Malta is not only an iGaming hub. Its financial services regulatory framework — administered by the Malta Financial Services Authority (MFSA) — covers banking, insurance, investment services, payment institutions, e-money institutions, collective investment schemes, and crypto-asset service providers under MiCA.
For entrepreneurs building regulated financial businesses in Europe, Malta offers EU licensing with Schengen-wide passporting — one licence, 27 markets. Here is how the framework works and what it costs to access it.
The MFSA — What It Is
The MFSA is Malta’s single regulator for financial services — a model that consolidates in one authority the functions split between multiple bodies in larger EU member states (FCA, PRA, and others in the UK; BaFin, BAFIN-adjacent bodies in Germany; multiple agencies in France).
This consolidation has practical advantages: a single point of contact, a single set of application procedures, and a regulator that — despite being smaller than its Northern European equivalents — has developed genuine expertise in its sectors through concentrated focus.
The MFSA is an EU-level regulator within the Single Supervisory Mechanism for banking supervision, and coordinates with ESMA (European Securities and Markets Authority), EBA (European Banking Authority), and EIOPA (European Insurance and Occupational Pensions Authority) for cross-border matters.
Licence Types — The Main Categories
Investment Services: The Investment Services Act (Cap. 370) governs the provision of investment services — portfolio management, investment advice, execution of orders, dealing on own account, operation of a multilateral trading facility.
Licence categories:
- Category 1a: Reception and transmission of orders, investment advice (minimum capital: €50,000)
- Category 1b: Reception and transmission plus discretionary portfolio management (€50,000)
- Category 2: Dealing, managing, custody (€730,000)
- Category 3: All investment services (€1,000,000)
- Category 4: Collective Investment Scheme management (€125,000 minimum, varies by AuM)
Investment services licences carry EU passporting rights under MiFID II — a Maltese Category 2 licence, for example, passports across all 27 EU member states for the covered activities.
Payment Institutions and E-Money Institutions: Under the Payment Services Directive (PSD2) and the E-Money Directive:
- Payment Institution (PI): For businesses providing payment services — money remittance, payment initiation, account information. Initial capital: €20,000–€125,000 depending on activity.
- Electronic Money Institution (EMI): For businesses issuing electronic money and providing payment services. Initial capital: €350,000.
Both passport throughout the EU under PSD2/PSD3 (the revised directive phasing in from 2025 onwards). Lithuania has been the dominant EU PI/EMI jurisdiction, but Malta is actively developing this segment, particularly for companies that want to combine payment services with iGaming or crypto activity.
Insurance: Malta licenses both life and non-life insurers and reinsurers. The insurance sector includes a significant captive insurance market — companies that insure the risks of their own group rather than third-party risks. For multinational groups looking to establish a captive, Malta offers a recognised, cost-effective framework.
Collective Investment Schemes and Fund Management: Malta’s fund framework includes UCITS (retail funds passportable throughout the EU), Alternative Investment Funds (AIFs under AIFMD), and the Professional Investor Fund (PIF) — Malta’s own lighter-touch framework for funds targeting sophisticated investors.
PIFs are particularly relevant for founders establishing family offices or investment vehicles in Malta. The minimum initial investment is €100,000 per investor, with no minimum fund size — this makes the PIF accessible for structures that UCITS and AIFMD would price out. The setup cost and regulatory oversight are proportionate.
Crypto-Asset Service Providers (CASPs) under MiCA: From 2024–2025, any business providing crypto-asset services to EU clients must hold a CASP licence under MiCA. Malta’s MFSA has been accepting applications and processing them with the benefit of the VFA framework’s seven years of prior experience. EU passporting applies — one Maltese CASP licence reaches all 27 member states.
The Application Process — What It Actually Takes
For any MFSA licence, the process involves:
1. Pre-application meeting: The MFSA encourages (and in practice requires) a pre-application consultation. This is where you present your business model, ownership structure, and intended activities, and receive feedback on whether the proposed licence type is appropriate and what the MFSA’s concerns or requirements will be. 1. Fit and proper assessment: All controllers (shareholders above 10%), directors, and key functionaries undergo a fit and proper assessment. This includes criminal record checks, financial soundness assessment, and professional competency review. Any adverse history — regulatory sanctions, criminal convictions, significant financial failures — will be scrutinised. 1. Business plan: A genuinely detailed business plan — financial projections for three years, a description of the business model, the target market, the risk management framework, the compliance structure, and the governance arrangements. This is not a one-page executive summary. For a Category 2 investment services licence, the business plan runs to 50–100 pages. 1. Compliance and governance documentation: Anti-money laundering (AML) policies, conflicts of interest policy, complaints handling procedure, business continuity plan, ICT security policy, and more — depending on the licence type. The compliance documentation package for a financial services licence is extensive. 1. Minimum capital: Must be maintained at all times, not just demonstrated at application. A Category 2 investment services company must hold €730,000 in qualifying capital continuously. 1. Physical presence: A genuine office in Malta, key functionaries resident in Malta, and evidence of operational substance. The MFSA will not licence a letterbox.
Timeline: For a straightforward application from a well-prepared applicant: 6–18 months. Complex applications, or those with fit and proper complications, take longer. The MFSA is not fast by the standards of some smaller offshore jurisdictions — but it produces a licence that is respected in all 27 EU member states, which a BVI or Cayman licence does not.
Professional fees: Legal fees for a full MFSA application typically run €50,000–€150,000 depending on complexity. Add the minimum capital requirement, the office, and the staffing, and the total cost of establishing a licensed Maltese financial services operation is measured in hundreds of thousands of euros, not tens.
Is Malta the Right Jurisdiction for Your Regulated Business?
Malta competes with Ireland (for funds and asset management), Luxembourg (for funds and banking), Lithuania (for payment institutions), and the Netherlands (for various financial services) as the EU licensing jurisdictions of choice.
Malta’s advantages:
- English language throughout
- Lower professional fees than Luxembourg or Ireland
- Genuine expertise in iGaming-adjacent financial services (payment processing for gaming operators)
- MiCA track record through the VFA framework
- Integrated corporate and tax structure available alongside the licence
Malta’s disadvantages:
- Smaller talent pool than Dublin or Amsterdam for senior compliance and risk professionals
- Banking access for licensed entities remains challenging
- Slower than some EU jurisdictions for initial application processing
The firms that succeed in Malta are those that come with a clear, credible business model, a committed management team prepared to be genuinely present in Malta, the capital to meet requirements, and the patience for a thorough regulatory process.
[Book a consultation](/consultation) to discuss whether MFSA licensing is the right route for your financial services business.