Crypto License in Bosnia and Herzegovina

No, not as a single nationwide permit comparable to an EU CASP authorization. In Bosnia and Herzegovina, the legal analysis depends on the entity where the business is established, the exact services provided, and whether the model overlaps with regulated financial activity, AML obligations, or only general commercial operations.

No. Bosnia and Herzegovina is not an EU member state, so a local setup does not provide MiCA passporting across the EU or EEA. If you need EU-wide regulated crypto-asset services, you should assess an EU CASP route instead.

It usually means a legally structured crypto business setup rather than one standardized license document. In practice, founders use the phrase to describe company formation, legal analysis, AML framework design, tax registration, and banking preparation for a crypto-related activity in the jurisdiction.

There is no single short answer. The relevant authority depends on the legal issue: company registration, tax administration, AML/CFT obligations, or possible overlap with financial-sector regulation. Bosnia and Herzegovina has a decentralized legal structure, so the competent body must be identified case by case.

Usually yes, if you want a local operating presence. A local company is typically needed for contracts, staffing, tax registration, accounting, and banking. The exact legal form and governance structure should match the real service model and the relevant entity-level legal environment.

No. Company registration is only the corporate starting point. A live exchange-type operation also needs AML controls, customer onboarding procedures, sanctions screening, transaction monitoring, accounting design, and a workable banking or payment setup. Without that, the business may be legally fragile and operationally unbankable.

Yes, in practice you should assume AML/KYC controls are essential. Even where no dedicated crypto license is clearly codified, banks, counterparties, and advisers will expect a documented framework for customer due diligence, beneficial owner checks, sanctions screening, suspicious activity escalation, and record retention.

Foreign ownership is possible in many business structures, but the exact setup must be checked case by case. The key issues are not only ownership itself but also disclosure of beneficial owners, management structure, source of funds, and whether the business model creates additional regulatory or banking concerns.

A registered address and real operational substance are different things. Some models can start with lean local presence, but if the company presents itself as an exchange, broker, or custody-related operator, banks and counterparties may expect evidence of actual management, accountable staff, and documented controls rather than a paper-only setup.

There is no universal statutory timeline because there is no single uniform crypto license process. Timing depends on the business model, company formation route, document readiness, banking complexity, and whether additional legal analysis is needed for regulated activity. In practice, banking readiness often takes longer than incorporation.

The main risk is treating the jurisdiction as lightly regulated and underbuilding controls. Founders often focus on incorporation speed while neglecting AML architecture, sanctions controls, wallet auditability, and bankability. That creates problems with counterparties, payment access, and future expansion into more regulated markets.

You should usually choose an EU CASP route when your target is regulated service provision in the EU. If the model includes exchange, custody, transfer, execution, advice, or platform operation for EU clients, a MiCA/CASP strategy is typically more appropriate than relying on a non-EU setup in Bosnia and Herzegovina.