CASP (crypto-asset service provider)
A company that professionally provides crypto-asset services to customers – such as trading, exchange, custody or transfers. In the EU, every CASP needs an authorisation under MiCA.
Alsocrypto-asset service providercrypto service providercrypto providerMiCA-licensed provider
On the learning path: Stage 4 · Step 1 – Ways to get Bitcoin
CASP is short for ‘crypto-asset service provider’, the term used in the MiCAGlossaryMiCA (Markets in Crypto-Assets Regulation)The EU regulation on markets in crypto-assets. Since 30 December 2024, exchanges, brokers and custodians in the EU have needed authorisation; the last transitional period ended on 1 July 2026. MiCA regulates providers, not Bitcoin itself.On the learning path: Stage 4 · Step 2 – Choosing a provider →In the glossary → regulation. It means a company that professionally provides crypto-asset services to clients and is authorised to do so under MiCA.[1] The transitional periods in which existing providers could keep operating without this authorisation ended in every EU country by 1 July 2026 at the latest.[2]
What’s included
MiCA names ten services: custody, operating a trading platform, exchanging crypto-assets for funds or for other crypto-assets, executing orders, receiving and transmitting orders, placing, advice, portfolio management and transfer services.[1]
Custody means the provider controls crypto-assets, or the means of access to them – such as private keys – on your behalf. So an app that holds your bitcoin for you needs authorisation as a CASP. Wallet software where only you hold the keys doesn’t hold anything for you.
How to check a provider
ESMAGlossaryESMA (European Securities and Markets Authority)The EU authority for securities and financial markets, based in Paris. What matters to you is its MiCA register: it lists all crypto-asset service providers authorised in the EU.On the learning path: Stage 4 · Step 2 – Choosing a provider →In the glossary → publishes a register of authorised providers and a list of firms flagged for operating without authorisation. Both are updated weekly.[2] If a provider is missing from the register, that’s a clear warning sign. It’s also worth checking the warnings issued by your national regulator – in Germany, BaFinGlossaryBaFin (Germany’s Federal Financial Supervisory Authority)Germany’s financial regulator, based in Bonn and Frankfurt am Main. In Germany, it is responsible for authorising and supervising crypto service providers under MiCA, and it warns about unauthorised offers.On the learning path: Stage 6 · Step 2 – Spotting scams →In the glossary →.
We only feature and link to providers for buying bitcoin if they’re listed in the ESMA register – see our methodology.
Related terms
These terms are closely connected.
- This termCASP(crypto-asset service provider)
- MiCA (Markets in Crypto-Assets Regulation)The EU regulation on markets in crypto-assets. Since 30 December 2024, exchanges, brokers and custodians in the EU have needed authorisation; the last transitional period ended on 1 July 2026. MiCA regulates providers, not Bitcoin itself.
- ESMA (European Securities and Markets Authority)The EU authority for securities and financial markets, based in Paris. What matters to you is its MiCA register: it lists all crypto-asset service providers authorised in the EU.
- BaFin (Germany’s Federal Financial Supervisory Authority)Germany’s financial regulator, based in Bonn and Frankfurt am Main. In Germany, it is responsible for authorising and supervising crypto service providers under MiCA, and it warns about unauthorised offers.
- Exchange (crypto exchange)A trading platform where buyers and sellers trade bitcoin with each other via an order book. The price results from supply and demand; fees usually follow the maker-taker model.
- Custodian (custodial)A provider such as an exchange or app that holds the private keys for you. Convenient, because support can help if you lose your password – but you don’t hold the bitcoin yourself and depend on the provider paying out.
Explained in depth
These articles go into more detail:
- ReferenceMiCA & regulationWhat MiCA, KMAG and BaFin mean for you: checking a licence in the ESMA register, insolvency protection, no deposit guarantee, the Travel Rule and AMLR from 2027.
- Stage 4 · Step 2Choosing a providerMiCA authorisation, real bitcoin, withdrawals, costs, savings plan, security: how to check a Bitcoin provider yourself – with a guide and checklist.
- Stage 4 · Step 1Ways to get BitcoinApp, exchange, bank or broker, peer-to-peer, ATM or earning: six ways to get Bitcoin – what they cost, whether you get real bitcoin, who they suit.
More from „Tax & law“
- AMLR (EU Anti-Money Laundering Regulation)
- DAC8 (EU reporting rules for crypto-assets)
- Deposit guarantee (deposit protection)
- Exemption limit (€1,000 Freigrenze)
- FIFO (first in, first out)
- Holding period (speculation period)
- KMAG (German Crypto Markets Supervision Act)
- Private disposal transaction (privates Veräußerungsgeschäft)
Sources2 sources · 2 publishers
The superscript numbers in the text refer to these sources.
- Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA), Art. 3 – Official Journal of the European Union (EUR-Lex), 31.05.2023 (accessed 28/09/2026)
- Markets in Crypto-Assets Regulation (MiCA) – Register – ESMA (accessed 28/09/2026)
This entry is for education only and is not investment, tax or legal advice.