Since 2010, the Global Law Experts annual awards have been celebrating excellence, innovation and performance across the legal communities from around the world.
posted 2 months ago
Last updated: 29 April 2026
Liechtenstein has emerged as one of the EEA’s most purposeful jurisdictions for digital-asset regulation, and 2026 marks the year in which three compliance regimes converge on every crypto business operating from or through the principality. Firms that previously relied on Liechtenstein’s Token and Trustworthy Technologies Act (TVTG) registrations must now determine whether they need a full Liechtenstein CASP licence 2026 under the Markets in Crypto-Assets Regulation (MiCAR), prepare for EEA-wide passporting of that authorisation, and simultaneously build the data infrastructure required by the Crypto-Asset Reporting Framework (CARF). This guide provides the practical, step-by-step compliance roadmap that decision-makers, in-house counsel and compliance officers need, covering licensing thresholds, application checklists, passporting mechanics and the new crypto-asset transparency reporting obligations now in force.
Before diving into regulatory detail, the following five action items capture the critical decisions facing digital-asset firms in Liechtenstein today:
Crypto is legal in Liechtenstein. The principality has actively encouraged digital-asset innovation since the TVTG entered into force in 2020. The question is not legality but correct licensing, and the regulatory bar has risen substantially with MiCAR and CARF.
Three overlapping legal instruments now govern digital-asset activities in Liechtenstein. Understanding their scope, and which rule takes precedence for a given business model, is the first step toward compliance with the Liechtenstein CASP licence 2026 requirements.
Liechtenstein’s Token and Trustworthy Technologies Act (TVTG), commonly known as the “Blockchain Act”, entered into force on 1 January 2020. It introduced the Token Container Model, a civil-law framework that allows virtually any right or asset to be represented as a token on a distributed ledger. The TVTG created registration categories for service providers, including token issuers, token generators, physical validators and key custodians, supervised by the FMA. Critically, the TVTG remains the governing framework for tokenisation mechanics, civil-law treatment of tokens and non-financial-services activities. It has not been repealed by MiCAR; instead, the two regimes coexist, each governing its own domain.
The Markets in Crypto-Assets Regulation (MiCAR), Regulation (EU) 2023/1114, establishes a harmonised EEA-wide licensing and conduct regime for crypto-asset service providers (CASPs). MiCAR defines ten categories of crypto-asset services, including custody, exchange, transfer, order execution, placement, advice and portfolio management, and requires any entity performing these services within the EEA to obtain authorisation from its home-state competent authority. As an EEA/EFTA state, Liechtenstein incorporates MiCAR through the EEA Agreement. The FMA serves as the competent authority for CASP authorisation in Liechtenstein. Provisions concerning asset-referenced tokens (ARTs) and e-money tokens (EMTs) carry additional prudential and reserve requirements that may layer on top of the general CASP framework.
MiCAR takes precedence over TVTG for any activity that falls within its scope. Where an entity’s services constitute “crypto-asset services” as defined in MiCAR, the firm must hold a CASP authorisation, a TVTG registration alone will not suffice. However, for activities outside MiCAR’s definitions (such as the tokenisation of traditional assets or purely civil-law token transfers), the TVTG remains the applicable framework.
Liechtenstein is subject to MiFID II through EEA incorporation. Where a crypto-asset qualifies as a financial instrument under MiFID II, for example, a security token representing equity or debt, MiFID licensing (rather than MiCAR) applies. MiCAR explicitly excludes financial instruments, deposits, insurance products and pension products from its scope. This creates a three-tier classification task: determine whether the asset is a MiFID financial instrument, a MiCAR crypto-asset, or a token governed solely by the TVTG.
The OECD’s Crypto-Asset Reporting Framework (CARF) was finalised in 2023 and has been incorporated into the CRS framework via amendments adopted by Liechtenstein. According to the Liechtenstein Fiscal Authority (LLV), CARF reports must be submitted for reporting periods as of 2026. This means that CASPs and other reporting crypto-asset service providers must begin collecting reportable data from the start of 2026 and transmit reports to the LLV in the format and timeline prescribed. CARF operates alongside the existing Common Reporting Standard (CRS) automatic exchange framework, adding a crypto-specific data layer for international tax transparency.
Not every blockchain-related business needs a CASP licence, but the scope is broad. The decisive question is whether the entity provides one or more of MiCAR’s defined crypto-asset services to third parties on a professional basis within Liechtenstein or cross-border into the EEA.
The following activities trigger CASP authorisation under MiCAR when performed in relation to crypto-assets:
Activities that remain purely within the TVTG domain, such as token generation for one’s own account, physical validation (mining) without custodial elements, or development of blockchain infrastructure, generally do not require a CASP licence, though a TVTG registration may still apply.
Several business models sit in grey areas that require careful analysis:
The practical test is control: if the entity holds, moves or manages client crypto-assets, or facilitates their exchange, the likely practical effect will be that a CASP licence in Liechtenstein is required.
The FMA has confirmed CASP authorisations in Liechtenstein, and the application process follows a structured sequence. Practitioners familiar with the process report that thorough preparation, particularly a pre-application meeting with the FMA, materially reduces processing time and the risk of rejection.
Applicants must establish a Liechtenstein legal entity (typically an Aktiengesellschaft (AG), Gesellschaft mit beschränkter Haftung (GmbH) or Anstalt) with a registered office and place of effective management in Liechtenstein. Key governance requirements include:
A comprehensive AML/CFT programme must be submitted with the application. The FMA assesses this against Liechtenstein’s Due Diligence Act (SPG) and the EEA anti-money-laundering directives. The programme must include:
For CASPs providing custody or operating trading platforms, the FMA requires detailed documentation of IT infrastructure, cybersecurity policies, key management systems, disaster recovery plans and business continuity arrangements. Applicants must demonstrate segregation of client assets and describe the technical controls preventing unauthorised access to private keys.
| Document | Why Needed | Typical Source |
|---|---|---|
| Articles of association / constitutional documents | Legal entity formation proof | Liechtenstein Public Register |
| Business plan (3-year financial projections) | Demonstrates commercial viability and capital adequacy | Applicant / financial adviser |
| Programme of operations | Describes services, target markets, customer types | Applicant |
| Governance and organisational manual | Proves fit-and-proper management, clear reporting lines | Applicant / compliance consultant |
| AML/CFT manual and risk assessment | SPG compliance, regulator expectation | AML/compliance officer |
| IT security policy and penetration test results | Cybersecurity and key management assurance | IT team / external auditor |
| UBO declarations and fit-and-proper documentation for directors | Regulatory transparency, shareholder suitability | Directors / shareholders / notary |
| Proof of minimum capital | Own-funds requirement under MiCAR | Bank confirmation / auditor |
| Professional indemnity insurance (where applicable) | Alternative to higher own-funds in certain categories | Insurer |
| Client asset segregation policy | Custody safeguard requirement | Applicant / custodian |
One of the most compelling reasons to obtain a Liechtenstein CASP licence 2026 is the ability to passport crypto-asset services across the entire EEA, all 27 EU member states plus Iceland and Norway, without requiring separate authorisation in each jurisdiction. As an EEA/EFTA member, Liechtenstein’s FMA-issued CASP authorisations carry the same passporting rights as those issued by any EU member state’s competent authority under MiCAR.
The passporting mechanism under MiCAR follows a notification model rather than an approval model. Once authorised in Liechtenstein, the CASP notifies the FMA of its intention to provide services in one or more host EEA states. The FMA then transmits the notification, including details of the services to be offered and the target markets, to the host-state competent authorities. The host state does not approve or reject the notification; it may only impose local marketing rules and consumer-protection requirements that are compatible with MiCAR.
Early indications suggest the following practical sequence:
Passporting via Liechtenstein offers several advantages. The principality’s compact regulatory environment allows for direct interaction with the FMA. Liechtenstein’s long track record with the TVTG means the regulator has deep institutional knowledge of blockchain-native business models. For firms comparing jurisdictions, a useful reference is our comparison of VASP/crypto licensing across top jurisdictions. Additionally, firms launching a crypto exchange may find Liechtenstein’s passporting route particularly efficient for accessing multiple EU markets from a single licence.
However, passporting does not eliminate all host-state obligations. Firms must still comply with local language requirements for client communications, host-state advertising rules and any applicable consumer-protection provisions. Maintaining a register of host-state obligations is essential.
The Crypto-Asset Reporting Framework introduces a new automatic exchange-of-information standard specifically for crypto-assets. According to the Liechtenstein Fiscal Authority (LLV), CARF reports must be submitted for reporting periods as of 2026. This is not a future obligation, it is operational now, and firms must already be collecting the required data.
Reporting crypto-asset service providers (RCASPs) under CARF must capture and store the following data fields for every reportable transaction:
Firms must map these fields against their existing database schemas and, in most cases, implement new data-capture workflows. The OECD’s CARF technical guidance provides the standardised XML schema that jurisdictions, including Liechtenstein, are expected to adopt for transmission.
Under Liechtenstein’s implementation, the entity that qualifies as an RCASP (essentially, any entity effectuating exchange transactions or transfers on behalf of customers) bears the reporting obligation. Reports are transmitted electronically to the LLV, which then exchanges the data with partner jurisdictions under bilateral or multilateral competent authority agreements. The LLV’s guidance specifies the transmission channel and format requirements. Firms should consult the LLV’s dedicated CARF guidance page for the latest filing calendar and technical specifications.
CARF does not replace the CRS. Financial institutions that already report under CRS must continue to do so. Where a crypto-asset service provider also holds traditional financial accounts (for example, fiat on-ramp balances), both CRS and CARF reporting obligations may apply simultaneously. Firms need dual compliance processes, though the data collection infrastructure can be shared. For firms also active in North America, parallel obligations may exist, our guide to obtaining an MSB licence in the US covers the American reporting landscape.
Obtaining a CASP licence is only the starting point. Day-one operational compliance requires that all systems, policies and personnel be fully functional from the moment the authorisation is granted.
CASPs that outsource custody or key management to third-party providers must ensure that outsourcing arrangements comply with MiCAR requirements. The CASP remains fully responsible to the FMA and to clients for outsourced functions. Contracts must include clear provisions on liability, audit rights, incident notification, data access and termination. For deeper context on what the CASP designation entails under MiCA, firms should review the regulatory definitions carefully before entering outsourcing arrangements.
The following table helps firms self-diagnose their likely obligations under the 2026 Liechtenstein regulatory framework:
| Entity Type | Licence / Registration Required (Liechtenstein 2026) | Primary Reporting and Passporting Implications |
|---|---|---|
| Exchange / Trading venue | CASP authorisation (FMA) for execution, exchange and order-matching activities | CARF reporting required for all reportable exchange transactions; MiCAR EEA passporting available upon authorisation |
| Custodian / Wallet provider | CASP authorisation (custody category); TVTG registration may also apply for token-specific elements | CARF data collection for custodial transfers; strong AML/CFT obligations; passporting covers custody services across EEA |
| Token issuer (utility / security) | TVTG token registration; MiCAR white-paper obligations for crypto-assets; MiFID licence if the token qualifies as a financial instrument | MiCAR prospectus/white-paper requirements for ARTs and EMTs; CARF reporting where issuer also acts as intermediary |
| Broker / OTC desk | CASP authorisation (reception/transmission of orders, execution on behalf of clients) | CARF reporting for matched transactions; passporting allows cross-border brokerage across EEA |
| Payment / Transfer service provider | CASP authorisation (transfer services); potential additional payment-services licence if fiat activities are involved | CARF reporting for facilitated transfers; must comply with both MiCAR conduct rules and payment-services regulation where applicable |
The convergence of MiCAR, CARF and the TVTG in 2026 creates both obligation and opportunity for digital-asset firms in Liechtenstein. The principality’s streamlined regulatory access, deep institutional expertise and EEA passporting capability make it an attractive base, but only for firms that meet the compliance bar. The following 30/60/90-day action plan provides a structured path forward:
Firms that act now retain the advantage of entering the FMA’s review pipeline ahead of the 30 June 2026 transition cut-off. Those that delay risk operating without a valid licence, a regulatory and commercial risk that no serious digital-asset business can afford. The Liechtenstein CASP licence 2026 process is demanding but navigable with proper preparation, and the payoff, full EEA market access from a single authorisation, is substantial.
For an initial licence-readiness assessment or to discuss your firm’s specific regulatory position, visit the Global Law Experts lawyer directory to connect with qualified Liechtenstein counsel experienced in digital-asset regulation.
This article was produced by Global Law Experts. For specialist advice on this topic, contact Josef Bergt at Bergt Law, a member of the Global Law Experts network.
Find the right Legal Expert for your business
Sign up for the latest advisor briefings and news within Global Advisory Experts’ community, as well as a whole host of features, editorial and conference updates direct to your email inbox.
Naturally you can unsubscribe at any time.
Global Advisory Experts is dedicated to providing exceptional advisory services to clients around the world. With a vast network of highly skilled and experienced advisors, we are committed to delivering innovative and tailored solutions to meet the diverse needs of our clients in various jurisdictions.
