Why license architecture matters
Your license footprint determines three things: which clients you can onboard, which products you can offer, and which rails you can operate on. A badly chosen license stack leaves capital trapped in jurisdictions where you cannot scale. A good stack gives you a competitive moat.
Brazil
Framework
Law 14.478/2022 established the legal basis. Banco Central do Brasil (BaCen) is the primary authority for VASP activity. The VASP operational framework is live from 2026, with detailed rules published in phases.
Scope granted
- Virtual asset intermediation, custody, and transfer.
- Integration with PIX and domestic payment rails (critical for BRL-anchored flows).
- FX regime interaction: operators must coordinate with BaCen's eFX framework.
Indicative cost & timeline
Licensing cost is moderate relative to the US or EU; full compliance build typically 12-18 months. Capital requirements scale with activity tier.
Strategic value
Essential for any institution with material BRL flows. Brazil's $1.8T annual FX market and rapidly growing stablecoin adoption make it one of the most attractive single jurisdictions globally.
United States
Framework
The US is a multi-layer regime. A VASP typically needs:
- FinCEN MSB registration. Baseline federal registration. Relatively fast and inexpensive.
- State-by-state Money Transmitter Licenses (MTLs). Required to operate in most states individually. Typically 40 to 50 licenses to cover the full country. Significant cost and time.
- NYDFS BitLicense. New York's dedicated framework. High bar, but valuable for enterprise clients.
- Trust charter. Some entities (e.g., Circle via Bermuda/US structure) pursue trust status for specific products.
Indicative cost & timeline
Full multi-state MTL coverage: $5M-$20M+ in legal, surety bonds, and capital, over 24-48 months.
Strategic value
Non-negotiable for institutional USD flows at scale. Most non-US players enter via partnerships or subsidiary structures with existing licensed entities.
European Union (MiCA)
Framework
The Markets in Crypto-Assets Regulation (MiCA) came into full effect in 2024-2025, providing a unified EU regime. Key authorizations include:
- CASP (Crypto-Asset Service Provider) authorization. The core VASP-equivalent license.
- EMT / ART (E-Money Token / Asset-Referenced Token) issuer authorization. For issuing stablecoins inside the EU.
- Passporting. A CASP authorized in one member state can operate across the full EU single market via passporting.
Indicative cost & timeline
CASP authorization in a lead member state (often France, Germany, Malta, Ireland): 12-18 months, capital requirements scaled to activity class.
Strategic value
Single license unlocks the EU's 450M-consumer, ~$17T-GDP market. Highly attractive for institutional players. MiCA compliance also increasingly functions as a global quality signal.
Hong Kong
Framework
Dedicated VASP licensing regime under the SFC. Distinct VASP licenses for retail-facing and professional-investor-facing activities. Stablecoin-specific regime under the Hong Kong Monetary Authority (HKMA) for issuance.
Indicative cost & timeline
12-24 months, substantial capital and operational requirements. Hong Kong has actively positioned itself as a crypto hub and the regulator is constructive but thorough.
Strategic value
Gateway to Asian institutional flows, particularly for China-adjacent trade. Increasingly the preferred Asian jurisdiction for institutional issuers.
United Arab Emirates
Framework
Two primary regimes:
- VARA (Dubai Virtual Assets Regulatory Authority). Dedicated, prescriptive VASP framework across multiple activity types.
- ADGM (Abu Dhabi Global Market). A common-law jurisdiction with its own FSRA-supervised framework.
Indicative cost & timeline
12-24 months, moderate capital requirements, scaled by activity class.
Strategic value
UAE is emerging as a major institutional hub, attractive for intra-MENA flows and increasingly for African corridors. Tax regime and regulatory speed are advantages.
Singapore
Framework
Payment Services Act (PS Act), administered by the Monetary Authority of Singapore (MAS). A Digital Payment Token (DPT) license is the core VASP-equivalent. MAS is considered among the most rigorous regulators globally.
Indicative cost & timeline
18-36 months, high compliance bar.
Strategic value
Gateway to Southeast Asian flows and a strong regulatory signal. Slower licensing path than Hong Kong or UAE but a benchmark for institutional credibility.
Strategic patterns institutions actually use
Few institutions acquire licenses in every jurisdiction at once. Three recurring strategies:
- Pick a HQ, then passport. Anchor the business in one jurisdiction (often MiCA in the EU, or a VARA+ADGM combination in UAE), then extend via passporting or reciprocal MOUs. Efficient for regional-first businesses.
- Multi-hub. Build parallel licensed entities in two or three major hubs (typically EU + US + Asia) to serve global institutional clients directly. Capital-intensive; appropriate only for scale players.
- Partner on an existing licensed VASP. For regulated financial institutions (banks, PSPs, brokers, fintechs) that already hold a license domain, the faster path is often to leverage a partner's VASP infrastructure under their own license. This is the explicit design of VASP as a Service: the licensed institution keeps its client relationship, brand, and regulatory umbrella, while inheriting the technical stack.
If your license roadmap will take more than 18 months and your business cannot wait, a partner-based entry into stablecoin rails is almost always the right first move. Own-license optionality can be retained for later phases.
Comparative snapshot
| Jurisdiction | Time to authorization | Indicative setup cost | Regime strength |
|---|---|---|---|
| Brazil (BaCen VASP) | 12-18 months | Moderate | Emerging, pragmatic |
| US (MSB + MTLs + NYDFS) | 24-48 months | Very high | Fragmented, strict |
| EU (MiCA CASP) | 12-18 months | High | Unified, rigorous |
| Hong Kong (SFC VASP) | 12-24 months | High | Constructive, thorough |
| UAE (VARA / ADGM) | 12-24 months | Moderate | Pragmatic, fast |
| Singapore (MAS DPT) | 18-36 months | High | Among the strictest globally |
Bottom line
The license landscape is fragmented by design. Institutional strategy is less about collecting licenses and more about picking the minimum viable footprint that unlocks your priority corridors. For most institutions, that is one strong HQ license combined with partner-based access to other jurisdictions via a VASP-ready infrastructure.