Crypto License for Sale: How Buying a Ready-Made Licensed Company Really Works

A crypto license is not a transferable asset. It attaches to the specific legal entity that a regulator authorised after a fit-and-proper assessment, so it cannot be detached and sold. When you see a "crypto license for sale," what is actually on offer is the licensed company itself, and the regulator must consent to the change of control before you can operate it.

That single distinction changes everything about how you should evaluate a "ready-made" deal. The marketing language of "instant transfer" or "trading within days" rarely survives contact with how acquisitions of licensed crypto-asset service providers (CASPs) are supervised. Under MiCA acquisition rules (Art. 83-84), Switzerland's FINMA regime, and the national rules in Lithuania and Estonia, acquiring control of a licensed entity is itself a regulated event with its own notification, assessment criteria, timeline, and a real possibility of refusal.

This guide explains exactly what you are buying, the share-deal versus asset-deal models, the change-of-control approval that every buyer must clear, the per-jurisdiction rules, the realistic timeline, and the liabilities you inherit. If you want the wider context first, read how crypto licensing works before deciding between buying and building.

Can a crypto licence be sold or transferred? (the short answer)

No. A crypto licence cannot be sold or transferred on its own. Licences and regulatory registrations attach to the authorised legal entity and are not transferable assets, so you acquire the company (its shares) rather than a detachable permit. The authorisation continues inside that entity only if the regulator does not object to the new owners. *MiCA Art. 83* *FINMA qualified participations*

This is the corrective most buyers need before they sign anything. The licence is a status granted to a particular company after that company, its owners, and its managers passed a suitability test. Because the status belongs to the entity, the only way to "buy the licence" is to buy the entity and then have the regulator re-assess the people now standing behind it. A qualifying holding, generally a stake of at least 10% of capital or voting rights, is the trigger that brings the regulator into the deal.

What "crypto license for sale" actually means

"Crypto license for sale" is shorthand for "a company that already holds a crypto licence or registration is available to acquire." You are not buying a permit you can carry to a new shell. You are buying a going concern: the authorised entity, with its existing authorisation, history, contracts, and obligations all attached. The value of the deal sits in skipping the from-scratch authorisation queue, not in any transfer of the licence itself.

Treat any listing that promises to "transfer the licence to your company" as a red flag. That is not how authorisation works in any of the regimes in scope, and a vendor who describes it that way either misunderstands the mechanism or is glossing over the regulatory approval you will still have to obtain.

The licence stays with the entity, the owners change

In a share deal the legal entity is continuous. The same company keeps the same authorisation, the same regulator file, the same client contracts, and the same liabilities. What changes is the ownership: the shares move to you, and usually the directors and ultimate beneficial owners (UBOs) change with them. The licence does not move because nothing left the entity. The regulator's interest is in who now controls and manages that entity, which is precisely why the change of control becomes the decisive legal step rather than the share purchase agreement.

Share deal vs asset deal: two ways to "buy" a licensed crypto company

There are two structures behind any "crypto license for sale," and they are not equivalent. A share deal keeps the licence in play; an asset deal does not. Understanding which one a listing actually offers tells you whether you are buying regulated continuity or starting a fresh authorisation in disguise. *A&O Shearman, acquisition of qualifying holdings*

Share deal (the usual ready-made licence model)

In the share-deal model the buyer acquires the shares of the company that already holds the licence or registration. The entity, its authorisation, history, contracts, and liabilities all stay in place, and only the owners (and usually the directors and UBOs) change. Because the legal entity is continuous, the authorisation survives, but only if the regulator does not object to the new owners. This is the structure that most "ready-made licence" offers describe, and it is the one that can genuinely shorten time to market because it avoids re-applying from scratch. *MiCA Art. 83* *MiCA Art. 84*

Asset deal (assets only, a new licence is still required)

In an asset deal the buyer takes specific assets, such as a brand, technology stack, or client book, but not the licence. Because the authorisation does not travel with the assets, a new authorisation must then be obtained before you can carry on the regulated activity. This structure does not deliver the "instant entry" that some listings promise, and it is rarely what a "licence for sale" advert actually means. If a deal is structured as an asset purchase, treat the licensing timeline as no different from applying from scratch.

Which one delivers a faster market entry?

A share deal is the only structure that can compress your timeline, because the licence remains live inside the acquired entity. Even then, "faster" is relative: you avoid the queue to be authorised in the first place, but you still face the change-of-control approval, which is a regulated gate in its own right. An asset deal offers no licensing shortcut at all. So the honest framing is that buying the company can skip the from-scratch authorisation queue, while the regulator's consent to the new control remains a separate hurdle you must clear before you operate.

The change-of-control approval: the gate every buyer must pass

Acquiring a qualifying holding in a licensed CASP triggers a mandatory prior notification to the competent authority and a fresh suitability re-assessment of the incoming owners and managers. The regulator can oppose the acquisition. In substance the deal runs: buy the company, notify the regulator, pass a fit-and-proper re-vetting, and only then complete or operate. The licence is never transferred; the entity is acquired and the regulator consents or is deemed not to object. *MiCA Art. 83* *MiCA Art. 84*

This is the step most over-promising listings gloss over. The regulatory notification is not a formality: it opens a substantive assessment with defined criteria, and the authority has the power to oppose where those criteria are not met. Closing the share purchase before that consent is in hand can leave you owning a company you cannot lawfully control.

What is a "qualifying holding"?

A qualifying holding is generally a stake of at least 10% of the capital or voting rights of the entity, or any holding that gives significant influence over its management even below that level. MiCA and the Swiss FINMA framework both use this definition (FINMA calls it a "qualified participation"). Crossing the 10% threshold is what brings the change-of-control assessment into play, so even a minority investor who acquires significant influence can trigger the regulator's review. *MiCA Art. 83* *FINMA qualified participations*

Which thresholds trigger a fresh notification?

Under MiCA, a fresh notification is required when you reach or cross 20%, 30% or 50% of the entity, or where your acquisition makes the CASP your subsidiary. The Swiss FINMA regime sets reporting triggers at 10%, 20%, 33% and 50%. These step thresholds mean that increasing your stake after an initial acquisition can require further notifications, so a phased buy-in is not a way to avoid regulatory scrutiny. *MiCA Art. 83* *FINMA qualified participations*

What the regulator assesses about the new owners

Under MiCA Art. 84 the competent authority assesses five things about a proposed acquisition: the reputation of the acquirer; the reputation, knowledge, skills and experience of the new managers; the financial soundness of the acquirer; the entity's ability to continue meeting its obligations; and the money-laundering and terrorist-financing risk associated with the acquisition. This is a fit-and-proper test applied to the people who will now stand behind the licensed entity, not a rubber stamp on the transaction. *MiCA Art. 84*

When the regulator can refuse (and what that means for you)

The authority may oppose an acquisition where the Art. 84 criteria are not met, or where the information supplied is incomplete or false (MiCA Art. 84(2)). A failed reputation, financial-soundness or AML screening can block control outright. The practical consequence is severe: an opposed acquisition means you bought a company you cannot lawfully control or operate. For that reason closing should be conditional on the regulator's non-objection, so that you are not committed to the purchase before the consent is secured. *MiCA Art. 83* *MiCA Art. 84* *FINMA qualified participations*

Change-of-ownership rules by regime: EU, Switzerland, Lithuania, Estonia

Every regime in scope makes a change of control a regulated event with a prior notification or approval gate and a fresh fit-and-proper and AML re-assessment of the new owners and managers. None permits a silent transfer of control. The table below maps the legal basis and thresholds; the country-by-country licence matrix covers the wider jurisdiction picture. *A&O Shearman, acquisition of qualifying holdings*

EU / MiCA (CASP): Articles 83 and 84

Under MiCA, an intended acquisition of a qualifying holding in a CASP requires prior written notification to the competent authority of the target CASP, which assesses it under Art. 84 and can oppose it. If the authority does not oppose within the assessment period, the acquisition is "deemed approved." The qualifying-holding base is 10% of capital or voting rights, with further notifications required at 20%, 30%, 50%, or where the CASP becomes a subsidiary. *MiCA Art. 83* *MiCA Art. 84* *A&O Shearman*

Switzerland / FINMA: qualified participations

In Switzerland a qualified participation must be reported to FINMA before buying or selling it. Prior authorisation, not just notification, applies where a foreign-controlled institution's holdings change, or where a Swiss-controlled institution passes to foreign control. Reporting triggers arise on crossing 10%, 20%, 33% and 50%. The legal basis is the Banking Act Art. 3(2)(cbis) and FinIA Art. 11. Adding crypto-institution activity to an existing bank also needs prior amendment approval. *FINMA qualified participations* *Deloitte Switzerland regulatory update*

Lithuania / Bank of Lithuania

The Bank of Lithuania became the MiCA competent authority under the Law on Markets in Crypto-Assets on 11 July 2024, with CASP licensing running from January 2026. A change of ownership requires notification to the Bank of Lithuania when acquiring or decreasing holdings that reach or exceed 20%, 30% or 50%, or that bring the entity under control, on the MiCA qualifying-holding base of 10%. *Bank of Lithuania, CASP authorisation* *Bank of Lithuania, notification regulations*

Estonia / FIU and Financial Supervision Authority

Estonia requires prior approval for a change of ownership above 10%, as well as for new board members and a change of address. Responsibility is split during the transition: the Financial Supervision Authority assumed CASP licensing from January 2025, while the Financial Intelligence Unit (FIU) manages legacy VASP authorisations until they expire on 1 July 2026. A buyer of an Estonian licensed entity must confirm which regime currently applies to the target before structuring the deal. *A&O Shearman* *Estonia FIU, VASP authorisation amendments*

Book a free 15-minute discovery call with our licensed advisers. Every acquisition turns on the specifics of the target entity and its regulator. Talk through your situation with no commitment. Book a Call

How long does it take to buy a ready-made crypto licence?

Plan for weeks to months, not days. Under MiCA the competent authority acknowledges receipt of a qualifying-holding notification within 2 working days, then assesses it within 60 working days. The clock can be suspended for up to 20 working days, extendable by a further 30 working days if the acquirer is based outside the Union, while it seeks information or consults AML authorities. "Operate in days" is unreliable, because the change-of-control assessment is itself a regulated gate. *MiCA Art. 83* *A&O Shearman*

The MiCA assessment clock (Art. 83(3)-(6))

MiCA sets out concrete working-day milestones. Receipt of the notification is acknowledged within 2 working days. The substantive assessment then runs for up to 60 working days. During that window the authority may suspend the clock once, for up to 20 working days, to request further information; that suspension extends to 30 working days where the acquirer is established outside the Union or is not subject to EU supervision. Translating working days into calendar time, the realistic gate is several months from notification to a clear non-objection, before any banking or operational steps. *MiCA Art. 83* *A&O Shearman*

What adds time: AML consultation, info requests, banking re-KYC

Several things stretch the timeline beyond the headline assessment period. A suspension to consult AML authorities or to request missing documents pauses the clock. New UBOs, directors and the AML or compliance officer must be disclosed and assessed, and any gap, such as the absence of a qualified money-laundering reporting officer (MLRO) in the right jurisdiction, can block or delay consent. Banking relationships do not transfer automatically, so signatory changes or new accounts usually require fresh bank KYC that runs on its own timetable.

Risks and due diligence: what you inherit when you buy the company

A share deal is an acquisition of a whole company, with everything that company carries. The licence is only one item on a balance sheet that also includes its compliance history, its liabilities, and its standing with the regulator. Strong due diligence is the difference between a shortcut and a trap. The AML and fit-and-proper requirements you take on are inherited in full, not reset on completion. *Estonia FIU*

You inherit the entity's whole past (liabilities transfer)

A share deal carries forward all of the entity's historical liabilities, not just its licence. AML breaches, sanctions exposure, tax debts, litigation, unfiled reports and customer claims all stay with the company and become your problem on completion. Because the entity is continuous, there is no clean break from its past, which is why a thorough review of its financial, regulatory and litigation history is the most important part of any "ready-made licence" purchase.

Verify the licence is in good standing

A licence can look attractive on a listing and still be impaired. It may be subject to conditions, an open supervisory action, a remediation order, or be close to revocation. Verify the current status on the regulator's public register before you sign: the ESMA MiCA and CASP register for the EU, FINMA's lists for Switzerland, and the FIU or FSA registers for Estonia. A licence that is in good standing today is the only one worth paying for. *Estonia FIU*

Re-vetting of UBOs, directors and the MLRO

The new owners do not inherit the previous owners' clean assessment. New UBOs, directors and the AML or compliance officer must be disclosed and assessed as part of the change of control. Gaps in the incoming team, such as the lack of a qualified MLRO resident in the relevant jurisdiction, can block or delay consent. Line up your management and compliance personnel before you notify the regulator, because the suitability of the people behind the entity is exactly what the authority is assessing.

Banking and passporting do not automatically follow

Two things buyers often assume come with the company do not. Banking relationships are separate from the licence; signatory changes or new accounts usually require fresh bank KYC and onboarding. EEA passporting via a Lithuanian or Estonian CASP licence is only available once the entity is authorised under MiCA, and it is subject to host-state notification and ongoing substance requirements, so it is not automatic on purchase. Build both into your timeline rather than treating them as included. *A&O Shearman* *Bank of Lithuania*

A buyer due-diligence checklist

Use this checklist before committing to any acquisition of a licensed crypto company:

• Confirm the licence is live and unconditional on the regulator's public register.
• Review the entity's full AML, sanctions and supervisory history for breaches or open actions.
• Obtain audited financials and a litigation and tax-debt review to size inherited liabilities.
• Identify and vet the incoming UBOs, directors and MLRO for fit-and-proper readiness.
• Map the change-of-control thresholds and notification obligations for the relevant regulator.
• Make closing conditional on the regulator's non-objection to the change of control.

From our practice

In our advisory work the deals that close cleanly are the ones where the buyer treats the regulator's consent as the real closing condition, not an afterthought. We routinely see "ready-made" targets that look attractive until the public register check, the AML history, or the absence of an in-jurisdiction MLRO surfaces a problem that would have delayed or blocked the change of control. We do not publish a fixed price list because every acquisition is sized by the target entity, its regulator, and the depth of diligence required, and quoting a number before that work is dishonest.

Buy a ready-made licence or apply from scratch? A practical comparison

The buy-versus-build decision turns on what you value more: speed with inherited history, or a clean record built on your own timeline. Buying an operating licensed entity can compress entry, but it imports the company's past and adds the change-of-control gate. Applying from scratch is slower but gives you a clean structure under your full control. If cost is the deciding factor, weigh the cheapest jurisdictions to license from scratch against the premium of a ready-made entity.

When acquiring a licensed company makes sense

Acquisition makes sense when speed to market matters and the target is genuinely clean. If you can skip the from-scratch authorisation queue, take over an operating entity with existing systems and contracts, and the diligence confirms a good-standing licence with no material liabilities, the share-deal route can be worth the premium. The decisive condition is always clean diligence plus a credible path through the change-of-control assessment, with closing conditional on the regulator's non-objection.

When applying from scratch is the safer route

Applying from scratch is the safer route when you want no inherited liabilities, a clean compliance record, and full control over how the entity is structured and staffed. The trade-off is the application timeline, which can be longer than acquiring an existing entity. For buyers who are risk-averse or who cannot get comfortable with a target's history, building is often the cleaner outcome. If you choose this path, follow our guide to apply for a crypto licence from scratch.

What does a ready-made crypto licence cost?

There is no single price, and we do not publish a fixed list. The cost of acquiring a licensed entity depends on the jurisdiction, the standing and scope of the licence, the substance already in place, and how much diligence the target requires. A clean, fully operational CASP in a sought-after regime costs more than a dormant registration with thin substance, and the diligence and approval work scales with the complexity of the deal. For from-scratch comparisons you can compare licensing costs across jurisdictions.

What drives the price (and why we publish no fixed list)