Lithuania -- Licensing Requirements Regulatory Overview

Lithuania has established a regulatory framework for virtual asset service providers (VASPs), primarily focused on anti-money laundering (AML) and counter-terrorist financing (CTF) compliance. Unlike some jurisdictions with full prudential licensing by a central bank or financial markets authority for crypto-specific activities, Lithuania operates more of a registration regime supervised by the Financial Crime Investigation Service (FCIS) under the Ministry of Interior.

However, it's crucial to understand that if a service provider offers traditional financial services involving fiat currency (e.g., fiat-to-crypto on/off-ramps, issuing e-money, payment processing with fiat), they might additionally require a separate license from the Bank of Lithuania (e.g., Electronic Money Institution or Payment Institution license).

Regulatory Framework Overview

The primary legislation governing virtual asset service providers in Lithuania is the Law on the Prevention of Money Laundering and Terrorist Financing (AML Law), which transposes the EU's 5th and soon 6th Anti-Money Laundering Directives.

• Key Regulator: The Financial Crime Investigation Service (FCIS) is the main supervisory body for virtual currency exchange operators and custodian virtual currency wallet operators.
• Bank of Lithuania (BoL): Supervises traditional financial institutions (including EMIs and PIs) and provides general guidance on financial innovation, but does not directly license crypto-native activities without fiat components.

Required "Licenses" (Registrations)

For crypto-specific services, Lithuania requires registration as one of the following:

1. Virtual Currency Exchange Operator:

   • Definition: Any natural or legal person that provides services of exchanging virtual currency to fiat currency or vice versa, or virtual currency to another virtual currency, or transfers virtual currencies. This covers most common crypto exchanges.

2. Custodian Virtual Currency Wallet Operator:

   • Definition: Any natural or legal person that provides services for safeguarding private cryptographic keys on behalf of its customers, to hold, store and transfer virtual currencies. This covers services providing hosted crypto wallets.

Important Note: An entity may need to register for both if it provides both exchange and custodial wallet services.

Payment Processors

The requirements for "payment processors" dealing with virtual assets depend heavily on the nature of their activities:

• Crypto-only Payment Processors (facilitating crypto-to-crypto transactions, or processing payments solely in crypto without touching fiat): If their activities fall within the definitions of a Virtual Currency Exchange Operator (e.g., enabling transfer of virtual currencies) or a Custodian Virtual Currency Wallet Operator (if they custody keys), they would need the respective FCIS registration(s).
• Fiat-to-Crypto / Crypto-to-Fiat Payment Processors (or traditional payment services using crypto): If the payment processor handles fiat currency (e.g., accepting fiat payments for crypto, converting crypto back to fiat and paying out to bank accounts, or issuing electronic money backed by fiat), then they would likely need a separate license from the Bank of Lithuania as either:
  • Electronic Money Institution (EMI) License: Allows issuing electronic money and providing related payment services.
  • Payment Institution (PI) License: Allows providing various payment services (e.g., money remittance, payment initiation, account information services). These licenses from the Bank of Lithuania have significantly higher capital requirements, stricter prudential supervision, and more complex application processes than the FCIS registrations.

Registration vs. Licensing Regime

• Registration Regime (FCIS): For virtual currency exchange and custodian wallet operators, Lithuania operates a registration model. This means that once an applicant meets the specified criteria (primarily AML/CTF related) and submits the required documentation, they are registered and allowed to operate. It is generally a less intensive process than obtaining a full financial services license.
• Licensing Regime (Bank of Lithuania): For Electronic Money Institutions (EMIs) and Payment Institutions (PIs), a full licensing regime is in place, involving comprehensive assessment of business plans, financial soundness, risk management, governance, and fit & proper checks, with ongoing prudential supervision.

Key Requirements for FCIS Registration

1. Legal Entity: The applicant must be a legal entity (e.g., UAB – private limited liability company) incorporated in Lithuania.
2. Share Capital:
   • A minimum €125,000 registered share capital is required for both virtual currency exchange operators and custodian virtual currency wallet operators. This requirement was significantly increased in November 2022 from a previous €2,500.
3. AML/KYC Requirements: Robust internal procedures are paramount:
   • Internal AML/CTF Rules: Comprehensive written policies and procedures aligned with Lithuanian AML Law and EU directives.
   • Risk Assessment: A documented assessment of money laundering and terrorist financing risks specific to the business model.
   • Customer Due Diligence (CDD): Procedures for identifying and verifying customers (individuals and legal entities), beneficial owners (UBOs), and understanding the purpose and nature of business relationships. This includes ongoing monitoring.
   • Enhanced Due Diligence (EDD): For high-risk customers, politically exposed persons (PEPs), or complex/unusual transactions.
   • Transaction Monitoring: Systems and procedures to monitor transactions for suspicious activities.
   • Reporting: Obligation to report suspicious transactions and activities (SARs) to the FCIS.
   • Record Keeping: Maintaining records of customer identification data and transactions for at least 8 years.
4. Local Presence:
   • Registered Office: Must have a registered office in Lithuania.
   • AML Officer (MLRO): A dedicated, qualified Anti-Money Laundering Officer (MLRO) must be appointed. This individual must be a permanent resident of Lithuania. They are responsible for implementing AML/CTF procedures, training staff, and reporting to the FCIS.
   • Management/Board: While not all board members need to be Lithuanian residents, the company must demonstrate sufficient substance and connection to Lithuania, and the FCIS may require certain key personnel (e.g., CEO, board members) to have a strong link to the country.
5. Management and Shareholders:
   • Fit and Proper Requirements: The company's management (board members, CEO) and significant shareholders (owning 20% or more) must pass "fit and proper" assessments, demonstrating good repute, no criminal records (especially for financial crimes), and sufficient knowledge/experience.
6. IT and Security: Robust IT systems, cybersecurity measures, and data protection (GDPR compliance) are implicitly required to safeguard customer data and assets.

Application Process (for FCIS Registration)

1. Establish a Legal Entity: Incorporate a company (e.g., UAB) in Lithuania with the Lithuanian Register of Legal Entities. Ensure the €125,000 share capital is paid up.
2. Prepare Internal Documentation: Develop comprehensive internal AML/CTF rules, risk assessment, and operational procedures in accordance with Lithuanian law.
3. Appoint AML Officer: Appoint a qualified AML Officer who is a permanent resident of Lithuania.
4. Gather Required Documents: Prepare all necessary corporate documents, proofs of identity for management and shareholders, good repute declarations, etc.
5. Submit Application to FCIS: The application and supporting documents are submitted to the FCIS, typically through their online system.
6. FCIS Review: The FCIS reviews the application. This process usually takes up to 30 business days from the date a complete application is received. The FCIS may request additional information or clarifications.
7. Registration: Upon successful review, the company is registered in the public list of virtual currency operators.

Specific Regulatory References with URLs

• Financial Crime Investigation Service (FCIS) Website:

  • General information on virtual asset operators (often in Lithuanian, use translator or look for English sections): https://fntt.lt/en/
  • Specific information about virtual currency operators and requirements can often be found in the "Supervision of obliged entities" or "Virtual currency" sections once translated.

• Law on the Prevention of Money Laundering and Terrorist Financing:

  • The consolidated version of the Lithuanian AML Law can be found on the official legislative database (Lietuvos Respublikos Seimas): https://e-seimas.lrs.lt/portal/legalAct/lt/TAD/TAIS.19069/XvaxYxJbXq (This link is to the Lithuanian version; English translations may be available through legal service providers or specific legal databases).

• Bank of Lithuania (for PI/EMI Licenses if applicable):

  • Information on Payment Institution licenses: https://www.lb.lt/en/licensing-of-payment-institutions/
  • Information on Electronic Money Institution licenses: https://www.lb.lt/en/licensing-of-electronic-money-institutions/

Future Outlook: MiCA Regulation

It is critical to note that the EU's Markets in Crypto-Assets (MiCA) regulation is set to come into full effect in late 2024/early 2025. MiCA will introduce a harmonized, comprehensive licensing regime for Crypto-Asset Service Providers (CASPs) across all EU member states.

• Impact: The current Lithuanian registration regime will likely be superseded by MiCA. Existing registered entities will need to apply for a MiCA license (or transition their existing registration if a simplified process is offered) to continue operating legally across the EU.
• New Requirements: MiCA will introduce new requirements covering prudential aspects, organizational requirements, consumer protection, market integrity, and more, going beyond the current AML/CTF focus. This will likely mean higher capital requirements and more extensive supervisory oversight from financial market authorities (like the Bank of Lithuania) for many types of crypto services.

Companies considering entering the Lithuanian market should be fully aware of the upcoming MiCA changes and plan their strategy accordingly.