Since 1 July 2026, any business providing crypto-asset services to clients in the European Union must hold a MiCA authorisation as a Crypto-Asset Service Provider (CASP) – there are no further transitional extensions. In Ireland, the competent authority is the Central Bank of Ireland, which assesses and grants CASP licences under Regulation (EU) 2023/1114. Businesses that have not secured authorisation by that date face the risk of enforcement action and loss of access to the EU single market.
Why the Deadline Matters More Than Ever
ESMA confirmed that the MiCA transitional period ended on 1 July 2026 with no extensions available. For businesses still operating without a CASP licence, this is not a procedural technicality – it is a legal barrier that can trigger supervisory intervention by the Central Bank of Ireland, potential High Court Ireland proceedings, and reputational damage that is difficult to reverse. The window for preparation has closed; what remains is the authorisation process itself.
Ireland has consistently attracted international financial services businesses because of its EU membership, common-law legal environment, and established regulatory relationships. The Central Bank of Ireland has significant experience supervising financial intermediaries, and its approach to MiCA authorisation reflects that institutional depth. Choosing Ireland as the jurisdiction of authorisation also preserves full MiCA passporting rights across all EU and EEA member states from a single licence.
Who Needs a CASP Licence in Ireland
MiCA applies to a defined list of crypto-asset services. If your business provides any of the following, you require authorisation unless a specific exemption applies:
- Custody and administration of crypto-assets on behalf of clients
- Operation of a trading platform for crypto-assets
- Exchange of crypto-assets for funds or other crypto-assets
- Execution of orders for crypto-assets on behalf of clients
- Placing of crypto-assets
- Reception and transmission of orders for crypto-assets on behalf of clients
- Providing advice on crypto-assets
- Portfolio management of crypto-assets
- Providing transfer services for crypto-assets on behalf of clients
Businesses that already hold authorisation as a credit institution or investment firm under existing EU financial law may qualify for a simplified notification route rather than a full application, but the conditions are strict and must be assessed individually. Similarly, issuers of asset-referenced tokens or e-money tokens have separate obligations under MiCA that interact with CASP requirements where services overlap.
The White Paper Obligation
Beyond the CASP licence itself, MiCA imposes a white paper requirement on most issuers and offerors of crypto-assets. The white paper must contain prescribed disclosures about the crypto-asset, the project, the rights attached, the underlying technology, and the risks involved. It must be notified to the Central Bank of Ireland before publication and must not contain misleading statements. Liability for the content of the white paper rests with the persons responsible for it, which creates meaningful legal exposure if the document is drafted without appropriate care.
Ferraz & Whitmore assists clients in structuring, drafting and reviewing white papers to meet the regulatory standards set out in MiCA and any associated ESMA technical standards, helping to identify areas of potential liability before submission.
The Authorisation Process: An Overview
The CASP authorisation process in Ireland involves submitting a comprehensive application to the Central Bank of Ireland, covering governance arrangements, risk management frameworks, AML/CFT compliance systems, capital adequacy, IT security, custody arrangements, and fit-and-proper assessments of management. The Central Bank has prescribed timelines for reviewing applications, though the practical duration depends significantly on the completeness and quality of the submission.
A poorly prepared application – missing documentation, inconsistent governance descriptions, or inadequately evidenced compliance frameworks – can result in substantial delays or rejection. Given that the transitional period has already ended, any delay directly translates to a period of unlicensed operation. For a detailed walkthrough of each procedural step, we recommend reviewing our comprehensive guide: MiCA CASP Licence Guide for Ireland.
If your business is at the stage of preparing or refining its application, our team can review your current documentation and identify gaps before submission. Reach out at info@ferrazwhitmore.com or visit our contacts page to arrange an initial discussion.
Common Pitfalls in CASP Applications
Based on the structure of the MiCA framework and the Central Bank of Ireland's supervisory expectations, the following areas represent frequent sources of difficulty for applicants:
- Governance and management body: Applicants underestimate the depth of the fit-and-proper assessment. Directors and senior managers must demonstrate relevant knowledge, skills and experience, and background checks are thorough.
- AML/CFT framework: Crypto-asset services are treated as high-risk for money-laundering purposes. A superficial AML policy is unlikely to satisfy the Central Bank. The framework must address travel rule compliance, transaction monitoring, and customer due diligence procedures specific to crypto-asset activity.
- Custody and safeguarding arrangements: Applicants providing custody services must demonstrate robust technical and legal segregation of client assets. This area often requires specialist input from both legal and technical advisers.
- IT and cybersecurity: MiCA requires CASP applicants to demonstrate resilient operational systems. The Central Bank will examine business continuity and incident response planning.
- Regulatory capital: Capital requirements vary by service type. Underestimating the ongoing capital obligations – or failing to demonstrate access to sufficient capital at the time of application – is a common error.
- Data protection: Applicants must demonstrate compliance with GDPR as administered in Ireland by the Data Protection Commission. This is not incidental – it forms part of the regulatory assessment.
Passporting and Cross-Border Strategy
One of the primary strategic reasons for choosing Ireland as the jurisdiction of CASP authorisation is the passporting mechanism under MiCA. Once authorised by the Central Bank of Ireland, a CASP may provide the same services across all EU and EEA member states through a notification procedure, without the need for separate national licences. This significantly reduces the cost and time associated with multi-jurisdictional expansion.
Passporting is not automatic and requires proper notification procedures, but it transforms a single Irish authorisation into a European operating licence. For businesses with clients or operations across multiple EU countries, structuring the application correctly from the outset – including the scope of services listed in the authorisation – is essential to ensuring that passporting covers the intended activities.
Ferraz & Whitmore advises on the intersection of MiCA with other regulatory frameworks that may apply to your business in Ireland, including capital markets regulation and AML compliance. You can find further information on our capital markets services in Ireland and AML compliance services in Ireland pages.
Corporate and Registration Requirements
A CASP authorisation in Ireland requires the applicant to be a legal entity incorporated or established in Ireland. For overseas groups, this typically means incorporating a subsidiary through the Companies Registration Office (CRO) before or alongside the authorisation application. The choice of corporate structure – and its governance arrangements – feeds directly into the authorisation assessment. Decisions made at the incorporation stage can either facilitate or complicate the licensing process, and it is advisable to consider both in parallel.
Self-Assessment Checklist
Before engaging with the Central Bank of Ireland, consider whether your business can demonstrate the following:
- An Irish-registered legal entity with a clear description of its intended crypto-asset services
- A management body whose members meet fit-and-proper requirements under MiCA
- A documented governance and internal control framework
- A written AML/CFT policy tailored to crypto-asset risk, including travel rule procedures
- Adequate regulatory capital, evidenced at the point of application
- A custody and safeguarding framework (where applicable)
- IT security and operational resilience documentation
- A GDPR-compliant data protection framework aligned with Data Protection Commission guidance
- A draft white paper (where relevant), reviewed for legal accuracy and completeness
- A clear description of the passporting strategy, if EU-wide services are planned
If any of these elements are absent or uncertain, now is the time to address them. Operating without a CASP licence after 1 July 2026 creates regulatory and legal exposure that grows over time.
How Ferraz & Whitmore Can Assist
Ferraz & Whitmore works with international businesses, investment funds, fintech companies and digital asset groups on MiCA CASP authorisation in Ireland. Our team supports clients at every stage: from initial structuring and entity incorporation, through preparation and submission of the authorisation application, to white paper drafting, ongoing compliance advice, and passporting notifications.
We work with a practical focus on what the Central Bank of Ireland actually requires, rather than theoretical compliance. Our cross-border background means we understand the pressures facing international businesses that must move quickly without compromising the quality of their regulatory submissions.
To discuss your situation in confidence, contact us at info@ferrazwhitmore.com or use our contacts page. Initial enquiries are welcome regardless of where you are in the process.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.