MiCAR Licensing for Payment Institutions: What You Need to Know

Alejandro Martínez · 2026-07-01

If you're a Payment Institution (PI) already offering crypto-related services—like issuing e-money tokens (EMTs), providing crypto-asset services, or enabling crypto payments—you've probably heard the news: you'll need a separate MiCAR authorization on top of your existing license. This isn't just a paperwork shuffle. It's a whole new layer of regulation that brings real costs and obligations. ### What MiCAR Actually Demands MiCAR (the Markets in Crypto-Assets Regulation) doesn't mess around. It imposes conduct-of-business rules, conflict-of-interest requirements, and client asset segregation rules that are very similar to what you'd see under MiFID II. If you're issuing EMTs, you'll also need to publish a white paper with detailed disclosures. Think of it as a mini-prospectus for your token. The application process itself runs through four stages: - Pre-application engagement with your National Competent Authority (NCA) - Formal submission of your application - Assessment, including fit-and-proper checks on management and shareholders - Ongoing post-authorization supervision Your existing PI documentation won't cut it here. You'll need meaningful adaptation. That said, if you're in Malta, the MFSA does reduce some duplication by cross-referencing what you've already filed. Nice touch, but don't bank on it making things easy. ### The Cost Breakdown (In Dollars) Let's talk money. Because MiCAR isn't cheap. Here's what you're looking at, converted from euros to USD (using approximate rates): - **White paper notification fees**: $2,700 to $8,600 (varies by entity and token type), plus about $1,100 for any amendments - **Application fees**: $10,800 to $27,000 depending on your license class - **Annual supervisory fees**: $10,800 to $54,000 per class (Class 3 supervisory fees double the application fee) - **Minimum capital requirements**: $54,000 to $162,000 by class—this could exceed your existing PI thresholds and create a standalone capital adequacy obligation Beyond these headline costs, you need to budget for legal and advisory fees, an ongoing compliance function, and technology investment. It adds up fast. > **A quick note**: These figures are estimates. Always check with your regulator for exact amounts. And remember, this is a strategic decision, not just a compliance checkbox. ### Is It Worth It? Here's the thing: getting a MiCAR license is a strategic commercial decision, not a compliance formality. The commercial upside—being able to offer crypto services legitimately across the EU—should be weighed against the genuine scope of new obligations. If your business model relies on crypto, you probably can't afford to skip this. But if you're just dipping a toe in, the costs might outweigh the benefits. ### What About DORA? One more wrinkle: if you're currently on a simplified ICT framework, adding crypto services will push you into the full DORA-aligned regime. That means more rigorous operational resilience requirements. So factor that into your planning. ### Final Thoughts MiCAR is here, and it's real. PIs need to treat this as a major business decision, not a box-ticking exercise. Talk to your legal team, run the numbers, and make sure your compliance infrastructure is ready for the climb. The rewards are there, but so are the costs.