Which services you can provide
Each type of institution can only provide the crypto-asset services equivalent to those it is already authorized for. We check it service by service.
If you are a bank, an investment firm, a management company, an EMI, a central securities depository or a market operator, you can provide crypto-asset services without applying for a CASP licence: you only need to notify the authority at least 40 working days in advance. We prepare the notification and everything that must accompany it.
Does your institution want to offer crypto services?
Tell us what type of institution you are and which crypto-asset services you want to provide, and we will tell you what you need to notify them.
The notification is not an authorization, but it has to be complete: while information is missing, the institution cannot start providing the services.
Each type of institution can only provide the crypto-asset services equivalent to those it is already authorized for. We check it service by service.
We draft the programme setting out the services, the crypto-assets, the clients, and where and how they will be marketed.
We adapt your internal control, policies and money laundering and terrorist financing risk assessment to crypto-assets.
We coordinate the technical documentation, business continuity and the non-technical description that MiCA requires.
We describe the segregation of clients’ crypto-assets and funds and, if you provide custody, the custody and administration policy.
Execution policy, commercial policy and pricing, platform rules, staff knowledge and transfers.
These are the institutions that consult us most. Each has a different scope.
Credit institutions can provide crypto-asset services by notifying 40 working days in advance, without a CASP licence.
It can provide the crypto services equivalent to the investment services it is authorized for, such as reception and transmission of orders or advice.
UCITS and AIF management companies can provide crypto-asset portfolio management and the ancillary services they are authorized for.
It can safekeep and transfer on behalf of clients the e-money tokens it issues, by notifying beforehand.
Data from Regulation (EU) 2023/1114 (MiCA) and Law 6/2023.
Minimum advance notice a bank must give the authority before providing crypto-asset services for the first time.
Time the authority has to check whether the notification is complete.
Maximum time the authority can give to supply the missing information.
The institution cannot start providing the services while the notification is incomplete.
Information to be notified, from (a) to (k): programme of operations, money laundering, ICT, segregation, custody and policies.
Competent authority for MiCA in Spain, except for matters that fall to the Bank of Spain.
We review which crypto-asset services you can provide under your current authorization and leave the notification and its policies ready for you.
Those listed in Article 60 of MiCA: credit institutions, central securities depositories (custody only), investment firms, electronic money institutions (custody and transfer only of the tokens they issue), UCITS and AIF management companies and market operators (trading platform). It is enough to notify the authority.
At least 40 working days before providing the services for the first time (Art. 60(1)–(6)). The authority has 20 working days to check whether the notification is complete and, if information is missing, it may allow up to 20 working days to provide it; in the meantime, the period is suspended (Art. 60(8)).
No. Only those equivalent to the investment services it is authorized for. MiCA sets the equivalences: for example, custody of crypto-assets is equivalent to custody of financial instruments, and operating a trading platform to operating an MTF or an OTF (Art. 60(3)).
A programme of operations; money laundering controls, policies and risk assessment; a continuity plan; technical documentation of the ICT systems; segregation of clients’ crypto-assets and funds; and, depending on the services, a custody policy, platform rules, a commercial policy, an execution policy, staff knowledge and the way transfers will be provided (Art. 60(7)).
The competent authority of the home Member State. In Spain, the CNMV is the competent authority for MiCA, and the Bank of Spain supervises asset-referenced tokens and issuers of e-money tokens (Art. 251 of Law 6/2023).
Not necessarily: MiCA states that information already provided to the authority does not have to be submitted again, as long as it is identical (Art. 60(9)). It is advisable to identify it clearly in the notification.
It depends on the services you want to provide and on what you already have: advising on crypto-assets is not the same as holding them in custody or operating a platform. After the diagnosis we give you a fixed quote.
We start from what your institution is already authorized for and add only what MiCA requires.
Current authorization, policies and systems.
Adapting each item of Art. 60(7) to crypto-assets.
Check that the notification is complete.
Source: Regulation (EU) 2023/1114 (Art. 60) and Law 6/2023 (Art. 251).
Terms from the MiCA Regulation and Law 6/2023.
Entity authorized under MiCA to provide crypto-asset services.
Route for already authorized institutions to provide crypto services without a CASP licence.
Crypto-asset service that corresponds to an investment service already authorized.
Safekeeping of crypto-assets or of the means to access them on behalf of clients.
Keeping clients’ crypto-assets and funds separate from those of the institution.
Description of the services, the crypto-assets and how they will be marketed.
Crypto-asset services: Crypto-asset services.
Article: MiCA Art. 60(1).
Crypto-asset services: Only custody and administration on behalf of clients.
Article: MiCA Art. 60(2).
Crypto-asset services: Those equivalent to the investment services it is authorized for.
Article: MiCA Art. 60(3).
Crypto-asset services: Custody and transfer of the e-money tokens it issues.
Article: MiCA Art. 60(4).
Crypto-asset services: Crypto-asset portfolio management and authorized ancillary services.
Article: MiCA Art. 60(5).
Crypto-asset services: Operating a crypto-asset trading platform.
Article: MiCA Art. 60(6).
These are the ones that delay the start of activity.
Tell us what type of institution you are and which crypto-asset services you want to provide, and we will prepare a diagnosis and a tailored quote.
Updated November 4, 2026
Regulation (EU) 2023/1114 (MiCA) generally requires authorization as a crypto-asset service provider (CASP) to provide crypto services. Its Article 60 makes an exception for financial institutions that are already authorized and supervised: they can provide certain services if they notify the authority of their home Member State.
Credit institutions can provide crypto-asset services; investment firms, those equivalent to their authorized investment services; UCITS and AIF management companies, portfolio management and ancillary services; EMIs, custody and transfer of their own e-money tokens; central securities depositories, custody; and market operators, a trading platform (Art. 60(1)–(6)).
The notification is submitted at least 40 working days before starting. The authority checks within 20 working days whether it is complete; if not, it sets a period of up to 20 working days to complete it, and the institution cannot start in the meantime (Art. 60(8)).
If your institution is not on the Article 60 list, it needs the CASP licence. You can see which entities already hold one in authorized CASPs in Spain and the full framework in the MiCA Regulation. We cover anti-money laundering for crypto in crypto-asset compliance.