Obtaining a Crypto License in Belgium: CASP Authorization Under MiCA

Obtaining a Crypto License in Belgium: CASP Authorization Under MiCA
For fast communication with a consultant
Crypto exchanges, conversion platforms, custodians, broker-dealers, fintech firms, investment advisors — a single aim ties them together: obtaining a crypto license in Belgium, the gateway to the EU market under regulated terms. Where twenty-seven national registries once operated side by side, MiCA installed one rulebook for the whole bloc. Practitioners shorthand it as crypto licensing in Belgium; the statutory term is narrower — authorization as a CASP, or crypto-asset service provider. Every category just listed falls inside that perimeter: venues, custodians, fintech platforms, brokers.

What this article maps: how FSMA (Financial Services and Markets Authority) and NBB (National Bank of Belgium) carve up supervision; the cutoff that falls on July 1, 2026; which services count as regulated; and the capital tied to each tier. It walks through securing a crypto entity license in Belgium without procedural missteps, and itemizes what the filing has to hold. Set apart for closer treatment are three subjects — transaction monitoring, the DAC8 tax-reporting obligation, and what awaits operators that run unlicensed.

Obtaining a Crypto License in Belgium Post-MiCA: Regulatory Framework and Transition Period Status

One instrument now binds digital-asset providers bloc-wide: MiCA. The national rule-sets each country once kept on its own gave way to it. Belgium folded MiCA into domestic law on December 11, 2025; that statute governs every fintech weighing how to obtain a crypto license in Belgium post-MiCA. Prudential duties were parceled out between the two supervisors, and the path of CASP authorization was fixed. What came before — VASP registration in Belgium — existed for AML monitoring alone. That door is shut. Newcomers inherit no legacy channel.

Just one lawful footing is left for operating here: crypto services authorization in Belgium as a CASP. European provider status is the route, with nothing beside it. EEA firms already trading before the cutoff held a transitional grace period while chasing full authorization. The numbers FSMA itself reports leave no ambiguity: through the whole transition window, full-scope local licenses issued totaled zero. The compliance bar went unmet by every applicant.

What the Regime Sets

Where the Law Now Stands

Binding bloc-wide rulebook

EU Regulation 2023/1114 (MiCA)

Domestic act that enacts it

Statute dated December 11, 2025

Close of the grace window

July 1, 2026

Required once the window closes

Finalized CASP authorization — in Belgium or another EU state

No phased glide-path exists under Belgian law — an entity clears the threshold or it stops trading. An international operator therefore stands up corporate structure and technical infrastructure alike on a clean foundation.

Slip past the deadline and a prescribed wind-down follows in fixed order — services halted, open positions settled, client balances routed to external wallets through an orderly run-off.

The Twin Peaks Model in Belgian Crypto Licensing: Supervisory Architecture and the Division of Authority Between FSMA and NBB

Oversight in Belgium rests on two peaks: two authorities, two remits, nothing shared between them. Crypto licensing in Belgium consequently advances on twin tracks — FSMA and NBB in play at once. Conduct and market behavior sit with FSMA; financial resilience — can the entity hold up — sits with NBB.

The usual applicant is a fresh venture carrying no banking license, and it lodges its file with FSMA. For startups and tech platforms with no regulatory history, a CASP license through FSMA in Belgium is the ordinary way in. Under FSMA's lens go governance, the conduct rulebook, how orders are routed, and whether retail clients are adequately shielded.

NBB casts a tighter net, and what triggers its attention is product type. Strict oversight of crypto operators in Belgium by the central bank narrows to a single class: issuers of asset-referenced or e-money tokens. Banking-sector yardsticks — not the lighter CASP ones — measure their reserves and liquidity. Banks layering crypto onto an existing book report to NBB as well.

Obtaining a License for a Crypto Company in Belgium: Distinguishing Market Access Models

Two routes open under MiCA, and one question decides which applies: is a financial license already in hand? Route one is the authorization of a crypto entity in Belgium as a wholly new legal person — zero standing behind it, vetted from the foundation up. The ownership chain, the people running it, where the capital originated, how the IT is engineered to withstand pressure — all of it goes under FSMA review.

Route two is built for licensed incumbents — banks, investment firms, payment institutions — and moves on a notification, sparing them the full audit. Crypto services under MiCA in Belgium graft onto the current product range wherever the new line maps to something the firm may already do. Step outside that overlap and the complete CASP audit applies once more.

The regulated lines look like this:

  • safekeeping and administration of client crypto assets;
  • running trading venues;
  • converting crypto into fiat or other digital units;
  • order execution, with reception and onward transmission of client instructions;
  • placing digital assets, whether at primary issue or on resale;
  • professional advice, asset transfer, and management of crypto portfolios.

Which lines an applicant picks dictates which filings follow — and each line drags along its own operating duties. Order-matching venues fall under a crypto trading platform license in Belgium, with order-book transparency made compulsory. Retail conversion as the core model points instead to a crypto exchange service authorization. And where the whole business is guarding private keys, the fit is a crypto custody license in Belgium.

Market access models for crypto entities in Belgium:

Point of Contrast

Direct Filing (Article 63 MiCA)

Notification (Article 60 MiCA)

Intended filer

Fresh ventures, fintech startups, IT platforms not regulated until now

Existing license-holders: banks, MiFID investment firms, EMIs, payment institutions

Where it is lodged

Set address: casp@fsma.be

Distinct address: amc@fsma.be

What review applies

Whole-of-business audit — capital, UBOs, IT build, compliance manuals

Lighter notification path — the new service is checked against an authorization the firm already holds under MiFID

Core restriction

No ceiling on service types once share capital is sized to suit

Hard limit — advisors and fund managers are never to hold client crypto assets or private keys

Claim a service scope that outruns the staff and systems actually in place, and rejection follows. To acquire CASP authorization in Belgium, each declared line must rest on a written operating procedure. FSMA puts it plainly in its assessment: is the entity, as it stands today, equipped to run every activity it has claimed?

Obtaining a Crypto License in Belgium: CASP Classes, Capital, and Financial Guarantees

Risk sets the size of the buffer — push into riskier lines and the reserve climbs with them. Obtaining a crypto license in Belgium opens with one act: share capital lodged in a local bank account. Advisory, brokerage, and portfolio work without any client-asset holding sit in Class 1, where capital requirements for a crypto operator in Belgium come to EUR 50,000.

Bring custody or a fiat gateway into the mix and Class 2 takes over. From here, capital for a crypto license in Belgium opens at EUR 125,000, liquidity checked to confirm client cover holds. At the ceiling sits Class 3 — venues operating live order books and matching engines — at EUR 150,000.

Financial requirements by authorization class:

Tier of Authorization

What the Tier Permits

Capital Floor (EUR)

Class 1

Advice, brokerage, portfolio work — custody excluded

50,000

Class 2

Safekeeping with fiat-to-crypto conversion

125,000

Class 3

Operating an order-matching venue

150,000

Layered over the fixed sums is a moving floor: whichever runs higher — the class minimum or a quarter of the previous year's overhead — is what the provider must hold. At scale, that quarter-of-overhead figure tends to be the binding one. Dropping beneath it counts not as a slip but as a material prudential breach. The buffer stays under watch for as long as the authorization lives, and an insurer's cover may take on part of the exposure — once the regulator has signed off.

Any questions?

Contact our specialists

Requirements to Obtain a Crypto License in Belgium: Governance, Compliance, IT, and Client Protection

Paper addresses and hot-desks are ruled out from the start: what CASP authorization probes is substance, not the storefront. The requirements to obtain a crypto license in Belgium come down to real footing — a staffed office in Belgium, senior management steering operations from the premises. Nominee holders and ownership-masking trusts are shut out by the FSMA requirements for crypto operators in Belgium.

Internal compliance audit directions:

Area Under Audit

What Is Reviewed

Controls and Proof Demanded

Standing of those in charge

UBOs holding sizable stakes.

The board and senior management.

Fit and Proper Test passed.

Capital shown to be lawfully sourced.

Free of bankruptcy and any conviction.

The tech build

ICT systems throughout.

Databases behind the trading engine.

Withstands outside attack.

Hardened security routines run daily.

A proven continuity fallback.

Safeguarding clients

Cash holdings and digital units.

Custodied private keys.

Client money kept apart from the firm's.

An unbroken ledger of client holdings.

A wind-down plan that can run.

Every director's history is gone through item by item. The bar set by CASP authorization conditions in Belgium is explicit — proven grounding in finance or technology, backed by a record that can be checked. Three AML/CFT controls have to be live: KYC on each client, a watch on transactions as they clear, and sanctions screening that fires in real time. Transfers answer to a rule of their own — sender and recipient data travel with each one that is processed.

Wherever custody is involved, one rule admits no exception: client assets and the firm's own funds occupy separate accounts and are never pooled. Should a breach or staff misconduct cause loss, it lands on the operator — discretion is not left to the law here. A closing demand attaches to CASP licensing in Belgium: a tested, ready-to-run plan to move client funds into standalone wallets the instant insolvency sets in.

Crypto License Application Process in Belgium: Filing with FSMA, Documentation, and Timelines

Filing waits until the model is pre-screened: what services are declared, which of them pull in custody rules, and whether a trading engine figures at all. With no token issuance on the plan, the white paper requirement falls away. Mapping how to secure a crypto entity license in Belgium ahead of the dossier is what stops an application from stalling.

Step 1
Stand up the entity. Incorporate on the ground, place the share capital in the bank, and open a real, staffed office. Directors and a qualified compliance officer come on board before a line of the dossier is written.
Step 2
Build out the file. Gather the charter documents, a three-year business plan, UBO declarations, proof of where the funds originate, the IT-security procedures, and the transaction-monitoring policies.
Step 3
File it. The full package travels over a secure channel. Filers under Article 63 MiCA reach FSMA at casp@fsma.be; those on the Article 60 notification path go to amc@fsma.be.

Stages and regulatory timelines for license dossier review:

Stage of the Procedure

Clock

What the Stage Involves

Dossier lodged

Day zero

The complete package, all policies attached, sent via FSMA's secure portal

Check for completeness

25 business days, max

FSMA confirms the file is fully completer; any gap stops the timer until it is closed

The substantive audit

40 business days, max

Opens only after the file is declared whole. IT, compliance, and UBO standing each get examined, and a decision follows

The crypto operator licensing procedure in Belgium runs on two separate clocks. Clock one allows twenty-five days to confirm the file is whole; it stops the instant FSMA flags a gap and restarts only when that gap is closed. Clock two spans up to forty business days of substantive review, working through control systems and cyber defenses — and fresh regulator queries can carry it past the nominal limit.

Crypto License in Belgium for EU Operations: Passporting, Taxation, Advertising, and Sanctions

One authorization in Belgium carries across the whole EEA — passporting does away with any subsidiary network. FSMA notifies the host regulators inside ten business days of a passport request; from the fifteenth calendar day, lawful operations may open in each new market. A single constraint governs CASP license passporting in Belgium: only the service lines first approved move with the passport.

Under Belgian tax rules, providers must hand transaction data to the Federal Public Service Finance, which routes it onward into the EU's DAC8 automatic-exchange framework. Crypto business taxation in Belgium sits on the ordinary corporate rate — 25% on profit. For investors the scale is tiered: 10% where gains are long-term, 33% on speculative transactions, and a progressive band up to 50% once the activity reads as professional trading.

Rules governing marketing communications:

  • a capital-loss risk warning carried in every promotional item, no exceptions;
  • a flat prohibition on guaranteed-return claims or misleading wording;
  • notice to FSMA ten days ahead of any campaign that reaches 25,000 individuals or more;
  • a standing FSMA power to pull any material at any point.

Advertising is not something FSMA watches from a distance. That ten-day filing for large campaigns is just that — notice, not clearance; saying nothing is not the same as assenting. Where the regulator sees a risk, material can come down at any stage.

Risk groups and enforcement consequences for unlicensed market activity:

Type of Consequence

How It Is Imposed

Legal and Operational Fallout

Action by regulators

Sanctions from FSMA and NBB

fines as high as EUR 2,500,000 a breach; public cease orders; directors removed from office.

Prosecution

Under the Criminal Code

up to a year of imprisonment; directors personally liable for fines; accounts and assets frozen.

Infrastructure cut-off

Operational limits

banks shut correspondent accounts; payment partners end contracts; ad platforms halt traffic.

Running without a license leaves no grey area. A breach can carry up to EUR 2,500,000, and the supervisors apply that power needing no further sign-off. Persist unlicensed and the business is wound up for good — on top of the fine, accounts are frozen and directors barred.

Conclusion

A well-judged move to obtain a crypto license in Belgium delivers what no purely domestic setup can match: licensed access to a twenty-seven-country market on one authorization. That single license, through passporting, becomes EEA-wide reach with no subsidiaries to keep up. Firms that put real substance into compliance come away with steady banking, legal cover, and the standing that major clients look for.

FAQ
Is it possible to obtain a classic national VASP registration in Belgium?
No — that route has closed. VASP registration in Belgium fell away the moment the December 2025 law took hold. For newcomers a single path is open: CASP authorization under MiCA, with no exception.
What is the minimum capital required to launch a crypto exchange service?
EUR 125,000 marks the floor. At Class 2, capital thresholds for a crypto entity in Belgium span both jobs at once — running the exchange and holding client assets — since the tier joins the two together.
Does Belgian authorization allow operations in France or Germany?
Yes. CASP authorization in Belgium comes with passport rights across the EEA already attached. Turning them on takes a notification rather than a new application — filed by the provider through FSMA to the host regulator.
Service order form
Name
The field must be filled
Email
Please enter a valid e-mail
How can we contact you?*
Phone
Please enter a valid phone number
messenger
The field must be filled
Your comment