Lithuania vs Poland: Decision-grade VASP (CASP) Registration Comparison

Choosing between Lithuania and Poland for VASP registration is no longer a straightforward exercise in comparing fee schedules. The EU’s Markets in Crypto-Assets Regulation (MiCA) has fundamentally reshaped the competitive landscape for both jurisdictions, and founders, general counsel, and compliance leads now face a decision that turns on capital adequacy, supervisory certainty, banking access, and passporting strategy rather than headline registration costs alone. This page delivers a single, data-led decision framework covering capital, substance, timelines, fees, banking risk, and the 2025–2026 MiCA/CASP transition so you can make a jurisdiction choice grounded in current regulatory reality.

Before diving into the detail, here is a quick orientation for three common founder archetypes:

• Speed-to-market with lower upfront cash, serving Polish clients: Obtain a CASP authorisation in a Member State with an operational regime, then passport into Poland.
• Full EU passport with strong supervisory certainty: Apply directly in Lithuania, where the Bank of Lithuania is actively processing CASP authorisations.
• Banking-first priority: Lithuania’s mature fintech ecosystem and regulator-bank engagement give applicants a clearer path to account opening.

Executive Summary and Recommendation Matrix

The core trade-off is straightforward. Lithuania offers an operational MiCA CASP authorisation pathway administered by the Bank of Lithuania, with established fit-and-proper procedures, active transitional enforcement, and a sizeable fintech banking ecosystem. Poland maintains its legacy AML-focused virtual-currency register (RDWW), but its national MiCA implementing act has not yet produced a fully operational KNF CASP authorisation procedure leaving founders who want to serve the Polish market reliant on passporting from another EU Member State.

Decisive guidance:

• If you need regulatory certainty and an EU-wide passport now: Lithuania is the stronger base. The Bank of Lithuania is converting VASP registrants to CASP authorisations and actively accepts new applications.
• If your primary market is Poland and capital is constrained: Obtain a CASP in a jurisdiction with an operational regime (Lithuania, France, or another Member State) and passport services into Poland this avoids waiting for Poland’s domestic procedure.
• If you are acquiring an existing entity: Lithuanian targets offer regulatory continuity under MiCA; Polish RDWW registrations alone do not confer CASP status and will require a separate authorisation.

At-a-Glance Side-by-Side Comparison: VASP Registration Lithuania Poland

Key take-away: On paper, MiCA’s capital thresholds and governance requirements apply uniformly across the EU. In practice, Lithuania’s operational head-start gives applicants a concrete pathway to authorisation and passporting, while Poland’s regulatory gap means founders targeting Polish clients still need a “home” NCA elsewhere. The deciding factors are therefore speed, banking access, and appetite for the substance requirements Lithuania imposes.

Process / How-To: Step-by-Step Market-Entry Routes

Route A New CASP Registration in Lithuania

1. Corporate setup (weeks 1–4): Incorporate a UAB in Lithuania. Appoint a local board with at least one Lithuanian-resident director and a designated compliance officer. For practical guidance on company formation and substance options in Lithuania and Poland, ensure you engage local corporate counsel early.
2. Governance framework (weeks 2–6): Draft organisational chart, internal governance manual, conflicts-of-interest policy, and remuneration policy. These documents must demonstrate a “four-eyes” management principle.
3. AML/CFT policies (weeks 3–8): Build a full AML/CFT compliance programme: customer due diligence procedures, transaction monitoring rules, suspicious-activity reporting templates, and sanctions screening protocols. FNTT cooperation expectations must be embedded from day one.
4. IT and cybersecurity framework (weeks 4–10): Prepare IT security policies, business continuity and disaster-recovery plans, incident-response procedures, and any SOC audit reports. MiCA’s operational resilience requirements (drawing on DORA principles) apply.
5. Capital proof (weeks 4–8): Demonstrate that the entity meets the MiCA own-funds requirement applicable to its service class either through paid-up share capital, retained reserves, or a combination. Prepare audited opening-balance documentation.
6. Bank account opening (weeks 6–16): Approach Lithuanian banks with a prepared banking pack (business plan, source-of-funds documentation, AML policies, shareholder structure). Expect 6–20 weeks; earlier engagement shortens the critical path.
7. Application submission to Bank of Lithuania (week 10–14): Submit the CASP authorisation application to the Bank of Lithuania, including fit-and-proper questionnaires for all qualifying shareholders, directors, and key function holders.
8. Regulator Q&A and supplementary requests (weeks 14–30): The Bank of Lithuania will issue rounds of questions. Typical areas: governance gaps, AML staff qualifications, IT penetration-testing evidence, and capital adequacy calculations. Incomplete responses are the most common cause of delay.
9. Pre-authorisation conditions (weeks 28–40): The regulator may attach conditions to the draft decision for example, appointing additional compliance staff or depositing a portion of own-funds in a designated account. Fulfil all conditions promptly.
10. Final authorisation & ESMA registration + passport notifications (weeks 36–52): Once the Bank of Lithuania grants the CASP authorisation, the entity is registered in the ESMA CASP register. To serve clients in Poland or other Member States, file passporting notifications through the NCA typically a 30-day process.

Common failure points: Incomplete AML documentation; insufficient Lithuanian-resident management; inability to open a bank account before the regulator’s pre-authorisation stage; and underestimating the capital higher-of test.

Route B Acquire an Existing VASP or Register Elsewhere and Passport into Poland

1. Target screening (weeks 1–4): Identify licensed VASPs (or entities with transitional CASP status) in Lithuania or another Member State. Screen for service scope, client base, and regulatory history.
2. Legal due diligence (weeks 3–8): Review the target’s AML files, historic suspicious-transaction reports (STRs), client onboarding records, and regulatory correspondence. KYC backlogs are a material risk.
3. Regulatory liability assessment (weeks 4–10): Assess whether the target has any outstanding regulatory actions, sanctions exposure, or FNTT enforcement notices. Under Bank of Lithuania guidance, qualifying holding acquisitions require prior regulatory consent.
4. Negotiate and sign SPA (weeks 6–12): Structure the acquisition to include AML-remediation warranties, escrow for regulatory liabilities, and carve-outs for client-asset protection obligations.
5. Qualifying holding notification (weeks 8–16): Notify the competent NCA of the proposed acquisition of a qualifying holding. The regulator has a statutory assessment period (typically 60 working days under MiCA).
6. Novation of contracts (weeks 12–20): Transfer client agreements, data-processing arrangements, and custody contracts. Ensure client communication meets MiCA and GDPR requirements.
7. Transfer of client assets (weeks 14–22): Implement a custody-transfer plan with independent verification. Safeguarding obligations under MiCA apply during and after the transfer.
8. AML remediation (weeks 10–24): Close any KYC backlog, re-screen all clients against current sanctions lists, and update transaction-monitoring parameters. This step frequently takes longer than expected.
9. Regulator consent and conditions (weeks 16–28): The NCA issues its decision on the qualifying holding acquisition and may impose conditions (e.g., capital top-up, additional compliance hires).
10. Passport into Poland (weeks 28–32): Once the entity holds a valid CASP authorisation, file passporting notifications to serve Polish clients no separate KNF CASP application is required.

Readiness Checklist 10 Quick Checks

1. Have you selected and justified your MiCA service classes?
2. Can you demonstrate own-funds above the higher-of the Annex IV minimum and 25 % of fixed overheads?
3. Do you have a Lithuanian-resident (or EU-resident, depending on route) board member and compliance officer?
4. Is your AML/CFT policy framework documented and operationally tested?
5. Do you hold a current IT security audit or SOC 2 Type II report?
6. Have you engaged a Lithuanian (or target jurisdiction) bank for account opening?
7. Are fit-and-proper questionnaires complete for all shareholders and directors?
8. Have you mapped your custody/safeguarding model to MiCA requirements?
9. Can you evidence source of funds for all initial capital contributions?
10. Do you have a post-authorisation compliance budget covering at least 12 months of operations?

Key Requirements and Eligibility

MiCA establishes a single EU rulebook for crypto-asset service providers. Every applicant whether in Lithuania, Poland, or any other Member State must meet the same core tests before an NCA will grant a CASP authorisation.

MiCA Core Tests

• Authorised services list: Applicants must specify which of MiCA’s ten service categories they intend to perform (e.g., custody and administration, operation of a trading platform, exchange of crypto-assets for funds). The service scope determines the applicable own-funds class.
• Own-funds calculation: MiCA Annex IV sets minimum permanent capital by service class: Class 1 (€50,000), Class 2 (€125,000), Class 3 (€150,000). The “higher-of” test means the entity must hold the greater of the statutory minimum or 25 % of its fixed overheads from the preceding year.
• Governance and fit-and-proper: Directors, qualifying shareholders, and key function holders must pass fit-and-proper assessments covering honesty, integrity, competence, and financial soundness.
• Safeguarding / custody: CASPs holding client crypto-assets must segregate them from proprietary holdings and maintain a clear custody framework with independent verification.
• IT resilience and reporting: Operational resilience obligations (aligned with DORA) require documented ICT risk management, incident reporting, and third-party oversight. MiCA regulatory technical standards (RTS) detail ongoing reporting obligations.

Lithuania-Specific Eligibility

The Bank of Lithuania applies the MiCA framework with particular emphasis on local AML substance. Applicants must demonstrate a functioning AML reporting line to the FNTT, including designated AML officers physically present in Lithuania. The Bank of Lithuania has also issued staff guidance on the qualifications expected of compliance and risk-management personnel founders should verify that their proposed team meets these expectations before submitting the application. For a broader overview of VASP licensing obligations, see the VASP license who needs it and requirements guide.

Poland-Specific Eligibility

Poland’s current position is materially different. The RDWW register maintained by the Director of the Tax Administration Chamber in Katowice was established for AML purposes and does not confer MiCA CASP status. KNF has signalled preparedness to act as the NCA for MiCA, but the absence of a finalised national implementing act means it cannot yet grant CASP authorisations domestically. Firms wishing to serve Polish clients have two practical options: (1) obtain a CASP authorisation from another Member State’s NCA and passport into Poland, or (2) wait for Poland’s domestic procedure an approach that carries significant timeline uncertainty. Existing RDWW registrations continue only for AML-compliance purposes and are subject to transitional limitations.

MiCA / CASP Transition Impact

Understanding the transition timeline is essential to any VASP registration Lithuania Poland strategy. MiCA became generally applicable on 30 December 2024, but Member States were permitted to apply transitional provisions allowing existing VASPs to continue operating for a defined period up to 18 months in some cases.

Two-Tier Timeline

Lithuania adopted an aggressive transition posture. The FNTT published formal notices that the transitional period for VASPs would end, with licensed CASP status becoming mandatory. The Bank of Lithuania has been actively converting VASP registrants and processing new CASP applications throughout 2025 and into 2026. ESMA has issued statements on the end of transitional periods, setting supervisory expectations for how NCAs should manage transfers, client protections, and the wind-down of unlicensed entities.

Poland’s trajectory has been less linear. While the RDWW entries continued under transitional rules, the delay in Poland’s national MiCA implementing act means KNF has not yet established a domestic authorisation queue. The EBA has advised national authorities on actions to take as transitional periods end, including guidance on PSD2/MiCA interplay and streamlined authorisation for entities that already hold payment-institution licences.

Practical Market Impacts (Mid-2025 to Mid-2026)

• Consolidation pressure: Smaller VASPs that cannot meet MiCA capital and governance requirements are exiting or being acquired. This creates M&A windows for well-capitalised entrants.
• Banking de-risking: Banks across the EU are terminating relationships with unlicensed or transitional-only entities. Firms with full CASP authorisation report materially smoother banking onboarding.
• Valuation effects: Compliant CASP-authorised entities command higher valuations in M&A transactions due to regulatory scarcity and passporting rights.
• AML remediation costs: Legacy VASPs converting to CASP status are incurring significant one-off costs for KYC backlog clearance, sanctions re-screening, and updated transaction-monitoring systems.

Action Checklist for Migrating VASPs

• Client communication: Notify all clients of the transition from VASP to CASP status, including any changes to terms of service or custody arrangements.
• Custody plan: Map all client crypto-asset holdings, verify segregation, and document the safeguarding framework that will apply post-authorisation.
• Fund transfer timelines: Coordinate with banking partners to ensure fiat balances are transferred without interruption during the licensing transition.
• Regulator notifications: File all required notices with the Bank of Lithuania (or relevant NCA) and, where applicable, ESMA. For detailed transition steps, consult the MiCA / CASP transition checklist.

Practical Timelines and Realistic Costs

Timeline Bands

Cost Bands (Illustrative Scope-Dependent)

For a minimum viable exchange or wallet provider operating under Class 2 or Class 3 scope:

• One-off regulatory and setup costs: €150,000–€500,000 (legal advisory, compliance build-out, IT security audit, regulator filing fees, banking pack preparation).
• Ongoing annual costs: €80,000–€300,000 (compliance staffing, external audit, regulatory reporting, IT maintenance, office/substance costs).
• Capital buffers: Per MiCA Annex IV €50,000 to €150,000 minimum, but potentially higher under the 25 % fixed-overheads test.

Note: These are illustrative ranges for planning purposes. Final figures depend on the scope of authorised services, client volumes, and the jurisdiction of authorisation.

Banking Onboarding

Realistic banking onboarding timelines run from 6 to 20 weeks with a prepared banking pack. Delays typically arise from incomplete source-of-funds documentation, unresolved sanctions-screening flags, or pending regulatory queries. The Bank of Lithuania’s engagement with domestic banks gives Lithuanian applicants a structural advantage, though approval is never guaranteed and applicants should approach multiple institutions in parallel.

Case Examples (Anonymised)

Case A Lithuanian CASP Conversion

A fintech payments firm that had held a Lithuanian VASP registration since 2022 applied for full CASP authorisation in early 2025. The conversion took approximately eight months. The principal bottleneck was remediation of its AML client file approximately 15 % of legacy customer records required enhanced due diligence. After investing roughly €180,000 in compliance upgrades and hiring two additional AML analysts in Vilnius, the firm received its CASP authorisation and immediately filed passport notifications for three additional EU markets. Lesson: document completeness and AML staff capacity determined speed more than any other factor.

Case B Passport into Poland

A Warsaw-based founder with a primarily Polish client base obtained a CASP authorisation in Cyprus (chosen for its operational MiCA regime and English-language regulatory process). The authorisation took seven months; passporting into Poland added four weeks. Banking friction was notably lower: Polish banks accepted the EU CASP credential as evidence of regulatory standing, and the firm opened a zloty-denominated operating account within six weeks of passport notification. Lesson: passporting is currently the most efficient route to serve Polish clients.

Case C Acquisition and Remediation

A mid-sized EU CASP acquired a small Polish exchange holding an RDWW registration. The qualifying holding notification to the Bank of Lithuania (where the acquirer was authorised) took three months to process. Post-acquisition, the acquirer spent four months remediating the target’s KYC backlog and upgrading transaction-monitoring systems. Total additional remediation cost: approximately €120,000. The RDWW registration itself did not confer CASP status; the entity’s Polish operations were folded under the acquirer’s passported CASP authorisation.

Documentation Checklist

Below is a consolidated checklist of documents typically required for a CASP authorisation application. A downloadable PDF version is available as a gated resource for detailed planning.

Core Documentation (Both Jurisdictions)

• Company incorporation documents: Articles of association, shareholder register, certificate of incorporation.
• Governance framework: Organisational chart, internal governance manual, conflicts-of-interest policy, remuneration policy.
• Board and senior management CVs: Detailed CVs for all directors, qualifying shareholders (above 10 % threshold), and key function holders.
• AML/CFT policies: Customer due diligence procedures, transaction monitoring rules, SAR/STR templates, sanctions screening protocols, risk assessment methodology.
• Incident response and business continuity plans: ICT incident-response procedures, disaster recovery plans, and business continuity testing evidence.
• IT security documentation: SOC 2 Type II reports (or equivalent), penetration-testing results, IT risk assessment.
• Capital proof: Audited financials or bank statements evidencing own-funds above the applicable MiCA threshold.
• Custody / safeguarding arrangements: Custody agreements, cold/hot wallet security architecture, client-asset segregation policies.
• Whitepaper (if issuing tokens): MiCA-compliant crypto-asset whitepaper.
• Marketing materials review: Copies of proposed marketing materials for regulatory review against MiCA fair-disclosure rules.
• KYC/AML tooling details: Vendor contracts, system architecture, and calibration documentation for automated screening and monitoring tools.

Lithuania-Specific Items

• Local compliance officer appointment: Evidence of a compliance officer resident in Lithuania with appropriate qualifications.
• FNTT liaison documentation: Designated reporting officer details, STR reporting channel setup, and evidence of FNTT registration.

Poland-Specific Items

• RDWW registration extract: Current extract from the virtual-currency activities register (if applicable).
• Tax authority confirmations: Confirmation of tax residency, VAT registration, and any clearances from the Director of the Tax Administration Chamber.

Next Steps

The choice between Lithuania and Poland for VASP registration is ultimately a function of your business model, target markets, capital position, and risk tolerance. Lithuania offers a clear, operational CASP authorisation pathway with an established regulator and fintech banking ecosystem. Poland remains a large and attractive end-market, but the practical entry route currently runs through passporting from another Member State rather than a domestic KNF procedure.

Founders and compliance leads planning their 2026 market entry should commission a jurisdiction-selection memo early ideally before committing to corporate formation to model the capital, substance, timeline, and banking implications specific to their service scope. If you need a readiness review or a detailed jurisdiction-selection analysis, request a GLE advisory engagement to ensure your application strategy is built on current regulatory data.

Sources

• Bank of Lithuania Authorisation of Crypto-Asset Service Providers
• FNTT (Lithuania) Notice on VASP Transitional Period
• EUR-Lex Markets in Crypto-Assets Regulation (MiCA), Regulation (EU) 2023/1114
• ESMA Markets in Crypto-Assets Regulation (MiCA): Information and Transitional Statements
• Polish Government (gov.pl) Register of Virtual Currency Activities (RDWW)
• KNF Polish Financial Supervision Authority: MiCA Preparedness and Position
• EBA Guidance on Actions at the End of MiCA Transitional Periods