Serbia Cryptocurrency Exchange License Overview

Serbia is one of the few European jurisdictions that has adopted a dedicated, comprehensive law governing digital assets, making a serbia cryptocurrency exchange license overview essential reading for any business planning to enter this market. The Law on Digital Assets (Official Gazette No. 153/2020) requires every entity providing virtual-currency services, including exchanges, wallets, and custody providers, to obtain a licence from the National Bank of Serbia (NBS) before commencing operations. At NCR lawyers, I regularly advise founders, in-house counsel, and international exchanges on the corporate structuring, regulatory applications, and compliance architecture required to secure this licence.

This guide sets out the full process, from statutory definitions through to post-licence obligations, so that readers can assess their readiness and plan each step with confidence.

Executive Summary, Quick Answers and Who Should Read This

Yes, cryptocurrency is fully regulated in Serbia. Any business that operates an exchange, provides custody or wallet services, facilitates payment or transfer of virtual currencies, or acts as a broker in digital assets must hold a valid licence. The NBS is the primary licensing authority for virtual-currency services, while the Securities Commission of the Republic of Serbia supervises digital-token-related activities such as white-paper approvals.

This guide is designed for founders launching crypto platforms, compliance officers structuring AML frameworks, in-house counsel evaluating Serbia as a licensing jurisdiction, and corporate advisors preparing application packages. In my experience, a well-prepared applicant can move from initial corporate setup to licence grant in approximately three to six months, though the timeline depends heavily on the quality of the documentation and the responsiveness of the applicant during the NBS review process.

Key takeaways:

• Licensing is mandatory. No entity may provide digital asset services in Serbia without NBS authorisation under the Law on Digital Assets.
• The NBS is the primary regulator. It grants licences for virtual-currency services and maintains the public register of licensed providers.
• Corporate eligibility is strictly defined. Applicants must be Serbian legal entities (or registered branches) meeting minimum-capital, fit-and-proper, and organisational requirements.
• Typical timeline: three to six months. This covers company formation, document preparation, submission, NBS review, and conditional grant.

Legal Framework and Key Definitions Under Serbia’s Crypto Exchange License Regime

Serbia’s digital-asset regulatory architecture is built on the Law on Digital Assets, which entered into force following its publication in the Official Gazette of the Republic of Serbia, No. 153/2020. This statute provides the legal basis for licensing, supervision, and enforcement across all digital asset activities conducted within or from Serbian territory. The law distinguishes between two principal categories of digital assets: virtual currencies (decentralised, cryptographically secured representations of value not issued by a central bank) and digital tokens (representations of rights that may be transferred and stored electronically using distributed-ledger technology).

A digital asset service provider is defined as any legal entity or entrepreneur licensed to provide one or more services related to digital assets, including exchange operations, custody, transfer, and advisory or portfolio-management services. The law establishes a dual-regulator model: the NBS supervises all virtual-currency services, while the Securities Commission oversees digital-token activities, including the approval of white papers for initial token offerings.

The Law on Digital Assets is supplemented by a series of implementing bylaws published by both the NBS and the Securities Commission. These bylaws prescribe the detailed requirements for licence applications, capital adequacy, organisational structure, IT-security controls, and ongoing reporting. From a practical perspective, I always advise clients to read the primary statute alongside the implementing decisions, as the bylaws contain the operational detail that determines whether an application package is complete.

Primary Statutes and Bylaws

Licence Types and Permitted Activities for Digital Asset Service Providers in Serbia

The NBS crypto licence in Serbia covers a defined set of services related to virtual currencies. Understanding which licence category applies to your business model is critical, as each category carries distinct capital and organisational requirements. The principal categories of licensed activities under the Law on Digital Assets include:

• Exchange services (spot trading). Operating a platform that matches buy and sell orders for virtual currencies against fiat currencies or other virtual currencies.
• Custody and wallet management. Safekeeping digital assets and managing private keys on behalf of clients.
• Payment and transfer processing. Facilitating the transfer of virtual currencies between wallets or between parties as part of a commercial transaction.
• Broker and intermediary services. Acting as an intermediary in the purchase or sale of virtual currencies on behalf of clients.
• Token issuance and white-paper consents. Issuing digital tokens to the public, subject to Securities Commission approval of the white paper.

An applicant may seek authorisation for one or more of these activities in a single application. However, the minimum capital requirement scales upward with each additional activity. It is also important to note that supervised financial institutions, such as banks, that wish to provide digital-asset services are subject to additional prudential requirements and must coordinate their applications with both the NBS and their existing supervisory frameworks. In my practice, I have seen applicants benefit from a phased approach, starting with a single core activity and then expanding their licence scope once they have established a compliance track record.

Eligibility and Corporate Requirements for a Serbia Crypto Exchange License

Before an entity can submit a licence application to the NBS, it must satisfy a series of corporate prerequisites. The applicant must be a legal entity registered in Serbia, either a domestic company or a branch of a foreign entity with a registered head office in the country. In practice, the most common corporate form is the Serbian limited liability company (društvo s ograničenom odgovornošću, or d.o.o.), which offers a familiar and efficient structure for both domestic and international founders.

The Law on Digital Assets sets mandatory minimum capital requirements that vary according to the scope of activities the applicant intends to perform. These thresholds are denominated in euros (or the dinar equivalent) and must be fully paid in before the application is submitted. The capital must be maintained on an ongoing basis throughout the life of the licence.

Beyond capital, the NBS applies a fit-and-proper test to all members of the management board, senior officers, and significant shareholders. This test evaluates professional qualifications, relevant experience, personal integrity, and the absence of criminal convictions or regulatory sanctions. Applicants must also submit detailed documentation on corporate governance, internal controls, IT infrastructure, business continuity planning, and outsourcing arrangements.

Minimum Capital and Financial Fitness

I always recommend that clients prepare their documentation package well before the formal submission date, as incomplete filings are the single most common cause of delay during NBS review.

AML, KYC, and Ongoing Compliance for Crypto Businesses in Serbia

Digital asset service providers in Serbia are classified as obliged entities under the Law on the Prevention of Money Laundering and the Financing of Terrorism. This means they must implement a full AML/KYC compliance programme equivalent in rigour to the requirements placed on banks and other financial institutions. In my view, this is the area where many first-time applicants underestimate the investment required, both in terms of policy development and day-to-day operational execution.

The AML framework requires providers to conduct customer due diligence (CDD) before establishing a business relationship and on an ongoing basis throughout the relationship. Enhanced due diligence applies to higher-risk customers, including politically exposed persons (PEPs), customers from high-risk jurisdictions, and transactions above prescribed thresholds. Providers must appoint a designated AML compliance officer, maintain transaction-monitoring systems, and report suspicious transactions to the Administration for the Prevention of Money Laundering.

Required Policies and Sample Controls

• Written AML/CFT policy. A comprehensive internal document covering risk assessment methodology, CDD procedures, record-keeping rules, and staff-training schedules.
• Customer identification and verification. Collecting and verifying identity documents for all customers, beneficial owners, and authorised representatives before onboarding.
• Transaction monitoring. Automated systems capable of flagging unusual patterns, structuring attempts, and high-value transactions in real time.
• Suspicious-transaction reporting. Immediate internal escalation and timely filing of reports with the Administration for the Prevention of Money Laundering.
• Record retention. All CDD records and transaction data must be retained for a minimum period as prescribed by the AML law (typically ten years after the business relationship ends).
• Staff training programme. Ongoing training for all employees involved in onboarding, transaction processing, and compliance, with documented attendance records.
• Independent audit. Periodic internal or external audit of the AML programme to ensure effectiveness and identify gaps.

In our experience at NCR lawyers, the NBS pays close attention to the quality and specificity of the AML policy during the licence-review stage. Generic, off-the-shelf AML templates are consistently flagged for revision.

Application Process, Step-by-Step Guide to a Serbia Cryptocurrency Exchange License

Obtaining a crypto exchange license in Serbia follows a structured, multi-stage process. Below is the chronological checklist I use with clients, broken into the principal phases.

Phase 1: Pre-Application, Company and Board Readiness

1. Incorporate the Serbian legal entity. Register a d.o.o. (or branch) with the Serbian Business Registers Agency (APR). Ensure the articles of association expressly include digital-asset services in the company’s registered activities.
2. Appoint management and AML officer. Select directors and senior officers who meet the NBS fit-and-proper criteria. Appoint an AML compliance officer with relevant qualifications and experience.
3. Capitalise the company. Deposit the required minimum share capital into a Serbian bank account in the name of the company.
4. Develop internal policies. Draft the AML/CFT policy, IT-security policy, business continuity plan, risk-management framework, and complaints-handling procedures.
5. Engage with the NBS informally. In my practice, I strongly recommend arranging a pre-application meeting with the NBS to clarify expectations and confirm that the documentation package is on track.

Phase 2: Submission, Forms and Fees

1. Complete the NBS application form. The form requires detailed disclosure of the applicant’s corporate structure, ownership chain, planned activities, technology stack, and financial projections.
2. Compile the supporting documentation. This includes articles of association, shareholder KYC, CVs and personal questionnaires for directors, audited financial statements (if available), business plan, AML policy, IT-security documentation, and proof of capital.
3. Submit the application to the NBS. Lodge the complete package at the NBS and pay any applicable administrative fees. The NBS will issue an acknowledgement of receipt.

Phase 3: Review and Queries

1. NBS completeness check. The NBS assesses whether the application is formally complete. If documents are missing or deficient, the NBS issues a request for supplementary information.
2. Substantive review. The NBS evaluates the fit-and-proper status of management, the adequacy of capital, the robustness of internal controls, and the quality of the business plan. Expect follow-up queries during this phase.
3. On-site or technical inspection. In some cases, the NBS may conduct an on-site visit or request a technical demonstration of the exchange platform and its compliance controls.

Phase 4: Granting and Conditions

1. Decision. The NBS issues a formal decision granting or refusing the licence. The typical decision timeline is three to six months from the date of a complete submission.
2. Post-decision filings. Upon grant, the licensed entity must complete registration in the NBS records, publish the licence details as required, and commence reporting obligations from the first day of operations.

Post-Licence Obligations, Reporting, and Supervisory Interactions

Securing the licence is not the end of the compliance journey, it is the beginning. Licensed digital asset service providers in Serbia are subject to ongoing supervisory obligations that require consistent operational discipline. The NBS has published detailed implementing decisions on reporting requirements, which prescribe the format, content, and timing of periodic submissions.

Common Post-Licence Conditions and Timelines

• Periodic NBS filings. Licensed entities must submit quarterly and annual reports to the NBS covering transaction volumes, customer numbers, AML activity, and financial performance.
• Annual audited accounts. Financial statements must be audited by an independent auditor and submitted to both the APR and the NBS within the prescribed deadlines.
• Incident reporting. Any security breach, system failure, or material operational disruption must be reported to the NBS immediately and followed by a detailed written incident report.
• Maintenance of capital. The minimum capital requirement must be maintained at all times. Any reduction below the threshold triggers an obligation to notify the NBS and take corrective action.
• Changes to management or ownership. Any proposed change in directors, senior officers, or significant shareholders must be pre-approved by the NBS under the fit-and-proper framework.
• On-site supervisory visits. The NBS reserves the right to conduct periodic or unannounced on-site inspections to verify compliance with licence conditions.

Non-compliance with reporting obligations or licence conditions can result in supervisory measures ranging from formal warnings and corrective orders to the suspension or revocation of the licence. From what I am seeing in practice, the NBS is taking an increasingly active supervisory stance as the number of licensed entities grows.

Practical Considerations, Taxes, Banking, and Market Access

One of the most frequently asked questions I receive concerns banking access. Holding a valid NBS licence significantly improves a crypto exchange’s ability to open and maintain bank accounts with Serbian commercial banks. Unlicensed offshore platforms, by contrast, face considerable difficulty accessing Serbian payment rails and may encounter heightened scrutiny from correspondent banks. The licence serves as a signal of regulatory legitimacy that banks rely on when conducting their own due-diligence assessments.

From a tax perspective, digital asset service providers are subject to standard Serbian corporate income tax. Capital gains arising from the trading of digital assets may be taxable for both corporate and individual participants, though the specific treatment depends on the nature and frequency of transactions. I advise clients to obtain formal tax guidance from the Ministry of Finance or a qualified Serbian tax advisor before launching operations, as the interaction between digital-asset income and existing tax obligations can be nuanced.

Serbia’s growing reputation as an entrepreneur-friendly jurisdiction with a clear, dedicated crypto licensing regime is also a strategic advantage for entities seeking to expand into the broader Western Balkans market or to establish credibility with EU-based partners and correspondent banks.

Comparison Table, Reporting and Obligations by Entity Type

The following table summarises how key reporting and compliance obligations differ depending on the entity type and licensing status of a digital asset service provider operating in Serbia.

Conclusion and Recommended Next Steps for Your Serbia Cryptocurrency Exchange License

Serbia offers a clear, regulator-backed pathway for crypto exchanges and digital asset service providers seeking a reputable European licence. The process is demanding but navigable with the right preparation. My recommended next steps for any prospective applicant are as follows:

1. Engage a corporate lawyer in Serbia with direct experience in NBS licensing applications.
2. Prepare corporate formation documents, shareholder KYC, and management CVs well in advance of submission.
3. Conduct a thorough AML gap analysis and develop a bespoke compliance policy tailored to your business model.
4. Initiate early banking outreach to identify Serbian banks willing to onboard licensed digital-asset providers.

Sources

1. Law on Digital Assets, Official English Text (National Bank of Serbia)
2. National Bank of Serbia, Digital Assets Licensing Page
3. Securities Commission of the Republic of Serbia, Law on Digital Assets
4. Law on the Prevention of Money Laundering and the Financing of Terrorism (Ministry of Finance)
5. NBS, Reporting Obligations for Virtual Currency Service Providers
6. Regional Law Review, Legal Aspects of Digital Asset Market in the Republic of Serbia