MiCA Lawyer in Spain for Your CASP Licence

The MiCA transitional period ended on 1 July. Do you already have your CNMV licence?

If you run an exchange, hold crypto-assets for clients or offer them through your financial app, since 1 July 2026 you need authorisation from the CNMV, Spain’s securities regulator, as a crypto-asset service provider (CASP). We prepare your MiCA application, align your operational resilience with DORA and your anti-money laundering controls with Spanish Act 10/2010, so that you file a complete application from day one.

Request a free initial assessment. We’ll tell you which services need a licence, which minimum capital applies to you and what you still need before applying.

No commitment · We reply the same day

YEARS OF EXPERIENCE

+ 0

CLIENTS ADVISED

+ 0

PROJECTS COMPLETED

+ 0

PRACTICE AREAS

+ 0

WHAT SETS US APART

The MiCA Licence Is Decided in the File, Not in the Form

The CNMV does not only assess the business model. It reviews governance, the suitability of directors, capital, information systems and the anti-money laundering policy at the same time, and when it asks for additional information the decision period is suspended.
That is why we treat the application as a whole. We work with your technical team on DORA and with your compliance officer on anti-money laundering, which since 1 October 2026 covers all crypto-asset service providers.
If you are going to provide crypto-asset services in Spain, you need someone who reads MiCA, DORA and Act 10/2010 together.

We reply the same day

MiCA LEGAL SERVICES

What Does Your Company Need to Obtain a MiCA Licence?

Legal advice on authorisation, operational resilience and anti-money laundering for companies providing crypto-asset services in the European Union.

Scope analysis and route to market

We determine which crypto-asset services you provide under MiCA and which route applies. A new company needs authorisation under article 59. Credit institutions, investment firms, electronic money institutions and fund managers can provide some services by notification under article 60, filed at least forty working days before starting.

Authorisation application before the CNMV

We prepare the application with the content required by article 62, including the programme of operations, governance, the suitability of directors, prudential safeguards, internal controls and the policies specific to each service. The CNMV has twenty-five working days to check that it is complete and forty more to decide.

DORA digital operational resilience

We align your technology risk management with Regulation (EU) 2022/2554, which applies to providers authorised under MiCA without a simplified regime. This includes the major incident reporting process, the register of ICT contracts and the clauses those contracts must contain.

Anti-money laundering and the travel rule

Since 1 October 2026 all crypto-asset service providers are obliged entities under Spanish Act 10/2010. We design the AML manual, the internal controls on which SEPBLAC will report during your authorisation and the travel rule procedures under Regulation (EU) 2023/1113 for crypto-asset transfers.

EU passport and ongoing supervision

With a Spanish licence you can operate in the rest of the Union by notifying the CNMV, under article 65. We also support you after authorisation, with changes of shareholders, directors or services that must be notified to the supervisor.

SECTORS AND COMPANIES

Do You Provide Crypto-asset Services in Spain?

We advise companies with these profiles on MiCA.

Exchanges and platforms

Exchange and trading platforms

Custody and wallets

Holding clients' keys

Brokers and neobanks

Crypto-assets inside your app

Financial entities

Article 60 notification

Paused projects

You stopped on 1 July and return

PROCESS AND TIMELINES

How We Work

From first contact to licence, in 4 steps

1 –

Scope assessment

We review your model and tell you which services need a licence, which route applies and which minimum capital applies to you. No cost or commitment.

2 –

Requirements map

We give you the list of what article 62 requires in your case, with what you already have, what is missing and who prepares it.

3 –

Application file and policies

We draft and review the policies, the programme of operations, the DORA documentation and the anti-money laundering manual.

4 –

Filing and support

We file the application, answer the CNMV’s requests and stay with you after authorisation.

REVIEWS AND RATINGS

What Our Clients Say

Reviews from real clients and companies about our crypto-asset and MiCA services.

Marta combines impeccable professionalism with a remarkable ability to explain complex legal concepts in simple terms...

Impeccable personal attention, availability and human touch. Broad knowledge and experience in the sector. Outstanding at solving problems. 100% recommended...

I have no words to express my sincere gratitude. Marta is a very dedicated and empathetic professional. She also works fast...

Thank you so much, Marta, for your invaluable advice. Without your knowledge of NFT technology in the art market, a new and promising field but one exposed to a lot of fraud, I would have got myself into serious trouble. Marta …

REGULATORY FRAMEWORK

The MiCA Regulation in Spain and the EU

Regulation (EU) 2023/1114, known as MiCA, has applied to crypto-asset service providers since 30 December 2024. Spain did not shorten the transitional period in article 143.3, so providers already operating could continue until 1 July 2026. Since then, providing crypto-asset services requires the authorisation or notification provided for in MiCA. We explain it in our guide on MiCA authorisation after the end of the transitional period.

The CNMV is the competent authority in Spain under article 251 of the Spanish Securities Markets Act 6/2023, which leaves issuers of e-money tokens and asset-referenced tokens to the Bank of Spain. Minimum capital depends on the services, 50,000, 125,000 or 150,000 euros, or one quarter of the previous year’s fixed overheads if higher. Authorised providers must also comply with the DORA Regulation, which we explain in our guide on DORA for crypto-asset service providers.

MiCA requires Member States to provide for maximum fines of at least 5 million euros or 5% of annual turnover for infringements by crypto-asset service providers. Since 1 October 2026, Spanish Act 10/2010 also applies, treating breaches of the travel rule as serious offences, with fines of at least 60,000 euros.

FAQ

Frequently Asked Questions about MiCA and the CASP Licence

Which crypto-asset services need CNMV authorisation?

All those listed in MiCA. They are custody and administration of crypto-assets on behalf of clients, operating a trading platform, exchanging crypto-assets for funds or for other crypto-assets, executing orders, placing, receiving and transmitting orders, advice, portfolio management and transfer services. Anyone providing them in Spain needs CNMV authorisation or, if it is a financial entity, must notify.

How long does the CNMV take to authorise a CASP?

MiCA sets the maximum time limits. The CNMV has twenty-five working days to check that the application is complete and forty more working days to decide. If it asks for additional information, the period is suspended for up to twenty working days. The time limits run from the complete application, so a well-prepared file is the most effective way to avoid extending them.

What minimum capital does MiCA require?

It depends on the services. It is 50,000 euros for services such as receiving and transmitting orders, advice or portfolio management, 125,000 euros if custody or exchange is also provided, and 150,000 euros if a trading platform is operated. If one quarter of the previous year’s fixed overheads is higher, that amount applies. It can be covered with own funds, insurance or a combination of both.

Can I operate in other EU countries with a Spanish authorisation?

Yes. MiCA provides for an EU passport. The provider tells the CNMV in which Member States it wants to operate and with which services, and the CNMV forwards this to those countries within ten working days. The provider can start once it receives the CNMV’s confirmation and, at the latest, fifteen calendar days after submitting the information.

I am a financial entity. Do I need authorisation or is notification enough?

Notification is enough, within what your licence already allows. MiCA allows credit institutions, investment firms, electronic money institutions, fund managers, central securities depositories and market operators to provide crypto-asset services by notification under article 60, filed at least forty working days before starting. Each type of entity can only provide the services equivalent to its licence.

Are DORA and anti-money laundering part of the authorisation?

Yes, in practice. The application must describe the information systems and security measures, and once authorised the provider applies DORA in full, without a simplified regime. In addition, since 1 October 2026 SEPBLAC reports on anti-money laundering internal controls in authorisation procedures for crypto-asset service providers.

REQUEST YOUR ASSESSMENT

Request a free initial assessment and receive an analysis of which services need a licence, your route to market, the minimum capital and what you still need to file your application with the CNMV.