MiCA regulation in Slovakia: Licensing, implementation, and what crypto firms need to know

Share:

General Counsel

Aug 05, 2025

5 min. read

MiCA regulation in Slovakia: Licensing, implementation, and what crypto firms need to know

Share:

MiCA regulation in Slovakia: Licensing, implementation, and what crypto firms need to know

In this article

The Markets in Crypto‑Assets Regulation (MiCA) isn’t just another EU rule—it’s the game-changer for crypto-asset services. I’ll walk you through how Slovakia’s National Bank of Slovakia (NBS) will enforce MiCA’s licensing, governance, and conduct requirements. You’ll learn what to prepare, when to act, and how to avoid common stumbles. By the end, you’ll see compliance as a competitive edge, not an obstacle.

Hooking into your timeline: MiCA’s phased rollout in Slovakia

You don’t want surprises mid‑year, so note these dates. From 30 June 2024, rules for asset‑referenced tokens (ARTs) and e‑money tokens (EMTs) kick in. 

Then on 30 December 2024, the full Crypto‑Asset Service Provider (CASP) regime—authorisation, governance, conduct—became mandatory. MiCA (EU) 2023/1114 applies directly in Slovakia, and the NBS is your go‑to supervisor under Articles 60–62.

Securing your license: A clear path through NBS requirements

I’ve seen too many firms scramble for missing documents. Article 62 of MiCA says: if you professionally provide crypto-asset services, you need NBS authorisation. 

That covers trading venues, custodial wallet providers, brokers, transfer and payment services, portfolio management, and token issuance/redemption. 

Your dossier must prove you’ve got the business model, governance, risk controls, tech resilience, and money to back it up.

ComponentKey Elements
Program of ActivitiesBusiness model, services, clients, cross‑border plans
Governance & “Fit & Proper”Org chart, roles (governing body, compliance officer, risk manager), conflict policies
Risk Management & AML/CFTCustomer‑due‑diligence (CDD), transaction monitoring, Travel Rule (transaction‑travel rule)
Technical & Operational ResilienceICT architecture diagrams, cybersecurity controls, BCP/DR plans
Prudential ResourcesOwn funds (€50 000–€150 000), client‑asset segregation, custodial insurance
White Paper & DisclosureToken rights, governance, fees, redemption, risk factors (ART/EMT issuers)
Supporting DocumentationIncorporation proof, audited statements, indemnity insurance, AML licences
Core components of a CASP authorisation dossier

No more guesswork: Transitional deadlines you can trust

Slovakia uses MiCA’s default 18‑month grandfathering under Article 143(3). If you’ve registered with Slovakia’s Financial Intelligence Unit by 30 December 2024, you can operate until 30 June 2026—provided you file your full CASP application by year‑end 2024. 

Rumors of a 12‑month cut exist, but no official NBS rule has appeared. After authorisation, your Slovak licence passports across the EEA—no extra permits needed.

PhaseApplication DeadlineGrandfathering Ends
ART/EMT Rules EffectiveN/A30 June 2024
Full CASP Regime Effective30 December 2024N/A
Grandfathering Registration30 December 202430 June 2026
(Proposed) Shortened National PeriodN/A31 December 2025 (not formalized)
MiCA transitional deadlines in Slovakia

Your playbook: What crypto firms need to hit the mark

I recommend you start with a pre‑application consultation at the NBS. These chats clarify dossier specs, fees, and timelines. Next, fortify your Anti‑Money Laundering / Counter‑Terrorist Financing (AML/CFT) controls—think of your CDD and transaction‑monitoring systems as the bouncer at your digital club: no fakes allowed. 

Then, build airtight governance by appointing compliance and risk officers and formalising conflict‑of‑interest and whistle‑blower policies. Don’t forget tech: run penetration tests and maintain business‑continuity plans. 

Finally, make sure you’ve got the capital, segregate client assets, insure custodial services, and craft token white papers that meet both MiCA and local investor‑protection norms.

Making it real: Practical next steps for seamless compliance

First, run a gap analysis: map your processes—AML/CFT, governance, ICT resilience, capital—against MiCA and NBS rules. Then, assemble your programme of activities, governance manuals, technical diagrams, AML/CFT policies, financial projections, and white papers. 

Schedule NBS pre‑application meetings early to nail down fees and requirements. Train your teams on reporting duties, breach notifications, and passporting procedures. Finally, set up a living compliance calendar to track MiCA deadlines, ESMA’s regulatory technical standards (RTS) and implementing technical standards (ITS), and NBS circulars.

Streamline MiCA compliance with CyberUpgrade

Meeting MiCA’s rigorous requirements—from whitepaper filings to ongoing governance and transparency—often means endless manual tracking and audit prep. CyberUpgrade automates your MiCA workflows with prebuilt templates and real-time Slack or Teams prompts, keeping policies, risk assessments, and evidence audit-ready in one central hub.

Beyond MiCA, CyberUpgrade also supports DORA, ISO 27001, and NIS 2 frameworks, letting you “map once, prove many” across multiple regulations. Automated data extraction, vulnerability scans, and KPI dashboards feed each regulator’s portal seamlessly, reducing manual work by up to 80 %.

With fractional CISO services guiding your continuous monitoring and customizable compliance workflows, you’ll secure faster approvals, avoid fines, and adapt as MiCA and related frameworks evolve—turning compliance from a hurdle into a strategic advantage.

Ready to level up your compliance game?

MiCA might look like a mountain, but with early planning and close NBS collaboration, you’ll plant your flag at the summit. Align your processes with MiCA’s standards, leverage Slovakia’s passporting right, and turn compliance into a growth driver. If you’re juggling questions or need a sanity check on your approach, reach out to CyberUpgrade—we’re here to help you navigate every twist and turn.

Share this article

Post on Linkedin
Post on Facebook
Post on X

How useful was this post?

0 / 5. 0

General Counsel

He is regulatory compliance strategist with over a decade of experience guiding fintech and financial services firms through complex EU legislation. He specializes in operational resilience, cybersecurity frameworks, and third-party risk management. Nojus writes about emerging compliance trends and helps companies turn regulatory challenges into strategic advantages.
  • DORA compliance
  • EU regulations
  • Cybersecurity risk management
  • Non-compliance penalties
  • Third-party risk oversight
  • Incident reporting requirements
  • Financial services compliance

Explore further