VASP Registration in Lithuania: Bank of Lithuania VASP Regime and Pathway to CASP

Lithuania remains one of the most commercially attractive EU entry points for crypto businesses seeking a clear, well-documented route to market. VASP registration in Lithuania offers founders and compliance teams a combination that is hard to match elsewhere in the EU: an English-language regulator interface, comparatively fast registration timelines, an established pool of local compliance professionals, and a growing network of banks experienced in onboarding digital-asset firms. At the same time, the regulatory landscape is shifting. The Bank of Lithuania has materially tightened its vetting of applicants since 2022, and the EU’s Markets in Crypto-Assets Regulation (MiCA) introduces a new CASP authorisation framework that will reshape how crypto firms operate across the bloc. This guide covers every practical step eligibility, compliance requirements, costs, timelines and the critical VASP-to-CASP transition so decision-makers can move forward with confidence.

Quick Summary Who, What, Why

Who Should Read This

This page is written for founders, chief financial officers, general counsel and heads of compliance at crypto exchanges, wallet providers, custodians, payment processors and fintech startups that are evaluating Lithuania as their EU regulatory home whether as a first-time applicant or as an existing operator planning the MiCA transition.

What the Page Covers

We walk through the full lifecycle of Lithuania crypto registration: the national VASP registration regime administered by the Bank of Lithuania, detailed eligibility and compliance checklists, a step-by-step application process, an itemised cost and timeline breakdown, and a structured comparison between national VASP registration and full MiCA CASP authorisation. A downloadable bank-ready VASP intake checklist is available on this page to help applicants prepare documentation packages that satisfy both regulator and banking requirements.

Bank of Lithuania Regime Legal Basis and Recent Tightening

Legal Basis for National VASP Registration

Lithuania’s national VASP registration framework derives from the country’s Law on the Prevention of Money Laundering and Terrorist Financing (AML Law), which was updated to bring virtual-asset service providers under the supervisory remit of the Bank of Lithuania. The framework requires any entity that offers crypto-exchange services, custodial wallet services, or crypto-asset transfer services from or within Lithuania to hold a valid registration issued by the Bank of Lithuania. The regime sits alongside EU-level AML directives and, since its introduction, has positioned Lithuania as one of the EU’s most prolific jurisdictions for VASP registrations at one point hosting hundreds of registered entities.

Enforcement and Vetting Changes Since 2022

The permissive environment of earlier years prompted a significant supervisory correction. In a joint statement, Lithuanian authorities called for crypto-asset company requirements to be tightened immediately, citing concerns over beneficial ownership transparency, the fitness of senior managers and the adequacy of AML controls. Concurrently, the Financial Crime Investigation Service (FCIS) published sector analysis that highlighted threats and confirmed that inspections were under way across a significant portion of registered VASPs. The practical result: dozens of registrations were revoked, minimum capital expectations were raised for certain business models, and the bar for senior manager fit-and-proper assessments was materially increased.

Practical Note Regulator Expectations

Today, applicants should expect the Bank of Lithuania to scrutinise beneficial ownership chains to the ultimate natural person, require evidence of genuine local substance (office, resident directors, dedicated compliance resources), and apply heightened diligence to any business model involving high-risk tokens, privacy coins or complex cross-border fund flows. Firms that approach the regulator with transparent, well-documented applications still benefit from Lithuania’s efficient processes, but superficial corporate shells are routinely refused.

Eligibility Checklist Permitted Activities, Corporate Structure and Red Flags

Before preparing a Lithuania VASP licence application, firms must confirm they meet the following baseline criteria:

• Permitted VASP activities: Exchange of virtual currencies for fiat or other virtual currencies; custodial wallet services; crypto-asset transfer services; and for some models advisory or portfolio-related services that fall within the VASP definition under Lithuanian law.
• Corporate form: The preferred vehicle is a Lithuanian UAB (private limited liability company). Branches of EU entities may also apply but face additional requirements.
• Local substance: A registered office in Lithuania, at least one resident director or senior manager, and a locally accessible compliance function.
• Senior manager residency and restrictions: Directors must meet fit-and-proper requirements, including clean criminal records, relevant professional experience and, in some cases, single-directorship rules introduced post-2022.
• Restricted or complex models: Business models involving privacy coins, unregulated token issuance, anonymity-enhancing features or mixing services will trigger enhanced scrutiny or outright refusal.

Red-flag list for banks and regulator: Previous regulatory enforcement actions against directors, opaque beneficial ownership structures, high-risk token exposure without credible risk-management policies, and an inability to demonstrate the source of initial capital are among the factors that reliably derail applications.

Compliance Requirements AML/KYC, Internal Controls, Beneficial Ownership and Fit-and-Proper Checks

Anti-Money Laundering and CFT Obligations

Every registered VASP must implement a comprehensive AML/CFT programme that meets the standards of Lithuanian law and applicable EU directives. Core elements include a documented risk assessment of the firm’s customer base, products and geographies; policies and procedures for identifying, managing and mitigating money-laundering and terrorist-financing risks; mechanisms for filing suspicious activity reports with the FCIS; and ongoing sanctions screening against EU and national lists. The FCIS has made clear through its published inspections that it expects real, operational compliance not paper-only programmes.

KYC, Onboarding and Ongoing Transaction Monitoring

Customer due diligence must be performed before establishing a business relationship or executing an occasional transaction above applicable thresholds. For higher-risk customers including politically exposed persons, customers from high-risk jurisdictions, and those transacting in high-risk token types enhanced due diligence applies. Transaction monitoring must be automated and calibrated to the firm’s risk profile, with documented escalation and investigation procedures for flagged transactions.

Internal Controls, Compliance Officer Role and Audit Trail

The Bank of Lithuania expects VASPs to appoint a dedicated compliance officer (or outsource to a suitably qualified individual with a formal mandate) who reports directly to the board. The compliance officer must have authority to halt suspicious transactions, access to all relevant records, and a documented reporting line. All decisions, escalations and report filings must be retained in an auditable trail for at least eight years.

Beneficial Ownership, Registries and Public Filings

Shareholders and ultimate beneficial owners must be declared to the Lithuanian Register of Legal Entities, and material changes must be notified promptly. The Bank of Lithuania cross-checks declared ownership against independent databases, and any discrepancy or opacity in the ownership chain is treated as a significant compliance risk.

Senior Manager Fit-and-Proper Checks

Lithuania crypto licence requirements now include rigorous fit-and-proper assessments for all directors, compliance officers and persons with significant management responsibility. Applicants must provide criminal-record certificates from all countries of residence in the preceding ten years, evidence of relevant professional experience, and declarations of any past regulatory sanctions or insolvency proceedings. Post-2022 changes introduced requirements around director exclusivity and minimum qualifications, reflecting the regulator’s determination to ensure genuine governance.

Capital and Financial Requirements

Capital expectations for Lithuanian VASPs have evolved significantly. The following table outlines typical current expectations, though applicants should confirm precise amounts with the Bank of Lithuania as part of their pre-application engagement:

Industry observers expect capital requirements to increase further as Lithuania aligns with MiCA’s prudential standards under Regulation (EU) 2023/1114, which specify own-funds requirements calibrated to the type and scale of crypto-asset services provided. Firms planning long-term operations should budget for a potential capital uplift at the CASP authorisation stage.

Step-by-Step Application to the Bank of Lithuania

The following process reflects current Bank of Lithuania VASP registration practice. Each step should be treated as sequential skipping or under-preparing any stage materially increases the risk of delays or rejection.

1. Pre-application checks: Map your business model against the permitted VASP activities under Lithuanian law. Classify all tokens and assets your platform will handle. Identify any activities that may require additional licences (e.g., electronic money institution, payment institution). Engage with the Bank of Lithuania’s published guidance and FAQ resources to confirm the correct application pathway.
2. Corporate setup: Incorporate a Lithuanian UAB (or register a branch if using an existing EU entity). Prepare share-capital proof, register the office address, and appoint at least one resident director meeting fit-and-proper criteria. Ensure the corporate structure and shareholding are transparent and documented to the ultimate beneficial owner level.
3. Compliance package preparation: Draft or commission a full AML/CFT policy tailored to your business model. Prepare KYC scripts, customer risk-scoring matrices, and a transaction monitoring plan with documented escalation procedures. Compile the compliance officer’s CV, qualifications and evidence of relevant experience. Create an internal-controls manual covering data retention, audit trail management and sanctions-screening protocols.
4. Beneficial ownership and source-of-funds documentation: Assemble notarised identification documents, criminal-record certificates and source-of-funds declarations for every shareholder and UBO. Prepare source-of-funds evidence for material business partners and any significant initial customer relationships.
5. Financial projections and capital adequacy evidence: Produce a three-year financial model including revenue projections, operating costs, capital reserves and stress scenarios. Provide bank statements or auditor confirmations evidencing the required minimum capital.
6. Submission to the Bank of Lithuania: Compile all documentation into the required format, complete the official application declarations, and submit to the Bank of Lithuania. Use the regulator’s electronic channels where available and retain proof of submission.
7. Post-submission interactions: Expect the regulator to issue requests for information (RFIs), and in many cases to conduct remote or on-site interviews with directors and the compliance officer. Respond promptly and comprehensively delays in responding to RFIs are the single most common cause of extended timelines.
8. Triggers for extra review: Applications involving complex multi-jurisdictional structures, high-risk token types, directors with limited EU track records, or business models that blend VASP activities with payment services routinely trigger enhanced review cycles. Plan for these contingencies in your project timeline.

Bank-ready due diligence pack checklist items: The downloadable checklist available on this page consolidates the documents listed above into a single, bank-ready format. It covers corporate formation evidence, AML policies, UBO declarations, source-of-funds proofs, compliance officer credentials, financial projections and governance statements everything needed for both regulator submission and subsequent bank account applications.

Comparison Table National VASP Registration vs MiCA CASP Authorisation

Choosing between Lithuania’s national VASP registration and pursuing full MiCA CASP authorisation is a strategic decision that depends on your target markets, timeline and capital resources. The table below provides a structured comparison:

For firms whose strategy centres on serving Lithuanian or single-market customers in the near term, national VASP registration in Lithuania provides the fastest route to revenue. For those with pan-European ambitions, securing VASP registration as a transitional measure while preparing a CASP application is the most common approach recommended by compliance advisers.

Transition to MiCA/CASP Timeline, Options and Risks

The Markets in Crypto-Assets Regulation (MiCA) establishes a harmonised EU-wide framework for crypto-asset service providers, replacing the patchwork of national regimes with a single CASP authorisation that enables passporting across all EU and EEA Member States. For firms already holding a national VASP registration, Article 143 of MiCA provides transitional arrangements.

Under the transitional provisions, entities that were providing crypto-asset services under applicable national law before 30 December 2024 may continue to operate subject to conditions set out in national implementing legislation and ESMA’s transitional-measures guidance. Transitional windows extend into 2026 for certain measures, though the precise end-dates depend on national implementation. The European Commission has published implementation communications confirming Member State flexibility on specific deadlines.

Practical options for firms:

• Near-term operating route: Use national VASP registration to commence operations while assembling the compliance infrastructure, capital and documentation required for a full CASP application.
• Direct CASP application: Where cross-border passporting is core to the business strategy, apply directly for CASP authorisation through the Bank of Lithuania as the home-state NCA.

Key risks: Loss of transitional eligibility if required conditions are not met (including timely CASP application filing), materially higher compliance and reporting burdens at CASP stage, and increased supervisory intensity from both the Bank of Lithuania and ESMA. Firms are strongly advised to confirm live transitional deadlines with the Bank of Lithuania and to build CASP preparation into their compliance roadmap from day one.

Banking and Operations Practical Tips to Secure Accounts

Securing a bank account is frequently the most challenging operational step for a newly registered VASP. Lithuanian banks influenced by both the Bank of Lithuania’s supervisory stance and high-profile warnings issued to crypto-asset service providers apply enhanced due diligence to VASP onboarding requests.

Bank-ready documentation checklist:

• AML programme and KYC procedures: Full policy documents, customer risk-scoring matrix and transaction monitoring system overview with sample screenshots.
• Directors’ and UBOs’ source-of-funds: Notarised declarations, supporting bank statements, tax returns and audit reports tracing the origin of all initial capital.
• Business model diagram: A clear, visual representation of fund flows, token types handled, customer segments and jurisdictional exposure.
• Governance and incident response: Written governance statements, whistle-to-compliance escalation procedures and incident response plans.

Practical tips: Pre-engage with bank relationship managers before completing your VASP registration many banks will provide preliminary feedback on documentation requirements. Use a local law firm or accountant as an introducer to improve credibility. Consolidate all AML evidence into a single, indexed file that the bank’s compliance team can review efficiently. Anticipate questions on cross-border fund flows and token economics, and prepare written answers in advance.

Costs and Typical Timeline Itemised Fees and Local Service Costs

The VASP registration cost in Lithuania varies significantly depending on business model complexity, the quality of initial documentation and whether the applicant uses external legal and compliance advisers. The following tables provide indicative ranges:

Typical timeline:

The most significant variable is post-submission interaction with the regulator. Firms that respond to RFIs within days rather than weeks consistently achieve faster outcomes.

Case Studies and Trust Signals

Global Law Experts has supported crypto businesses through every stage of the Lithuanian VASP registration process. In one representative engagement, a European crypto exchange was assisted in preparing a bank-ready intake pack, completing fit-and-proper documentation for three directors, and securing both UAB incorporation and national VASP registration within five months. In another, a custodial wallet provider received guidance on restructuring its AML programme following FCIS inspection feedback, resulting in maintained registration status and successful bank onboarding. Drawing on a 17-year international network and partnerships with specialist compliance firms across the EU, Global Law Experts provides end-to-end support from initial feasibility assessment through to CASP transition planning.

Start Your VASP Registration in Lithuania

The downloadable Bank-ready VASP Checklist (PDF) available on this page consolidates every document, policy template and evidence requirement discussed in this guide into a single, indexed preparation tool. Complete the checklist and submit the short intake form to begin a compliance review with a specialist adviser. Whether your priority is securing a national VASP registration in Lithuania as a near-term operating route or building directly toward full MiCA CASP authorisation, structured preparation is the single greatest determinant of a successful outcome.

Sources

• Bank of Lithuania “Lithuanian authorities: requirements for crypto-asset companies must be tightened immediately”
• Regulation (EU) 2023/1114 Markets in Crypto-Assets (MiCA), EUR-Lex
• ESMA MiCA transitional measures guidance and statements
• FCIS (Finansinių nusikaltimų tyrimo tarnyba) Sector analysis: threats highlighted, inspections under way
• European Commission Digital Finance communications (MiCA implementation)
• Bank of Lithuania Frequently Asked Questions
• Bank of Lithuania Warning regarding Binance UAB and other crypto-asset service providers