
Norway’s MiCAR Licensing Regime
Norway has now formally incorporated the EU Markets in Crypto‑Assets Regulation (MiCA) into national law. The Lov 27. mai 2025 nr. 20 om kryptoeiendeler (“Kryptoeiendelsloven”) was adopted by the Storting on 27 May 2025, sanctioned by the King in Council the same day, and brought into force on 1 July 2025 by a separate Royal Decree. The Act incorporates Regulation (EU) 2023/1114 by reference (§ 1), designates Finanstilsynet as competent authority (§ 2) and sets a transitional window for already‑registered virtual‑asset providers until 30 December 2025 (§ 19 (2)). A framework regulation (Kryptoeiendelsforskriften, FOR‑2025‑06‑25‑1311) supplements the Act.
-
Finanstilsynet (Financial Supervisory Authority of Norway) is the single licensing and supervisory body for:
-
issuers of asset‑referenced tokens and e‑money tokens,
-
crypto‑asset service providers (CASPs) such as exchanges, brokers, custodians, portfolio managers and advisory firms, and
-
operators of trading venues for crypto‑assets.
-
-
The Authority may demand any information or documents it considers relevant, carry out on‑site inspections with court approval, impose corrective orders (including suspension of offerings or trading), replace unfit managers, and levy substantial administrative fines. Criminal prosecution is possible for the gravest breaches.
-
A startup requires authorisation before it may:
-
Issue asset‑referenced tokens to the public or seek their admission to trading.
-
Issue e‑money tokens (stablecoins referencing one official currency) to the public or seek their admission to trading.
-
Provide any crypto‑asset service listed in MiCA Part V—including custody, operation of a trading platform, exchange of crypto‑assets for funds or other crypto‑assets, execution of client orders, placing, portfolio management or advice.
-
Continue activities previously registered only for anti‑money‑laundering purposes (e.g., virtual‑currency exchange or wallet services) after 30 December 2025 unless a MiCA licence has been granted or refused earlier.
-
-
Classify Your Business Model
-
Identify whether you are an issuer (token creator) or a service provider (CASP). Multiple licences may be required if you perform several regulated functions.
-
-
Prepare the Application Package for Finanstilsynet
-
Corporate documentation – articles of association, registered office in the EEA, organisational chart.
-
Programme of operations – detailed description of planned services, business model, target client groups, outsourcing arrangements and use of distributed‑ledger technology.
-
Governance & internal controls – evidence that all directors and senior managers are “fit and proper”, plus policies for risk management, conflicts of interest, complaints handling, cyber‑security and business continuity.
-
Capital & prudential resources – proof that you meet the initial capital or own‑funds requirements that MiCA sets for the relevant service category.
-
AML/CFT compliance framework – policies, customer‑due‑diligence procedures, transaction monitoring tools and appointment of a compliance officer.
-
Insurance or similar guarantee – where MiCA requires professional indemnity coverage (e.g., custody).
-
Crypto‑asset white paper (if issuing) – drafted in Norwegian or English, containing the prescribed disclosures; submit it to Finanstilsynet and publish it before the public offer or admission to trading.
-
-
File the Application
-
Submit electronically to Finanstilsynet. The Authority will acknowledge receipt and may request further information during review.
-
-
Regulatory Assessment
-
Finanstilsynet evaluates completeness, managerial suitability, operational soundness, capital adequacy and investor‑protection safeguards. Site visits or interviews can be ordered.
-
-
Decision & Publication
-
A written authorisation decision is issued and published on Finanstilsynet’s website. Conditions or limitations can be attached. Once licensed, your firm is entered in the public register of crypto‑asset service providers/issuers.
-
-
Post‑Authorisation Obligations
-
Ongoing reporting of significant changes, periodic financial information, incident notifications and market‑abuse monitoring.
-
Continuous compliance with white‑paper duties, marketing standards and MiCA conduct rules.
-
Immediate cooperation with any information requests or onsite inspections.
-
-
Firms already registered for AML purposes as exchange or custody providers may keep operating until 30 December 2025 at the latest, but must apply for and receive a full MiCA licence before that date to continue legally thereafter.
Behind Licentium
Our Edge
Licentium is a specialized platform that connects crypto-asset issuers and service providers with an international network of lawyers, regulatory consultants, and former supervisors. Projects can map applicable rules in key jurisdictions through a single interface, obtain jurisdiction-specific launch advice, arrange the drafting of white papers and licensing applications, and schedule ongoing compliance health-checks. The platform’s curated expert pool spans financial services, data protection, and corporate law, enabling founders to address cross-border requirements—from MiCA in the EU to securities, AML, and consumer-protection regimes elsewhere—within coherent project timelines and budgets.
