← Regulations / Croatia / Operating Models / CEX

Centralized exchange in Croatia

Order-book exchange that takes custody of user assets and matches trades between users.

Conditional AI-Generated · Unreviewed

CEX is conditionally permitted in Croatia with a local entity, subject to AML obligations and medium licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
Medium
Last updated
2026-07-13

AML Obligations

  • Register with the Ministry of Finance – Financial Intelligence Office (USPN) as a VASP under the Croatian Anti-Money Laundering and Terrorist Financing Act (Zakon o sprječavanju pranja novca i financiranja terorizma, NN 108/17, 39/19, 151/22).
  • Implement robust KYC/CDD procedures for all customers, including identity verification and beneficial ownership checks.
  • Conduct and maintain a formal risk assessment covering customer risk, product risk, geographic risk, and transaction risk.
  • Appoint a designated AML Officer responsible for compliance.
  • Establish written internal AML/CFT policies and procedures including ongoing transaction monitoring.
  • Report suspicious transactions and activities to the Financial Intelligence Office (USPN).
  • Retain customer identification and transaction records for at least five years (extendable to ten years).
  • Travel Rule obligations under Regulation (EU) 2023/1113 – obtain and transmit full originator and beneficiary information on ALL crypto-asset transfers (regardless of amount) for VASP-to-VASP transfers; for self-hosted wallet transfers under EUR 1,000, obtain name of originator and beneficiary only; retain information for five years.
  • From 30 December 2024, comply with the revised Transfer of Funds Regulation (EU) 2023/1113 as directly applicable in Croatia.

Key Restrictions

  • Operator must be incorporated as a legal entity in Croatia with a registered office in Croatia.
  • Must register with the USPN (Financial Intelligence Office) as a VASP — this is a registration/AML regime, not a full financial services license.
  • No specific national custody segregation rules currently exist for crypto assets, but MiCA (applicable from 30 December 2025) will impose segregation and safeguarding requirements for CASPs.
  • No specific national insurance/bonding or cold storage mandates currently exist; these will be introduced under MiCA.
  • From 30 December 2025, a full MiCA CASP license from a competent national authority (likely HANFA in coordination with USPN) will be required, replacing the current registration regime.

Key Risks

  • ["Regulatory transition risk: Croatia is in a transitional period from a light-touch AML registration regime (USPN) to a full MiCA licensing regime (from 30 December 2025), creating uncertainty about interim requirements and grandfathering.", "Custody and consumer protection rules are largely unspecified under current national law — operators rely on best practices until MiCA applies, creating enforcement exposure.", "HANFA may interpret certain crypto-assets as financial instruments under existing securities laws, potentially triggering additional licensing requirements.", "Travel Rule compliance (TFR) from 30 December 2024 requires significant operational investment in information transmission systems for all transfer sizes."]

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Office for Anti-Money Laundering (Ured za sprječavanje pranja novca – USPN): This is the primary authority responsible for supervising the implementation of AML/CFT measures by obliged entities, including VASPs. They maintain the register of VASPs.

licensing 60% confidence

Croatian Financial Services Supervisory Agency (Hrvatska agencija za nadzor financijskih usluga – HANFA): While USPN handles the AML registration, HANFA, as the financial regulator, may also have a role in interpreting certain crypto-assets as financial instruments under existing securities laws, or in providing guidance, particularly concerning future MiCA implementation.

licensing 60% confidence

Current Regime (Pre-MiCA): Croatia operates a registration regime for VASPs, primarily for AML/CFT supervision. This means entities providing virtual asset services must register with the USPN and comply with AML obligations. It is not a full financial services license in the traditional sense, but an AML registration.

licensing 60% confidence

Future Regime (Post-MiCA): From December 30, 2025, MiCA will introduce a harmonized licensing regime across the EU. Entities providing "crypto-asset services" (as defined by MiCA) will require a license from a competent national authority (likely HANFA in Croatia, in coordination with USPN for AML aspects) in one EU member state, which will then allow them to operate across the entire EU ("passporting"). This will replace the national AML registrations for the services covered by MiCA.

licensing 60% confidence

Exchanges (Fiat-to-Crypto and Crypto-to-Crypto):

licensing 60% confidence

Services related to the exchange between virtual assets and fiat currencies.

licensing 60% confidence

Generally, a legal entity incorporated in Croatia is required to apply for registration.

licensing 60% confidence

A registered office in Croatia is necessary.

aml 60% confidence

VASPs are required to register with the Ministry of Finance – Financial Intelligence Office (Ured za sprječavanje pranja novca) as part of their AML/CTF obligations.

aml 60% confidence

This registration requires compliance with the Croatian Anti-Money Laundering and Terrorist Financing Act (Zakon o sprječavanju pranja novca i financiranja terorizma), which transposes EU AML Directives (specifically AMLD5).

aml 60% confidence

Implementing robust KYC/CDD (Know Your Customer/Customer Due Diligence) procedures.

aml 60% confidence

Reporting suspicious activities to the Financial Intelligence Office.

aml 60% confidence

Establishing internal AML policies and procedures.

aml 60% confidence

Segregation of Client Assets Rules (Current):

aml 60% confidence

Explicit national rules for the segregation of client crypto assets from the firm's own assets are not specifically detailed within the current AML/CTF framework.

travel-rule 60% confidence

Adopted: Yes, through Regulation (EU) 2023/1113 on information accompanying transfers of funds and certain crypto-assets (commonly known as the revised Transfer of Funds Regulation - TFR). As an EU Regulation, it is directly applicable in Croatia and does not require separate national transposition legislation for its core provisions.

travel-rule 60% confidence

Effective Date: The provisions of Regulation (EU) 2023/1113 concerning crypto-asset transfers will apply from 30 December 2024.

travel-rule 60% confidence

Obtain and transmit: Required originator and beneficiary information immediately and securely alongside the crypto-asset transfer.

travel-rule 60% confidence

Retention: Retain the information for a period of five years (extendable to ten years by national law).

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
high

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a centralized exchange can operate in Croatia currently by registering as a VASP with the USPN (AML registration regime), but must prepare for transition to a full MiCA CASP license from 30 December 2025, with Travel Rule obligations already effective from 30 December 2024.

Questions this verdict aims to answer

  • What exchange / VASP license applies?
  • What custody segregation rules apply to user assets?
  • What market-conduct and listing rules apply?
  • What travel-rule obligations apply on withdrawals?