Estonian FSA CASP Process: A 2026 Practitioner Guide

Why the Estonian FSA tightened in 2026

The Estonian Financial Supervision Authority spent 2017-2024 building supervisory experience around the country’s VASP regime. Late 2024 and early 2025 saw a wave of high-profile registration revocations involving firms whose substance arrangements had drifted away from the basis of their original registrations. The political response was the 2026 Estonian Crypto-Asset Service Providers Act, which added domestic gold-plating on substance, MLRO, and DORA ICT-resilience requirements above the MiCA baseline.

The supervisory pivot is explicit. FSA staff have stated in industry conferences and in published commentary that the agency intends to apply the same substance discipline to MiCA CASP files that it applied to e-money authorisations during the 2018-2022 wave — a regime that produced one of the highest authorisation-quality records in the EU.

How does the FSA decide an application in 2026?

The FSA evaluates a complete application against three review tracks running in parallel — completeness, substantive fitness-and-probity, and operational substance — with the slowest track determining when the decision issues.

Completeness review

The first stage runs against a checklist of required documents. Five to ten working days. A deficiency on any required item pauses the substantive clocks. Common completeness deficiencies in 2026:

• Missing or out-of-date corporate extracts (older than 30 days)
• Missing PII certificate (or evidence of additional own funds)
• Missing capital-paid-in confirmation from an EEA-licensed credit institution
• Application form completed in English rather than Estonian

Files prepared by specialist counsel typically clear completeness review without flags. Files prepared in-house or by generalist counsel typically receive one to three completeness deficiencies.

Substantive fitness-and-probity review

Senior management and qualifying shareholders are reviewed against the FSA’s fitness-and-probity criteria. Thirty to forty working days. The FSA uses information requests to pursue specific concerns rather than broad re-reviews. Common F&P request patterns:

• Detailed CV evidence for prior regulatory experience claims
• Source-of-wealth documentation for shareholders above 25%
• Adverse-media checks on directors and senior management
• Confirmation of clean regulatory record from prior home jurisdictions

Operational substance review

The most variable section. The FSA assesses whether the firm’s actual operating model matches the application documentation. This involves the substance interview with the proposed resident director and senior management.

The substance interview is the leading single cause of refusal in 2026. FSA reviewers ask substantive questions about the operating model, the AML framework, and the firm’s risk appetite. Resident directors who cannot answer these questions in their own words — rather than reading from a script — are flagged. We have seen at least three public-record refusals in 2026 involving substance-interview failures.

What does a clean Estonian CASP application look like in 2026?

A clean filing has five characteristics that are visible to the reviewer in the first thirty seconds of completeness review:

1. Estonian-language application form completed accurately, with all sections populated and consistent across the form and supporting documents.

2. Resident director who is genuinely engaged — typically Estonian, sometimes a long-term Estonian resident foreign national, with a verifiable track record of decision-making in the firm’s space.

3. MLRO appointment letter and CV showing Estonian residency, 0.5+ FTE allocation, and 5+ years AML experience in a regulated firm.

4. DORA ICT resilience plan that names the actual hyperscaler and region, references specific third-party contracts, and includes concentration-risk analysis with documented mitigations.

5. Conflict-of-interest matrix that maps to the actual organisational chart in the application — not a generic template lifted from the regulator’s sample.

Files with all five characteristics typically clear in 5-6 months. Files with one or more gaps typically run to 7-8.

The supervisory dialogue channel

The FSA does not formally pre-clear applications, but it engages in supervisory dialogue with proposed applicants who have specific structural questions. The dialogue is initiated by emailing the FSA’s authorisation desk with a short, focused query — not a request for general guidance.

Counsel that has personally used the dialogue channel can indicate informally whether a substance arrangement is likely to clear. This is materially valuable on edge cases (unusual board composition, complex group structure, non-EU founder with significant Estonian operations). Counsel without active relationships with the desk cannot deliver this signal.

Working with counsel on an Estonian CASP file

Three diagnostics on counsel quality at the Estonian-CASP stage:

1. Estonian-language drafting capacity in-house. Counsel that outsources translation creates handoff errors that the FSA notices. Look for in-house Estonian-language drafting capability, not “we work with Estonian translators”.

2. Active dialogue access at the FSA authorisation desk. Hard to verify from a website, but easy to verify in conversation — counsel that has used the channel can describe specific supervisory positions on edge cases.

3. Prior refused-or-withdrawn applications. Counsel that claims a 100% success rate has either filed very few applications or is being economical with the truth. Counsel that can describe what they learned from a refused application is generally more valuable than counsel that cannot.

The firms in our index that have processed five or more Estonian CASP files since 2024 are listed in the related-firms section below. Their CLPAI scores are based on the published methodology applied to their full practice — not specifically to their Estonian work.