Where to License a Crypto Exchange in 2026: EU, Switzerland, Dubai, US, Canada and Panama Compared

1.  Six routes compared: Latvia (EMI licensing and MiCA CASP registration), Switzerland (SRO membership under AMLA), Dubai (VARA licensing), the United States (FinCEN MSB registration), Canada (FINTRAC MSB registration) and Panama (no crypto-specific license).

2.  Regulatory capital ranges from nothing in Panama to €350,000 for a Latvian EMI license and AED 600,000 for a Dubai VARA license covering own custody.

3.  Timelines run from 2 to 3 weeks for Panama incorporation, 2 to 3 months for a US MSB, 3 to 4 months for Swiss SRO membership, 4 to 6 months for a Canadian MSB, and 6 to 9 months for Dubai VARA.

4.  Only Latvia offers EU passporting. An EMI license passports under PSD2 to 27 EU member states plus Norway, Iceland and Liechtenstein.

5.  The cheapest and fastest route is rarely the right one. Swiss SRO membership excludes stablecoin issuance and lending, Canadian fiat payment services may trigger Bank of Canada RPAA registration, and Panama shifts the entire compliance burden onto the operator.

Choosing where to license a crypto exchange is usually framed as a cost question. It is not. The jurisdiction determines which activities the business is permitted to conduct, which banks will engage with it, how much capital sits ring-fenced and unavailable for operations, and how long it takes before revenue can begin.

This comparison sets out six routes side by side: Latvia in the European Union, Switzerland, Dubai, the United States, Canada and Panama. Each is covered in depth in a separate guide. What follows is the decision layer above those guides, showing where the routes genuinely differ and which differences matter before a single application is submitted.

All regulatory capital figures, state fees and timelines below are the figures stated in DM Strategy's jurisdiction documentation. Amounts are shown in their original currency and are not converted, because exchange rates move and the regulator sets the obligation in the local unit.

The Six Jurisdictions at a Glance

Six jurisdictions are commonly considered for crypto exchange and digital asset operations: Latvia, Switzerland, Dubai, the United States, Canada and Panama. They differ in regulator, regulatory capital, state fees and time to market, and each supports a different set of permitted activities.

Latvia: EMI and CASP Licensing in the European Union

Latvia offers two authorisations that can be held together: an Electronic Money Institution license covering fiat payment services, and a MiCA-compliant Crypto-Asset Service Provider registration covering crypto custody, exchange and transfer. Both are supervised by the Bank of Latvia.

A full EMI license enables a business to issue e-money, open payment accounts and offer a wide range of payment services across the European Economic Area. It is passported under the PSD2 directive to 27 EU member states plus three EFTA countries: Norway, Iceland and Liechtenstein. No other route in this comparison provides that reach from a single authorisation.

Alongside the EMI license, Latvia offers a MiCA-compliant CASP registration. This dual path lets a business operate at the intersection of fiat and crypto, offering crypto custody, exchange and transfer under the same jurisdiction as its payment services.

Capital is the trade-off. An EMI license requires minimum own funds of €350,000, the highest fixed figure in this comparison. CASP capital depends on class: €50,000 for Class I activities, €125,000 for Class II, and €150,000 for Class III. These funds are ring-fenced, meaning they cannot be used for operating expenses.

State fees are ongoing rather than one-off. The EMI annual fee is €7,000 plus up to 1.4% of gross EMI income, capped at €100,000, reduced to €1,000 per year for innovative e-payments only. CASP carries an annual fee of €3,000 minimum plus up to 0.6% of gross crypto revenue. Both scale with revenue, so the true cost of the jurisdiction is a function of how large the business becomes.

Best suited to:

• Businesses that need both fiat payment services and crypto services under one regulatory roof
• Payment businesses whose target market is the European Economic Area
• Platforms that need EU passporting rather than separate authorisation in each member state

Switzerland: SRO Membership Under AMLA

Swiss SRO membership is affiliation with a FINMA-recognized Self-Regulatory Organization, allowing a company to operate as a financial intermediary under the Swiss Anti-Money Laundering Act. It is positioned as a faster and more cost-efficient alternative to EU CASP licensing under MiCA.

Switzerland is the low-capital, moderate-timeline option among the regulated routes. Approval typically comes within 3 to 4 months for incorporation and SRO membership combined, and capital starts from CHF 20,000 for a GmbH, fully payable at incorporation. An AG requires CHF 100,000, of which CHF 50,000 is payable at incorporation. Third-party costs are modest: approximately CHF 500 for state registration and approximately CHF 2,000 in SRO membership fees.

The route also carries the reputational weight of a leading financial jurisdiction and access to the Crypto Valley ecosystem in Zug.

The constraint is scope. SRO membership covers financial intermediary activity under AMLA, but several business models fall outside it and require direct FINMA authorisation:

• Issuance of fiat-backed stablecoins
• Deposit-taking from the public
• Credit or lending services
• Operating as a bank or payment institution

Switzerland also requires at least one Swiss-resident director, for both an AG and a GmbH. Founders who do not want to appoint a third-party resident director may instead pursue a Swiss work or residence permit, with routes differing for EU and EFTA nationals compared with non-EU applicants.

Best suited to:

• Liquidity providers and market makers
• OTC crypto trading desks
• Crypto exchanges serving private or high net worth clients
• Crypto brokerage services

Dubai: VARA Virtual Asset Licensing

The Virtual Assets Regulatory Authority is the world's first specialised regulator for virtual assets. It governs all virtual asset activities carried out in or from the Emirate of Dubai, including Mainland Dubai and most free zones such as DMCC, DWTCA and DAFZA, with the exception of DIFC.

VARA is the most demanding route in this comparison on every axis except one. Estimated duration is 6 to 9 months. Regulatory capital is a separate deposit of AED 400,000 for third-party custody or AED 600,000 for own custody, held in fiat in a UAE corporate bank account after initial approval. It is distinct from incorporation share capital, cannot be combined with it, and must remain ring-fenced and readily available, often supported by a bank letter confirming no restrictions or liens.

State fees are charged per licensed activity rather than per entity. The table below sets out the published schedule.

Adding activities to the same entity is discounted. The first activity is charged at the full application fee, and each additional activity is charged at 50% of its own application fee, known as the extension fee. A company applying for Exchange Services, Custody Services and Advisory Services pays AED 100,000 plus AED 50,000 plus AED 20,000, a total of AED 170,000 in application fees. Annual supervision fees are not discounted and apply per activity, giving AED 280,000 per year in that example.

That distinction matters more than the headline number. Application fees are a one-off; supervision fees recur every year and scale with how many activities the license covers. A business that applies broadly to preserve optionality pays for that optionality annually.

On governance, Dubai is more flexible than Switzerland. No UAE national or resident UBO or director is required. The compliance officer, however, must be appointed in-house rather than outsourced, and may also act as the money laundering reporting officer.

Best suited to:

• Crypto exchanges, custodians and wallet providers
• OTC desks and brokers
• Crypto funds, investment managers and token issuance platforms
• Institutional virtual asset service providers scaling globally

United States: MSB Registration With FinCEN

A US Money Services Business registration is a federal registration with FinCEN, the Treasury authority responsible for anti-money laundering enforcement. Unlike most jurisdictions, it operates as a registration framework rather than a traditional licensing regime, allowing companies to register and begin operations subject to AML compliance requirements.

The structural difference is important. There is no approval gate in the way there is with VARA or the Bank of Latvia. A company incorporates a US entity, usually an LLC, obtains an Employer Identification Number from the IRS, prepares its AML and BSA compliance policies, submits FinCEN Form 107, and appears in the FinCEN MSB public registry. Estimated time to registration is approximately 2 to 3 months.

Registration must be renewed every two years, which is a recurring obligation no other route in this comparison carries in the same form.

The complication is state law. Federal registration does not resolve state-level money transmitter licensing, and that is where US structuring becomes genuinely difficult. Certain states such as Montana do not require an additional state-level Money Transmitter License, which is what makes them attractive for international fintech structures.

Permitted activities under a registered MSB include money transmission, foreign currency exchange, virtual currency exchange and transfer, digital asset payment processing, cross-border remittance, issuance and redemption of stored value instruments, and crypto-to-fiat settlement infrastructure. The actual scope depends on the business model and compliance structure.

Best suited to:

• Cryptocurrency exchanges and OTC crypto brokerage desks
• Digital asset payment gateways and crypto-to-fiat on and off-ramp providers
• Cross-border remittance platforms and payment service providers
• Stablecoin payment infrastructure and fintech payment processing platforms

Canada: MSB Registration With FINTRAC

A Canadian Money Services Business registration is made with FINTRAC and allows a company to operate in cross-border payments, currency exchange, payment processing and virtual asset services. It does not require large paid-up capital, and Canadian MSBs can serve clients internationally without geographical restrictions.

Canada occupies the middle ground: a globally recognised jurisdiction with AML and CTF standards aligned to FATF recommendations, no significant capital requirement, and a registration process of approximately 4 to 6 months. It supports both traditional payment services and virtual currency operations, which makes it viable for businesses that would otherwise need two separate authorisations.

The process runs in four stages: incorporation of a Canadian company with corporate structuring and a legal address, preparation and submission of the FINTRAC MSB registration, development of the internal compliance documentation required for MSB operations, and, where applicable, registration under the Bank of Canada Retail Payment Activities Act framework.

That fourth stage is the one most often missed. If the company provides fiat payment services involving client funds or payment accounts, additional RPAA registration may be required. Activities involving digital assets or innovative payment services may require further regulatory analysis, and in some cases a legal opinion to confirm the regulatory classification and eligibility of the business model.

Best suited to:

• Crypto exchanges running fiat-to-crypto and crypto-to-fiat flows
• Payment gateways processing online payments for merchants and digital platforms
• Cross-border remittance and global payout platforms
• Foreign exchange platforms and fintech startups seeking a fast regulatory entry point

Panama: Operating Without a Crypto License

An unregulated setup means no crypto-specific license is required and no authority directly supervises crypto activities. Businesses can legally operate exchanges, wallets or OTC desks provided they comply with general laws such as AML and company registration, supported by a legal opinion from a local lawyer.

Panama is the outlier in this comparison and should be read as a different category rather than a cheaper version of the others. Typical incorporation takes 2 to 3 weeks from document submission. There is no regulatory capital, no application fee and no supervision fee, because there is no license. An International Business Company structure carries low or no corporate tax, and remote operation is possible.

Permitted activities include crypto exchange on a crypto-to-crypto and crypto-to-fiat basis, OTC trading, custody and wallet services, utility token issuance, and crypto payment processing. Banking, payment service provider and liquidity provider access are all available.

The cost is borne elsewhere. Because the jurisdiction does not supervise crypto operations, the burden of compliance sits entirely with the operator. Companies are expected to implement their own AML and KYC policies in line with international best practice, and must be prepared to demonstrate those internal controls to banks, EMIs, payment service providers and liquidity providers. A regulated counterparty will apply its own diligence in place of the missing regulator.

In practice this means the question is not whether Panama is legal. It is whether the specific banking and liquidity relationships the business depends on will onboard an unsupervised entity.

Best suited to:

• Businesses prioritising speed to market and low fixed cost
• Operators with the internal compliance capability to satisfy banking partners without a regulator standing behind them
• Structures where regulatory flexibility outweighs the credibility of a supervised license

Regulatory Capital Compared

Regulatory capital is the minimum own funds a licensed entity must hold as a prudential safeguard. It is typically ring-fenced, meaning it cannot be used for operating expenses and must remain available to meet regulatory and financial obligations.

One distinction is easy to miss and expensive to get wrong. Swiss share capital can be used for corporate expenses after incorporation. Latvian own funds and the Dubai VARA deposit cannot. Two jurisdictions can therefore show similar headline capital while differing entirely in how much working capital the business actually retains.

Timelines Compared

Timelines below are the estimated durations stated in DM Strategy's jurisdiction documentation, measured to registration or license issuance. Each depends on the complexity of the business model, the regulatory review and the timely provision of documentation by the client.

The Dubai timeline breaks into three stages: approximately 1 to 2 months to project kick-off and initial VARA approval, approximately 1 to 2 months to finalise incorporation and submit documents, and approximately 3 to 6 months for VARA review and approval. Initial approval allows company registration, bank account opening and hiring, but does not authorise the business to begin virtual asset operations.

Activity Limits That Change the Shortlist

Every route in this comparison carries scope limits or secondary requirements that are not visible in a cost table. These are the constraints most likely to eliminate a jurisdiction after the decision has already been made.

How to Narrow the Choice

The right jurisdiction is determined by the business model, not by cost. Permitted activities, target market and custody model eliminate most options before price becomes relevant.

Working through the comparison in the following order removes jurisdictions faster than comparing fees.

Start with permitted activities. If the business issues a fiat-backed stablecoin, takes deposits or lends, Swiss SRO membership is not sufficient on its own. If it needs fiat payment accounts in Canada, RPAA registration comes into scope. Scope eliminates more candidates than cost does.

Then apply the target market. Serving the European Economic Area from a single authorisation points to Latvia, because PSD2 passporting to 27 member states plus Norway, Iceland and Liechtenstein is not replicable from any other jurisdiction in this list. Serving clients internationally without geographic restriction is where the Canadian MSB framework is explicitly positioned.

Next, decide the custody model. In Dubai this is a direct financial consequence: own custody requires AED 600,000 rather than AED 400,000. In Latvia it moves the CASP class and the associated capital requirement.

Then test capital against the balance sheet, not against the cheapest option. The relevant question is not which figure is lowest but how much of it stays locked. Ring-fenced Latvian own funds and the Dubai deposit are unavailable for operations. Swiss share capital can be used for corporate expenses after incorporation.

Only then consider timeline. A 6 to 9 month VARA process is not automatically worse than a 2 to 3 week Panama incorporation. It is worse only if the business cannot fund the wait, and better if the resulting license is what unlocks the banking relationships and institutional counterparties the model depends on.

What a Jurisdiction Comparison Cannot Tell You

Structure, licensing and banking are interdependent decisions. The jurisdiction determines which licenses are available, the license determines which banks will engage, and the corporate structure either supports or blocks both. A comparison table addresses only the middle term.

Every figure in this article describes the licensing layer. None of it establishes whether a specific bank will open an account for a specific business model operating from a specific jurisdiction, and that is the question on which execution most often stalls.

The failure pattern is consistent. A jurisdiction is selected on cost and timeline, the entity is incorporated, the application is prepared, and only then does the banking conversation begin. At that point the structure is fixed and the options are to accept worse terms or restructure. Both are expensive, and both were avoidable.

Sequencing the decisions correctly means testing banking feasibility against the shortlist before the entity exists, not after the license is granted.

Frequently Asked Questions

Which jurisdiction is fastest for launching a crypto exchange?

Panama is fastest, with typical incorporation of 2 to 3 weeks from document submission and no crypto license required. Among licensed routes, US MSB registration is quickest at approximately 2 to 3 months, followed by Swiss SRO membership at 3 to 4 months and Canadian MSB registration at 4 to 6 months.

Which crypto jurisdiction has the lowest capital requirement?

Panama requires no regulatory capital because no crypto license exists. Canadian MSB registration does not require large paid-up capital. Among jurisdictions with a stated figure, Switzerland is lowest, starting at CHF 20,000 for a GmbH, compared with €350,000 for a Latvian EMI license.

What is the difference between a US MSB and a Canadian MSB?

A US MSB is a federal registration with FinCEN under the Bank Secrecy Act, completed in roughly 2 to 3 months and renewable every two years. A Canadian MSB is registered with FINTRAC, takes approximately 4 to 6 months, and may additionally require Bank of Canada RPAA registration for fiat payment services.

Does Swiss SRO membership allow stablecoin issuance?

No. Issuance of fiat-backed stablecoins requires direct FINMA authorisation and falls outside what SRO membership permits. The same applies to deposit-taking from the public, credit or lending services, and operating as a bank or payment institution. Each project is assessed for eligibility before proceeding.

How much are Dubai VARA fees for an exchange license?

Exchange Services carries an initial application fee of AED 100,000 and an annual supervision fee of AED 100,000. Additional activities under the same entity are charged at 50% of their own application fee. Annual supervision fees apply per activity and are required to maintain the license.

Which jurisdiction allows passporting across the European Union?

Only Latvia among the six compared here. A Latvian EMI license is passported under the PSD2 directive to 27 EU member states plus three EFTA countries: Norway, Iceland and Liechtenstein. Latvia also offers MiCA-compliant CASP registration alongside the EMI license.

Is it legal to run a crypto exchange in Panama without a license?

Yes. No crypto-specific license is required and no authority directly supervises crypto activities. Businesses can legally operate exchanges, wallets and OTC desks provided they comply with general laws including AML and company registration, supported by a legal opinion from a local lawyer.

What is the difference between MiCA CASP registration and Swiss SRO membership?

CASP registration in Latvia is a MiCA-compliant authorisation within the EU regulatory perimeter. Swiss SRO membership operates under the Swiss Anti-Money Laundering Act and is positioned as a faster, more cost-efficient alternative to EU CASP licensing, with approval typically within 3 to 4 months.

Do I need a state money transmitter license in the United States?

It depends on the state. Certain states such as Montana do not require an additional state-level Money Transmitter License, which makes them attractive for international fintech structures. Federal FinCEN registration is separate from, and does not replace, state-level requirements where they apply.

Which jurisdictions require a locally resident director?

Switzerland requires at least one Swiss-resident director for both an AG and a GmbH. Dubai VARA requires no UAE national or resident UBO or director, but the compliance officer must be appointed in-house rather than outsourced, and may also act as MLRO. 

‍

Related Guides

Each jurisdiction summarised above is covered in full in a dedicated guide.

Key Resources

Disclaimer

This article is for informational purposes only and does not constitute legal or regulatory advice. Regulatory requirements are subject to change. Consult a qualified advisor before making structural or compliance decisions.

DM Strategy advises fintech and crypto founders on structure, licensing and banking as one interconnected decision. To assess which jurisdiction fits your business model before you commit capital to it, book an introductory call at dmstrategy.io.

‍