MiCA License in Latvia 2026

You must first determine whether your model actually falls within CASP authorization under MiCA. Relevant services may include:

• custody and administration of crypto-assets on behalf of clients;
• operation of a trading platform for crypto-assets;
• exchange of crypto-assets for funds;
• exchange of crypto-assets for other crypto-assets;
• execution of orders, reception and transmission of orders, placing of crypto-assets;
• portfolio management, advice on crypto-assets, and transfer services.

This perimeter analysis matters because some projects need more than a CASP license. If you issue tokens, arrange admission to trading, or work with ARTs or EMTs, separate MiCA issuer obligations may apply, including white paper and stablecoin-related rules.

The applicant normally operates through a Latvian capital company, most commonly an SIA. The corporate structure must be transparent from day one.

• Full disclosure of ultimate beneficial owners (UBOs) is required.
• Shareholders and qualifying holders must pass suitability review.
• The ownership chain must be documented up to the natural persons exercising control.
• Foreign corporate documents may require apostille, notarization, and sworn translation depending on origin.

Latvijas Banka will look beyond the registry extract. Complex holding chains, nominee features, trust-like opacity, or unexplained shareholder funding usually trigger enhanced scrutiny.

Capital requirements under MiCA depend on the services provided. As a rule of thumb:

• Class 1: from €50,000;
• Class 2: €125,000;
• Class 3: €150,000.

MiCA does not stop at initial capital. The CASP must maintain own funds at least equal to the higher of:

• the applicable minimum initial capital; or
• one quarter of the fixed overheads of the preceding year.

Example: if fixed overheads are €600,000, the prudential floor is €150,000. If fixed overheads are €320,000, one quarter is €80,000, so a Class 2 firm would still need €125,000.

Capital should be demonstrably paid in, traceable, and supported by source-of-funds evidence. Crypto-funded capitalization without clean fiat traceability is usually problematic.

Management suitability is a core approval factor. Latvijas Banka will assess whether directors and key function holders have the competence, time commitment, and integrity required for the proposed service mix.

• Board and senior management must understand the actual crypto business model, not just generic finance concepts.
• Control functions typically include AML/MLRO, compliance, and risk ownership proportionate to scale.
• Conflicts of interest must be identified, documented, and managed.
• Outsourcing does not remove board accountability.

Regulators usually react negatively to part-time figurehead directors, compliance officers with no crypto exposure, or founders trying to outsource all control functions without internal oversight.

A CASP in Latvia must operate under a business-specific AML/CFT framework aligned with the Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing, MiCA-adjacent supervisory expectations, and the EU TFR.

• CDD/EDD procedures for onboarding and ongoing review;
• PEP and sanctions screening;
• KYT / blockchain analytics for wallet and transaction risk scoring;
• suspicious transaction reporting escalation to the Latvian FIU where required;
• Travel Rule data collection and transmission for qualifying crypto transfers;
• recordkeeping, staff training, and periodic independent review.

A practical 2026 expectation is interoperability with Travel Rule data standards such as IVMS101 and integration with screening and case-management tools via API or webhook architecture.

Technology is a licensing issue, not just an IT issue. A Latvia MiCA applicant must show secure operational design, especially if it handles custody, transfer services, or exchange flows.

• wallet architecture and key management model;
• HSM or MPC-based security where relevant;
• access control, privileged user monitoring, and audit logs;
• incident response, BCP/DR, and vendor escalation procedures;
• cloud outsourcing register and critical vendor due diligence;
• segregation of duties between engineering, operations, treasury, and compliance.

For custody-heavy models, regulators often expect evidence of reconciliation logic, key ceremony procedures, hot/cold wallet governance, and documented client asset segregation methodology.

The application must include a coherent operating model, not just a marketing deck. The core file usually includes:

• programme of operations describing each CASP service;
• customer segments, distribution channels, and geographic strategy;
• transaction flows, safeguarding logic, and outsourcing map;
• 12-36 month financial projections with realistic assumptions;
• risk assessment and internal control matrix;
• runway analysis showing how the business remains solvent during ramp-up.

One frequent regulator red flag is a revenue model that assumes immediate high volumes while budgeting almost nothing for compliance staff, KYT tooling, security testing, or legal support.

Latvia is not a paper-license jurisdiction. The applicant should be able to demonstrate real operational substance proportionate to its model.

• registered office and practical operating arrangements in Latvia;
• decision-making capacity, not only outsourced administration;
• availability of key personnel for regulator interaction and ongoing supervision;
• documented procedures for complaints handling, incident management, and customer disclosures.

Remote setup is possible for many preparatory steps, but a fully remote, founder-only structure with no credible governance footprint will usually struggle in authorization.