Obtaining a crypto license in Portugal

Obtaining a crypto license in Portugal today means stepping into a regulatory landscape that has already shifted. Working with crypto assets is no longer about relying on the old VASP registration model. With the launch of the EU-wide MiCA framework, most market players now face a different reality — obtaining CASP authorization, which grants the right to provide specific crypto-asset services under unified EU rules.

For businesses considering obtaining a crypto license in Portugal, both the requirements of the regulation itself and the Portuguese law implementing it play a key role. This framework splits responsibilities between Banco de Portugal and CMVM. The urgency is real: the EU regime has been in force since December 30, 2024, while the transition period for previously registered operators in Portugal ends on July 1, 2026.

This article walks through the legal backbone of the market, explains which services fall under the CASP regime, and outlines the expectations for company structure, capital, management, and internal controls. A separate section explores how to obtain authorization for a crypto company in Portugal — from preparing documents to navigating the review process and understanding where key supervisory risks tend to appear.

Obtaining a crypto license in Portugal: how the legal regime changed after MiCA

The legal meaning behind the term “crypto license” has fully evolved. Today, obtaining a crypto license in Portugal essentially means going through the authorization process as a Crypto-Asset Service Provider (CASP) under the EU-wide MiCA regulation. The old national approach — simple VASP registration in Portugal — no longer provides legal grounds to operate either locally or across the EU. The core supranational act is Regulation (EU) 2023/1114, setting unified rules for all member states.

Crypto regulation in Portugal at the national level is handled through Law No. 69/2025, which carefully outlines how European rules are applied. It distributes authority between regulators and defines penalties for breaking operational requirements. For businesses preparing for obtaining a crypto license in Portugal, the official legal framework includes:

• Regulation (EU) 2023/1114 (MiCA) — the foundational EU regulation;
• Lei n.º 69/2025 — Portugal’s law implementing MiCA at the national level;
• Lei n.º 83/2017 — the core law on anti-money laundering and countering illicit finance;
• Lei n.º 70/2025 — a specialized act governing transfer rules and data-sharing obligations.

The process of obtaining a crypto license in Portugal is now tightly tied to transaction transparency requirements. Regulation (EU) 2023/1113, along with its Portuguese counterpart, introduces the so-called “travel rule” framework. These rules require providers to collect and transmit information about both senders and recipients of crypto assets.

For market participants who began operations before the new system, a limited transition window applies. Completing CASP authorization in Portugal must happen before July 1, 2026. After that date, any activity without full regulatory approval becomes illegitimate. If a decision on an application is issued earlier, the company must immediately switch to the new operational standards.

A valid CASP license in Portugal now demands a much higher level of compliance compared to previous registration formats. The country’s central bank makes it clear: having historical VASP status does not grant any simplified pathway. In practice, every applicant goes through the full authorization cycle from scratch, proving financial stability and demonstrating a clean, reliable management track record.

Crypto licensing in Portugal: regulatory framework, legal status, and supervisory authorities

The supervisory system in Portugal is built on a clear division of powers between two major institutions. Under Law No. 69/2025, crypto licensing in Portugal is no longer handled by a single authority. Instead, responsibilities are split between the central bank and the securities market regulator.

At the heart of the system stands Banco de Portugal, the body responsible for granting approvals and maintaining prudential oversight. This is where CASP regulation in Portugal is anchored — the authority reviews whether applicants meet requirements for share capital, risk management, and operational stability.

Distribution of supervisory powers in Portugal:

For entrepreneurs planning on obtaining a crypto license in Portugal, dealing with regulators becomes more layered due to this dual-control system. The Securities Market Commission (CMVM) plays a key role in monitoring professional conduct and preventing market abuse. It oversees public offerings of crypto assets and keeps transactions clean under the framework of Title VI of the MiCA regulation.

In practice, effective supervision of crypto assets in Portugal depends on close coordination between these two bodies. While the application package is formally submitted to the central bank, the answer to who actually grants a crypto license in Portugal is more nuanced — it’s a combined decision. CMVM takes part in reviewing the completeness of the file and provides its opinion on whether the business model aligns with regulatory standards and market conduct rules.

Obtaining a license for a crypto company in Portugal: which services fall under CASP and how license classes are structured

Under the MiCA framework, working with crypto is no longer a vague concept — everything is strictly defined. Obtaining a license for a crypto company in Portugal now starts with selecting services from a regulated list. The authorities outline ten separate types of activity, ranging from safeguarding client crypto assets and managing them, to operating trading platforms and handling exchanges between crypto and fiat or between different digital assets.

The combination of services you choose shapes your position in the system. CASP licensing in Portugal is built around categories that reflect how complex and risk-heavy your operations are. If your business is limited to consulting or simply forwarding client orders, you stay in the entry-level category. But once you step into custody or exchange operations, you move up into stricter regulatory territory.

Capital requirements follow the same principle. For example, obtaining a CASP Class 1 license in Portugal necessitates keeping at least €50,000 in personal funds. If your business model evolves, you will want a CASP Class 2 license in Portugal, where the barrier rises to €125,000. For enterprises developing more advanced infrastructure, such as trading platforms, the system requires a CASP Class 3 license in Portugal, with a minimum capital of €150,000. In actuality, the specific combination of CASP services in Portugal determines how much financial backing your organization must present.

Financial parameters for CASP authorization:

Special financial rules apply to companies issuing asset-referenced tokens. If your project includes issuing ART in Portugal, your own funds must meet the highest of three benchmarks: €350,000, 2% of the average reserve of assets described in Article 36 of MiCA, or one quarter of fixed overhead costs from the previous year.

The reserve-based figure is calculated using the average value of reserve assets recorded at the end of each day over the past six months. If multiple ARTs are issued, the calculation combines the reserves supporting each token. The overhead-based requirement is reviewed annually in line with Article 67(3) of MiCA.

It’s important to understand that fixed capital is just the starting point. Under MiCA, financial stability is assessed more broadly. The minimum own funds requirement depends on the nature of the company’s operations and often goes beyond a simple fixed threshold. For CASP in Portugal, regulators pay close attention to how the required capital compares to one quarter of the company’s fixed operating expenses from the previous financial year — this ratio becomes a key indicator of real financial resilience.

Obtaining a crypto license in Portugal: key requirements for the applicant, business structure, and management

For enterprises seeking a crypto license in Portugal, a registered office in an EU member state is a requirement.

One of the most sensitive stages is checking the background of both management and shareholders. Current CASP requirements in Portugal place strong emphasis on reputation — applicants must clearly demonstrate the absence of criminal records related to financial offenses. It’s not just a formality; regulators look closely at who is actually running the business.

The same level of scrutiny applies to shareholders with significant ownership. Authorities carefully review the financial standing and reputation of individuals who hold direct or indirect control over the company’s capital. Transparency here is not a bonus — it’s expected.

The internal structure of the company must be built with stability and client protection in mind. Deep crypto business licensing in Portugal goes far beyond paperwork — it requires setting up independent control and audit functions that actually work in practice.

Core elements of the internal organizational model:

• a corporate governance system with clearly defined roles and responsibilities;
• internal control mechanisms and operational risk management processes;
• a structured AML/CFT framework to prevent illicit financial flows;
• resilient IT infrastructure with strong data protection protocols;
• cybersecurity policies and clear incident response procedures;
• transparent systems for handling and resolving client complaints;
• oversight of outsourced critical functions and third-party providers;
• a secure model for safeguarding and managing client assets.

Preparing the application file is not something you do overnight. It involves building a full set of internal policies and operational programs. Before obtaining a crypto license in Portugal, founders must develop a detailed operational plan — including descriptions of IT systems and how client funds are segregated.

Financial projections covering at least three years are also required. These forecasts should clearly show that the company can meet prudential requirements and stay financially stable as it grows.

Any questions? We are in touch

We recommend contacting our specialists for more detailed information. To schedule a consultation, click the button below.

Contact us

Online

Process of obtaining a crypto license in Portugal: documents, application, timelines, and transition period

The road to legal status begins with building a solid, detailed file that meets MiCA standards. Today, obtaining a crypto license in Portugal is a strictly structured process — one that pushes businesses toward a much higher level of transparency than before.

The core requirements come from Article 62 of the MiCA regulation. The exact structure and content of the application are further clarified in Commission Delegated Regulation (EU) 2025/305 and Commission Implementing Regulation (EU) 2025/306. These documents define which materials for CASP authorization in Portugal are considered sufficient for assessing the reliability and stability of a business.

A standard document package for CASP in Portugal usually includes:

• incorporation documents and confirmation of the corporate structure;
• a programme of operations describing all services in detail;
• a financial model with projections for the next three years;
• a governance file outlining corporate management;
• AML/CFT policies and procedures;
• information on qualifying shareholders;
• proof of management’s qualifications and reputation (fit and proper);
• a technical overview of IT systems and cybersecurity measures.

The overall process of obtaining a crypto license in Portugal unfolds in several clear stages, each with its own timing.

Under the existing standards, the formal evaluation phase for a crypto corporation in Portugal usually lasts between 40 and 60 business days. This clock, on the other hand, doesn't start until the regulator checks that the file is complete. It's vital to keep in mind that the verification for completeness can take up to 25 business days before the genuine review even starts.

Right now, the transition from VASP to CASP in Portugal has entered a critical phase. The window is closing fast for companies that previously operated under national AML registration rules. The final deadline is July 1. After that, any professional activity involving digital assets without full authorization under the MiCA framework will be considered illegal.

Official fees and costs of obtaining a crypto license in Portugal

The financial side of the project starts with a clear split: mandatory public payments on one side, real operational expenses on the other. Banco de Portugal takes a straightforward position — there are no state fees for obtaining a crypto license in Portugal.

But zero official fees doesn’t mean zero costs. In reality, obtaining a crypto license in Portugal comes with a solid financial commitment. The true price is shaped by building real local presence (substance) and aligning the business with regulatory expectations.

Cost structure for a CASP project:

The final cost of obtaining a crypto license in Portugal is always case-specific. It depends on the range of services the company plans to offer. For example, obtaining a CASP license in Portugal for a crypto exchange is noticeably more expensive — simply because this model requires deeper market surveillance systems and more complex compliance layers.

A significant part of ongoing expenses also includes maintaining prudential reserves. In practice, companies must keep funds at a level of at least one quarter of their annual fixed overhead costs.

Crypto licensing in Portugal after authorization: operational duties, AML/CFT, and risk control

Getting authorized is not the finish line — it’s the beginning of obligations. Once a company completes crypto licensing in Portugal, it steps into a system where protecting clients becomes a daily responsibility. CASP obligations in Portugal require management to follow strict standards of professional conduct.

Information provided to clients must be fair, clear, and never misleading. This is not just a guideline — it’s a rule regulators actively enforce.

Strong internal processes are not optional — they must be documented and working in practice.

Key operational documents include:

• custody and asset administration policy;
• a client positions register with daily updates;
• conflict of interest management procedures;
• internal rules for handling customer complaints;
• a business continuity plan;
• a client agreement aligned with EU consumer protection standards.

The hardest part of the system is still the steps taken to stop money laundering. Portugal's CASP licensing is based on Law No. 83/2017 and the new Travel Rule rules. Providers are required to set up multi-layered identification systems (KYC/KYB) and keep a close eye on where funds come from.

Taxation and passporting: how a crypto company operates in Portugal after obtaining a license

The tax side of the business lives in a different world from the regulatory one. Banco de Portugal handles supervision and compliance control, while tax matters for a crypto company fall entirely under the authority of the Autoridade Tributária e Aduaneira.

The standard corporate tax rate on mainland Portugal is 19%. Small and medium-sized businesses can benefit from a reduced tax regime for CASP in Portugal: a 15% rate applies to the first EUR 50,000 of profit. Any profit above that threshold is taxed at the standard rate.

Tax framework for crypto businesses:

Additional taxes after obtaining a crypto license in Portugal may appear once the business crosses certain financial thresholds. The state surcharge applies to profits above EUR 1.5 million and works on a progressive scale. As for indirect taxation, crypto exchange services still remain exempt from VAT. But related activities — like consulting or software sales — are taxed at the standard 23% VAT rate.

Obtaining a crypto license in Portugal: what it means for business in the EU market

Over the last few years, Europe has gradually integrated digital assets into the old financial system. Obtaining a crypto license in Portugal is no longer merely a formal process. Investors must demonstrate true operational depth, structure, and commitment. CASP status provides access to the EU single market, but it also imposes significant responsibilities for protecting client data and maintaining complete capital transparency.