Operating a crypto payment or exchange business without the right authorisation in the Czech Republic exposes the company to enforcement action, loss of banking access and blocked payment rails — risks that typically materialise before a founder realises the gap. The EMI licence (electronic money institution authorisation), issued by the Czech National Bank (CNB) under the domestic transposition of the EU Payment Services Directive, is increasingly the structural anchor for crypto firms that need to issue electronic money, operate payment accounts or move fiat alongside digital assets inside the European Union. With MiCA (the Markets in Crypto-Assets Regulation) now in force across the EU and the CNB acting as the national competent authority for CASP (crypto-asset service provider) authorisation in the Czech Republic, the decision about which licence to anchor your business on — and in which sequence — has become a foundational strategic call. This page maps the EMI regime for crypto firms, the interaction with Czech VASP and MiCA obligations, and the cross-border questions that every inbound operator needs to resolve before filing.
What an EMI licence means for a crypto firm in the Czech Republic
An EMI licence in the Czech Republic authorises a firm to issue electronic money and provide payment services, creating the regulated fiat layer that most crypto businesses require when they sit between a user's bank account and a digital-asset exchange. The Czech National Bank supervises electronic money institutions under the national law transposing the EU's Payment Services Directive regime, and an authorised Czech EMI benefits from EU passporting — meaning it may provide regulated payment services in other EU and EEA member states without a separate local licence in each country.
For a crypto firm, this matters in a precise way. Accepting euro or Czech koruna deposits, holding client funds in payment accounts, executing fiat-to-crypto conversions and processing withdrawals all touch regulated payment-service activities. Without an EMI or a narrower payment institution authorisation, those fiat legs are either unregulated — which is itself a problem with correspondent banks — or dependent on a third-party licensed partner whose terms, uptime and risk appetite the operator does not control.
The CNB's supervisory posture has tightened in line with broader EU expectations. Regulators across the bloc increasingly expect crypto firms to demonstrate that their fiat infrastructure is fully licensed, not merely tolerated. An operator that holds only a VASP registration and routes fiat through an unlicensed arrangement will find that position increasingly difficult to defend to a banking partner or to the CNB itself.
The EMI authorisation covers the payment layer; the crypto layer — exchange, custody, advisory — is governed by the VASP registration regime and, from the MiCA transition, by the CASP authorisation framework. Most Czech-based crypto firms that intend to serve EU clients at scale will need both structures in place.
Related at OBOLUS
- Licensing and registration for digital-asset businesses – how OBOLUS structures the full licence stack across operating, custody and payment layers
- VASP licence application in Czech Republic – the registration process and requirements under Czech AML law and the MiCA transition
- Fund domicile selection in Kazakhstan AIFC – for operators considering a Central Asian hub alongside or instead of an EU structure
The process above describes the standard path. Your facts — the entity structure, the user base, the banking relationships and the services offered — change the analysis materially. For a scoped assessment of whether an EMI licence, a payment institution authorisation or a combined EMI-plus-CASP structure is the right anchor for your business, contact OBOLUS at info@oboluslaw.com.
Who needs an EMI licence in the Czech Republic?
Any firm that issues electronic money — defined as electronically stored monetary value representing a claim on the issuer — or provides regulated payment services in the Czech Republic on a professional basis requires authorisation from the Czech National Bank, unless a statutory exemption applies. For crypto firms, the practical test is whether the fiat side of the business constitutes a regulated payment service.
The categories most frequently relevant to crypto operators include: maintaining payment accounts for clients, executing credit transfers and direct debits, issuing and acquiring payment instruments, and providing money remittance. A crypto exchange that holds client euro balances before they are converted, or a stablecoin issuer that redeems tokens for fiat, is almost certainly carrying out one or more of these activities.
The distinction between a full EMI authorisation and a narrower payment institution (PI) authorisation turns on whether the firm actually issues electronic money — a store of monetary value redeemable at par — or merely processes payments without issuing. Stablecoin issuers and firms that hold pre-funded client accounts almost always fall into the EMI category. Firms that execute one-way payment flows without holding funds may qualify for a PI authorisation, which carries a lighter capital and compliance burden but does not permit issuance of e-money.
Under MiCA's e-money token (EMT) provisions, any euro- or fiat-referenced stablecoin issued to EU users must be issued by a credit institution or an authorised EMI. A Czech EMI authorisation is therefore the direct gateway to lawful EMT issuance for firms domiciled in the Czech Republic.
How does the EMI application process work at the Czech National Bank?
The Czech National Bank evaluates EMI applications against a structured set of prudential, governance and operational requirements, and the quality of the application file is the single largest variable in the outcome. A complete, well-organised application that anticipates the CNB's standard queries moves materially faster than one submitted in stages or with gaps in the compliance documentation.
The application typically comprises several core elements. The business plan must demonstrate a financially sustainable model, including detailed revenue and cost projections. The internal control framework — covering AML/CFT procedures, IT security, business continuity and outsourcing arrangements — must be documented to the CNB's standard. The AML programme must address the Travel Rule (the FATF obligation to pass originator and beneficiary data with a virtual-asset transfer) where the firm also operates as a VASP, since the CNB will review both layers if both licences are sought.
Fit-and-proper assessments of the proposed management and beneficial owners are conducted in parallel. The CNB examines professional experience, absence of disqualifying criminal or regulatory history, and financial integrity. For a crypto-focused EMI, the management team should be able to demonstrate prior experience in financial services, payments or regulated digital-asset operations — a purely technical or Web3 background without a regulated-finance counterpart is a common weakness the CNB has flagged in its supervisory communications.
Capital must be at the required level from the date of authorisation and must be maintained on an ongoing basis. The applicable minimum varies by the scope of payment services the EMI is authorised to provide; the CNB sets and enforces these requirements under the EU-derived transposition, and the actual figures must be confirmed against current CNB guidance at the time of filing. Timelines from submission of a complete application to decision vary and are not publicly fixed by statute; in our practice, operators should plan for a process measured in months rather than weeks, with the CNB conducting a thorough review at each stage.
In a recent matter, a fintech operator seeking to combine a Czech EMI authorisation with an EU VASP structure engaged us after an initial application stalled at the fit-and-proper stage. We identified gaps in the management documentation and restructured the governance narrative; the application was resubmitted with a complete senior-management file and progressed to approval within the subsequent review cycle. The outcome illustrated how front-loading the evidentiary burden — rather than relying on supplementary submissions — drives the timeline.
How does Czech EMI passporting interact with MiCA and EU crypto regulation?
A Czech EMI authorisation carries EU passporting rights under the Payment Services Directive, allowing the licensed entity to provide payment services across the EU and EEA on a freedom-of-services or freedom-of-establishment basis — a significant structural advantage for any crypto firm serving a pan-European client base. The passport does not, however, extend to the crypto-asset service activities governed by MiCA; those require a separate CASP authorisation from the CNB or from another EU national competent authority.
The interplay is important. A Czech EMI can handle the fiat-payment layer across all EU member states under its passport. But if the same entity also operates a crypto exchange, provides crypto custody or issues tokens, each of those activities requires CASP authorisation — either in the Czech Republic or in another MiCA-regulated member state where the firm holds or obtains authorisation. The Czech Republic is within the EU's MiCA framework, and the CNB serves as the designated competent authority for CASP applications from Czech-domiciled entities.
For operators that already hold a VASP registration under Czech AML law — the pre-MiCA registration route that governed crypto businesses before full MiCA application — a transitional pathway to full CASP authorisation exists, but it is not automatic. Existing registrants must apply for full CASP authorisation within the applicable transition window. The CNB has indicated that it will assess these applications against the full MiCA standard, not a lighter transitional review. Operators that delay the upgrade risk operating in a regulatory gap as the transition window closes.
Tax and banking interact with this structure in a way that is specific to the Czech domicile. Czech corporate tax treatment of crypto activities — including the characterisation of staking rewards, token inventory and EMT issuance — is governed by Czech tax law and must be confirmed with local tax counsel. Banking for a Czech EMI is generally more accessible than for an unregulated crypto firm: correspondent banks and EU payment processors are more willing to onboard a licensed EMI than a bare VASP. That said, crypto-facing EMIs face enhanced due diligence from some banking partners, and the firm's AML programme — particularly its handling of high-risk wallet addresses and Travel Rule compliance — will be scrutinised at onboarding.
EMI, payment institution or CASP: which structure fits your business?
The right authorisation structure depends on the precise combination of services the firm intends to offer and the profile of its client base — there is no single answer that fits every operator. The following framework maps the principal decision branches.
Profile A: Crypto exchange with fiat on-ramp and off-ramp, serving EU retail and institutional clients. This operator issues and redeems client fiat balances and executes euro-denominated payments. The correct structure is a Czech EMI authorisation (for the fiat and e-money layer) combined with a Czech CASP authorisation under MiCA (for the exchange and transfer services). The EMI passport handles EU-wide payment-service reach; the CASP authorisation covers crypto activities across the EU. Timeline is longer and the compliance burden heavier, but the resulting entity is fully self-contained and does not depend on a third-party payment rail.
Profile B: Crypto brokerage or OTC desk that does not hold client funds on an ongoing basis. If the firm executes conversion transactions without maintaining payment accounts — settling directly to and from client bank accounts — a payment institution authorisation for money remittance, combined with a CASP authorisation, may be sufficient. The PI route carries lighter capital requirements than a full EMI and is appropriate where e-money issuance is not part of the model. The key risk: if the business evolves to holding client balances, the EMI upgrade is mandatory.
Profile C: Stablecoin issuer targeting EU circulation. MiCA's EMT provisions require that a euro-referenced stablecoin issued to EU users be issued by a licensed EMI or credit institution. A Czech EMI is the direct route. The application must address MiCA's specific reserve and redemption requirements for EMTs, not just the standard EMI prudential framework. This is a more technically demanding application, and the CNB will review the token-specific elements in addition to the payment-services baseline.
Profile D: Non-EU operator entering the Czech Republic through a subsidiary. An inbound operator establishing a Czech subsidiary to access EU passporting should plan for the full EMI authorisation process, including local substance requirements — office, senior management on the ground and operational control from within the EU. Shell or letterbox structures are not acceptable to the CNB or to EU regulators generally under the passporting regime.
If a prior application stalled, a banking account was closed, or an earlier structure no longer fits the business as it has grown, a structural review can identify the gap and map the path back to compliant operation. Write to OBOLUS at info@oboluslaw.com to arrange a scoped assessment.
What AML and Travel Rule obligations apply to a Czech EMI serving crypto clients?
A Czech EMI is subject to the full AML/CFT compliance regime derived from EU Anti-Money Laundering Directives and implemented under Czech law, and where the EMI's payment services are provided to or by a VASP — or where the EMI itself also holds a CASP authorisation — the AML obligations extend to the crypto-specific requirements of the applicable EU framework. The CNB supervises both layers.
The Travel Rule, rooted in FATF Recommendation 15 and implemented across the EU through the Transfer of Funds Regulation, requires that originator and beneficiary information accompany every qualifying virtual-asset transfer. For a Czech EMI that also operates as a CASP, or that processes payments on behalf of VASPs, the Travel Rule creates an operational requirement to capture, verify and transmit that data at the point of each transfer. The de-minimis threshold and the technical implementation standards are set at the EU level and must be confirmed against current regulation.
In practice, the CNB expects Czech EMIs with crypto exposure to maintain a risk-based AML programme that specifically addresses virtual-asset risks: wallet screening against sanctions and adverse-media databases, transaction monitoring calibrated to on-chain patterns, and a suspicious-transaction reporting process that covers both fiat and crypto legs of a conversion. Firms that apply a purely fiat-era AML programme to a crypto-facing EMI almost always have material gaps — a point the CNB has raised in supervisory feedback across the sector.
Customer due diligence for crypto clients is more demanding than for standard payment-service users. Enhanced due diligence applies to high-risk wallet addresses, to unhosted wallet interactions and to clients whose on-chain history includes interactions with mixers or high-risk exchanges. The AML programme submitted as part of the EMI application must address these categories specifically; a generic financial-crime framework without crypto-specific provisions is a common ground for additional CNB queries.
What are the most common mistakes crypto firms make in Czech EMI applications?
The most frequent structural error is treating the EMI application as a documentation exercise rather than a regulatory engagement. The Czech National Bank is not a passive recipient of paperwork; it expects the applicant to demonstrate that the licensed entity — as it will actually operate — is governed, capitalised and controlled to a banking-adjacent standard.
A common assumption in the market is that a single offshore licence — a BVI VASP registration, a Seychelles exemption or a Cayman registration — is sufficient to serve EU clients, including those in the Czech Republic. That assumption is incorrect. EU residents accessing regulated payment services or purchasing crypto-assets through a platform are subject to EU law. A platform directed at EU clients without an EU authorisation risks enforcement by the CNB or by the national competent authority in the relevant member state, regardless of where the operator is incorporated. MiCA was specifically designed to close this gap.
Other frequent errors include: underestimating the substance requirement (CNB expects genuine Czech operational presence, not a registered address); failing to map the full scope of payment services against the EMI authorisation class applied for; submitting fit-and-proper documentation without adequate translation or without the professional-history depth the CNB expects; and applying for only one of the required licences — either the EMI or the CASP authorisation — when the business model clearly needs both from day one.
The cross-border interaction adds a further layer of complexity. A Czech EMI with EU-passported services serving clients in Germany, France or the Netherlands must comply with any host-state notification requirements and, where applicable, with host-state AML or consumer-protection rules that apply to the passported service. The Czech passport does not create a regulatory blank cheque for EU-wide activity without any local compliance obligation.
About OBOLUS
OBOLUS is an independent digital-asset law boutique acting exclusively for businesses. We advise exchanges, custodians, token issuers, payment firms and funds on licensing across more than 70 jurisdictions — mapping the operating licence, the payment layer and the custody authorisation as a single integrated structure, not as separate engagements. We map the licence stack across operating, custody and payment layers before you commit to a jurisdiction or a filing strategy. Our disputes team coordinates freezing relief and on-chain tracing across leading common-law forums when enforcement action or asset recovery becomes the priority. Digital assets are the whole of our practice. To discuss your situation, contact info@oboluslaw.com or reach us via t.me/oboluslaw.
By Aisha Tan, Licensing & Jurisdictions Analyst — specialising in EU payment-services authorisation, MiCA CASP applications and cross-border digital-asset licensing strategy across Central and Eastern Europe.
FAQ
How long does a crypto licence take to obtain?
Timelines vary significantly by jurisdiction, licence type and the completeness of the application file at the point of submission. In the Czech Republic, an EMI authorisation from the Czech National Bank is a thorough prudential review; operators should plan for a process measured in multiple months from a complete submission, not weeks. A CASP authorisation under MiCA involves a similar review cycle. Front-loading the documentation — particularly fit-and-proper files, the AML programme and the business plan — is the single most effective way to compress the timeline.
Which jurisdiction is best for licensing my crypto business?
There is no single best jurisdiction. The right answer depends on where your clients are, the services you offer, your capital position and your banking relationships. A Czech EMI with EU passporting suits a payment-service-facing operator targeting European clients. A VARA licence in Dubai suits a firm focused on the Gulf and Asia-Pacific. A Singapore MAS licence under the Payment Services Act suits an operator with a Southeast Asian client base. OBOLUS assesses the full operating, custody and payment stack before recommending a domicile — the cheapest or fastest jurisdiction is rarely the most commercially durable.
Do I need a separate custody licence?
In most regulated regimes, yes. Custody of digital assets on behalf of clients is a regulated activity distinct from exchange or payment services. Under MiCA, providing crypto-asset custody and administration is a specific CASP activity that requires authorisation. An EMI licence covers the fiat and payment layer but does not authorise custody of crypto-assets. A firm that holds client private keys or controls client wallets without the appropriate CASP custody authorisation is operating a regulated activity without a licence — a position that creates both regulatory and civil liability exposure.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.