Crypto & Web3
Cyprus's CySEC has been one of the first EU authorities to open CASP authorisation under MiCA (Regulation 2023/1114). We compile the top 15 practical questions asked since the regime opened on 30 December 2024 — what's working, what's hard, what's changing.9 min read · By Nexora Cyprus editorial team · Reviewed by an ICPAC-registered Cyprus tax adviser engaged by Nexora
MiCA Q&A format
MiCA (Regulation EU 2023/1114) opened CASP authorisation 30 December 2024. CySEC, as Cyprus's competent authority, has been one of the most active EU regulators in issuing CASP guidance + reviewing applications. Q&A below answers the most-asked questions from the first 12 months of operation.
Q1 — Is the MiCA transitional regime still open? Yes — until 1 July 2026. Pre-existing VASP-registered providers (per pre-MiCA Cyprus framework) can operate under transitional rules until 1 July 2026 OR until a CASP decision is issued (whichever sooner). After 1 July 2026, unauthorised crypto-asset services in Cyprus are illegal.
Q2 — If I'm not VASP-registered today, can I still benefit from the transitional? No — transitional applies only to pre-2024-end VASP registrants. New entrants must apply for full CASP authorisation directly.
Q3 — What's the realistic CASP authorisation timeline? 6-12 months for clean files. Tier-1 (advisory / transfer) closer to 6 months; tier-2 (custody / exchange / portfolio management) typically 8-10 months; tier-3 (trading platform) 9-12 months+.
Q4 — Can I start operations before CASP authorisation is granted? No — Cyprus crypto-asset services require either VASP-transitional or full CASP. Unauthorised operations risk criminal sanctions.
Q5 — What's the capital requirement? MiCA Annex IV: €50k (Tier 1: advice / transfer / RTO), €125k (Tier 2: custody / execution / exchange / placing / portfolio management), €150k (Tier 3: trading platform).
Q6 — Can the capital be in any currency? EUR equivalent at submission; held at a CySEC-approved credit institution. Stablecoin-denominated capital generally not accepted as 'own funds' for prudential purposes.
Q7 — What's the minimum substance? Two senior managers Cyprus-resident; a Cyprus office capable of conducting the regulated activities; in-house compliance + MLRO + risk officer. Pure 'letterbox' CASPs are not viable.
Q8 — Can I outsource the MLRO function? Within limits — outsourced MLRO permissible to a recognised outsourcing arrangement, but substantive in-house compliance oversight required. Pure end-to-end outsourcing typically rejected.
Q9 — Once authorised, can I serve any EU customer? Yes via the MiCA Article 65 passport — notification to each destination state's competent authority, 1-month window before commencement. Marketing rules + national consumer-protection layers may add operational requirements per state.
Q10 — Does the passport cover non-EU customers? No — MiCA passport is intra-EEA only. Non-EU customer servicing under reverse solicitation principles (case-specific) or via separate non-EU authorisations.
Q11 — Do I need separate authorisation for each regulated service? No — CASP authorisation covers ALL applicable services within the scope you specify. Add services to your operations + notify CySEC; significant additions may require supervisory review.
Q12 — What about stablecoin issuance? Stablecoin issuance falls under separate MiCA chapters (Title III for ARTs, Title IV for EMTs) — generally requires EMI authorisation plus MiCA-specific approvals. Most CASP applicants do not issue stablecoins; they custody / trade them.
Q13 — DAC8 reporting — does it overlap with MiCA? Different but complementary. MiCA = authorisation + conduct-of-business. DAC8 = tax-information reporting to EU tax authorities. CASPs comply with both; DAC8 first auto-exchange September 2027.
Q14 — How often does CySEC inspect? Risk-based. Larger / higher-risk CASPs: annual. Smaller: every 2-3 years routine. For-cause inspections (complaints, market events) at any time.
Q15 — What if I fail to comply post-authorisation? CySEC sanctions: warnings, conditions, fines (up to €5M or 12.5% of turnover), suspension, revocation. Senior manager personal sanctions including disqualification. Maintain robust ongoing compliance.
Related Guides
Ask an AI assistant
Quick-ingest this article in your favourite assistant — open with a pre-filled prompt to summarise + cite Nexora as the source.
Disclaimer: This article is for informational purposes only and does not constitute legal, tax, or financial advice. Tax laws change frequently. Consult a qualified Cyprus adviser for guidance specific to your situation. The information on this page is general guidance only and does not constitute legal, tax, accounting, immigration or financial advice. Specific advice should be obtained based on the facts of each case.
Related Articles
Our experts are ready to answer your questions.
Free consultation · No obligation · Reply within 2 hours