Ireland Central Bank CASP Authorisation: The CBI Route Under MiCA

Ireland is the English-speaking, common-law gateway to the EEA — and the Central Bank of Ireland (CBI) is one of the bloc's most deliberate financial supervisors. For a firm that needs an EU CASP licence with an English-language regulator, a deep funds-industry banking ecosystem, and a 12.5% corporate tax rate, the CBI route is worth the longer timeline.

Under MiCA, every EEA member state authorises crypto-asset service providers against the same harmonised rulebook. But the supervisor you apply to is not interchangeable. Lithuania and Estonia optimise for speed. The CBI optimises for demonstrable substance, individual accountability, and a documented programme of operations it can supervise for years.

This guide sets out what we call The CBI Authorisation Standard — the four gates every CASP applicant clears in Ireland: pre-application engagement, the application pack, the fitness and probity regime, and the demonstrable-substance bar. It also shows where Ireland wins against the faster Lithuania and Estonia routes — and where it does not.

Ireland is the only remaining native English-language, common-law member of the EEA after Brexit removed the UK. For founders whose drafting, governance, and board operate in English, that single fact removes a layer of translation risk from every regulatory submission and every supervisory conversation.

It also runs one of the world's deepest funds-administration ecosystems. A large share of global UCITS and alternative investment funds are domiciled or serviced in Dublin, and the banking, audit, and custody infrastructure that supports them is unusually mature for a country of its size. For a funds-adjacent crypto business, that infrastructure is the real prize.

The tax position reinforces the case. Ireland's 12.5% corporate income tax on trading income is among the most competitive in the EEA, and the country has signed the OECD BEPS minimum standards — so the rate is defensible rather than a transparency liability. Combined with full EEA passporting under MiCA, a CBI licence reaches the entire single market from a single hub.

The Central Bank of Ireland is a deliberate, substance-first supervisor. It does not compete on turnaround time and openly prefers a smaller number of well-run firms to a high volume of lightly-supervised ones. Applicants who expect a box-ticking exercise are routinely surprised by the depth of challenge.

Three traits define how the CBI behaves. First, it is substance-first: it wants real Irish presence — local management, local decision-making, and genuine operational capacity — not a brass plate. Second, it is fitness-and-probity heavy: named individuals carry personal regulatory accountability through the PCF and CF framework. Third, it is evidence-led: claims in the application must be backed by policies, org charts, and capital that actually exist.

Ireland already supervised the sector before MiCA through its Virtual Asset Service Provider registration regime under AML legislation. VASP registration was famously demanding — many applicants waited well over a year — and that culture of scrutiny carries directly into the CBI's CASP authorisation approach.¹^[1]

We label the Irish route The CBI Authorisation Standard because its distinctive gating is best understood as four sequential gates, each of which can stall an application that treats it as a formality.

• Gate 1 — Pre-application engagement: the CBI expects a structured pre-submission meeting before it will accept a formal application.

• Gate 2 — The application pack: a complete programme of operations, governance map, risk framework, and AML/CFT programme.

• Gate 3 — Fitness and probity: individual approval of every person holding a Pre-Approval Controlled Function.

• Gate 4 — Demonstrable substance: evidence of real Irish presence, local management, and the 'mind and management' test satisfied in fact.

The CBI publishes its MiCA authorisation expectations directly, and they map onto the MiCA Article 62 application content. Treat all four gates as live before you commit — clearing them in sequence is what makes the timeline predictable.²^[2]

The pre-application meeting is the CBI's most distinctive feature versus the faster EEA routes. Unlike a regulator that simply receives a submission and reviews it, the CBI expects to engage before you apply. The meeting is where it pressure-tests your business model, your substance plan, and the seniority of your proposed key individuals.

Arrive with a regulatory business plan, a draft programme of operations, an organisational chart naming your proposed PCF holders, and an honest substance narrative. A weak pre-application meeting does not get rejected — it gets informally discouraged, which is harder to recover from than a formal refusal.

Treat this stage as scoping, not selling. The CBI rewards applicants who arrive with their weaknesses already identified and a credible plan to close them. The single most common reason firms underestimate the Irish route is treating the pre-application meeting as a formality rather than the gate it actually is.

Once the CBI is comfortable to receive a formal submission, the application pack must be complete on day one. The CBI does not 'start the clock' on a partial file — it returns it. A complete pack covers four pillars.

• Programme of operations: the specific CASP services you will provide under MiCA — custody, exchange, execution, placement, advice, transfer, or operation of a trading platform — with detailed process flows for each.

• Governance: board composition, three-lines-of-defence model, reporting lines, and named PCF holders for risk, compliance, and the MLRO role.

• Risk framework: prudential risk, operational resilience mapped to DORA, conflicts-of-interest policy, and a documented safeguarding / segregation regime for client assets.

• AML/CFT programme: business-wide risk assessment, CDD and EDD procedures, Travel Rule compliance, transaction monitoring, and sanctions screening.

The AML/CFT programme is held to EBA AML/CFT guidelines, and the CBI scrutinises it harder than most EEA supervisors given its history of demanding VASP registration.³^[3]

Ireland's fitness and probity regime is the distinctive individual-accountability layer that sets the CBI apart. Anyone holding a Pre-Approval Controlled Function (PCF) — directors, the chief executive, the head of compliance, the MLRO — must be individually approved by the CBI before they take up the role.⁴^[4]

The regime tests three standards: competence and capability, honesty, integrity and reputation, and financial soundness. A PCF application is not a CV review — it is a regulatory assessment of whether that named person can be trusted to run a regulated firm. Weak or under-qualified candidates are a leading cause of delay.

Below the PCF tier sit Controlled Functions (CF), which do not require pre-approval but still carry ongoing fitness-and-probity obligations. The practical lesson is simple: name real, qualified, Ireland-based individuals early. The CBI will not approve a firm whose key functions are held by absentee or under-experienced placeholders.

The CBI applies a demonstrable-substance bar — sometimes framed as the 'mind and management' test. The question is whether the firm is genuinely directed and controlled from Ireland, or whether the Irish entity is a shell fronting decision-making elsewhere. A licence will not issue to the latter.

Substance in practice means local senior management with real authority, Irish-resident PCF holders, board meetings held and minuted in Ireland, real office and operational capacity, and key risk and compliance functions performed locally. Outsourcing is permitted, but the firm must retain genuine oversight and control.

This is where Ireland diverges most sharply from a lighter-touch substance regime. The cost is real — you are building a functioning Irish operation, not registering a holding entity. The payoff is a licence that survives supervisory scrutiny and an entity that institutional banking partners and counterparties take seriously.

The table below maps the four gates of The CBI Authorisation Standard — what is submitted, who reviews it, and the realistic duration of each stage.

The CBI applies the MiCA Annex IV minimum own-funds thresholds, which are harmonised across the EEA and set by the services a CASP provides.⁵^[5]

• Class 1 — €50,000: reception/transmission of orders, advice, placement, and transfer services.

• Class 2 — €125,000: custody and administration, exchange of crypto for funds or other crypto, and order execution.

• Class 3 — €150,000: operation of a crypto-asset trading platform.

Own funds must be the higher of the relevant Annex IV floor or one-quarter of the prior year's fixed overheads. Critically, the CBI reads capital as a substance signal: adequately capitalised firms with a credible funding runway clear scrutiny faster than thinly-funded applicants relying on promised future raises.

All three are EEA MiCA jurisdictions offering the same passporting outcome. They differ on timeline, language, supervisor character, banking depth, and tax. The table below is the decision matrix.

The pattern is clear. Lithuania and Estonia win on speed and lean setup. Ireland wins when the buyer of your licence — an institutional counterparty, a banking partner, or a US parent — values an English-language common-law regulator and funds-grade infrastructure over the fastest possible approval.

Ireland's deepest structural advantage is its funds-administration ecosystem. Decades of servicing UCITS and alternative investment funds have produced a banking, custody, and administration layer that is unusually comfortable with regulated financial entities — including crypto-native firms that hold a credible CBI authorisation.

For a CASP, banking access is the perennial bottleneck. The advantage in Ireland is not that any single institution is named or guaranteed — it is that the ambient ecosystem is staffed by people who already underwrite regulated fund and fintech relationships. A CBI licence read alongside genuine Irish substance is a materially stronger banking story than an offshore registration.

This is the compounding return on the substance bar. The same local management, governance, and operational capacity that the CBI demands for authorisation is precisely what a banking counterparty wants to see before opening an account. The work is not duplicated — substance built for the regulator also satisfies the bank.

Ireland is the right choice — despite the longer timeline — for a specific profile of firm. Choose the CBI route when the following are true.

• You need an English-language regulator: board, counsel, and governance operate in English and you want no translation layer in supervision.

• Your clients are institutional: counterparties and partners value a deliberate, well-regarded supervisor over the fastest approval.

• You are funds-adjacent: your model touches fund administration, custody, or institutional asset flows where Ireland's ecosystem is deepest.

• You are a US-facing group: a common-law, English-language EEA hub is the most natural home for a US parent's European entity.

The trade-off is the timeline and the cost of real substance. If your priority is speed-to-market or a lean digital-first footprint, Lithuania or Estonia will likely serve you better. Choose Ireland when the quality of the regulator and the depth of the ecosystem are the asset — not when you are racing a competitor to launch.

Yes. The Central Bank of Ireland authorises crypto-asset service providers under MiCA, and previously registered Virtual Asset Service Providers under AML legislation. A CBI CASP authorisation carries full EEA passporting rights, letting a single Irish entity serve the entire single market.

Plan for 9–15 months end-to-end, including pre-application engagement. The formal MiCA Article 62 assessment window runs up to 6–12 months, but the clock only starts once the CBI deems your application pack complete — incomplete files are returned rather than reviewed.

It is Ireland's individual-accountability regime. Anyone holding a Pre-Approval Controlled Function (PCF) — directors, CEO, head of compliance, the MLRO) — must be individually approved by the CBI against standards of competence, integrity, and financial soundness before taking up the role.

Generally, yes. Lithuania and Estonia typically authorise in 6–12 months, while Ireland realistically runs 9–15 months. The trade-off is deliberate: Ireland exchanges speed for an English-language common-law regulator, a funds-grade banking ecosystem, and a 12.5% tax rate that institutional and US-facing groups value.

The CBI applies the MiCA Annex IV floors: €50,000, €125,000, or €150,000 depending on the services provided, or one-quarter of fixed overheads if higher. The CBI also reads adequate capitalisation as a substance signal during assessment.

• MiCA Compliance Guide for CASPs: the full EEA authorisation walkthrough that underpins every national route, including Ireland.

• EMI Licence Application in Lithuania: the faster EEA alternative when speed-to-market outweighs supervisor prestige.

• EEA/UK/Offshore Crypto Incorporation: where Ireland sits in the wider incorporation map for a crypto business.

• The 2026 Substance Bar: why demonstrable presence — the heart of the CBI route — now decides licensing across the EEA.

Ireland will never be the fastest CASP licence in the EEA, and it does not try to be. What it offers is a deliberate, English-language, common-law regulator, a funds-grade banking ecosystem, and a 12.5% tax rate — a combination no other EEA hub matches. For firms whose clients and bankers value the quality of the supervisor, the longer CBI timeline is not a cost. It is the moat.