# Crypto-asset regulation and tokenization in Estonia

> **Is crypto legal in Estonia?** Yes. Businesses have regulated routes to operate with crypto-assets, under predictable rules. Finantsinspektsioon publishes CASP procedures and has granted effective MiCA authorization, although in very small numbers (one CASP authorization by June 2026). In the Metlabs Regulatory Index it scores 95/100 and ranks 6 of 76 countries assessed (assessed October 3, 2026).

- **Author:** Javier Yáñez López, Legal & Regulatory at Metlabs
- **Last reviewed:** 2026-10-15
- **Latest regulatory change:** 2026-07-01
- **Metlabs Regulatory Index:** 95/100, rank 6 of 76 countries assessed
- **Web version:** https://metlabs.io/en/blockchain-regulation/estonia/

Finantsinspektsioon supervises crypto-asset market access under MiCA and Estonia’s Market in Crypto-Assets Act. The transitional period for FIU licenses ended on July 1, 2026, when, according to Finantsinspektsioon, their register data were canceled. The framework distinguishes CASP services, issuers and tokenized securities; a pending application or participation in the test environment does not amount to authorization to onboard new clients.

In Estonia, the move from former virtual currency service permissions to MiCA changes project preparation. Finantsinspektsioon supervises financial authorization, while the Financial Intelligence Unit retains anti-money laundering functions. A business must distinguish those responsibilities.

Alongside selecting services, the project needs to explain its organization, asset protection and client-facing staff competence. This guide connects those requirements to Estonian procedures, restrictions on pending applicants and the separate treatment of tokenized securities.

## What changes from former permissions to MiCA

Estonia applies [MiCA](https://www.esma.europa.eu/publications-and-data/interactive-single-rulebook/mica) alongside the [Market in Crypto-Assets Act](https://www.riigiteataja.ee/en/eli/519092024001/consolide), a national act governing the activities, liability, supervision and termination of market participants. Its entry into force in July 2024 must be distinguished from application of the different European titles. Classification separates crypto-asset services, ART or EMT issuance and transactions in financial instruments excluded from MiCA. Estonia used the full eighteen-month maximum transitional period allowed by the European regulation, unlike other Member States that shortened it.

The [joint June 2026 communication by Finantsinspektsioon and the FIU](https://www.fi.ee/en/news/transitional-period-providers-crypto-asset-services-ending) confirms the end of the transitional period for the former regime. Since July 1, a historical virtual currency service license is insufficient to continue business and, as announced by Finantsinspektsioon, the Financial Intelligence Unit canceled the register data for those licenses on that date. Citing a former license number no longer evidences authorization. A provider's MiCA authorization and its scope must be checked, including cross-border services by entities from other European Economic Area states.

## What Finantsinspektsioon and the intelligence unit do

Finantsinspektsioon is the national authority for authorization and supervision under the MiCA framework. The FIU retains financial intelligence functions and receives suspicious transaction reports. Their involvement must not be confused with a requirement for two equivalent CASP licenses or with the former FIU permission remaining available as a commercial alternative.

The [market access documentation](https://www.fi.ee/en/investeerimine/investeerimisvaldkonna-tegevuslubade-taotlemine/kruptovaraturu-tegevusluba) distinguishes CASP authorization from issuer procedures. EMT issuance requires credit institution or electronic money institution status and compliance with the corresponding MiCA obligations. ART projects must assess issuer authorization or the applicable route and the white paper. Service permission does not replace issuance entitlement.

## How to apply and handle a pending application

Finantsinspektsioon states that CASP and ART applications must use its portal from March 18, 2026. Applications are submitted in Estonian; accompanying English documents must be expressly identified. Preparation includes the program of operations, governance, shareholders and management, controls, asset protection and procedures appropriate to each requested service.

Statutory periods distinguish completeness checks from subsequent assessment. Information requests and permitted suspensions mean they cannot be treated as guaranteed commercial timeframes. Financial entities meeting Article 60 MiCA conditions have a specific notification route, limited to the services and equivalences provided by the regulation.

Section 48(5) of the national act addresses applications submitted before July 1, 2026, that remain undecided. Those activities are not considered unauthorized for Section 372 of the Penal Code, but new client contracts are prohibited. This is not a granted MiCA authorization. The June supervisory communication requires activity restrictions, asset protection and client information while the application is assessed.

## Which rules apply to tokenized securities

The [Securities Market Act](https://www.riigiteataja.ee/public-api/api/v1/en/akt/527112025002/blob-html) and European investment services framework are relevant where a token is a financial instrument. Issuance, offering, trading and custody must be analyzed according to their function. Commercial labels such as NFT, utility token or property token do not independently determine classification or exclude securities rules. Since December 10, 2022, the Securities Market Act has expressly allowed securities to be issued by means of distributed ledger technology. No additional civil-law advantage should be inferred from this: the registration and transfer rules applicable to the tokenized security must be checked for each structure.

The [DLT Pilot Regime](https://www.esma.europa.eu/esmas-activities/digital-finance-and-innovation/dlt-pilot-regime) provides permissions for infrastructures trading or settling certain financial instruments. It is not a general tokenization authorization and does not automatically change ownership of underlying assets. Documentation must identify holders' rights, their debtor or issuer, transfer mechanisms and enforcement conditions, including insolvency of participating entities.

## Which skills and controls operations require

The [knowledge and competence guidelines](https://www.fi.ee/en/news/finantsinspektsioon-clarifying-competence-requirements-staff-crypto-companies), applicable from July 28, 2026, according to Finantsinspektsioon, distinguish staff providing information from staff giving advice. The authority identifies at least annual assessment and continuing training. These expectations complement governance, conduct and client protection duties; a simple digital interface does not reduce the service provider's responsibilities.

The [Finantsinspektsioon test environment](https://www.fi.ee/en/finantsinspektsioon/innovation-hub/paringud-ja-kontakt/test-environment) supports trials with agreed objectives and conditions. Where a solution involves a financial service requiring a license, the published conditions limit testing to technical aspects and exclude providing that service to clients during the trial. Completion does not guarantee authorization or certify compliance. Operational resilience, anti-money laundering and transfer controls require their own assessment, as does the tax obligation to identify clients’ residence and report their transactions under the EU administrative cooperation directive for crypto-assets (DAC8). Estonia implemented it through an [act of March 25, 2026](https://www.riigiteataja.ee/akt/115042026001), in force since April 25, 2026: information for 2026 is reported for the first time by June 30, 2027.

## How to prepare the Estonian application

Prepare the program of operations, ownership information, responsible personnel and service-specific policies. Finantsinspektsioon’s portal and language instructions govern submission. Check the supervisor’s register first: according to Finantsinspektsioon, by June 30, 2026, it had granted a single CASP authorization, compared with 641 valid virtual currency licenses in mid-2021, and the ESMA register of October 2026 lists three Estonian entities, two of them financial entities already authorized. Where an English statutory translation is used, check the provisions supporting the application against the Estonian text.

Launch preparation must show how assets are protected and returned, staff are trained and functions are outsourced. Former-regime operators need to check current restrictions without treating a pending application as authorization. Technical testing can resolve system questions but does not replace permission to serve clients. The ongoing European review should also be monitored: on December 4, 2025, the Commission put forward a proposal for a regulation, COM(2025) 943, that would transfer to ESMA the authorization and supervision of crypto-asset service providers, except credit institutions and Article 60 entities. It remains a proposal under negotiation and is not law in force.

## Key takeaways

- Former FIU licenses do not automatically become MiCA authorizations and, according to Finantsinspektsioon, their register data were canceled on July 1, 2026.
- Section 48(5) provides limited criminal-law treatment for certain pending applications and prohibits new client contracts.
- Finantsinspektsioon operates a conditional test environment, without a general licensing exemption.
- Statutory assessment periods run from particular application stages, not the promoter’s first inquiry.

## Regulatory milestones

- **2022-03-15** — Virtual currency regime tightened. The amendment to the Money Laundering and Terrorist Financing Prevention Act raising capital and other requirements for virtual currency service providers enters into force; the Financial Intelligence Unit revoked 182 authorizations that year. (source: [Estonian FIU · Yearbook 2022](https://fiu.ee/sites/default/files/documents/2023-03/EFIU%20Yearbook%202022.pdf))
- **2024-07-01** — National act enters into force. The Market in Crypto-Assets Act supplements national supervision and MiCA implementation, with specific dates for certain provisions. (source: [Estonia · Market in Crypto-Assets Act](https://www.riigiteataja.ee/en/eli/519092024001/consolide))
- **2026-03-18** — Applications through the supervisory portal. Finantsinspektsioon requires use of its portal for CASP and ART applications identified in its procedures. (source: [Finantsinspektsioon · Authorization](https://www.fi.ee/en/investeerimine/investeerimisvaldkonna-tegevuslubade-taotlemine/kruptovaraturu-tegevusluba))
- **2026-07-01** — FIU transition closes. Historical licenses cease to be sufficient and, as announced by Finantsinspektsioon, the Financial Intelligence Unit cancels the register data for virtual currency licenses; certain pending applications are subject to Section 48(5) of the national act and supervisory restrictions. (source: [Finantsinspektsioon · Transition](https://www.fi.ee/en/news/transitional-period-providers-crypto-asset-services-ending))
- **2026-07-28** — Knowledge and competence guidelines. The announced application of guidelines for staff informing or advising on crypto-assets begins. (source: [Finantsinspektsioon · Competence](https://www.fi.ee/en/news/finantsinspektsioon-clarifying-competence-requirements-staff-crypto-companies))

## Frequently asked questions

### Does a pending MiCA application permit onboarding new clients?

No. Section 48(5) treatment for certain applications submitted before July 1, 2026, is not a granted authorization and prohibits new client contracts. Finantsinspektsioon requires restricted activity and protection of existing clients.

### Does the test environment allow unlicensed operations?

It provides no general exemption. For solutions requiring a financial license, the published conditions provide for technical testing without offering the service to clients. Completing a trial does not guarantee authorization.

### Can the entire CASP application simply be filed in English?

Finantsinspektsioon states that the application must be in Estonian and accompanying English documents expressly identified. Its submission instructions must be followed. Finantsinspektsioon · Authorisation.

### How are CASP applications filed from March 2026?

The supervisor requires its application portal from March 18, 2026. The submission channel neither changes substantive requirements nor grants authorization. Finantsinspektsioon · Authorisation.

### Are the same skills expected from information and advice staff?

The guidelines announced by Finantsinspektsioon distinguish the roles, with greater knowledge expected for advice. They include at least annual assessment and ongoing training. Finantsinspektsioon · Competence.

## How to cite this guide

Yáñez López, J. (2026, October 15). Crypto-asset regulation and tokenization in Estonia. Metlabs. https://metlabs.io/en/blockchain-regulation/estonia/