Estonia Curated

DeFi Intel Research Desk2026-07-14Europe

Is crypto legal in Estonia? (2026)

Yes — cryptocurrency is legal in Estonia. Current status: Legal — MiCA CASP regime; legacy FIU VASP era closed. Oversight sits with Finantsinspektsioon (Financial Supervision and Resolution Authority) — MiCA competent authority; FIU handles AML/CTF. Full details — governing law, licensing, tax and dated enforcement history — follow below (last reviewed 2026-07-14).

Framework: MiCA (Regulation (EU) 2023/1114), directly applicable; the national Market in Crypto-Assets Act (Krüptovaraturu seadus, KrüTS), in force since 1 July 2024; the Money Laundering and Terrorist Financing Prevention Act (MLTFPA / RahaPTS), which ran the legacy virtual-currency register that closed on 1 July 2026.

Estonia's crypto story is one of the most dramatic reversals in Europe: from the world's most permissive virtual-asset hub to a fully MiCA-aligned regime supervised by the same authority that oversees its banks. Between 2017 and 2020 Estonia issued more than 1,400 virtual-currency service-provider (VASP) authorisations under an early, light-touch reading of the MLTFPA, and Tallinn became the default incorporation venue for exchanges and wallet providers worldwide. That era has now ended. Prudential and conduct supervision of crypto-asset service providers sits with Finantsinspektsioon (the Financial Supervision and Resolution Authority), designated as Estonia's MiCA competent authority, while the Financial Intelligence Unit (Rahapesu Andmebüroo) retains anti-money-laundering and counter-terrorist-financing oversight. The old FIU-issued VASP licence no longer exists as a route to market.

MiCA has applied directly in Estonia since its phased 2024 start (stablecoin titles from 30 June 2024, the crypto-asset service-provider titles from 30 December 2024). Estonia legislated the executory detail early: the Market in Crypto-Assets Act (Krüptovaraturu seadus) entered into force on 1 July 2024, naming Finantsinspektsioon as competent authority and building the national authorisation, supervision and sanctions machinery around the EU regulation. From 18 March 2026, CASP authorisation applications are filed through Finantsinspektsioon's online portal; the authority assesses completeness within 25 working days and substantive compliance within 40 working days, against a €3,000 processing fee, and an Estonian CASP authorisation carries full EU-wide passporting rights across all 27 member states.

From VASP hub to MiCA reset

The scale of the clean-up is best told in licence counts. After the MLTFPA was tightened in 2020, the FIU withdrew authorisations from more than 1,000 firms that could show no genuine Estonian substance. A further overhaul took effect on 15 March 2022, raising capital, local-management and reporting requirements; according to the FIU's own reporting, 389 authorisations subsequently expired, service providers abandoned nearly 200, and the FIU revoked close to another 200 for non-compliance. The number of active authorisations fell from roughly 650 in the summer of 2021 — when Matis Mäeker became FIU director — to 100 by 1 May 2023, and to about 36 by the start of 2026.

Those legacy MLTFPA authorisations were never MiCA licences, and they did not convert automatically. Existing VASPs were permitted to keep operating during a transitional window but had to file a full MiCA CASP application with Finantsinspektsioon to continue beyond it. On 30 June 2026 Finantsinspektsioon and the FIU issued a joint notice that, from 1 July 2026, crypto-asset services in Estonia may be provided only by companies holding a MiCA authorisation — issued either by Finantsinspektsioon or by another EEA supervisory authority passporting in. As of that changeover, only one firm, Lightspark Payments Europe AS, had received a MiCA CASP authorisation directly from Finantsinspektsioon; separately, AS LHV Pank and the investment firm Lightyear Europe AS could provide certain crypto-asset services under other authorisations. The remaining legacy holders had to complete authorisation, passport in from elsewhere in the EEA, or wind down — ceasing new client onboarding and active EU marketing.

Tax treatment

Estonia taxes crypto as ordinary personal income at a single flat rate, administered by the Estonian Tax and Customs Board (Maksu- ja Tolliamet, EMTA). That rate rose from 20% to 22% on 1 January 2025 and remains 22% for 2026: a further increase to 24% that parliament had adopted was cancelled by the Riigikogu in December 2025, and the separate temporary 2% "security" (defence) tax planned for 2026–2028 was abolished in June 2025. There is no reduced long-term or holding-period rate — gains are taxed at 22% regardless of how long an asset is held.

Estonia's rules are notably broader than many EU peers on what counts as a taxable event. Per EMTA guidance, income must be declared not only when crypto-assets are converted into fiat, but also when they are exchanged for other crypto-assets and when they are used to pay for goods or services — so crypto-to-crypto swaps are taxable in Estonia (unlike, for example, Poland, where they are neutral). Loss relief is tightly linked to MiCA: losses realised on a platform without MiCA authorisation cannot be taken into account and cannot be declared, whereas losses on crypto-assets acquired through a MiCA-authorised service provider or issuer may be deducted from gains on such assets within the same period. Since 1 January 2025, crypto-assets treated as financial assets and held through MiCA-authorised providers can also be routed through Estonia's investment-account system, deferring tax until net withdrawals exceed contributions.

• Rate: 22% flat personal income tax on crypto gains (2025 and 2026; up from 20% in 2024)
• Taxable events: crypto→fiat, crypto→crypto, and paying for goods/services with crypto
• Holding-period rule: none — no reduction or exemption
• Losses: deductible only for assets on MiCA-authorised platforms; non-MiCA-platform losses cannot be declared
• Deferral: investment-account system available from 1 Jan 2025 for MiCA-regulated crypto financial assets

Travel rule applicability

Status: yes — EU Transfer of Funds Regulation, no minimum threshold. As an EU member state, Estonia applies Regulation (EU) 2023/1113 directly; it has been in force since 30 December 2024. Crypto-asset service providers must attach complete, verified originator and beneficiary information to every crypto-asset transfer, with no de-minimis threshold and no size exemptions, consistent with the EBA's Travel Rule Guidelines applying from the same date. This supersedes the earlier travel-rule obligations that Estonia had already imposed on VASPs under the MLTFPA. Anti-money-laundering supervision of the sector — including travel-rule compliance — continues to sit with the Financial Intelligence Unit, alongside Finantsinspektsioon's prudential and conduct role under MiCA.

Notable enforcement and regulatory events

• 2017–2020. Estonia becomes the world's default VASP incorporation venue; more than 1,400 virtual-currency authorisations are issued under an early, permissive reading of the MLTFPA.
• 2020. After the MLTFPA is tightened, the FIU withdraws authorisations from over 1,000 firms lacking genuine Estonian substance.
• 15 March 2022. A major MLTFPA overhaul takes effect (higher capital, local-management and reporting requirements). In the aftermath 389 authorisations expire, nearly 200 are abandoned, and roughly 200 more are revoked for non-compliance; active authorisations fall to about 100 by May 2023.
• 1 July 2024. The Market in Crypto-Assets Act (Krüptovaraturu seadus) enters into force, designating Finantsinspektsioon as Estonia's MiCA competent authority and closing the runway for the legacy FIU licence.
• 12 February 2025. HashFlare co-founders Sergei Potapenko and Ivan Turõgin — extradited from Estonia to the United States — plead guilty in the Western District of Washington to conspiracy to commit wire fraud over the cloud-mining scheme, whose sales exceeded US$577 million between 2015 and 2019.
• August 2025. Potapenko and Turõgin are sentenced to time served (about 16 months), each fined US$25,000 with 360 hours of community service; forfeited crypto, cash, property, vehicles and mining equipment collectively valued at over US$450 million are surrendered.
• 18 March 2026. Finantsinspektsioon opens its online portal for MiCA CASP authorisation applications, with a 40-working-day substantive assessment window.
• 30 June 2026. Finantsinspektsioon and the FIU jointly announce that, from 1 July, crypto-asset services in Estonia may be provided only by holders of a MiCA authorisation (issued by Finantsinspektsioon or passported from another EEA authority).
• 1 July 2026. The legacy MLTFPA virtual-currency licence regime ends. At the changeover only one firm — Lightspark Payments Europe AS — holds a Finantsinspektsioon MiCA CASP authorisation; remaining legacy holders must passport in, complete authorisation, or wind down.

Public licensed CASP list

Finantsinspektsioon maintains the authoritative register of MiCA-authorised crypto-asset service providers and token issuers supervised in Estonia; it is the only definitive source for who may lawfully serve the Estonian market, and it was still very short in mid-2026 (Lightspark Payments Europe AS being the first Finantsinspektsioon-authorised CASP). The FIU's legacy virtual-currency register — never a MiCA licence — closed to new business on 1 July 2026. Because CASP authorisations passport across the EEA, Estonian customers may also be served lawfully by providers authorised in other member states; the consolidated view sits in ESMA's MiCA registers. DeFi Intel mirrors the official Finantsinspektsioon register on a quarterly basis rather than republishing unverified third-party lists.

Comparison to neighbours

Compare Estonia crypto regulation with three geographically adjacent jurisdictions:

Doing business in Estonia — practical notes

Estonia is no longer the fast, low-substance crypto-licence destination it was between 2017 and 2021. The only route to market is a full MiCA CASP authorisation — obtained from Finantsinspektsioon or passported in from another EEA state — and the domestic process presumes real Estonian substance: local management, adequate own funds, governance, custody and AML controls that satisfy both Finantsinspektsioon and the FIU. Applications run through Finantsinspektsioon's portal (open since 18 March 2026) with a €3,000 fee and a 40-working-day assessment; the upside is a single authorisation that passports across all 27 EU member states. Firms that stayed on the old MLTFPA register past 1 July 2026 without a MiCA authorisation are no longer permitted to provide crypto-asset services and should be treated accordingly in counterparty diligence. Tax planning should account for Estonia's unusually broad taxable-event definition — crypto-to-crypto swaps are taxable at the flat 22% income-tax rate — and for the fact that loss relief and the investment-account deferral are available only for assets held through MiCA-authorised platforms. The EU travel rule applies to every transfer without a threshold, and AML supervision remains with the FIU. Monitor the Finantsinspektsioon CASP register as authorisations are granted through 2026.

Methodology and sources

This profile was researched and updated by DeFi Intel's research desk on 2026-07-14 from the primary and secondary sources listed below, including Estonian government portals (Finantsinspektsioon, the Financial Intelligence Unit and the Estonian Tax and Customs Board), the US Department of Justice, and specialist legal and tax commentary. Claims that could not be verified against a source are omitted or marked pending — we do not republish unverified third-party datasets. Submit corrections and primary-source links to [email protected].

Sources

• Finantsinspektsioon — The operating licence in markets of crypto-assets (MiCA/CMA, portal from 18.03.2026, 40-working-day assessment)
• Estonian Financial Intelligence Unit — 100 active virtual-asset authorisations (post-15 March 2022 revocations; ~650 in mid-2021)
• Estonian Tax and Customs Board — Cryptocurrency (taxable events, MiCA-linked loss relief, investment account from 1 Jan 2025)
• Estonian Tax and Customs Board — Tax rates (22% income tax for 2026; basic exemption €700/month)
• EY Estonia — Significant tax changes in Estonia in 2025–2026 (rate history; security tax abolished)
• FinTelegram — MiCA Day One: Estonia ends the old crypto-licence era (30 June 2026 joint notice; ~36 legacy licences; Lightspark first CASP)
• Copla — MiCA regulation in Estonia (Krüptovaraturu seadus in force 1 July 2024; VASP-to-CASP transition to 1 July 2026)
• US Department of Justice — Two Estonian nationals plead guilty in the $577M HashFlare cryptocurrency fraud scheme
• CoinDesk — HashFlare co-founders plead guilty in $577M crypto-mining scheme (Feb 2025)
• EUR-Lex — Regulation (EU) 2023/1113 on information accompanying transfers of funds and certain crypto-assets (EU travel rule, in force 30 Dec 2024)