EMI Licence EU: Lithuania vs Ireland vs Malta Costs, Timelines & Checklist

Should Your Crypto Business Get an EU EMI Licence?

Who this page is for

This page is written for founders, crypto exchanges, virtual-asset service providers (VASPs) and fintech compliance leads evaluating whether an EMI licence EU authorisation is the correct regulatory route for their product and, if so, which home jurisdiction offers the best fit. If your business needs to hold customer fiat funds, issue payment cards or IBANs, or operate custodial e-wallets across the European Economic Area, the analysis below will help you map the regulatory landscape, compare Lithuania, Ireland and Malta, and understand how the Markets in Crypto-Assets Regulation (MiCA) interacts with existing e-money frameworks.

Quick answer

An EU electronic-money institution (EMI) licence remains the primary authorisation for issuing e-money, safeguarding client fiat and distributing payment instruments including prepaid cards and wallets throughout the EEA under a single passporting framework. For crypto firms combining fiat rails with digital-asset services, the EMI licence is frequently the most direct path to a scalable, compliant operating model.

Quick Recommendation

If you need to custody client fiat, issue cards or IBANs, or offer reconciled e-wallets across the EU, an EMI licence is often the fastest, most reliable route to full EU passporting. A 30-minute eligibility review can confirm whether EMI, PI or MiCA CASP is the correct authorisation for your product mix and which jurisdiction best suits your growth profile.

EMI, PI or MiCA CASP Which Regime Applies?

Core activities that require an EMI

Under Directive 2009/110/EC (EMD2), any firm that issues electronic money a digitally stored monetary value representing a claim on the issuer, accepted by third parties as a means of payment must hold an EMI licence. In practice, the trigger activities include:

• Issuing e-money: creating stored-value instruments denominated in fiat currency, whether on a card, app or account.
• Holding client fiat funds: receiving and safeguarding customer money for the purpose of e-money issuance or payment execution.
• Issuing payment instruments and cards: distributing branded prepaid cards, virtual IBANs, or digital wallets where the funds represent electronic money.

A Payment Institution (PI) licence covers payment execution (transfers, acquiring, money remittance) but does not authorise the issuance of e-money. If your product involves creating stored-value balances rather than simply moving funds between third parties, the EMI route applies.

Where a MiCA CASP authorisation overlaps or substitutes

Regulation (EU) 2023/1114 (MiCA) governs crypto-asset services custody and administration of crypto-assets, operation of trading platforms, exchange of crypto-assets for funds, and portfolio management. If a firm only provides these services and does not issue e-money or hold fiat client funds for payment purposes, a CASP authorisation under MiCA may suffice. However, many crypto businesses combine fiat on/off-ramps, card issuance and custodial wallets with exchange or custody services, which means both regimes can apply simultaneously. Red flags that signal dual-authorisation include: holding client fiat in stored-value accounts, issuing fiat-denominated cards, or operating a wallet that allows customers to spend e-money at point-of-sale.

Practical triage checklist

1. Are you issuing stored-value monetary instruments (cards, wallets, IBANs)? → EMI licence likely required.
2. Are you holding client fiat for payment or e-money purposes? → EMI licence likely required.
3. Are you only providing custody, exchange or trading of crypto-assets with no fiat issuance or stored-value function? → MiCA CASP may suffice; but verify with the NCA.

Where the answer to questions 1 or 2 is yes, an EMI licence crypto businesses can passport across the EEA is the appropriate starting point. Firms planning to offer both fiat and crypto-asset services should map both EMI and CASP obligations early to avoid duplicated effort and regulatory delays. For a deeper comparison, see EMI vs PI vs MiCA: which licence do I need?

How MiCA Affects EMI-Licensed Crypto Businesses

High-level interaction

MiCA does not replace the EMD2 framework. The EMI licence remains the authorisation route for issuing e-money and providing payment services, while MiCA applies to the provision of crypto-asset services and the issuance of crypto-assets (including asset-referenced and e-money tokens). A firm that issues fiat-backed e-money and simultaneously operates a crypto exchange will typically need both an EMI authorisation and a MiCA CASP registration unless it qualifies for one of the limited derogations under MiCA Article 60, which permits certain financial entities to provide specified crypto-asset services without a separate CASP licence.

Transitional rules and supervisory expectations

MiCA’s transitional provisions allowed Member States to grant grandfathering periods for existing crypto-service providers, but new entrants must engage with their NCA to confirm the scope of authorisation required. Regulators across Lithuania, Ireland and Malta increasingly expect applicants to present a combined regulatory map covering both EMI and MiCA obligations at the pre-application stage. Early, coordinated engagement with the NCA is strongly recommended to avoid rework once an application is submitted.

Why Compare Lithuania, Ireland and Malta?

Quick jurisdictional trade-offs

These three Member States represent distinct strategic profiles for EMI applicants. Lithuania has built a large fintech cluster and historically offered faster onboarding, though supervisory scrutiny has intensified. Ireland provides a conservative, high-credibility regulatory environment favoured by firms managing large fiat volumes or seeking robust banking relationships. Malta combines an established payments-supervision track record with early MiCA engagement and recently tightened safeguarding standards. Each jurisdiction offers full EEA passporting, so the decision often comes down to speed, supervisory style and operational ecosystem fit.

Lithuania vs Ireland vs Malta Costs, Timelines, AML/Safeguarding, Passporting & MiCA Interaction

Timelines are indicative market estimates and depend on file quality and NCA pipeline. Contact a specialist for a tailored assessment.

Which profile fits which jurisdiction? Lithuania remains attractive for fast-scaling fintechs and crypto businesses that can present a mature AML framework from day one; however, firms should factor in the intensified post-authorisation supervision that accompanies the jurisdiction’s large EMI/PI cluster. Ireland suits regulated issuers managing significant fiat volumes, where a conservative supervisory reputation strengthens banking relationships and counterparty confidence. Malta appeals to firms that value an established, dialogue-oriented regulator and are prepared to meet the MFSA’s detailed safeguarding and operational-resilience requirements particularly relevant following the May 2026 circular on investment of client funds.

How to Get an EU EMI Licence Step by Step

1. Early triage and legal product map. Determine whether your activities require an EMI, PI or MiCA CASP authorisation. Deliverable: a product matrix mapping each service to its regulatory regime. Where both EMI and CASP obligations apply, design a combined filing strategy.
2. Pre-application engagement with the NCA. Recommended for all jurisdictions and especially valuable in Ireland and Lithuania. The Central Bank of Ireland publishes service-standards reports detailing its authorisation pipeline; use these to calibrate expectations. Pre-application meetings allow the regulator to flag concerns before a formal submission, reducing the risk of information requests that stall timelines.
3. Corporate and governance set-up. Establish the legal entity in the chosen jurisdiction. Confirm local-presence requirements (registered office, local directors if applicable), adopt board charters, appoint an AML officer, and establish the compliance and risk-management functions proportionate to the planned business model.
4. Capitalisation. Deposit or evidence the minimum initial capital of EUR 350,000 required under EMD2. Prepare bank statements or escrow confirmations, and model ongoing own-funds forecasts that demonstrate capital adequacy under stress scenarios.
5. Safeguarding arrangements. Secure safeguarding banking relationships and document the chosen model either segregated client-money accounts or, where the jurisdiction permits, investment of safeguarded funds in secure, liquid, low-risk assets. For Malta, the MFSA circular of May 2026 sets out the current expectations in detail. Prepare reconciliation procedures and audit-trail mechanisms.
6. AML/CFT framework. Draft a regulator-grade money-laundering and terrorist-financing risk assessment. Design transaction-monitoring rules particularly for crypto on-ramps and off-ramps and document KYC procedures, sanctions-screening protocols and suspicious-activity reporting channels aligned to the NCA’s templates.
7. Technical and operational evidence. Produce core-banking and integration architecture diagrams, card-processor agreements, custody arrangements and SOC-type assurance reports for any third-party service providers. Regulators increasingly expect evidence of operational resilience and ICT security controls.
8. Business plan and financial projections. Prepare a 3–5 year P&L, break-even analysis and capital-adequacy projections. Include stress and scenario tests that demonstrate the firm can maintain own-funds requirements under adverse conditions.
9. Submission and regulator queries. File the formal application with all supporting documents. Expect multiple rounds of questions from the NCA; allocate dedicated resource to respond within 30 days to avoid administrative delays that extend timelines significantly.
10. Go-live and post-authorisation readiness. Before launch, finalise the regulatory reporting calendar, engage external auditors, implement compliance-monitoring programmes and prepare a remediation schedule. Post-authorisation, ongoing supervisory engagement including annual reporting, board attestations and periodic on-site reviews is the norm across all three jurisdictions.

Application document checklist

The following documents are typically required for an EMI licence application across Lithuania, Ireland and Malta. Exact requirements vary by NCA:

• Company formation documents: certificate of incorporation, articles of association, shareholder register.
• Shareholder and beneficial-owner details: ownership charts, identification documents, source-of-funds declarations.
• Proof of initial capital: bank statements, escrow confirmations, auditor letters.
• Audited or pro-forma financial accounts: opening balance sheet and projected financials.
• Director CVs and fit-and-proper documentation: professional biographies, criminal-record checks, regulatory references.
• Anti-money laundering policies: risk assessment, KYC/CDD procedures, transaction-monitoring design, SAR/STR templates.
• Safeguarding policy and reconciliation procedures: segregation model, bank letters, reconciliation frequency and methodology.
• IT security report: penetration-testing results, business-continuity plans, incident-response protocols.
• Contracts with third-party providers: card-scheme agreements, payment-processor contracts, outsourcing arrangements.
• Bank letters for safeguarding accounts: confirmation from the safeguarding bank of account terms and segregation.

For a downloadable version of this checklist with editable templates, see the EMI application checklist & template pack.

What Regulators Will Check (Must-Have List)

Regardless of jurisdiction, regulators evaluate EMI applications against a consistent set of core EMI licence requirements:

• Minimum capital and own funds: The EMD2 baseline requires EUR 350,000 in initial capital. In addition, applicants must demonstrate the ability to maintain ongoing own-funds calculations using one of the methods prescribed by the Directive proportionate to the volume of e-money in circulation.
• Governance and fit-and-proper assessment: Directors, qualifying shareholders and key function holders must pass fit-and-proper screening. Regulators expect local board presence (the degree varies by jurisdiction), clear board-oversight structures, a dedicated risk-management function and nominated accountable officers for compliance and AML.
• Safeguarding: Applicants must select and evidence a safeguarding model either segregation in a ring-fenced account at a credit institution, or investment in secure, liquid, low-risk assets. In Malta, the MFSA’s May 2026 circular provides detailed guidance on the investment-based safeguarding option. In Lithuania, the Bank of Lithuania lists acceptable safeguarding methods in its prudential-requirements guidance. Irish legislation under the European Communities (Electronic Money) Regulations transposes the EMD2 safeguarding requirements with Central Bank supervisory overlays.
• AML/CFT controls: A comprehensive, regulator-grade risk assessment covering the firm’s product set, customer base and geographic footprint. Transaction-monitoring systems particularly for crypto on/off-ramps must be evidenced alongside sanctions-screening tools and suspicious-activity reporting channels.
• Operational resilience and ICT security: In line with EU-wide expectations under the Digital Operational Resilience Act (DORA) and NCA-specific guidance, applicants must demonstrate robust ICT risk-management, business-continuity and incident-response capabilities. The MFSA publishes dedicated ICT risk and cybersecurity guidance that applicants in Malta should incorporate into their submissions.

Practical Barriers for Crypto Firms

Banking and safeguarding bottlenecks remain the single most common obstacle for crypto businesses pursuing an EMI licence. Securing a safeguarding account at a credit institution willing to bank a crypto-adjacent EMI can take months, and some applicants find that banking-relationship timelines exceed the regulatory-authorisation timeline itself. Regulators expect evidence of durable, committed banking arrangements not indicative letters of intent.

Custody and reconciliation present additional complexity where the EMI also operates custodial crypto wallets. Reconciliation cadence between fiat e-money balances and crypto-asset positions must be clearly documented, and the accounting treatment for any tokenised-fiat or fiat-backed tokens must satisfy both EMD2 safeguarding rules and, where relevant, MiCA issuer obligations.

Outsourcing and third-party oversight requires robust contractual frameworks and ongoing monitoring. Regulators across all three jurisdictions expect the EMI to retain full accountability for outsourced functions card issuance, payment processing, custody technology with documented oversight plans, SLA reporting and audit rights.

Market Signals (2025–2026)

Industry observers note a clear trend: high-profile crypto firms are increasingly pursuing regulated authorisation whether EMI, PI or CASP to combine fiat payment rails with crypto services under a single, passportable structure. The entry into force of MiCA has accelerated this shift, as firms recognise that operating without clear regulatory footing creates both legal risk and competitive disadvantage. National regulators are coordinating supervision more tightly, sharing intelligence through the EBA and ESMA, and industry participants expect further convergence of supervisory standards across EU Member States through 2026 and beyond.

Sources

• Regulation (EU) 2023/1114 Markets in Crypto-Assets (MiCA), EUR-Lex
• Directive 2009/110/EC Electronic Money Directive (EMD2), EUR-Lex
• EMI Prudential Requirements and Ratios, Bank of Lithuania
• EMI/PI Sector Supervisory Report, Bank of Lithuania
• Bank of Lithuania Sector Income Report, Bank of Lithuania
• Authorisations and Gatekeeping Report 2025, Central Bank of Ireland
• Markets in Crypto-Assets Regulation Guidance, Central Bank of Ireland
• Public Registers, Central Bank of Ireland
• S.I. No. 221/2002 European Communities (Electronic Money) Regulations, Irish Statute Book
• Circular on Safeguarding of Clients’ Funds (May 2026), MFSA
• MFSA Annual Report 2024, MFSA
• Financial Institutions Supervision, MFSA
• Supervisory ICT Risk and Cybersecurity, MFSA
• MiCA Interactive Single Rulebook, ESMA
• Passporting and Supervision of Branches, EBA