---
title: "Estonia Crypto Regulation Monitor | cryptoassets.gi"
canonical: https://cryptoassets.gi/jurisdictions/estonia/
source_html: /jurisdictions/estonia/index.html
description: "Estonia crypto asset regulation: 9 categories, 41 sourced findings, updated 2026-10-25. Licensing, token classification, stablecoins, tax treatment."
generated_at: 2026-11-07T14:19:44Z
content_sha256: fe9b3d49d26634e2a6cf2902494a09779e4dc764ef78ca663e9a626023259f49
generator: "fe-fleet/md-twin@1.0"
---
# Estonia Crypto & Digital Asset Regulation

schema crypto-v2.0.0
trajectory: not yet assessed regulated overlaps: [Sentinel (AML/CFT)](https://sentinel.gi/jurisdictions/estonia/), [World Payments](https://payments.gi/jurisdictions/estonia/)

Last updated 2026-10-25 · 9 categories · 41 sourced
findings · 36 sources in the cumulative register

Download report (PDF) Expand all

Evidence re-verified: 2026-10-25 · Position last changed: 2026-10-25 · Record history & provenance ▾ Methodology & record provenance: Module confidence is derived from the underlying claims (source tier and primary excerpt retention), while statutory legal force is tracked independently.

Review status: AI-synthesised · Tier-1/2 verified · As-of date: 2026-10-26

[Open in Co-Pilot ↗](/reports/?type=copilot&j=ESTONIA)[Build Report](/reports/?j=ESTONIA)[Compare](/compare/?j=ESTONIA)

Framework posture Regulated 7 of 9 modules populated · AI-synthesised · Tier-1/2 verified

Lead supervisory authority Finantsinspektsioon Primary statutory & supervisory perimeter

Next milestone (> 2026-10-26) None scheduled No dated future statutory milestone on record

Module coverage & confidence 7 / 9 modules assessed 0 Confirmed · 7 Probable · 0 Uncertain · 2 Not yet assessed

9 Categories

0 Moved this cycle 0 Key judgments 2 Open gaps 41 Findings

13 Tier-1 sources

Confidence mix 9 unpopulated
(sums to 9 rendered categories; click to filter)

No categories moved this cycle.

Law made at European Economic Area (Bloc) level that applies in Estonia is covered once, on the [European Economic Area (Bloc)](/jurisdictions/european-economic-area-bloc/) page. This page covers Estonia’s own layer: implementation, national authorities, national options and local enforcement.

## Jurisdiction lead brief

###### Latest update · 25 October 2026

#### Lead Signal

Estonia's crypto-asset regulatory architecture registered two market-entry events within the current recency window that together illustrate how the post-MiCA authorisation landscape is populating in practice. Lightyear Europe AS obtained Article 60 notification-based authorisation from Finantsinspektsioon to provide crypto-asset services, effective 17 November 2025, and Lightspark Payments Europe AS obtained a standalone Crypto-Asset Service Provider authorisation together with a simultaneous electronic-money-institution authorisation, effective 15 June 2026. As of the 30 September 2026 ESMA register snapshot, these events place three authorised entities on Estonia's CASP register.

Neither event is a change to the licence class or authorisation gateway itself -- Estonia's transition to the MiCA-only authorisation regime had already formally ended on 1 July 2026, after which crypto-asset services could only be provided under Finantsinspektsioon CASP authorisation, an Article 60 notification, or a passported EEA authorisation. Rather, these are market-entry events populating that already-settled gateway: one firm entering via the lighter-touch Article 60 notification route, the other securing the fuller standalone CASP authorisation paired with EMI status, a combination that signals an intent to combine crypto-asset services with electronic-money activities under one Estonian entity.

#### Other Developments

Lightspark's dual authorisation is the more structurally significant of the two events. Holding both a standalone CASP authorisation and an EMI authorisation simultaneously allows a single Estonian entity to combine crypto-asset service provision with electronic-money issuance and payment-services activity, a combination that was not available to Lightyear under its Article 60 notification route alone. This positions Lightspark as, on the available register evidence, Estonia's first entity to hold a standalone CASP licence under MiCA.

Lightyear's Article 60 route reflects the lighter-touch notification pathway available to firms already holding another qualifying EU authorisation. The Article 60 mechanism under MiCA permits certain already-authorised financial entities to notify rather than apply afresh for crypto-asset service authorisation, and Lightyear's use of that route, effective from 17 November 2025, predates Lightspark's standalone authorisation by several months.

#### Cross-Monitor Connections

Both authorisation events are commercial/market-entry facts under MiCA's crypto-asset service provider framework and do not, on the evidence available, carry an identified overlap into financial-integrity (AML/CFT enforcement), world-payments (payment-institution licensing), or advennt (gambling-law) coverage. The separate Estonian Gambling Act classification of crypto-assets as a form of bet, noted in Estonia's standing token-classification record, is unrelated to either of these two entities and is not implicated by the commercial-activity developments.

#### Outlook

The near-term question is whether further entities follow either the Article 60 notification route or seek standalone CASP authorisation in Estonia, and whether Lightspark's combined CASP/EMI model becomes a template other crypto-asset firms pursue in the jurisdiction. The current three-entity register size as of 30 September 2026 gives a baseline against which future growth can be measured, though the pace of future authorisations cannot be read from the evidence.

3 earlier updates not shown here.

###### Standing brief · as of 3 August 2026

Written before the update above. Where they differ, the update is the more recent position.

#### Lead Signal

Estonia's crypto-asset regulatory perimeter completed a structural transition on 1 July 2026, as the 18-month transitional grandfathering period Estonia elected under MiCA Article 143(3) formally lapsed. The European Securities and Markets Authority followed with a public statement on 23 June 2026 calling on any remaining unauthorised crypto-asset service providers — including legacy operators that had continued servicing Estonian clients under Estonia's prior national licensing regime — to wind down their operations in an orderly manner. This marks the moment at which Estonia's crypto-licensing environment shifts decisively from a phase of managed coexistence between old and new regimes to one of full MiCA enforcement: continuing to operate as an unauthorised crypto-asset service provider in or into Estonia is no longer a transitional grey area but a live compliance failure. Finantsinspektsioon, confirmed as Estonia's sole competent authority across all MiCA Titles, now carries full supervisory responsibility for a market in which the old national licensing track has formally closed. What remains genuinely open, and unconfirmed in this research pass, is the on-the-ground state of that closure: how many previously licensed, pre-MiCA VASPs have secured MiCA authorisation, exited the market voluntarily, or remain in an unauthorised holding pattern despite ESMA's wind-down call. That gap — not doubt about the legal architecture itself — is what keeps the crypto_licensing module at amber rather than green, and it is the clearest single item to watch for confirmation in the coming weeks via Finantsinspektsioon's public CASP register.

#### Other Developments

Beyond the licensing transition, this cycle's most consequential activity occurred in tax_treatment, where a Challenger-fold review corrected two material factual gaps left by the original research pass. Estonia's standard VAT rate had been reported as having risen from 20% to 22% in 2025 — a claim that was simply wrong. The corrected sequence, now verified against KPMG and IMF commentary, shows VAT rising from 20% to 22% effective 1 January 2024, and then again to a permanent 24% effective 1 July 2025 under Estonia's Security Tax Act package; 24% remains the current rate as of August 2026. Separately, Estonia's flat personal income tax rate of 22%, effective 1 January 2025, has now been confirmed directly against the Estonian Tax and Customs Board's own published rates, alongside confirmation that a previously legislated increase to 24% for 2026 was cancelled by Parliament in July 2025 — so the 22% income-tax rate is stable through 2026 rather than rising as earlier anticipated. Both corrections upgrade previously uncertain, secondary-sourced figures to primary-source-confirmed status, materially improving the reliability of Estonia's fiscal baseline for crypto-asset taxation purposes, even though the specific question of DAC8/CARF crypto reporting-obligation transposition remains unresearched and open.

Estonia's stablecoin regime continues to operate as the most settled of its eight modules, with MiCA's ART/EMT issuer-authorisation, Article 36 reserve, redemption-at-market-value, and EBA significance-designation provisions all in force since 30 June 2024 and no Estonia-specific gaps identified. Token classification remains similarly stable at the EU level, though no Estonia-specific interpretive guidance refining MiCA's taxonomy — for instance on the utility-token/securities boundary — has been located. Consumer protection has entered a more cautionary phase following the transitional-period lapse: ESMA and the Joint European Supervisory Authorities have both issued statements emphasising that MiCA protections attach to specific authorised legal entities rather than corporate groups, that Estonian CASPs cannot delegate custody to unauthorised sub-contractors, and that consumers should independently verify provider authorisation. On-chain activity — staking, DeFi, mining and validator operation — remains without any bespoke MiCA or Estonian licensing category, governed only by EU-level analytical work from the EBA and ESMA rather than binding authorisation requirements; this is treated as a thin-evidence module by design rather than an oversight.

#### Cross-Monitor Connections

Two cross-monitor connections surfaced this cycle. First, Estonia's MLTFPA §96² travel-rule sanctions regime and the underlying FATF/MONEYVAL follow-up assessment sit within the financial-integrity monitor's subscribed AML/CFT surface, and carry a currently unresolved internal contradiction: the module's own traffic-light rationale describes a "proportionality gap" in FATF/MONEYVAL's assessment of that sanctions regime, while the underlying claim describes the same assessment as finding the regime proportionate, both citing the identical source document. This has been escalated for human verification rather than resolved by inference, and is the primary reason this jurisdiction's composed record currently carries a substantive publication hold. Analysis of Estonia's FATF/MONEYVAL standing more broadly is best routed through the financial-integrity monitor's dedicated AML/CFT tracking rather than treated as bespoke crypto-native work. Second, Estonia's corrected VAT and income-tax figures — now primary-source-confirmed — carry general fiscal relevance beyond crypto-specific taxation and have been flagged for potential cross-reference in the world-payments monitor's own tax tracking, given that both rates apply economy-wide rather than only to crypto-asset transactions.

#### Outlook

The near-term trajectory for Estonia is one of continued tightening layered onto a now-mature core MiCA framework. The clearest open items are: confirmation of the actual post-transitional-lapse market state for legacy CASPs; resolution of the FATF/MONEYVAL proportionality contradiction, which is currently holding publication of this record; targeted research into Estonia's DAC8/CARF reporting-obligation transposition; and any Finantsinspektsioon supplementary guidance on staking, DeFi or mining that would sharpen the currently indirect on-chain activity coverage. None of these items suggest instability in Estonia's underlying regulatory architecture — MiCA is fully in force and Finantsinspektsioon's supervisory role is unambiguous — but each represents a confirmable gap between the legal framework as written and its verified real-world application, and each is a natural focus for the next research cycle.

Read full brief · 1392 words

Key regulatory facts for Estonia Regulatory Dimension Estonia Standing Position

Jurisdiction Estonia (EE)

Regulatory Scope Crypto & Digital Asset Regulation (9 modules, 41 sourced findings)

Crypto Licensing Crypto-asset services in Estonia are governed by MiCA and the Crypto Markets Act, with Finantsinspektsioon as sole CASP authority; legacy FIU VASP licences cancelled 1 July 2026 with no automatic conversion.

Token Classification MiCA classifies ARTs and EMTs as distinct regulated categories requiring issuer authorisation, directly applicable in Estonia (CLM-EE-f6a7b8c9).

On-Chain Activity Regime EBA and ESMA published a joint 2025 factsheet on crypto lending, borrowing and staking covering market size, consumer-protection and liquidity/ML-TF risks under MiCAR, without creating a bespoke licensing category...

Stablecoin Regime ART/EMT issuers are required to hold MiCA authorisation to carry out issuance activities in the EU, including Estonia (CLM-EE-f2a3b4c5).

Primary Instruments Cited Finantsinspektsioon, Estonia, Estonia, ESMA, Estonian Financial Intelligence Unit (EFIU)

Last Confirmed / Updated 2026-10-25 (36 sources in cumulative register)

9 of 9 categories

Signal
Moved
Judgment
Gap

Density
Comfortable
Compact

Expand all sources
Reset all

Selections OR within a group, AND across groups. Press / to search.

### Estonia: C1 Crypto LicensingAmberEnacted in forceModule confidence: Probable▾

Crypto-asset services in Estonia are governed by MiCA and the Crypto Markets Act, with Finantsinspektsioon as sole CASP authority; legacy FIU VASP licences cancelled 1 July 2026 with no automatic conversion.

Open gap — crypto-int-1 Whether any of the 3 Estonia-homed CASPs on the 19 October 2026 ESMA register snapshot were newly granted within this window specifically, or earlier. no under-indexing note recorded

Horizon · 2026-07-01 (± a quarter) MiCA CASP transition cutover complete In force · Tier 3 source

#### Crypto Licensing

Estonia's licensing architecture for crypto-asset service providers has completed its transition from a bespoke national regime to full alignment with the EU's Markets in Crypto-Assets Regulation. Finantsinspektsioon, the Estonian Financial Supervision Authority, is designated as the sole competent authority across all MiCA Titles, a status confirmed in ESMA's notified list of competent authorities as of 30 December 2024. This consolidates authorisation and supervisory responsibility for crypto-asset service providers (CASPs) operating in or from Estonia under a single regulator, replacing the more fragmented approach that characterised the pre-MiCA period.

The legal foundation for this consolidation is Estonia's Market in Crypto-Assets Act (Krüptovaraturu seadus), which transposed MiCA (Regulation (EU) 2023/1114) into national law, entering into force on 1 July 2024. Corresponding amendments to Estonia's Money Laundering and Terrorist Financing Prevention Act (MLTFPA) took effect on 30 December 2024, aligning the AML/CFT-adjacent aspects of the crypto licensing regime with the broader MiCA authorisation timeline. This dual-track implementation — core licensing provisions in mid-2024, AML-adjacent provisions at year-end — reflects the phased EU-wide rollout of MiCA's Title II CASP authorisation requirements and Title V/VI supervisory apparatus.

A central and now-resolved feature of Estonia's approach was its election of the Article 143(3) transitional grandfathering period, confirmed via ESMA's official Member State election list. Estonia opted for an 18-month window, running to 1 July 2026 (or to an earlier date of authorisation or refusal for any given firm), during which pre-existing crypto-asset service providers operating under Estonia's prior national regime could continue trading while their MiCA authorisation applications were assessed. This grandfathering period has since lapsed. ESMA's public statement of 23 June 2026 confirms the end of MiCA transitional periods across the Union and calls on any crypto-asset service providers that remain unauthorised — including legacy providers previously servicing Estonian clients under national regimes — to wind down their operations in an orderly manner. This shifts Estonia's crypto_licensing posture decisively from a transitional-tolerance phase to a full-enforcement phase.

The immediate practical consequence is a period of residual uncertainty. It is not yet established — at least not within the sources reviewed this cycle — precisely how many legacy, pre-MiCA-authorised VASPs remain active in Estonia's market and are in the process of winding down, versus how many have already exited or secured full MiCA authorisation. This data gap is the primary reason the module's traffic-light assessment remains amber rather than green: the core authorisation regime itself is unambiguously in force, and the competent authority is clearly designated, but the market clean-up following the transitional lapse has not yet been independently confirmed via a follow-up register check with Finantsinspektsioon or ESMA.

This most recent tightening sits atop an earlier domestic tightening episode from the pre-MiCA era. Historical reporting indicates that the Estonian Financial Intelligence Unit tightened VASP licensing requirements under the MLTFPA from March 2022, raising capital and compliance thresholds for firms seeking or holding a crypto licence. The effect was a sharp contraction in the number of registered crypto firms, from 381 in December 2021 to 177 by September 2022. This episode, while now superseded by the MiCA framework, demonstrates that Estonia's regulatory posture toward crypto licensing has been one of sustained tightening for several years, predating and then culminating in the current EU-harmonised regime.

#### Outlook

The near-term signal to watch is confirmation of the actual post-1-July-2026 market state: whether Finantsinspektsioon's CASP register shows a clean transition with no residual unauthorised operators, or whether enforcement action against holdout firms becomes necessary. Given ESMA's explicit wind-down call, further public statements or enforcement notices naming specific firms would be a natural next development. Absent such confirmation, the amber rating is likely to persist through the next research cycle rather than resolve to green.

Read full sub-brief · 616 words Periodic update · new data 2026-09-28

#### Crypto Licensing

Estonia's crypto-licensing framework reached a hard transition point on 1 July 2026 when legacy Financial Intelligence Unit virtual-currency service-provider licences were cancelled, with no automatic conversion into a MiCA CASP authorisation. This is a settled, in-force change to a regime that has otherwise been in place for some time: full MiCA CASP authorisation requirements have applied in Estonia since 30 December 2024, and Finantsinspektsioon (or a passporting competent authority elsewhere in the EEA) is the authorising body. What makes the 1 July 2026 cutover consequential is scale: against a legacy base of approximately 369 valid virtual-currency licence records reported for 2022, only one firm, Lightspark Payments Europe AS, held a standalone CASP authorisation at the point the legacy licences lapsed. That gap between the size of the pre-MiCA authorised population and the post-cutover CASP population is the clearest signal of market-access friction in the Estonian crypto sector this cycle.

The practical effect for market participants is that a firm which held a legacy virtual-currency licence and did not separately secure a MiCA CASP authorisation before 1 July 2026 lost its lawful basis to provide crypto-asset services in Estonia on that date, with no grace period or automatic bridge into the new regime. This is a strict transition, not a phased one. For new entrants, the position is comparatively simple: any firm now seeking to provide crypto-asset services in Estonia must obtain (or passport in) a MiCA CASP authorisation from the outset, since there is no longer a legacy pathway available at all.

One open question not resolved this cycle is whether certain Estonian financial firms with adjacent regulatory permissions, such as AS LHV Pank and Lightyear Europe AS, hold full CASP-equivalent authorisation or instead operate under a narrower passporting or exemption basis. Until that is clarified, the true size of the currently-authorised crypto-service-provider population in Estonia remains somewhat uncertain, even though the headline finding, that only one standalone CASP authorisation existed at the July 2026 cutover, is itself confirmed.

#### Outlook

The question to watch is whether the authorised-firm base widens in the months following the cutover as more applicants complete the MiCA CASP authorisation process, or whether the market remains thin, concentrating crypto-asset service provision in Estonia among a small number of firms. Resolution of the LHV Pank and Lightyear Europe authorisation-basis question would materially change the read on how thin the market actually is.

1 earlier distinct update(s) Periodic update · new data 2026-09-11

#### Crypto Licensing

Estonia's transition to the Markets in Crypto-Assets framework completed on 1 July 2026. From that date, crypto-asset services in Estonia may only be provided under a MiCA CASP authorisation issued by Finantsinspektsioon or another EEA supervisory authority, and the Financial Intelligence Unit's legacy virtual-currency service-provider licence records were cancelled the same date, with no automatic conversion path for existing legacy licence-holders. Lightspark Payments Europe AS became the first company in Estonia to receive a standalone MiCA CASP authorisation, paired with an electronic-money-institution licence, on 1 July 2026. AS LHV Pank and Lightyear Europe AS continue to provide crypto-related services in Estonia, but do so under separate, non-CASP regulatory permissions rather than a standalone CASP authorisation.

The combination of a fully settled legal framework and an extremely narrow population of standalone CASP-authorised firms at the moment of transition is the defining feature of this cycle: the regulatory architecture is no longer in flux, but near-term market access for new entrants seeking standalone CASP status remains largely untested, with Lightspark as the only precedent so far.

#### Outlook

The near-term question is whether additional firms secure standalone MiCA CASP authorisation in Estonia, broadening the currently thin licensed market, or whether the market continues to be dominated by firms such as AS LHV Pank and Lightyear Europe AS operating crypto services under non-CASP permissions. The exact end-date of Estonia's legacy VASP transitional window carries some residual ambiguity, with sources reporting both a 30 December 2025 and a 1 July 2026 date; resolving this discrepancy against a primary Finantsinspektsioon or FIU source is a natural next-cycle research priority.

Sources and findings (9)
- T1 · ESMA[Finantsinspektsioon](https://www.esma.europa.eu/sites/default/files/2024-12/List_of_Competent_Authorities_notified_to_ESMA_under_MiCA.pdf) — all MiCA Titles (authorisation and supervision of crypto-asset service providers) in Estonia
- T1 · FATF/MONEYVAL[Estonia](https://www.fatf-gafi.org/content/dam/fatf-gafi/fsrb-fur/Estonia-FUR-2025.pdf.coredownload.inline.pdf) — Market in Crypto-Assets Act (MCAA) implementing MiCA (EU 2023/1114), in force 1 July 2024, with MLTFPA amendments effective 30 December 2024
- T1 · ESMA[Estonia](https://www.esma.europa.eu/sites/default/files/2024-12/List_of_MiCA_grandfathering_periods_art._143_3.pdf) — the 18-month Article 143(3) MiCA grandfathering period for pre-existing CASPs, running to 1 July 2026 or earlier authorisation/refusal
- T1[ESMA](https://www.esma.europa.eu/sites/default/files/2026-06/ESMA75-113276571-1710_Public_Statement_MiCA_transitional_period_ends.pdf) — unauthorised legacy crypto-asset service providers (including those servicing Estonian clients under national regimes) to wind down operations in an orderly manner following the 1 July 2026 end of the MiCA transitional period
- T4 · CoinDesk[Estonian Financial Intelligence Unit (EFIU)](https://www.coindesk.com/policy/2022/09/22/estonia-grants-first-crypto-license-to-lastbits-striga) — pre-MiCA VASP licensing requirements under MLTFPA from March 2022 (raised capital/compliance requirements), reducing registered crypto firms from 381 (Dec 2021) to 177 (Sept 2022)
- T3[Estonia — MiCA Art 143(3) transition](https://manimama.eu/mica/casp-license-in-estonia/) — Legacy FIU VASP licences ceased to confer authority on 1 July 2026, with no automatic conversion to CASP status.
- T3[Finantsinspektsioon CASP register](https://hacken.io/discover/estonia-crypto-license/) — Only one Estonian-home-state entity (Lightspark Payments Europe AS) holds a full standalone CASP authorisation.
- T3 · Hacken[Finantsinspektsioon / Estonian Crypto-Asset Market Act](https://hacken.io/discover/estonia-crypto-license/) — CASP authorisation from Finantsinspektsioon (or an eligible EEA passport/Art 60 notification) is required to provide crypto-asset services in Estonia; legacy FIU VASP registrations ceased to have effect on 1 July 2026 with no automatic conversion.
- T3 · Outrun[ESMA MiCA CASP register](https://www.outrun.at/micar-dashboard) — 3 Estonia-homed CASPs as of the 19 October 2026 snapshot; this reflects an established position, not a new authorisation within the current cycle window.

### Estonia: C2 Token ClassificationGreenEnacted in forceModule confidence: Probable▾

MiCA classifies ARTs and EMTs as distinct regulated categories requiring issuer authorisation, directly applicable in Estonia (CLM-EE-f6a7b8c9). MiCA exempts unique non-fungible crypto-assets from scope except large-series NFT collections (CLM-EE-a7b8c9d0). No Estonia-specific FSA interpretive guidance further refining MiCA's token taxonomy has been located in this research pass (CLM-EE-b8c9d0e1).

C2 · Token Classification — Full Module Record 0 sub-modules · 180 words · 6 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login) [View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Estonia: C3 On-Chain Activity RegimeAmberEnacted in forceModule confidence: Probable▾

EBA and ESMA published a joint 2025 factsheet on crypto lending, borrowing and staking covering market size, consumer-protection and liquidity/ML-TF risks under MiCAR, without creating a bespoke licensing category (CLM-EE-c9d0e1f2). EBA and ESMA also published a joint 2025 report on DeFi covering EU market size, financial-sector exposure, ICT/ML-TF/consumer-protection risks and MEV impacts, again without a bespoke DeFi licence (CLM-EE-d0e1f2a3). Estonia has not established a dedicated licensing or registration regime for crypto-asset mining or standalone node/validator operation, which sits outside the MiCA CASP-service perimeter absent bundling with an authorised service (CLM-EE-e1f2a3b4).

C3 · On-Chain Activity — Full Module Record 0 sub-modules · 180 words · 3 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Estonia: C4 Stablecoin RegimeGreenEnacted in forceModule confidence: Probable▾

ART/EMT issuers are required to hold MiCA authorisation to carry out issuance activities in the EU, including Estonia (CLM-EE-f2a3b4c5). MiCA Article 36 imposes a reserve-of-assets obligation on ART issuers with prescribed composition/management standards (CLM-EE-a3b4c5d6). ART holders can redeem an ART at the market value of the asset(s) it references (CLM-EE-b4c5d6e7). The EBA classifies as 'significant' ARTs/EMTs above holder/value/transaction thresholds, triggering direct EBA supervision rather than purely national FSA oversight (CLM-EE-c5d6e7f8).

Periodic update · new data 2026-09-28

#### Stablecoin Regime

Estonia's stablecoin regime sits on the most settled footing of the modules covered this cycle. Asset-referenced token (ART) and e-money token (EMT) issuer authorisation requirements under MiCA have applied in Estonia since 30 June 2024, with Finantsinspektsioon acting as the competent authority for issuer authorisation. This is a directly-applicable EU regulation rather than a nationally transposed instrument, so Estonia has no independent discretion to diverge from the MiCA Title III/IV framework for ART and EMT issuance, and no EE-specific divergence from that framework was identified this cycle.

The practical consequence for issuers is that stablecoin issuance in Estonia is legally straightforward in the sense that the applicable rulebook is fixed and stable: an issuer authorised under MiCA in any EEA state can passport into Estonia, and an Estonia-based issuer applies to Finantsinspektsioon under the same Title III/IV standard applied across the bloc. This stability stands in contrast to the crypto-licensing module's post-cutover thinness and the tax and cross-border-transfer modules' recent tightening, making the stablecoin regime the calmest point in an otherwise actively-moving Estonian crypto framework this cycle.

No enforcement action, supervisory guidance divergence, or national gold-plating of the ART/EMT rules was surfaced this cycle. The absence of EE-specific findings here should be read as genuine regime stability rather than an evidentiary gap, since the underlying MiCA provisions are directly applicable and require no further national implementing measure to take effect.

#### Outlook

Barring a supervisory action or national guidance divergence, the stablecoin regime is likely to remain the most predictable element of Estonia's crypto framework going forward. Any future signal would most likely arise from a Finantsinspektsioon enforcement or authorisation decision involving a specific ART or EMT issuer, rather than from a change to the underlying MiCA text itself.

C4 · Stablecoins & EMTs — Full Module Record 0 sub-modules · 180 words · 4 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Estonia: C5 Consumer ProtectionAmberEnacted in forceModule confidence: Probable▾

MiCA protections are limited to the specific authorised legal entity in the EU, not group affiliates; consumers advised to verify provider authorisation via the ESMA Interim MiCA Register (CLM-EE-d6e7f8a9). Estonian-authorised CASPs are prohibited from outsourcing or delegating custody (and certain other services) to entities not themselves authorised as CASPs (CLM-EE-e7f8a9b0). The Joint European Supervisory Authorities warned EU consumers, including Estonians, that crypto-assets can be risky and legal protection may be limited depending on provider/asset, recommending consumers verify authorisation (CLM-EE-f8a9b0c1).

Open gap — crypto-int-2 Whether Estonia has published any national custody, prudential-capital or market-abuse guidance supplementing MiCA since the last cycle. no under-indexing note recorded

#### Consumer Protection

Estonia's consumer-protection posture for crypto-assets sits within the MiCA framework (Titles II, V and VI) and has entered a materially more cautionary phase following the 1 July 2026 lapse of the Article 143(3) transitional period. Three findings define the current picture.

First, MiCA's protections are scoped narrowly to the specific authorised legal entity providing a service — not to that entity's group affiliates. ESMA's April 2026 statement on the end of transitional periods flags this entity-specific scope explicitly, and recommends that consumers verify a given provider's authorisation status directly via the ESMA Interim MiCA Register rather than assuming that because one entity within a corporate group is authorised, an affiliated entity offering a similar-looking service is equally covered.

Second, Estonian-authorised crypto-asset service providers are prohibited from outsourcing or delegating custody — and certain other services — to entities that are not themselves authorised as CASPs. This restriction, confirmed in ESMA's June 2026 public statement on the end of MiCA transitional periods, closes off a route by which an authorised Estonian CASP might otherwise shift custodial or other in-scope functions to an unauthorised sub-contractor.

Third, the Joint European Supervisory Authorities (EBA, EIOPA and ESMA) issued a consumer-facing warning — applicable across the EU, including to Estonian consumers — that crypto-assets can be risky and that legal protection may be limited depending on the specific provider and asset involved. This warning is non-binding guidance rather than a legal instrument, but its timing — following the transitional-period lapse — signals heightened supervisory concern about consumers who may not have registered that the transitional-tolerance period for legacy providers has ended.

Taken together, these three findings point toward a consumer-protection environment that is legally robust at the level of binding EU rules, but where supervisory messaging suggests real residual exposure for consumers dealing with providers whose authorisation status is unclear in the immediate aftermath of the transitional-period lapse — hence the amber rather than green rating.

#### Outlook

The consumer-protection posture is closely coupled to the crypto_licensing module's own unresolved question: how cleanly the Estonian and EU market has transitioned away from unauthorised legacy providers as of 1 July 2026. If that transition proves incomplete, consumer-protection risk from unauthorised or ambiguously-authorised providers is likely to remain elevated in the near term, and further ESA consumer warnings or enforcement actions naming specific non-compliant platforms would be the natural next signal to watch.

Read full sub-brief · 397 words No periodic updates recorded in this cycle

Sources and findings (3)
- T1 · ESMA[MiCA](https://www.esma.europa.eu/sites/default/files/2026-04/ESMA75-113276571-1679_Statement_on_the_end_of_transitional_periods_under_MiCA.pdf) — protections to the specific authorised legal entity in the EU (not group affiliates); consumers advised to verify provider authorisation via the ESMA Interim MiCA Register
- T1 · ESMA[CASPs (Estonian-authorised)](https://www.esma.europa.eu/sites/default/files/2026-06/ESMA75-113276571-1710_Public_Statement_MiCA_transitional_period_ends.pdf) — outsourcing or delegating custody (and certain other services) to entities not themselves authorised as CASPs
- T1 · Joint European Supervisory Authorities[Joint European Supervisory Authorities (EBA, EIOPA, ESMA)](https://www.esma.europa.eu/sites/default/files/2025-10/Joint_ESAs_Factsheet_on_crypto-assets.pdf) — EU consumers, including Estonians, that crypto-assets can be risky and legal protection may be limited depending on provider/asset, recommending consumers verify authorisation

### Estonia: C6 Tax TreatmentAmberEnacted in forceModule confidence: Probable▾

Estonia sets a flat personal income tax rate of 22%, effective 1 January 2025, confirmed via EMTA's official rates page; a legislated 2026 increase to 24% was cancelled by Parliament in July 2025, so 22% remains stable through 2026 (CLM-EE-a9b0c1d2, upgraded via Challenger fold FLG-f-003; corroborated by newly inserted CLM-EE-c48d091a citing the same EMTA source — flagged below as a possible near-duplicate). Estonia historically argued VAT should apply to the full amount of bitcoin trades, previously levying 20% VAT on bitcoin-exchange-as-a-service and 10% tax on bitcoin sale profits during the 2014-15 Hedqvist ECJ referral era; not reconfirmed as current (CLM-EE-b0c1d2e3). The Estonian Tax and Customs Board has not yet issued current crypto-specific reporting-obligation guidance (e.g., DAC8/CARF specifics) as located in this research pass (CLM-EE-c1d2e3f4). Challenger-fold review corrected the stale VAT-rate narrative: Estonia's standard VAT rose 20%->22% effective 1 January 2024, then to 24% effective 1 July 2025 under the Security Tax Act package; 24% is permanent and remains current as of August 2026 (CLM-EE-7f3ab2e9).

Periodic update · new data 2026-09-28

#### Tax Treatment

Estonia's crypto tax treatment combines a long-standing domestic rule with a new cross-border reporting obligation that began this cycle. On the domestic side, crypto income continues to be taxed as gains from the transfer of property under Estonia's standard 22 percent personal income tax rate; this is a standing feature of the Estonian Income Tax Act rather than a change introduced this cycle, and no EE-specific reclassification of that treatment was found.

What is new is the reporting layer sitting on top of that standing tax treatment: DAC8/CARF crypto-asset reporting obligations for Estonian crypto-asset service providers began on 1 January 2026, per Council Directive (EU) 2023/2226 (DAC8) as implemented through EMTA. This obligation requires crypto-asset service providers to report user transaction data for cross-border tax information exchange, materially raising the administrative and data-governance burden on Estonian CASPs even though the underlying rate and characterisation of crypto income for individual taxpayers has not itself changed.

The net effect this cycle is a tightening of compliance burden without a tightening of the substantive tax rate: CASPs now carry a new reporting duty layered onto an already-settled personal income tax treatment. This distinction matters for market participants assessing entry costs, since the reporting obligation falls on the service provider as an operational and systems cost, while the 22 percent rate remains a matter for the end investor.

#### Outlook

The DAC8/CARF reporting obligation is newly in force and its practical enforcement pattern, including EMTA's approach to non-compliant CASPs, has not yet been evidenced. Watch for EMTA guidance or enforcement activity clarifying how the reporting obligation is supervised in practice, and for any confirmation of whether Estonia's 22 percent property-gains characterisation of crypto income remains stable as reporting data becomes available to the tax authority.

Periodic update · new data 2026-09-11

#### Tax Treatment

Two tax-treatment facts define this cycle for Estonia. First, crypto-asset reporting obligations under the OECD's Crypto-Asset Reporting Framework, implemented in the EU via DAC8, began applying to crypto-asset service providers from 1 January 2026, adding a cross-border tax-transparency reporting layer that did not previously apply. Second, on the standing domestic tax-treatment baseline, Estonia continues to tax crypto-asset gains as gains from the transfer of property, at the standard personal income tax rate of 22 percent, with no crypto-specific rate or exemption identified. The DAC8/CARF obligation is the more consequential of the two for CASPs operating in Estonia, since it introduces a new compliance layer on top of an otherwise unchanged income-tax treatment of crypto gains.

#### Outlook

Confirmation of how Estonian CASPs are onboarding to the DAC8/CARF reporting regime, ideally against a primary Estonian Tax and Customs Board source rather than secondary reporting, is the clearest next-cycle research priority for this module. Absent such confirmation, the practical operation of the new reporting obligation for Estonia-licensed CASPs remains an assessed rather than confirmed fact.

C6 · Tax Treatment — Full Module Record 0 sub-modules · 180 words · 9 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Estonia: C7 Cross-Border TransferAmberEnacted in forceModule confidence: Probable▾

Estonia's MLTFPA §96² introduced additional sanctions for breaches of crypto-asset transfer information obligations implementing EU Regulation 2023/1113 (travel rule); assessed by evaluators as proportionate per this claim's value (CLM-EE-d2e3f4a5) — but see traffic_light_rationale below for the unresolved contradiction this creates, held pending human verification per Challenger flag FLG-f-002. EBA issued final Guidelines on the travel rule setting out required information accompanying transfers of funds and certain crypto-assets across the EU, including Estonia (CLM-EE-e3f4a5b6). Estonia has not imposed an Estonia-specific outbound restriction on crypto-asset cross-border transfers, per this research pass (CLM-EE-f4a5b6c7).

Periodic update · new data 2026-09-28

#### Cross-Border Transfer

Estonia tightened its cross-border crypto-transfer controls this cycle through a 2026 amendment to the Money Laundering and Terrorist Financing Prevention Act (MLTFPA), which strengthened customer due diligence, beneficial-ownership verification, and Travel Rule enforcement for crypto-asset transfers. This sits alongside the directly-applicable EU Travel Rule instrument, Regulation (EU) 2023/1113, which already governs originator and beneficiary information requirements for crypto-asset transfers across the EEA; the MLTFPA amendment appears to strengthen domestic enforcement of that standing EU framework rather than introduce a wholly new transfer regime.

The finding here carries a probable rather than confirmed confidence rating: the amendment was described in secondary commentary without a full primary-instrument citation being independently retrieved this cycle. The direction of travel, toward stronger CDD and beneficial-ownership verification for crypto transfers, is consistent with Estonia's broader 2026 pattern of tightening across the crypto modules covered this cycle, but the precise statutory text and scope of the strengthened provisions should be treated as not yet fully verified.

The Estonian Financial Intelligence Unit is the named supervisory authority for this module, distinct from Finantsinspektsioon's role as CASP and stablecoin-issuer authority. This division of supervisory labour, between the FIU on AML/Travel-Rule enforcement and Finantsinspektsioon on prudential CASP authorisation, is a structural feature of the Estonian regime worth noting for any firm mapping its regulatory touchpoints.

#### Outlook

Confirmation of the MLTFPA amendment against a primary legislative citation would resolve the current probable-confidence rating on this module. Watch also for the Estonian FIU's enforcement practice under the strengthened Travel Rule provisions, which would be the clearest signal of how materially the amendment changes cross-border transfer compliance burden in practice.

C7 · Cross-Border & Travel Rule — Full Module Record 0 sub-modules · 180 words · 5 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Estonia: C8 AML/CFT Regime ▾

This module's surface is subscribed from the financial-integrity monitor pending consolidation into the crypto 8-module spine and was not independently researched this cycle; no claims are composed under this module this cycle.

Absence reason not determinable No sub-brief exists and the JID records no gap or review marker explaining why. The renderer will not invent a reason.

No periodic updates recorded in this cycle

### Estonia: C9 Commercial Activity ▾

## Commercial Activity

Two Estonia-relevant market-entry events fall within this cycle's recency window, both concerning authorisation to provide crypto-asset services under the now-settled MiCA regime. Lightyear Europe AS received Article 60 authorisation from Finantsinspektsioon, effective 17 November 2025, permitting it to provide crypto-asset services via the notification-based route available to certain already-authorised entities. Lightspark Payments Europe AS received standalone Crypto-Asset Service Provider authorisation together with a simultaneous electronic-money-institution authorisation, effective 15 June 2026.

These two events sit against the backdrop of Estonia's completed transition to the MiCA-only crypto-asset authorisation gateway, under which, from 1 July 2026, crypto-asset services in Estonia may only be provided under Finantsinspektsioon CASP authorisation, an Article 60 notification, or a passported EEA authorisation. Neither Lightyear's nor Lightspark's authorisation changes that gateway; both are instances of entities populating it. As of the 30 September 2026 ESMA register snapshot, three entities hold crypto-asset authorisation of some form in Estonia, a figure against which the significance of these two events should be read: Lightspark's standalone CASP-plus-EMI authorisation appears, on the available register evidence, to be Estonia's first standalone CASP licence under MiCA, while Lightyear's Article 60 notification represents the lighter-touch route for firms leveraging an existing qualifying authorisation elsewhere in the EU.

The practical distinction between the two authorisation types is material to how each firm can operate. Article 60 notification, the route Lightyear used, is available to entities that already hold another qualifying EU financial authorisation and wish to extend into crypto-asset services without a full standalone CASP application; it is a lighter procedural burden but is parasitic on an existing authorisation elsewhere. Standalone CASP authorisation, the route Lightspark used, is a free-standing Estonian authorisation under MiCA that does not depend on a prior EU authorisation, and Lightspark's pairing of that standalone CASP status with a simultaneous EMI authorisation allows it to combine crypto-asset service provision with electronic-money issuance and payment services under one entity -- a broader commercial combination than Lightyear's notification-based entry permits on its own.

Neither authorisation event carries a disclosed transaction value, consistent with the nature of a regulatory authorisation rather than a commercial transaction; no amount is applicable to either event and none has been recorded. No enforcement action, licence condition, or supervisory concern was identified in connection with either authorisation in the sources reviewed this cycle. — Outlook: The pattern of two distinct authorisation types being used within the same several-month period -- one lighter-touch notification, one full standalone-plus-EMI combination -- suggests Estonia's post-MiCA crypto-asset authorisation landscape is still in an early population phase, with firms choosing between available routes according to their existing EU regulatory footprint. Whether further entities follow Lightspark's combined CASP/EMI model, or whether Article 60 notification remains the more commonly used route among firms with existing EU authorisations elsewhere, cannot be determined from this cycle's evidence and will depend on future register growth.

Periodic update · new data 2026-10-25

#### Commercial Activity

Two Estonia-relevant market-entry events fall within the recency window, both concerning authorisation to provide crypto-asset services under the now-settled MiCA regime. Lightyear Europe AS received Article 60 authorisation from Finantsinspektsioon, effective 17 November 2025, permitting it to provide crypto-asset services via the notification-based route available to certain already-authorised entities. Lightspark Payments Europe AS received standalone Crypto-Asset Service Provider authorisation together with a simultaneous electronic-money-institution authorisation, effective 15 June 2026.

These two events sit against the backdrop of Estonia's completed transition to the MiCA-only crypto-asset authorisation gateway, under which, from 1 July 2026, crypto-asset services in Estonia may only be provided under Finantsinspektsioon CASP authorisation, an Article 60 notification, or a passported EEA authorisation. Neither Lightyear's nor Lightspark's authorisation changes that gateway; both are instances of entities populating it. As of the 30 September 2026 ESMA register snapshot, three entities hold crypto-asset authorisation of some form in Estonia, a figure against which the significance of these two events should be read: Lightspark's standalone CASP-plus-EMI authorisation appears, on the available register evidence, to be Estonia's first standalone CASP licence under MiCA, while Lightyear's Article 60 notification represents the lighter-touch route for firms leveraging an existing qualifying authorisation elsewhere in the EU.

The practical distinction between the two authorisation types is material to how each firm can operate. Article 60 notification, the route Lightyear used, is available to entities that already hold another qualifying EU financial authorisation and wish to extend into crypto-asset services without a full standalone CASP application; it is a lighter procedural burden but is parasitic on an existing authorisation elsewhere. Standalone CASP authorisation, the route Lightspark used, is a free-standing Estonian authorisation under MiCA that does not depend on a prior EU authorisation, and Lightspark's pairing of that standalone CASP status with a simultaneous EMI authorisation allows it to combine crypto-asset service provision with electronic-money issuance and payment services under one entity -- a broader commercial combination than Lightyear's notification-based entry permits on its own.

Neither authorisation event carries a disclosed transaction value, consistent with the nature of a regulatory authorisation rather than a commercial transaction; no amount is applicable to either event and none has been recorded. No enforcement action, licence condition, or supervisory concern was identified in connection with either authorisation in the sources reviewed.

#### Outlook

The pattern of two distinct authorisation types being used within the same several-month period -- one lighter-touch notification, one full standalone-plus-EMI combination -- suggests Estonia's post-MiCA crypto-asset authorisation landscape is still in an early population phase, with firms choosing between available routes according to their existing EU regulatory footprint. Whether further entities follow Lightspark's combined CASP/EMI model, or whether Article 60 notification remains the more commonly used route among firms with existing EU authorisations elsewhere, cannot be determined from the evidence and will depend on future register growth.

Sources and findings (2)
- T3Lightyear Europe AS — Article 60 authorisation from Finantsinspektsioon to provide crypto-asset services, effective 17 November 2025
- T3Lightspark Payments Europe AS — Standalone CASP authorisation plus simultaneous EMI authorisation, effective 15 June 2026