2020 and has since aligned its financial-market supervision with EU standards through EEA Agreement mechanisms. Understanding how the three principal frameworks overlap is the first step for any CASP licence Liechtenstein applicant.

TVTG in Brief

The Token and Trustworthy Technologies Act (TVTG), often referred to as Liechtenstein’s “Blockchain Act,” established a permissive framework for token issuance, token custody, and trustworthy-technology service providers. It introduced civil-law certainty for tokenised rights and created a registration regime supervised by the Finanzmarktaufsicht (FMA). TVTG compliance remains mandatory for any entity that issues tokens, operates token-generation events, or acts as a token depository or physical validator within Liechtenstein. However, the TVTG registration alone does not enable EEA-wide passporting, that requires CASP authorisation under MiCAR.

MiCAR in Brief

The Markets in Crypto-Assets Regulation (MiCAR) is the EU-wide framework that harmonises the authorisation and supervision of crypto-asset service providers. It defines ten categories of crypto-asset services, including custody, trading platforms, exchange against fiat or other crypto-assets, order execution, placement, transfer, portfolio management, and advice. Under Article 63 of MiCAR, an authorised CASP may provide cross-border services throughout the EEA by notifying its home-state regulator (in this case the FMA), which then communicates the notification to the host-state authority. Because Liechtenstein is an EEA member, a CASP authorisation issued by the FMA carries the same passporting rights as one issued in any EU member state.

CARF & Tax Obligations

The OECD Crypto-Asset Reporting Framework (CARF) introduces standardised due-diligence and reporting obligations for intermediaries, including CASPs, that facilitate exchange or transfer transactions in crypto-assets. CARF compliance requires firms to collect taxpayer-identification data, report qualifying transactions above prescribed thresholds, and transmit annual reports to the relevant tax authority. Early indications suggest that Liechtenstein will integrate CARF obligations into its existing automatic exchange-of-information infrastructure, meaning new CASP applicants should design their data-collection and reporting systems with CARF in mind from the outset.

Decide: TVTG Registration vs CASP Authorisation vs Passporting Strategy

Not every crypto-related activity requires a full CASP licence in Liechtenstein. The regulatory path depends on the scope and geography of the business model. The decision matrix below helps applicants determine which framework governs their situation.

The core decision can be summarised in three questions. First, does the firm only engage in token issuance or domestic token fiduciary activities? If so, TVTG registration may suffice. Second, does the firm provide any of the ten regulated crypto-asset services listed in MiCAR to EEA clients? If yes, CASP authorisation is mandatory. Third, should the firm apply in Liechtenstein specifically, or would another EEA jurisdiction offer advantages? Factors favouring a CASP licence Liechtenstein application include the FMA’s established Fintech Unit, the principality’s compact size enabling direct regulator engagement, favourable corporate-tax environment, and the accumulated institutional expertise from the TVTG regime.

Industry observers expect the likely practical effect of Liechtenstein’s dual-framework environment, TVTG plus MiCAR, to be a streamlined onboarding for applicants who have already built TVTG-compliant structures. Existing TVTG-registered entities may leverage their governance and AML infrastructure when applying for CASP authorisation, potentially shortening the preparation phase.

Pre‑Application Readiness: Corporate, Governance, AML/KYC, Tech & Capital

Before engaging the FMA, applicants should confirm that their corporate structure, governance framework, compliance apparatus and technical infrastructure meet the baseline requirements for CASP authorisation.

Required Documentation

• Business plan. A detailed description of the proposed crypto-asset services, target markets, revenue model, three-year financial projections and risk analysis.
• Governance and organisational chart. Identification of the management body, compliance officer (MLRO/CRO), risk manager and internal audit function, along with CVs, criminal-record extracts and fit-and-proper declarations for each qualifying holder.
• AML/CFT manual. A comprehensive internal manual aligned with FATF standards and the Liechtenstein Due Diligence Act (SPG), including customer due diligence procedures, sanctions screening, transaction monitoring, and suspicious-activity reporting protocols.
• IT security assessment. Documentation of cyber-security measures, penetration-testing results, business-continuity and disaster-recovery plans.
• Custody model description. Technical details of the key-management model, wallet architecture, segregation of client assets, and cold/hot-storage ratios.
• Proof of capital. Evidence of initial capital or own-funds requirements applicable to the specific crypto-asset services sought.
• Beneficial-ownership disclosure. Full chain of ownership including ultimate beneficial owners holding qualifying participations.
• Client agreements (draft). Sample terms and conditions reflecting MiCAR’s consumer-protection requirements, including complaints-handling procedures.

AML/CTF Controls

The FMA has consistently reinforced Liechtenstein’s strong AML posture. With regard to its AML/CFT laws, ordinances and guidance, Liechtenstein was rated “compliant” or “largely compliant” with 37 of the 40 FATF recommendations and received no ratings of “non-compliant.” Applicants should design their AML programme to meet or exceed FMA expectations, including risk-based customer identification, ongoing monitoring, enhanced due diligence for high-risk customers, and automated transaction screening against international sanctions lists.

Technical Controls & Custody

The FMA places particular emphasis on the security and segregation of client crypto-assets. Applicants must demonstrate that private keys are managed through institutional-grade custody infrastructure, typically involving a combination of hardware security modules (HSMs), multi-signature authorisation and geographically distributed cold storage. All custody arrangements must ensure that client assets remain separate from the firm’s proprietary holdings and are recoverable in insolvency scenarios.

Step‑by‑Step FMA Application Process & Timeline for a CASP Licence Liechtenstein

The application procedure follows a structured sequence managed by the FMA’s Fintech Unit. Below is the step-by-step roadmap that applicants can follow to move from initial engagement through to authorisation.

Step 0: Pre‑Contact & Informal Preliminary Discussion with the FMA

The FMA invites all interested parties who wish to acquire a CASP licence in Liechtenstein to register for an informal preliminary discussion. This meeting is not part of the formal application but serves a critical function: it allows the FMA to understand the proposed business model, flag potential issues early and advise on the documentation the applicant should prepare. To schedule a preliminary discussion, applicants should contact the FMA Fintech Unit at casp[at]fma-li.li.

Preparation tips for this meeting include bringing a concise executive summary of the business model, a preliminary organisational chart, and a high-level description of the planned crypto-asset services. The FMA may provide indicative feedback on whether the proposed activities fall within MiCAR scope or could be addressed through TVTG registration alone.

Step 1: Company Incorporation & Entity Formation

CASP authorisation requires a legal entity with its registered office and place of effective management in Liechtenstein. The most common entity forms are an Aktiengesellschaft (AG) or a Gesellschaft mit beschränkter Haftung (GmbH), although other forms such as an Anstalt may be used depending on the business structure. Entity formation through the Liechtenstein commercial register typically takes two to four weeks once all formation documents and capital deposits are in place. Non-EEA founders should allow additional time for beneficial-ownership verifications and notarial requirements.

Step 2: Drafting the Application Pack

This is typically the most time-intensive phase. The application pack must address every requirement set out by the FMA in accordance with MiCAR and the corresponding implementing technical standards. Key components include:

• Business plan and programme of operations, covering the full range of services, operational arrangements, outsourcing plans and target-market assessment.
• Internal AML/CFT manual, tailored to the specific services and risk profile, aligned with the SPG and FATF standards.
• IT security and operational-resilience documentation, including penetration-testing evidence, incident-response plans and ICT risk-management policies.
• Governance documentation, fit-and-proper files for each member of the management body, organisational charts showing reporting lines, and independence requirements for risk-management and compliance functions.
• Custody model and asset-segregation policy, demonstrating how client crypto-assets are held, insulated from proprietary assets and protected in insolvency.
• Proof of capital and financial resources, bank statements, auditor confirmations or capital-adequacy calculations conforming to the prudential requirements specified for the requested services.
• Client-facing documentation (draft), terms and conditions, fee schedules, pre-contractual disclosures and complaints-handling policies.
• Transaction-monitoring rules and KYC workflow, including risk-scoring methodology, enhanced due-diligence triggers and record-keeping protocols.

Industry observers estimate that drafting a comprehensive application pack typically requires six to twelve weeks, depending on the complexity of the business model and the number of crypto-asset services sought.

Step 3: Filing the Pre‑Application and Formal Submission

Once the documentation is complete, the applicant may file a pre-application or proceed directly to the formal application pursuant to Article 63 MiCAR. The FMA’s CASP procedures page confirms that interested parties may submit a preliminary application to obtain early feedback before proceeding with the full filing. The formal application is submitted to the FMA’s Fintech Unit with all supporting annexes. Applicants should retain proof of filing and note the date of submission, as it starts the regulatory review clock.

Step 4: FMA Review, Queries & Supervisory Interviews

Following submission, the FMA conducts a completeness check and begins substantive review. Common regulator questions during this phase include queries about custody-segregation mechanics, outsourcing arrangements, AML risk assessments, and the operational-resilience framework. Applicants should expect at least one round of written questions and potentially an in-person or virtual supervisory interview with the FMA’s licensing team. Response times to FMA queries should be kept as short as possible, delays at this stage are the most common cause of extended processing timelines.

Step 5: Authorisation Decision

The FMA issues its authorisation decision once it is satisfied that all statutory requirements have been met. The authorisation specifies the exact crypto-asset services the CASP is permitted to provide. Conditions may be attached, for example, limitations on the types of crypto-assets that may be serviced, or requirements to appoint additional compliance resources within a specified period. The authorised CASP is entered into the FMA’s public register.

Step 6: Post‑Authorisation Filings and Notifications

Immediately following authorisation, the CASP must complete its AML/CFT registration with the FMA (if not already completed during the application process), ensure its listing is accurate in the public register, and commence supervisory reporting as required. The firm should also begin preparing its EEA passporting notifications (see below).

Post‑Authorisation: EEA Passporting, Ongoing Compliance & CARF Reporting

Once a firm holds a CASP licence in Liechtenstein, it is entitled to passport its authorised services across all EEA member states via MiCAR’s notification procedure. This is one of the principal commercial advantages of securing authorisation in Liechtenstein, the firm gains access to 30 national markets without obtaining separate local licences.

Notification Checklist for EEA Passporting Crypto Services

• Identify target jurisdictions. Determine which EEA member states the CASP intends to serve, either on a cross-border basis or through the establishment of a branch.
• Prepare notification documents. Draft the required notification to the FMA specifying each target jurisdiction, the services to be provided and, where applicable, the planned branch structure.
• Submit to FMA. The home-state regulator (FMA) transmits the notification to the host-state competent authority within the prescribed timeframe under MiCAR.
• Await confirmation. The CASP may commence cross-border services once the notification has been transmitted and the applicable waiting period has elapsed.
• Local compliance considerations. While no separate authorisation is needed, CASPs should assess local consumer-protection rules, marketing restrictions and language requirements in each target state.

Recent commercial examples illustrate this pathway in action. Sygnum obtained crypto registration in Liechtenstein as a stepping stone toward EU expansion, while Banking Circle introduced stablecoin settlement services following CASP licence approval, both demonstrating how Liechtenstein-based authorisation enables broader EEA market access.

Ongoing Prudential, AML and Reporting Obligations

Authorisation is not the finish line. Licensed CASPs are subject to continuous supervisory obligations including periodic prudential returns, ongoing fit-and-proper monitoring of management, AML/CFT compliance reviews and, increasingly, CARF compliance for cross-border reporting of crypto-asset transactions. Firms should establish dedicated compliance-calendar processes and assign clear internal ownership for each reporting deadline.

Common FMA Questions and Practical Guidance

During the application review, the FMA typically raises questions that probe both the substance and the practicality of the applicant’s arrangements. Early indications from the licensing cycle suggest the following themes recur frequently:

• Custody segregation. How are client crypto-assets technically and legally separated from the firm’s own holdings? What happens in an insolvency scenario?
• Outsourcing arrangements. If key functions (e.g., custody, AML screening, IT infrastructure) are outsourced, what contractual and supervisory controls are in place?
• Third-party custodians. Where a sub-custodian is used, how does the applicant ensure equivalent regulatory standards and client-asset protection?
• Stablecoins and asset-referenced tokens. If the platform lists stabilised tokens, has the issuer complied with MiCAR’s Title III or Title IV requirements?
• White-label exchange arrangements. Where the applicant relies on third-party exchange technology, who is the regulated entity and who bears supervisory responsibility?
• Cross-border servicing model. How does the applicant intend to passport services? Which jurisdictions are targeted and what local requirements have been assessed?
• Business continuity and wind-down planning. What procedures are in place if the firm ceases operations? How will client assets be returned?
• Conflicts of interest. Where the firm acts as both exchange operator and proprietary trader, how are conflicts identified and managed?

Applicants who prepare clear, documented answers to each of these areas before submission tend to experience fewer Q&A cycles and shorter processing times.

Conclusion: Securing Your CASP Licence in Liechtenstein

A CASP licence in Liechtenstein offers a regulated, passportable gateway to the entire EEA crypto-asset market. By combining the principality’s mature TVTG compliance infrastructure with the harmonised MiCAR authorisation framework, applicants benefit from an efficient path to market, provided they invest in thorough pre-application preparation, early FMA engagement and robust governance and compliance systems. With CARF reporting obligations now taking shape and the EEA passporting crypto mechanism fully operational, 2026 is the year to move from planning to application. Qualified legal counsel experienced in Liechtenstein banking and financial-market regulation is essential to navigate the procedural detail and regulator expectations that determine whether a CASP licence Liechtenstein application succeeds.

Sources

1. FMA Liechtenstein, Informal Preliminary Discussions (CASP)
2. FMA Liechtenstein, CASP Procedures / Activities under MiCAR
3. Liechtenstein TVTG, Official Legislation Portal
4. OECD, Crypto-Asset Reporting Framework (CARF)
5. Global Legal Insights, Blockchain & Cryptocurrency Laws: Liechtenstein
6. Niedermüller Rechtsanwälte, Blockchain & Cryptocurrency Regulation (Liechtenstein Chapter)
7. Sygnum, Obtains Crypto Registration in Liechtenstein
8. Banking Circle, Stablecoin Settlement Services Following CASP License Approval
9. FMA Liechtenstein, Anti-Money Laundering