Detailed overview
Austria: MiCA Authorisation under the FMA
Austria is a full MiCA jurisdiction. The Austrian Financial Market Authority is the national competent authority for crypto-asset issuers and crypto-asset service providers under the Austrian MiCA Enforcement Act. The FMA supervises compliance with MiCA, the Austrian implementing act, and EU delegated and implementing acts.
Regulator
The main regulator is the Austrian Financial Market Authority. The Oesterreichische Nationalbank may be involved in specific asset-referenced token, e-money token, banking, prudential, and payment-system matters. For a standard crypto-asset service provider application, the FMA is the practical licensing authority.
Licensing route
A business that provides crypto-asset services in or from Austria generally needs FMA authorisation as a crypto-asset service provider unless it is a financial entity that can use the MiCA notification route.
Authorised crypto-asset services include custody and administration of crypto-assets for clients, operation of a crypto-asset trading platform, exchange of crypto-assets for funds, exchange of crypto-assets for other crypto-assets, execution of client orders, placing of crypto-assets, reception and transmission of orders, advice on crypto-assets, portfolio management on crypto-assets, and crypto-asset transfer services for clients.
The licence perimeter applies only where the asset is a crypto-asset within MiCA. Tokens that qualify as financial instruments or otherwise fall within another EU financial-services framework must be analysed under that separate regime. Token labels are not determinative.
Application process
Applications are submitted to the FMA under the MiCA authorisation procedure. The application should map each intended service to the relevant MiCA service category and include a complete governance, ownership, capital, outsourcing, custody, IT, complaints, conflicts, conduct, AML and business-plan package.
The FMA expects a complete and well-structured filing. It may hold an oral hearing and fit-and-proper interviews with management and key function holders.
The FMA sends a receipt confirmation within five working days and checks completeness within twenty-five working days. After a complete file is confirmed, the substantive review is generally forty working days and may extend to sixty working days. The FMA may request additional information and suspend the review clock in the circumstances allowed by MiCA.
In practice, the overall process usually takes several months and depends heavily on file quality, ownership complexity and the business model.
Transitional position
Austria’s pre-MiCA continuation period has expired. Virtual-currency service providers that were registered under the Austrian AML regime before 30 December 2024 could continue only until 31 December 2025 or until the FMA granted or refused MiCA authorisation.
New or continuing Austria-facing crypto-asset service activity now requires MiCA authorisation, a valid MiCA passport from another EU competent authority, or a valid Article 60 notification route for an eligible financial entity.
Cost
FMA tariff fees apply under the FMA fee regulation. The current official tariff identifies crypto-asset service provider authorisation fees by MiCA capital class, with the authorisation fee ranging from EUR 3,750 for class 1 to EUR 12,500 for class 3.
Separate tariff fees apply for whitepaper filings, licence extensions, qualifying holding decisions, Article 60 notifications and passport notifications. In addition, supervised crypto-asset issuers and service providers contribute to FMA supervisory costs under the Austrian MiCA Enforcement Act.
Ongoing obligations
After authorisation, a crypto-asset service provider must comply with MiCA conduct, prudential, governance and service-specific obligations. These include custody safeguards, trading-platform rules, exchange and execution obligations, order reception and transmission rules, advice and portfolio-management requirements, transfer-service duties, complaints handling, conflicts management, client disclosures and recordkeeping.
Crypto-asset service providers must also maintain Austrian AML controls, including a business-model-specific risk analysis, internal AML procedures and appropriately appointed AML officers.
Enforcement risk
Providing crypto-asset services without the required MiCA authorisation is an administrative offence. The FMA may impose fines of up to EUR 700,000 or up to twice the benefit obtained from the breach where that benefit can be quantified.
The FMA also has broad supervisory powers. These include information requests, suspension or prohibition of services, public notices, immediate cessation orders for unauthorised activity, and withdrawal or suspension of authorisation in serious cases.
Practical assessment
Austria is suitable for crypto businesses that want an EU MiCA licence through a regulator with a mature financial-supervision infrastructure and a defined application process. It is not a light-touch jurisdiction.
Applicants should expect detailed FMA scrutiny of legal perimeter analysis, governance, AML, outsourcing, custody arrangements, IT resilience, shareholder suitability and management fitness. The main execution risk is filing too early with an incomplete package.