MiCA-licensed crypto firms in Cyprus

24 firms can provide crypto-asset services from Cyprus under MiCA, according to ESMA's register as updated on 7 October 2026. 16 hold a crypto-asset service provider (CASP) authorisation from CySEC, 5 are investment firms that notified CySEC under Article 60, and 3 appear in ESMA's register but not yet on either of CySEC's lists. One more firm appears with an authorisation that has ended.

A firm that is not already regulated has to apply to CySEC for authorisation as a crypto-asset service provider; CySEC lists these firms as licensees under Article 63, the article on assessing the application. Firms already authorised under other EU financial rules can take a shorter route under Article 60. A credit institution may provide crypto-asset services after notifying its home regulator at least 40 working days before it starts. An investment firm may do the same, but only for crypto-asset services equivalent to the investment services it is already authorised for. Both routes end in the same register, which is why ESMA lists them together.

From ESMA's interim MiCA register, which ESMA republishes weekly as a downloadable file. Our site rebuilds the list from that file automatically, and the date at the top of the page is the date of ESMA's latest update, currently 7 October 2026. ESMA's file does not say whether a firm is a CASP or an Article 60 notifier, so we take that from CySEC's own two lists and check it by hand. Where the two sources disagree, the page says so rather than guessing.

It means the firm met MiCA’s requirements when it was authorised or notified, and that CySEC supervises it now. It is not an endorsement, and it says nothing about the investments a firm offers. Two checks are worth making before you deal with any firm on this list: that the services you want are among those it is authorised for, and that the website you are on is the one in the register. Cloned websites using a licensed firm’s name are a common fraud.

Yes. A CASP authorised in one member state can provide its services across the EU after notifying its home regulator of the member states it intends to serve, which is the MiCA passport. ESMA’s register records those member states for each firm, so the register entry is also the place to check whether a Cyprus firm is entitled to serve clients in your country.

With an honest gap assessment against the CASP obligations before you file, because applications stall on evidence, not on forms: wallet architecture, client asset segregation, safeguarding, and suitability of the management body. Our MiCA readiness service is built for exactly that stage, and the authorisation guide on our blog walks through the process and the capital each service class requires. Firms already on the list face a different job, the continuing obligations, which our MiCA ongoing compliance service covers.