Crypto License in Kosovo: CBK Requirements, Process and Timeline (2026)

Kosovo now has a functioning crypto-asset licensing regime. The parent statute is Law No. 08/L-295 on Crypto-Assets, published in the Official Gazette on 22 November 2024, and the Central Bank of Kosovo (CBK) approved its first implementing regulation on 29 August 2025. What is licensable today is crypto-asset exchange: exchanging crypto-assets for cash or fiat money (including crypto ATMs) and exchanging crypto-assets for other crypto-assets. The headline requirements are EUR 125,000 in minimum capital, a fit-and-proper board of at least three members, a complete CBK application file, and a reasoned CBK decision within 60 working days of a complete application.

This guide covers the full picture: what is licensable now versus what is coming, the capital and governance requirements, the application file, the timeline, taxation, and the honest answer on EU market access. Every figure on this page is checked against the official text of the law and the CBK regulation, not against secondary summaries.

Scope warning most summaries miss: the 2025 CBK regulation licenses crypto-asset exchange services only. Custody, trading-platform operation, portfolio management, investment advice, and token issuance are within the parent law's scope, but their licensing criteria await separate CBK sub-legal acts. If your business model depends on one of those services, you cannot apply for that license yet, and any plan should be structured around the exchange license or timed to the next regulatory wave.

The Legal Framework

Two instruments matter:

• Law No. 08/L-295 on Crypto-Assets is the parent statute. It was published in Official Gazette No. 21 on 22 November 2024 and entered into force 15 days later. Article 1(2) states the law is partially aligned with the EU's Markets in Crypto-Assets Regulation (MiCA, Regulation (EU) 2023/1114). It is an alignment, not a full transposition: Kosovo uses its own structure of six license types and two authorization types rather than MiCA's ten service categories.
• The CBK Regulation on Licensing of Crypto-Assets Service Operators Providing Crypto-Assets Exchange Services, approved by the CBK Board on 29 August 2025, is the first implementing act. It makes the exchange-service categories operational and sets the capital, governance, and application requirements described below.

The Central Bank of Kosovo is the sole licensing authority for crypto-asset service operators (CASOs). The Tax Administration of Kosovo (ATK) and the Financial Intelligence Unit (FIU) are also competent authorities within their own domains. Operating without a license is a sanctionable offence: the law provides misdemeanour fines of EUR 5,000 to EUR 20,000 for a legal person carrying out regulated activity without a license.

What Is Licensable Now vs What Is Coming

Licensable now (first wave, under the 2025 regulation):

• Exchange of crypto-assets for cash or fiat money, and vice versa. This expressly includes operating crypto ATMs.
• Exchange of crypto-assets for other crypto-assets.

Licensed operators may only exchange crypto-assets that are permitted to be traded under European Union legislation.

In the parent law but not yet operational (future waves):

• Custody of crypto-assets (within the law's scope, though not one of its six named license types)
• Operating a trading platform beyond the exchange activity
• Portfolio administration and other third-party services
• Authorization for launching crypto-assets and for giving advice on crypto-assets
• Issuance of digital tokens, both linked and not linked to a real asset

The CBK has publicly described the 2025 regulation as the first step in a gradual, phased approach. Each future sub-legal act is a separate licensing event, which matters if you are planning a multi-service business: the entity you form and license for exchange today is the natural applicant when the next categories open.

As of July 2026, the CBK's public register of licensed financial institutions does not yet list a licensed crypto-asset operator. The market position of first licensed mover is still open.

Capital Requirements

The capital rules sit in Article 9 of the CBK regulation:

• Minimum capital: EUR 125,000, required both for licensing and as an ongoing maintenance obligation. The figure is flat: it does not vary between crypto-to-fiat and crypto-to-crypto activity.
• Additional startup fund: at least 20% of the minimum capital (so at least EUR 25,000) to cover initial expenses. This applies only to initial license applications; it is a one-time startup buffer, not a permanent reserve.
• Cash payment: the minimum capital must be paid in cash so it is immediately available to absorb losses, evidenced by a bank document certifying payment.
• Source-of-funds rule: capital must come from legal sources and must not derive from debts, loans, or funds of illegal or suspicious origin. The CBK may request clarifications and conduct its own verification of the source of funds. Plan for real source-of-wealth documentation for every contributor of capital.

Governance and Fit-and-Proper Requirements

Article 10 of the regulation sets the governance bar:

• Board of directors of at least 3 members, the majority of whom must be independent and non-executive.
• Board members must meet fit-and-proper criteria, including a university degree in economics, law, or another field relevant to the position, and 3 years of experience in the banking or financial sector, or in another field the CBK deems appropriate.
• Members of management bodies must not have caused or been responsible for the bankruptcy of an entity, and must not themselves have been subject to bankruptcy proceedings. The CBK may grant exemptions from the bankruptcy bars in exceptional circumstances.
• The board must be assisted by an audit committee (chaired by a non-executive board member and including at least one external accounting or auditing expert) and a risk management committee whose members are board members. The regulation permits these functions to be exercised through at least one committee, so the two roles can be combined.

A practical note on corporate form: neither the law nor the regulation names a required company type. The governance architecture (voting shares, an independent board, committees) sits most naturally with a joint-stock company, but there is no published CBK guidance mandating one. This is a structuring decision to take with advice, before incorporation.

Shareholder Requirements

• A main shareholder is anyone holding, directly or indirectly, 10% or more of any class of voting shares or capital.
• Main shareholders must enjoy good reputation and must not have been convicted of money laundering, terrorist financing, or any other criminal offence that would damage their reputation.
• Changes in main shareholders after licensing require prior CBK approval; ownership changes below 10% must be notified to the CBK within 30 days.
• Foreign ownership is not restricted. There is no nationality or local-partner requirement, and the regulation expressly contemplates a foreign financial institution establishing a Kosovo operator; in that case a no-objection declaration from the home-country supervisor is part of the file.

One accuracy point worth flagging, because published summaries get it wrong: the no-responsibility-for-bankruptcy bar in the regulation is written for members of the management bodies, not for 10% shareholders. The shareholder test is the good-reputation and no-conviction standard.

The Application File

Article 5 of the regulation lists the application contents, sixteen items in total. The core of the file:

• Business registration certificate for the Kosovo entity
• Act of establishment and company statute
• An operating program (business plan)
• Description of the governance structure
• Data on main shareholders and on management-body members
• Internal control and risk-management framework, including AML/CFT measures and a business continuity plan
• A signed contract with a bank for opening the account through which the operator will carry out its cash operations
• For foreign financial institutions: the home-supervisor no-objection declaration
• Proof of paid-up capital
• Proof of payment of the licensing fee

The bank-account contract deserves emphasis: it is a precondition of the application itself, so the banking relationship must be secured before filing, not after. The regulation gives operators a right of access to bank account services on objective, non-discriminatory and proportionate terms, and a bank that refuses must give written justification within five working days and notify the CBK. Building the file in the order the CBK expects, with the bank relationship sequenced early, is most of the craft in this process.

The application and licensing fees are set administratively by the CBK and are not published as figures in the regulation or the law. The fee is non-refundable if the application is refused. Confirm the current amount directly with the CBK Licensing Department when preparing a filing.

The CBK Process and Timeline

Article 6 of the regulation sets a clear procedural clock, counted in working days:

The license is granted for an indefinite period and is non-transferable and non-tradable. Two post-grant deadlines matter: the license may be revoked if the operator does not commence the licensed activity within 6 months of issuance, and a refusal or withdrawal triggers a 3-month bar before re-applying.

On the regime's own calendar: per the CBK's public notice, the regulation entered into force on 29 November 2025 (90 days after its 29 August 2025 approval), and institutions subject to licensing had until 1 March 2026 to apply. Both new entrants and operators already active in Kosovo, including existing crypto ATM and OTC operators, fall under the licensing obligation, and activity without a license after that deadline is sanctionable.

You Need a Kosovo Company First

The license is only available to a legal entity licensed by the CBK as a crypto-asset service operator, with a registered office in the Republic of Kosovo where at least part of the services are carried out. There is no branch or passporting route: even a foreign financial institution must establish a Kosovo entity.

That makes company formation the first concrete step of any licensing plan: entity structuring, capital deposit mechanics that satisfy the cash and source-of-funds rules, a registered office, and the banking relationship the application file requires. This is the work we do daily. See our company registration service for how a formation engagement runs, and Kosovo's tax framework for why the jurisdiction is attractive beyond the license itself.

Crypto ATMs

Under the 2025 regulation, crypto ATM operation is licensed within the crypto-for-cash exchange activity (the parent law lists ATM licensing as its own category in Article 5; the regulation implements both through the same exchange license). Two additional points for ATM operators:

• Deploying physical ATM machines requires an additional CBK license for those cash operations under the CBK's cash-operations rules, separate from the CASO license itself.
• Transactions above EUR 1,000 (including interconnected transactions within 24 hours) must be carried out through a payment account rather than cash, which shapes how ATM business models handle larger customers.

AML and Compliance Obligations

Kosovo's AML statute is Law No. 05/L-096 on the Prevention of Money Laundering and Combating Terrorist Financing, and the crypto law adds operator-specific duties:

• Customer identification is required before occasional transactions of EUR 1,000 or more, with same-day interconnected transactions aggregated.
• Cash transactions of EUR 10,000 or more must be reported to the FIU; suspicious transactions must be reported within 24 hours of being identified, with no monetary threshold.
• The travel rule applies: licensed operators must collect and retain originator and beneficiary information for transfers, as defined by domestic legislation.
• Operators must run transaction monitoring and sanctions screening capable of reviewing blockchain transactions and detecting anonymisation technology, and maintain a business-wide money-laundering risk assessment.
• Records must be kept for five years, extendable to seven at the authority's request.
• Client crypto-assets and funds must be segregated from the operator's own assets, held in separate identifiable accounts, and transacted through dedicated bank accounts.

A person responsible for AML compliance, physically present in Kosovo, is part of the statutory application conditions, so the compliance function has to be real and local, not outsourced abroad on paper.

Taxation

Kosovo taxes crypto through its existing income-tax laws rather than a special crypto regime, and the Tax Administration (ATK) has published guidance:

• Crypto profits are taxed only when sold at a profit; buying and holding is not a taxable event.
• For companies, gains are taxed at the 10% corporate income tax rate, one of the lowest in Europe.
• For individuals, gains fall under the progressive personal income tax brackets (0%, 8%, 10%).
• Cost basis is what you paid; undocumented costs mean tax on the full sale price.

Published ATK guidance addresses income tax only; it does not yet address the VAT treatment of crypto transactions or exchange services. For an operator's own P&L, the VAT position of exchange commissions should be confirmed with a binding ruling before it is relied on. Standard VAT in Kosovo is 18% and the corporate income tax rate of 10% applies to operator profits like any other company.

The EU Question: What a Kosovo License Does and Does Not Give You

The honest answer, which serious applicants and their home-country counsel will check:

• A Kosovo CASO license authorizes crypto-asset exchange services within Kosovo. The regulation permits licensed operators to provide services throughout the territory of the Republic of Kosovo.
• Kosovo is not an EU or EEA member. Under MiCA, it is a third country, and MiCA has no third-country passporting or equivalence regime. A Kosovo license does not confer access to the EU single market.
• To serve EU/EEA clients on a passported basis, a firm needs a separate EU/EEA-established entity with a MiCA authorisation. The only narrow exception for third-country firms is reverse solicitation, where the EU client seeks the service entirely at their own initiative, and EU regulators construe it strictly.

Where Kosovo genuinely fits: a euro-denominated, low-tax base with a clear, young licensing regime, a regulator whose procedural clock is written into the regulation, an EU-aligned asset-eligibility rule, and a first-mover market where no operator is yet publicly licensed. For regional exchange operations, ATM networks, and founders who want a regulated euro-zone-currency base outside the EU's cost structure, that is a real proposition. It is not an EU passport, and any provider telling you otherwise is selling something the law does not offer.

How We Help

AM Legal Services covers the full path from idea to filed application:

• Eligibility assessment: whether you, your shareholders, and your capital can realistically meet the CBK's bar, and which license scope fits your model.
• Entity formation and structuring: the Kosovo company, registered office, capital deposit mechanics, and the source-of-funds documentation the CBK will test.
• The application file: the operating program, governance framework, internal control and AML/CFT documentation, fit-and-proper files for board members and shareholders, and the bank-account relationship the file requires.
• Filing and process management: submission to the CBK and handling information requests through to decision.
• After the license: the ongoing obligations, CBK notifications, and readiness for the next licensing waves as the CBK opens further categories.

Book a consultation to discuss your model. You will get an honest read on eligibility before anything is filed.

Frequently Asked Questions

What crypto activities can be licensed in Kosovo right now?

Two: exchanging crypto-assets for cash or fiat money (including crypto ATMs) and exchanging crypto-assets for other crypto-assets, under the CBK regulation approved on 29 August 2025. Custody, trading platforms, portfolio management, advice, and token issuance are in the parent law but await their own CBK implementing acts.

How much capital does a Kosovo crypto license require?

EUR 125,000 in minimum capital, paid in cash, plus an additional fund of at least 20% of that amount (at least EUR 25,000) for initial expenses on first-time applications. The capital must not come from loans or debt, and the CBK verifies the source of funds.

How long does the CBK take to decide?

The regulation gives the CBK 60 working days from receipt of a complete application to issue a reasoned decision, with receipt confirmed within 5 working days and completeness checked within 25 working days. Information requests can suspend the clock, so real-world timelines depend on how complete the file is on day one.

Can a foreigner own a Kosovo crypto exchange 100%?

Yes. There is no nationality or local-ownership restriction. The operator itself must be a Kosovo legal entity with a registered office in Kosovo, and main shareholders (10% or more) must pass the good-reputation test.

Does a Kosovo crypto license give access to the EU market?

No. Kosovo is a third country under MiCA, which has no third-country passporting regime. Serving EU clients on a passported basis requires an EU-established, MiCA-authorised entity. The Kosovo license covers activity in Kosovo.

Do existing crypto ATM and OTC operators in Kosovo need this license?

Yes. The licensing obligation covers both new entrants and operators already active in Kosovo. Per the CBK's public notice, the application window closed on 1 March 2026, and unlicensed activity after that point is sanctionable with fines of up to EUR 20,000 for a legal person.

How much are the CBK licensing fees?

The application and licensing fees are set by the CBK and are not published as figures in the regulation or the law; the application fee is non-refundable on refusal. Confirm the current amounts directly with the CBK Licensing Department as part of preparing the file.

What are the biggest practical obstacles in the application?

Three recur: the bank-account contract (a signed banking relationship is a required part of the file, so it must be secured before filing), source-of-funds documentation robust enough for CBK verification, and assembling a board of three or more members that meets the independence and experience requirements.

This page is general information about Kosovo's crypto-asset licensing framework, not legal advice for a specific situation. The regime is new and the CBK has signaled further regulation; facts in this guide are verified against the official texts as of the publication date shown above.