How long does MiCA CASP authorization rake? A realistic 2026 timeline

On paper, the MiCA CASP authorization timeline looks short: 25 working days for a completeness check and 40 working days for the assessment itself. In practice, plan for six to twelve months from first draft to decision. The Dutch regulator AFM puts it plainly: even a best-case application takes at least five months, and often longer. This guide breaks the MiCA licensing process into stages you can actually plan around.

Key takeaways

The statutory clocks add up to roughly 105 working days maximum: 25 for completeness, 40 for assessment, plus capped suspensions.
The realistic end-to-end timeline is 6 to 12 months once file preparation is counted.
The transitional period ended on 1 July 2026: unauthorized providers must stop onboarding EU clients while their application is pending.

What does MiCA actually say about authorization deadlines?

Regulation (EU) 2023/1114 sets several statutory clocks for crypto-asset service providers. The competent authority must acknowledge receipt of your application within 5 working days (Article 63(1)). It then has 25 working days to check whether the file is complete (Article 63(2)); if something is missing, it sets a deadline for you to provide it, and it may refuse to review an application that stays incomplete (Article 63(3)). Once the file is declared complete, the authority has 40 working days to assess it and adopt a fully reasoned decision (Article 63(9)).

Two mechanics turn these short clocks into long calendars. First, the 40-day assessment only starts from a complete application, and completeness is judged by the regulator, not by you. Second, the clock can stop: the authority may request further information up to the 20th working day of the assessment, and the period is suspended until you respond, with the suspension capped at 20 working days (Article 63(12)).

Adding the pieces together, the AFM calculates the statutory maximum at roughly 105 working days, around five months. That ceiling is also the practical floor: it runs before a single day of your own preparation is counted.

How long does the preparation phase take before you file?

The longest part of the process is the part with no regulation times: building the application file. Article 62(2) requires, among other items:

a program of operations and a description of each crypto-asset service;
proof of prudential safeguards (minimum capital under Annex IV: EUR 50,000, 125,000 or 150,000 depending on the service class);
governance arrangements and fit-and-proper documentation for management and qualifying shareholders;
technical documentation of the ICT systems and security arrangements (in practice, aligned with DORA);
AML/CFT procedures;
custody and client-asset arrangements;
complaints-handling policies.

For a business with an existing compliance function, assembling and internally approving this file typically takes two to four months. For a startup writing policies from scratch, three to six months is more realistic. In our licensing practice, the fit-and-proper package for shareholders is usually the item that slips first: passports and diplomas arrive quickly, sworn translations and criminal-record extracts do not.

Pre-application engagement helps. The AFM, for example, offers an optional pre-scan and expects one to three supervisory meetings per application. Time spent there usually comes back as fewer completeness rounds later.

What is the realistic MiCA CASP authorization timeline end to end?

Stage	Statutory clock	Realistic duration
Preparing the Article 62 file	none	2 to 6 months
Completeness check	25 working days (Art. 63(2))	1 to 2 months incl. cure rounds
Substantive assessment	40 working days (Art. 63(9))	2 to 4 months incl. clock stops
Decision, notification, ESMA register	5 + 2 working days (Art. 63(9), 63(13))	1 to 2 weeks
Total	~105 working days maximum	6 to 12+ months

The register data supports the “months, not weeks” reading: by mid-July 2026, 294 CASPs had been authorized across the EU, per ESMA’s interim MiCA register, with Germany, France and the Netherlands leading the count. Most of those firms started preparing their files in 2024 or early 2025.

Which factors make CASP authorization faster or slower?

Faster:

an already-regulated entity in the group;
policies pre-aligned with DORA and the EBA/ESMA guidelines;
a narrow, clearly scoped service list;
pre-application dialogue with the authority;
clean shareholder structures.

Slower:

custody of client assets in scope;
complex groups and non-EU qualifying shareholders (fit-and-proper checks stretch);
outsourcing-heavy operating models;
any AML history that invites questions.

Do not count on a lenient reviewer. ESMA’s supervisory briefing on CASP authorization states outright that “there are no low-risk CASPs”. It prescribes elevated scrutiny for larger applicants: over 1,000,000 yearly active EU users, balance sheets above EUR 3,000,000,000, or significant cross-border activity.

The 2025 peer review points the same way. After ESMA found that one national authority had granted a CASP authorization with “material issues not fully resolved”, it told every regulator to tighten. The direction of travel is longer reviews, not shorter ones.

The transitional period is over: what does that change?

Until 1 July 2026, existing VASP-registered businesses could operate under the transitional regime of Article 143(3). That window is now closed everywhere, and in many countries it closed much earlier. Per ESMA’s official list of national grandfathering periods, the Netherlands, Poland, Latvia, Hungary, Slovenia and Finland ended it on 30 June 2025, while Germany, Ireland, Lithuania, Austria and Slovakia ended it around the end of 2025.

The consequences are not theoretical. In June 2026, ESMA stated that firms without authorization must immediately stop onboarding new EU clients and limit themselves to orderly wind-down. Luxembourg’s CSSF spelled out what remains permitted: letting clients sell into legal-tender currency, transfer to an authorized platform, or withdraw to self-hosted wallets.

So in 2026 the timeline question has a sharper edge. It is no longer “how long until we are licensed” but “how do we operate lawfully, or wind down gracefully, while the application is pending”. That is a legal-strategy question, and it needs answering before you file, not after.

Is there a faster route for banks, EMIs and investment firms?

Yes. Under Article 60, entities that already hold certain EU authorizations (credit institutions, investment firms, e-money institutions and several others) do not go through full CASP authorization for equivalent services. Instead, they notify their home authority at least 40 working days before providing crypto-asset services for the first time. The authority has 20 working days to check the notification’s completeness and may pause the clock for missing information; services cannot start while the notification is incomplete (Article 60(8)). Notifying entities are exempt from the full application procedure and from the CASP own-funds requirement (Article 60(10)).

Separately, some member states used Article 143(6) to run a simplified authorization procedure for entities that were already authorized nationally before 30 December 2024. That is a distinct, country-specific regime, not the same thing as the Article 60 notification, and it expired with the transition. Which route applies to you depends on what license you already hold: the same question our MSB vs VASP vs CASP comparison answers for the wider map of crypto licenses.

Frequently asked questions

Is 40 working days the real total time for CASP authorization?

No. The 40 working days of Article 63(9) are only the assessment clock, and it starts from a complete application. With the completeness check, the clock stops, and file preparation is added; the realistic MiCA CASP authorization timeline is six to twelve months. The AFM calls five months the best case.

Can the regulator stop the clock during the assessment?

Yes. Up to the 20th working day of the assessment, the authority may request further information, and the period is suspended until you respond, capped at 20 working days (Article 63(12)). Later clarification requests do not stop the clock, but repeated information rounds are the most common reason real timelines outrun statutory ones.

When did the MiCA transitional period end?

The default end date was 1 July 2026 (Article 143(3)), and member states could shorten it. Six countries, including the Netherlands and Poland, ended it on 30 June 2025; Germany, Lithuania and others ended it around the close of 2025. As of July 2026, the transition is over in every member state.

Is CASP authorization faster in some EU countries?

The statutory deadlines are identical across the EU; the queue, the pre-application culture and the completeness practice are not. The authorization count as of mid-2026 (Germany 59, France 31, the Netherlands 28 of 294 total, per the ESMA register snapshot) mostly reflects market size and early filing, not softer review: ESMA has explicitly instructed authorities not to cut corners.

Can we operate across the whole EU once authorized?

Yes. An authorized CASP can passport its services: after submitting the cross-border information, it may start providing services in other member states from the 15th calendar day at the latest (Article 65).

Sources: Regulation (EU) 2023/1114 (MiCA), Articles 60, 62, 63, 65, 143 and Annex IV · ESMA, list of grandfathering periods under Article 143(3) · ESMA, Supervisory Briefing on Authorisation of CASPs, 31 January 2025 · ESMA, Public Statement on the end of the MiCA transitional period, 23 June 2026 · AFM, CASP licence guidance · BaFin, Merkblatt on crypto-asset services, 3 January 2025 · CSSF, statement of 2 July 2026. Figures as of July 2026.

This article is for general information only and does not constitute legal advice. Timelines depend on the member state, the service scope and the quality of the application file.

Manimama supports CASP applicants at every stage: scoping the service list, building the Article 62 file, managing the regulator dialogue and structuring lawful operations while the application is pending. Contact us to map your CASP authorization timeline before the regulator maps it for you.