Home / Insights / Who is licensed to sell crypto in Spain
MiCA · CNMV register · read September 2026
Spain authorised nine crypto firms. Then a hundred and sixty-two walked in on a passport.
The CNMV publishes the list of everyone entitled to provide crypto-asset services in Spain. We transcribed all 178 entries and counted them. Fifteen are authorised in Spain — nine crypto firms and six banks. The rest are licensed somewhere else in the EEA and serve Spain under the passport. If you are deciding where to licence, that ratio is the most useful number on this page.
Nine CASPs authorised by the CNMV plus six Spanish credit institutions.
Serving Spain from elsewhere
162
Licensed in another EEA state and passported in. One more operates through a branch.
Spanish share of the register
8%
Spain is a destination market for crypto licences, not a source of them.
Since 1 July 2026 nobody may provide crypto-asset services in Spain without a MiCA authorisation, from the CNMV or from another competent authority in the EEA. The old Banco de España register closed to new entrants on 30 December 2024 and is now kept for information only. That much is widely reported. What is not reported is who actually holds the authorisations, and the answer reframes the whole question of where to licence.
Below is the full register, transcribed from the CNMV list and searchable. Everything after it is what the numbers say once you count them.
CNMV register, all 178 entries
Who may provide crypto-asset services in Spain
Filter by how the entity reaches the Spanish market, by the service you care about, or by home state. The counters above the table follow your filter.
Entries shown
—
Authorised in Spain
—
Home states
—
Minimum own funds
—
All nine Spanish licences, against the deadline
The transitional period ended on 1 July 2026. Line the nine Spanish CASP authorisations up against that date and the picture is not of a market that prepared early. One firm was authorised with eight months in hand. Five arrived in the final three weeks. Three were authorised only after the deadline had already passed, which means they either stopped providing services in the interval or had not started.
Spanish CASP
Authorised
Against 1 July 2026
Bitcoinforme, S.L. (Bit2Me)
31 October 2025
243 days early
Due Network S.L.
12 June 2026
19 days before the cliff
Criptan Trade, S.L.
26 June 2026
5 days before the cliff
Crossmint Europe, S.L.
26 June 2026
5 days before the cliff
Minos Global, S.L.
30 June 2026
1 day before the cliff
Prosegur Custodia de Activos Digitales, S.L.
30 June 2026
1 day before the cliff
Iqana Technologies, S.L.
10 July 2026
9 days after it closed
Basque Pay, S.L.
31 July 2026
30 days after it closed
Fintech Payments PSC, S.L.
31 July 2026
30 days after it closed
The banks got there before the crypto firms. BBVA was authorised in March 2025, Cecabank and Openbank in July 2025 — all three before the first Spanish crypto firm, Bit2Me, in October 2025. A credit institution does not need a separate CASP authorisation to provide these services, only a notification, and the register shows the six Spanish banks using that route years ahead of the sector they compete with.
Where the licences actually come from
Twenty-one states appear in the register as a home jurisdiction, Spain among them. France leads, then the Netherlands, Malta and Cyprus. Spain, with the fourth-largest economy in the euro area, contributes nine firms.
France
23
Netherlands
21
Malta
17
Cyprus
15
Germany
13
Luxembourg
12
Ireland
11
Spain
9 own CASPs
Austria
8
Liechtenstein
8
Latvia
7
Slovakia
6
Foreign entries are firms authorised in that state and passporting into Spain. The Spanish bar counts CASPs authorised by the CNMV and excludes the six credit institutions, which reach the market by notification rather than authorisation.
Why the timing tracks a decision each country made in 2024
MiCA let each member state grant existing crypto firms up to eighteen months to keep trading while they applied. Some took the full eighteen. The Netherlands, Latvia, Hungary, Poland, Slovenia and Finland took six. That choice decided when each country’s firms had to be ready, and the register still shows it.
Grandfathering the state chose
States in the register
Firms
Median authorisation date
Six months
4
31
18 December 2025
Nine to twelve months
6
44
16 December 2025
Eighteen months, the maximum
10
87
24 June 2026
Firms from the six-month states were authorised a full six months earlier, on the median, than firms from the states that took eighteen. Spain took eighteen. Its own firms had no reason to move early, and eight of the nine did not.
What a long transitional period bought
Time for incumbents
Existing Spanish firms kept trading through to mid-2026 without a MiCA file.
The CNMV could process a small queue slowly rather than a large one badly.
Nobody was forced out of the market by a calendar.
What it cost
First-mover advantage, given away
Firms in six-month states were licensed and passporting across the EEA while Spanish firms were still deciding.
By the time the second Spanish CASP was authorised in June 2026, 115 foreign firms were already entitled to serve this market.
Three Spanish firms did not make the deadline at all.
What firms actually asked to be allowed to do
MiCA lists ten crypto-asset services, and an authorisation names the ones you may provide. Counting them across the register shows a market that is far less varied than the ten-item list suggests.
Custody
142 80%
Transfer services
134 75%
Exchange for funds
122 69%
Crypto for crypto
103 58%
Execution
88 49%
Reception and transmission
51 29%
Portfolio management
31 17%
Placement
22 12%
Advice
19 11%
Trading platform
15 8%
Custody appears in 80 per cent of entries and a trading platform in 8. That distribution has a direct consequence for capital, because the own-funds floor is set by the heaviest service in the set and not by how many you hold.
Own-funds class
Triggered by
Floor
Entries in the register
Class 1
Execution, placement, transfer, reception and transmission, advice, portfolio management
50,000 EUR
10
Class 2
Any class 1 service plus custody, exchange for funds or exchange for crypto
125,000 EUR
153
Class 3
Any class 2 service plus operating a trading platform
150,000 EUR
15
153 of the 178 entries sit in class 2, because custody or an exchange service is in almost every permission set. Only 10 firms stayed inside class 1 and the 50,000 euro floor. In practice the question is not which of three tiers applies to you but whether you touch client assets at all: the moment you do, the floor is 125,000.
The floor is rarely the binding number
Own funds are the higher of the class floor and one quarter of your previous year of fixed overheads. A firm with a compliance team, an office and audited systems passes 125,000 euro of quarterly overheads long before it reaches any scale. Treating the Annex IV figure as the capital requirement is the single most common mistake in the business plans we see, and the CNMV reads the business plan against the overheads test, not against the floor.
So what should you take from this
01
If you want to serve SpainYou almost certainly do not need a Spanish licence. 162 firms serve this market on a passport from elsewhere. The question is which home state, and whether you need any Spanish footprint at all.
02
If Spain is where you areThen licensing here is not a disadvantage: the same passport works outward. But the register shows a regulator with a short queue and little tolerance for thin files, so the file is the whole project.
03
If you are already trading without a licenceThe transitional period closed on 1 July 2026. There is no grace period left and no partial basis to rely on. This is the situation to get advice on first, before choosing a jurisdiction.
Frequently asked
Do I need a Spanish licence to sell crypto to Spanish customers?
No. A MiCA authorisation from any EEA competent authority passports across the whole area, and the register shows 162 firms using exactly that route into Spain. You notify through your home regulator rather than applying to the CNMV. A Spanish authorisation is what you need if Spain is where your firm is established.
Is the old Banco de España registration still worth anything?
No. It closed to new entrants on 30 December 2024 and is kept only for information. Firms on it could continue the same services they were already providing until 1 July 2026, and that window has closed. It is not a licence and never passported anywhere.
Why are there so few Spanish CASPs?
Two reasons visible in the data. Spain took the full eighteen-month transitional period, so its firms faced no deadline until mid-2026, while firms in six-month states were authorised on a median date six months earlier. And Spain simply had a smaller pre-MiCA crypto sector than France, Malta or the Netherlands, each of which had a national regime that produced a pipeline of applicants.
How much capital do I actually need?
The Annex IV floor is 50,000, 125,000 or 150,000 euro depending on the heaviest service you are authorised for, and almost every real permission set lands in the 125,000 class. But the requirement is the higher of that and a quarter of last year of fixed overheads, so for any firm with staff and premises the overheads test is the one that binds.
Does a Spanish bank need a CASP licence?
No. A credit institution may provide crypto-asset services on notification to its supervisor rather than by separate authorisation, which is why six Spanish banks appear in the register and three of them predate the first Spanish crypto firm.
How current is this list?
It reflects the CNMV list as we read it in September 2026, with 178 entries. The register changes as authorisations and notifications are granted, so check the CNMV source before relying on any single entry. One entry, Sygnum Europe AG, carries no start date in the published list and is shown here as not published rather than guessed.
Position as at September 2026. Entity data is transcribed from the CNMV Relación de proveedores de servicios de criptoactivos and classified by us into authorisations granted in Spain, Spanish credit institutions providing the services on notification, branch establishment and provision from another EEA state. Aggregate figures are computed from that transcription and may differ from the CNMV list if it has been updated since. Own-funds classes are those in Annex IV of Regulation (EU) 2023/1114 as reproduced by ESMA, and the ongoing requirement in article 67 is the higher of the class floor and a quarter of the preceding year of fixed overheads. Grandfathering periods are those notified by member states under article 143(3) and published by ESMA. General information, not legal advice, and not a recommendation about any firm named.
Nine firms chose Spain. The useful question is whether you should be the tenth.
Founder, Voixa Consultors · International corporate structuring since 2008
Seventeen years designing and delivering cross-border corporate structures — incorporation, tax, holding, banking and market entry — for founders and companies expanding into Spain and the EU. Author of professional books on entering the Spanish market.