Lithuania · MiCA CASP

MiCA CASP Authorisation in Lithuania: 2026 Complete Guide

Lithuania finalised its MiCA CASP regime in early 2026 and currently leads EU member states on authorisation throughput. Properly prepared applications clear in 4-6 months. Improperly prepared ones take twice as long, for reasons that are predictable and avoidable.

Vilnius skyline — Lithuanian crypto licensing jurisdiction

A MiCA CASP authorisation in Lithuania is the licence issued by the Bank of Lithuania (Lietuvos bankas) under Regulation (EU) 2023/1114 that lets a firm offer crypto-asset services from Lithuania and passport them across all 27 EU member states under a single supervisory regime.

Quick facts

ParameterValue
RegulatorBank of Lithuania (Lietuvos bankas)
Legal basisRegulation (EU) 2023/1114 (MiCA), in force since 30 December 2024
Domestic transpositionLaw on Crypto-Asset Service Providers, adopted 14 December 2024
Authorisation timeline4-6 months from a complete application
Statutory review window40 working days (Article 63 MiCA), with information-request pauses
Initial capital range€50,000 (Class 1) — €150,000 (Class 3)
Application fee€2,500 base + service-specific add-ons
Local substance≥1 director resident in Lithuania, registered office in-country, locally-based MLRO
Transition deadline1 July 2026 for existing Lithuanian VASPs

Why does Lithuania matter for MiCA CASP in 2026?

Lithuania is the fastest mid-tier EU jurisdiction for crypto-asset authorisation in 2026, processing CASP files at roughly twice the rate of Estonia and three times the rate of Czech Republic.

Lithuania has been the fastest mid-tier EU jurisdiction for crypto-asset authorisation since the 2018 e-money licence boom that established the Bank of Lithuania (Lietuvos bankas) as one of the most operationally efficient regulators in the EU. That reputation has carried into the MiCA era. Through Q1 2026 the Bank of Lithuania has processed CASP files at roughly twice the rate of the Estonian Financial Supervision Authority and three times the rate of the Czech National Bank, on the public record.

For founders evaluating EU jurisdictional options, the practical implications are:

  1. Speed. A properly prepared file clears Lithuania in 4-6 months versus 5-7 in Estonia and 6-8 in Czech Republic.
  2. Predictability. The Bank of Lithuania publishes its supervisory expectations in detail and engages constructively in pre-clearance conversation. There are fewer surprises than in jurisdictions where the regulator has been less explicit.
  3. Passporting. A Lithuanian CASP can passport to all 27 EU member states under Article 65 MiCA without re-authorisation.

The trade-off is that supervisory reputation in Lithuania is rated below Estonia or Germany in EU peer reviews. Firms that anticipate later passporting into more conservative member states (the Netherlands, Austria) sometimes choose to file directly in those harder jurisdictions despite the timeline cost.

Which four sources of law govern Lithuanian CASPs?

A Lithuanian CASP application is governed by four parallel sources — MiCA itself, MiCA Level 2 implementing acts, the Lithuanian Law on Crypto-Asset Service Providers, and the Bank of Lithuania’s published supervisory expectations.

A practitioner working on a Lithuanian CASP file is reading from four sources simultaneously, and getting them to agree is half the work:

  1. MiCA itself — Regulation (EU) 2023/1114, in force since 30 December 2024. Direct effect, no domestic transposition needed for most provisions.
  2. MiCA Level 2 implementing acts — RTS and ITS adopted by the European Commission on the basis of ESMA, EBA, and EIOPA technical standards. Most of the operational detail is here.
  3. Lithuanian Law on Crypto-Asset Service Providers — adopted 14 December 2024, transposes the parts of MiCA that require domestic action (sanctions, supervisory cooperation, transitional regime).
  4. Bank of Lithuania supervisory expectations — non-binding but influential. Available on lb.lt and updated approximately quarterly.

The application dossier needs to be coherent against all four. A common deficiency pattern is files that satisfy MiCA itself but contradict the Bank of Lithuania’s supervisory expectations on, for example, MLRO seniority or board composition.

What does the Lithuanian CASP application dossier contain?

The complete dossier covers four document blocks — corporate and governance, operating model, AML/CFT, and prudential — plus DORA ICT-resilience materials, all filed in Lithuanian via the Bank of Lithuania portal.

A complete CASP application in Lithuania includes the following documents. The Bank of Lithuania’s portal accepts each as a separate upload; a deficiency on any one of them pauses the statutory clock under MiCA Article 63.

Corporate and governance

  • Certificate of incorporation of the Lithuanian entity
  • Articles of association
  • Shareholder register and beneficial-owner declarations
  • Organisational chart with reporting lines
  • CVs and fit-and-proper questionnaires for all directors and senior management
  • Conflict-of-interest policy and matrix (mapped to the org chart)

Operating model

  • Business plan with three-year financial projections
  • Service-by-service description of the proposed activities
  • Description of the IT and operational setup, including outsourcing arrangements
  • Risk-management framework
  • Internal-audit and compliance-function structure

AML/CFT

  • AML/CFT policy and procedures manual
  • MLRO appointment letter and CV
  • Customer-due-diligence procedures with sample templates
  • Sanctions-screening procedures
  • Transaction-monitoring procedures
  • Suspicious-transaction reporting procedure
  • AML/CFT risk assessment

Prudential

  • Initial-capital evidence (bank statement from a paid-in EEA credit institution)
  • Professional indemnity insurance certificate (or evidence of additional own funds)
  • Financial soundness statement
  • Recovery and resolution plan (for Class 3 firms)

ICT and DORA

  • ICT risk-management framework
  • ICT third-party risk policy
  • ICT incident-reporting procedure
  • Digital operational-resilience plan (mandatory under DORA Article 6)

The dossier is filed in Lithuanian. Supporting documentation may be in English with a Lithuanian summary. Most specialist counsel handles the Lithuanian translation in-house.

What does the 4-6 month timeline actually look like?

The 4-6 month headline breaks into pre-application preparation (2-3 months), regulator initial review (5-10 working days), substantive review (30-40 working days), and information-request iteration (the variable section).

The headline 4-6 month range obscures a stage-by-stage reality:

StageTypical duration
Pre-application preparation2-3 months
Bank of Lithuania initial completeness review5-10 working days
First substantive review30-40 working days
Information-request iteration2-8 weeks (clock paused)
Final substantive review10-15 working days
Authorisation grant2-3 working days after final review

The variable section is the information-request iteration. Files that have been pre-cleared with the Bank of Lithuania in advance see one or two rounds of light requests. Files that have not been pre-cleared can see four or five rounds of substantive requests, each pausing the clock.

What capital is required across Class 1, 2, and 3?

Class 1 is €50,000, Class 2 is €125,000, and Class 3 is €150,000 — and the class is set by the most prudentially demanding service the firm offers, not by the activity mix.

MiCA Annex IV defines three classes of CASP and three corresponding initial-capital floors. The class is determined by the most-prudentially-demanding service the firm intends to offer — a firm that wants to provide custody (Class 3) must hold Class 3 capital even if the bulk of its activity is exchange (Class 2).

Class 1 — €50,000. Reception and transmission of orders, advice. Lowest-risk services.

Class 2 — €125,000. Exchange, execution, placement, portfolio management. Intermediate-risk.

Class 3 — €150,000. Custody, operation of a trading platform, transfer service for clients. Highest-risk because of client-asset exposure.

On top of the initial-capital floor, firms must hold professional indemnity insurance (PII) or additional own funds proportionate to assets under custody. ESMA’s RTS on initial capital, published December 2024, sets the floor for this overlay; the Bank of Lithuania has not added a domestic gold-plate.

What local substance does the Bank of Lithuania expect?

The Bank of Lithuania expects at least one Lithuanian-resident director able to direct the business, a registered office in-country, and a locally-based MLRO — applied through three concrete substance tests.

MiCA Article 59 requires “real and substantial” presence in the home member state. Lithuania interprets this through three concrete tests:

  1. At least one resident director. The director must be Lithuanian-resident, available in interview, and able to explain the operating model substantively.
  2. Registered office in Lithuania. Not a virtual address. The regulator does on-site visits to a sample of files.
  3. Locally-based MLRO. The MLRO function may not be performed by a remote, part-time, non-Lithuanian person. The Bank of Lithuania has been explicit on this point in supervisory dialogue since Q4 2025.

Resident director substance is the single most common reason for refusal across the EU member states. The Bank of Lithuania has published two refusal decisions in 2025-2026 (anonymised) where the resident director failed the substance interview.

How should you choose counsel for a Lithuanian CASP file?

Pick counsel with personal pre-clearance access at the Bank of Lithuania, in-house Lithuanian-language drafting capacity, and a deliberate specialist focus on crypto-asset licensing rather than a generalist firm with a small crypto sidearm.

Counsel selection for a Lithuanian CASP file is not a generic process. Three considerations matter more than they do for routine corporate work:

  1. Pre-clearance access. Counsel that has personal working relationships with the Bank of Lithuania authorisation desk can shorten the iteration cycle by several weeks. This is hard to evaluate from a website.
  2. Lithuanian-language drafting capacity in-house. The application is filed in Lithuanian. Outsourcing translation to a third-party agency creates handoff errors.
  3. Specialist focus. MiCA CASP authorisation is a specialised practice. Generalist firms with a small crypto sidearm typically produce dossiers that take longer to clear than dedicated specialists.

The firms in our index are scored against the CLPAI methodology, which weights specialisation depth and regulator-engagement quality. Top-quartile firms for Lithuanian CASP work appear in the related-firms section below.

Pitfalls and nuances

1 Filing without an Article 63 pre-clearance walk-through

The Bank of Lithuania has an informal pre-clearance channel. Most refusals we have seen on the public record involved firms that filed without using it. The pre-clearance conversation is voluntary and free; not using it is leaving an asymmetric information advantage on the table.

2 Resident director who cannot survive a substance interview

The regulator interviews the proposed resident director and expects substantive answers about the operating model, governance, and compliance. Several recent refusals involved resident directors who were nominees in fact and could not answer interview questions about the business they had agreed to direct. Set up the directorship around someone who is in the business decision loop.

3 DORA ICT resilience plan that copies the MiCA template verbatim

Lithuania expects the DORA ICT resilience plan to be tailored to the firm's actual ICT setup, not lifted from the regulator's template. Files where the plan is generic get a substantive information request — and the clock pauses while the request is open.

4 Conflict-of-interest matrix that doesn't map to the org chart

MiCA Article 72 requires a conflict-of-interest policy. Bank of Lithuania reviewers cross-check the policy against the firm's governance documents and reporting lines. Files with a generic COI matrix that doesn't match the actual org chart get a deficiency notice.

5 Treating €2,500 as the all-in application fee

The €2,500 base fee covers a single-service authorisation. Each additional service — exchange, custody, transfer — adds a service-specific fee. A Class 3 file with custody, exchange, and transfer typically lands closer to €5,500-€7,000 in regulator fees alone, before legal costs.

Frequently asked questions

How long does MiCA CASP authorisation take in Lithuania in 2026?

Four to six months from filing a complete application is realistic, assuming no major deficiencies in the dossier.

The Bank of Lithuania has a 40-working-day statutory review window under MiCA Article 63, but the clock pauses each time the regulator issues an information request. Files that pre-clear governance, AML, and ICT-resilience documents typically clear in around four months. Files that respond reactively often run to seven or eight.

What is the minimum capital for a Lithuanian CASP?

€50,000 to €150,000 in initial capital, in three tiers matching the MiCA service classification under Annex IV.

Class 1 (reception, transmission, advice) is €50,000. Class 2 (exchange, execution, placement) is €125,000. Class 3 (custody, trading platform operation, transfer for clients) is €150,000. Capital must be paid in to a credit institution or e-money institution licensed in the EEA before authorisation is granted.

Can a non-EU founder hold a Lithuanian CASP?

Yes — but the CASP entity must be Lithuanian, with at least one Lithuanian-resident director and a real local presence.

Foreign ownership is permitted without restriction. What's not permitted is a letter-box. The regulator expects the resident director to actually direct the business — not act as a nominee — and will probe this in interview.

Does an existing Lithuanian VASP automatically convert to a CASP?

No. Existing VASPs must file a separate CASP application before 1 July 2026 to use the transitional regime.

The transitional regime under Article 143 MiCA lets an existing VASP keep operating during Bank of Lithuania review, provided the CASP application is submitted before the deadline. The application itself is full-scope — the same documentary set as for a new entrant. The transition window saves time, not work.

Can a Lithuanian CASP passport to other EU member states?

Yes. A Lithuanian CASP authorisation grants single-market passporting under Article 65 MiCA to all 27 EU member states.

Passporting is by notification, not re-authorisation. The CASP files an Article 65 notification with the home regulator (Bank of Lithuania) for each host state where it intends to operate. The host regulator cannot block on substantive grounds — only on procedural or AML deficiencies.

Sources cited

  1. Regulation (EU) 2023/1114 (MiCA) — regulation
  2. Bank of Lithuania — Crypto-Asset Service Providers — regulator
  3. Lithuanian Law on Crypto-Asset Service Providers (CASP Act) — official document
  4. ESMA Final Report on MiCA Technical Standards on authorisation — official document