Passporting Via Liechtenstein in 2026: Practical Guide for Banks, Investment Firms and Crypto Businesses

Last updated: 18 May 2026

Passporting via Liechtenstein has become one of the most strategically attractive routes for financial firms seeking seamless access to the entire European Economic Area. The 2024–2025 wave of legislative reforms, a revised Banking Act (BankG), the incorporation of the EU’s Markets in Crypto-Assets Regulation (MiCAR) alongside Liechtenstein’s existing Token and Trustworthy Technology Act (TVTG), and the transposition of the EU Listing Act, means that 2026 is the first full operational year in which banks, investment firms, crypto-asset service providers (CASPs) and issuers can exploit these new licensing and passporting channels.

This guide provides a step-by-step compliance checklist, covering FMA licensing requirements, host-state notification mechanics, prospectus passporting and the governance changes that compliance officers, general counsel and fintech founders need to operationalise now.

Executive Summary and Decision Flow for Liechtenstein Passporting

Any firm considering passporting via Liechtenstein in 2026 should begin with a three-step decision flow before engaging counsel or the Finanzmarktaufsicht (FMA):

1. Choose your entity type and licence route. Determine whether you are establishing a credit institution (bank), an investment firm, a CASP, or an issuer seeking to passport a prospectus. Each route triggers a different FMA application pathway and a distinct set of EU-harmonised requirements.
2. Obtain FMA authorisation and national registration. Complete the formal licensing process with the FMA, including fit-and-proper assessments, capital adequacy checks, governance documentation and AML/CTF compliance frameworks. Liechtenstein-incorporated entities must maintain effective local management.
3. Notify and passport into host EEA states. Once licensed, trigger the passporting mechanism: for banks and investment firms, the FMA sends a notification letter to the host-state competent authority; for CASPs, the MiCAR notification regime applies; for issuers, the approved prospectus is passported to target jurisdictions.

Top three action items for project sponsors:

• Schedule a pre-application meeting with the FMA at least eight weeks before your target filing date.
• Map your planned activities against the specific licence category, misclassification is the single most common cause of delay.
• Engage local directors and compliance officers early; the FMA expects demonstrable Liechtenstein substance from the outset.

Regulatory Landscape After the 2024–2025 Reforms

Liechtenstein’s financial market framework underwent a comprehensive modernisation between 2020 and 2025, driven by an academic-regulatory project coordinated through the University of Liechtenstein and the Government’s financial market policy division. The result is a harmonised, EEA-compatible regulatory architecture that aligns Liechtenstein more closely with EU financial law while preserving the jurisdictional advantages, political stability, efficient supervision and competitive tax treatment, that have historically attracted financial institutions.

What Changed in BankG 2025 and Why It Matters for Liechtenstein Passporting

The revised Banking Act (Bankengesetz, or BankG) introduced updated governance and prudential standards that mirror the EU’s Capital Requirements Directive framework. Key changes relevant to passporting include strengthened board composition requirements, mandatory risk committee structures for larger institutions, enhanced recovery and resolution planning obligations, and tighter rules on outsourcing critical functions. The FMA’s supervisory powers were also expanded, giving it broader authority to impose conditions on cross-border branch establishment and freedom-of-services notifications. Industry observers note that these changes were essential for maintaining Liechtenstein’s passporting credibility with host-state regulators across the EEA.

MiCAR Incorporation and the CASP Regime in Liechtenstein

The incorporation of MiCAR into Liechtenstein’s EEA legal framework creates a fully harmonised licensing and passporting regime for crypto-asset service providers. This sits alongside the existing TVTG, which remains relevant for token classification, trustworthy technology service providers and on-chain governance. For CASPs seeking to offer custody, exchange, advisory or portfolio management services across the EEA, MiCAR now provides the primary authorisation pathway. Crypto licensing in Liechtenstein thus operates on a dual-track basis: MiCAR governs passportable CASP activities, while the TVTG continues to regulate token-specific services and infrastructure providers that fall outside MiCAR’s scope.

EU Listing Act, Prospectus Passporting Changes

The EU Listing Act reforms, transposed into Liechtenstein law, streamline prospectus requirements for public offers and secondary listings. The revised framework raises certain exemption thresholds, simplifies follow-on issuance prospectuses and clarifies the mechanism for passporting an FMA-approved prospectus to other EEA member states. For issuers choosing Liechtenstein as their home member state, the practical effect is a faster, more predictable route to multi-jurisdictional capital raising.

Which Services Can Be Passported via Liechtenstein?

Liechtenstein’s membership of the EEA means that financial firms licensed by the FMA can exercise freedom of establishment (branching) or freedom of services (cross-border provision without a branch) across all 30 EEA states. The scope of passportable activities depends on the entity type:

• Banks (credit institutions). Deposit-taking, lending, payment services, securities underwriting, custody and related banking activities listed under Annex I of the Capital Requirements Directive. Once authorised under the BankG, a Liechtenstein bank may notify the FMA of its intention to establish a branch or provide services in any EEA state.
• Investment firms. Portfolio management, investment advice, execution of orders, reception and transmission of orders, and ancillary services as classified under MiFID II. Liechtenstein investment firms passport through the standard MiFID notification procedure.
• Crypto-asset service providers (CASPs). Custody and administration of crypto-assets, operation of trading platforms, exchange services, order execution, placement, transfer services, advice and portfolio management, all as defined under MiCAR. A CASP licensed in Liechtenstein under MiCAR can passport its authorised services across the EEA without seeking separate national licences.
• Issuers (prospectus passporting). Any issuer that obtains FMA approval for a prospectus under the Prospectus Regulation (as amended by the Listing Act) can passport that prospectus into other EEA jurisdictions for public offers or admission to trading on regulated markets.

FMA Licensing and Notification: Step-by-Step Checklist

The FMA Liechtenstein licensing process follows a structured pathway that industry observers generally describe as thorough but constructive. The regulator encourages early engagement and publishes guidance on its website. Below is a detailed checklist, split by entity type, with estimated processing timelines.

Banks, Licensing, Capital and Governance Requirements

Establishing a credit institution in Liechtenstein requires a full banking licence under the BankG. The FMA expects applicants to demonstrate:

• Business plan. A detailed three-to-five year plan covering target markets, revenue projections, risk appetite and capital planning.
• Capital adequacy. Proof of paid-up initial capital meeting the minimum thresholds specified under the BankG (aligned with the CRD framework). The exact amount depends on the institution’s activities and systemic profile.
• Governance structure. Board composition (including independent non-executive directors), defined committee mandates (audit, risk, remuneration where applicable), and clear organisational charts demonstrating effective local management in Liechtenstein.
• Fit-and-proper assessments. Comprehensive documentation for all directors, senior managers and qualifying shareholders, CVs, criminal record extracts, declarations of interest, and evidence of relevant professional experience.
• AML/CTF framework. A fully developed anti-money-laundering and counter-terrorist-financing compliance programme, including a risk assessment methodology, KYC policies, transaction monitoring procedures and a designated compliance officer.
• IT and operational resilience. Documentation covering core banking systems, cybersecurity policies, business continuity plans and outsourcing arrangements for critical functions.

The FMA typically requests a pre-application meeting to discuss the project scope and identify potential issues before formal submission. This meeting also sets expectations around the depth of documentation required.

Investment Firms, Licence Classes and Application Pathway

Liechtenstein investment firms are authorised under national legislation transposing MiFID II. The FMA classifies firms by the scope of their regulated activities, ranging from limited-scope firms offering investment advice only to full-service firms undertaking execution and portfolio management. Applicants must submit:

• A detailed list of regulated activities sought, mapped against the MiFID II activity categories.
• A business plan, governance documentation and capital adequacy evidence proportionate to the licence class.
• Systems and controls documentation covering best execution policies, conflict-of-interest management, client categorisation and complaints handling.

The investment firm application process is generally faster than a full banking licence, reflecting the narrower scope of regulated activities.

Crypto-Asset Service Providers, MiCAR and TVTG Alignment

For firms seeking crypto licensing in Liechtenstein, the application pathway now centres on MiCAR for passportable CASP activities. Applicants should prepare:

• TVTG-to-MiCAR mapping. If the firm already holds or previously applied for a TVTG registration, a gap analysis showing how existing documentation aligns with MiCAR requirements.
• IT security and custody arrangements. Detailed technical documentation covering wallet infrastructure, key management, segregation of client assets and cybersecurity penetration testing results.
• Whitepaper and product descriptions. For issuers of crypto-assets, a MiCAR-compliant whitepaper; for service providers, a clear description of each crypto-asset service to be offered.
• AML/KYC programme. A compliance framework that meets both Liechtenstein’s Due Diligence Act (SPG) obligations and MiCAR-specific requirements, including travel-rule compliance for transfer services.

The FMA has indicated that it expects CASP applicants to demonstrate genuine operational substance in Liechtenstein, including local compliance personnel and documented decision-making processes.

Issuers and the Prospectus Route Under the Listing Act

Issuers choosing Liechtenstein as their home member state for prospectus purposes must submit a complete prospectus to the FMA for review and approval. The EU Listing Act reforms have introduced a more streamlined format for follow-on issuances and raised certain de minimis exemption thresholds. The FMA reviews the prospectus for completeness, consistency and comprehensibility before granting approval, which then enables passporting to any other EEA jurisdiction where the issuer intends to offer securities or seek admission to trading.

FMA Submission Timeline, Estimated Processing Times

Note: All processing times are estimates based on publicly available FMA guidance and industry experience. Actual timelines depend on application completeness and the complexity of the proposed activities.

Practical Mechanics of Passporting into Host EEA States

Securing the FMA licence is only the first phase. The practical mechanics of passporting via Liechtenstein into host EEA states require careful coordination between the applicant, the FMA and the target-country competent authority.

Notification Versus Full National Authorisation

EEA passporting operates on a notification basis, the licensed firm does not need to obtain a separate national licence in each host state. Instead, the FMA transmits a notification to the host-state competent authority setting out the activities the firm intends to provide. For branch establishment, the notification includes details of the branch’s management, address and organisational structure. For cross-border services (freedom of services), the notification is lighter, typically listing only the activities and the target member state. The host state generally cannot refuse the notification provided the FMA has completed its checks, though it may set local conduct-of-business requirements that the firm must observe.

Typical Host-State Responses and Timelines

Under the standard regulatory framework, the host-state competent authority has a defined window (typically two months for branch notifications) to communicate any applicable local rules. In practice, industry observers note that some jurisdictions, particularly those with active supervisory oversight traditions, may request additional information about the firm’s local arrangements, appoint a liaison contact or require submission of local language documentation. Firms should budget additional time and, where necessary, engage local counsel in key target markets to manage these interactions.

Ongoing Compliance After Passporting

Once passporting is established, compliance obligations do not end. The home-state regulator (FMA) retains primary prudential supervisory responsibility, while host-state authorities typically oversee local conduct-of-business rules. Firms must maintain:

• Prudential reporting to the FMA as required under the BankG, MiFID implementing legislation or MiCAR, as applicable.
• Local conduct-of-business compliance in each host state where activities are conducted.
• AML/CTF compliance in accordance with both Liechtenstein’s Due Diligence Act and any host-state requirements where services are provided locally.
• Transaction reporting and market abuse monitoring under applicable EU regulations (MAR, EMIR, MiCAR as relevant).

Reporting Obligations by Entity Type

Prospectus and Listing Practicalities: Using Liechtenstein as a Listing Venue

For issuers choosing Liechtenstein as the home member state for a public offering or an admission to trading on a regulated market, the EU Listing Act prospectus requirements provide a clear roadmap. The practical steps are as follows:

1. Choose the prospectus type. Determine whether a full prospectus, a simplified prospectus for secondary issuances or a growth-issuance document is required based on the offer size, issuer status and exemption thresholds.
2. Prepare prospectus content. The prospectus must contain the information necessary for investors to make an informed assessment, including risk factors, financial statements (audited), business description, use of proceeds and the prospectus summary in the mandated format.
3. Submit to the FMA for review. The FMA reviews the prospectus for completeness, consistency and comprehensibility. The review period is typically ten working days for initial comments on a first-time filing, with additional review cycles as needed.
4. Obtain FMA approval. Once the FMA is satisfied, it issues a formal approval. This approval carries a validity period (currently twelve months from the date of approval) during which the prospectus may be used for offers.
5. Passport to host EEA states. The issuer instructs the FMA to notify the competent authorities of the EEA states where the securities will be offered or admitted to trading. The FMA transmits the approved prospectus and a certificate of approval. The host-state authority may not impose additional approval requirements on the content of the prospectus.

Sample Prospectus Timeline

• Weeks 1–6: Prospectus drafting, due diligence, legal opinions, financial statement preparation.
• Week 7: Submission to FMA.
• Weeks 8–11: FMA review, comment rounds and revisions.
• Week 12: FMA approval granted.
• Week 13: Passporting notifications transmitted to target host states.
• Weeks 14–15: Host-state acknowledgement; roadshow and pricing commence.

Early coordination between legal counsel, auditors and the investment bank managing the transaction is critical to avoiding delays. The FMA’s willingness to engage in pre-submission dialogue is an advantage that issuers should actively utilise.

Governance, Prudential and Operational Changes Under BankG 2025

The revised BankG 2025 introduced a series of governance and prudential requirements that directly affect institutions planning to passport services from Liechtenstein. Compliance teams should treat these as threshold requirements, failure to meet them will delay or prevent the licensing process.

Board Composition and Risk Committees

The revised BankG requires credit institutions and certain large investment firms to establish dedicated risk committees at board level, separate from the audit committee. Board members must collectively possess adequate knowledge of Liechtenstein’s legal and regulatory environment, and the FMA expects at least some non-executive directors to be resident locally or in adjacent EEA states. Diversity of expertise, including risk management, IT and compliance backgrounds, is increasingly scrutinised during fit-and-proper assessments.

Recovery and Resolution Planning

Institutions authorised under the BankG must prepare and maintain recovery plans that identify credible options for restoring financial viability in stress scenarios. For entities deemed systemically relevant or that form part of a cross-border group, the FMA cooperates with EEA resolution authorities on group resolution plans. Industry observers expect the FMA to focus increasingly on the resolvability of passporting institutions, particularly where critical functions are delivered across multiple EEA states.

Outsourcing and Third-Party Dependencies

Firms outsourcing critical or important functions, including IT infrastructure, custody or compliance activities, must ensure that outsourcing arrangements comply with the BankG’s enhanced requirements. The FMA retains the right to inspect outsourced service providers, and host-state regulators may also assert oversight where services are delivered locally. Practical red flags include:

• Cloud-hosting arrangements where data residency provisions conflict with host-state regulatory expectations.
• Custody outsourcing to entities outside the EEA without adequate contractual protections and supervisory access rights.
• Overdependence on a single IT provider without adequate business continuity and exit planning.

Risk, AML/CTF and Supervisory Pitfalls to Avoid

The most common reasons for delay or rejection in the FMA licensing and passporting process relate to AML/CTF deficiencies and insufficient local substance. Firms should pay particular attention to the following:

• KYC and customer due diligence. Liechtenstein’s Due Diligence Act (Sorgfaltspflichtgesetz, or SPG) imposes rigorous obligations. Firms passporting into high-risk jurisdictions must demonstrate enhanced due diligence procedures proportionate to the risk profile of their target client base.
• Beneficial ownership transparency. The FMA expects clear and up-to-date beneficial ownership structures for both the applicant entity and its qualifying shareholders. Opaque offshore holding structures are a frequent cause of additional queries.
• Cross-border supervision friction. When passporting, the home-state (FMA) and host-state regulators share supervisory responsibility. Firms should designate a single point of contact for regulatory queries and establish internal escalation protocols for supervisory requests from multiple jurisdictions.
• Substance requirements. The FMA will not authorise entities that function as letterbox companies. At minimum, firms must maintain qualified local management, a physical office and documented local decision-making processes.

Practical Annexes and Checklists for Passporting via Liechtenstein

One-Page FMA Application Checklist by Entity Type

Banks (credit institutions):

• Business plan (3–5 year projections)
• Proof of initial capital (bank statement or escrow confirmation)
• Board and senior management CVs, criminal record extracts, fit-and-proper declarations
• Governance documentation (board charter, committee terms of reference, organisational chart)
• AML/CTF compliance programme (risk assessment, KYC policies, transaction monitoring procedures)
• IT and operational resilience documentation (systems architecture, BCP, cybersecurity policy)
• Outsourcing register and third-party contracts for critical functions
• Recovery plan (or draft, if pre-licence)

Investment firms:

• Regulated activities list mapped to MiFID II categories
• Business plan and capital adequacy evidence
• Governance and fit-and-proper documentation
• Best execution policy, conflicts-of-interest policy, complaints handling procedure
• AML/CTF programme

CASPs (MiCAR route):

• TVTG gap analysis (if existing TVTG registration)
• IT security documentation, wallet architecture, key management policy
• Client asset segregation procedures
• MiCAR-compliant whitepaper (if issuing crypto-assets)
• AML/KYC programme including travel-rule compliance
• Product descriptions for each CASP service

Quick-Start Timeline Template for Project Managers

• Day 0–90: Entity structuring, local director recruitment, initial FMA engagement (pre-application meeting), first-draft documentation preparation.
• Day 90–180: Formal application submission, FMA review and Q&A cycles, remediation of any documentation gaps, capital deployment.
• Day 180–360: Licence grant (target), passporting notifications to host states, operational go-live, first-cycle regulatory reporting.

Key Regulator Contact Points and Forms

• FMA Liechtenstein, licensing enquiries, application forms and published guidance are available through the FMA’s official portal.
• Liechtenstein Government (Regierung), official legal translations of the BankG, SPG and financial market legislation are published on the government’s legislative database.
• EEA host-state competent authorities, each target jurisdiction maintains a designated contact point for incoming passporting notifications. The FMA can provide current contact details upon request as part of the passporting notification process.

For assistance identifying the right adviser for a Liechtenstein licensing or passporting project, consult our lawyer directory.

Sources

1. Finanzmarktaufsicht Liechtenstein (FMA), Official Portal
2. Liechtensteinische Landesverwaltung (Government of Liechtenstein)
3. University of Liechtenstein, New Concept for Financial Market Law
4. Niedermüller Rechtsanwälte, How Passporting via Liechtenstein Works
5. European Commission, Markets in Crypto-Assets Regulation (MiCAR)
6. EUR-Lex, EU Listing Act and Prospectus Regulation
7. Global Legal Insights, Banking and Finance Laws: Liechtenstein
8. Baker McKenzie, Liechtenstein Regulatory Guidance