Global Crypto Payment License Map: MSB, MiCA, MPI

If you're trying to launch a crypto payment product across more than one country, licensing is probably the question you're least sure how to answer. It's not one license — it's a different regime in nearly every jurisdiction, each with its own name, capital threshold, and timeline, and getting it wrong doesn't just mean a fine. It can mean you're not legally allowed to operate at all.

That's the real weight behind licensing: it's the entry ticket to the business, a matter of legal and regulatory standing, and it typically takes years and millions of dollars. Compliance for crypto payments actually splits into two entirely different blocks that have to be handled separately — licensing (can you operate legally at all) and technical, transaction-level compliance such as AML/CFT, KYT, and KYA (is each transaction compliant as you operate).

A license without technical compliance can get you sanctioned or de-licensed for missing a sanctioned address or a laundering transaction; technical compliance without a license means you can't legally operate in the first place. This piece focuses on the first block — where the license comes from and what it actually requires — as part of our broader crypto payment security and compliance playbook.

Quick-Reference: Payment Licenses by Jurisdiction

Here's the main license for payment companies (not stablecoin issuers) in each jurisdiction covered below:

Two Kinds of Crypto License, Easy to Confuse

Before you map jurisdictions, it helps to separate two license types that get conflated constantly:

• Stablecoin issuance licenses — if you want to issue your own stablecoin, you need an issuer framework like the GENIUS Act / OCC Charter in the US or MiCA's EMT in the EU. The core requirements here are full reserves, redeemability, and reserve disclosure.
• Payment / transfer licenses — if you're using existing USDC or USDT to receive, pay, and settle, what you actually need is a money-transmission license (US state MTLs) or a payment-institution license (Singapore PSA, EU EMI/CASP). The core requirements here are capital, AML/CFT, and segregation of customer funds.

Most crypto payment companies use mainstream stablecoins for payment and don't issue their own — so what they need is a payment license, not an issuance license. That distinction is why the rest of this piece focuses on payment/transfer licensing and treats issuer frameworks only as background.

United States: Federal MSB + State MTLs

US crypto payment compliance is usually a two-layer stack. Anyone engaged in money transmission — including transferring convertible virtual currency — has to register with FinCEN as an MSB (Money Services Business, via Form 107), implement AML procedures, and report suspicious activity through SARs. MSB registration is free, federal, and comes with no license number, but it is not a state license. Canada (FINTRAC) and many other jurisdictions have equivalent MSB-style registration requirements, so this is a check you'll repeat market by market.

On top of that federal registration, operating in each US state also requires a state-by-state MTL (Money Transmitter License). Each state sets its own requirements, minimum capital, and review process, and nationwide coverage typically takes years and millions of dollars. Circle currently holds MTLs in 46 states.

Two other pieces worth knowing: the GENIUS Act (signed July 18, 2025) is the first US federal framework for stablecoin regulation, and gives issuers a choice between a federal path (OCC National Trust Bank Charter) or a state path when issuance is below $10 billion. In December 2025, the OCC conditionally approved national trust bank charter applications from five institutions — including Circle, Ripple, Paxos, BitGo, and Fidelity (Circle received final approval in July 2026).

The charter's core value is federal preemption: it exempts the holder from applying for MTLs state by state, in exchange for OCC capital requirements, examination, and fiduciary duties. It's worth being precise here — it's a trust charter for digital-asset custody, not a full commercial banking charter that can take deposits and lend, and the 100% full-reserve requirement belongs to the GENIUS Act's rules for stablecoin issuers, not to the trust charter itself. Separately, New York's BitLicense is a dedicated state crypto-asset license covering transmission, custody, buying and selling, exchange, and issuance.

European Union: MiCA CASP

MiCA (Markets in Crypto-Assets Regulation) is the EU's unified crypto-asset regulatory framework, and its timeline matters for anyone planning EU coverage: the stablecoin rules (ART/EMT) began to apply on June 30, 2024, the CASP authorization requirement took effect on December 30, 2024, and the transition period ended on July 1, 2026 — after which any entity without CASP authorization has to stop providing services. As of June 2026, about 204 crypto-asset service providers had obtained full CASP authorization, a number expected to keep rising after that deadline.

It's worth being clear about what a CASP license actually is: it's not the same thing as the older VASP registration. A VASP registration just confirms a company exists and commits it to AML rules; a CASP license means a financial regulator has reviewed and approved the company's business qualifications.

Here's the part that trips up payment companies specifically: a CASP is often not enough on its own. MiCA's CASP covers crypto services — custody, exchange, transfer — but the European Banking Authority made clear in 2026 that a company handling EMT (single-fiat stablecoins, like a euro stablecoin) transfers usually also needs a Payment Institution (PI) or Electronic Money Institution (EMI) license under PSD2.

So a company running end-to-end stablecoin payments in the EU often needs both a CASP and an EMI/PI — which is exactly the setup Ripple, Stripe's Bridge, and Circle use, pairing a CASP for crypto services with an EMI for issuance and the fiat side.

For issuers specifically, MiCA also sets special stablecoin provisions: EMT holders can redeem at par at any time; a "significant" EMT (over 10 million users or over €5 billion market cap) faces stricter capital requirements and direct EBA supervision; and a non-euro-pegged significant stablecoin has a daily transaction cap of €200 million.

Singapore, Hong Kong, UK, and UAE

Singapore regulates by activity under the Payment Services Act (PSA, in force since 2020). DPT (Digital Payment Token) services split into two tiers: a company with monthly transaction volume at or below SGD 3 million is a Standard Payment Institution (SPI, minimum capital SGD 100K); above that, it needs a Major Payment Institution (MPI, minimum capital SGD 250K) license.

An MPI carries real customer-fund protection duties — assets must be segregated, held in trust, and kept separate from the firm's own funds, and MAS also requires about 90% of customer assets to sit in cold wallets. DPT licensing takes a while, often 9-18 months. Since June 30, 2025, a new DTSP license also covers digital-token services aimed at overseas customers.

Hong Kong breaks licensing out by activity, and payment companies mainly deal with two of them. The MSO (Money Service Operator, under AMLO Cap. 615, regulated by Customs) covers currency exchange and remittance — most crypto OTC exchange, fiat-to-stablecoin exchange, and cross-border remittance fall here, with a relatively low bar: no minimum capital and a 2-year validity.

The SVF (Stored Value Facility, under PSSVFO Cap. 584, regulated by the HKMA) targets e-wallets and stored-value products, with a minimum capital of HKD 25 million — holding a customer's fund balance, including in a stablecoin wallet, can trigger this one. As background, a virtual-asset trading platform needs the SFC's VATP license (in force since June 2023, with 13 licensed platforms as of May 2026), and Hong Kong is separately legislating licensing regimes for VA dealing and VA custody, expected to reach the Legislative Council in 2026.

The United Kingdom brought crypto assets under FCA supervision through legislation in February 2026, with final rules published in June 2026 taking effect in October 2027, and an authorization application window running September 2026 to February 2027. Unlike the EU, the UK treats stablecoins and electronic money as two separate regimes — and an existing anti-money-laundering (MLR) registration doesn't automatically convert into the new license; you have to apply again.

The UAE runs two parallel systems that aren't interchangeable. Dubai's VARA (Virtual Assets Regulatory Authority) is built specifically for virtual assets and issues 8 categories of activity license — advisory, broker-dealer, custody, exchange, lending, management and investment, transfer and settlement, and issuance. Abu Dhabi's ADGM (regulated by the FSRA, common-law) is more institution-facing and requires separate legal entities for different licenses; Binance, for example, runs its global platform in ADGM through three separate entities — Nest Exchange, Nest Clearing and Custody, and Nest Trading.

How License Portfolios Actually Look

A globally operating crypto payment company usually ends up holding a portfolio of licenses across several countries, not one master license. A few examples:

Eight Requirements That Apply Everywhere

Whatever jurisdiction you're licensed in, a crypto payment company still needs to satisfy the same basic set of requirements:

Licensing gets you in the door, but it's the AML/CFT line in that table that has to run continuously, transaction by transaction, once you're operating. If you want to see how that side works day to day — KYC/KYB, KYA, KYT, sanctions screening, and the Travel Rule — our piece on on-chain compliance: AML/CFT, freeze risk, and a 7-point checklist covers it, and its checklist walks through how to put both sides — licensing and technical compliance — into a single operating plan.

For how licensing sits alongside architecture, key management, and on-chain AML/CFT in one program, download our crypto payment security and compliance playbook (PDF).

FAQ

What's the difference between a stablecoin issuance license and a payment license? An issuance license (like the GENIUS Act / OCC Charter in the US, or MiCA's EMT in the EU) is for companies that issue their own stablecoin, with core requirements around full reserves, redeemability, and reserve disclosure. A payment license (US state MTLs, Singapore PSA, EU EMI/CASP) is for companies using existing stablecoins like USDC or USDT to receive, pay, and settle, with core requirements around capital, AML/CFT, and segregation of customer funds. Most crypto payment companies only need the second kind.

Is MSB the same as an MTL in the United States? No. MSB registration with FinCEN is a federal-level AML registration — free, with no license number — that anyone doing money transmission must complete. An MTL (Money Transmitter License) is a separate state-by-state license on top of that; Circle, for example, holds MTLs in 46 states.

When did the MiCA CASP transition period end? The transition period ended July 1, 2026. Any entity operating in the EU without CASP authorization by that date had to stop providing services. As of June 2026, about 204 crypto-asset service providers had obtained full CASP authorization.

Is a CASP license enough to run stablecoin payments in the EU? Often not on its own. MiCA's CASP covers crypto services like custody, exchange, and transfer, but the EBA has made clear that a company handling EMT transfers usually also needs a Payment Institution (PI) or Electronic Money Institution (EMI) license under PSD2 — the setup Ripple, Stripe's Bridge, and Circle all use.

What's the difference between Singapore's SPI and MPI licenses? Both sit under the Payment Services Act for DPT (Digital Payment Token) services. A Standard Payment Institution (SPI, minimum capital SGD 100K) applies to companies with monthly transaction volume at or below SGD 3 million; above that, a Major Payment Institution (MPI, minimum capital SGD 250K) is required, which also carries duties to segregate customer assets and keep about 90% of them in cold wallets.