Mica CASP Authorisation in Croatia (HANFA): Licence, Costs and EU Passporting

The mica casp croatia pathway has become one of the most closely watched routes for founders, exchanges, custodians and advisers seeking a fully passportable licence under the EU’s Markets in Crypto-Assets Regulation. Since the transitional cliff of 1 July 2026, when the window for firms operating under legacy national regimes narrowed sharply, Croatia has emerged as a pragmatic, cost-competitive base for obtaining authorisation as a Crypto-Asset Service Provider (CASP). This practitioner guide, published by Global Law Experts, walks through the HANFA application process, minimum capital and prudential requirements, indicative costs and timelines, ongoing compliance obligations, and how a Croatian licence translates into MiCA CASP authorisation in Croatia that can be passported across the entire EU/EEA.

Introduction, snapshot and why Croatia

Croatia sits within the single EU regulatory perimeter created by MiCA (Regulation (EU) 2023/1114), meaning a CASP authorised in Zagreb enjoys the same market access as one authorised in any other Member State. What differentiates the country is the combination of comparatively modest local fees, a responsive supervisor in HANFA (the Croatian Financial Services Supervisory Agency), Schengen and eurozone membership, and increasingly reliable banking introductions. For founders weighing where to anchor an EU crypto operation, the mica casp croatia route offers a credible, lower-cost alternative to the more crowded hubs of Malta and Lithuania without sacrificing the passporting benefit that is the whole point of MiCA.

At a glance: quick facts

• Regulator: HANFA (Hrvatska agencija za nadzor financijskih usluga) is the competent authority for CASP authorisation and ongoing supervision in Croatia.
• Legal basis: MiCA (Regulation (EU) 2023/1114), directly applicable across the EU, supplemented by ESMA technical standards.
• Transitional cliff: the MiCA transitional period allowed under Article 143 ran to a national end date; for many firms this practical cliff crystallised around 1 July 2026, after which unauthorised CASP activity is prohibited.
• Minimum capital bands: €50,000, €125,000 or €150,000 depending on the CASP services provided (MiCA Annex IV / Article 67).
• Typical timeline: broadly 3–6 months from a complete filing to decision, subject to HANFA queries and resubmissions.
• Outcome: a single authorisation passportable across all EU/EEA Member States following host-state notification.

How to get a MiCA CASP authorisation in Croatia, step-by-step process

The following numbered process reflects the typical sequence for a mica casp croatia application. Each step lists the core deliverables, the documents HANFA expects, who signs, and the interactions you should plan for. Firms that treat authorisation as a structured project, with a single owner, a document register and a realistic Gantt chart, consistently outperform those that file reactively. A detailed HANFA CASP application checklist and timeline supports this workflow.

Step 1, Preparation and pre-application checks

Before any form is filed, establish the corporate vehicle. A Croatian CASP is normally structured as a d.o.o. (limited liability company) registered with the court register administered through the CRO / court registry system. At this stage you confirm the corporate form, complete registration, map the ultimate beneficial owners (UBOs), and prepare fit-and-proper documentation for proposed management and qualifying shareholders. Parallel work streams include drafting the outline AML/KYC programme and beginning preliminary capital planning so that the minimum capital band is identified early. Getting company formation and banking in Croatia for crypto firms right at the outset avoids expensive rework later.

Step 2, Governance, policies and required manuals

MiCA requires a demonstrable, documented governance framework proportionate to the services offered. HANFA will expect a suite of manuals covering corporate governance and the allocation of responsibilities, risk management, a system of internal controls, a conflicts-of-interest policy, a business continuity and disaster recovery plan, an outsourcing and third-party services policy, and a complaints-handling procedure. Each policy should name accountable individuals, describe escalation routes, and reflect the firm’s actual operating model rather than off-the-shelf boilerplate. Under MiCA (Article 68), the management body must possess collectively adequate knowledge, skills and experience, and this must be evidenced in the manuals and the accompanying CVs.

Weak or generic governance documentation is one of the most common causes of HANFA follow-up questions and delay, so invest in policies that map cleanly onto the organisational chart, the reporting lines and the actual custody and execution arrangements.

Step 3, Minimum capital and prudential evidence

Applicants must prove they hold the prudential safeguards required by MiCA (Article 67), which sets the minimum capital requirement by reference to the class of services provided. Evidence typically comprises bank statements showing paid-up share capital, confirmation that capital is available and unencumbered, and, where relevant, documentation of the higher of the fixed minimum or the calculation based on fixed overheads. HANFA scrutinises the quality and source of capital; contributed cash held in a Croatian or EU bank account is the cleanest form of proof. Applicants relying on capital instruments should confirm eligibility in advance. Detailed treatment of the MiCA minimum capital and prudential requirements is essential reading before finalising the funding structure.

Step 4, IT, custody and operational resilience evidence

Technology and custody documentation is central to a credible mica casp croatia file. HANFA expects a clear description of the technology stack, hosting arrangements, cybersecurity controls, incident-response procedures, and, critically for custody-type services, how client crypto-assets are segregated, safeguarded and reconciled. Under MiCA, firms providing custody and administration of crypto-assets on behalf of clients (Article 75) must maintain a register of positions, segregate client holdings from proprietary assets, and hold the means of access securely. Operational resilience evidence should address key-management, wallet architecture (hot/cold segregation), penetration testing, and business continuity for a range of outage scenarios. ESMA’s technical standards and guidelines inform supervisory expectations here (see the ESMA MiCA pages).

Step 5, AML/CFT and KYC implementation evidence

Croatian CASPs are obliged entities under the national anti-money-laundering framework transposing the EU AML directives, published in the Croatian Official Gazette (Narodne novine). The application must demonstrate a documented business-wide risk assessment, a customer due-diligence and enhanced due-diligence policy, transaction-monitoring rules calibrated to the firm’s risk profile, a suspicious-activity reporting (SAR) process linked to the national financial intelligence unit, sanctions screening, and the appointment of a qualified AML compliance officer. Firms should be able to show not just written policies but the operational tooling behind them. Practical guidance on building this out is covered in AML/KYC for CASPs in Croatia.

Step 6, Business plan, financial projections and stress testing

HANFA expects a realistic business plan with three-year financial projections, a clearly articulated revenue model, and evidence that the firm can fund its operations through the ramp-up phase. Projections should reconcile to the capital held and the prudential requirement, and include a base case, a downside case and a stress scenario that tests liquidity buffers under adverse conditions such as a sharp fall in volumes or trading revenue. Where the firm intends to hold client fiat or crypto, the plan must explain safeguarding arrangements and the flow of client money.

A credible plan demonstrates that management understands the unit economics of the proposed services and has thought through resourcing, hiring and technology spend across the authorisation horizon and the first years of trading.

Step 7, Filing the HANFA application and supporting documents

With the file assembled, the application is submitted to HANFA using the prescribed forms and channels published on the supervisor’s website (HANFA). Documents originating in other languages generally require certified Croatian translation, and applicable administrative and supervisory fees must be paid. A complete, well-indexed submission, with a covering schedule mapping each MiCA requirement to the corresponding document, materially shortens the review. Incomplete filings do not start the clock in a meaningful way, so completeness at first submission is the single most valuable investment in the whole mica casp croatia timeline.

Step 8, HANFA review, questions and supervisory interview

Following filing, HANFA reviews the dossier and typically issues written questions or requests for clarification. Expect one or more rounds of follow-up focused on governance, capital, custody and AML controls, and be prepared for a supervisory discussion with proposed management. Prompt, precise responses keep the process moving; treating each query as an opportunity to strengthen the file rather than a hurdle is the pragmatic approach.

Step 9, Decision, licence publication and registry entry

On a positive decision, HANFA issues the authorisation and the CASP is entered in the relevant national and EU registers. The authorisation specifies the exact CASP services the firm is permitted to provide. ESMA maintains a public register of authorised CASPs across the Union, so the entry is visible to counterparties, banks and clients across the EU.

Step 10, Post-authorisation set-up and EU passporting notifications

Authorisation is the beginning, not the end. Before commencing cross-border activity, the firm files passporting notifications through HANFA to the host Member States in which it intends to operate, in accordance with the MiCA notification procedure. Once the notification process runs its course, the firm can serve clients across the EU/EEA under a single authorisation.

Costs, timelines and comparison for mica casp croatia applicants

Cost transparency is one of the strongest reasons founders shortlist Croatia. The mica casp croatia budget breaks down into regulatory fees, formation and administrative costs, professional advisory fees, and the capital that must be held (which is retained by the business rather than spent). Timelines depend overwhelmingly on the quality of the initial filing.

Typical Croatia project budget (one-page summary)

• HANFA fees: statutory application and supervisory fees per the published HANFA fee schedule, confirm current amounts directly with the supervisor.
• Government and formation costs: company registration, notary and court-register fees for establishing the Croatian d.o.o.
• Translation and certification: certified Croatian translations of foreign corporate and personal documents, plus apostille/legalisation where needed.
• Local counsel and project management: drafting and reviewing the policy suite, managing the HANFA dialogue and coordinating resubmissions.
• Auditor and specialist advisers: financial-projection review, IT/security assessment and, where relevant, tax structuring.
• Minimum capital (not a fee): €50,000, €125,000 or €150,000 depending on services, retained within the business as prudential capital under MiCA Article 67.

Comparison table: Croatia vs Malta vs Lithuania

The table below compares the three jurisdictions most frequently shortlisted for EU CASP authorisation. All three deliver the same passportable MiCA licence; the differences lie in fee levels, supervisory culture, banking access and processing pace. For a deeper side-by-side, see Compare CASP jurisdictions: Malta vs Lithuania vs Croatia.

The minimum capital bands are set by MiCA and are therefore identical across Member States, a firm cannot arbitrage capital by choosing a jurisdiction. What varies is fee load, timeline predictability and the practicalities of banking and translation. Croatia can be cost-competitive because local statutory and supervisory fees are generally lower than in the more established hubs, while eurozone membership removes currency friction and Schengen access simplifies staffing and travel. For firms whose priority is a lean, credible EU base rather than proximity to a large existing crypto cluster, the mica casp croatia route is compelling.

Key requirements and eligibility

Understanding whether you need a CASP authorisation, and whether you can satisfy HANFA’s eligibility tests, should precede any commitment of capital. The requirements flow directly from MiCA and are applied through HANFA’s national procedures.

Who needs a CASP under MiCA

MiCA defines crypto-asset services in Article 3 and requires authorisation for any legal person providing those services on a professional basis in the Union. The regulated services include:

• Custody and administration of crypto-assets on behalf of clients.
• Operation of a trading platform for crypto-assets.
• Exchange of crypto-assets for funds or for other crypto-assets.
• Execution of orders for crypto-assets on behalf of clients.
• Placing of crypto-assets, and reception and transmission of orders on behalf of clients.
• Advice on crypto-assets and portfolio management of crypto-assets, and transfer services for crypto-assets on behalf of clients.

If your business model touches any of these on a professional basis within the EU, a CASP authorisation, such as the Croatia VASP licence route through HANFA, is required. Firms that previously operated as registered VASPs under national law must now transition to full MiCA authorisation.

HANFA-specific eligibility checks

Beyond the MiCA baseline, HANFA applies a set of practical eligibility checks. Proposed members of the management body must satisfy fit-and-proper standards, assessed on reputation, honesty, integrity and collective competence (MiCA Article 68). The firm must have its registered office and at least part of its effective management and substance in Croatia; a mere letterbox presence is not acceptable under the substance expectations that underpin MiCA authorisation. Statutory reporting obligations attach from the moment of authorisation, and the applicant should be ready to file periodic returns. HANFA also expects clear allocation of key functions, compliance, risk and AML, to identifiable, qualified individuals, and will probe whether outsourced functions leave the firm with adequate oversight and control.

This substance requirement is why the hanfa casp authorisation process rewards genuine local operational planning rather than paper structures.

Minimum capital and prudential requirements

MiCA Article 67 sets the prudential safeguards for CASPs at the higher of a permanent minimum capital requirement or one quarter of the preceding year’s fixed overheads. The permanent minimum capital is banded by service class: €50,000 for the lightest service categories, €125,000 for an intermediate band, and €150,000 for the most capital-intensive services such as operating a trading platform. Firms must also maintain arrangements for the safekeeping of client funds and crypto-assets, with client assets segregated from the firm’s own.

Liquidity must be adequate to meet obligations as they fall due, and firms holding client fiat must arrange safeguarding consistent with the applicable framework, an area where practical coordination with the Croatian National Bank (HNB) and banking partners becomes relevant.

Non-EU founders and cross-border ownership

MiCA does not prohibit non-EU beneficial ownership of a Croatian CASP, so non-EU founders can pursue authorisation. In practice, HANFA will apply enhanced due diligence to non-EU UBOs, expect transparent ownership structures, and require the same fit-and-proper evidence for controllers regardless of nationality. The firm itself must be established in the EU with genuine local substance, and management responsible for day-to-day operations should be reachable and accountable within the jurisdiction. Non-EU applicants should budget additional time for document legalisation, translation and background verification.

Ongoing compliance & supervision

Authorisation triggers a continuous set of obligations. The firms that fare best treat post-authorisation compliance as a permanent operating discipline, supported where needed by post-authorisation compliance and supervisory support.

Reporting, audits and governance

Authorised CASPs file periodic prudential and operational returns to HANFA, maintain audited annual accounts where required, and keep robust governance records including board minutes and evidence of risk-committee oversight. External audit expectations scale with the firm’s size and the nature of its services. Governance is not a one-off deliverable for the application; HANFA expects the framework documented at authorisation to be lived, with real board meetings, documented decisions and demonstrable oversight of key functions and outsourced providers.

AML/CFT, transaction monitoring and recordkeeping

VASP compliance with HANFA and the national AML authority is continuous. CASPs must operate risk-based transaction monitoring, screen against sanctions lists, file suspicious-activity reports to the financial intelligence unit, and retain customer and transaction records for the statutory retention period set out in the Croatian AML framework (Narodne novine). The EU Transfer of Funds Regulation “travel rule” obligations apply to crypto-asset transfers, requiring originator and beneficiary information to accompany transfers. Firms should maintain an audit trail demonstrating that policies are applied in practice, not merely written.

Consumer protection, advertising and investor limits

MiCA imposes conduct and disclosure duties designed to protect clients. CASPs must provide clear, fair and non-misleading information, publish transparent terms, and ensure marketing communications are identifiable as such and consistent with disclosed information. Where the firm’s activity touches asset-referenced tokens or e-money tokens, additional issuer and reserve rules under MiCA apply. Marketing must not overstate returns or understate risk, and complaint-handling must be accessible and documented.

HANFA supervisory lifecycle and inspections

HANFA supervises through a mix of offsite monitoring, reviewing returns and notifications, and onsite inspections. Where deficiencies are identified, the supervisor can require corrective action, impose administrative measures and, in serious cases, levy fines or move to revoke authorisation. The pragmatic posture is to engage constructively, remediate promptly and keep the supervisor informed of material changes such as new services, changes of control or significant outsourcing.

EU passporting strategy via Croatia

The strategic payoff of the mica casp croatia route is passporting: one authorisation, market access across the entire EU/EEA. A well-sequenced passporting plan turns a national licence into a genuinely pan-European operation.

When passporting is available and how to notify host states

Passporting rights arise once the firm holds a valid CASP authorisation. To operate in another Member State, whether through establishment or by providing services cross-border, the CASP submits a passport notification to HANFA identifying the host states and the services concerned. HANFA transmits the notification to the host competent authorities in line with the MiCA procedure, after which the firm may serve clients in those states. There is no separate host-state authorisation to obtain; the single passport is the design principle of MiCA and the reason jurisdiction choice is primarily about cost, timeline and substance rather than market reach.

Practical timing and operational readiness for cross-border activity

Passporting notifications should be planned alongside the authorisation itself, not as an afterthought. Before switching on cross-border activity, confirm that the firm’s terms, disclosures and, where relevant, language provisions are appropriate for each host market, and that AML and consumer-protection controls scale to the additional customer base. Building host-state readiness into the launch plan avoids a stop-start rollout and lets the firm capitalise on the passport quickly once notifications complete.

Conclusion and next steps

The mica casp croatia route offers founders and advisers a credible, cost-competitive path to a fully passportable EU crypto licence supervised by HANFA. With the MiCA transitional cliff behind the market, the premium now sits on speed, completeness and substance: a well-assembled application with strong governance, clean capital, robust custody and IT evidence, and a genuine AML/CFT programme moves through HANFA far faster than a reactive one. A practical readiness checklist covers company formation, capital funding, the full policy suite, custody architecture, AML tooling and a stress-tested business plan, all mapped to the relevant MiCA articles. Firms aiming to passport should sequence host-state notifications alongside authorisation so cross-border activity can begin the moment the licence is granted.

For those weighing Croatia against Malta or Lithuania, the identical MiCA capital bands mean the decision turns on fees, timeline, banking and substance, areas where the mica casp croatia proposition is consistently attractive. The core message for anyone approaching crypto licensing in Croatia is to treat authorisation as a disciplined, evidence-led project grounded in the primary MiCA text and HANFA’s published guidance.

Sources

• EUR-Lex, Regulation (EU) 2023/1114 (Markets in Crypto-Assets Regulation, MiCA)
• European Securities and Markets Authority (ESMA), MiCA overview and technical documents
• European Commission, Digital Finance / crypto-assets policy
• HANFA (Croatian Financial Services Supervisory Agency)
• Narodne novine (Croatian Official Gazette), national AML/CFT and company law
• Croatian National Bank (HNB), payments and fiat custody guidance