1. Estonia CASP legal access conditions and regulatory bottom line
Physical structure and substantive operations (Substance)
The applicant must be a legal person with a registered office in an EU member state，Its actual place of management should be within the EU，and configure management that matches the requested CASP service、personnel、Technology and Internal Control Resources。
Eligibility Check (Fit and Proper)
management members、Qualified shareholders and other key personnel must pass reputation and suitability reviews。Management should demonstrate knowledge appropriate to the responsibilities、Skills and experience，However, FSA’s current application instructions do not set a unified “two-year experience” threshold.。
Legal capital paid in and account custody
MiCA divides CASP permanent minimum capital by service scope into €50,000、125,000Euro and 150,000 Euro third tier。The licensee’s prudential protection must also be no less than one quarter of the previous year’s fixed management fees，The actual requirement is the higher of the two。
Appointment of Internal Control System and Compliance Specialist
Application materials must describe AML/CFT risk assessment、Customer due diligence、Sanctions Screening、Transaction monitoring、Suspicious transaction upgrade、Business continuity and ICT security arrangements，And clarify the competent compliance person in charge and the actual performance mechanism。
2. Legal approval and compliance implementation process
first stage：Entity and shareholding structure preparation
Collect the identities and criminal certificates of executives and UBOs for notarization and apostille authentication。Legally set up an Estonian limited liability company (Ltd) or joint stock company。
second stage：Prudent Capital and Account Arrangements
50,000 determined based on the CASP service applied for、125,000or capital tranche of €150,000，And also check the dynamic requirement of one quarter of the fixed administrative expenses of the previous year.。
The third stage：Application documents and operation system
Prepare business plan、governance structure、Qualification materials for shareholders and executives、AML/CFT internal control、Customer asset isolation、Complaint handling、ICT Security and Business Continuity Documentation。
Stage 4：FSA integrity and substance assessment
FSA will evaluate whether the materials are complete within 25 working days after receiving the application.；After the application is complete，Assess compliance with MiCA and Estonia’s Crypto-Asset Markets Act within 40 working days，The deadline may be suspended for up to 20 working days due to supplementary information.。
3. fees、Statutory Capital and Tax System Explanation
FSA official application processing fee：CASP、When an asset reference token issuer or electronic money institution applies for a relevant crypto-asset market license，The current processing fee is €3,000。
Prudent own funds：Corresponding to 50,000 according to the application service scope、12.5Permanent minimum capital of 10,000 or 150,000 euros，And compare it with one quarter of the fixed administrative expenses of the previous year, whichever is higher。
localized operating expenses：Managers should be、Compliance、ICT、Customer asset isolation、Audit and office expenses included in financial forecasts，Avoid substituting unsubstantiated estimates of flat rent or personnel costs for actual quotes。
税务口径：Estonian companies generally pay corporate income tax when distributing profits；The standard tax rate will be 22/78 from 2025。VAT treatment of crypto businesses should be judged individually based on specific services and counterparties.。
4. The absolute red line that triggers the penalty of rejection or withdrawal of license
Shell structure and non-resident management：The applicant fails to confirm the actual physical office location in the country，or failure to legally appoint a local resident director and dedicated AML compliance officer who meets the competency test，The application will be rejected directly。
Capital violations and SoF disconnect：Failure to pay in full legal currency capital in the EEA account before submitting the application，or the paid-in capital cannot be provided legally、Traceable proof of wealth source (SoF/SoW)，Hitting the dead end of anti-money laundering inspection。
Overdue MiCA standard limits：Existing entities approved under the old rules are only allowed to operate until 2026 Year 7 moon 1 day，No automatic panning mechanism。Those who have not obtained the new FSA CASP authorization upon expiration must be forced to cancel their business。
5. Estonia MiCA regulatory transition and legislative process timeline
- 2024 end of year：MiCA regulations fully effective
Estonia’s Crypto-Asset Market Law Enters into Force，Crypto regulatory framework and EU MiCA regulations and Digital Operations Resilience Regulation(DORA) Comprehensively realize legal coherence and alignment。
- 2025 Year 1 moon 1 day：FSA officially takes over
Estonia’s crypto asset regulatory authority rests with Financial Intelligence Unit (FIU) Transferred to the Financial Supervisory Authority (FSA)，This marks the beginning of the crypto industry’s full application of traditional financial-level regulatory scrutiny.。
- 2026 Year 7 moon 1 day：grandfather clause(Grandfathering)Expiration
For existing encryption companies that have been approved under the old regulations，Its legal operating authority during the transition period will terminate at this node。All existing service providers must obtain new authorization from the FSA under the new framework by this date。
6. Practical Legal Questions and Answers (FAQ)：Full analysis of approval paths and compliance pain points
It is possible according to law。Estonian crypto regulation fully aligned with EU MiCA regulations。After obtaining compliance authorization，Enterprises can legally conduct business in the European Union market through the passport mechanism，Enjoy full EU market access and legal recognition。
Estonia generally does not levy corporate income tax on undistributed profits immediately；From 2025，The standard tax rate for profit distribution is 22/78。Whether VAT is involved must be analyzed separately based on specific crypto asset services.。
Applications should not be made with a shell structure。Applicants must have a registered office in the EU，The actual place of management should be within the EU，and configure personnel that match the service scope、Technology and Internal Control Resources。The FSA’s current instructions do not require a uniform deployment of “1–2 Estonian resident directors”。
MiCA Annex IV stipulates 50,000 according to the scope of services、125,000or a permanent minimum capital of €150,000；At the same time, the requirement of one-quarter of the fixed administrative expenses of the previous year must be met.，Actual prudential protection is the higher of the two。
Censorship is extremely strict。ultimate beneficiary (COUGH) And shareholders must disclose and provide clear proof of legal sources of funds and wealth accumulation.。Supervision will verify the legality of the investment path in accordance with the law，Preventing Money Laundering and Terrorist Financing Risks。
Management and qualified shareholders must have good reputation，Management must also possess knowledge appropriate to their responsibilities、Skills and experience。FSA vets managers via suitability form，There is no unified “two years’ experience” threshold in the current application instructions.。
In addition to company structure documents，The case file must contain：At least a two-year business plan and financial forecast、Internal AML/KYC/KYT Policy Document，and detailing IT systems、Technical Note on Cybersecurity and Business Continuity Planning。
FSA assesses application completeness within 25 working days；After the materials are complete，Conduct substantive assessment within 40 working days，And it can be suspended for up to 20 working days due to supplementary information.。Company establishment、personnel、Account、Technical and document preparation time does not fall within the statutory evaluation period mentioned above。
Legal requirements in the EU or EEA (EEA) Bank or payment service provider within (PSP/EMI) Open a public account。Companies must pass stringent AML due diligence before opening an account，It is recommended that the application and compliance support agency be connected to compliance financial institutions that are friendly to the crypto industry.。
The MiCA license itself does not automatically expire according to a fixed number of years.，However, the licensee must continue to meet prudent safeguards、governance、AML/CFT、Customer asset isolation、complaint、ICT security、Reporting and recordkeeping requirements。Specific retention periods should be confirmed based on applicable regulations and record type，It is not appropriate to generalize to a uniform “at least 5 years” for all records.。
Unable to automatically transition。Existing VASP entities subject to grandfather clauses can only operate until 2026 Year 7 moon 1 day。Before expiration, all institutions must resubmit CASP applications to the FSA in accordance with MiCA standards.，Otherwise, operations will be forcibly terminated。
7. Relevant regulations、Regulatory information and further reading
| Data category | Related information |
|---|---|
| Professional interpretation | |
| Licensing and regulatory authorities | |
| Official regulatory information |
