VASP Registration in Poland Complete Guide for Crypto Businesses

Poland has emerged as a strategic entry point for crypto businesses seeking an EU foothold. Whether you operate an exchange, wallet service, custody platform or OTC desk, understanding VASP registration in Poland is essential before you can lawfully serve European customers. This guide walks founders, compliance officers and service providers through every stage of the process from eligibility and documentation to costs, timelines and the critical transition toward full EU authorisation under the Markets in Crypto-Assets Regulation (MiCA).

Poland offers competitive incorporation costs, a well-established corporate infrastructure and proximity to EU banking rails. However, there are important caveats: the national VASP register is an AML-driven registration not a financial licence and Polish authorities have signalled practical limits on new entries since 30 December 2024. With MiCA’s CASP authorisation deadline approaching, businesses must plan carefully to avoid gaps in their regulatory standing.

Download: Poland VASP Registration Checklist PDF (template pack including AML policy, KYC SOP, CV declarations and technical-architecture diagram).

What Is Poland’s VASP Registration?

Poland’s national VASP regime is grounded in the Act of 1 March 2018 on Counteracting Money Laundering and Terrorism Financing (the Polish AML Act). The statute defines “waluta wirtualna” (virtual currency) and requires entities carrying out activities involving virtual currencies on a professional basis to obtain entry in the Rejestr działalności w zakresie walut wirtualnych the official register of virtual-currency activity. The competent organ responsible for maintaining this register is the Director of the Tax Administration Chamber in Katowice (Izba Administracji Skarbowej w Katowicach, “KAS Katowice”).

A Poland crypto licence under this framework confers the right to conduct specified virtual-currency services while imposing comprehensive AML, KYC and reporting obligations. It does not, however, constitute a prudential financial licence comparable to a banking or investment-firm authorisation.

Distinction from Financial Licences and MiCA CASP Authorisation

It is critical to understand that entry in the Polish VASP register is not equivalent to a CASP authorisation under MiCA. The KAS Katowice has published explicit guidance clarifying that registered entities are not automatically authorised under EU law. MiCA introduces an entirely separate authorisation regime with prudential capital requirements, governance standards, conduct-of-business rules and supervisory oversight that registered VASPs must eventually satisfy or cease operations.

Who Needs to Register on the Poland VASP Register?

Under the Polish AML Act, any entity conducting the following activities on a regular, professional basis must secure registration before commencing operations:

• Fiat-to-crypto exchange (on/off ramps): Buying or selling virtual currencies against legal tender (PLN, EUR, USD, etc.) as a service to third parties.
• Crypto-to-crypto exchange: Operating a platform or desk that facilitates the exchange of one virtual currency for another.
• Custody and wallet services: Safekeeping private keys, maintaining wallets or providing custodial storage of virtual currencies on behalf of clients.
• Brokerage and OTC desks: Intermediating virtual-currency transactions for clients, whether on-exchange or over-the-counter.
• Crypto payment intermediation: Facilitating payments in virtual currencies between merchants and consumers or between counterparties.
• Account and portfolio management: Managing portfolios or accounts that hold virtual currencies, where applicable under national classification.

The statutory trigger is regular or professional activity occasional personal transactions do not require registration. The precise scope is set out in the Polish AML Act, and businesses should verify their service model against the applicable provisions before filing.

Step-by-Step VASP Registration in Poland: Application Checklist

The following numbered process provides a practical roadmap for completing your application to the Poland VASP register. Each step should be treated as a prerequisite for the next.

1. Pre-check and eligibility assessment. Confirm which of the regulated activities your business model involves. Determine the appropriate Polish entity type (typically a spółka z ograniczoną odpowiedzialnością sp. z o.o.) and evaluate whether your planned services require additional regulatory considerations beyond the VASP register.
2. Incorporation and corporate documents. Establish a Polish legal entity with a registered office in Poland. Prepare the following corporate documents:
   • Articles of Association (Umowa spółki): defining the company’s scope, share structure and governance.
   • Share register and ownership chain: evidencing the identity of all shareholders and ultimate beneficial owners.
   • Minutes of board meeting: appointing management board members, the AML Officer and authorised signatories.
   • Specimen signatures: notarised signature cards for directors and signatories.

   Register the entity in the National Court Register (KRS), obtain a NIP (tax identification number) and REGON (statistical number), and complete VAT registration where applicable.

3. AML documentation suite. Draft and adopt comprehensive AML/CFT policies, including:
   • AML Policy: covering risk assessment methodology, CDD/EDD procedures, PEP screening, sanctions obligations, and escalation protocols.
   • Transaction monitoring policy: rules, thresholds and tools for detecting suspicious activity including blockchain analytics integration.
   • Sanctions policy: procedures for real-time screening against EU, UN and OFAC sanctions lists.
   • Internal controls and audit plan: framework for periodic independent review of AML controls.
   • Training records: documented AML training programme for all staff, with attendance and assessment records.
4. Governance and personnel. Prepare detailed CVs and formal declarations for all senior managers and the proposed AML Officer / Compliance Officer. Declarations should confirm the absence of criminal convictions and fitness-and-propriety attestations. Where functions are outsourced, provide agreements and due-diligence files for external providers.
5. Operational and technical documents. Compile:
   • Technical architecture description: system diagrams showing data flows, custody mechanisms and integration points.
   • Custody arrangements: description of hot/cold wallet infrastructure, key management and segregation protocols.
   • Security audit reports: penetration-test results, SOC 2 or equivalent attestations, and vulnerability assessments.
   • Business continuity and disaster recovery plan: documented procedures for system failures, data loss and incident response.
6. Financials and treasury. Provide a pro forma profit-and-loss statement, projected transaction volumes, and evidence of initial capital or funding adequacy. While the Polish VASP registration itself does not impose prudential capital thresholds comparable to MiCA, demonstrating financial viability strengthens your application.
7. Submission package. Assemble the complete filing dossier for KAS Katowice. The official KAS Katowice information page lists the required forms and submission procedures. Support contacts include rtw.help@mf.gov.pl and the Krajowa Informacja Skarbowa helpline. Ensure all foreign-language documents are accompanied by certified Polish translations, and that foreign public documents carry apostilles or equivalent legalisation.
8. Filing. Submit via the e-Deklaracje online portal or through the KAS Katowice designated electronic channel. Retain the system acknowledgement and filing receipt for your records.
9. Post-submission. Expect information requests from KAS and be prepared for checks by the General Inspector of Financial Information (GIIF) or the Polish Financial Supervision Authority (KNF). Maintain complete record-retention files and ensure all personnel are available for clarification calls or interviews.

Practical tips: Notarisation and certified translations are among the most common sources of delay. Engage a sworn translator early, and confirm apostille requirements for documents issued outside Poland. Keep a master tracker of all documents and their certification status to avoid last-minute gaps.

Template pack (available in downloadable PDF):

• AML Policy: GLE-AML-POLICY-PL.pdf executive summary and full policy document.
• KYC/Onboarding SOP: GLE-KYC-SOP-PL.docx standard operating procedure for client onboarding.
• Incident Response Plan: GLE-IRP-V1.pdf cybersecurity and breach response template.
• Technical Architecture Diagram: template .pptx for system-architecture documentation.
• Manager CV and Declarations: GLE-CV-DECL.docx standardised CV format and fitness-and-propriety declaration.

Costs and Timeline for VASP Registration in Poland

The VASP registration cost in Poland divides into two categories: government/registry fees and professional advisory fees.

Registry fees are nominal. The administrative stamp and filing charges imposed by KAS Katowice are relatively small. Specific amounts should be confirmed against the current KAS Katowice guidance at the time of filing, as they can be updated.

Professional fees represent the vast majority of the investment. These cover entity formation, AML policy drafting, compliance infrastructure, technical and security readiness, legal advisory and submission support. Market estimates range widely depending on the complexity of the business model:

Note: Professional fees are market estimates based on industry benchmarks. Registry admin fees are relatively small; the professional readiness programme drives the overall cost.

Realistic timeline breakdown:

• Preparation (company formation + policies + tech readiness): 4–12 weeks depending on complexity and document readiness.
• Submission and administrative review: 4–12 weeks, often longer for exchange or custody models.
• Common delays: Incomplete AML documentation, absence of a Polish representative or local director, missing certified translations, late penetration-testing or security attestation delivery.

Infographic reference: Preparation (0–3 months) → Submission (0–1 month) → Review (1–3 months) → Remediation & Final Registration (1–3 months).

AML, KYC and Reporting Obligations Under Polish Law

Entities entered on the Poland VASP register are classified as “obligated institutions” under the Polish AML Act and must comply with the following core obligations:

• Customer Due Diligence (CDD/KYC): Identity verification of all clients before establishing a business relationship. Enhanced due diligence (EDD) applies to high-risk customers, PEPs and complex ownership structures.
• Transaction monitoring: Continuous, rules-based monitoring of transactions for suspicious patterns, unusual volumes and sanctions-list hits.
• SAR/STR reporting to GIIF: Suspicious Activity Reports and Suspicious Transaction Reports must be filed promptly with the General Inspector of Financial Information.
• Internal controls and governance: Documented AML policies, written risk assessments, periodic independent audits and board-level oversight of the compliance function.
• Record retention: Client files and transaction records must be retained for a minimum of five years after the end of the business relationship.
• Central Register of Beneficial Owners (CRBR): All Polish entities must report beneficial ownership information to the CRBR.

Organisational requirements include the appointment of a Money Laundering Reporting Officer (MLRO), a training programme for all employees, and documented procedures for escalation and internal reporting. Regulators inspect governance structures, KYC files, transaction-monitoring rule calibration, sanctions-screening effectiveness and AML training logs during supervisory checks.

Industry observers expect that the EU-level Travel Rule and related implementing measures under MiCA will further tighten requirements for crypto-asset transfers, making early investment in compliance infrastructure a strategic priority for Poland AML requirements VASP compliance.

Non-EU Entities and Corporate Structuring Options

Non-EU companies can access the Poland VASP register, but the structuring route matters significantly for regulatory acceptance and operational efficiency.

• Polish subsidiary (sp. z o.o.): The preferred route. Establishing a dedicated Polish limited-liability company provides a clean corporate identity, facilitates appointment of local management, and creates the strongest foundation for both VASP registration and future CASP authorisation. Substance requirements include local directors, a physical registered address, Polish accounting and tax compliance, and signatory authority for regulatory filings.
• Branch of a non-EU entity: Faster to establish but often attracts greater regulatory scrutiny. A branch does not constitute a separate legal person, which can complicate AML accountability, capital segregation and governance expectations.

Practical considerations: Certified translations and apostilles will be required for all foreign corporate documents. Beneficial-owner information must be filed with the CRBR. Having at least one Polish-resident director or authorised representative significantly smooths communication with KAS Katowice, GIIF and the KNF. A subsidiary is generally the recommended route for businesses seeking to establish long-term regulatory trust and a clean path to eventual MiCA transition.

MiCA and CASP Transition: What 2026 Changes Mean for Your Business

Regulation (EU) 2023/1114 MiCA creates a unified EU authorisation framework for crypto-asset service providers (CASPs). This replaces the patchwork of national registrations with a single set of prudential, organisational and conduct-of-business requirements, and introduces EU-wide passporting.

Under MiCA’s transitional provisions, entities that were providing crypto-asset services under national frameworks prior to 30 December 2024 may continue operating in certain Member States until 1 July 2026, or until their CASP authorisation application is granted or refused. However, the precise transitional arrangements vary by Member State, and Poland’s competent authorities have published guidance emphasising that national register entry does not convert into a CASP licence.

Practical CASP planning checklist:

• Gap analysis: Compare your current Polish AML register compliance against MiCA’s requirements capital adequacy, governance structures, custody segregation, IT resilience and market-conduct rules.
• Governance and capital upgrades: Strengthen board composition, secure prudential capital or insurance, build out incident-reporting frameworks and implement conduct-of-business controls.
• Acquisition strategy alignment: If using a pre-registered VASP as a short-term entry strategy, prepare holding-structure and acquisition materials well in advance so that the transition to CASP authorisation is seamless.

The key takeaway: a MiCA transition Poland strategy should be initiated now, not deferred until mid-2026. Businesses that treat VASP registration as a stepping stone and invest early in MiCA-grade compliance will be best positioned when the transitional window closes.

Alternatives: Buying a Pre-Registered VASP vs Applying

Given the practical limitations on new register entries since late 2024, some businesses consider acquiring a company that already holds a Polish VASP registration. This can shorten time-to-market but demands rigorous due diligence.

Due-diligence checklist for buying a VASP company in Poland:

• Registry verification: Confirm the entity’s entry on the official KAS Katowice register.
• AML compliance history: Review KYC files, transaction-monitoring logs and any GIIF/KNF notices or enforcement actions.
• Outstanding liabilities: Check for tax debts, pending litigation and regulatory fines.
• Management and ownership chain: Verify that all beneficial owners and directors are documented and that the CRBR filing is current.
• Bank accounts and technical infrastructure: Confirm active banking relationships and custody/technology integrity.

Red flags: Missing or incomplete KYC files, pending enforcement actions, absence of technical audit records, or unverifiable transaction histories should prompt pause or price adjustment.

How Global Law Experts Helps with VASP Registration in Poland

Global Law Experts connects businesses with vetted local counsel and corporate service providers who specialise in Polish crypto registration and EU regulatory strategy. Service packages are structured around three core needs:

• Compliance audit and AML pack: Gap analysis, AML policy suite, KYC SOPs and training-programme design tailored to your business model.
• Full registration and technical readiness: End-to-end support from entity formation through policy drafting, security attestation coordination and submission management with KAS Katowice.
• Acquisition due diligence: Comprehensive review of pre-registered VASP targets, including registry verification, AML compliance history, liability assessment and restructuring advisory.

Typical engagement flow: discovery call → tailored proposal → formal engagement → phased delivery with milestone reporting. All engagements are coordinated through GLE’s Poland-based local partners, ensuring direct access to counsel familiar with KAS Katowice procedures, GIIF expectations and KNF supervisory practice.

Resources and Further Reading

Poland AML & KYC checklist MiCA & CASP transition guide Buying a pre-registered VASP Poland corporate services GLE local partners in Poland.

Sources

• Regulation (EU) 2023/1114 Markets in Crypto-Assets Regulation (MiCA), EUR-Lex
• Ustawa z dnia 1 marca 2018 r. o przeciwdziałaniu praniu pieniędzy oraz finansowaniu terroryzmu (Polish AML Act) ELI/ISAP
• Rejestr działalności w zakresie walut wirtualnych Izba Administracji Skarbowej w Katowicach (gov.pl)
• Informacja dla klientów KAS Katowice notice on VASP register vs MiCA authorisation (gov.pl)
• ESMA Interactive Single Rulebook MiCA
• European Commission MiCA Level 2 Measures (delegated/implementing acts)
• KNF Communication on crypto supervision and regulatory remit