Since 2010, the Global Law Experts annual awards have been celebrating excellence, innovation and performance across the legal communities from around the world.
posted 2 hours ago
Ireland has rapidly established itself as one of the most credible and accessible jurisdictions for firms seeking a MiCA NCA Ireland authorisation to operate crypto-asset services across the European Union. With the Central Bank of Ireland (CBI) processing and granting its first MiCA CASP authorisations during 2025, the jurisdiction offers a proven regulatory pathway, English-language engagement, and full EU passporting capability. This guide provides a practical, regulator-grounded roadmap for non-EU and EU firms preparing to apply for an Irish MiCA licence covering every step from pre-application scoping through to cross-border passporting.
The Markets in Crypto-Assets Regulation (MiCAR), formally Regulation (EU) 2023/1114, is the EU’s comprehensive framework governing the issuance, offering and provision of services relating to crypto-assets. It covers Crypto-Asset Service Providers (CASPs), issuers of Asset-Referenced Tokens (ARTs) and E-Money Tokens (EMTs), and establishes harmonised conduct, prudential and governance rules across all EU Member States.
Under MiCA, each Member State designates a National Competent Authority (NCA) to receive, assess and decide on CASP authorisation applications. The Central Bank of Ireland has been designated as Ireland’s NCA for MiCAR purposes, with statutory responsibility for authorising, supervising and where necessary sanctioning CASPs operating from Ireland.
The central commercial advantage of an Irish MiCA authorisation is EU passporting: once a firm is authorised by the CBI, it may notify host-state NCAs and provide its authorised crypto-asset services across all EU and EEA Member States without obtaining separate licences in each jurisdiction. For US, UK and other non-EU firms, this creates a single gateway to the world’s largest regulated digital-asset market.
The Central Bank of Ireland has a well-established track record as a financial services regulator, overseeing banking, insurance, funds and payments. Its approach to MiCA is consistent with this heritage: rigorous but accessible, with a strong emphasis on supervisory engagement before and during the authorisation process. Ireland is one of few NCAs operating entirely in English, which substantially reduces documentation and communication friction for international applicants.
Ireland offers a favourable corporate environment for financial services firms. Common structures include Irish-incorporated private limited companies with locally resident directors. The CBI expects meaningful substance including local senior management and compliance functions and applicants should plan for genuine operational presence rather than brass-plate arrangements. Ireland’s corporate tax regime is well understood by international businesses, and professional services infrastructure for fund administration, audit and legal support is deep.
Dublin hosts a mature financial services ecosystem, with established banking relationships, specialist compliance consultancies, and technology providers experienced in regulatory onboarding. This ecosystem is a practical advantage: securing banking services, appointing compliance officers, and sourcing ICT infrastructure can all be achieved locally, which accelerates the application timeline and demonstrates substance to the CBI. Industry observers expect Ireland’s position to strengthen further as more CASPs cluster in the jurisdiction and service-provider capacity expands.
The Central Bank of Ireland is the single point of contact for all MiCA-related authorisation and supervision in Ireland. Applicants file all materials directly with the CBI, and the CBI is responsible for maintaining Ireland’s CASP register. All statutory instruments giving effect to MiCAR in Ireland are published on the CBI’s dedicated MiCAR landing page, which should be treated as the primary reference for regulatory expectations.
Applicants should review and internalise the CBI’s core guidance materials before beginning their application. These include:
From 2 April 2026, all CASP authorisation applications must be submitted via the Central Bank’s online portal. Applicants should familiarise themselves with the portal’s document upload and attestation requirements well in advance to avoid delays at the point of filing.
The MiCA application Ireland process is intensive but well-defined. Below is a ten-step roadmap aligned with CBI expectations and ESMA’s Supervisory Briefing on the Authorisation of CASPs under MiCA.
Step 0: Pre-application scoping. Map your business model to the CASP service classes defined in MiCA (custody, trading, exchange, transfer, advice, portfolio management, etc.). Identify your cross-border footprint, target markets and outsourcing dependencies. Early engagement with the CBI typically through a pre-application meeting is strongly recommended.
Step 1: Fitness & probity and senior management mapping. Identify all persons who will hold Pre-Approval Controlled Functions (PCFs) and Controlled Functions (CFs). Prepare Fitness & Probity (F&P) questionnaires, CVs, reference checks and declarations for each individual. The CBI will assess competence, probity and financial soundness of all proposed senior managers.
Step 2: Governance and organisational framework. Establish a board of directors with appropriate independence and expertise. Draft terms of reference for board committees (risk, audit, compliance, nomination). Document your organisational chart, reporting lines and three-lines-of-defence model.
Step 3: AML/CFT readiness. Conduct a firm-wide money laundering and terrorist financing risk assessment. Develop and document your customer due diligence (CDD) and enhanced due diligence (EDD) procedures, transaction monitoring programme, and suspicious activity reporting (SAR) processes. Appoint a Money Laundering Reporting Officer (MLRO) with sufficient authority and resources.
Step 4: ICT and operational resilience. Document your ICT governance framework, including cybersecurity controls, business continuity planning, disaster recovery and incident response. Address outsourcing arrangements particularly cloud and third-party technology providers in line with MiCA and CBI expectations. Ensure alignment with the Digital Operational Resilience Act (DORA) requirements where applicable.
Step 5: Prudential and capital arrangements. Determine your minimum capital requirement based on the CASP service classes you intend to operate. Prepare evidence of capital instruments (equity, reserves) and safeguarding arrangements for client assets. Establish clear segregation of client funds from proprietary assets.
Step 6: Financial projections, business plan and whitepaper notifications. Prepare a three-year financial projection and a detailed business plan covering products, markets, revenue model, staffing and risk appetite. If you intend to issue crypto-assets, prepare and notify the required whitepaper under MiCA Title II.
Step 7: Drafting the application pack. Compile all required documents into the prescribed format: application form, board resolutions approving the application, all policies and procedures, capital evidence, F&P packs and attestations. Use the CBI’s Authorisation and Supervision Expectations guidance note as your document checklist. A comprehensive Ireland MiCA NCA application checklist is available for download see the MiCA application checklist (download) resource for the full document list.
Step 8: Submission via the Central Bank Portal. Submit the completed application pack via the CBI’s online portal (mandatory from 2 April 2026). Pay the applicable application fee. Confirm receipt and reference number with the CBI.
Step 9: Supervisory engagement and remediation. Following submission, the CBI will review the application and typically issue requests for information (RFIs) or remediation queries. Respond promptly, comprehensively and with board-level sign-off where required. Maintain a log of all regulator interactions and outstanding items.
Step 10: Decision, registration and passporting. Upon satisfactory assessment, the CBI will grant authorisation and enter the firm on Ireland’s CASP register. The authorised firm may then initiate the passporting notification process with host-state NCAs to begin offering services in other EU Member States.
| CASP Activity Class | Typical Capital Requirement (EUR) | Documentation Intensity | Estimated Timeline |
|---|---|---|---|
| Custody / safekeeping only | €125,000 – €500,000 | Medium | 4 – 6 months |
| Trading platform operation | €150,000 – €1,000,000+ | High | 6 – 12 months |
| Exchange services (fiat on-ramp) | €150,000 – €2,000,000+ | Very high | 8 – 14 months |
| Transfer / execution of orders | €125,000 – €500,000 | Medium – High | 4 – 8 months |
| Advice / portfolio management | €125,000 – €350,000 | Medium | 4 – 7 months |
Important caveat: The capital figures and timelines above are indicative ranges based on publicly available information and industry experience. Exact requirements depend on the specific CASP activities, delegated Regulatory Technical Standards (RTS) and Implementing Technical Standards (ITS), and the CBI’s individual assessment of each applicant. Applicants should not treat these figures as binding.
MiCA prescribes minimum initial capital requirements that vary by CASP service class, with the lowest thresholds applying to firms offering advice or transfer services and higher thresholds for trading platforms and exchanges. Beyond initial capital, firms must maintain ongoing capital buffers typically calculated as a proportion of fixed overheads or a percentage of safeguarded client assets, whichever is higher. The CBI may impose additional capital requirements where it identifies elevated risk profiles.
The total cost of obtaining a CASP licence in Ireland extends well beyond the statutory capital requirement. Applicants should budget for the following categories:
| Cost Category | Low Estimate (EUR) | Mid Estimate (EUR) | High Estimate (EUR) |
|---|---|---|---|
| Legal and advisory fees | €80,000 | €200,000 | €500,000+ |
| Compliance and AML/CFT build | €30,000 | €100,000 | €250,000+ |
| ICT and security remediation | €20,000 | €80,000 | €200,000+ |
| F&P checks and HR onboarding | €10,000 | €30,000 | €60,000 |
| Application and annual regulatory fees | €5,000 | €15,000 | €30,000 |
| Capital (initial requirement) | €125,000 | €500,000 | €2,000,000+ |
Note: These estimates exclude banking onboarding costs (which can be significant for crypto firms) and ongoing operational expenditure post-authorisation. All figures are editorial estimates only and do not constitute a fee quote.
The CBI’s processing time depends significantly on the quality and completeness of the application at submission. A well-prepared custody-only applicant with clean governance and straightforward operations may receive a decision within four to six months. Complex multi-service firms particularly those operating fiat on-ramps, extensive outsourcing chains, or novel token products should plan for eight to fourteen months or longer, especially where material remediation is required during the assessment phase. ESMA has emphasised that NCAs should not compromise assessment rigour in favour of speed, so applicants should prioritise completeness over haste.
The CBI expects all proposed directors, senior managers and holders of controlled functions to satisfy its Fitness & Probity standards. Boards must demonstrate collective expertise in financial services, technology, risk management and compliance. Risk management frameworks must be documented and tested, with clear escalation paths and board-level oversight.
Firms previously registered as Virtual Asset Service Providers (VASPs) under Ireland’s anti-money laundering framework may be eligible for a simplified procedure under MiCA’s transitional provisions. However, AML/CFT standards for full CASP authorisation are significantly more demanding than VASP registration, and applicants should not assume their existing frameworks are sufficient without a detailed gap analysis.
The CBI aligned with ESMA supervisory expectations applies heightened scrutiny to ICT governance, cybersecurity controls and outsourcing arrangements. Custody providers must demonstrate robust key management, segregation of client assets from proprietary holdings, and clear contractual arrangements with any third-party technology or infrastructure providers.
Applicants must provide board minutes evidencing oversight, adopted policies (AML, risk, ICT, complaints handling, conflicts of interest), internal audit plans, and financial statements. The CBI’s expectations document provides a granular checklist of required evidence. Incomplete applications are the single most common cause of delay.
Based on publicly available CBI guidance and ESMA’s supervisory briefing, the following are among the most frequent reasons applications are delayed, returned for remediation, or refused:
The most effective mitigation is a structured pre-application programme: conduct a regulatory gap analysis against the CBI’s authorisation expectations document; run a mock supervisory Q&A session with senior management; complete all F&P packs before filing; and ensure that every policy submitted is not only drafted but adopted, tested and evidenced with board minutes. A pre-audit of ICT and AML/CFT controls ideally by an independent third party substantially reduces the risk of extended remediation cycles.
Authorisation is the beginning, not the end, of the regulatory relationship. Authorised CASPs must comply with ongoing reporting obligations (including financial returns, complaints data and significant incident notifications), maintain capital adequacy at all times, and submit to periodic CBI supervisory reviews. Governance structures and policies must be kept current and adapted to reflect changes in services, markets or risk profile.
An Irish-authorised CASP may passport services to other EU Member States by notifying the CBI, which in turn communicates with the relevant host-state NCA. The notification must specify the services to be offered, the target Member States and the arrangements for local compliance. Not all services may be passportable in identical form; host-state marketing rules, language requirements and local AML cooperation obligations may apply.
Before launching in a new Member State, firms should: confirm that the passporting notification has been acknowledged; appoint a local compliance point of contact; review host-state consumer-protection and marketing rules; establish AML information-sharing arrangements with host-state financial intelligence units; and update the firm’s risk assessment to reflect the new jurisdiction’s risk profile. The CBI has published warning notices for consumers regarding unauthorised crypto-asset service providers, underscoring that operating without proper authorisation or passporting carries significant enforcement risk.
The Central Bank of Ireland authorised multiple CASPs during 2025, as reflected in its Annual Report 2025, confirming that the Irish MiCA authorisation pathway is operational and producing outcomes. The CBI continues to publish guidance, host industry briefings and update its FAQ materials signals that applicants should interpret as evidence of both regulatory maturity and sustained scrutiny. Industry observers expect Ireland’s volume of MiCA applications to continue increasing through 2026 as firms that delayed during the transitional period now move to full authorisation.
Find the right Legal Expert for your business
Sign up for the latest advisor briefings and news within Global Advisory Experts’ community, as well as a whole host of features, editorial and conference updates direct to your email inbox.
Naturally you can unsubscribe at any time.
Global Advisory Experts is dedicated to providing exceptional advisory services to clients around the world. With a vast network of highly skilled and experienced advisors, we are committed to delivering innovative and tailored solutions to meet the diverse needs of our clients in various jurisdictions.
