Nikolai Timofejev
15 years in FinTech and payments. Maps your business model to the right licence scope and leads the file all the way to the CSSF decision, including banking and payment rails.
Get a crypto license in Luxembourg.
Europe's fund capital licenses crypto under MiCA, with the CSSF as the single authority. For anything touching tokenised funds, custody or institutional money, a Luxembourg CASP stamp carries weight the smaller desks cannot. We build that file end to end.
27 yrs
on the international marketon the market
60+
in-house specialistsspecialists
400+
Crypto licenses obtainedlicenses obtained
Updated
Luxembourg in brief
The EU's fund centre, now licensing crypto.
Luxembourg transposed MiCA through the Law of 6 June 2025, which confirmed the CSSF as the single competent authority for crypto-asset service providers and closed the old VASP registration regime that ran under the amended 2004 AML law. The registration route is gone; CASP authorisation is now the only way to serve clients from here. That matters because of where «here» is: Luxembourg runs the largest investment-fund industry in Europe and the second-largest on earth, with trillions under administration, the private banks that service them, and a AAA sovereign rating that counterparties read before they read anything else.
The CSSF is a careful reviewer, and the value sits in that carefulness - its authorisations are trusted by institutional allocators, depositary banks and other regulators across the bloc. Luxembourg also holds a card the fast desks do not: a run of Blockchain laws, passed between 2019 and 2025, that let securities be issued, registered and settled natively on distributed ledgers. If your roadmap runs through tokenised funds or on-chain securities, this is the jurisdiction the fund world already trusts. We build files for both the CASP and the tokenisation side.
Europe's fund capital licenses crypto under MiCA, with the CSSF as single authority. The Law of 6 June 2025 closed the old VASP register - CASP authorisation is the only way in.
The CSSF stamp is trusted by institutional money, and the Blockchain laws let securities live natively on-chain. For tokenised funds, few places match this depth.
Licence classes
One authorisation, scoped to your services.
MiCA defines ten crypto-asset services across three capital classes. The CSSF authorises the exact scope you apply for, and the scope drives capital, systems and the depth of the file. We fix the perimeter first, then build once.
Ten MiCA services in three capital classes - the CSSF authorises the exact scope you apply for.
01 - CASP · CLASS 1-2
Core crypto services
For brokers, exchangers and custodians - execution, exchange and safekeeping of client crypto-assets under one CSSF authorisation. Minimum capital €50,000-€125,000 depending on scope.
For brokers, exchangers and custodians - execution, exchange and safekeeping of client crypto-assets under one CSSF authorisation. Minimum capital €50,000-€125,000 depending on scope.
- ✓Exchange of crypto ↔ fiat and crypto ↔ crypto
- ✓Execution, reception and transmission of orders
- ✓Custody and administration of client crypto-assets
- ✓Transfer services for crypto-assets
- ✓Advice and portfolio management on crypto-assets
- ✓Placing of crypto-assets
02 - CASP · CLASS 3
Europe's fund capitalTrading platform
The highest MiCA tier - operation of a crypto trading venue with €150,000 minimum capital, listing rules and market-abuse controls, passportable across the EU from the bloc's leading fund domicile.
The highest MiCA tier - a trading venue with €150,000 capital, passportable from the EU's fund capital.
- ✓Operation of a crypto-asset trading platform
- ✓Matching of buyers and sellers in the venue
- ✓Admission-to-trading (listing) framework
- ✓Market-abuse monitoring under MiCA Title VI
- ✓Combines with custody and exchange services
- ✓One home regulator - the CSSF - for all 27 states
Costs and timelines are confirmed for your case before any work begins. The CSSF charges statutory fees by scope; the real investment is the file - capital, substance and documentation are scoped individually in your quote. Tokenised-securities and DLT registrar mandates are quoted separately.
Why Luxembourg
The stamp the fund world already trusts.
The framework rests on MiCA and the Law of 6 June 2025, supervised by the CSSF - inside a financial centre built for institutional money.
✓
Europe's largest fund industry
Trillions under administration, the depositary banks that service them and decades of cross-border fund practice. For tokenised funds and institutional crypto, the counterparties you need are already here.The counterparties for tokenised funds are here.
✓
A AAA sovereign, read first
One of a handful of AAA-rated states in the EU. Banks, allocators and partners weigh the domicile before the pitch - and Luxembourg opens conversations that lighter flags do not.The domicile opens doors before the pitch.
✓
The CSSF stamp travels
Demanding, document-heavy and worth it. A CSSF authorisation is trusted by institutional allocators and other regulators across the bloc - a benchmark approval, not one that needs explaining.An institutional benchmark, not one to explain.
✓
Blockchain laws - beyond MiCA
Four Blockchain laws between 2019 and 2025 let securities be issued, held and settled natively on distributed ledgers. If your roadmap includes tokenised securities, few places match this legal depth.Securities issued and settled natively on-chain.
✓
Private banking on the doorstep
A century of private and depositary banking sits in the same square kilometre. Licensed CASPs find custodians and account providers here rather than closed doors.Custodians and accounts, not closed doors.
✓
One passport, from the centre
A single CSSF authorisation passports into all 27 EU states after notification. Groups that plan to raise institutional money often pick the heaviest home stamp on purpose - this is that stamp.All 27 EU states by notification.
How it compares
How Luxembourg differs from other routes.
Luxembourg is not the cheapest MiCA desk - it is the institutional one. The honest comparison is positioning: fast desks get you operating; the CSSF gets you in front of fund money.
Luxembourg vs other jurisdictions
| Feature |  Luxembourg | Other jurisdictions |
|---|---|---|
| Regulatory regime | MiCA CASP under the CSSF | National regimes or lighter desks |
| Home market | The EU's fund capital | Retail-first markets |
| Tokenised securities | Native, under the Blockchain laws | Rare or absent |
| Weight of the stamp | Institutional benchmark | Varies - often needs explaining |
Regulatory regime
LuxembourgMiCA CASP under the CSSF
Other jurisdictionsNational regimes or lighter desks
Home market
LuxembourgThe EU's fund capital
Other jurisdictionsRetail-first markets
Tokenised securities
LuxembourgNative, under the Blockchain laws
Other jurisdictionsRare or absent
Weight of the stamp
LuxembourgInstitutional benchmark
Other jurisdictionsVaries - often needs explaining
Country by country
| Country | License type | Taxation | Requirements |
|---|---|---|---|
| Luxembourg | MiCA CASP (CSSF) | ~24.94% corporate | Institutional, fund-grade file |
 Germany | MiCA CASP (BaFin) | ~30% effective | Thorough, document-heavy |
 Lithuania | MiCA CASP (Bank of Lithuania) | 17% CIT (2026) | Fast, but strict AML practice |
 Malta | MiCA CASP (MFSA) | 35% headline · refunds | Established crypto desk |
LuxembourgLicense typeMiCA CASP (CSSF)
Taxation~24.94% corporate
RequirementsInstitutional, fund-grade file
GermanyLicense typeMiCA CASP (BaFin)
Taxation~30% effective
RequirementsThorough, document-heavy
LithuaniaLicense typeMiCA CASP (Bank of Lithuania)
Taxation17% CIT (2026)
RequirementsFast, but strict AML practice
MaltaLicense typeMiCA CASP (MFSA)
Taxation35% headline · refunds
RequirementsEstablished crypto desk
Before you apply
Requirements for the CSSF authorisation.Requirements for CSSF authorisation.
The CSSF reviews a CASP file the way it reviews a fund promoter: completely. The checklist below is what a file that passes actually contains - built to MiCA, the Law of 6 June 2025 and the ESMA technical standards.
01
Luxembourg entity - an SA or Sàrl with its registered office and central administration in Luxembourg.
02
Substance - real management, compliance and operations in the country; the CSSF has no patience for letterbox setups.
03
Fit & proper management - at least two experienced directors with clean records, resident or genuinely present.
04
Own funds - €50,000, €125,000 or €150,000 by service class, or a quarter of fixed overheads if higher.
05
Programme of operations - services, target markets, volumes and a three-year business plan the CSSF can interrogate.
06
AML/CFT framework - KYC, EDD, monitoring and reporting to the CRF, with a named compliance and AML officer.
07
ICT and DORA compliance - resilience testing, incident reporting, a register of ICT providers and exit plans.
08
Safeguarding of client assets - segregation of client crypto and funds, custody policy and key-management design.
09
Governance - ownership disclosed up to UBOs, qualifying holdings declared, conflicts and complaints procedures.
10
Wind-down plan - credible, funded and documented.
11
White papers and disclosures where you issue or admit crypto-assets to trading.
01
Luxembourg SA/Sàrl with central administration here.
02
Real substance - management and compliance on the ground.
03
Two experienced, fit & proper directors.
04
Own funds €50k-€150k by class.
05
Programme of operations + 3-year plan.
06
AML/CFT with named officer, CRF reporting.
07
ICT resilience under DORA.
08
Segregation and custody of client assets.
09
Ownership disclosed up to UBOs.
10
Credible, funded wind-down plan.
Reflects MiCA, the Law of 6 June 2025 and CSSF administrative practice as of 2026. The old VASP registration regime is closed - providing crypto-asset services without CASP authorisation is unlawful.MiCA + Law of 6 June 2025, CSSF practice as of 2026. VASP register closed.
How it works
From first call to the CSSF register.
01
Perimeter and strategy
We map your services to the MiCA classes and fix scope, capital and timeline in writing - including whether the Blockchain laws belong on your roadmap.MiCA classes, capital, Blockchain laws - in writing.
02
Luxembourg company and substance
SA or Sàrl formation, registered office, directors and the central administration - the presence the CSSF interviews behind.SA/Sàrl, office, directors - the presence behind the file.
03
The application file
Programme of operations, AML/CFT framework, ICT and DORA documentation, safeguarding and wind-down - assembled to CSSF standards.Programme, AML, DORA, wind-down - CSSF-grade.
04
CSSF review
The statutory MiCA clock is 25 working days to completeness plus 40 for assessment - 6-12 months in practice. We answer every question round.25+40 wd statutory; 6-12 months in practice.
05
Authorisation and passport
Entry in the CSSF register, ESMA notification and passporting into all 27 EU states - plus ongoing reporting we can keep running.Register entry, then all 27 EU states.
Quick facts
RegulatorCSSF
FrameworkMiCA + Law of 6 June 2025
Capital€50k / €125k / €150k
Statutory clock25 + 40 working days
In practice6-12 months
VASP regimeClosed - MiCA only
SubstanceLux office + 2 directors
PassportAll 27 EU states
The statutory clock starts when the CSSF deems the file complete - completeness quality is where timelines are actually won.
On the ground in Luxembourg
Run from our Dubai office, with Luxembourg counsel.
Prifinance - Luxembourg desk
Luxembourg City · Luxembourg
Luxembourg City, Luxembourg
01
Luxembourg company formation
SA or Sàrl incorporation, registered office and the corporate layer the CSSF expects - notarised, registered and structured for the application.SA/Sàrl, notarised and structured for the file.
02
The authorisation file
Programme of operations, AML pack, ICT/DORA documentation and capital planning - drafted by us and defended through the CSSF's question rounds.Programme, AML, DORA - defended through review.
03
Directors and substance
Director search, compliance staffing and office arrangements - the central administration Luxembourg law demands, assembled pragmatically.Director search, staffing, central administration.
04
Tokenisation and fund pairing
DLT securities projects, tokenised fund structures and combined CASP plus Blockchain-law roadmaps - scoped and delivered.DLT securities - scoped and delivered.
We also have offices in
Tallinn
Estonia
Roseni 13
Vilnius
Lithuania
Gedimino pr. 2
Prague
Czech Republic
Vlkova 532/8, Žižkov
London
United Kingdom
7 Bell Yard
Dubai
UAE
33 Level, Al Saqr Business Tower
Madeira
Portugal
Rua da Alegria 31, 1F
Istanbul
Turkey
Perpa Ticaret Merkezi, A Blok
Good to know
Taxation of crypto companies in Luxembourg.
No crypto-specific levies - corporate profits carry Luxembourg's ordinary aggregate rate of roughly 24.94% in the capital, with the EU's lowest standard VAT and a treaty network built for cross-border groups.
~24.94% aggregate in Lux City
17% corporate income tax plus the 7% solidarity surcharge on it, plus municipal business tax of 6.75% in Luxembourg City - about 24.94% combined. The municipal element varies by commune.17% CIT + 7% surcharge + municipal tax.
The EU's lowest standard VAT
Luxembourg's standard VAT is 17%, the lowest in the bloc. Crypto-to-fiat exchange is VAT-exempt as a financial service under the Hedqvist line; the standard rate touches only ordinary supplies.17% standard; exchange is VAT-exempt.
A treaty network built for groups
More than 80 double-tax treaties and the EU parent-subsidiary regime make Luxembourg an efficient holding location - dividend and gain flows are modelled cleanly, not improvised.80+ treaties; clean dividend and gain flows.
Net wealth tax to plan for
A minimum net wealth tax applies to Luxembourg companies - modest, predictable and part of the model we build before you commit, never a surprise on the first return.Modest, predictable - planned in advance.
Fund vehicles, if you tokenise
Luxembourg's fund toolbox - SICAV, RAIF, SIF - pairs with tokenisation for on-chain fund structures. The tax treatment of these vehicles is well-trodden, not experimental.SICAV, RAIF, SIF - well-trodden treatment.
DAC8 reporting from 2026
EU-wide crypto reporting applies from January 2026 - CASPs report client transactions to tax authorities automatically. Compliance is built into your setup from day one.Automatic CASP reporting, EU-wide.
Tax summary
Corporate income tax17% + 7% surcharge
Municipal business tax6.75% (Lux City)
Aggregate rate~24.94%
Standard VAT17% (EU's lowest)
VAT on crypto exchangeExempt
DAC8 reportingfrom 2026
*Figures as of 2026. Municipal business tax varies by commune - we model the location before you commit.
Turnkey professional support
Experienced lawyers and international consultants.
We provide end-to-end support, from company registration and the application file to regulatory interaction and compliance oversight - with an individualized approach to each client.
Oleksii Kindratenko
Builds the application itself: Luxembourg SA or Sàrl, AML/KYC policy pack, capital structure and tax registrations. His document sets are the reason reviews finish in months, not years.
Eugeniu Bevziuc
First point of contact for international founders. Runs the whole setup remotely, across time zones and languages - from the first call to a live, CSSF-authorised business.
Follow Prifinance
Active across our channels.
Luxembourg · CSSF
Launch your crypto project in Luxembourg with expert support.
Full-service assistance - from company registration to CSSF authorisation and ongoing compliance.
Get a consultation →Free legal opinion
Is Luxembourg the right fit for your project?
Our legal team will analyze your case at no cost and provide a written legal opinion: which jurisdiction, licence scope, or route fits your business.
Written assessment within 2-5 business days
Request a free conclusion →FAQ
The Luxembourg crypto licence, answered.
What licence does a crypto business need in Luxembourg?+
CASP authorisation from the CSSF under MiCA and the Law of 6 June 2025 - required for exchange, brokerage, custody, transfer, advice and trading-platform services aimed at clients. The old VASP registration regime is closed; CASP authorisation is the only route.
What happened to the old VASP registration?+
It ran under the amended 2004 AML law and closed when MiCA took over. Firms that held a VASP registration have either converted to CASP authorisation or stopped serving clients. Registration is no longer available.
How much capital is required?+
MiCA's three classes: €50,000 for advice and order services, €125,000 for exchange, execution and custody, €150,000 for a trading platform - or a quarter of annual fixed overheads if that is higher.
How long does CSSF authorisation take?+
The statutory clock is 25 working days to completeness plus 40 for assessment, but the CSSF's completeness bar is the real timeline. Well-prepared files land in 6-12 months; thin files circle far longer.
What substance does the CSSF expect?+
A Luxembourg SA or Sàrl with central administration in the country: at least two experienced directors, a compliance function on the ground, a real office and systems that demonstrably run. Letterbox structures are rejected.
What are the Blockchain laws, and do they matter to me?+
A run of laws passed between 2019 and 2025 that let securities be issued, registered and settled natively on distributed ledgers. They matter if your model includes tokenised securities or on-chain funds; we scope that in the first call.
Why Luxembourg rather than a cheaper MiCA desk?+
Because of who is here. Luxembourg runs Europe's largest fund industry, its depositary banks and a AAA rating - if you plan to raise or service institutional money, the counterparties already sit in this jurisdiction.
How are crypto companies taxed?+
Roughly 24.94% aggregate in Luxembourg City: 17% corporate income tax, a 7% solidarity surcharge and municipal business tax. Standard VAT is the EU's lowest at 17%; crypto-fiat exchange is VAT-exempt; DAC8 reporting applies from 2026.
Does the Luxembourg licence passport across the EU?+
Yes - one CSSF authorisation covers all 27 EU member states through MiCA passporting after a notification, with no re-licensing. Groups aiming at institutional money often pick the heaviest home stamp for exactly this reason.
What licence is needed?+
CSSF CASP authorisation under MiCA - the only route.
Old VASP register?+
Closed under MiCA; firms converted or exited.
Capital?+
€50k / €125k / €150k by service class.
How long?+
6-12 months; completeness drives it.
Substance?+
SA/Sàrl, two directors, real office and compliance.
Blockchain laws?+
On-chain securities - matters if you tokenise.
Why not a cheaper desk?+
The fund industry and its banks already sit here.
Company taxes?+
~24.94% aggregate; VAT-exempt exchange.
EU passport?+
Yes - all 27 states by notification.
Client notes
Google4.7★★★★★
Founders who wanted it done right.
Google4.7★★★★★
“As a software development crew at FewMoreTaps OÜ, we've had the pleasure of working with Prifinance on some key financial moves.First of all, navigating the world of corporate banking and finance can be a maze, but Prifinance made it feel like a walk in the park. They helped us set up a corporate bank account without the hassle of jumping on a plane or drowning in paperwork. Everything was done remotely, smoothly…”
Google
“I had their assistance in company registration and I would recommend them. They were answering all my clarification during the process and offering all their supportThank you Daniel and Irinia”
Google
“We found PRIFINANCE COMPANYvia the Internet and asked for help in organizing the opening of their company in Estonia. PRIFINANCE COMPANY specialists helped us a lot with this. Their professional, competent approach and knowledge of their business left us with only the best impressions.”
Google
“I'm thrilled with my experience with PriFinance! They helped me obtain a crypto license in Estonia without any hassle. The team was super understanding and always available to answer my questions and assist. It was great to see how they put effort into preparing the documents to ensure everything went smoothly. I'm delighted with the outcome and highly recommend PriFinance to anyone looking to get a license…”
Google
“Opening an account with Prifinance in a Swiss bank was such an easy and quick process that I was shocked. It all started with the first call, where I received detailed guidance on the required documents and the entire procedure.One of the key highlights was their attention to detail. As someone who usually gets tangled up in paperwork, I was pleasantly surprised when they sent me all the documents and…”
Google
“I recently had the pleasure of working with Boris.. and I must say, it was a fantastic experience. Boris went above and beyond to assist me with my residency needs. His professionalism, knowledge, and dedication truly stood out. I highly recommend working with Boris and the team!”
Google
Start today
One message away from your Luxembourg licence.
Get a free legal opinion on your project - our legal team will analyze your case at no cost and provide a written legal opinion: which jurisdiction, licence scope, or route fits your business.Free legal opinion: which Luxembourg route fits your project and what it will cost.
✓Written legal opinion within 2-5 business days - free of charge✓A clear recommendation on the right licence scope, not a sales pitch✓Transparent fixed fees, confirmed up front✓EN · RU · ES speaking team
Prifinance is an independent law and advisory firm. We are not a regulator and are not affiliated with, endorsed by, or acting on behalf of the CSSF or any other public authority. Authorisations are granted by, and obtained directly from, the competent authorities.