Crypto Exchange License: How to Start a Licensed Cryptocurrency Exchange

Founders and operators who set out to launch a trading venue quickly hit the same wall: there is no single document called a "crypto exchange license" that you buy once and use everywhere. What you actually need is regulatory authorisation to operate the trading-platform activity in each jurisdiction that touches your business. This pillar maps the major regimes side by side, names the actual legal instrument in each, shows where minimum capital applies, and sets out a regime-agnostic sequence to launch a licensed exchange.

By Magnus Müller · Reviewed by Magnus Müller · Last updated: 2026-06-14

What is a crypto exchange license?

A crypto exchange license is regulatory authorisation to operate a trading platform or otherwise facilitate the exchange of crypto-assets, granted by the regime where the operator is established and by every regime whose residents it serves. It is not one global permit. The licence type, capital and obligations are set by each applicable jurisdiction, so a single exchange usually holds several authorisations at once.

In the European Union, "operation of a trading platform for crypto-assets" is an enumerated crypto-asset service that may only be carried out by an authorised provider under Regulation (EU) 2023/1114 (MiCA), Art. 3 and Art. 59. Other regimes use their own instruments, from registrations to full prudential licences, but the underlying idea is consistent: the right to run the exchange activity is something a regulator grants, supervises, and can withdraw.

There is no single global crypto exchange license

No regulator issues a worldwide crypto exchange permit. Licensing is territorial, and most regimes regulate by reference to who you serve, not only where your servers sit. The practical rule is this: you need authorisation where your company is established and in each jurisdiction whose residents you onboard. New York requires a licence for activity involving New York residents under 23 NYCRR Part 200, and the United Kingdom captures firms serving UK customers under the Money Laundering Regulations 2017.

That territorial reach is why a venue marketing to the EU, the US and the UK does not pick one licence. It builds a portfolio: a MiCA CASP authorisation in the EU, FinCEN MSB registration plus the relevant state and New York approvals in the US, and FCA registration for UK customers. Treat "crypto exchange license" as an umbrella over heterogeneous national instruments rather than a single SKU you can shop for.

License vs AML registration: the distinction that matters

The single most useful lens when scoping a build is the split between full licensing regimes and AML-registration-only regimes. Full licensing regimes assess your capital, governance, custody and trading rules before granting a substantive authorisation: the EU CASP regime under MiCA Art. 59, the New York BitLicense under 23 NYCRR Part 200, and the Dubai VARA licence under the Virtual Assets and Related Activities Regulations 2023.

AML-registration-only regimes are narrower. They supervise you for anti-money-laundering and counter-terrorist-financing purposes but do not confer a prudential licence. UK FCA registration under the Money Laundering Regulations 2017 is explicitly AML/CTF supervision, and US federal FinCEN MSB registration is an AML obligation rather than a market-conduct licence. Knowing which side a target regime sits on tells you how heavy the application will be and what protections customers do, and do not, receive.

Crypto exchange license requirements by regime

The table below sets out the operative instrument and the permanent minimum capital for each major regime, using only figures confirmed against a primary source. Where a capital figure was not available from the regulator this session, the cell is left blank rather than estimated. Detailed per-country procedure lives on the dedicated child guides linked throughout.

EU, MiCA CASP authorisation (trading platform)

Under MiCA, "operation of a trading platform for crypto-assets" is defined as a crypto-asset service in Art. 3, and a firm must be authorised as a crypto-asset service provider before it begins operating under Art. 59. The trading-platform class carries a permanent minimum capital of EUR 150,000 under Art. 67 and Annex IV. For the full EU framework, including passporting across member states, see the MiCA regulation in the EU pillar.

United States, FinCEN MSB and state money transmitter licenses

At the federal level, a crypto exchanger that exchanges convertible virtual currency for fiat or other value is treated as a money transmitter, and therefore a money services business, which must register with FinCEN and run an AML program under FinCEN Guidance FIN-2013-G001 and the definitions in 31 CFR 1010.100. There is no federal capital minimum, but state money transmitter licenses sit on top, each with its own bond and net-worth rules. The state layer is broad enough to warrant its own treatment in our US exchange licensing (BitLicense, MSB, state) guide.

New York, BitLicense (NYDFS, 23 NYCRR Part 200)

New York runs its own regime. Conducting virtual-currency business activity that involves New York or New York residents, including exchange services and buying or selling virtual currency as a customer business, requires a BitLicense under 23 NYCRR Part 200, section 200.2(q). Capital is set by the Department of Financial Services per business model under 200.8, and a customer-protection bond or trust account, "generally $500,000" minimum, applies under 200.9. The application is detailed enough that we treat it separately in the BitLicense in New York guide.

United Kingdom, FCA registration under MLR 2017

Cryptoasset exchange providers serving UK customers must register with the FCA under the Money Laundering Regulations 2017, Reg. 14A. This is AML/CTF supervision, not a prudential licence, and there is no prudential capital minimum. Crucially, FCA cryptoasset registration does not bring access to the Financial Services Compensation Scheme or the Financial Ombudsman Service, a point operators must communicate clearly to customers.

Singapore, MAS Payment Services Act (DPT service)

In Singapore, providing a digital payment token (DPT) service, which captures crypto exchange activity, requires a payment service licence under the Payment Services Act 2019, supervised by the Monetary Authority of Singapore. The specific licence classes and base-capital figures were not available from a primary source this session, so we state the framework by name only and flag the capital amount for verification rather than printing a number.

Dubai, VARA licence (Virtual Assets Regulations 2023)

Operating a virtual asset exchange in Dubai requires a VARA licence for the relevant regulated activity under the Virtual Assets and Related Activities Regulations 2023 and the activity-specific Rulebooks. The itemised list of regulated activities and per-Rulebook capital amounts were not on the fetched regulator page, so this pillar states the regulation by name and routes the specifics to verification rather than quoting figures.

How much capital does a licensed crypto exchange need?

Capital requirements differ sharply by regime, which is why "how much capital does a crypto exchange need" has no single answer. The figures below are the ones confirmed against a primary source:

• EU MiCA trading-platform class (Class 3): EUR 150,000 permanent minimum capital under Art. 67 and Annex IV.
• New York BitLicense: capital set by DFS per business model, plus a customer-protection bond or account "generally $500,000" minimum under 200.9.
• US federal (FinCEN MSB): no capital minimum, but an AML program is mandatory.
• UK (FCA): no prudential capital minimum under the MLR 2017 regime.

Singapore and Dubai capital figures are not stated here because they were not confirmed from a primary source this session.

Why capital varies by license type and regime

Capital scales with the regulator's view of the activity's risk. MiCA ties the threshold to the service class, so a trading platform sits in Class 3 at EUR 150,000, while custody and other services attract different amounts. New York instead lets the DFS calibrate capital to the specific business model under 200.8, then layers on the customer-protection bond. AML-only regimes such as the UK FCA register and federal FinCEN MSB impose no prudential capital at all, focusing on systems and controls. For modelling the full budget, including application fees and ongoing costs, use the crypto exchange license cost guide rather than a single headline figure.

How to start a licensed cryptocurrency exchange: step by step

The sequence below is regime-agnostic. It synthesises the common gating requirements across MiCA, the BitLicense regime, FCA registration and FinCEN MSB rules, so it holds whichever jurisdiction you choose. There is no fixed cross-regime timeline; how long each step takes depends on the regime and the quality of your application dossier.

Steps 1-3, define activity, choose jurisdiction, incorporate

1. Define the activity and target markets. Decide whether you operate a trading platform, a broker or dealer, custody, or a combination, and which residents you will serve. This determines which regimes apply, and an exchange usually triggers several at once.
2. Choose the establishment jurisdiction. Weigh the EU MiCA passport against US federal MSB plus state MTLs plus a New York BitLicense, UK FCA registration, the Singapore PS Act, or a Dubai VARA licence.
3. Incorporate a legal entity with adequate substance and governance in the chosen jurisdiction, ready to satisfy the local fit-and-proper and presence expectations.

Steps 4-6, capital, AML program, governance

1. Meet the minimum capital or financial-resource threshold. For a MiCA trading platform that is EUR 150,000 under Art. 67 and Annex IV; for a New York BitLicense it is the DFS-set capital plus the customer-protection bond under 200.8 and 200.9.
2. Build the compliance program: KYC, transaction monitoring, suspicious-activity reporting, sanctions screening and recordkeeping. AML is the one universal requirement across regimes, mandated federally in the US under FIN-2013-G001 and as the entire basis of UK FCA registration.
3. Establish governance and organisational requirements: fit-and-proper management, internal controls, risk management, business continuity and ICT/cyber resilience, as set out for CASPs in MiCA Art. 68.

Steps 7-10, custody, trading rules, apply, operate

1. Set custody and safeguarding arrangements for client crypto-assets and funds, with segregation, no own-account use, and liability for cyber loss under MiCA Art. 70.
2. Draft the trading-platform operating rules ensuring orderly trading, transparency and timely settlement under MiCA Art. 76.
3. Submit the application or registration to the competent authority, whether a national competent authority for MiCA, NYDFS, the FCA, MAS or VARA.
4. Pass review and due diligence, obtain the authorisation, then operate under ongoing supervision with reporting, audits and change notifications under MiCA and NYDFS rules.

For the build itself, the engineering, security and operational side that runs alongside the licence, see our guide to the technical and legal requirements to start an exchange.

Have questions about your specific situation? Book a free 15-minute discovery call with our licensed advisers, with no commitment. Book a Call

AML, KYC and the compliance program every exchange needs

Whatever regime you choose, anti-money-laundering and counter-terrorist-financing obligations are unavoidable. AML/CTF is the one universal requirement: KYC onboarding, ongoing transaction monitoring, suspicious-activity reporting and sanctions screening recur across the EU, the US, the UK and beyond. In several regimes AML is not just part of the licence, it is the entire licence, which is why this section sits at the centre of any exchange build. For the full programme design, our crypto AML and KYC compliance pillar goes deeper than this hub can.

What AML obligations apply across regimes

In the US, a registered MSB must run a BSA AML program under FIN-2013-G001. In the UK, FCA registration under MLR 2017 is purely an AML/CTF regime. In the EU, AML obligations apply to authorised CASPs alongside their MiCA conduct duties. In New York, BitLicensees are subject to transaction monitoring and filtering expectations referenced under Part 504. The Crypto-License.io licensing team builds these controls to satisfy the strictest applicable regime so a single programme can support a multi-jurisdiction roll-out.

How clients' crypto-assets are protected: custody and safeguarding

Custody rules exist to keep customer assets safe from the operator's own failures. Under MiCA Art. 70, providers holding clients' crypto-assets must keep them unencumbered, must not use them for their own account, and remain liable for losses arising from ICT incidents and cyber-attacks. New York takes a parallel approach: the BitLicense regime regulates custody and control of virtual currency on behalf of others under 23 NYCRR 200.2(q). The throughline is segregation and accountability, so that a customer's balance is never quietly funding the platform's operations.

Market integrity and orderly trading rules

A licensed venue is also expected to run a fair, resilient market. MiCA Art. 76 requires trading-platform operators to set clear operating rules, ensure system resilience and orderly trading, provide transparency, and settle transactions within 24 hours of execution. MiCA also imposes market-abuse prohibitions on crypto-asset markets, covering insider dealing and market manipulation. These conduct duties separate a regulated exchange from an unregulated venue, and regulators increasingly treat resilience and settlement discipline as core licence conditions rather than nice-to-haves.

Where to get a crypto exchange license: choosing a jurisdiction

Jurisdiction selection is where strategy meets cost. The right home depends on your target markets, your appetite for capital and governance burden, and how quickly you need to be live. From this hub you can route to the regime-specific guides: the broad US picture in US exchange licensing (BitLicense, MSB, state), the New York deep dive in BitLicense in New York, and Asia-Pacific and Americas options including an exchange license in Japan, Canada MSB registration, and Brazil crypto exchange registration.

Full licensing regimes vs AML-registration regimes (where to look)

Use the licence-versus-registration split as a selection lens. If you want a substantive, passportable authorisation that signals prudential oversight, the full licensing regimes are the EU CASP regime, the New York BitLicense and Dubai VARA. If you need a lighter, AML-focused footprint to serve a market, the registration regimes are UK FCA and US federal FinCEN MSB, though the US still layers state and New York approvals on top. Most serious exchanges combine both kinds, anchoring in a full-licence home market and registering wherever residents demand it. See the full guide on cost trade-offs in the crypto exchange license cost breakdown.

How long and how much does a crypto exchange license cost?

There is no single cross-regime figure for either time or money. Cost and timeline depend on the regime, the licence class, and how complete your application dossier is on submission. Rather than repeat unsourced "two to six month" claims or generic fee lists, we route cost and timeline detail to the dedicated crypto exchange license cost guide, where ranges are tied to specific regimes and components. The discipline matters: under MiCA, for example, the clock depends heavily on the competent authority's review and the completeness of your governance, capital and compliance documentation.

From our practice

Across the licensing engagements our team has supported from Zug, the pattern is consistent: applications stall not on the headline capital figure but on the supporting program. Reviewers probe the AML framework, the fit-and-proper file for management, the custody and segregation model, and the trading-platform operating rules long before they sign off. The teams that move fastest treat the licence application as a documentation exercise that mirrors how the business will actually run, rather than a form to be completed at the end. We surface no fixed timeline figure here because, in our experience, the dossier quality drives the calendar more than the regime alone.