Croatia Crypto & Digital Asset Regulation

Crypto Licensing

The defining event of this cycle is the closure of Croatia's MiCA transitional window on 1 July 2026. Under the regime implementing Regulation (EU) 2023/1114, pre-existing virtual-asset service providers that had registered before 30 December 2024 were permitted to continue operating without full crypto-asset-service-provider authorisation only until that transitional deadline. From 1 July 2026 onward, continued provision of crypto-asset services in Croatia requires HANFA authorisation as a CASP. This is confirmed directly from HANFA's own published notice, which states that of the seventeen VASPs listed in HANFA's register during the transitional period, five initiated the authorisation process in a timely manner and obtained a CASP licence before the transitional period ended.

The five-of-seventeen conversion rate is the single clearest quantitative marker of how the transition has played out in practice. It indicates meaningful attrition from the legacy population: the twelve VASPs that did not complete authorisation in time are, as of the transitional deadline, no longer entitled to rely on the grandfathering provision that had permitted their continued operation. What is not established by the evidence available is what happened to those twelve entities specifically, whether they ceased providing crypto-asset services in Croatia, continued operating without authorisation, or have applications still pending that simply did not complete before the deadline. HANFA's own consumer-facing guidance reinforces the structural point in general terms: a company wishing to provide crypto-asset services in Croatia must obtain HANFA's prior approval, and authorised companies are listed in HANFA's own registers, which is the mechanism by which the five successful conversions and all subsequent authorisations, including named entities, became publicly verifiable.

One specific gap worth flagging on its own terms is enforcement-penalty detail. The exact provisions of the Croatian MiCA implementing act, Official Gazette 85/2024, concerning fine maxima and any criminal offences tied to unauthorised provision of crypto-asset services after the transitional deadline, were not retrieved. This matters because it is precisely the twelve-of-seventeen non-conversion population where the practical bite of the regime, if any, would be felt, and without the penalty text itself the analytical picture of enforcement exposure for that population remains incomplete.

Taken together, the picture is of a licensing regime that is operationally live and actively processing authorisations, evidenced by the five transitional conversions and by subsequent named authorisation events, rather than one where the transitional deadline passed into a vacuum. The traffic-light assessment of green reflects a functioning national licensing regime with an active authorisation pipeline, not an assessment that every legacy participant has been successfully absorbed into it.

Outlook

The principal open question is the fate of the twelve transitional VASPs that did not convert by 1 July 2026, and whether Croatia's enforcement mechanism against unauthorised post-deadline operation is civil, administrative, or criminal in character. Retrieval of the implementing act's specific penalty provisions would materially sharpen this picture. Separately, as the authorisation pipeline continues to process new CASP applications, the ratio of newly-authorised entities to the base legacy population will be a useful ongoing marker of how completely the transition has actually absorbed Croatia's pre-MiCA crypto-asset-service sector.

Consumer Protection

Hanfa has issued a direct consumer warning tied to the same MiCA transitional closure that reshaped Croatia's licensing perimeter on 1 July 2026. The regulator has stated plainly that it has limited powers to supervise VASPs that have not obtained MiCA authorisation, and that it cannot fully protect complainants who deal with such firms until the firm in question secures authorisation. This is a confirmed, direct statement from the regulator's own consumer-facing notice, not a secondary or aggregated report, and it should be read as the clearest available signal of where consumer risk currently concentrates in the Croatian crypto market: not within the newly-authorised CASP population, such as Electrocoin, but among any residual population of firms that have not completed the transition to full authorisation.

The structural logic behind this warning follows directly from the licensing closure itself. Before 1 July 2026, a firm operating under the AML/CFT-Act-only route was at least subject to some AML/CFT supervision by Hanfa, even without full MiCA authorisation. After that date, a firm that has neither ceased operating nor obtained CASP authorisation sits in a materially weaker supervisory position, and Hanfa's warning appears calibrated precisely to that population. The warning does not identify specific firms, and no enforcement action against a named unauthorised VASP has been located in the evidence reaching this cycle.

This consumer-protection signal should be read alongside, not as a substitute for, the substantive consumer protections that come bundled with MiCA CASP authorisation itself, such as custody safeguarding and complaint-handling obligations; those substantive protections are conferred by authorisation, which is exactly what the warning is flagging as absent for unauthorised firms. No separate Croatia-specific consumer-protection rulebook beyond the MiCA framework and this warning was located this cycle.

Outlook

The consumer-protection posture here is likely to sharpen further if Hanfa follows its warning with a public list of authorised versus unauthorised firms, or with a formal enforcement action against a named unauthorised VASP; neither has been located this cycle. Watch for whether complainant cases involving unauthorised firms surface publicly, which would test the practical limits Hanfa has already flagged in its own notice.

Commercial Activity

Croatia's crypto-asset-service sector saw concrete, dated commercial authorisation activity across April through June 2026, concentrated around the MiCA transitional deadline. Electrocoin became one of the first entities to receive MiCA authorisation in Croatia, with HANFA's approval entitling the company to provide crypto-to-fiat exchange services, crypto-to-crypto exchange, custody of crypto assets, and asset management on behalf of clients. This is a full-scope authorisation spanning exchange, custody, and discretionary management activity rather than a narrow single-service licence, indicating that HANFA's authorisation process is processing comprehensive service-scope applications rather than limiting early approvals to narrower activities.

The most internationally significant named authorisation is WHITE TECH d.o.o., which received HANFA MiCA crypto-asset-service-provider authorisation on 23 April 2026. WHITE TECH is part of the W Group, operating within the WhiteBIT exchange ecosystem and majority-owned by Volodymyr Nosov. The authorisation permits WHITE TECH to provide regulated crypto exchange, custody, administration and transfer services under EU rules. The commercial significance here is that a well-known international exchange-ecosystem entity has chosen to establish regulated standing in Croatia specifically, rather than relying solely on passporting from another Member State, suggesting Croatia is being used as a direct point of EU regulatory establishment by at least one internationally-connected crypto-asset group.

These named events corroborate, at the level of individual commercial transactions, the structural finding reported elsewhere that Croatia's transitional-to-MiCA conversion produced real authorisation outcomes rather than nominal ones: Electrocoin and WHITE TECH both represent completed, dated licensing events with disclosed scopes of permitted activity, verifiable against HANFA's own public authorisation notices and registers. Neither event discloses authorisation fees, capital commitments, or other financial terms, which is expected and consistent with the nature of a regulatory authorisation rather than a commercial transaction with disclosed consideration.

The pattern of named authorisations during the April-June 2026 window, set against the 1 July 2026 transitional deadline, suggests that at least some portion of Croatia's successful transitional conversions and new entrants timed their applications to land authorisation shortly before or around the point at which legacy registration ceased to be a viable basis for continued operation. This is a plausible reading of the sequencing rather than a confirmed causal finding, since the evidence available does not establish applicant motivation directly.

Outlook

Further named authorisation events in the CASP population, particularly any involving other internationally-connected exchange groups following WHITE TECH's example of using Croatia as a point of EU establishment, would be a useful marker of whether Croatia is becoming a preferred jurisdiction of choice within the EU's passporting framework, as distinct from simply hosting a converted legacy population. Attribution of specific commercial terms, where disclosed in future authorisations, would also sharpen the picture of the scale of activity involved.