How to Obtain a Mica NCA Authorisation Via the Central Bank of Ireland

Ireland has rapidly established itself as one of the most credible and accessible jurisdictions for firms seeking a MiCA NCA Ireland authorisation to operate crypto-asset services across the European Union. With the Central Bank of Ireland (CBI) processing and granting its first MiCA CASP authorisations during 2025, the jurisdiction offers a proven regulatory pathway, English-language engagement, and full EU passporting capability. This guide provides a practical, regulator-grounded roadmap for non-EU and EU firms preparing to apply for an Irish MiCA licence covering every step from pre-application scoping through to cross-border passporting.

Quick Summary What MiCA Is, the Role of the NCA, and Why EU Passporting Matters

The Markets in Crypto-Assets Regulation (MiCAR), formally Regulation (EU) 2023/1114, is the EU’s comprehensive framework governing the issuance, offering and provision of services relating to crypto-assets. It covers Crypto-Asset Service Providers (CASPs), issuers of Asset-Referenced Tokens (ARTs) and E-Money Tokens (EMTs), and establishes harmonised conduct, prudential and governance rules across all EU Member States.

Under MiCA, each Member State designates a National Competent Authority (NCA) to receive, assess and decide on CASP authorisation applications. The Central Bank of Ireland has been designated as Ireland’s NCA for MiCAR purposes, with statutory responsibility for authorising, supervising and where necessary sanctioning CASPs operating from Ireland.

The central commercial advantage of an Irish MiCA authorisation is EU passporting: once a firm is authorised by the CBI, it may notify host-state NCAs and provide its authorised crypto-asset services across all EU and EEA Member States without obtaining separate licences in each jurisdiction. For US, UK and other non-EU firms, this creates a single gateway to the world’s largest regulated digital-asset market.

Why Choose Ireland for Your MiCA Application

Regulatory Posture and NCA Approach

The Central Bank of Ireland has a well-established track record as a financial services regulator, overseeing banking, insurance, funds and payments. Its approach to MiCA is consistent with this heritage: rigorous but accessible, with a strong emphasis on supervisory engagement before and during the authorisation process. Ireland is one of few NCAs operating entirely in English, which substantially reduces documentation and communication friction for international applicants.

Corporate and Tax Practicalities

Ireland offers a favourable corporate environment for financial services firms. Common structures include Irish-incorporated private limited companies with locally resident directors. The CBI expects meaningful substance including local senior management and compliance functions and applicants should plan for genuine operational presence rather than brass-plate arrangements. Ireland’s corporate tax regime is well understood by international businesses, and professional services infrastructure for fund administration, audit and legal support is deep.

Ecosystem and Service Providers

Dublin hosts a mature financial services ecosystem, with established banking relationships, specialist compliance consultancies, and technology providers experienced in regulatory onboarding. This ecosystem is a practical advantage: securing banking services, appointing compliance officers, and sourcing ICT infrastructure can all be achieved locally, which accelerates the application timeline and demonstrates substance to the CBI. Industry observers expect Ireland’s position to strengthen further as more CASPs cluster in the jurisdiction and service-provider capacity expands.

Central Bank of Ireland: What Applicants Must Know

Designation as the Irish NCA

The Central Bank of Ireland is the single point of contact for all MiCA-related authorisation and supervision in Ireland. Applicants file all materials directly with the CBI, and the CBI is responsible for maintaining Ireland’s CASP register. All statutory instruments giving effect to MiCAR in Ireland are published on the CBI’s dedicated MiCAR landing page, which should be treated as the primary reference for regulatory expectations.

Key Central Bank Publications

Applicants should review and internalise the CBI’s core guidance materials before beginning their application. These include:

• MiCAR Landing Page and FAQs: The CBI publishes detailed frequently asked questions covering transitional arrangements, the simplified procedure for existing VASPs, and application logistics.
• Authorisation and Supervision Expectations: The CBI’s Authorisation and Supervision Expectations guidance note sets out what the regulator expects to see in a complete application pack covering governance, AML/CFT, ICT, capital and client-asset safeguarding.
• Annual Reports and Industry Briefings: The CBI publishes annual reports containing data on authorisation volumes and processing statistics, providing valuable benchmarks for applicants.

Practical Change: Portal Mandatory from 2 April 2026

From 2 April 2026, all CASP authorisation applications must be submitted via the Central Bank’s online portal. Applicants should familiarise themselves with the portal’s document upload and attestation requirements well in advance to avoid delays at the point of filing.

Step-by-Step How to Obtain an Irish MiCA Authorisation

The MiCA application Ireland process is intensive but well-defined. Below is a ten-step roadmap aligned with CBI expectations and ESMA’s Supervisory Briefing on the Authorisation of CASPs under MiCA.

1. Step 0: Pre-application scoping. Map your business model to the CASP service classes defined in MiCA (custody, trading, exchange, transfer, advice, portfolio management, etc.). Identify your cross-border footprint, target markets and outsourcing dependencies. Early engagement with the CBI typically through a pre-application meeting is strongly recommended.

2. Step 1: Fitness & probity and senior management mapping. Identify all persons who will hold Pre-Approval Controlled Functions (PCFs) and Controlled Functions (CFs). Prepare Fitness & Probity (F&P) questionnaires, CVs, reference checks and declarations for each individual. The CBI will assess competence, probity and financial soundness of all proposed senior managers.

3. Step 2: Governance and organisational framework. Establish a board of directors with appropriate independence and expertise. Draft terms of reference for board committees (risk, audit, compliance, nomination). Document your organisational chart, reporting lines and three-lines-of-defence model.

4. Step 3: AML/CFT readiness. Conduct a firm-wide money laundering and terrorist financing risk assessment. Develop and document your customer due diligence (CDD) and enhanced due diligence (EDD) procedures, transaction monitoring programme, and suspicious activity reporting (SAR) processes. Appoint a Money Laundering Reporting Officer (MLRO) with sufficient authority and resources.

5. Step 4: ICT and operational resilience. Document your ICT governance framework, including cybersecurity controls, business continuity planning, disaster recovery and incident response. Address outsourcing arrangements particularly cloud and third-party technology providers in line with MiCA and CBI expectations. Ensure alignment with the Digital Operational Resilience Act (DORA) requirements where applicable.

6. Step 5: Prudential and capital arrangements. Determine your minimum capital requirement based on the CASP service classes you intend to operate. Prepare evidence of capital instruments (equity, reserves) and safeguarding arrangements for client assets. Establish clear segregation of client funds from proprietary assets.

7. Step 6: Financial projections, business plan and whitepaper notifications. Prepare a three-year financial projection and a detailed business plan covering products, markets, revenue model, staffing and risk appetite. If you intend to issue crypto-assets, prepare and notify the required whitepaper under MiCA Title II.

8. Step 7: Drafting the application pack. Compile all required documents into the prescribed format: application form, board resolutions approving the application, all policies and procedures, capital evidence, F&P packs and attestations. Use the CBI’s Authorisation and Supervision Expectations guidance note as your document checklist. A comprehensive Ireland MiCA NCA application checklist is available for download see the MiCA application checklist (download) resource for the full document list.

9. Step 8: Submission via the Central Bank Portal. Submit the completed application pack via the CBI’s online portal (mandatory from 2 April 2026). Pay the applicable application fee. Confirm receipt and reference number with the CBI.

10. Step 9: Supervisory engagement and remediation. Following submission, the CBI will review the application and typically issue requests for information (RFIs) or remediation queries. Respond promptly, comprehensively and with board-level sign-off where required. Maintain a log of all regulator interactions and outstanding items.

11. Step 10: Decision, registration and passporting. Upon satisfactory assessment, the CBI will grant authorisation and enter the firm on Ireland’s CASP register. The authorised firm may then initiate the passporting notification process with host-state NCAs to begin offering services in other EU Member States.

Comparison Requirements, Cost and Timeline by CASP Activity Class

Important caveat: The capital figures and timelines above are indicative ranges based on publicly available information and industry experience. Exact requirements depend on the specific CASP activities, delegated Regulatory Technical Standards (RTS) and Implementing Technical Standards (ITS), and the CBI’s individual assessment of each applicant. Applicants should not treat these figures as binding.

Capital, Cost and Timeline Estimates

Capital Bands and What They Cover

MiCA prescribes minimum initial capital requirements that vary by CASP service class, with the lowest thresholds applying to firms offering advice or transfer services and higher thresholds for trading platforms and exchanges. Beyond initial capital, firms must maintain ongoing capital buffers typically calculated as a proportion of fixed overheads or a percentage of safeguarded client assets, whichever is higher. The CBI may impose additional capital requirements where it identifies elevated risk profiles.

One-Time and Recurring Costs

The total cost of obtaining a CASP licence in Ireland extends well beyond the statutory capital requirement. Applicants should budget for the following categories:

Note: These estimates exclude banking onboarding costs (which can be significant for crypto firms) and ongoing operational expenditure post-authorisation. All figures are editorial estimates only and do not constitute a fee quote.

Timeline Scenarios

The CBI’s processing time depends significantly on the quality and completeness of the application at submission. A well-prepared custody-only applicant with clean governance and straightforward operations may receive a decision within four to six months. Complex multi-service firms particularly those operating fiat on-ramps, extensive outsourcing chains, or novel token products should plan for eight to fourteen months or longer, especially where material remediation is required during the assessment phase. ESMA has emphasised that NCAs should not compromise assessment rigour in favour of speed, so applicants should prioritise completeness over haste.

Key Requirements and Eligibility Checklist

Fitness & Probity, Governance and Risk Management

The CBI expects all proposed directors, senior managers and holders of controlled functions to satisfy its Fitness & Probity standards. Boards must demonstrate collective expertise in financial services, technology, risk management and compliance. Risk management frameworks must be documented and tested, with clear escalation paths and board-level oversight.

AML/CFT Standards and the VASP Registration Transition

Firms previously registered as Virtual Asset Service Providers (VASPs) under Ireland’s anti-money laundering framework may be eligible for a simplified procedure under MiCA’s transitional provisions. However, AML/CFT standards for full CASP authorisation are significantly more demanding than VASP registration, and applicants should not assume their existing frameworks are sufficient without a detailed gap analysis.

ICT, Outsourcing, Custody and Client-Asset Segregation

The CBI aligned with ESMA supervisory expectations applies heightened scrutiny to ICT governance, cybersecurity controls and outsourcing arrangements. Custody providers must demonstrate robust key management, segregation of client assets from proprietary holdings, and clear contractual arrangements with any third-party technology or infrastructure providers.

Documentation and Proof Points

Applicants must provide board minutes evidencing oversight, adopted policies (AML, risk, ICT, complaints handling, conflicts of interest), internal audit plans, and financial statements. The CBI’s expectations document provides a granular checklist of required evidence. Incomplete applications are the single most common cause of delay.

Common Pitfalls Applicants Make

Based on publicly available CBI guidance and ESMA’s supervisory briefing, the following are among the most frequent reasons applications are delayed, returned for remediation, or refused:

• Poorly defined business model or product taxonomy: Failing to map services accurately to MiCA’s CASP activity classes leads to misaligned governance and capital structures.
• Weak AML/CFT frameworks: Superficial risk assessments, inadequate KYC/EDD procedures, or a lack of dedicated AML resources are common deficiencies.
• Incomplete outsourcing and ICT controls: Applicants frequently underestimate CBI expectations on cloud risk management, vendor due diligence and operational resilience testing.
• Under-estimating senior management F&P evidence: Late or incomplete F&P submissions particularly for overseas-based directors routinely delay the assessment cycle.
• Inadequate capital or unclear client-asset segregation: Failing to demonstrate that capital instruments are in place, or that client assets are legally and operationally segregated, will halt the process.

How to Avoid Them

The most effective mitigation is a structured pre-application programme: conduct a regulatory gap analysis against the CBI’s authorisation expectations document; run a mock supervisory Q&A session with senior management; complete all F&P packs before filing; and ensure that every policy submitted is not only drafted but adopted, tested and evidenced with board minutes. A pre-audit of ICT and AML/CFT controls ideally by an independent third party substantially reduces the risk of extended remediation cycles.

Post-Authorisation: Compliance and Passporting

Ongoing Reporting, Governance and Prudential Requirements

Authorisation is the beginning, not the end, of the regulatory relationship. Authorised CASPs must comply with ongoing reporting obligations (including financial returns, complaints data and significant incident notifications), maintain capital adequacy at all times, and submit to periodic CBI supervisory reviews. Governance structures and policies must be kept current and adapted to reflect changes in services, markets or risk profile.

EU Crypto Passport Ireland Passporting Mechanics

An Irish-authorised CASP may passport services to other EU Member States by notifying the CBI, which in turn communicates with the relevant host-state NCA. The notification must specify the services to be offered, the target Member States and the arrangements for local compliance. Not all services may be passportable in identical form; host-state marketing rules, language requirements and local AML cooperation obligations may apply.

Practical Checklist for Launching Cross-Border Services

Before launching in a new Member State, firms should: confirm that the passporting notification has been acknowledged; appoint a local compliance point of contact; review host-state consumer-protection and marketing rules; establish AML information-sharing arrangements with host-state financial intelligence units; and update the firm’s risk assessment to reflect the new jurisdiction’s risk profile. The CBI has published warning notices for consumers regarding unauthorised crypto-asset service providers, underscoring that operating without proper authorisation or passporting carries significant enforcement risk.

Real-World Signals

The Central Bank of Ireland authorised multiple CASPs during 2025, as reflected in its Annual Report 2025, confirming that the Irish MiCA authorisation pathway is operational and producing outcomes. The CBI continues to publish guidance, host industry briefings and update its FAQ materials signals that applicants should interpret as evidence of both regulatory maturity and sustained scrutiny. Industry observers expect Ireland’s volume of MiCA applications to continue increasing through 2026 as firms that delayed during the transitional period now move to full authorisation.

Sources

• Markets in Crypto-Assets Regulation (MiCAR) EUR-Lex summary of Regulation (EU) 2023/1114
• Central Bank of Ireland Markets in Crypto-Assets Regulation (MiCAR) landing page
• Central Bank of Ireland MiCAR: Frequently Asked Questions
• Central Bank of Ireland MiCAR Authorisation and Supervision Expectations
• ESMA Supervisory Briefing on the Authorisation of CASPs under MiCA (31 January 2025)
• Central Bank of Ireland Annual Report 2025 and Annual Performance Statement 2025–2026
• Central Bank of Ireland Consumer Warning: Unauthorised Crypto-Asset Service Providers