MiCA replaces the national patchwork with a single EU authorization for crypto-asset service providers. In Lithuania, the Bank of Lithuania supervises CASPs, and the country’s established base of crypto businesses — together with its prior VASP regime — makes it one of the more navigable on-ramps to a MiCA license.
A CASP authorization is service-specific. You apply for the activities you intend to perform — custody and administration, operation of a trading platform, exchange of crypto for funds or other crypto, execution of orders, placing, transfer services, portfolio management and advice. Choosing that list correctly, and evidencing the governance behind it, is the core of the application.
We manage the Lithuanian pathway end to end: entity and substance, the governance and fit-and-proper file, the compliance and AML programme, prudential requirements where they apply, and the regulator engagement through to authorization — then the banking and operational build that follows.
Pick your services deliberately
The scope of your authorization should match your actual products — no more, no less. We calibrate the service list against the revenue model, not a template.
Governance is the gate
MiCA expects real substance: fit-and-proper management, internal controls and a credible compliance function. We build that file properly.
Passport without becoming run-only
Authorization in Lithuania supports cross-border service provision across the EEA for the activities granted, so the license serves the whole European plan.
Indicative requirements. Every regime is applied with judgement — we confirm exactly what your file needs during the feasibility phase.
- EU-established legal person (Lithuanian entity typical) with a local presence
- Application for the specific crypto-asset services you will provide
- Fit-and-proper management body and qualifying shareholders
- AML/CFT and business-continuity programmes
- Governance, complaints and conflicts-of-interest policies
- Safekeeping and client-asset protection arrangements, where applicable
- Robust ICT and cybersecurity safeguards
- Prudential requirements where the service list triggers them
- 01
Service scope & feasibility
We define exactly which MiCA services you need, test that against your products and revenue, and confirm the Lithuanian route is the right primary jurisdiction before you commit.
- 02
Entity & substance
Establish or adapt the EU entity, set the management body, local presence and shareholding structure the regulator will scrutinise.
- 03
Governance & compliance build
Fit-and-proper file, AML/CFT programme, conflicts and complaints policies, ICT and security documentation, safeguarding or custody model.
- 04
Application & regulator engagement
Prepare and file the authorization, manage Bank of Lithuania queries and clarifications through to determination.
- 05
Implementation & banking
Sponsor-bank and payment introductions, custody or safekeeping arrangements, compliance staffing and launch support.
Yes — the shift to MiCA raised the bar rather than closing the door. Firms with genuine governance and compliance substance are being authorized; sub-scale shell operations are not. The regime rewards serious operators.
National VASP registrations do not survive the transition indefinitely. Firms wishing to continue under MiCA need CASP authorization, and there are transitional arrangements with firm deadlines. We map where you are against those deadlines and the required uplift.
For the services authorized, yes — MiCA provides for cross-border provision across the EEA. Some member states impose additional local requirements for certain activities, so we check the markets you actually target.
MiCA sets minimum own-funds requirements that scale with the services you provide, and prudential expectations sit on top. We fix the number against your specific service list at the feasibility stage rather than quoting a single figure that will not apply to you.