Lithuania vs Switzerland: Where to License a Crypto Business

A token issuer expanding into Europe faces a structural choice early in the build: anchor the regulated entity in Lithuania, the EU's historically fastest VASP on-ramp, or in Switzerland, the common-law-adjacent, FINMA-supervised jurisdiction that coined the term "Crypto Valley." Both paths lead to a legitimate, recognized licence. They lead there by very different routes, at different costs, with different downstream consequences for banking, passporting and investor perception. This page maps those consequences so the decision is made on substance, not reputation alone.

Lithuania and Switzerland represent two distinct licensing philosophies for digital-asset businesses (operators providing exchange, custody, issuance or payment services in crypto). Lithuania sits inside the EU and is transitioning its prior VASP (virtual asset service provider) registration regime to full CASP authorisation under MiCA (the Markets in Crypto-Assets Regulation), supervised by ESMA and the Bank of Lithuania. Switzerland sits outside the EU; its regulator, FINMA, applies a technology-neutral, substance-first framework built around a bespoke token taxonomy and a choice of licence routes spanning AML affiliation, a fintech licence and a full banking licence. The gap between those two environments shapes everything that follows.

The sections below move through regulator posture, licence categories, process and timeline, substance requirements, AML and Travel Rule obligations, tax and banking interaction, and a decision matrix by operator profile – exchange, custodian, token issuer and fund.

How Do the Two Regulators Approach Digital Assets?

The Bank of Lithuania and FINMA share a pragmatic orientation toward digital-asset business, but their starting premises differ in ways that matter at the application stage. The Bank of Lithuania operates within the EU's harmonized supervisory architecture. Its posture on crypto has historically been permissive on entry and increasingly rigorous on ongoing compliance – a shift driven by FATF mutual-evaluation pressure and, more recently, by MiCA's arrival as directly applicable EU law. Operators licensed in Lithuania gain access to the EU single market through CASP passporting, a structural advantage that no non-EU hub can replicate.

FINMA, by contrast, applies a principles-based, substance-over-form analysis. It does not apply MiCA; it applies Swiss federal financial-market law, the Anti-Money Laundering Act and its own guidance on token classification. FINMA's token taxonomy – which distinguishes payment tokens, utility tokens and asset tokens – is the first analytical step in any Swiss licensing engagement. That taxonomy determines which regulated activity the business is actually conducting and, therefore, which licence route applies. The regulator has significant discretion, and it uses it.

In our cross-border practice, we see a recurring pattern: operators choose Lithuania for speed and EU access, and Switzerland for brand and flexibility on novel structures. Neither choice is automatically correct. The business model, the token's legal character and the target investor base all feed the analysis.

What Licences Are Available in Each Jurisdiction?

In Lithuania, the prior dual-track VASP registration (exchange of virtual assets for fiat; exchange between virtual assets) is being superseded by the MiCA CASP authorisation framework, which covers a defined list of crypto-asset services including operation of a trading platform, execution of orders, exchange against fiat, custody and administration, advice, and portfolio management. A business that was registered under the legacy regime must re-authorize under MiCA within the transition period set by the applicable EU transitional provisions. The authorisation is granted by the Bank of Lithuania and is recognized across all EU and EEA member states without further authorization – the single most commercially significant feature of a Lithuanian licence for a business with European ambitions.

MiCA also introduces dedicated regimes for asset-referenced tokens (ARTs) and e-money tokens (EMTs), with more demanding obligations on issuers including reserve requirements, redemption rights and ongoing disclosure. An issuer of a significant stablecoin faces a qualitatively different compliance burden than an exchange operator, and Lithuania's regulatory capacity to supervise that burden at scale is still developing.

In Switzerland, the licence menu is broader and less prescriptive. A business conducting AML-regulated activities – which includes most exchange and custody operations – must affiliate with a recognized self-regulatory organisation (SRO) or obtain direct FINMA supervision. Beyond the AML baseline, the main licence routes are: the FINMA fintech licence (for entities taking public deposits up to a defined threshold, without paying interest), and the full banking licence (for entities that exceed that threshold or engage in broader financial intermediation). Token issuers may operate without a licence if their token is a pure utility token, but that determination requires a substantive FINMA analysis. Asset-management businesses serving qualified investors may fall under the collective-investment-scheme framework or the new financial-institution framework, adding another analytical layer.

How Long Does Licensing Take – and What Does It Involve?

Timeline is where the Lithuania-Switzerland comparison sheds the most heat in client discussions, and also where the most misinformation circulates. Under the legacy Lithuanian VASP regime, registration was achievable in a matter of weeks for a well-prepared applicant. The MiCA CASP authorisation process is materially longer – the Bank of Lithuania, like all NCAs under MiCA, has a statutory assessment period, and the completeness review alone adds time before the clock formally starts. Operators we advise treat the full authorisation process as a matter of months, not days, with preparation of the application package – AML/CFT policies, governance structure, own-funds calculation, regulatory business plan – consuming the majority of that time.

In Switzerland, the SRO affiliation route is the fastest entry point for businesses whose activity sits cleanly within the AML perimeter. Affiliation with an SRO is achievable within a comparable timeframe to the Lithuanian legacy process, though the substance requirements – particularly the fit-and-proper assessment of key personnel and the documentation of the compliance framework – are rigorous. A FINMA fintech licence or banking licence takes significantly longer; applicants should plan for a process measured in months and, for banking, potentially longer depending on the complexity of the structure and the volume of FINMA's supervisory caseload at the time. The regulator's discretion to request additional information extends timelines unpredictably.

The cross-border note matters here. Neither jurisdiction is a "post box" regime. Both regulators expect substance: local management, a functioning compliance officer, demonstrable control over the business from within the licensed entity. A shell structure with all operations run from a parent overseas will not pass scrutiny in Vilnius or Zurich.

To map the authorisation path for your specific licence category and business model, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts – the entity structure, the user base, the token classification – change the analysis materially.

What Substance Does Each Jurisdiction Actually Require?

Substance requirements are the hidden cost of licensing that initial fee comparisons consistently understate. Both Lithuania and Switzerland require that a licensed entity be genuinely present in the jurisdiction – not merely incorporated there.

Lithuania, under MiCA, requires a registered office and at least one director resident in the EU. The Bank of Lithuania expects the CASP to have a local compliance function, documented AML/CFT policies that meet EU standards, and a management body that is collectively capable of overseeing the business. Own-funds requirements apply by category of service; a business providing only exchange services against fiat carries a lower own-funds floor than one providing custody or a trading-platform operation. Those floors are set by MiCA; because they are tagged as [VERIFY] pending regulatory confirmation, we describe them qualitatively – they are meaningful but not prohibitive for a professionally managed startup, and they scale with the service category.

Switzerland's substance expectation is framed differently but is equally real. FINMA's fit-and-proper analysis of the people running the business is meticulous. Key personnel – the CEO, the CCO, the head of risk – must individually satisfy FINMA's criteria for knowledge, integrity and financial soundness. The organisational regulations of the entity must demonstrate a clear governance structure. For a banking licence, the capital requirement is substantial; for a fintech licence, it is lower but still significant in absolute terms – and again, the specific figure requires verification against current FINMA guidance rather than any published rule that may have been updated.

In our practice, we regularly advise operators who underestimate the people cost of substance. Hiring a compliant local CCO in Vilnius or Zurich – one who satisfies the regulator's expectations and can manage the ongoing supervisory relationship – is often the most material line item in the first year's operating budget.

How Do AML and Travel Rule Obligations Compare?

Both jurisdictions implement the FATF framework, including Recommendation 15 – the extension of AML/CFT obligations to virtual-asset service providers – and the Travel Rule (the obligation to pass originator and beneficiary data alongside a transfer). The implementation details differ, and those differences have operational consequences.

In Lithuania, AML obligations flow from both the EU's AML directives and, increasingly, from MiCA's integrated compliance requirements. The Bank of Lithuania has been an active AML supervisor; it revoked or declined to renew a number of legacy VASP registrations that could not demonstrate functional AML controls. The lesson from that supervisory history is clear: a polished application with inadequate ongoing controls produces an authorisation that does not survive its first review.

Switzerland implements the Travel Rule through a combination of the Anti-Money Laundering Act and FINMA circular guidance. The threshold at which Travel Rule obligations attach, and the technical standards for data transmission, are set domestically. Swiss VASPs that transact with counterparties in EU member states must also satisfy the EU's Transfer of Funds Regulation obligations on the EU side of the transaction – a cross-border compliance burden that applies regardless of where the Swiss entity is licensed.

For any business with European users, the practical Travel Rule compliance stack is determined as much by where those users are as by where the operator is licensed. A Swiss-licensed exchange serving Lithuanian retail clients is inside the EU's regulatory perimeter for that activity. Operators we advise structure their compliance architecture around the user-geography map, not around a single jurisdiction's rulebook.

What Are the Tax and Banking Realities in Each Jurisdiction?

Tax and banking are the two variables that most frequently override the licensing decision – and the two that are most frequently ignored until after the licence is granted.

Lithuania offers a competitive corporate-tax environment within the EU. The general corporate-income-tax rate is among the lower in the bloc, though the precise rate requires verification against current Lithuanian tax legislation. There is no blanket crypto-specific tax exemption; token trading, staking rewards and gains on digital-asset positions are treated under general income and capital-gains principles, with the classification of the underlying activity driving the outcome. Lithuania's EU membership means VAT treatment of crypto-asset services follows EU VAT directives – with the relevant exchange-of-currency exemption applying to qualifying activities.

Switzerland is a distinct environment. The Swiss franc, political neutrality and the country's private-banking tradition give it a profile that attracts fund structures and high-net-worth issuers. Corporate-tax rates vary by canton; Zug – the heart of Crypto Valley – is among the lowest-tax cantons in Switzerland. The Swiss Federal Tax Administration applies its own guidance on the tax treatment of tokens, and that guidance has evolved as the market matured. Swiss VAT treatment of crypto services differs from EU treatment; businesses serving EU clients from a Swiss entity must model the VAT exposure on both sides.

Banking is the more immediate constraint for most operators. Both Lithuanian and Swiss banks have tightened their crypto-client onboarding criteria in response to regulatory pressure and correspondent-bank de-risking. In our experience, a licence does not automatically open a bank account. The banking relationship must be secured in parallel with the licensing process, and the failure to do so is the single most common reason a newly licensed crypto business stalls before launch. We structure licensing, banking and tax as one mandate rather than three disconnected workstreams – because the three interact, and solving one while ignoring the others creates a brittle structure.

If your licensing build is at the banking-access stage and the rails are not yet secured, contact OBOLUS at info@oboluslaw.com. A prior application that stalled at banking often has a structural explanation – and a route back.

Which Profile Should Choose Which Jurisdiction?

There is no single "better" jurisdiction. The right answer is a function of operator profile, business model, user geography and strategic horizon. What follows is a structured view of four common profiles.

Exchange operator targeting EU retail and institutional clients. Lithuania under MiCA is the more direct path. CASP authorisation grants passporting rights across the EU and EEA without secondary authorization in each member state. The compliance burden is real but predictable; MiCA's rulebook is public and the authorisation process, while more demanding than the legacy VASP registration, is designed for exchange operators. The key risk is underestimating the own-funds and substance requirements and the time needed to prepare a complete application. Switzerland is an option only if the EU passport is not needed – for example, a business serving only non-EU qualified counterparties.

Custodian or wallet provider. Custody is a regulated CASP service under MiCA, making Lithuania the EU default for a business needing to hold client assets across the bloc. Switzerland's fintech licence can cover custody-adjacent activity, but the regulatory perimeter requires careful mapping against the specific service model. A custodian whose clients are predominantly Swiss or non-EU may prefer Switzerland for its lighter ongoing-supervision posture relative to a full CASP; one with EU clients needs the Lithuanian (or other EU NCA) authorisation regardless.

Token issuer (stablecoin or asset-referenced token). This is the profile where Switzerland's flexibility has historically been most valuable. FINMA's token taxonomy allows a utility token to sit outside the licensed perimeter entirely if the analysis supports it. Under MiCA, an ART or EMT issuer must seek specific authorization from an EU NCA – with reserve, disclosure and redemption obligations attached. A genuine utility token, carefully structured, may avoid the MiCA issuer framework, but that determination is fact-specific and requires a formal legal opinion, not a marketing classification. Switzerland remains the preferred domicile for issuers whose token analysis suggests it sits outside the EU's ART/EMT perimeter and who do not need EU passporting for the distribution.

Digital-asset fund or investment manager. Switzerland's private-fund tradition, cantonal tax efficiency and the FINMA framework for collective investment schemes make it a natural reference point for fund structures. Lithuanian fund structures exist but the ecosystem – prime brokers, administrators, legal infrastructure – is less developed than in Switzerland, Luxembourg or the Cayman Islands. A fund that needs EU marketing rights (AIFMD passporting) may choose a Luxembourg or Irish structure with Swiss management; a closed fund serving non-EU professional investors has more flexibility. In either case, the licensing decision is inseparable from the fund structure and distribution strategy.

What Are the Most Frequent Mistakes in This Decision?

A common assumption is that choosing the lower-cost jurisdiction solves the licensing problem. It does not. The cost comparison between Lithuania and Switzerland is more compressed than operators expect: Lithuania's own-funds requirements under MiCA and the substance costs of a genuine local presence close the gap that once existed between a rapid VASP registration and a Swiss SRO affiliation. The real differentiator is the downstream regulatory consequence – passporting in the EU versus flexibility on novel token structures in Switzerland – not the entry cost.

A second recurring mistake is treating licensing as the end of the compliance journey. Both regulators conduct ongoing supervision. The Bank of Lithuania has demonstrated willingness to act against operators with inadequate AML controls. FINMA's annual fee and reporting obligations, and its supervisory expectations for significant financial intermediaries, impose a permanent compliance overhead. Operators who budget only for the application underinvest in the infrastructure that keeps the licence.

A third mistake is believing that a single licence is sufficient to serve clients globally. A CASP authorisation in Lithuania covers EU/EEA passporting; it does not cover US clients (where SEC, CFTC, FinCEN and state money-transmitter licensing apply), UK clients (where FCA registration or authorization is required), or clients in VARA-regulated Dubai. The EU licence is the foundation of a global stack, not the whole of it. We map the licence, banking and tax stack across operating, custody and payment layers before you commit – because the cost of rebuilding a structure after launch is substantially higher than doing it correctly at the outset.

In a recent matter, a payments company had obtained a Lithuanian VASP registration and was operating a stablecoin issuance across three jurisdictions without an ART issuer assessment under MiCA. We identified the exposure at the pre-launch stage, restructured the issuance entity, and secured legal opinions in two jurisdictions that supported a utility-token classification. The pre-launch intervention avoided what would have been a mid-operation authorization requirement under MiCA's transitional rules.

Related at OBOLUS

• Licensing & Registration for Digital-Asset Businesses – end-to-end CASP, VASP and fintech-licence counsel across 70+ jurisdictions
• Crypto Exchange Setup in the Isle of Man – licensing, substance and banking for exchange operators in a leading offshore hub
• Exchange Disclosure Orders in Luxembourg – enforcement and recovery tools available through Luxembourg's courts for digital-asset disputes

FAQ

How long does a crypto licence take to obtain?

Timeline varies by jurisdiction, regulator and the completeness of the application at submission. Under MiCA in Lithuania, the CASP authorisation process runs to months once a complete application is filed; preparation of the application package commonly takes as long as the formal review. Swiss SRO affiliation is achievable in a comparable timeframe for straightforward exchange or custody operations; a FINMA fintech or banking licence takes materially longer, often extending well beyond six months depending on structure and regulatory workload. No reputable adviser guarantees a fixed timeline.

Which jurisdiction is best for licensing my crypto business?

There is no single best jurisdiction. The right choice depends on your service category, user geography, token classification and strategic objectives. Lithuania under MiCA is the natural choice for an exchange or custodian with EU retail clients, because the CASP authorisation carries passporting rights across the bloc. Switzerland is better suited to novel token structures, fund management, and businesses whose clients are predominantly non-EU. For a business with global ambitions, neither jurisdiction alone is sufficient – the EU licence is the foundation of a wider multi-jurisdiction stack.

Do I need a separate custody licence?

In most flagship regimes, custody of client digital assets is a separately regulated activity – or, in the case of MiCA, a distinct CASP service that must be covered by the authorisation. A trading platform that also holds client assets needs its authorisation to include the custody service category; an entity providing only custody needs its own authorisation. In Switzerland, the need for a formal licence depends on the nature of the custody activity and whether it engages deposit-taking or asset-management obligations. The analysis is fact-specific; the answer varies by jurisdiction and service model.

OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. We structure licensing, banking and tax as one mandate rather than three disconnected workstreams – because the three interact, and a gap in any one of them produces a brittle structure. Digital assets are the whole of our practice. To discuss your situation, contact info@oboluslaw.com or message us at t.me/oboluslaw.

By Aisha Tan, Licensing & Jurisdictions Analyst – specialises in multi-jurisdiction CASP and VASP authorisation, with particular focus on EU MiCA transition strategy and Swiss FINMA licensing pathways for exchange and issuance structures.

This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.