Executive Summary
This document provides a regulator-grade, 12-dimension comparative analysis of crypto payment licensing frameworks across 19 jurisdictions. It is designed for founders choosing where to license, general counsel structuring multi-jurisdiction operations, and regulators benchmarking their frameworks against international peers. Every claim is derived from the canonical per-jurisdiction fact matrix, which in turn is sourced from Phase 1 jurisdiction research files and their primary-source citations.
The global crypto payment licensing landscape in mid-2026 is defined by six distinct models, ranging from dedicated crypto payment licences (MiCA CASP, Singapore MPI-DPT) to state-level money transmitter regimes (United States) to free zone architectures (UAE VARA/ADGM). The most significant trend is convergence: jurisdictions are moving from registration-only regimes toward full-authorization frameworks with capital requirements, substance obligations, and passporting mechanisms. Across the 19 jurisdictions, 9 now operate a dedicated stablecoin licensing regime that is in force (EU, US, Hong Kong, Japan, Bahrain, UAE, Nigeria, El Salvador, plus France/Germany/Liechtenstein via MiCA), while several others (UK, Singapore, South Korea, Canada, Switzerland, Australia, Brazil) have enacted-but-not-in-force or proposed regimes — the single fastest-moving dimension in the dataset.
1. Licensing Model Taxonomy
Six distinct models govern how jurisdictions authorize crypto payment services. Understanding which model a jurisdiction uses is the first step in any licensing strategy.
Model A: Dedicated Crypto Payment Licence
Description: A purpose-built licence category specifically designed for crypto-asset services, often including payment, custody, exchange, and advisory activities under a single authorization. Typically includes passporting rights across a defined economic area.
Jurisdictions: EU (MiCA CASP), Singapore (MPI for DPT services), Hong Kong (SFC VATP licence + HKMA stablecoin issuer licence), Japan (CAESP/EPIESP registration), South Korea (KoFIU VASP registration + VAUPA), Bahrain (CBB CASP Categories 1-4)
Capital Range: EUR 50,000 -- EUR 150,000 (EU MiCA CASP); S$250,000 (Singapore MPI); HKD 5M -- 10M (Hong Kong VATP); JPY 10M (Japan CAESP); BHD 25,000 -- 300,000 (Bahrain)
Outcomes: Highest regulatory clarity; institutional-grade credibility; strong passporting (EU); established precedent for banking access. Singapore and Hong Kong compete directly for Asia-Pacific dominance. Hong Kong reached 13 licensed VATPs by June 2026 and granted its first two stablecoin issuer licences in April 2026. EU passporting across 30 EEA states is the broadest single-licence reach globally, with ~199 authorised CASPs across 23 countries as of 12 April 2026.
Model B: Traditional PSP/EMI Licence Applied to Crypto
Description: Existing payment institution (PI) or electronic money institution (EMI) licences extended to cover crypto-related payment activities. These frameworks predate crypto but have been adapted through regulatory guidance or legislative amendment.
Jurisdictions: UK (FCA PI/EMI + forthcoming FSMA crypto authorization), Germany (ZAG PI/EMI + MiCA CASP), France (ACPR PI/EMI + MiCA CASP), Switzerland (FINMA FinTech licence / banking licence), Liechtenstein (ZDG PI/EMI + MiCA CASP)
Capital Range: EUR 20,000 -- EUR 350,000 (EU PI/EMI); CHF 300,000 (Swiss FinTech licence); no specific minimum for UK FCA MLR crypto registration (GBP 2,000 application fee); EUR 125,000 -- EUR 350,000 (UK PI/EMI)
Outcomes: Well-understood frameworks with deep banking relationships. However, dual licensing may be required (e.g., EU MiCA CASP + PSD2 PI for EMT transfer/transferable-custody services, enforced from 2 March 2026). The UK's transition to full FSMA authorization (regime in force 25 October 2027) creates a multi-year window of regulatory complexity. Switzerland's proposed FinIA amendments (Oct 2025 consultation, closed 6 Feb 2026) would create dedicated Payment Instrument Institution and Crypto Institution categories no earlier than 2027.
Model C: State-Level Money Transmitter (US Model)
Description: A fragmented, multi-jurisdiction licensing regime where federal registration provides only AML coverage, and each state requires a separate money transmitter licence with independent capital, bond, and examination requirements.
Jurisdictions: United States (FinCEN MSB + 49 state MTLs + DC + NY BitLicense + OCC GENIUS federal charter)
Capital Range: Federal MSB registration: free. State MTLs: net worth ~$1M-$2M aggregate nationwide (surety bonds $500K-$3M+ in aggregate). NY BitLicense: $500,000 minimum net capital + $500,000 surety bond. OCC GENIUS Act federal charter: capital tailored (proposed via NPRM, not final).
Outcomes: Most expensive and time-consuming path globally (18-24 months for nationwide coverage). However, a US licence is the most commercially valuable for accessing the world's largest financial market. The GENIUS Act (signed July 18, 2025) creates a federal pathway for payment stablecoin issuers that preempts some state requirements; six of seven federal regulators issued implementing NPRMs during Apr–May 2026 (the Federal Reserve Board's rule remained pending). Montana (no MTL required), Wyoming, and Arizona (sandbox) offer partial relief.
Model D: Free Zone / Special Regime
Description: Jurisdictions that create geographically bounded regulatory zones with dedicated crypto frameworks, often with lower capital requirements, faster processing, and tax advantages compared to onshore regimes.
Jurisdictions: UAE (VARA -- Dubai mainland; ADGM FSRA -- Abu Dhabi; DIFC DFSA; CBUAE federal; CMA), El Salvador (CNAD DASP/BSP licence)
Capital Range: UAE VARA: AED 100,000 base + AED 500,000 -- 1,500,000 activity-dependent (~USD 27,000 -- 408,000). ADGM: USD 10,000 (Cat 4) -- USD 10,000,000 (Cat 1); exchanges min USD 2M. El Salvador: $2,000 minimum (BSP/DASP); $50,000,000 for the institutional Investment-Bank/PSAD track.
Outcomes: Fast processing (4-10 months UAE VARA; ~5-6 months El Salvador). UAE offers a multi-regulator architecture with the CMA-VARA unified register enabling cross-emirate operations and mutual VASP recognition. El Salvador offers the lowest retail capital threshold globally ($2,000) and 0% crypto tax for licensed entities, but no passporting and limited institutional credibility. The UAE's Federal Decree-Law No. 6 of 2025 (effective 16 Sept 2025) expands CBUAE authority over crypto payment activities nationwide, with a transition deadline of 15 Sept 2026; DIFC and ADGM are exempt, preserving free-zone autonomy.
Model E: Registration-Only (Light Touch)
Description: Jurisdictions that require only AML/CTF registration without full prudential authorization. These regimes are typically transitional, with full licensing frameworks under development.
Jurisdictions: Australia (AUSTRAC DCE/VASP registration, transitioning to ASIC AFSL for Digital Asset Platforms), Canada (FINTRAC MSB registration + RPAA PSP registration), Nigeria (SEC VASP provisional licensing via ARIP)
Capital Range: Australia: no AUSTRAC AML capital floor (legacy DCE nominal ~AUD 100); AFSL DAP/TCP-specific capital pending ASIC standards. Canada: no minimum capital for FINTRAC MSB; CSA CIRO-member dealers minimum C$50,000. Nigeria: post-Circular 26-1 (16 Jan 2026), NGN 300M -- 2bn by category (~USD 185K -- 1.25M).
Outcomes: Fastest entry (Australia: weeks via AUSTRAC enrolment; Canada FINTRAC: 2-8 weeks). However, these regimes are evolving rapidly. Australia's AML/CTF Amendment Act 2024 plus the enacted Digital Assets Framework Act 2026 (Royal Assent 8 Apr 2026) introduce AFSL-based DAP/TCP categories commencing 9 Apr 2027. Canada's RPAA is operational and a federal Stablecoin Act has been enacted (not yet in force). Nigeria's ISA 2025 places crypto under securities law and sharply raised capital via Circular 26-1. Firms should plan for escalating compliance costs.
Model F: No Dedicated Framework / Bank-Led Restrictive
Description: Jurisdictions that lack a comprehensive crypto payment licensing framework, or where the framework imposes the highest barriers in the dataset.
Jurisdictions: India (tax-and-enforcement framework; no comprehensive licensing), Brazil (bank-led SPSAV framework operational from February 2026)
Capital Range: India: no licensing regime exists (FIU-IND AML registration only); 30% flat tax + 1% TDS effectively discourages crypto payments. Brazil: R$10.8M -- R$37.2M (~USD 1.8M -- 6.2M) for SPSAV authorization (intermediation-only R$9.2M, rising above R$13M with custody).
Outcomes: India's "regulate by taxation and enforcement" approach creates the most hostile environment for crypto payment businesses among major economies, with no path to a payment/CASP licence. Brazil's operational BCB framework is comprehensive — treating fiat-referenced stablecoin transactions as foreign exchange — but carries the highest capital requirements in the dataset. Both jurisdictions have massive crypto user bases, creating regulatory arbitrage pressure.
2. Jurisdiction Comparison Table
The following table presents all 19 jurisdictions across eight key licensing dimensions, mirroring the t1 (licence types, authority, capital, timeline) facts in the canonical matrix. Capital figures are denominated in the jurisdiction's regulatory currency and converted to approximate USD equivalents where relevant.
| Jurisdiction | Licence Name | Authority | Capital (Min) | Timeline (Actual) | Setup Cost (Est.) | Annual Cost (Est.) | Passporting | Approval / Issuance Data |
|---|---|---|---|---|---|---|---|---|
| EU (MiCA) | CASP (Class 1/2/3) | Home NCA (AMF, BaFin, CSSF, MFSA) + ESMA register | EUR 50K-150K | 3-6+ months | EUR 80K-600K+ | EUR 50K-200K | EU/EEA (30 states) | ~199 CASPs across 23 countries (Apr 2026) |
| US | FinCEN MSB + State MTLs + BitLicense + OCC charter | FinCEN / state regulators (NMLS) / NYDFS / OCC | $0 (federal) + ~$1M-2M net worth (states) | 18-24 months (nationwide) | $500K-3M+ | $200K-500K+ | None (GENIUS stablecoin charter only) | ~25 BitLicenses issued |
| UK | FCA MLR Registration (current) / FSMA Auth (from Oct 2027) | FCA / BoE (systemic) / HMT | No min (MLR); EUR 125K-350K (PI/EMI) | MLR ~5 months (2024-25), ~17 months historically | GBP 50K-300K | GBP 30K-150K | None (post-Brexit) | ~51 registered; 86% rejection rate |
| Singapore | MPI (DPT Service) | MAS | S$250K (~USD 185K) | ~4 months straightforward; 6-12 months DPT | S$150K-500K | S$50K-200K | None (Singapore only) | 36 MPI-for-DPT licences (Jan 2026) |
| Japan | CAESP / EPIESP Registration | JFSA / JVCEA | JPY 10M (~USD 67K) | 6-12+ months | JPY 1B+ (~USD 6.7M) practical startup | High (compliance-intensive) | None (Japan only) | Mature market (CAESP/EPIESP); PSA amendment effective 1 Jun 2026 |
| Switzerland | FinTech Licence / Banking Licence | FINMA / SNB / SROs | CHF 300K (~USD 340K) / CHF 10M (bank) | 4-6 months (FinTech) | CHF 200K-1M+ | CHF 100K-500K | None (not EU; equivalence sought) | 4 FinTech licences; 2 crypto banks (Sygnum, AMINA) |
| Germany | MiCA CASP + ZAG PI/EMI | BaFin + Bundesbank | EUR 50K-150K (CASP); EUR 125K-350K (PI/EMI) | 3-6 months | EUR 150K-500K | EUR 80K-250K | EU/EEA (30 states) | ~53 authorised MiCAR CASPs (May 2026) |
| France | MiCAR CASP (replacing PSAN/DASP) | AMF / ACPR | EUR 50K-150K (CASP); EUR 350K (EMI) | Up to 4 months statutory; ~5-6 months typical | EUR 100K-400K | EUR 60K-200K | EU/EEA (30 states) | 100+ DASPs registered |
| Liechtenstein | MiCAR CASP + TVTG Registration | FMA | EUR 50K-150K (CASP); CHF 50K-250K (TVTG) | TVTG ~3 months statutory (4-5 months total) | EUR 80K-250K | EUR 40K-120K | EU/EEA (30 states) | 29 TT service providers; first CASPs authorised H1 2026 |
| Brazil | SPSAV Authorization | BCB / CVM | R$9.2M-37.2M (~USD 1.5M-6.2M) | Operational from Feb 2, 2026; apply/notify by Oct 30, 2026 | UNVERIFIED | UNVERIFIED | None (domestic only) | Framework newly operational; first cohort expected mid-2026 |
| Canada | FINTRAC MSB + RPAA PSP | FINTRAC / Bank of Canada / CSA-CIRO | No min (FINTRAC); C$50K (CIRO dealer) | FINTRAC 2-8 weeks | C$10K-100K | C$50K-200K | Foreign MSB pathway | 80+ MSB registrations revoked 2025-26 |
| El Salvador | DASP / BSP Licence (+ PSAD) | CNAD / BCR | $2,000 (BSP/DASP); $50M (PSAD) | ~5-6 months (BSP/DASP) | ~$15K-30K | ~$10K-15K | None (domestic only) | B2BINPAY licensed Nov 2025 (CNAD-047-2025) |
| Australia | AUSTRAC DCE/VASP + ASIC AFSL (DAP/TCP) | AUSTRAC / ASIC / RBA | No AML floor (~AUD 100 legacy); AFSL capital pending | VASP enrolment from 31 Mar 2026; AFSL regime from 9 Apr 2027 | AUD 20K-100K | AUD 30K-100K | None (domestic only) | 9 providers suspended/refused early 2025 |
| Hong Kong | SFC VATP Licence + HKMA Stablecoin Licence | SFC / HKMA / FSTB | VATP: HKD 5M-10M (~USD 640K-1.3M); Stablecoin: HKD 25M | VATP live since Jun 2023; 6-12+ months | HKD 2M-10M | HKD 1M-5M | None (HK only) | 13 VATPs licensed; 2 stablecoin licences (Apr 2026) |
| South Korea | KoFIU VASP Registration | KoFIU / FSC / FSS | No specific minimum (VASP) | 3-6+ months | KRW 500M+ (~USD 370K+) | KRW 200M+ | None (domestic only) | 5 exchanges with real-name accounts |
| India | FIU-IND Registration (AML only) | FIU-IND / Dept of Revenue | None (no licensing regime) | UNVERIFIED (no statutory SLA) | Minimal | Minimal | None | 49 registered (45 domestic + 4 offshore); no licensing framework |
| UAE (VARA) | VARA VASP Licence (7 activities) | VARA (Dubai) | AED 100K base + AED 500K-1.5M activity | 4-10 months (target 10-17 weeks optimal) | AED 500K-2M | AED 200K-500K | Cross-emirate (CMA-VARA register) | Growing; multiple licensed |
| UAE (ADGM) | FSRA Crypto-Asset Business | ADGM FSRA | USD 10K-10M (by category); exchanges min USD 2M | 4-8 months | USD 100K-500K | USD 50K-200K | ADGM free zone | Binance first global ADGM licence |
| Bahrain | CBB CASP (Cat. 1-4) + SIO | CBB | BHD 25K-300K (~USD 66K-795K) | 60 days (statutory target) | BHD 30K-150K | BHD 10K-50K | None (domestic only) | Rain, Fasset, BPay (Binance) licensed; AX Coin first stablecoin issuer (Jun 2026) |
| Nigeria | SEC VASP (provisional via ARIP) | SEC Nigeria / CBN | NGN 300M-2bn (~USD 185K-1.25M) post-Circular 26-1 | UNVERIFIED (SEC slowing approvals) | NGN 50M+ | UNVERIFIED | None (domestic only) | 2 provisional licences (Busha, Quidax) |
3. Arbitrage Analysis
3.1 Cheapest Path to Authorization (Ranked)
For founders with constrained capital, the cheapest jurisdictions to secure an operational crypto payment licence:
| Rank | Jurisdiction | Licence | Minimum Capital | Est. Total Setup Cost | Notes |
|---|---|---|---|---|---|
| 1 | El Salvador | DASP/BSP | $2,000 | $15K-30K | Lowest globally; 0% crypto tax; no passporting |
| 2 | Canada | FINTRAC MSB | $0 | C$10K-50K | Free federal registration; provincial securities registration separate |
| 3 | Australia | AUSTRAC DCE/VASP | ~AUD 100 (legacy nominal) | AUD 20K-50K | No AML capital floor; AFSL DAP/TCP regime (with capital) from Apr 2027 |
| 4 | Liechtenstein | TVTG + MiCAR CASP | CHF 50K / EUR 50K | EUR 80K-150K | EEA passporting; tax-free capital gains for private investors |
| 5 | EU (Lithuania) | MiCA CASP (Class 1) | EUR 50,000 | EUR 80K-120K | Fast EU processing; full EU passporting |
Key insight: El Salvador and Canada offer the lowest barrier to entry, but neither provides passporting. Lithuania within the EU MiCA framework provides the best value proposition: low capital, fast processing, and access to 30 EEA markets.
3.2 Fastest Path to Authorization (Ranked)
| Rank | Jurisdiction | Licence | Typical Timeline | Notes |
|---|---|---|---|---|
| 1 | Canada | FINTRAC MSB | 2-8 weeks | AML registration only; no capital requirement |
| 2 | Australia | AUSTRAC DCE/VASP | Weeks | Registration-based; compliance-focused |
| 3 | Bahrain | CBB CASP | 60 days (statutory target) | Single-regulator model; sandbox pathway available |
| 4 | EU (Lithuania) | MiCA CASP | ~3-4 months | Among fastest EU NCAs; strong crypto infrastructure |
| 5 | Liechtenstein | TVTG/MiCAR CASP | TVTG ~3 months statutory (4-5 months total) | Small jurisdiction; responsive FMA |
| 6 | UAE (VARA) | VARA VASP | 4-10 months (target 10-17 weeks optimal) | Two-stage process; faster under optimal conditions |
Key insight: Canada and Australia offer the fastest registration, but these are AML-only regimes without full prudential authorization. For full licensing, Bahrain (60-day statutory target) and Lithuania are the fastest.
3.3 Broadest Passporting Scope (Ranked)
| Rank | Jurisdiction | Framework | Passporting Reach | Notes |
|---|---|---|---|---|
| 1 | Any EU/EEA MiCA state | MiCA CASP (Art. 65) | 30 EEA states (~450M population) | Single licence covers entire EU/EEA; home NCA notification only |
| 2 | Liechtenstein | MiCAR CASP (via EEA) | 30 EEA states | Not EU member but EEA passporting equivalent |
| 3 | UAE | CMA-VARA unified register | 7 Emirates | Cross-emirate operations / mutual recognition; not international passporting |
| 4 | United States | GENIUS Act federal charter | 50 states (payment stablecoin issuance only) | Federal charter preempts state licensure for stablecoin issuance |
| 5 | All others | Domestic only | Single jurisdiction | No passporting; separate licence required per market |
Key insight: EU MiCA passporting is the clear winner for geographic reach. A single CASP authorization in Lithuania, France, Germany, or Liechtenstein grants access to 30 EEA states. The GENIUS Act creates limited federal passporting for US payment stablecoin issuers only.
3.4 Most Prestigious / Institutional-Grade (Ranked)
| Rank | Jurisdiction | Licence | Why Institutional-Grade |
|---|---|---|---|
| 1 | United States | NY BitLicense / OCC Charter | Gold standard for US institutional counterparties; highest scrutiny |
| 2 | Singapore | MAS MPI | Asia's most respected financial regulator; Paxos, Circle, Coinbase licensed |
| 3 | UK | FCA Registration / FSMA Auth | Major financial centre; rigorous process (86% AML rejection rate) |
| 4 | Switzerland | FINMA Banking Licence | Two licensed crypto banks (Sygnum, AMINA ex-SEBA); Swiss banking credibility |
| 5 | Hong Kong | SFC VATP Licence | 13 licensed platforms; institutional-grade capital requirements |
| 6 | Germany | BaFin MiCA CASP | Conservative regulator; ~53 authorised CASPs; strong institutional signalling |
3.5 Recommended Strategies by Business Profile
Startup (Seed to Series A, <$5M raised):
- Primary: Lithuania MiCA CASP (Class 1, EUR 50K capital, fast EU processing, EU passporting)
- Alternative: El Salvador DASP ($2K capital, 0% tax, but no passporting)
- Avoid: US (cost prohibitive), Japan (JPY 1B+ practical startup cost), Hong Kong (HKD 5M+ capital)
Institutional / Series B+ ($10M+ raised):
- Primary: Singapore MAS MPI (institutional credibility, Asia-Pacific access)
- Secondary: EU MiCA CASP via France or Germany (institutional signalling + EU passporting)
- US access: NY BitLicense or OCC charter application in parallel
- Consider: Swiss FINMA banking licence for institutional custody
Global Reach (Multi-Jurisdiction Strategy):
- Core licences: EU MiCA (30 states) + Singapore MPI (Asia base) + UK FCA (UK market)
- US strategy: FinCEN MSB + phased state MTL rollout (prioritize CA, TX, NY, FL, IL)
- Emerging markets: UAE VARA (Middle East) + Brazil SPSAV (Latin America)
- Timeline: 18-36 months for full coverage
Specific Market Access:
- Latin America: Brazil SPSAV (largest market, R$9.2M+ capital) or El Salvador DASP (lightest requirements)
- Middle East / Africa: UAE VARA + Bahrain CBB CASP (sandbox pathway) + Nigeria SEC VASP
- Asia-Pacific: Singapore MPI + Hong Kong VATP + Australia AFSL DAP (from Apr 2027)
4. What Works and What Doesn't
Approaches That Work
| Approach | Jurisdiction | Outcome | Why It Works |
|---|---|---|---|
| Lithuania as EU beachhead | EU (Lithuania) | Fast CASP authorization; EU passporting | Bank of Lithuania processes applications among the fastest EU NCAs; cost-efficient for crypto-native firms |
| Singapore MPI for Asia credibility | Singapore | 36 MPI DPT licences granted (Jan 2026) | MAS reputation attracts institutional counterparties; Paxos, StraitsX, Circle, Coinbase licensed |
| Bahrain sandbox to licence | Bahrain | Rain Financial: sandbox graduate to first MENA licensed crypto exchange | CBB sandbox de-risks regulatory uncertainty; clear graduation pathway |
| French EMI for stablecoin issuance | France | SG-FORGE obtained ACPR EMI licence (1 July 2024) for EURCV | First MiCA-compliant EMT issuer; ACPR process well-documented |
| UAE multi-zone strategy | UAE | Binance: ADGM global licence + VARA Dubai licence + BPay Bahrain PSP | Layered approach covers multiple regulatory zones and use cases |
Approaches That Do Not Work
| Approach | Jurisdiction | Outcome | Why It Fails |
|---|---|---|---|
| Attempting nationwide US licensing without adequate capital | United States | Multi-year delays; $500K-3M+ cost; operational paralysis | 49+ independent state reviews; no passporting; NY BitLicense alone takes 12-24 months |
| Relying on UK FCA MLR registration as a permanent solution | UK | Must obtain full FSMA authorization (regime in force Oct 2027) | 86% AML rejection rate; gateway window 30 Sep 2026 – 28 Feb 2027; transitional uncertainty |
| Operating in India without licensing clarity | India | No path to licensed status; 30% tax + 1% TDS destroys payment economics | No comprehensive legislation; RBI actively discourages crypto payments |
| Assuming EU MiCA CASP alone covers stablecoin (EMT) transfers | EU | Dual licensing required from 2 March 2026 | EBA/ESMA clarified that EMT transfer/transferable-custody activities require PSD2 PI/EMI authorisation in addition to MiCA CASP |
| Treating El Salvador licence as globally credible | El Salvador | Limited institutional recognition; no passporting; IMF policy-reversal context | $2,000 capital threshold signals minimal regulatory scrutiny; Bitcoin reverted to voluntary acceptance under IMF EFF |
5. Banking Access by Jurisdiction
Banking access remains the critical operational bottleneck for crypto payment firms. A licence alone does not guarantee a bank account.
| Jurisdiction | Difficulty | Known Banking Partners | Onboarding Time | Notes |
|---|---|---|---|---|
| US | Very High (improving) | Mercury, Lead Bank, Cross River, Column (crypto-friendly); major banks reopening | 4-12 weeks | OCC IL 1183 / FDIC FIL-7-2025 removed prior-approval requirements; GENIUS Act improves Fedwire/FedNow/NSS access for stablecoin issuers |
| EU | Moderate | Solarisbank (Germany), Banking Circle, LHV (Estonia), Stripe Treasury, Clear Junction | 2-8 weeks | Varies by member state; Lithuania and Estonia most crypto-friendly banking |
| UK | High | ClearBank, Banking Circle, BCB Group, Modulr | 4-12 weeks | FCA registration helps but does not guarantee banking; persistent friction |
| Singapore | Very High | DBS (limited), Standard Chartered, Sygnum | 4-16 weeks | "Notoriously difficult" even for MPI licensees; banks apply own enhanced due diligence |
| Japan | Moderate | SBI Sumishin Net Bank, GMO Aozora Net Bank, regional banks | 4-8 weeks | Banking access generally available for registered CAESPs |
| Switzerland | Low-Moderate | Sygnum Bank, AMINA Bank (ex-SEBA), Bank Frick (Liechtenstein), Hypothekarbank Lenzburg | 2-6 weeks | Two dedicated crypto banks; most accommodating banking environment for licensed firms |
| Germany | Moderate | Solarisbank, Fidor Bank, N26 | 3-8 weeks | BaFin licence strongly facilitates banking; Solaris provides BaaS infrastructure |
| Hong Kong | Moderate-High | ZA Bank, Standard Chartered, HSBC (limited) | 4-12 weeks | SFC VATP licence required; institutional-grade firms favoured |
| UAE | Moderate (improving) | Emirates NBD, Mashreq (NeoBiz), FAB, Wio Bank, RAKBANK | 2-6 weeks | Licensed VASP status effectively prerequisite; significantly improved since 2024 |
| Bahrain | Low-Moderate | Local Bahraini banks; bank account required as part of licence process | 4 weeks (during licensing) | Single-regulator model gives banks clarity; account opening integrated into licensing |
| Brazil | Moderate | Already-regulated banks may notify BCB to offer services; non-bank SPSAVs need full authorization | UNVERIFIED | Framework operational Feb 2026; banks barred from serving unauthorized VASPs after Oct 30, 2026 |
| Canada | Moderate-High | Canadian banks required to verify crypto fund sources; must work with FINTRAC-registered entities | 4-8 weeks | Banks exercise caution; FINTRAC registration is necessary but not sufficient |
| El Salvador | Low | Local banks; facilitated by licence status | 4-6 weeks | Licence status facilitates banking; small dollarized jurisdiction |
| Australia | Moderate | Westpac, NAB, ANZ (limited/selective) | 4-8 weeks | AUSTRAC registration required; banks increasingly accommodating for compliant firms |
| South Korea | Extreme | K Bank (Upbit), NH Nonghyup (Bithumb until Mar 2025), KB Kookmin (Bithumb from Mar 2025), Kakao Bank (Coinone), Shinhan (Korbit), Jeonbuk (Gopax) | Months+ | Only 5 exchanges have real-name bank accounts; near-impossible for new entrants |
| India | High | No stable banking; RBI discourages crypto banking relationships | Variable | Supreme Court struck down 2018 RBI circular, but practical banking access remains unreliable |
| Nigeria | High (improving) | Designated accounts for SEC-licensed VASPs since December 2023; CBN VASP supervisory pilot from Apr 2026 | Variable | Only 2 provisional SEC licences issued; banks exercise extreme caution |
| Liechtenstein | Low | Bank Frick (crypto pioneer), VP Bank, Liechtensteinische Landesbank, Celsion Bank (digital-asset bank, 2026) | 2-4 weeks | Crypto-friendly banking sector; Bank Frick specifically serves TT service providers |
| France | Moderate | Societe Generale (via SG-FORGE), BNP Paribas (limited), specialized PSPs | 3-8 weeks | ACPR/AMF licensing facilitates access; 100+ registered DASPs demonstrate pathway |
6. Regulatory Direction
| Jurisdiction | Direction | Evidence | Implication |
|---|---|---|---|
| EU | Tightening (structured) | MiCA fully applied Dec 2024; PSD2/MiCA EMT dual-licensing enforcement from 2 March 2026; PSD3/PSR texts endorsed by COREPER Apr 2026 | Firms need MiCA CASP + PSD2 PI/EMI for stablecoin payment services; regulatory costs rising |
| US | Loosening (significantly) | GENIUS Act signed July 2025; OCC IL 1183 / FDIC FIL-7-2025 removed prior-approval requirements; six of seven regulators issued GENIUS NPRMs Apr–May 2026 | Best US regulatory environment for crypto since inception; federal stablecoin pathway advancing |
| UK | Tightening (structured) | Cryptoassets Regulations 2026 made 4 Feb 2026; FSMA authorization regime in force 25 Oct 2027; gateway 30 Sep 2026 – 28 Feb 2027 | Registration regime ending; full FCA authorization required; firms must apply during gateway window |
| Singapore | Stable (strict) | MPI framework mature; FSMA Part 9 DTSP regime effective 30 June 2025; stablecoin issuance service forthcoming | High bar maintained; 36 MPI DPT licences as of Jan 2026; DTSP granted only in "extremely limited circumstances" |
| Japan | Loosening (reform) | FIEA reclassification bill approved by Cabinet 10 Apr 2026; PSA amendment (ECISBO + foreign trust-type stablecoins) effective 1 June 2026; 15% flat tax proposed | Generational PSA-to-FIEA transition; tax reform to cut individual crypto tax from up to 55% toward 20% (or 15% if proposal advances) |
| Switzerland | Tightening (structured) | FinIA amendments consultation (Oct 2025, closed 6 Feb 2026); proposed Payment Instrument Institution + Crypto Institution categories | FinTech licence to be supplemented with comprehensive categories; FinIA entry into force no earlier than 2027 |
| Hong Kong | Loosening (actively expanding) | 13 VATP licences; Stablecoins Ordinance effective 1 Aug 2025; first 2 stablecoin licences Apr 2026; adviser/manager licensing consultation | Aggressively competing with Singapore for Asia crypto hub status |
| South Korea | Loosening (cautiously) | VAUPA in force July 2024; phased institutional access; Digital Asset Basic Act introduced 8 Apr 2026 (not enacted) | Significant opening for institutional crypto; stablecoin legislation deferred past June 2026 local elections |
| UAE | Tightening (structured) | Federal Decree-Law No. 6 of 2025 expands CBUAE authority; VARA Rulebook v2.0; CMA replaced SCA 1 Jan 2026 | Increasingly unified framework; transition deadline 15 Sept 2026 for existing operators |
| Bahrain | Loosening | SIO stablecoin framework effective July 2025; yield-bearing stablecoins permitted; first issuer licence (AX Coin) granted June 2026 | Expanding regulated activities; pioneering yield-bearing stablecoin rules |
| Brazil | Tightening (significantly) | BCB Resolutions 519/520/521 effective Feb 2, 2026; stablecoin-as-FX classification; Resolution 561 eFX settlement ban (Oct 1, 2026); R$9.2M+ capital | Stablecoins treated as FX operations; highest capital requirements in dataset |
| Canada | Tightening | RPAA operational Nov 2024; Stablecoin Act enacted (Royal Assent 26 Mar 2026, not yet in force); FINTRAC C$176.9M penalty against Cryptomus | Enforcement intensifying; AMPs raised ~40x via Bill C-12; multiple licensing layers accumulating |
| Australia | Tightening (significantly) | AML/CTF Amendment Act 2024; Digital Assets Framework Act 2026 (Royal Assent 8 Apr 2026, commences 9 Apr 2027); Payments System Modernisation Act 2025 | Generational regulatory overhaul; AFSL licensing for DAP/TCP digital asset platforms enacted |
| India | Stable (restrictive) | No comprehensive legislation enacted; 30% tax + 1% TDS maintained; Income Tax Act 2025 reporting/penalties from 1 Apr 2026 | Continued "regulate by taxation and enforcement" approach; comprehensive crypto bill repeatedly deferred |
| El Salvador | Balanced (reversed course) | Bitcoin voluntary since Jan 2025 (Decree 199); DASP licensing operational; 0% crypto tax maintained; Investment Bank/PSAD regime added Aug 2025 | IMF-driven legal-tender reversal; now a balanced framework with the lowest entry barriers |
| Nigeria | Loosening (significantly) | ISA 2025 signed; CBN banking ban reversed Dec 2023; cNGN stablecoin launched Feb 2025; exited FATF grey list Oct 2025 | Dramatic shift from prohibition to structured regulation; Africa's first regulated stablecoin |
| Liechtenstein | Stable (supportive) | TVTG + MiCAR dual framework; 29 TT service providers; first CASPs authorised H1 2026; EEA passporting preserved | Consistent innovation-friendly approach; EEA membership provides passporting |
| Germany | Tightening (EU-aligned) | Stricter national transition deadline (31 Dec 2025); KMAG implementing MiCA; ~53 authorised CASPs | Conservative but predictable; stricter than EU minimum standards |
| France | Stable (structured) | PSAN/DASP-to-CASP transition (hard deadline 1 July 2026); 100+ DASPs; SG-FORGE EURCV/USDCV EMTs | Mature framework; well-documented processes; leading MiCA jurisdiction; privacy-coin restrictions (Law 2025-532) |
7. Recommended Framework for Regulators
This section proposes a three-tier licensing framework for jurisdictions developing or reforming crypto payment regulation, drawing on observed best practices across the 19 jurisdictions studied.
Tier 1: Registration (Small / Low-Risk Operators)
Scope: Firms with monthly transaction volume below a defined threshold (e.g., S$3M per Singapore SPI precedent), providing limited services such as crypto-to-fiat exchange or advisory.
| Dimension | Recommended Standard | Precedent |
|---|---|---|
| Capital | EUR 50,000 or equivalent | MiCA CASP Class 1; Liechtenstein TVTG (CHF 50K) |
| AML/CFT | Full compliance with FATF Recommendations | Universal across all 19 jurisdictions |
| Scope | Advisory, order routing, limited exchange | MiCA Class 1; Singapore SPI |
| Timeline | 60-90 days statutory maximum | Bahrain CBB (60 days); Liechtenstein TVTG (~3 months) |
| Passporting | Within economic area if applicable | MiCA passporting; CMA-VARA unified register |
| Substance | At least one local compliance officer | Singapore; Liechtenstein; Bahrain |
Tier 2: Standard Licence (Medium Operators)
Scope: Firms providing custody, exchange, transfer, and trading platform services with material transaction volumes.
| Dimension | Recommended Standard | Precedent |
|---|---|---|
| Capital | EUR 125,000 -- 250,000 or equivalent | MiCA CASP Class 2/3 (EUR 125K-150K); Singapore MPI (S$250K) |
| Prudential safeguards | Higher of minimum capital or 25% of prior-year fixed overheads | MiCA Art. 67; PSD2 Art. 9 |
| Insurance | Professional indemnity or equivalent | Bahrain CBB; UK FCA (for PIs) |
| Segregation | Client assets segregated from operational funds | Universal best practice |
| Cold storage | Minimum 80-95% of client assets in cold wallets | South Korea VAUPA (>=80%); Japan (>=95%); Singapore (>=90%) |
| Audit | Annual independent audit of financials and AML controls | Singapore MAS; Japan JFSA; Bahrain CBB |
| Timeline | 3-6 months statutory maximum | MiCA (3 months from complete application) |
Tier 3: Enhanced / Systemic (Large Operators and Stablecoin Issuers)
Scope: Firms with systemic significance (defined by transaction volume, user base, or interconnectedness), and all stablecoin issuers.
| Dimension | Recommended Standard | Precedent |
|---|---|---|
| Capital | EUR 350,000+ (stablecoin issuers); scaled by outstanding value | EMD2 (EUR 350K); MiCA ART (EUR 350K + 2% of reserves); Singapore SCS (S$1M); HK Stablecoins Ordinance (HKD 25M) |
| Reserves | 100% backing; segregated; high-quality liquid assets; no rehypothecation | GENIUS Act; MiCA Title IV; Singapore SCS; CBUAE PTSR; Hong Kong Stablecoins Ordinance; Bahrain SIO |
| Redemption | At par within 1-5 business days | Singapore SCS / EU MiCA / Bahrain SIO (5 days); CBUAE PTSR (1 day) |
| Audit | Monthly reserve verification; annual independent audit | Singapore SCS; Bahrain SIO; UK BoE/FCA proposed regime |
| Governance | Independent board members; fit-and-proper assessments | Hong Kong Stablecoins Ordinance (>=1/3 independent); MiCA |
| Deposit protection | Segregated from bankruptcy estate; priority claim for holders | Swiss DLT Act / proposed FinIA; Canada Stablecoin Act (creditor-protected); MiCA |
| Systemic oversight | Central bank oversight for tokens exceeding threshold | UK BoE (systemic stablecoins); EBA (significant EMTs under MiCA) |
8. Decision Matrix
This decision matrix maps specific business requirements to recommended jurisdictions with supporting evidence.
If you need the broadest market access from a single licence:
- EU MiCA CASP (any EEA member state) -- 30 EEA states via passporting under MiCA Article 65.
If you need institutional credibility for fundraising and banking:
- Singapore MAS MPI -- Paxos, Circle, Coinbase, StraitsX all licensed; MAS is Asia's most respected financial regulator.
- US NY BitLicense -- gold standard for US institutional counterparties; approximately 25 entities hold BitLicenses.
- Switzerland FINMA Banking Licence -- Sygnum and AMINA (ex-SEBA) hold full banking licences; Swiss banking reputation.
If you need the cheapest and fastest path to a licence:
- El Salvador DASP -- $2,000 capital; ~5-6 months; 0% crypto tax.
- Liechtenstein TVTG + MiCAR CASP -- CHF 50K / EUR 50K; ~4-5 months; EEA passporting.
If you need to issue a payment stablecoin:
- EU -- EMI licence from ACPR (France precedent: SG-FORGE EURCV) + MiCA Title IV compliance.
- US -- GENIUS Act pathway: insured depository institution subsidiary, Federal Qualified PSI (OCC-chartered), or State Qualified PSI (capped $10B).
- Singapore -- MPI licence with Stablecoin Issuance Service; min S$1M capital; 100% reserves.
- Hong Kong -- HKMA Stablecoins Ordinance; HKD 25M paid-up capital; 100% reserves.
If you need to serve the US market:
- FinCEN MSB registration (free, mandatory) + phased state MTL rollout (prioritize CA, TX, NY, FL, IL) + NY BitLicense if serving NY residents.
- For payment stablecoin issuance: GENIUS Act federal charter via OCC.
If you need to serve the Middle East and Africa:
- UAE VARA (Dubai) + Bahrain CBB CASP -- VARA for scale; Bahrain for sandbox pathway and faster processing. Nigeria SEC VASP for the continent's largest crypto-adopting market.
If you need to minimize tax burden:
- El Salvador -- 0% capital gains tax; 0% VAT on digital asset services for licensed entities.
- Singapore -- No capital gains tax (for investment holdings).
- Switzerland -- No capital gains tax for private (non-professional) individuals.
- Liechtenstein -- Tax-free for private investors; 12.5% corporate rate.
- Hong Kong -- No capital gains tax; no VAT/GST; 16.5% profits tax only if trading as a business.
- UAE -- No personal income tax; 9% corporate tax (above AED 375K).
If you need to avoid jurisdictions:
- India -- No licensing framework; 30% flat tax + 1% TDS; RBI actively hostile to crypto payments.
- South Korea -- Near-impossible to obtain a real-name bank account (only 5 exchanges have them); extreme banking access barrier.
For the underlying tax treatment behind these recommendations, see Digital Asset Taxation — Comparative Analysis.
9. Hidden Costs
Beyond headline capital requirements and licence fees, firms must budget for the following hidden costs that regularly catch founders off guard.
| Cost Category | Typical Range | Jurisdictions Where Most Material |
|---|---|---|
| Legal preparation (application drafting, documentation, regulatory counsel) | $30K-200K | US (multi-state), UK (FCA), Singapore, Hong Kong |
| Local entity formation (incorporation, registered office, local directors) | $5K-50K | Liechtenstein, Switzerland, UAE, Bahrain, Singapore |
| AML/CFT programme development (policies, procedures, technology) | $20K-100K | All jurisdictions; particularly Singapore (mandatory external audit) and UK |
| Cybersecurity audit / penetration testing | $15K-80K | Singapore, Hong Kong, South Korea (ISMS certification required) |
| Surety bonds (US state MTLs) | $10K-1M+ per state | US only; aggregate $100K-500K for meaningful state coverage |
| Ongoing compliance personnel (compliance officer, MLRO, AML team) | $100K-500K/year | All jurisdictions; salary costs highest in Singapore, Switzerland, UK, US |
| Annual audits (financial, AML, segregation, reserve) | $20K-150K/year | Singapore, Japan, Bahrain, EU (mandatory for stablecoin issuers) |
| Dual licensing costs (where MiCA CASP + PSD2 PI/EMI both required) | EUR 50K-200K additional | EU (for EMT transfer/transferable-custody services from 2 March 2026) |
| Transitional compliance (moving from old to new regime) | $30K-150K | UK (FCA gateway Sep 2026-Feb 2027), Australia (AFSL DAP from Apr 2027), Germany (KMAG), France (CASP by 1 July 2026) |
| Insurance (professional indemnity, cyber, D&O) | $10K-100K/year | Bahrain (required), South Korea (VAUPA mandatory insurance/reserves), Hong Kong |
| Travel Rule compliance technology | $20K-100K setup + ongoing | EU, Singapore, UK, Japan, Australia, UAE, South Korea |
| DAC8/CARF reporting infrastructure | $10K-50K | EU (DAC8 from Jan 2026), UK (CARF from Jan 2026), Switzerland (CARF from Jan 2026), Canada (CARF from 2026, first reports 2027) |
Total cost of ownership example -- EU MiCA CASP (Class 2, Lithuania):
- Capital: EUR 125,000
- Legal/application: EUR 50,000-80,000
- Entity setup: EUR 10,000-15,000
- AML programme: EUR 30,000-50,000
- First-year compliance personnel: EUR 100,000-150,000
- Audit: EUR 20,000-30,000
- Year 1 total: EUR 335,000-450,000
Total cost of ownership example -- US nationwide MTL coverage:
- FinCEN MSB: Free
- State MTL applications (49 states + DC): $100,000-250,000
- Surety bonds: $200,000-500,000+
- Legal fees: $200,000-500,000
- Compliance personnel: $200,000-500,000/year
- Annual ongoing: $200,000-500,000/year
- Year 1 total: $900,000-2,250,000+
- Timeline: 18-24 months
10. Substance Requirements
"Substance" refers to the physical presence, personnel, and operational infrastructure a jurisdiction requires. Failing to meet substance requirements is one of the most common reasons for licence refusal.
| Jurisdiction | Local Office Required | Local Directors | Local Compliance Officer | Local Employees | Other |
|---|---|---|---|---|---|
| EU (MiCA) | Yes (registered office in EU) | At least 2 managing directors | Required | Senior management in EU | "Mind and management" test varies by NCA |
| US (BitLicense) | Yes (if serving NY) | Yes | BSA/AML officer | Yes | NYDFS Part 500 cybersecurity requirements |
| UK | Yes (head office in UK) | Yes | MLRO (nominated officer) required | Yes | FCA "UK decision-making" test; restrictive Overseas Persons Exemption |
| Singapore | Yes (physical office) | 1 Singapore Citizen or PR director | Yes (at management level) | Yes | Independent audit function; legal opinion from SG law firm |
| Japan | Yes (Japanese office) | Yes | Yes | Sufficient qualified personnel | Stock company (kabushiki-kaisha) or foreign entity with JP office; no foreign-licence recognition |
| Switzerland | Yes (registered office in CH) | Yes | Due diligence officer (SRO) or FINMA-supervised | Yes | AG, GmbH, or Kommanditgesellschaft |
| Hong Kong | Yes | At least 1 HK-resident responsible officer | Yes | Yes | VATP Phase 1 + Phase 2 external assessments required |
| UAE (VARA) | Yes (Dubai) | Board with relevant experience | Local compliance officer | Yes | UAE bank account required |
| Bahrain | Yes (Bahrain) | Yes | Local compliance officer | Local employees | Fit and proper assessment; cybersecurity controls; stablecoin issuer must be a Bahraini Joint Stock Company |
| El Salvador | Yes | 2 shareholders minimum | MLRO resident in El Salvador | Compliance officer in El Salvador | Local legal entity required |
| South Korea | Yes | Yes | Yes | Yes | ISMS certification from KISA mandatory; real-name bank account |
| Brazil | Yes (domestic subsidiary) | Yes | Cybersecurity officer; compliance officer | Yes | Person responsible for each activity area |
| Nigeria | Yes | MD resident in Nigeria; 60% Nigerian board | Yes | Yes | Fidelity bond (25% of capital) |
| Australia | Yes (for AFSL) | Responsible managers | Yes | Yes | AFSL responsible-manager organisational competence (DAP/TCP regime from Apr 2027) |
| Canada | Yes (for CSA dealer) | Yes | Chief compliance officer / UDP | Yes | FINTRAC compliance officer; Foreign MSB pathway for non-residents |
11. Investor / VC Expectations
Venture capital firms and institutional investors increasingly evaluate a portfolio company's regulatory positioning as a core element of due diligence. Based on observed market practice:
Licensing Signals That Attract Institutional Capital
| Signal | Why It Matters | Examples |
|---|---|---|
| MAS MPI licence (Singapore) | Demonstrates ability to pass Asia's most rigorous regulatory review | Paxos (USDG), StraitsX (XSGD/XUSD) attracted institutional partners including DBS and Standard Chartered |
| NY BitLicense or OCC charter (US) | Validates institutional-grade compliance and governance | Circle and Coinbase -- both attracted significant institutional investment |
| EU MiCA CASP (France/Germany) | Signals access to 450M+ EU/EEA consumers via passporting | SG-FORGE (ACPR EMI for EURCV) anchored regulated euro stablecoin adoption across EU |
| FINMA banking licence (Switzerland) | Swiss banking credibility; fiduciary standards | Sygnum and AMINA (ex-SEBA) both raised institutional rounds citing FINMA licence |
| SFC VATP licence (Hong Kong) | HK financial centre credibility; institutional-grade requirements | HashKey raised significant capital following SFC licensing |
Red Flags for Investors
| Red Flag | Concern |
|---|---|
| Only El Salvador DASP licence | $2,000 capital threshold suggests minimal regulatory scrutiny; limited institutional counterparty acceptance |
| Operating under transitional/grandfathered provisions only | Risk of licence expiry if full authorization not obtained (e.g., EU CASP transitional periods end 1 July 2026; UK gateway deadline 28 Feb 2027; Germany 31 Dec 2025) |
| No licence at all (India; unregistered Brazil VASPs after Oct 30, 2026) | Regulatory risk of shutdown; inability to demonstrate compliance to banking partners |
| Single-jurisdiction licence with global operations | Suggests regulatory arbitrage rather than genuine compliance |
| Licence in jurisdiction with no banking access | Operational dead-end (e.g., South Korea without a real-name bank account; India) |
Investor Due Diligence Checklist (Licensing)
- Which licences does the firm hold, and in which jurisdictions?
- Are the licences permanent or transitional/grandfathered?
- Does the firm have substance in its licensed jurisdiction(s)?
- Does the firm have operational banking relationships?
- What is the firm's passporting scope?
- What are the renewal requirements and timelines?
- Has the firm received any regulatory actions or conditions?
- What is the licensing roadmap for expansion jurisdictions?
12. Insurance Availability
Insurance for crypto payment service providers remains a developing market. Availability, coverage scope, and pricing vary significantly by jurisdiction and business model.
Available Insurance Products
| Product | Coverage | Typical Providers | Availability |
|---|---|---|---|
| Crime / Specie | Theft of crypto assets (hot/cold wallet), employee fraud, social engineering | Lloyd's syndicates, Aon, Marsh, Lockton | Available but limited capacity; premiums 2-5% of coverage |
| Professional Indemnity (E&O) | Errors in custody, exchange, or advisory services | Lloyd's, AIG, Beazley | Available in most jurisdictions; required by Bahrain CBB |
| Cyber Liability | Data breaches, system failures, ransomware | Multiple global insurers | Widely available; increasingly required (UK, Singapore, South Korea) |
| Directors & Officers (D&O) | Regulatory investigations, shareholder claims | AIG, Chubb, Hiscox | Available; recommended for all licensed entities |
| Fidelity Bond | Employee dishonesty | Multiple providers | Required for US state MTLs, Canadian CSA-registered dealers, and Nigerian VASPs (25% of capital) |
Insurance by Jurisdiction
| Jurisdiction | Insurance Requirement | Notes |
|---|---|---|
| South Korea | Mandatory (VAUPA) | VASPs must maintain insurance or reserves for hacking/incident liability |
| Bahrain | Professional indemnity required | CBB mandates PII insurance as part of CASP licensing |
| US | Surety bonds mandatory (state MTLs); fidelity bonds for NY BitLicense | Not traditional insurance but provides counterparty protection |
| Canada | E&O and fidelity bond for CSA-registered dealers | Required for investment dealer registration |
| Hong Kong | Client asset protection arrangements required | SFC expects insurance or compensation-fund arrangements for VATPs |
| Nigeria | Fidelity bond (25% of capital) | Required as part of SEC VASP licensing |
| EU (MiCA) | Capital can be partially met by insurance policy | MiCA allows insurance as alternative to own funds for prudential safeguards |
| All other jurisdictions | Not mandatory but strongly recommended | Market practice is converging toward mandatory coverage |
Market Challenges
- Limited underwriting capacity: Few insurers have deep expertise in crypto asset valuation and custody risk
- Exclusion clauses: Most policies exclude losses from protocol-level exploits, smart contract bugs, or regulatory seizure
- Premium volatility: Premiums have decreased from 2022 peaks but remain 3-10x higher than equivalent traditional financial services coverage
- Self-insurance trend: Larger firms increasingly self-insure through captive entities or reserve funds rather than commercial insurance
Verification Notes
Data Sources and Verification Methodology
All data in this document is mirrored from the canonical per-jurisdiction fact matrix (.claude/crypto-payment-regulation-fact-matrix.json), which is the verified source of truth for this refresh. The matrix in turn is sourced from Phase 1 jurisdiction research files located at /content/deep-research/crypto-payment-regulation/regulations/, containing primary-source citations to official government publications, regulatory authority websites, and reputable legal advisory firms. This refresh re-derived all "X of N" aggregates directly from the matrix and corrected facts the matrix now states differently. No new web research was performed for this pass (modified 2026-06-04).
Key Corrections Applied in This Refresh
- United States market-structure bill: The relevant bill is the Digital Asset Market Clarity Act (CLARITY Act, H.R. 3633), advanced by the Senate Banking Committee on 14 May 2026 but not yet enacted (prior references to "FIT21" are obsolete).
- Roman Storm: Convicted (August 2025) on the unlicensed money-transmitting count (18 U.S.C. 1960); the jury deadlocked on the money-laundering and sanctions counts, and the DOJ is seeking an October 2026 retrial on the deadlocked counts.
- Brazil tax: MP 1303 (proposed flat 17.5% crypto capital-gains tax) was rejected (251-193) and expired in October 2025 — it never took effect. The progressive 15%–22.5% regime with the R$35,000 monthly exemption remains in force (offshore holdings 15% flat under Law 14,754/2023).
- El Salvador: Bitcoin is no longer legal tender — it has been a voluntary payment method since 29 January 2025 (Legislative Decree No. 199), following the $1.4B IMF Extended Fund Facility; CNAD remains the sole digital-asset authority, and 0% crypto tax for licensed entities is maintained.
- Japan: The Payment Services Act amendment (ECISBO intermediary regime, expanded VASP registration, recognition of qualifying foreign trust-type stablecoins as EPIs) takes full operational effect 1 June 2026.
- GENIUS Act implementation: Six of seven federal regulators issued implementing NPRMs during April–May 2026 (OCC, Treasury "substantially similar" principles, FDIC, FinCEN/OFAC, NCUA; Federal Reserve Board pending); the regime becomes effective the earlier of 18 Jan 2027 or 120 days after final rules.
Re-derived Aggregates (from the matrix)
- 19 jurisdictions covered (US, Brazil, Canada, El Salvador, Australia, Hong Kong, India, Japan, Singapore, South Korea, EU, France, Germany, Liechtenstein, Switzerland, UK, Bahrain, Nigeria, UAE).
- EU CASPs: ~199 authorised across 23 countries (ESMA Interim Register, 12 April 2026); 20 EMT issuers, 0 ART issuers.
- Germany: ~53 authorised MiCAR CASPs (May 2026); France: 100+ DASPs; Liechtenstein: 29 TT service providers (4 Nov 2025), first CASPs authorised H1 2026.
- Singapore: 36 MPI-for-DPT licences (Jan 2026). Hong Kong: 13 VATPs licensed and 2 stablecoin issuer licences (June 2026). South Korea: 5 exchanges with real-name bank accounts.
- Canada: 80+ crypto MSB registrations revoked across 2025-2026 (51 in a single day, 24 March 2026).
- Stablecoin regimes in force: EU (MiCA EMT/ART), US (GENIUS Act), Hong Kong (Stablecoins Ordinance), Japan (EPI/PSA), Bahrain (SIO), UAE (PTSR/FRT), Nigeria (cNGN/ISA 2025), El Salvador (LEAD), plus France/Germany/Liechtenstein via MiCA — versus enacted-not-in-force or proposed regimes in UK, Singapore, South Korea, Canada, Switzerland, Australia, and Brazil's stablecoin-as-FX classification.
Unverified or Estimated Data
- Brazil SPSAV application fees and approval data: NOT VERIFIED — framework newly operational (Feb 2, 2026); first cohort of authorizations expected mid-2026.
- Nigeria total VASP licences issued: NOT VERIFIED beyond the 2 provisional licences (Busha, Quidax); SEC deliberately slowing approvals.
- Bahrain algorithmic-stablecoin prohibition: NOT VERIFIED explicitly in the SIO framework (likely excluded given fiat-backing requirement).
- Bahrain / UAE crypto-payment tax treatment (classification, VAT, CGT): NOT VERIFIED in the underlying files.
- Cost estimates in the comparison and hidden-cost tables: industry estimates from multiple advisory sources; may vary significantly by firm size, complexity, and service scope.
- Switzerland and several jurisdictions: maximum-penalty figures NOT VERIFIED where the matrix records none.
Methodology Notes
- Capital requirements are stated in the jurisdiction's regulatory currency with USD approximate conversions where relevant.
- "Setup cost" estimates include entity formation, legal preparation, application fees, and first-year compliance infrastructure, but exclude ongoing personnel costs.
- "Annual cost" estimates include licence renewal fees, audit costs, reporting obligations, and minimum compliance staffing, but exclude variable costs such as legal counsel and technology.
- Timelines represent typical processing times based on regulatory authority publications and practitioner reports; actual timelines may vary based on application quality and regulatory workload.
- Approval/issuance data is drawn from the matrix where jurisdictions publish such figures; many jurisdictions do not disclose approval rates.