CASP (Crypto-Asset Service Provider) License in Italy
Italy’s transition to MiCA (Markets in Crypto-Assets Regulation) has closed. The national VASP regime under the OAM (Organismo Agenti e Mediatori) register has been replaced by a CASP (Crypto-Asset Service Provider) authorisation supervised jointly by CONSOB — which grants authorisations after consulting the Bank of Italy — under Italy’s Legislative Decree 129/2024 implementing MiCA.
The practical timeline is unambiguous: VASPs that filed a CASP application by 30 December 2025 may continue operating until 1 July 2026 or until CONSOB issues a decision, whichever is earlier. VASPs that missed the deadline must cease Italian operations. From 1 July 2026, only fully CONSOB-authorised CASPs or firms passporting from another EU member state may legally provide crypto-asset services to Italian clients.
There is no ready-made Italian CASP to purchase — the CONSOB has not yet issued a stock of pre-authorized entities for transfer. The practical options are: acquire a ready-made OAM-registered VASP that continues operating under the transition window while a CASP application is processed, or apply for a new CASP authorisation from scratch. Capital tiers follow MiCA standards: €50,000 / €125,000 / €150,000 depending on service scope. Italy applies IRES 24% corporate income tax plus IRAP approximately 3.9%.
This page covers OAM-registered Italian VASP entities currently available for acquisition and the full CONSOB CASP authorisation process for new applicants.
Legasset provides full licensing support for both VASP acquisition with CASP transition and new CONSOB filings — entity setup, capital planning, AML/DORA frameworks, and CONSOB liaison.
Our Available VASP & CASP Licenses in Italy
ready to buy licenses:
Slovakian Ready-Made VASP Licensed Сompany for Sale #1
Regulatory Authorizations:
- Fiat-to-Crypto & Crypto-to-Fiat Exchange
- Institutional OTC Trading Desk
- Integrated KYC & AML compliance solutions
- Multi-platform trading via mobile app & web interface
Key Partnerships & Market Access:
- Institutional partnership with Kraken
- Pro Business Agreement with Payward Ltd (Kraken) for enhanced trading capabilities
- Exclusive OTC Desk Access for institutional and high-net-worth clients
Four dedicated IBANs for seamless fiat transactions:
- Ireland (EUR transactions)
- United Kingdom (GBP transactions)
- Italy (Domestic SEPA transactions)
- San Marino (Alternative banking jurisdiction)
Included Assets & Infrastructure:
- Fully established banking relationships and IBANs
- OAM registration and full operational licensing
- Proprietary technology stack, trading infrastructure, and intellectual property
- Complete branding, website, and digital marketing assets
Related EU crypto licences and MiCA resources
Key Takeaways for CASP License in Italy
- MiCA is mandatory now. Italy authorises CASPs via CONSOB with Bank of Italy input; OAM’s VASP register is transitional only. There is no ready-made CASP to buy.
- Two paths to market. You can buy a ready-made OAM-registered VASP that may continue operations and apply for CASP status by 30 December 2025 (operate until 30 June 2026 or decision), or apply for a new CASP.
- Capital and governance. Own funds are €50k–€150k (or 25% of fixed overheads, whichever is higher), plus fit-and-proper directors, a compliance officer, and documented AML and DORA controls.
- Scope and limits. A CASP license can cover exchange, custody, brokerage, and platforms with EU passporting, but reverse solicitation is narrow and order-book pooling with non-EU venues is not allowed.
- Costs and taxes to plan. Budget for CONSOB supervisory fees, possible OAM reporting during transition, audits, DORA tooling, and banking/EMI onboarding; corporate taxes are IRES 24% + IRAP ~3.9%.
- Timelines are practical, not “best case.” From a complete file, expect 3–4 months with regulator Q&A; banking setup can add 3–8 weeks depending on risk profile.
- How Legasset helps. We assist with ready-made VASP acquisition and new CASP applications—covering entity setup, capital planning, governance hiring, AML/DORA frameworks, filings, passporting, and post-license compliance.
What You Need to Know About the CASP License in Italy
Table of Contents
A CASP license lets firms run EU-compliant crypto services: exchange, custody, brokerage, trading platforms, advice, and order handling. It replaces Italy’s VASP registration and enables EU passporting once authorised.
Minimum own funds are €50k–€150k, or 25% of fixed overheads, depending on services. EU establishment is required for marketing; reverse solicitation is narrow.
Key limits up front: strict marketing controls, active site black-outs for unauthorised providers, and ICT-risk rules under DORA. Banking onboarding is feasible but documentation-heavy.
Why now: MiCA is fully in effect, and Italy is processing CASP files under harmonised EU standards.
Regulatory framework, authorities, and rules
Italy implements MiCA via Legislative Decree 129/2024. CONSOB decides authorisations with the Bank of Italy consulted; OAM maintains the legacy VASP register during transition.
Transitional path: OAM-registered VASPs that apply by 30 December 2025 may keep operating until 30 June 2026 or a decision. Italy formalised this via 2025 measures and CONSOB notices.
- AML has tightened: the Bank of Italy extended its CDD, governance, and reporting rules to CASPs in July 2025. Expect deeper internal-control reviews.
- Operational resilience: DORA has applied since 17 January 2025, including registers of ICT providers and incident duties.
- Client asset protection: Italy’s decree introduces segregation of client crypto-assets and funds held by CASPs.
- Tax context: standard corporate rates are IRES 24% plus IRAP ~3.9%; there is no CASP-specific surtax.
- Enforcement posture: CONSOB regularly orders black-outs of illegal crypto sites using new MiCA powers. This affects marketing strategies.
Pathways with Legasset: acquire a ready-made VASP entity that may continue operations and apply for CASP status, or file a new CASP application.
Eligibility Requirements for Obtaining a CASP License in Italy
EU-established companies with a real presence in Italy may apply to become a Crypto-Asset Service Provider (CASP). CONSOB is the decision maker, consulting the Bank of Italy; OAM’s VASP register remains relevant only during the transition. Applicants must have fit-and-proper directors and governance suited to the services sought.
Capital and financial resources
Own funds must equal the higher of €50,000/€125,000/€150,000 by service class or 25% of prior-year fixed overheads. Capital is regulatory, not a spendable working float, and must be maintained on an ongoing basis.
Local presence and compliance oversight
An EU establishment is required to market services; third-country firms cannot target EU clients except via a narrow reverse solicitation route. Applicants must implement AML controls aligned with the Bank of Italy’s July 2025 extension of CDD, governance, and internal-control rules to CASPs, and meet DORA ICT-risk obligations from January 2025.
Documentation and submission
Expect a complete pack covering corporate documents, UBO disclosures, program of operations, risk and AML frameworks, safeguarding arrangements, ICT and outsourcing controls, and senior management CVs. ESMA’s supervisory briefing guides completeness checks and what NCAs expect at authorisation.
Timelines, fees, and hidden costs
Regulators follow MiCA clocks: acknowledgement, completeness review, then decision after a complete file. Real-world timing depends on readiness and Q&A rounds. Applicants also budget for CONSOB fees and ongoing OAM reporting if operating under the Italian transition. Banking onboarding, audit readiness, and ICT testing are frequent hidden costs.
Common challenges and workarounds
Marketing is tightly policed; shared order-book models with non-EU platforms are not allowed. Build a conservative marketing plan and segregated trading architecture. Prepare granular AML evidence and incident-response playbooks to satisfy Bank of Italy AML and DORA checks.
Pathways with Legasset: acquire a ready-made VASP entity that may continue operations and apply for CASP status, or file a new CASP application.
How MiCA Affects CASP Licensing in Italy
MiCA is the EU’s crypto framework that applies from 30 December 2024 for CASPs. In Italy, CONSOB authorises CASPs with the Bank of Italy involved, replacing the prior OAM VASP-only regime. Local registrations must align with MiCA to keep serving EU clients.
What changed under MiCA:
- Prudential capital: €50k/€125k/€150k, or 25% of fixed overheads, by service class. Platforms typically face the upper tier.
- Governance and fit-and-proper: experienced managers, clear lines of responsibility, and documented risk controls.
- Stronger AML/KYC: the Bank of Italy extended CDD and internal-control rules to CASPs in July 2025.
- Consumer protections: disclosures on risks, fees, conflicts, and safeguarding of client assets.
- ICT resilience: DORA applies from 17 January 2025, including incident duties and third-party ICT registers.
Impact in Italy right now: OAM-registered VASPs must re-apply as CASPs; there is no automatic upgrade. Italy’s transition lets eligible VASPs continue if they file by 30 December 2025, with operation permitted until 30 June 2026 or decision. Reverse solicitation is narrow, and shared order books with non-EU platforms are prohibited. Plan for conservative marketing and segregated liquidity.
How we help under MiCA: We structure capital plans for the right tier, upgrade governance with qualified local directors and a compliance officer, and build AML/KYC frameworks aligned to Bank of Italy expectations. We also deliver DORA registers, incident playbooks, and vendor controls. Choose either a ready-made VASP entity that may continue operations and apply for CASP status or a new CASP application in Italy; we manage filings, regulator dialogue, and EU passporting.
Pros & Cons of Acquiring a CASP License in Italy
+ EU passporting under MiCA. One authorisation in Italy allows service across the EU once authorised, replacing local VASP-only models.
+ Defined prudential tiers. Capital set at €50k/€125k/€150k or 25% of fixed overheads, giving clear planning parameters for exchanges, custody and platforms.
+ Transitional runway via OAM. Buying a ready-made VASP lets operations continue if a CASP application is filed by 30 December 2025, with activity allowed until 30 June 2026 or decision.
+ Client asset segregation. Decree 129/2024 introduces segregation of clients’ crypto-assets and funds, strengthening custody propositions.
+ Credible enforcement environment. CONSOB actively blocks abusive crypto sites, improving market trust for licensed operators.
+ Stable tax baseline. Corporate tax is IRES 24% plus IRAP ~3.9%—useful for modelling margins and pricing.
– Strict marketing limits. Third-country firms cannot target EU clients and reverse solicitation is narrow; shared order-book models with non-EU platforms are prohibited. Plan for segregated liquidity and compliant funnels.
– DORA uplift and ICT costs. From 17-01-2025, CASPs face incident reporting, third-party registers and resilience testing—budget time and resources for compliance.
– Banking and onboarding frictions. Local banks scrutinise crypto extensively; many applicants use PI/EMI accounts initially, adding setup time and fees.
(market practice; align with AML intensity)
– Capital must be maintained. Own funds are regulatory and ongoing (not a working float); higher service mix can trigger the €150k tier plus 25% fixed-overheads test.
– Active supervision and site black-outs. Non-compliant marketing or service scope can lead to takedowns—internal approvals and record-keeping are essential.
– Timeline is file-quality dependent. MiCA clocks exist, but Italian reviews include Q&A loops; expect several months from a complete, high-quality file.
How to Get a CASP License in Italy
At the outset, choose your path. You can acquire a ready-made VASP entity that may continue operations and apply for CASP status during Italy’s MiCA transition, or apply for a new CASP from scratch. We facilitate both: entity setup, capital planning, governance hires, AML/DORA frameworks, filings with CONSOB, and post-approval obligations. Italy extended its transition so eligible OAM-registered VASPs that apply by 30 December 2025 may operate until 30 June 2026.
Step-by-Step CASP Licensing Process in Italy
- Step 1: Choose pathway and scope 1-4 weeks
Define services (exchange, custody, brokerage, platform), markets, and client profiles. For a ready-made route, we conduct legal, OAM and tax due diligence before share transfer. For a new build, we incorporate and structure early.
Key Documents: service map, target markets, compliance plan, SPA draft for VASP purchase.
Estimated Cost: legal due diligence and SPA €20,000–€40,000; incorporation €2,000–€5,000.
Timeline: scoping 1–2 weeks; due diligence and incorporation 2–4 weeks. - Step 2: Capitalisation and safeguarding design 1-2 weeks
Set regulatory own funds at the higher of €50k/€125k/€150k or 25% of prior-year fixed overheads. Design client-asset segregation and safeguarding per Italy’s decree.
Key Documents: capital plan, audited financials or projections, safeguarding methodology.
Estimated Cost: capital is balance-sheet funding; advisory €5,000–€10,000.
Timeline: 1–2 weeks for planning. - Step 3: Governance and key function appointments 2-4 weeks
Appoint fit-and-proper directors and a compliance officer. Define roles and outsourcing oversight per ESMA’s supervisory briefing.
Key Documents: board CVs, fit-and-proper forms, organisation chart, responsibilities mapping.
Estimated Cost: search and appointments vary; budget €15,000–€35,000.
Timeline: 2–4 weeks, parallel to Steps 2 and 4. - Step 4: AML/CFT and DORA frameworks 3-5 weeks
Align CDD, monitoring and internal controls with Bank of Italy rules extended to CASPs (July 2025). Implement DORA controls from 17 January 2025 for ICT risk, incident reporting and third-party registers.
Key Documents: AML manual, risk assessment, CDD procedures, STR processes, DORA policy set, incident playbooks, vendor register.
Estimated Cost: policy build and tooling €15,000–€40,000 depending on scale.
Timeline: 3–5 weeks. - Step 5: Build the CASP application dossier 3-5 weeks
Prepare the program of operations, prudential calculations, ICT and outsourcing controls, conflicts and disclosure policies, and client-asset treatment. Italy’s competent authorities are CONSOB and the Bank of Italy under Legislative Decree 129/2024.
Key Documents: application form, program of operations, policies pack, financials, UBO disclosures, contracts, IT architecture.
Estimated Cost: drafting and assembly €25,000–€60,000.
Timeline: 3–5 weeks for a complete pack. - Step 6: File with CONSOB and manage the review 2-4 months
MiCA clocks guide the process: acknowledgment within 5 working days, completeness check within 25 working days, then assessment circa 40 working days after a complete file. Expect Q&A loops. Real cases run 3–4 months end-to-end depending on file quality.
Key Documents: final dossier, responses to RFI, updated policies if requested.
Estimated Cost: CONSOB supervisory contributions per Resolution 23352 and DPCM 2 January 2025; advisory for RFI rounds €5,000–€20,000.
Timeline: 2–4 months from complete file. - Step 7: Banking and payment rails 3-8 weeks
Begin bank or EMI onboarding early. Crypto is scrutinised, so provide AML evidence, governance records and client flows. Many operators start with EMIs, then add a bank once volumes and controls are stable.
Key Documents: KYC pack, compliance attestations, processing forecasts, contracts.
Estimated Cost: onboarding and monthly fees vary; budget €3,000–€10,000 for setup and initial months.
Timeline: 3–8 weeks depending on risk profile - Step 8: Decision, passporting and go-live 1-2 weeks
On authorisation, notify cross-border passporting states. Implement marketing that respects MiCA’s strict limits and ESMA’s stance on reverse solicitation and order-book segregation.
Key Documents: passport notifications, marketing materials, disclosures, client T&Cs.
Estimated Cost: notifications €1,000–€3,000 per state plus advisory.
Timeline: 1–2 weeks for initial passports. - Step 9: Ready-made VASP acquisition specifics 3-6 weeks
If buying a VASP, complete SPA and change-of-control filings, keep OAM reporting current, and file the CASP application by 30 December 2025 to remain active until 30 June 2026 or decision. Pay OAM’s one-time fee for non-individuals €8,300 if not already paid.
Key Documents: SPA, OAM registry confirmation, quarterly OAM reports, CASP filing receipt.
Estimated Cost: purchase price varies; legal transfer €15,000–€30,000; OAM fees per circular.
Timeline: 3–6 weeks for transfer plus the CASP timeline above. - Step 10: Post-licensing operations and audits ongoing
Budget for annual CONSOB contributions, independent audits, ongoing AML reporting to the FIU, DORA testing and incident submissions. Maintain own funds at the required tier.
Key Documents: annual accounts, audit reports, STR procedures, DORA test reports, capital monitoring.
Estimated Cost: annual compliance €20,000–€60,000 depending on scale; CONSOB fees per annual resolution.
Timeline: ongoing obligations per yearly cycle.
- General timeline and cost overview: Plan 4–6 months from kick-off to authorisation for a well-prepared file, plus earlier weeks for structuring and banking. Official MiCA clocks set minimums, but Q&A extends timelines. Costs concentrate on governance hires, policy build, audits, and CONSOB/OAM fees. We manage both routes end-to-end and give fixed-scope quotes after scoping.
- Sources and regulatory anchors: MiCA art. 63 timelines and prudential tiers; Italy’s Legislative Decree 129/2024 designating CONSOB and Bank of Italy; Italy’s transition decisions and OAM obligations; CONSOB Resolution 23352 for supervisory contributions; Bank of Italy AML extension to CASPs; DORA application from 17 January 2025.
Post-Licensing Compliance Obligations for CASP in Italy
Authorisation is the start, not the finish. Italian CASPs must maintain own funds at the required MiCA tier, keep client assets segregated, and meet ongoing reporting, AML, and ICT-resilience duties. Breaches can trigger fines, black-outs, or licence withdrawal by CONSOB. DORA also applies, adding incident and vendor-risk obligations.
- AML/KYC monitoring. CASPs follow the Bank of Italy’s extended rules on customer due diligence, governance, and internal controls. Suspicious transactions must be filed to the UIF via the INFOSTAT-UIF portal with timely responses to follow-up requests.
- Audits and regulatory filings. Expect annual financial audits and periodic supervisory contributions/returns to CONSOB. Enforcement is active: the authority routinely orders site black-outs for abusive offerings, so marketing review and record-keeping matter post-licence.
- ICT and operational resilience. From 17 January 2025, DORA requires a register of ICT third-party providers, testing, and incident reporting across the group. Align playbooks and contracts to these duties.
- Tax and accounting. Maintain standard Italian corporate obligations (IRES/IRAP) and accurate revenue recognition for crypto services; coordinate with local auditors. (General tax baseline; specifics vary by model.)
- Changes and approvals. Notify CONSOB of scope changes, passport updates, or control shifts; during the transition, VASPs that applied for CASP must keep OAM reporting current.
- Penalties for non-compliance. Failures can lead to fines, suspensions, black-outs, or revocation. Recent press releases underline a low tolerance for breaches.
How Legasset supports. We provide ongoing compliance operations: AML monitoring set-up, UIF reporting workflows, DORA registers and testing, audit readiness, supervisory fee/calendar management, and change-control filings—so your licence remains robust under Italian and EU rules.
Common Pitfalls and Challenges of Operating Under a CASP in Italy
Operating as a CASP in Italy brings clear advantages, but there are practical hurdles that require planning. Most are manageable with the right structure, documentation, and monitoring.
- Banking and payments. Local banks scrutinise crypto flows and onboarding can stall without strong AML evidence. Many firms start with EMI accounts, then add a bank once policies, monitoring, and volumes mature.
- Marketing and market access. Reverse solicitation is narrow and actively policed; non-EU order-book pooling is not allowed. Passporting requires accurate disclosures and country-specific client terms.
- Compliance upkeep. Own funds must be maintained at the correct tier, and the fixed-overheads test can lift the threshold during growth. DORA adds incident reporting, testing, and third-party registers that need continuous updates.
- Governance and staffing. Regulators expect fit-and-proper directors and a named compliance officer with real authority. Outsourcing does not remove accountability and requires documented oversight.
- Transition specifics. If you operate via an OAM VASP during the window, keep OAM reporting current until the CASP decision. Change-of-control, service changes, or new geographies may require prior notifications.
- Audits and filings. Annual financial audits, supervisory returns, and UIF suspicious transaction reporting need a defined calendar and evidence trail.
How Legasset helps. We prepare banking packs, design compliant marketing funnels, calibrate capital to service mix, implement DORA playbooks, and run governance and AML upgrades. Our team manages OAM reporting, passport notifications, and audit readiness so operations stay aligned with Italian and EU rules.
FAQ About Purchasing a CASP License in Italy
What is a CASP license in Italy and who needs it?
A CASP license in Italy authorises crypto services under MiCA and supervision by CONSOB with input from the Bank of Italy. You need it to run exchange, custody, brokerage, or platform services and market them across the EU via passporting. Next steps: set up an EU-established entity, appoint a compliance officer, and prepare a full program of operations.
Can I buy a ready-made CASP license in Italy, or only a VASP?
Italy does not offer ready-made CASP licenses. You can purchase a ready-made VASP entity that may continue operations and apply for CASP status during the transition. Practical path: complete share purchase, keep OAM reporting current, and file the CASP application by the national deadline.
What are the capital and staffing requirements for a CASP license in Italy?
Expect own funds of €50,000–€150,000 (or 25% of fixed overheads, whichever is higher) based on services. Authorities expect fit-and-proper directors and a named compliance/AML officer with real oversight. Prepare documented AML/KYC, governance, and DORA ICT frameworks before filing.
How long does Italy’s CASP authorisation take and what are the hidden costs?
From a complete file, plan 3–4 months including Q&A, not best-case claims. Hidden costs include banking/EMI onboarding, independent audits, supervisory contributions, and DORA tooling for incident reporting and third-party registers.
Does a CASP license in Italy allow fiat on-ramping and are there marketing limits?
A CASP license can cover fiat on-ramp/off-ramp when structured with compliant payment partners and safeguarding. Marketing is restricted: reverse solicitation is narrow and shared order books with non-EU venues are not allowed. Build segregated liquidity and country-specific disclosures.
How can Legasset help with a CASP license in Italy and MiCA transition?
We source an OAM-registered VASP or build a new CASP from scratch, then manage CONSOB filings and regulator dialogue. Our team handles capital planning, governance hires, AML/KYC policies, DORA registers, banking setup, passport notifications, and ongoing audits—plus full MiCA transition support for EU crypto companies.
Additional Links and Resources for CASP License in Italy
The Commissione Nazionale per le Società e la Borsa (CONSOB) is Italy’s primary market regulator responsible for CASP authorisations under Legislative Decree 129/2024. This page provides official notices, MiCA implementation updates, and application guidelines for crypto-asset service providers.
II. Bank of Italy – AML/CFT Supervision
The Bank of Italy oversees AML/CFT compliance for CASPs, extending its due diligence and internal control rules to crypto operators as of July 2025. This page outlines current anti-money laundering obligations and supervisory communications.
III. EU MiCA Regulation (Regulation (EU) 2023/1114)
The full text of the Markets in Crypto-Assets Regulation (MiCA), defining EU-wide rules for crypto-asset issuers and service providers, including capital, conduct, and consumer protection requirements.
IV. EU DORA Regulation (Regulation (EU) 2022/2554)
The Digital Operational Resilience Act (DORA) sets ICT-risk and incident-reporting obligations for CASPs and other financial entities. This source details key technical and organisational requirements effective from 17 January 2025.
V. OAM – Register of Virtual Currency Operators
The Organismo Agenti e Mediatori (OAM) maintains Italy’s VASP register. Existing OAM-registered firms can continue operations during the MiCA transition and apply for CASP status before 30 December 2025. The site provides registration procedures, reporting deadlines, and fee details.
