Crypto License in Austria

In 2026, this term may mean Austrian VASP registration or MiCA CASP authorization.
Scope, passporting and compliance burden depend on the exact business model.

Request legal assessment
Regulator
FMA
Timeframe
From 6 months
Cost
27 900 EUR
Capital
From 50 000 EUR
Timing and cost depend on whether your project falls under VASP, CASP, MiFID or EMT/ART rules.

What a crypto license in Austria means in 2026

Crypto license in Austria is a market term, not a single legal category. In 2026, an Austrian crypto business may fall under the historic VASP Austria registration logic for AML purposes, under MiCA Austria as a CASP, or outside both if the product is actually a financial instrument, an EMT, an ART, or a payment-like structure.

The first task is classification. If you want to serve the wider EU on a regulated basis, the relevant question is usually not whether you need an Austrian crypto license in the generic sense, but whether your activity requires CASP authorization with passporting, a separate MiFID II analysis, or additional structuring around custody, stablecoins, staking or derivatives. RUE supports founders with scoping, FMA-facing documentation, governance design, AML architecture and post-approval implementation.

RUE helps clients determine whether the project belongs under Austrian VASP registration, MiCA CASP authorization, or another perimeter such as MiFID II or e-money. We prepare the legal gap analysis, draft the application set, align AML and Travel Rule controls, coordinate company setup, and support post-approval implementation including banking and compliance operations.

🏛️

Recognised regulator and legal environment

The Austrian Financial Market Authority, or FMA, is the key supervisory authority. Austria is generally viewed as a serious EU jurisdiction for founders targeting institutional-grade compliance.

🇪🇺

MiCA relevance for EU expansion

Where the business falls under MiCA, Austria can be part of a broader EU strategy. The practical value is not the local label itself, but the ability to structure for compliant cross-border operations.

🧾

Strong AML and governance expectations

Austria is suitable for teams ready to evidence UBO transparency, source of funds, AML controls, outsourcing governance and documented management responsibility.

🏦

Useful for substance and banking preparation

A properly structured Austrian company, governance setup and local operating footprint can materially improve bank, EMI and payment onboarding discussions compared with paper-only structures.

Crypto License in Austria

27,900 EUR
Package includes (8)
  • Preparation of necessary documents for registration of a new company in Austria
  • Translation of a certificate of no criminal record through a sworn translator
  • Payment of state fees related to company registration
  • Payment of notary fees related to company registration
  • Preparation of compliance documents for MiCA application
  • Preparation of a business plan
  • Submission of the necessary documents to FMA
  • Recruitment of local MLRO/Compliance officer
Timeframe: From 6 months

Additional Services

MiCA structuring & jurisdiction selection advisory within the EU
from 2,900 EUR
Legal qualification of tokens (utility vs EMT vs ART vs financial instrument under MiFID II)
from 3,900 EUR
Pre-application gap analysis and readiness assessment
from 4,900 EUR
Regulatory risk memo for business model validation
from 2,900 EUR
Cross-border structuring for non-EU founders entering the EU market
from 5,900 EUR
Annual compliance reviews and internal audits
from 4,900 EUR/year
Updating policies in line with ESMA / EBA guidelines
from 1,900 EUR
Assistance with opening crypto-friendly bank accounts / EMIs
from 2,900 EUR

Ready to Get Started?

Book a free 30-minute consultation with our licensing expert

Eligibility and core requirements

An Austrian crypto application succeeds or fails on classification, transparency and operational credibility. The FMA will not assess only a business idea. It will assess the legal perimeter, ownership chain, management suitability, AML framework, internal controls and whether the operating model is realistic.

For most applicants, the requirements can be grouped into five layers:

  • Corporate layer: suitable legal entity, registration data, constitutional documents and a coherent ownership structure.
  • People layer: directors, responsible managers, AML function and clear allocation of responsibilities.
  • Compliance layer: AML/CTF policy set, risk assessment, onboarding rules, sanctions and PEP screening, escalation and record-keeping.
  • Operational layer: program of operations, outsourcing map, complaints handling, client asset flow mapping and financial projections.
  • Technology layer: wallet architecture, access controls, incident response, vendor due diligence and resilience controls relevant to custody or transaction processing.

A recurring issue in crypto regulation in Austria is that founders submit generic policies copied from another jurisdiction. That usually creates delays because the regulator expects the documents to match the actual product, token flow, customer base, onboarding path and transaction risk profile.

Legal entity and transparent ownership +

A clear legal entity and a verifiable ownership chain are essential. Applicants should be ready to document shareholders, ultimate beneficial owners, control relationships and source of funds. In practice, an Austrian GmbH is often used, although the exact structure depends on the model and group setup.

Directors and fit-and-proper evidence +

Management must be credible on paper and in substance. Expect to provide CVs, role descriptions, experience evidence and supporting documents relevant to reputation and professional suitability. The key issue is not titles alone, but whether the team can actually run the proposed crypto business.

AML officer and governance allocation +

The AML function must be real, not nominal. The responsible person should have sufficient seniority, time, access to management and documented knowledge of AML/CTF controls. Outsourcing is possible in some models, but oversight cannot be outsourced away.

AML, KYC and risk framework +

The AML package must reflect the actual business model. This normally includes a business-wide risk assessment, customer due diligence rules, enhanced due diligence triggers, sanctions and PEP screening, transaction monitoring logic, suspicious activity escalation and staff training procedures.

Program of operations and business plan +

The regulator expects an operational map, not a pitch deck. The file should explain services, client types, jurisdictions, onboarding, wallet flows, fiat interfaces, outsourcing, revenue assumptions and control points. Unrealistic projections without operational support are a common red flag.

IT security and outsourcing controls +

Paper compliance is not enough in 2026. Where the model includes custody, transfer or platform infrastructure, the application should address access management, vendor due diligence, incident handling, business continuity and outsourcing oversight. This is where DORA-style thinking becomes relevant even when the exact perimeter analysis is case-specific.

Jurisdiction Comparison

Compare Austria with other jurisdictions by key conditions for obtaining and operating a MiCA/CASP license: regulator, review period, fees, capital, local substance, and passporting.

Countries to compare

Parameters

* This table focuses on MiCA/CASP authorization conditions. Use the settings icon to customize countries and parameters.

Tax and cost considerations for Austrian crypto companies

Tax analysis for a crypto company in Austria depends on the legal form, tax residence, service mix and group structure. There is no universal crypto-specific corporate tax regime that replaces ordinary business taxation. For founders comparing jurisdictions, the important questions are usually corporate income tax, dividend treatment, VAT treatment of the specific service, transfer pricing and permanent establishment risk.

For an Austrian operating company, the baseline corporate tax framework applies. Dividend withholding, treaty relief and participation exemptions require case-by-case review. VAT treatment is especially sensitive because different crypto activities may be treated differently; exchange-related services, technology services, advisory services and custody-related services should not be assumed to have the same VAT outcome.

From a structuring perspective, substance matters. If founders manage the business from another country while using an Austrian entity only as a formal shell, tax residency and permanent establishment issues can arise. That is why licensing, banking and tax planning should be aligned from the start. For related support, see Austria Crypto Tax, accounting services and bank account in Austria.

Always verify current rates and tax treatment before implementation. Tax rules, treaty access and VAT analysis depend on facts and may change.

Corporate income tax

Applies to the Austrian company on taxable profits.
verify current rate

Use the current statutory rate in force in 2026 at the time of structuring. The effective burden depends on deductible costs, transfer pricing, group arrangements and whether the Austrian entity has real operational substance.

Dividend withholding tax

May apply on profit distributions, subject to exemptions or treaty relief.
case-based

Do not assume a flat result for all shareholders. Domestic rules, EU directives, treaty entitlement, beneficial ownership and anti-abuse standards all matter. Founder residence and holding structure should be reviewed before distributions are planned.

VAT on services

Treatment depends on the exact crypto service supplied.
service-based

VAT analysis is activity-specific. Exchange, brokerage, software, advisory, custody support and token-related services may not receive the same treatment. A product map should be reviewed before invoicing begins.

Substance and PE risk

Cross-border founder activity can shift tax exposure.
risk factor

If key management and revenue-generating functions sit outside Austria, tax risk increases. This can affect residency, permanent establishment analysis, transfer pricing and access to treaty outcomes. Substance should be aligned with the licensing narrative.

Ongoing compliance after registration or authorization

A crypto license in Austria is not a one-time filing. The real regulatory burden starts after approval through AML operations, Travel Rule controls, governance, outsourcing oversight and evidence-based record keeping.

🛡️

AML and customer due diligence

  • Maintain a business-wide AML/CTF risk assessment linked to actual products and customer segments.
  • Apply customer risk scoring, standard CDD and enhanced due diligence where risk triggers exist.
  • Run sanctions and PEP screening at onboarding and on an ongoing basis.
  • Keep escalation procedures for suspicious activity and internal reporting lines.
🔄

Travel Rule and transaction monitoring

  • Implement Travel Rule workflows for required originator and beneficiary data in relevant transfers.
  • Distinguish hosted-wallet and unhosted-wallet scenarios in operational procedures.
  • Use blockchain analytics, wallet screening and alert handling rules appropriate to the risk profile.
  • Document false-positive handling and decision logging for escalated alerts.
🏢

Governance and outsourcing

  • Keep a clear responsibility map for directors, compliance, AML and operations.
  • Maintain an outsourcing register covering KYC vendors, cloud providers, custody tech and screening tools.
  • Review third-party providers for security, data protection and continuity risk.
  • Ensure management can evidence oversight rather than relying on vendors blindly.
📚

Records, training and remediation

  • Maintain complete records for onboarding, monitoring, decisions, complaints and internal controls.
  • Run periodic staff training tailored to the actual crypto risk profile.
  • Update policies when products, jurisdictions, token types or vendors change.
  • Treat regulator questions and internal findings as remediation projects with owners and deadlines.
💡
RUE handles compliance for you. Our team provides ongoing compliance support, including AML officer services, regulatory reporting, and policy updates. We ensure your license stays in good standing year after year. Contact us for compliance support →

📝 Check Your Eligibility

Answer a few quick questions to find out if this jurisdiction suits your crypto business

Step 1 of 5

What type of crypto services will you provide?

Exchange (fiat ↔ crypto)
Custody & Wallet Services
Transfer & Payment Services
Advisory / Portfolio Management
Multiple / All of the Above
Step 2 of 5

What is your target market?

European Union only
EU + Global markets
Global (non-EU priority)
Step 3 of 5

Do you already have a registered company in the EU?

Yes, in this jurisdiction
Yes, in another EU country
No, I need to register one
Step 4 of 5

What is your available budget range?

Under €20,000
€20,000 – €50,000
€50,000 – €100,000
Over €100,000
Step 5 of 5

When do you plan to launch?

As soon as possible (1–3 months)
Within 6 months
Within a year
Just exploring options

This Jurisdiction Is a Great Fit!

Based on your answers, this jurisdiction matches your business requirements well. Here's a quick summary:

Recommended License

CASP License

Estimated Budget

€24,000 – €35,000

Estimated Timeframe

4–6 months

EU Passporting

Available

📞 Get Personalized Assessment

Process to obtain a crypto license

Step 1

1. Legal scoping

The first step is classification. We determine whether the project fits Austrian VASP registration, MiCA CASP authorization, or another perimeter such as MiFID II, EMT, ART or payment services. This phase usually defines the entire timeline and document strategy.

Step 2

2. Company setup

We structure the legal entity, ownership file, governance map and substance plan. Where needed, this includes Austrian company formation, UBO preparation, registered office coordination and alignment with banking or EMI onboarding strategy.

Step 3

3. Drafting and filing

We prepare the application set: business plan, program of operations, AML framework, internal controls, outsourcing and IT documentation, personal files and supporting evidence. After filing, the main work is usually in regulator questions and remediation rounds.

Step 4

4. Post-approval setup

After registration or authorization, we help implement the operating layer: AML tooling, Travel Rule workflows, staff training, vendor contracts, record-keeping, reporting routines and coordination with banks or payment institutions during the first critical months.

Answers

Frequently Asked Questions

Open the key issues founders, compliance teams and legal leads usually need to confirm before launch.

Do you still need a VASP registration in Austria in 2026? +

Possibly, but not every project should start from that assumption. In 2026, the phrase VASP Austria may still appear in market language, but many active business models need to be assessed under MiCA as CASP services or under another perimeter. The correct route depends on the exact activity, token type and client journey.

Does an Austrian crypto license give EU passporting rights? +

Not every Austrian crypto approval gives the same cross-border effect. A national AML-oriented registration is not the same thing as MiCA passporting. If EU-wide service provision is part of the strategy, the analysis should focus on whether the business requires a MiCA CASP route rather than relying on a generic Austria crypto license label.

Can a non-Austrian company apply? +

It depends on the legal route and the operating structure. In some cases, an EU group structure may be possible, but in practice an Austrian entity and credible local substance often help with regulator comfort, banking and operational coherence. The answer should be based on the actual group, management and service model.

How long does FMA review usually take? +

There is no single reliable timeline for every Austrian crypto application. Timing depends on classification, document quality, custody involvement, ownership transparency, outsourcing complexity and the number of remediation rounds. A well-prepared low-complexity file can move materially faster than a broad exchange-and-custody model with weak documentation.

Do I need a local AML officer in Austria? +

The key requirement is a credible AML function with real oversight and documented suitability. Whether the role must be structured locally in your case depends on the legal perimeter and operating model. What does not work well is a purely nominal AML appointment with no authority, no time allocation and no access to management.

Can I offer staking with a crypto license in Austria? +

Sometimes yes, but staking must be analysed by structure, not by label. A technical staking interface, validator access service and a managed yield product are not the same from a regulatory perspective. If the operator pools assets, controls strategy, promises returns or combines staking with custody and treasury functions, additional analysis is required.

Can I issue a stablecoin from Austria? +

Stablecoin issuance is a high-sensitivity area. If the token qualifies as an EMT or ART, the project enters a dedicated MiCA regime and should not be treated as a standard crypto exchange or wallet business. Reserve design, redemption mechanics, governance and issuer status all need separate review.

How do I verify whether a company is registered with the FMA? +

You should check the relevant public registers and official sources. The FMA register Austria and related official databases are the primary starting point. You should also compare the legal name, registration details and service description rather than relying only on a website claim or marketing materials.

What happens if I operate without registration or authorization? +

Operating without the required Austrian or EU regulatory status creates serious legal and commercial risk. Consequences may include supervisory action, forced business interruption, banking termination, contractual problems with counterparties and reputational damage. The exact exposure depends on which regime should have applied and what services were actually offered.

Is crypto trading by individuals licensed in Austria? +

No, private investment activity by an individual is not the same as operating a regulated crypto business. Licensing questions arise when a person or company provides services to others on a business basis, such as exchange, custody, transfer, brokerage or issuance-related services. Personal investing and operating a platform are legally different scenarios.

What is the biggest mistake founders make when applying in Austria? +

The biggest mistake is filing before the business model is classified properly. Many founders prepare an AML pack first and only later discover that the product may involve MiCA, MiFID II, EMT/ART or payment-services issues. Correct perimeter analysis at the start usually saves months of delay.

Can RUE help with banking and post-license compliance in Austria? +

Yes. RUE supports not only the legal application, but also company setup, AML documentation, Travel Rule implementation planning, banking coordination and related services such as crypto business bank account, accounting and broader legal services.