Regulated United Europe OÜ
Registration number: 14153440
Anno: 16.11.2016
Phone: +372 56 966 260
Email: [email protected]
Address: Laeva 2, Tallinn, 10111, Estonia
MiCA License in Croatia 2026
Obtain MiCA-compliant CASP authorisation in Croatia with RUE. Legal support for exchanges, custodians, brokers, token issuers, and EU market entry planning.
Request MiCA Eligibility Assessment
Regulator
HANFA
Timeframe
4-8 months
Cost
from €19,900
Capital
€50k-€150k
Authority split may involve HANFA and HNB depending on token and service perimeter.
Why Croatia for a MiCA License
Croatia offers an EU base for crypto-asset businesses seeking MiCA authorisation and passporting rights. RUE helps founders map the regulatory perimeter, prepare the CASP file, and align governance, AML, ICT, and operating model with Croatian and EU expectations.
As your point of contact, I help coordinate the licensing process end-to-end, keep communication clear, and move your application forward without unnecessary delays.
Regulated United Europe supports MiCA licence projects in Croatia from scoping to filing and post-authorisation readiness. We prepare legal classification memos, application documents, governance packages, AML/CFT and Travel Rule frameworks, ICT and outsourcing policies, and regulator-facing responses.
Our team also assists with Croatian company setup, banking strategy, tax coordination, internal controls, and passporting planning so the application file reflects a real operating model rather than a template submission.
EU Passporting Potential
After authorisation and notification, a Croatian MiCA licence can support cross-border services across the EU under the MiCA passporting framework.
Clear Perimeter Analysis
Croatia is suitable where the business model is correctly mapped between MiCA, MiFID II, EMT/ART rules, and payment or e-money legislation.
Compliance-First Launch
The regulator will assess governance, safeguarding, AML/CFT, complaints handling, outsourcing, and ICT resilience—not only incorporation documents.
Substance and Operations
A Croatian company can be used as the operating vehicle, but real management, local execution capacity, and credible control functions matter more than a nominal setup.
Comprehensive Requirements for Croatia MiCA License
Obtaining a MiCA license in Croatia requires more than company formation and a generic compliance manual. A Croatian applicant must demonstrate that it understands its regulatory perimeter under Regulation (EU) 2023/1114, has adequate own funds, can protect client assets, and can operate a controlled crypto business on a day-to-day basis.
In practice, the most important first step is to determine whether the business is a CASP under MiCA, an issuer of EMTs or ARTs, or a project that falls outside MiCA and into another regime such as MiFID II or e-money/payment services law. In Croatia, applicants should also confirm the current split of competence between HANFA and the Croatian National Bank (HNB) for their specific model before filing.
Below are the core requirements that usually determine whether a CASP application is regulator-ready in Croatia.
Correct Regulatory Classification +
Your project must first be classified correctly. This means identifying whether you provide one or more crypto-asset services under MiCA, whether your token is an EMT, an ART, another crypto-asset, or whether it is actually a financial instrument under MiFID II.
- If the token gives equity-like, debt-like, or other investment rights, MiCA may not be the right path.
- If the token references a single official currency, EMT analysis is required.
- If the token references a basket of assets, currencies, or rights, ART analysis is required.
- If the activity is fully decentralised in substance, MiCA scope must be assessed very carefully rather than assumed.
A wrong classification at the start often causes the longest delays later, because the regulator will test the economic substance of the product, not the label used in marketing materials.
Minimum Own Funds and Capital Planning +
MiCA sets minimum own-funds thresholds depending on the services provided. The most common reference points are €50,000, €125,000, and €150,000. These figures are not informal market estimates; they are prudential anchors tied to the service mix.
- €50,000 typically applies to lower-risk service sets such as reception and transmission of orders, advice, portfolio management, or transfer services.
- €125,000 typically applies to custody and administration of crypto-assets on behalf of clients, exchange of crypto-assets for funds, or exchange of crypto-assets for other crypto-assets.
- €150,000 typically applies to operation of a trading platform for crypto-assets.
Capital must be distinguished from the total launch budget. The applicant also needs funding for legal work, compliance staffing, AML tooling, security architecture, audit, accounting, and operational runway.
Croatian Company Setup and Real Substance +
The applicant usually needs a Croatian legal entity capable of holding the authorisation and running the business. However, incorporation alone is not enough. The regulator will look for effective management, credible decision-making, and operational substance appropriate to the risk profile of the services offered.
- Registered office in Croatia is expected.
- Management presence and governance must be real, not nominal.
- Outsourced functions must remain under oversight of the licensed entity.
- Board reporting lines, escalation paths, and local records should be documented.
For many applicants, the practical question is not whether a large office is legally mandatory, but whether the structure demonstrates that the Croatian company genuinely controls the regulated activity.
Management, UBOs and Fit-and-Proper Package +
The applicant must present a management and ownership structure that can pass a fit-and-proper review. This usually includes directors, senior managers, control function holders, shareholders, and ultimate beneficial owners.
- Detailed CVs and evidence of relevant financial services, crypto, risk, or compliance experience.
- Declarations on reputation, conflicts of interest, and time commitment.
- Ownership chart showing direct and indirect holdings.
- Source-of-funds and source-of-wealth support where relevant.
- Criminal record and other background evidence where required by the competent authority.
A common weakness in CASP files is a management team that understands product and growth, but cannot evidence prudential, AML, custody, or control experience.
AML/CFT and Travel Rule Framework +
A Croatian MiCA applicant must show an operational AML/CFT framework, not only a policy document. In 2026, this also means integrating obligations under the EU Transfer of Funds Regulation (TFR) for crypto transfers.
- Business-wide risk assessment tailored to products, channels, geographies, and customer types.
- CDD and EDD procedures for retail, corporate, high-risk, and PEP clients.
- Sanctions screening and adverse media checks.
- On-chain transaction monitoring and escalation rules.
- Travel Rule data collection, transmission, reconciliation, and exception handling.
- Suspicious transaction reporting workflow and record retention.
Industry messaging standards such as IVMS101 are not mandated by name in law, but they are widely used to operationalise Travel Rule interoperability between CASPs.
ICT Security, Custody and Safeguarding Controls +
If the business model involves custody, wallet infrastructure, or client asset flows, the application must describe how assets and access rights are protected in practice. Regulators increasingly expect evidence-based controls rather than generic cybersecurity language.
- Wallet architecture: hosted, omnibus, segregated, hot/cold split.
- Private key controls: HSM, MPC, multisig, backup and recovery.
- Access management, privileged-user logging, and segregation of duties.
- Reconciliation procedures for client assets and internal records.
- Incident response, breach escalation, and business continuity planning.
- Vendor due diligence and outsourcing oversight for cloud, custody, KYC, and analytics providers.
For custody models, the regulator will expect a clear explanation of who can move assets, under what approvals, and how that is evidenced in logs and governance records.
Programme of Operations and Financial Model +
The application must explain how the CASP will operate, who it will serve, what services it will provide, and how risks will be controlled. A credible programme of operations is usually supported by a business plan and financial projections for at least several years.
- Description of each regulated service and customer journey.
- Target markets, distribution channels, and cross-border strategy.
- Revenue model, fee logic, and expected transaction volumes.
- Operational dependencies on group entities or third parties.
- Stress assumptions, liquidity planning, and cost base.
- Complaints handling, conflicts management, and governance reporting.
The regulator will compare the financial model against staffing, technology, and compliance assumptions. If the business plan promises exchange and custody at scale but budgets almost nothing for AML monitoring or security, that inconsistency will be noticed immediately.
White Paper and Issuer-Side Disclosures +
If the project involves a public offer of crypto-assets or admission to trading, issuer-side obligations may apply in parallel with or separately from CASP obligations. For many token projects, the key document is the MiCA white paper.
- Ordinary crypto-asset offers may require a white paper unless an exemption applies.
- EMTs and ARTs face stricter requirements than other crypto-assets.
- The white paper must function as a regulated disclosure document, not a marketing brochure.
- Risk factors, token rights, technology risks, reserve mechanics, and complaints channels must be described accurately.
Issuer obligations and CASP obligations should never be merged into one generic compliance pack. They are related, but legally distinct.
Jurisdiction Comparison
Compare MiCA licence in Croatia with other jurisdictions by key conditions for obtaining and operating a MiCA/CASP license: regulator, review period, fees, capital, local substance, and passporting.
* This table focuses on MiCA/CASP authorization conditions. Use the settings icon to customize countries and parameters.
Tax and Reporting Considerations for Crypto Businesses in Croatia
Crypto taxation in Croatia should be analysed separately from MiCA authorisation. A MiCA licence in Croatia does not determine the tax treatment of the business, and tax treatment depends on whether the activity is carried on by an individual investor, a trader, a Croatian company, or a group structure with cross-border flows.
For individuals, Croatian practice has long treated many crypto disposals under a capital gains framework, with a commonly cited rate of 12% plus applicable local surcharge mechanics where relevant under the rules in force for the relevant tax year. A widely discussed practical nuance is the two-year holding period, which may affect whether certain gains are taxed. This area should always be checked against current guidance from the Croatian Tax Administration (Porezna uprava).
For companies, profits from crypto-related operations are generally assessed under the ordinary corporate income tax regime. The applicable rate depends on the company’s tax position and the thresholds in force for the relevant year. Because rates and thresholds can change, they should be verified against official Croatian sources before launch or restructuring.
In 2026, founders should pay at least as much attention to reporting transparency as to headline tax rates. The EU DAC8 framework and the OECD CARF architecture materially increase the compliance burden for crypto businesses with reportable users, cross-border structures, or exchange-type activity.
What usually requires separate tax analysis
- Corporate trading profits versus treasury holdings
- Custody and exchange fee income
- Staking, lending, mining, or validator-related income streams
- VAT treatment of advisory, software, and platform services
- Transfer pricing for group structures using foreign tech or liquidity entities
- DAC8 reporting perimeter for reportable users and transactions
RUE coordinates licensing and tax work together, but tax advice should always be validated on the exact fact pattern before implementation.
Corporate Income Tax
Applies to Croatian companies carrying on crypto business activity
verify 2026
Corporate Income Tax
Applies to Croatian companies carrying on crypto business activity
Corporate profits of a Croatian CASP or crypto company are generally taxed under the ordinary Croatian corporate income tax regime. The exact rate and threshold depend on the company’s status and the rules in force for the relevant tax year. Before launch, confirm the applicable 2026 rate with Croatian tax advisers or official sources.
Individual Capital Gains
Commonly relevant for personal crypto disposals
12%*
Individual Capital Gains
Commonly relevant for personal crypto disposals
A 12% capital gains rate is commonly referenced in Croatia for relevant individual crypto gain scenarios, subject to the legal conditions of the transaction and the tax year concerned. A practical nuance often discussed is the two-year holding rule, which may affect taxability. This must be checked against current Croatian tax guidance and the taxpayer’s exact facts.
*General market reference only; not a substitute for personalised tax advice.
VAT
Depends on service type and transaction structure
case-specific
VAT
Depends on service type and transaction structure
VAT treatment of crypto-related services in Croatia depends on the type of service provided. Exchange activity may be treated differently from software licensing, advisory, token design, or white-label technology services. MiCA authorisation does not by itself determine VAT treatment. A transaction-level review is recommended before invoicing clients.
DAC8 / CARF Reporting
Transparency and data reporting overlay for crypto businesses
reporting duty
DAC8 / CARF Reporting
Transparency and data reporting overlay for crypto businesses
From 2026, crypto businesses with reportable users or transactions may face expanded tax transparency obligations under DAC8, aligned with the OECD Crypto-Asset Reporting Framework (CARF). This matters even if the underlying tax rate does not change, because classification, customer data collection, and reporting logic become audit-sensitive.
Accounting and Audit Costs
Ongoing financial reporting and control environment
from €8,000+
Accounting and Audit Costs
Ongoing financial reporting and control environment
A Croatian CASP should budget for bookkeeping, year-end reporting, and—depending on scale and structure—statutory or voluntary audit support. Costs vary with transaction volume, number of wallets, fiat rails, and group complexity. Crypto reconciliation and wallet-level bookkeeping usually increase accounting cost compared with an ordinary trading company.
AML / Compliance Tooling
Recurring cost rather than tax, but material to operating budget
from €12,000+
AML / Compliance Tooling
Recurring cost rather than tax, but material to operating budget
Ongoing compliance spend usually includes KYC onboarding tools, sanctions screening, blockchain analytics, case management, Travel Rule messaging, and periodic policy updates. These are not taxes, but they are part of the real cost base of maintaining a MiCA-compliant Croatian operation.
Local Substance and Staffing
Management, control functions, and office footprint
variable
Local Substance and Staffing
Management, control functions, and office footprint
The cost of local substance depends on whether the applicant uses in-house staff, seconded group functions, or approved outsourcing. Budgeting should cover directors, compliance support, MLRO function, accounting, legal maintenance, and office or registered premises. For many CASPs, staffing and control functions cost more over time than the initial filing itself.
Compliance and Ongoing Obligations After Authorisation
A Croatian MiCA licence is not a one-time filing exercise. After authorisation, the CASP must maintain governance, safeguarding, AML/CFT, reporting, and operational controls on a continuous basis.
Regulatory Reporting
- Periodic prudential and operational reporting as required by the competent authority
- Annual financial statements and, where applicable, audit support
- Incident and breach notifications within the required regulatory framework
- Notification of material changes in ownership, management, outsourcing, or business model
- Record retention supporting regulator review and internal audit trails
AML, KYC and Travel Rule
- Customer due diligence and risk-based onboarding
- Enhanced due diligence for high-risk clients, PEPs, and complex structures
- Sanctions screening and adverse media checks
- Transaction monitoring, blockchain analytics, and escalation workflow
- Travel Rule compliance for crypto transfers under the EU TFR
Operational and ICT Controls
- Segregation and safeguarding of client crypto-assets and client funds where relevant
- Private key governance, access control, and privileged-user logging
- Business continuity, disaster recovery, and incident response procedures
- Outsourcing oversight for cloud, custody, KYC, and payment vendors
- Complaints handling, conflicts management, and governance reporting
Annual Maintenance
- Review and update of internal policies and procedures
- Fit-and-proper monitoring for directors and key function holders
- Staff training on MiCA, AML/CFT, sanctions, and operational changes
- Periodic testing of safeguarding, reconciliation, and incident controls
- Preparation for passporting notifications or expansion changes
RUE handles compliance for you. Our team provides ongoing compliance support, including AML officer services, regulatory reporting, and policy updates. We ensure your license stays in good standing year after year.
Contact us for compliance support →
MiCA License in Croatia in 2026: Executive Summary
MiCA License in Croatia in 2026: what changed and who needs authorisation
A business that provides regulated crypto-asset services in or from Croatia will generally need a MiCA authorisation unless the activity falls outside MiCA or into another EU regime. The legal basis is Regulation (EU) 2023/1114, which created a harmonised framework for crypto-asset service providers (CASPs) and certain token issuers across the EU.
For founders, the practical change is simple: old assumptions based on fragmented local crypto registration models are no longer sufficient. In 2026, the regulator will assess the actual service perimeter, governance, safeguarding, AML/CFT controls, ICT security, outsourcing, and cross-border operating model. A website, a Croatian company, and a generic AML policy are not enough.
In Croatia, the first legal question is not “how fast can the licence be obtained?” but “what exactly is being licensed?” The answer may involve HANFA, the Croatian National Bank (HNB), or a completely different regime if the token qualifies as a financial instrument under MiFID II. That perimeter analysis determines the filing strategy, capital threshold, and document set.
- CASP authorisation is relevant for exchanges, brokers, custodians, trading platforms, advisers, portfolio managers, and transfer service providers.
- EMT and ART projects require separate issuer analysis and may involve stricter rules than ordinary crypto-assets.
- Passporting is available only after authorisation and notification, not from day one of incorporation.
- Travel Rule compliance under the EU TFR must be built into operations, not added later as a patch.
This page explains the Croatian regulator split, capital thresholds, document checklist, process, token issuance rules, tax caveats, and the most common reasons MiCA files fail.
📝 Check Your Eligibility
Answer a few quick questions to find out if this jurisdiction suits your crypto business
Step 1 of 5
What type of crypto services will you provide?
Exchange (fiat ↔ crypto)
Custody & Wallet Services
Transfer & Payment Services
Advisory / Portfolio Management
Multiple / All of the Above
Step 2 of 5
What is your target market?
European Union only
EU + Global markets
Global (non-EU priority)
Step 3 of 5
Do you already have a registered company in the EU?
Yes, in this jurisdiction
Yes, in another EU country
No, I need to register one
Step 4 of 5
What is your available budget range?
Under €20,000
€20,000 – €50,000
€50,000 – €100,000
Over €100,000
Step 5 of 5
When do you plan to launch?
As soon as possible (1–3 months)
Within 6 months
Within a year
Just exploring options
This Jurisdiction Is a Great Fit!
Based on your answers, this jurisdiction matches your business requirements well. Here's a quick summary:
Recommended License
CASP License
Estimated Budget
€24,000 – €35,000
Estimated Timeframe
4–6 months
EU Passporting
Available
Step-by-Step MiCA Licensing Process
Step 1
Scope and Classification
Define the exact service perimeter, token type, and Croatian authority split. Confirm whether the model is a CASP case, an issuer case, an EMT/ART case, or partly outside MiCA under MiFID II. Typical duration: 1-3 weeks.
Step 2
Company and Structure
Set up or adapt the Croatian legal entity, ownership chain, governance map, and substance model. Align directors, control functions, outsourcing logic, and operational footprint with the intended services. Typical duration: 2-4 weeks.
Step 3
Gap Assessment
Test readiness across AML/CFT, Travel Rule, safeguarding, ICT security, complaints handling, conflicts, and financial planning. This is where most hidden weaknesses appear before filing. Typical duration: 1-2 weeks.
Step 4
Documentation Build
Prepare the programme of operations, policies, governance package, financial projections, ICT and custody documentation, outsourcing register, and ownership disclosures. Typical duration: 4-10 weeks depending on complexity.
Step 5
Application Filing
Submit the completed file to the competent Croatian authority and organise the supporting annexes in a regulator-readable format. A clean filing structure materially reduces later requests for clarification. Typical duration: 1-2 weeks.
Step 6
Regulator Review
The authority reviews the file and usually sends follow-up questions or requests for information. Responses must stay consistent across legal, financial, AML, and technical documents. Typical duration: several months depending on file quality and service complexity.
Step 7
Approval and Launch
After authorisation, finalise operational controls, banking or EMI/PSP arrangements, staff training, client documentation, and internal reporting. If cross-border expansion is planned, prepare the passporting notification as a separate post-authorisation step.
Frequently Asked Questions
Main Services
Terms of Cooperation
Regulated United Europe
