Updated for 2026. In Croatia, crypto licensing is now assessed under the EU MiCA framework. For most operating models, the practical question is CASP authorization and post-approval EU passporting.
Prepared by RUE editorial team · Updated 12 May 2026
Request MiCA readiness assessmentYes, there is a workable crypto license path in Croatia in 2026. For most exchanges, brokers, custodial wallet operators, transfer providers, advisers and portfolio managers, the relevant regime is CASP authorization under Regulation (EU) 2023/1114 (MiCA). Older statements that Croatia has no crypto license are outdated.
The key distinction is legal, not semantic: a CASP authorization is not the same as token issuance compliance. If a project issues crypto-assets, or deals with ARTs or EMTs, separate MiCA obligations may apply in parallel, and the Croatian National Bank (HNB) may become relevant depending on the structure.
For founders, the real decision points are four: whether the activity is a regulated crypto-asset service, whether the Croatian entity has sufficient substance, whether the AML/Travel Rule/DORA stack is operational, and whether the business model needs only CASP status or also an EMI or payment structure.
At RUE, we structure Croatia projects around the actual legal perimeter: CASP, issuer, EMT/ART, or hybrid fiat-crypto model. We prepare MiCA application files, AML and ICT documentation, regulator-facing remediation responses, and the linked workstreams for banking, accounting and EU expansion.
In 2026, the phrase crypto license in Croatia usually means CASP authorization under MiCA, not a legacy standalone local crypto permit.
HANFA is the key authority for most crypto-asset service providers, while HNB becomes relevant where token type or payment structure changes the regulatory perimeter.
Minimum own-funds thresholds under MiCA are commonly structured around EUR 50,000, EUR 125,000 or EUR 150,000, depending on the services provided.
A Croatian CASP can generally expand across the EU through notification mechanics, but passporting does not remove local tax, consumer-law or banking constraints.
Croatia’s MiCA transitional period ended on 1 July 2026. Legacy VASP status no longer provides a basis for continuing in-scope crypto-asset services; providers must meet the applicable MiCA authorisation or notification requirements.
A viable 2026 application requires governance, AML/CFT, sanctions controls, Travel Rule implementation, outsourcing oversight and DORA-grade ICT resilience.
Compare MiCA Class 1, Class 2 and Class 3 by permitted activities and baseline requirements.
| Activity / Option | Mica Class 1 - 50 000 EUR | Mica Class 2 - 125 000 EUR | Mica Class 3 - 150 000 EUR |
|---|---|---|---|
| Reception and transmission of orders | V | V | V |
| Execution of orders on behalf of clients | V | V | V |
| Advisory and portfolio management | V | V | V |
| Crypto-fiat and crypto-crypto exchange | X | V | V |
| Custody and administration of crypto-assets | X | V | V |
| Operation of a trading platform | X | X | V |
A Croatian crypto application succeeds only if the business model, governance and control framework match MiCA in substance. Regulators do not assess a slide deck; they assess whether the applicant can operate a regulated crypto business on day one and continue doing so safely after launch.
The minimum review perimeter usually includes:
A shell company with outsourced everything is a weak file. Outsourcing is permitted, but responsibility remains with the authorized entity. That point is often underestimated in crypto structures built around foreign tech vendors.
The first question is whether the activity is a regulated crypto-asset service. Typical in-scope services include custody and administration of crypto-assets for clients, operation of a trading platform, exchange of crypto-assets for funds, exchange of crypto-assets for other crypto-assets, execution of orders, reception and transmission of orders, placing, advice, portfolio management and transfer services.
Under Article 67 of MiCA, prudential safeguards must cover the higher of the applicable EUR 50,000, EUR 125,000 or EUR 150,000 service threshold and one quarter of annual fixed overheads. New businesses use projected overheads for their first 12 months. Qualifying own funds, qualifying insurance or a comparable guarantee, or a permitted combination may be used.
Directors and key managers must be demonstrably suitable. The file must support competence, good repute, time commitment, role clarity and effective oversight. Nominee-style arrangements without real control are structurally weak.
Croatian presence must be real. The applicant should show operational substance, governance presence, documented decision-making and a credible control environment in Croatia. Substance is not reduced to a registered office.
Crypto AML is a system, not a policy PDF. The firm needs onboarding rules, risk scoring, sanctions and PEP screening, blockchain analytics, transaction monitoring, escalation procedures, suspicious activity reporting logic and Travel Rule data exchange for in-scope transfers.
Cybersecurity is part of licensing, not a post-launch upgrade. Regulators expect access control, incident handling, logging, backup, disaster recovery, change management, vendor oversight and testing. A useful practical signal is whether the firm can evidence its control set against ISO 27001 or a comparable framework.
Outsourcing does not outsource accountability. If KYC, transaction monitoring, wallet infrastructure, cloud hosting or customer support are delegated, the applicant still needs contracts, oversight, exit planning, concentration-risk analysis and board-level control.
Weak documentation delays or derails the process. The file should include a program of operations, business plan, financial projections, governance map, AML manual, risk assessment, ICT policy set, outsourcing register, complaints policy, conflicts policy and client-asset handling documentation.
Compare Croatia with other jurisdictions by key conditions for obtaining and operating a MiCA/CASP license: regulator, review period, fees, capital, local substance, and passporting.
6 jurisdictions in this table
* This table focuses on MiCA/CASP authorization conditions. Use the settings icon to customize countries and parameters.
Get an approximate cost estimate for your crypto license based on your business needs
Select options below to see estimated costs
Estimated Cost
€0
Estimated Timeframe
Country-specific
Capital Requirement
€0
* This calculator provides approximate estimates only. Actual costs may vary based on your specific situation. Contact us for a detailed personalized quote.
Tax analysis for a Croatian crypto business must separate company taxation from personal taxation. That distinction is where many summaries become misleading. A founder’s personal crypto gains and a licensed company’s operating income are not taxed under the same logic.
For companies, Croatian corporate income tax is generally discussed at two rates: 10% for taxpayers below the relevant revenue threshold and 18% above it. Threshold application should always be verified for the current tax year and the exact entity profile. For a CASP, the tax base depends on recognized income and deductible costs under ordinary corporate tax rules, not on retail crypto-tax folklore.
For individuals, taxable crypto capital gains are generally subject to a 12% rate. Local surtax was abolished from 1 January 2024 and should not be added to that rate. Holding-period exemptions, the classification of the activity and reporting obligations require separate assessment. These personal-tax rules do not replace the corporate tax analysis for a CASP.
VAT requires separate attention. Certain exchange-related services may follow the EU line developed around financial-service treatment, but token issuance, advisory, software, SaaS and ancillary services can produce different outcomes. A CASP should also prepare for future data-reporting pressure under DAC8, even where the tax cash cost is not immediate.
Real cost planning should include more than taxes: legal drafting, MLRO/compliance staffing, audit, accounting, Travel Rule integration, blockchain analytics, cloud security, local directors or senior managers, office substance and banking onboarding all affect the total cost of ownership.
A Croatian CASP is not a one-time filing project. The operating model must remain compliant across AML, governance, client protection, ICT resilience and cross-border activity.
Answer a few quick questions to find out if this jurisdiction suits your crypto business
Based on your answers, this jurisdiction matches your business requirements well. Here's a quick summary:
Recommended License
CASP License
Estimated Budget
€24,000 – €35,000
Estimated Timeframe
4–6 months
EU Passporting
Available
Define exactly which MiCA services the Croatian entity will provide. This determines whether the project is a CASP, an issuer case, or a hybrid structure needing broader analysis.
Set up the Croatian entity, ownership chain and governance model. Confirm whether the business also needs payment, EMT or other regulatory analysis beyond CASP.
Identify whether HANFA is the primary authority and whether HNB or other frameworks become relevant because of stablecoin, redemption or fiat-flow features.
Appoint credible management, allocate responsibilities, document local substance and prepare fit-and-proper support for directors, senior managers and owners.
Prepare the program of operations, AML/CFT manual, risk assessment, Travel Rule model, ICT and DORA-aligned policies, outsourcing register and client-protection documents.
Confirm the applicable own-funds bucket, arrange capital support and align financial projections with the actual cost of compliance, staffing and technology.
Submit the application, manage completeness review and answer substantive regulator questions with evidence-based revisions rather than generic explanations.
After authorization, finalize banking and vendor readiness, implement ongoing monitoring and use MiCA notification mechanics before expanding into other EU markets.
Open the key issues founders, compliance teams and legal leads usually need to confirm before launch.
Yes. Crypto activity is not outside the law in Croatia in 2026. The relevant question is which EU and Croatian rules apply to the exact model. For most operating businesses, the main framework is MiCA, with related obligations under AML/CFT, the Travel Rule and DORA.
Yes, but the correct legal term is usually CASP authorization. In practice, when founders ask about a crypto license in Croatia, they usually mean authorization as a crypto-asset service provider under MiCA. Token issuers and stablecoin-related projects may fall under separate MiCA rules.
For most CASP models, HANFA is the key authority. The Croatian National Bank (HNB) becomes relevant where the structure touches ART, EMT or adjacent payment and prudential questions. The exact split depends on the business model, not on branding alone.
MiCA captures a defined list of crypto-asset services. These include custody and administration, operation of a trading platform, exchange for funds, exchange for crypto-assets, execution of orders, placing, reception and transmission of orders, advice, portfolio management and transfer services.
The applicable service threshold is EUR 50,000, EUR 125,000 or EUR 150,000, but the actual prudential requirement may be higher: Article 67 requires comparison with one quarter of annual fixed overheads. New providers use projected first-year overheads. The safeguards must satisfy MiCA’s requirements for own funds, insurance or a comparable guarantee, or a combination.
A realistic end-to-end timeline is usually 3-6+ months, not just the formal review clock. The process includes pre-filing preparation, entity and substance setup, documentation build, completeness review, substantive review and one or more remediation rounds.
The file usually includes corporate documents, ownership and UBO evidence, a program of operations, business plan, financial projections, governance map, AML/CFT policies, risk assessment, ICT policies, outsourcing documentation, complaints handling and client-asset procedures. The exact list varies by model.
Yes, generally through MiCA notification mechanics. Authorization in Croatia can support expansion across the 27 EU member states. However, passporting does not remove local marketing, consumer-law, tax or banking issues in the target state.
No. Licensing helps, but it does not guarantee a bank account, direct infrastructure access or frictionless SEPA connectivity. Banks and payment partners still run their own AML, risk and commercial onboarding analysis.
The transitional period ended on 1 July 2026. A legacy provider that lacks the required MiCA authorisation or another applicable legal basis must stop providing in-scope services. A pending application does not extend the expired transition period.
Yes, foreign ownership is generally possible, but transparency is mandatory. The ownership chain, ultimate beneficial owners, source of funds and governance arrangements must be clear and support a fit-and-proper assessment. Foreign ownership does not remove the need for Croatian substance.
Not always. A token or stablecoin project may require issuer analysis under MiCA rather than, or in addition to, CASP authorization. If the structure involves EMTs, ARTs, redemption mechanics or fiat payment flows, the legal perimeter can widen materially.
