Remote VASP serving residents in Lithuania
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in Lithuania with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Registration with FCIS as a virtual currency exchange operator or custodian wallet operator (mandatory for any crypto service touching residents)
- Minimum €125,000 registered share capital required
- Mandatory appointment of an MLRO who must be a permanent resident of Lithuania
- Comprehensive written AML/CTF policies and procedures aligned with Lithuanian AML Law and EU directives
- Documented risk assessment of ML/TF risks specific to the business model
- Customer Due Diligence (CDD) procedures including identification, verification, UBO identification, and ongoing monitoring
- Enhanced Due Diligence (EDD) for high-risk customers, PEPs, and complex/unusual transactions
- Transaction monitoring systems to detect suspicious activity
- Obligation to file Suspicious Activity/Transaction Reports (SARs) with the FCIS
- Record keeping of customer identification data and transactions for at least 8 years
- Internal controls including independent audit function, employee training, and IT security measures
Key Restrictions
- Foreign (non-resident) entity cannot serve Lithuanian residents remotely without first incorporating a legal entity (UAB) in Lithuania with a registered office there
- The MLRO must be a permanent resident of Lithuania
- Company must demonstrate sufficient substance and connection to Lithuania; FCIS may require key personnel to have a strong link to the country
- Must hold a minimum of €125,000 registered share capital
- Cannot operate under a 'mere registration' — must go through FCIS registration process with AML-focused criteria
- If handling fiat currency, may require additional EMI or PI licensing from the Bank of Lithuania
Key Risks
- Significant enforcement risk for unlicensed remote operators — Lithuania actively supervises and enforces against unregistered VASPs, and the 2022 capital requirement increase (from €2,500 to €125,000) signals stricter compliance posture
- Regulatory ambiguity around crypto-only payment processors that facilitate transfers without fiat touch — may still fall under VASP definitions
- No grandfathering or passported cross-border licensing; a foreign entity must fully incorporate locally
- FCIS has broad supervisory powers and may impose fines or criminal liability on unregistered operators
- Reputational risk from being associated with regulatory actions taken against unlicensed cross-border crypto operators, similar to Binance's enforcement experience in Lithuania
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Key Regulator: The Financial Crime Investigation Service (FCIS) is the main supervisory body for virtual currency exchange operators and custodian virtual currency wallet operators.
Virtual Currency Exchange Operator:
Definition: Any natural or legal person that provides services of exchanging virtual currency to fiat currency or vice versa, or virtual currency to another virtual currency, or transfers virtual currencies. This covers most common crypto exchanges.
Custodian Virtual Currency Wallet Operator:
Registration Regime (FCIS): For virtual currency exchange and custodian wallet operators, Lithuania operates a registration model. This means that once an applicant meets the specified criteria (primarily AML/CTF related) and submits the required documentation, they are registered and allowed to operate. It is generally a less intensive process than obtaining a full financial services license.
Legal Entity: The applicant must be a legal entity (e.g., UAB – private limited liability company) incorporated in Lithuania.
A minimum €125,000 registered share capital is required for both virtual currency exchange operators and custodian virtual currency wallet operators. This requirement was significantly increased in November 2022 from a previous €2,500.
AML/KYC Requirements: Robust internal procedures are paramount:
Internal AML/CTF Rules: Comprehensive written policies and procedures aligned with Lithuanian AML Law and EU directives.
Risk Assessment: A documented assessment of money laundering and terrorist financing risks specific to the business model.
Customer Due Diligence (CDD): Procedures for identifying and verifying customers (individuals and legal entities), beneficial owners (UBOs), and understanding the purpose and nature of business relationships. This includes ongoing monitoring.
Enhanced Due Diligence (EDD): For high-risk customers, politically exposed persons (PEPs), or complex/unusual transactions.
Transaction Monitoring: Systems and procedures to monitor transactions for suspicious activities.
Reporting: Obligation to report suspicious transactions and activities (SARs) to the FCIS.
Record Keeping: Maintaining records of customer identification data and transactions for at least 8 years.
Registered Office: Must have a registered office in Lithuania.
AML Officer (MLRO): A dedicated, qualified Anti-Money Laundering Officer (MLRO) must be appointed. This individual must be a permanent resident of Lithuania. They are responsible for implementing AML/CTF procedures, training staff, and reporting to the FCIS.
Management/Board: While not all board members need to be Lithuanian residents, the company must demonstrate sufficient substance and connection to Lithuania, and the FCIS may require certain key personnel (e.g., CEO, board members) to have a strong link to the country.
Fiat-to-Crypto / Crypto-to-Fiat Payment Processors (or traditional payment services using crypto): If the payment processor handles fiat currency (e.g., accepting fiat payments for crypto, converting crypto back to fiat and paying out to bank accounts, or issuing electronic money backed by fiat), then they would likely need a separate license from the Bank of Lithuania as either:
Electronic Money Institution (EMI) License: Allows issuing electronic money and providing related payment services.
Payment Institution (PI) License: Allows providing various payment services (e.g., money remittance, payment initiation, account information services).
Licensing Regime (Bank of Lithuania): For Electronic Money Institutions (EMIs) and Payment Institutions (PIs), a full licensing regime is in place, involving comprehensive assessment of business plans, financial soundness, risk management, governance, and fit & proper checks, with ongoing prudential supervision.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a foreign entity cannot serve Lithuanian residents remotely without establishing a locally incorporated UAB, registering with FCIS (€125k capital, MLRO must be Lithuanian resident), and complying with full AML/CTF obligations; if fiat is touched, a separate EMI/PI license from the Bank of Lithuania may also be required.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?