Crypto license in Poland is no longer a simple local registration question. For founders, legal teams and crypto operators looking at Poland in 2026, the real issue is whether the business falls within MiCA at all, whether it can rely on a legacy position, whether it can enter Poland cross-border from another EU state, or whether Poland should be part of a wider EU authorisation strategy.
The wrong route rarely fails on day one. It usually becomes visible later — when the business starts onboarding Polish clients, opens regulatory discussions with counterparties or banks, localises documentation, or tries to scale a structure that was built on the wrong assumptions. By then, the legal and operational cost of repair is much higher than the cost of getting the route right at the start.
This page focuses specifically on what may actually be possible in Poland under MiCA in 2026, how to think about CASP authorisation, and why the phrase “crypto license” often hides several very different legal questions.
Quick answer: can you get a crypto licence in Poland in 2026?
Not in Poland itself, at least not yet. MiCA applies directly in Poland, but as of October 2026 Poland is the only EU member state without a national act implementing it. Without that act no Polish competent authority has been formally designated, so a CASP application cannot be filed in Poland. Since the MiCA transitional period ended on 1 July 2026, a Polish VASP registration no longer covers crypto-asset services.
- Already authorised as a CASP in another EU state? You can serve Polish clients through the MiCA cross-border notification made via your home regulator.
- Need an authorisation now? It has to be obtained in another member state, with Poland served cross-border.
- Former Polish VASP? The register alone no longer allows you to provide crypto-asset services; the options are passporting, authorisation elsewhere or an orderly wind-down.
- Planning to apply in Poland? The file can be prepared now and filed once the implementing act enters into force.
Status of MiCA in Poland (October 2026)
| Date | What happened | What it means in practice |
|---|---|---|
| 30 December 2024 | MiCA rules for crypto-asset service providers start to apply across the EU. | Crypto-asset services require a CASP authorisation, subject to transitional periods. |
| December 2025 | First presidential veto of the Polish act on the crypto-asset market. | No competent authority designated and no Polish authorisation procedure. |
| February 2026 | Second veto of a revised bill. | No change for applicants. |
| 11 June 2026 | Third veto of the bill passed by the Sejm and the Senate in May 2026. | Poland remains without a designated authority under Article 93 MiCA. |
| 1 July 2026 | The MiCA transitional period ends. | A Polish VASP registration no longer covers crypto-asset services. |
| 4 September 2026 | The Sejm fails to override the third veto. | The vetoed bill cannot enter into force. |
| 8 September 2026 | The President submits his own draft act to the Sejm. | A new legislative path opens; no timetable yet. |
| October 2026 | The government announces a fourth, stricter draft. | Two competing drafts; filing in Poland remains impossible until one is enacted. |
Your options now
| Your situation | Realistic option today | What to check first |
|---|---|---|
| CASP authorised in another EU state | Cross-border notification via your home regulator to serve Polish clients. | Services covered by your authorisation, Polish marketing and consumer rules, AML set-up for Polish clients. |
| New entrant targeting Poland | Authorisation in another member state, with Poland served cross-border. | Choice of home state, real substance there, timeline and cost of the home-state process. |
| Former Polish VASP | Move clients to an authorised entity, passport an authorisation from elsewhere or wind down in an orderly way. | Which services you still provide, client communication, AML and record-keeping obligations that continue. |
| Business that wants a Polish authorisation | Prepare the application file now and file once the implementing act is in force. | Governance, capital, ICT and AML documentation; compare the Polish timeline with other member states. |
Why this topic matters for crypto businesses entering Poland
For many businesses, Poland appears in the decision process for the wrong reason first. They search for a crypto license in Poland as if the issue were mainly about obtaining a local permission. In reality, the more important question is how Poland fits into the business model: as a home jurisdiction, as a cross-border target market, or as a market where legacy assumptions from the pre-MiCA period may no longer be enough.
That matters commercially because the legal route affects far more than regulatory status. It affects governance, AML/CFT design, outsourcing, client-facing documentation, language of operations, management structure, launch timing and banking conversations. A weak answer at the start tends to distort the whole project later.
Planning crypto activity in Poland?
If you are planning crypto market entry in Poland, it is usually easier to review the legal route before the structure starts to harden. A structure built correctly at the beginning is far cheaper to maintain than one that has to be repaired later.
What MiCA changed in Poland
Before MiCA, many market participants looked at Poland through the logic of domestic VASP-style registration. That framing is no longer enough. The practical question in 2026 is not whether the old model still feels familiar. It is whether the activity falls within the list of crypto-asset services, whether the business is still relying on a transitional position, whether it already holds authorisation elsewhere in the EU, and how Poland-facing activity is structured in practice.
This is a significant shift because MiCA is not only an entry framework. It is also about governance, AML/CFT, operational resilience, organisational structure, conduct toward clients and regulatory credibility over time. A business that treats the issue as a filing question usually underestimates what a stable operating model actually requires.
For Poland, that means the answer cannot be reduced to “yes, you need a license” or “no, you do not”. The answer depends on scope, route, timing and structure. Those four variables should be analysed together, not in isolation.
What MiCA changed — and what still needs case-by-case review
MiCA created a common EU framework, but it did not eliminate the need for route analysis. In practice, some questions are now much clearer at framework level, while others still depend on the exact business model, service mix, operating structure and Poland-facing activity.
| Issue | What MiCA makes clearer | What still needs analysis in practice |
|---|---|---|
| Regulatory logic | The old domestic VASP-style thinking is no longer enough for assessing a current crypto business model. | How the framework applies to a specific project still depends on scope, route, timing and operating structure. |
| CASP perimeter | MiCA identifies a defined list of crypto-asset services that drive the authorisation discussion. | The real question is whether the actual business activity falls within that perimeter or points toward another framework. |
| Cross-border activity | MiCA creates a structured logic for EU-authorised firms operating across member states. | The business still needs to assess how Poland-facing activity is organised in practice and what that means for compliance and documentation. |
| Legacy operators | MiCA introduced transitional logic rather than indefinite continuation of pre-existing domestic assumptions. | Each legacy business still needs to check whether that logic genuinely applies to its current services and commercial posture. |
| Governance expectations | The framework makes clear that regulated crypto activity is not only about entry, but also about governance and conduct. | The adequacy of management, controls, oversight, outsourcing and operational resilience still depends on the actual structure. |
| Jurisdiction choice | MiCA reduces some fragmentation at EU level by creating a shared legal architecture. | It does not eliminate national procedural, operational and supervisory differences that matter when choosing a home jurisdiction. |
| Authorisation strategy | There is now a clearer EU-wide vocabulary for thinking about authorisation and service provision. | The correct route still depends on whether the business is a legacy operator, an EU-authorised entrant or a new project choosing its home base. |
Which route may actually apply in Poland?
Most serious businesses entering this topic fall into one of three categories. The mistake is assuming that all three are asking the same legal question.
Legacy operator relying on a transitional position
This is the situation for a business that was already active under the older domestic framework and now needs to understand whether that history still preserves anything of practical value. The real issue is not whether the old status existed, but whether the current service offering sits within MiCA scope, whether any transitional logic still matters, and what the next stable regulatory position should be.
Since 1 July 2026 that continuity has ended: the MiCA transitional period is over and Poland has no authorisation procedure yet, so a Polish VASP registration no longer covers crypto-asset services. The practical choice is between passporting an authorisation obtained elsewhere, moving clients to an authorised entity and an orderly wind-down. None of these solves governance, AML or operational-substance questions by itself.
EU-authorised CASP entering Poland cross-border
This route applies where the business already holds CASP authorisation in another EU member state and wants to serve Poland through a cross-border model. That can be commercially efficient, but it should not be confused with obtaining a separate Polish license. It is a different legal route with a different operational logic.
The real work here usually sits in the details: scope of services, notification posture, client journey, AML design, documentation, language, marketing model and whether the Poland-facing operation creates questions that go beyond the assumption of easy passporting.
New entrant assessing Poland as a home jurisdiction
This is the route for a business still choosing where to build its EU regulatory home. In that case, Poland should be assessed not as a slogan-level licensing option but as a real operating environment. The relevant questions are whether the Polish environment fits the model, the management team, the timeline, the governance capacity and the wider market-entry plan.
This is usually where poor planning becomes expensive. The wrong home jurisdiction can create friction at authorisation stage and later — with banks, counterparties, governance, internal controls and commercial rollout.
At a glance: which Poland route may fit your crypto business?
The phrase “crypto license in Poland” often describes very different legal situations. In practice, the right answer usually depends on whether you are relying on a legacy position, entering Poland cross-border from another EU member state, or assessing Poland as the home jurisdiction for a new regulated project.
| Route | Typical business profile | What this route may solve | What it does not solve | What should be checked first |
|---|---|---|---|---|
| Legacy / transitional position | A business that operated under the earlier domestic framework and is now assessing its position under MiCA. | Since 1 July 2026 it no longer covers crypto-asset services. Its value now lies in the client base, records and know-how that can move to an authorised structure. | It does not create a permanent answer by itself. It does not remove governance, AML/CFT, outsourcing or operational-substance issues. | Whether the current services fall within MiCA scope, whether the transitional logic actually applies to the business, and what the next durable regulatory position should be. |
| Cross-border entry from another EU state | An EU-authorised CASP looking to offer services to clients in Poland. | It may allow Poland entry without building the strategy around a separate domestic Polish authorisation. | It does not eliminate Poland-facing legal and operational work. It should not be confused with “getting a Polish license”. | The scope of the existing authorisation, notification logic, Poland-facing client journey, AML model, documentation and marketing posture. |
| Poland as the home jurisdiction | A new entrant comparing Poland with other EU member states for authorisation and market entry. | It may support a serious regulated operating model tied to a real market, real substance and a wider EU strategy. | It does not guarantee a shortcut, lighter scrutiny or a friction-free process. Poland should not be treated as a paper-license jurisdiction. | Whether Poland fits the business model, management team, governance capacity, timing, outsourcing model, banking reality and commercial rollout plan. |
Do your services actually fall within the CASP perimeter?
Before asking how to obtain a crypto license in Poland, it is worth answering a more basic question: do you need CASP authorisation at all? Many businesses begin by naming the license they think they need instead of analysing what they actually do.
In practice, the CASP perimeter is often relevant where the business involves services such as custody and administration of crypto-assets for clients, operation of a trading platform, exchange of crypto-assets for fiat, exchange of crypto-assets for other crypto-assets, execution of orders, reception and transmission of orders, transfer services, portfolio management, placement or advice on crypto-assets.
But not every crypto model fits neatly into that box. Some projects raise questions around decentralisation. Some tokens may require classification under another framework. Some business lines may point toward financial-instrument, e-money or other regulatory regimes instead. That is why perimeter analysis should come before structure, jurisdiction and documentation — not after.
Why Poland may still make sense as a market-entry jurisdiction
Poland is a real market, not only a regulatory address. For some businesses, that is exactly the attraction. It offers access to a large EU economy, a meaningful client base and an environment where legal, tax, employment, AML and corporate workstreams can be aligned around an actual commercial footprint.
That can make Poland attractive for businesses looking for substance rather than appearance. A regulated structure supported by real management, credible internal governance and a genuine market-entry plan is usually more durable than a structure built around optics alone.
What Poland does not offer is a paper-license shortcut. Businesses that choose it for the wrong reason often discover too late that management accountability, AML architecture, outsourcing discipline, banking, ICT resilience and governance quality matter just as much as the formal route itself.
Planning crypto activity in Poland?
If you are planning crypto market entry in Poland, it is usually easier to review the legal route before the structure starts to harden. A structure built correctly at the beginning is far cheaper to maintain than one that has to be repaired later.
Poland vs Lithuania: what usually matters more than the headline pitch
Businesses comparing Poland with Lithuania often begin with the wrong question. The more useful comparison is not which jurisdiction sounds easier, but which one better fits the actual operating model, governance structure, market-entry plan and long-term regulatory posture of the business.
| Factor | Poland | Lithuania |
|---|---|---|
| Commercial logic | Usually makes more sense where the business wants a real operating market, not only a regulatory base. | Often appears in discussions where the business is comparing EU entry routes more broadly and is focused on authorisation strategy from day one. |
| Market presence | A stronger fit where Poland itself is part of the commercial plan and the business wants a meaningful local footprint. | Can be attractive where the immediate commercial target is broader EU access rather than one specific local market. |
| Jurisdiction story | Works better when the business is prepared to justify substance, governance and real local operating logic. | Often enters the conversation earlier as a known comparison point for fintech and crypto structuring. |
| Management and substance | Should be approached as a real operating environment rather than a formal address. Optics alone are usually a weak strategy. | The same general substance logic applies: structure without credible governance tends to create long-term risk rather than solving it. |
| Banking and operations | Relevant where the project needs alignment between regulatory work, local operations, commercial contracts, employment and tax. | Relevant where the business is comparing authorisation and structuring routes across multiple EU jurisdictions at once. |
| Who tends to choose it | Businesses that want Poland as part of the real business model, not only as a compliance step. | Businesses that are still testing which EU jurisdiction best fits the authorisation and rollout plan. |
| Typical mistake | Assuming Poland should be chosen because it sounds cheaper or simpler than it really is. | Assuming another jurisdiction’s regulatory story can simply be copied into a Poland-facing operating model later. |
| Better starting question | Does Poland fit the target market, management structure and operating model? | Does this jurisdiction actually fit the business better than Poland once commercial reality is taken into account? |
Common mistakes businesses make when assessing crypto activity in Poland
Most problems in this area do not arise because the framework is unusually obscure. They arise because businesses bring the wrong assumptions into the analysis and lock in the structure too early. The same mistakes appear repeatedly.
- Assuming the old VASP logic still answers the problem. It may explain part of a legacy position, but it does not replace a current MiCA-based route analysis.
- Treating MiCA as only a licensing question. The real issue is not just entry, but also governance, AML/CFT, outsourcing, operational resilience and long-term supervisory credibility.
- Skipping scope analysis. Starting from “we need a license” before deciding whether the model actually falls within the CASP perimeter is one of the most expensive early mistakes.
- Copying another jurisdiction’s structure. A model that looks workable elsewhere in the EU may still require different assumptions for Poland-facing activity, documentation and operating logic.
- Confusing cross-border access with domestic authorisation. These routes are not the same and should not be planned as if they were.
- Building around optics instead of substance. A local address, a local director and a polished deck are not a substitute for real decision-making, oversight and accountability.
- Underestimating timing risk. If the commercial launch depends on a regulatory position the business does not yet hold, timing is part of legal strategy, not an afterthought.
How CGO Legal supports crypto businesses entering Poland
Our role in this area is practical. We help businesses determine whether Poland should be approached as part of a domestic authorisation strategy, a cross-border expansion strategy or a wider EU market-entry plan.
That usually includes regulatory mapping, scope and perimeter analysis, route selection, review of governance and management assumptions, AML/CFT readiness, outsourcing and operational model assessment, and the legal implementation of Poland-facing structures, documentation and internal arrangements.
Where needed, this work can be coordinated with adjacent legal workstreams such as company law, tax, employment, commercial contracts, data protection and launch-readiness issues that affect the real operation of a regulated crypto business in Poland.
Planning crypto activity in Poland?
If you are planning crypto market entry in Poland, it is usually easier to review the legal route before the structure starts to harden. A structure built correctly at the beginning is far cheaper to maintain than one that has to be repaired later.
Michał Gawlak
Contact an expert
office@cgogroup.pl
Michał Gawlak is attorney-at-law and partner at CGO Leglal Counseling. He graduated with a law degree from the Faculty of Law and Administration at the University of Lodz (specialisation – corporate and economic law). Michał was a participant of the postgraduate American Law School run by the Michigan State University.
Michał has vast experience in corporate and tax law having advised Polish and foreign entrepreneurs on transformations, corporate and tax solutions.
Michał is a founder of the Lodz branch of the Academia Iuris Foundation – an organisation which provides legal services to indigent persons. Michał gained his legal experience in the Property and Corporate department of the international law firm – CMS Cameron McKenna and the renowned Polish law firm – Sołtysiński Kawecki & Szlęzak.
His areas of expertise are in civil, economic and tax law. He speaks fluent English and German. He runs a tax blog: spolkazagranica.pl
FAQ – crypto license in Poland
Do I need a crypto license to operate in Poland?
If your activity falls within MiCA, you need a CASP authorisation. As of October 2026 it cannot be obtained in Poland because the implementing act has not been adopted, so in practice it is obtained in another EU state and used in Poland through the cross-border notification. Some models fall outside MiCA, which is why scope review comes first.
Can I apply for a CASP licence in Poland now?
Not yet. Until the implementing act enters into force there is no Polish authority to file with. You can prepare the application file now (governance, capital, ICT, AML and policies) and file once the procedure exists, or apply in another member state.
Can an EU-authorised CASP provide services in Poland?
Yes. A CASP authorised in any member state can provide services in Poland after notifying its home regulator, which informs the host state. It is not a separate Polish authorisation, and Polish marketing, consumer protection and AML rules still apply to how you serve Polish clients.
Is the Polish VASP register still valid?
The register of virtual currency activities no longer allows you to provide crypto-asset services after 1 July 2026, when the MiCA transitional period ended. Some AML obligations linked to past activity, such as record keeping, continue.
What happens after 1 July 2026 for legacy operators?
The MiCA transitional period has ended, so a Polish VASP registration no longer covers crypto-asset services. Legacy operators need an authorisation obtained in another member state and passported to Poland, a transfer of clients to an authorised entity, or an orderly wind-down.
When will Poland adopt the MiCA implementing act?
There is no fixed date. After the third veto in June 2026 and the failed override on 4 September 2026, the President submitted his own draft on 8 September and the government announced a fourth draft for October 2026. We track the process and update this page.
Is Poland already a fully settled CASP jurisdiction?
No. Poland has not adopted the act implementing MiCA and has not formally designated a competent authority, so there is no Polish authorisation procedure yet. MiCA itself still applies, including the ban on providing crypto-asset services without authorisation.
Does MiCA apply to every crypto project?
No. Some models may fall outside MiCA or require separate classification under other legal frameworks. That is why perimeter analysis should come before any decision about structure, jurisdiction or authorisation route.
Is Poland a good market-entry jurisdiction for crypto businesses?
It can be, for the right model. Poland makes more sense where the business wants real market presence and a durable operating structure, not where the goal is only to find a nominal regulatory address.
Explore the crypto business in Poland cluster
This page is the main guide in our crypto business in Poland cluster. Continue with the supporting articles below if you want to go deeper into MiCA, CASP authorisation and cross-border entry into Poland.
- Crypto License in Poland — main guide
- MiCA Regulation in Poland — what the EU framework means in practice
- CASP Authorisation in Poland — what a new entrant needs to assess
- Cross-Border Crypto Services in Poland — what EU-authorised CASPs need to check
- View all articles in this category
