Crypto VASP License Italy: OAM & MiCA CASP Guide 2025
Italy is among the top 10 EU countries for crypto adoption (Chainalysis, 2023). Since December 30, 2024 — the date of full MiCA (Markets in Crypto-Assets, EU Regulation 2023/1114) applicability — operating a crypto business in Italy requires dual compliance: OAM (Organismo Agenti e Mediatori) registration for AML purposes AND MiCA CASP authorization from CONSOB (Commissione Nazionale per le Società e la Borsa) for market access.
Most founders know about one or the other — but not both. OAM registration alone is no longer sufficient for market access under MiCA. The CONSOB CASP authorization process adds months of preparation time and significant professional costs on top of OAM. And for non-EU founders, the correct entry point is the Italian SRL — not a branch or representative office.
This guide explains the full regulatory framework: the OAM-MiCA dual-track system, the sequential pathway from SRL formation to CASP authorization, MiCA capital requirements by service type, the CONSOB application dossier requirements, and why Italy's MiCA authorization is an EU passport to all 27 member states. Our Italian regulatory lawyers in Milan advise crypto businesses through OAM registration and MiCA CASP applications. Every VASP/CASP needs an Italian SRL as the legal vehicle — the first step before OAM or MiCA application is forming your Italian legal entity.
Italy's Crypto Regulatory Framework: OAM and MiCA Explained
Italy's crypto regulatory system operates on two distinct tracks that both apply concurrently in 2025. Understanding each track — and how they interact — is the foundation of any compliant Italian crypto business strategy.
The Pre-MiCA Track: OAM VASP Registration
The OAM register for VASPs (Virtual Asset Service Providers) was established by MEF (Ministero dell'Economia e delle Finanze) Decree of May 13, 2022 and became operational on May 16, 2022. The OAM register is an AML oversight mechanism — it operates under D.Lgs. 231/2007, Italy's primary anti-money laundering legislation.
OAM is NOT a financial conduct regulator. It does not license crypto businesses to offer services — it registers them for AML compliance purposes. An OAM-registered VASP has confirmed its AML framework meets Italian requirements; it has not received authorization to conduct regulated financial activity.
Who is a VASP under the OAM framework: Any entity providing (for or on behalf of clients): exchange of virtual assets for fiat currency; exchange of virtual assets for other virtual assets; transfer of virtual assets; custody and administration of virtual assets; participation in ICOs or related financial services. Approximately 100–150 VASPs were registered with OAM as of early 2025.
The Post-December 2024 Track: MiCA CASP Authorization
MiCA (EU Regulation 2023/1114) became fully applicable on December 30, 2024. CONSOB was designated Italy's National Competent Authority (NCA) for MiCA. Under MiCA, the terminology shifts from "VASP" to "CASP" — Crypto-Asset Service Provider — but the businesses covered are substantially the same.
MiCA CASP authorization is the market access license. Without CONSOB authorization, a crypto business cannot legally offer services to Italian clients post-December 30, 2024.
Services covered by MiCA requiring CASP authorization:
- Exchange of crypto-assets for fiat or other crypto-assets
- Custody and administration of crypto-assets on behalf of clients
- Operation of a trading platform for crypto-assets
- Order reception and transmission
- Execution of orders on behalf of clients
- Portfolio management of crypto-assets
- Provision of advice on crypto-assets
- Placement of crypto-assets
- Transfer services for crypto-assets
Key Terminology Shift
Under MiCA, "VASP" is replaced by "CASP" in EU regulatory language — the same businesses, different regulatory terminology. Italian practitioners use both terms interchangeably. When a client or regulator uses "VASP" they typically mean the OAM registration context; "CASP" refers to the MiCA authorization context.
Travel Rule: EU Regulation 2023/1113 (the EU Transfer of Funds Regulation for crypto) also became fully applicable December 30, 2024. It requires CASPs to collect, verify, and transmit originator and beneficiary information for ALL crypto transfers above €0 — there is no de minimis threshold. Compliance infrastructure for Travel Rule must be in place from launch.
DAC8 (Council Directive 2023/2226): Requires CASPs to collect and report user transaction data to national tax authorities for automatic exchange. Transposition deadline 2026 — but CASPs must build data collection systems now to be ready.
The Dual-Track Problem: Do You Need OAM, MiCA, or Both?
The core confusion in Italian crypto regulation is whether OAM registration alone is sufficient — and the answer since December 30, 2024, is categorically no.
| Situation | OAM Registration | MiCA CASP Authorization |
|---|---|---|
| Already OAM-registered, operating pre-December 2024 | Maintain existing OAM registration | Must obtain MiCA CASP authorization to continue operations |
| Starting new crypto business in Italy from 2025 | Required (AML obligation, D.Lgs. 231/2007) | Required (market access, CONSOB) |
| Non-EU company passporting into Italy via another EU license | Not applicable (if not established in Italy) | MiCA passport notification to CONSOB instead |
| DeFi protocols (pure software, no client-facing services) | May be exempt (MiCA Art. 70 — ongoing clarification) | May be exempt (ongoing regulatory clarification) |
Practical conclusion for 2025: Any business offering commercial crypto services to Italian users must have BOTH OAM registration AND MiCA CASP authorization. Planning only for OAM is a compliance failure. Budget and timeline for both — and note that MiCA CASP preparation should begin concurrently with OAM registration, not after OAM is complete.
Step-by-Step: How to Legally Launch a Crypto Business in Italy as a Foreign Entrepreneur
The path from decision to authorization has six sequential steps. The total timeline from beginning to CASP authorization is realistically 6–12 months; budget 12–18 months for complex operations or dossiers.
Step 1 — Form Italian SRL with Correct Registered Office (3–8 weeks)
Requirements:
- Genuine Italian registered office — not a P.O. box; AML-compliant virtual office or physical office; genuine Italian registered office required for OAM and CONSOB
- Correct ATECO code for crypto/financial services activities (ATECO 2022 — choose the code most closely matching your specific service type)
- Share capital at least equal to MiCA minimum for your intended services (see capital requirements below)
City recommendation: Milan is strongly recommended for crypto businesses. Milan has the highest concentration of regulatory expertise, the strongest Italian fintech ecosystem, the closest relationships with CONSOB (Rome) accessible via well-established channels, and the UPC Local Division for any patent-related IP in your crypto technology.
Step 2 — Camera di Commercio Registration and Partita IVA
Automatic upon ComUnica filing. Confirm correct ATECO code — the code must accurately reflect crypto asset services. Partita IVA is issued simultaneously.
Step 3 — Appoint AML Compliance Officer
Mandatory for both OAM and MiCA. The AML compliance officer must be a qualified individual with demonstrated AML expertise (relevant professional qualifications, experience in AML compliance). Options:
- External consultant: a commercialista or lawyer specializing in AML; appropriate for smaller operations
- Internal appointment: an employee or director specifically hired for the role; preferred by CONSOB for its fit-and-proper assessment
The AML compliance officer appointment letter must be formalized (board resolution) and the individual's qualifications documented before OAM registration.
Step 4 — OAM Registration (6–10 weeks from start)
Submit application to the OAM Registro dei Soggetti che operano in valute virtuali. Required documents:
- Company incorporation documents (visura camerale, atto costitutivo + statuto)
- Partita IVA and codice fiscale aziendale
- Detailed description of services to be provided
- AML compliance manual (policies, procedures, customer onboarding, transaction monitoring, SAR process)
- AML officer appointment letter with qualifications
- Fit-and-proper declarations from all directors and beneficial owners
OAM review period: 30 working days from receipt of complete documentation (extendable if OAM requests additional information). Registration fee: €300–€500. Total realistic OAM timeline from initiation: 6–10 weeks.
Step 5 — Prepare MiCA CASP Dossier (2–4 months — begins concurrently with OAM)
Dossier preparation for CONSOB is the most time-intensive and professionally demanding step. Begin preparation immediately after Step 1 — do not wait for OAM registration to complete. Key components are detailed in the next section.
Step 6 — Submit CONSOB CASP Authorization Application
File the complete dossier with CONSOB in Rome. CONSOB has 40 working days from receipt of a complete application to render a decision. In practice, CONSOB almost always requests additional information (integrazioni), which pauses the 40-day clock — extending the total review period. Realistic total CONSOB review: 4–8 months from complete application submission; 6–12 months for complex dossiers.
MiCA CASP Authorization: Capital Requirements and Application Dossier
MiCA Minimum Capital Requirements (Art. 67 EU Regulation 2023/1114)
| Class | Capital Required | Services Included |
|---|---|---|
| Class 1 | €50,000 | Exchange for fiat/crypto; transfer of crypto-assets; order reception and transmission; execution of orders; placement of crypto-assets |
| Class 2 | €125,000 | Operation of trading platform; portfolio management; trading on own account |
| Class 3 | €150,000 | Custody and administration of crypto-assets on behalf of clients |
Companies offering multiple services from different classes must meet the highest applicable requirement. Capital must consist of paid-up share capital or reserves — no intangible assets count toward MiCA capital. The capital requirement is ongoing — it must be maintained throughout the authorization period, not just at the time of authorization.
CONSOB Fit-and-Proper Assessment
CONSOB assesses all directors, senior managers, and qualifying shareholders (≥10%) for:
- Professional experience: minimum track record in financial services, compliance, or relevant technical fields
- Good repute: no relevant criminal convictions (financial crimes, fraud, corruption)
- Independence: no conflicts of interest that compromise objectivity
CONSOB may request personal interviews with key individuals — particularly the AML compliance officer and senior directors.
MiCA CASP Dossier Components (CONSOB Application File)
| Component | Description |
|---|---|
| Business plan | 3-year financial projections; business model; target market; revenue model; stressed scenario analysis |
| Governance structure | Organizational chart; roles and responsibilities; decision-making authority; segregation of duties |
| AML/CFT manual | Complete policies and procedures; risk assessment; customer onboarding; transaction monitoring; Travel Rule compliance; SAR process |
| IT security policy | Cybersecurity framework; incident response plan; DORA-aligned digital resilience assessment; data protection (GDPR compliance) |
| Safeguarding policy | How client assets are segregated and protected from company insolvency risk |
| Conflicts of interest policy | Identification, management, and disclosure of conflicts |
| Fit-and-proper declarations | All directors, senior managers, and qualifying shareholders (≥10%) |
| Financial projections | Capital adequacy assessment; stressed scenario; revenue and cost model |
| Insurance documentation | Professional indemnity insurance (if applicable to service type) |
Common CONSOB rejection and information request triggers:
- Inadequate AML manual (insufficient detail, not adapted to specific crypto services offered)
- Insufficient paid-up capital relative to intended service scope
- Directors not meeting fit-and-proper (criminal record issues, insufficient relevant experience)
- Business plan not commercially credible (unrealistic revenue projections, unclear business model)
- IT security assessment inadequate (DORA requirements not addressed)
- Safeguarding policy not specific enough to the types of crypto-assets to be held
The EU Passport Opportunity: Why Italy Is a Strategic CASP Licensing Base
A CASP authorized by CONSOB in Italy can passport its services to all 26 other EU member states without separate licensing in each country. This is MiCA's transformative feature for crypto businesses — a single authorization unlocks the entire EU single market for crypto services.
How MiCA Passporting Works:
- CONSOB authorizes the Italian CASP
- The CASP notifies CONSOB of intent to passport to specific EU member states
- CONSOB notifies the host country NCA within 10 working days
- The host NCA has 10 working days to confirm (or object on specific grounds)
- The CASP can then begin offering services in the host country
The EU passport covers all services for which the CASP is authorized — it is not service-by-service notification.
Why Italy as the MiCA Licensing Base:
- Market access: Italy is the 3rd largest EU economy (Eurostat, 2023) — Italian authorization provides immediate access to a major EU market, not just a gateway to passport into larger markets
- Regulatory credibility: CONSOB is a well-regarded securities regulator with decades of capital markets oversight experience; CONSOB authorization carries credibility across EU regulatory circles
- Infrastructure: Milan's fintech ecosystem, English-speaking legal counsel, regulatory expertise, and CONSOB relationships accessible from Milan
- Strategic position: Italy-first approach is optimal if you plan to serve Italian users AND passport to Germany, France, Spain, and other major EU markets
Comparison with Alternative EU Licensing Bases:
| Jurisdiction | Regulator | Domestic Market | Timeline | Considerations |
|---|---|---|---|---|
| Italy | CONSOB | 3rd largest EU | 6–12 months | Large domestic market; well-regarded regulator |
| Malta | MFSA | Small | 6–12 months | Strong crypto history pre-MiCA; some reputational concerns |
| Lithuania | Bank of Lithuania | Small | 4–8 months | Fast-track fintech process; smaller market |
| Luxembourg | CSSF | Small | 9–18 months | High prestige; expensive; complex |
Italy's combination of a large domestic market, stable regulatory framework, and the EU passport mechanism makes it the strongest choice for non-EU founders seeking EU-wide crypto market access.
Realistic Costs and Timelines
Cost Table
| Item | Cost Range |
|---|---|
| Italian SRL incorporation | €2,500–€6,000 (excluding capital) |
| OAM registration fee | €300–€500 |
| CONSOB CASP application fee | €5,000–€20,000 (fee schedule pending final CONSOB implementation) |
| Legal advisory for MiCA dossier preparation | €15,000–€60,000+ (specialist crypto/regulatory counsel) |
| AML compliance officer (external consultant) | €5,000–€20,000/year |
| Accounting — first year (commercialista + transfer pricing if applicable) | €3,000–€10,000 |
| Minimum capital (Class 1 services) | €50,000 (paid-up — working capital, not a fee) |
| Total first-year budget — Class 1 exchange services | €25,000–€100,000+ |
| Total for Class 3 custody services | €150,000 capital + €30,000–€120,000+ professional costs |
For accounting and AML compliance for Italian crypto companies, ongoing annual compliance costs are significant — factor these into your business plan's financial projections for the CONSOB dossier.
Cost efficiency note: Investing in a high-quality dossier upfront — thorough AML manual, credible business plan, complete fit-and-proper documentation — significantly reduces CONSOB back-and-forth time. Underprepared applications cost more in professional fees (extended advisory engagement during information requests) and in time (each information request cycle adds months).
Timeline Summary
| Phase | Realistic Duration |
|---|---|
| SRL formation | 3–8 weeks |
| OAM registration | 6–10 weeks (concurrent with SRL formation and dossier prep) |
| MiCA dossier preparation | 2–4 months |
| CONSOB review (official) | 40 working days from complete application |
| CONSOB review (realistic) | 4–8 months (6–12 months for complex dossiers) |
| Total: SRL to CASP authorization | 6–12 months realistic; budget 12–18 months |
FAQ — Crypto VASP License Italy
Q: Do I need a license to operate a crypto exchange in Italy?
Yes. Since December 30, 2024, operating a crypto exchange (or any CASP service) in Italy requires MiCA CASP authorization from CONSOB. In parallel, all VASPs/CASPs must register with OAM (Organismo Agenti e Mediatori) for AML compliance purposes. Both registrations are mandatory — OAM alone is insufficient for market access under MiCA.
Q: What is the OAM register in Italy?
OAM (Organismo Agenti e Mediatori) is Italy's AML oversight body for virtual asset service providers. The OAM register for VASPs became operational on May 16, 2022, following the MEF Decree of May 13, 2022. OAM registration takes approximately 30 working days after complete documentation is submitted and costs €300–€500. OAM registration is an AML compliance obligation — it is separate from and does not substitute for MiCA CASP market access authorization.
Q: Can a foreign company offer crypto services in Italy without setting up an Italian company?
Non-EU companies cannot access the Italian crypto market without either (a) establishing an Italian SRL and obtaining OAM + CASP authorization, or (b) passporting into Italy from an EU MiCA-authorized CASP license obtained in another EU member state. There is no pathway for non-EU companies to serve Italian users directly without EU or Italian regulatory authorization.
Q: How long does it take to get a crypto license in Italy?
OAM registration takes 6–10 weeks from start. Full MiCA CASP authorization from CONSOB takes 4–8 months from a complete application (6–12 months for complex dossiers). Total time from SRL formation to CASP authorization: realistically 6–12 months; budget 12–18 months for conservative planning.
Q: What is MiCA and how does it affect crypto businesses in Italy?
MiCA (Markets in Crypto-Assets, EU Regulation 2023/1114) is the EU's comprehensive regulatory framework for crypto-asset service providers. It became fully applicable December 30, 2024. For Italy, CONSOB is the designated National Competent Authority. MiCA requires all CASPs serving Italian users to obtain CONSOB authorization (unless passporting from another EU member state's MiCA license). The benefit: Italy-issued MiCA licenses are passportable to all 27 EU member states.
Begin Your Italian Crypto Licensing Process
Operating a crypto business in Italy in 2025 requires both OAM registration (AML compliance, 6–10 weeks) and MiCA CASP authorization from CONSOB (4–12 months). First-year budgets of €25,000–€100,000+ before minimum capital are realistic. Begin SRL formation and AML compliance officer appointment immediately — these are prerequisites for both OAM and CONSOB processes.
Book a free regulatory consultation — our team guides crypto businesses through OAM registration and MiCA CASP authorization in Italy, from SRL formation through to CONSOB dossier submission. Contact us at info@company-italy.com, or reach our offices in Milan (+39 02 8088 1240), Rome (+39 06 4520 7330), or Florence (+39 055 264 8120).
This guide provides general legal information only and does not constitute legal advice. Italian regulatory requirements for crypto businesses are subject to rapid change — always verify current regulations with a qualified Italian regulatory lawyer before making licensing decisions. Contact our team for a consultation specific to your situation.