Polish VASP and MiCA CASP License
Poland’s transition from a national VASP registration to a MiCA Crypto-Asset Service Provider (CASP) authorisation is in progress — and the regulatory timeline is specific.
Under Poland’s alignment with MiCA, KNF (Komisja Nadzoru Finansowego) will become the competent CASP authority once the national legislation enters into force. The transition period has been extended to 1 July 2026: existing, pre-registered VASPs may continue operating until that date. New VASP registrations have been closed since 1 October 2025.
The practical implication: firms seeking crypto operations in Poland today must either acquire an existing registered VASP entity — to operate during the transition window — or prepare a full MiCA CASP dossier now, ready to file the moment KNF formally opens the process.
A Polish MiCA CASP licence provides the same EU-level authorisation as any other MiCA CASP — full passporting across 27 EEA member states for exchange, custody, transfer, and platform services. Capital requirements run €50,000–€150,000 depending on services offered, plus fixed overheads test.
This page covers available Polish VASP entities for transition acquisition and outlines the full MiCA CASP application process in Poland.
Our team handles both paths — VASP acquisition with compliance review, and full CASP dossier preparation for KNF filing on day one.
Ready to Buy VASP Licenses in Poland
Polish Crypto Company with VASP License #1
- Registration Date: 03.12.2024
- Transaction History: With activity (2024)
- VASP License: Active, GIIF reports are submitted
- Ownership Transfer: Fully online via S24
- Legal Address: Real, valid until 12.2025
- Accounting: Active, reports submitted, 550 zl net.\Month
- Share Capital: 5,000 PLN (Paid)
- AML Documentation: Complete package
- VAT payer +
- Condition: change the company name when transferring ownership
- Banks: PKO Bank
- P2P Exchanges: None
Polish Crypto Company with VASP License for Sale #2
- Registration Date: 25/11/2024
- Transaction History: clean
- VASP License: Active, GIIF reports submitted without delays
- Ownership Transfer: Fully online via S24
- Accounting: expired, reports submitted
- Share Capital: 5,000 PLN
- AML Documentation: Complete package
- Banks: ING
- P2P Exchanges: none
Polish VASP License for Sale #3
- Legal Form: Limited Liability Company (Sp. z o.o.)
- Incorporation Date: 2024
VASP License:
- Registered & compliant
- Local Address: Established
- Share Capital: 5,000 PLN
- Shareholder: 1 Individual
- Crypto Register Entry (VASP): December 2024
Polish Company with SPI & VASP Licenses for Sale #4
Details:
- SPI + VASP licences (full payment & crypto permissions)
- Bank account: Revolut Bank (LT)
- GIIF registration: submitted
- No active business or clients
Provides:
- Payment services & money remittance
- Crypto–fiat & crypto–crypto exchange, intermediation, and account maintenance
Related EU crypto licences and regulatory updates
Key Takeaways
- AML register, not a licence. A Polish VASP is an AML status only and does not grant MiCA-level operating rights or passporting.
- Hard transition deadline. Legacy VASPs may operate only until 1 July 2026 if a MiCA application is filed on time.
- Service scope drives capital. MiCA own-funds and governance obligations depend on the exact crypto services authorised.
- KNF supervision is intensive. The regulator applies a documentation-driven approach with strong focus on governance and controls.
- Substance matters in practice. Even without a formal ESR regime, decision-making and AML oversight must be operationally real.
- Banking remains a constraint. Licensing does not guarantee bank or EMI access; onboarding depends on risk appetite and AML quality.
- Ongoing compliance is material. CASPs face continuous reporting, capital maintenance, and notification duties post-authorisation.
- Legasset’s role. We support VASP acquisitions, MiCA readiness assessment, CASP license adaptation, governance structuring, and regulator-facing execution in Poland.
How the VASP and MiCA CASP License Works
Table of Contents
Legacy Polish VASP Register: Scope and Limits
Poland’s VASP regime functioned as an AML register under the national AML Act. Registration confirmed obliged-entity status but imposed no prudential supervision. It did not create an EU licence or passporting rights.
Banks and institutional counterparties treated this status cautiously. The register provided market entry but limited regulatory credibility. Under MiCA, its relevance is transitional only.
Shift to MiCA: Full Supervision under KNF
MiCA introduced a financial-services authorisation supervised by Komisja Nadzoru Finansowego (KNF). This is a structural change, not an extension of AML rules.
Supervisory roles are split:
- KNF authorises and supervises CASP license Poland.
- GIIF remains responsible for AML reporting and enforcement.
- NBP becomes relevant where electronic-money tokens or payment services overlap.
This architecture increases coordination but also review depth.
Grandfathering Rules and Polish Timelines
Poland applies MiCA’s grandfathering option. Timing directly affects operational continuity.
Entities registered before 30 December 2024 may continue operating until 1 July 2026, provided a MiCA application is filed. After that date, operating without authorisation is not permitted. This deadline shapes the commercial value of existing VASPs.
- Valuation Insight: A Polish VASP without MiCA readiness loses practical value as the 2026 deadline approaches.
What a Polish MiCA CASP Can and Cannot Do
A CASP license in Poland may only provide explicitly authorised services. Permissions are granular and service-specific.
Authorised services can include custody, exchange, execution, transfer, or advisory functions. Each service increases governance, capital, and reporting requirements. Activities outside the approved scope expose the firm to enforcement risk.
Payment services and electronic-money tokens sit outside standard CASP permissions. These models require additional regulatory analysis and, in some cases, parallel licensing.
Capital, Prudential Structure, and KNF Expectations
MiCA Prudential Categories and Capital Impact
| Service profile | Prudential impact |
|---|---|
| Custody or exchange | Higher base capital and safeguarding duties |
| Limited advisory or transfer | Lower base capital, narrower controls |
Governance Depth Expected by KNF
KNF applies a documentation-driven supervisory style. The management body carries direct responsibility for compliance and risk oversight.
Expect scrutiny of:
- decision-making authority of directors;
- independence of compliance and AML functions;
- conflict-of-interest management.
Governance frameworks must reflect real operations, not templates.
Technology, Outsourcing, and DORA Considerations
Technology is assessed as a governance issue. KNF reviews control over outsourced IT, custody, and monitoring tools.
Incident response, access controls, and outsourcing oversight are core review points. For certain models, elements of DORA become relevant through ICT risk expectations.
Tax Positioning and Economic Substance in Poland
Corporate Income Tax Reality
Poland applies 19% corporate income tax, with a 9% reduced rate for qualifying small taxpayers. These rates influence holding structures but do not reduce regulatory scrutiny.
Tax efficiency does not offset weak governance or compliance capacity under MiCA.
Substance Expectations without an ESR Label
Poland has no formal ESR regime. However, MiCA license in Poland imposes functional substance through supervisory expectations.
KNF assesses where decisions are made, how AML controls operate, and whether management can exercise oversight. Nominal presence without operational capacity increases rejection risk.
Strategic Positioning: Why Founders Still Choose Poland
Commercial and Regulatory Upside
Poland remains attractive due to its large domestic market and EU membership. KNF supervision carries institutional credibility. For prepared operators, MiCA offers a clear regulatory endpoint.
The jurisdiction suits firms planning sustained EU operations rather than short-term market entry.
Structural Trade-Offs
Poland is not a light-touch jurisdiction. Banking remains conservative and reviews are thorough. Documentation and governance costs are higher than many founders initially expect.
Poland rewards preparation and transparency. Shortcuts tend to fail under KNF review.
Eligibility Requirements for a Polish MiCA CASP
Eligibility depends on whether the applicant’s structure, governance, capital, and operational readiness align with the exact MiCA license in Poland services requested. The KNF rarely rejects viable models outright, but it challenges mis-scoped activities, weak governance, and unclear ownership. Early precision here determines review length and capital outcomes.
Ownership & Controllers
The regulator examines UBO integrity, financial standing, and control transparency. Complex holding chains are acceptable only with clean tracing and a coherent source-of-funds narrative. Gaps here almost always trigger extended clarification rounds.
Prudential Scope & Capital Planning
Capital follows the authorised service set, not company size. Broader market-facing services increase base own funds and ongoing buffers. Over-scoping services commonly leads to capital revisions mid-process.
Governance & Key Individuals
Management must show real oversight capacity. Senior roles need relevant crypto, compliance, or trading experience and availability for interviews. Token custody or exchange models require stronger governance evidence.
Operational Substance
There is no formal ESR test, but MiCA imposes functional substance. Decision-making, AML oversight, and risk controls must be demonstrable. Nominal presence raises rejection risk.
AML & Technology Readiness
AML frameworks must fit transaction flows and client geography. Transaction monitoring logic and outsourcing controls are reviewed in depth. Technology resilience is assessed as a governance matter.
Banking & Proof-of-Funds Reality
Proof of capital and payment flows are reviewed separately from authorisation. Banking access is not assumed and must be planned in parallel.
Pros & Cons
+ EU passporting. A MiCA CASP enables cross-border services across the EU once authorised.
+ Large domestic market. Poland offers meaningful local demand alongside EU access.
+ Supervisory credibility. KNF oversight supports institutional and counterparty trust.
+ Clear transition window. Legacy registrants have defined timelines to align with MiCA.
+ Service-based permissions. Capital and controls align with the chosen business model.
– No blanket licence. Each service requires explicit approval, limiting flexibility.
– Governance intensity. Documentation and management oversight expectations are high.
– Capital maintenance. Own funds must be held on an ongoing basis.
– Banking friction. EMIs and banks apply conservative onboarding standards.
– Longer reviews. Clarification cycles can extend timelines without preparation.
How to Acquire a Polish VASP and Prepare for MiCA CASP
Founders typically choose between acquiring a legacy AML-registered VASP or applying from scratch. The right path depends on timing, readiness, and the intended service scope.
- Step 1: Scope Definition and Readiness Review 2–4 weeks
Define the exact MiCA services and target clients. Align governance and capital early to avoid rework.
Key Documents: Service matrix, draft business model.
Estimated Cost: Internal scoping and advisory time.
Timeline: 2–4 weeks. - Step 2: Ownership, Governance, and Capital Structuring 3–6 weeks
Finalise UBO disclosures, management appointments, and capital planning.
Key Documents: Ownership charts, CVs, capital confirmations.
Estimated Cost: Capital funding, governance setup.
Timeline: 3–6 weeks. - Step 3: Policy, AML, and Systems Build-Out 4–8 weeks
Prepare AML, governance, conflicts, and ICT controls aligned with MiCA.
Key Documents: AML framework, governance manuals, outsourcing policies.
Estimated Cost: Drafting, tooling, external reviews.
Timeline: 4–8 weeks. - Step 4: Application Submission to KNF Submission-driven
Submit a complete MiCA application with supporting evidence.
Key Documents: Full application pack.
Estimated Cost: Regulatory and advisory fees.
Timeline: Submission-driven. - Step 5: Regulatory Review and Clarifications Several months
Respond to KNF questions and interviews. Adjust scope or capital if required.
Key Documents: Clarification responses.
Estimated Cost: Advisory and management time.
Timeline: Several months, readiness-dependent. - Step 6: Decision, Conditions, and Launch Sequencing 1–3 months
Respond to KNF questions and interviews. Adjust scope or capital if required.
Key Documents: Clarification responses.
Estimated Cost: Advisory and management time.
Timeline: Several months, readiness-dependent.
- Practical Insight: Authorisation does not guarantee banking; onboarding must run in parallel.
Total estimated timeline and costs
- End-to-end preparation and authorisation commonly span 9–15 months, depending on readiness and scope. Main cost drivers include own funds, governance staffing, compliance tooling, advisory support, and technology. Underestimating capital and banking workstreams is the most frequent planning error.
Post-Licensing Compliance Obligations
AML, CDD and Monitoring
CASPs remain obliged entities under Polish AML law. Ongoing risk assessments, transaction monitoring, and suspicious reporting to GIIF are mandatory. Frameworks must evolve with activity changes.
Prudential & Reporting Duties
Own funds must be maintained continuously. Periodic reporting and ad-hoc information requests support KNF supervision.
Governance, Notifications & Business Changes
Material changes require prior notification or approval, including service expansions and management updates.
- Compliance Insight: Late notifications are treated as governance failures.
Tax and Corporate Filings
Standard corporate tax and statutory filings apply. Tax compliance does not replace MiCA substance expectations.
Common Pitfalls and Challenges
Frequent Regulatory Objections
KNF often challenges misaligned service scopes and weak governance evidence. Business plans that do not match transaction flows invite repeated clarifications.
Banking & Payments Roadblocks
Licensed status does not ensure accounts. Banks and EMIs assess risk appetite, client geography, and source-of-funds clarity independently.
Expansion and Category Upgrades
Moving into higher-risk services triggers new capital and governance requirements. Firms often underestimate the review impact.
Controller Changes and M&A
Ownership changes require regulatory clearance. Transactions stall when approval timing is ignored.
- Risk Insight: The main operational risk is assuming AML registration or authorisation resolves banking and governance scrutiny.
FAQ — Polish VASP and MiCA CASP Framework
What does a Polish VASP actually allow today?
A Polish VASP is an AML-registered crypto entity, not a financial licence. It allows continued operation only within the MiCA transition window and does not provide EU passporting rights.
Until when can a Polish VASP operate without MiCA authorisation?
VASPs registered before 30 December 2024 may continue operating until 1 July 2026, provided a MiCA CASP application is submitted. After that date, operating without authorisation is prohibited.
Which business models are most suitable for a Polish VASP structure?
Polish VASPs are typically used as a starting platform for exchanges, brokerage models, or custody providers planning MiCA alignment. The structure is less suitable for payment-heavy or EMT-focused models without additional licensing.
How does capital work when moving toward MiCA CASP in Poland?
Capital is determined by the MiCA service categories requested, not by the existing VASP status. Broader services increase own-funds requirements and governance obligations.
Is banking easier once a MiCA CASP licence is obtained in Poland?
No. Banking and EMI access remain separate decisions by financial institutions. Strong AML controls, transparent ownership, and realistic transaction profiles are critical for onboarding.
Can retail clients be served under a Polish MiCA CASP?
Yes, but only if retail-facing services are explicitly authorised under MiCA. Offering services outside the approved scope creates enforcement risk.
How does Legasset support Polish VASP acquisitions and MiCA planning?
We assist with VASP acquisition structuring, obtaining a CASP license in Poland, MiCA service scoping, governance and capital planning, documentation preparation, and regulator-facing strategy with KNF.
Additional Links and Resources for Polish VASP and MiCA CASP
Official regulator responsible for MiCA CASP authorisation and supervision in Poland. The site publishes regulatory communications and supervisory notices relevant to crypto-asset service providers.
II. Ministry of Finance of Poland
Government authority responsible for crypto-asset legislation, MiCA implementation, and national AML policy. Useful for tracking statutory changes affecting VASPs and CASPs.
III. General Inspector of Financial Information (GIIF)
Poland’s Financial Intelligence Unit. This page explains AML reporting obligations applicable to VASPs and MiCA CASPs.
IV. Regulation (EU) 2023/1114 — Markets in Crypto-Assets (MiCA)
Primary EU regulation governing CASP authorisation, permitted services, prudential requirements, and passporting across Member States.
V. Regulation (EU) 2022/2554 — DORA
EU regulation on digital operational resilience. Relevant for CASPs with outsourced IT, custody systems, or critical technology providers.
