Apply fresh when
Your activity is unusual or does not map onto an off-the-shelf permission; you want a clean history; you have the time; or no credible target exists in the jurisdiction you need.
Key points
- A purchase does not skip the regulator — it swaps one approval for another
- You inherit the target's compliance and AML history in full
- Scope is the first thing to verify: the permission may not cover your activity
- Bank accounts frequently do not survive a change of ownership
- Where the target is clean, a transfer is genuinely faster — that is the whole case for it
A fresh application gives you an entity with no history and a scope you define, at the cost of the assessment phase. An acquisition gives you an existing permission and an existing past, and replaces the assessment phase with a change-of-control approval plus due diligence. Neither is reliably faster; which is faster depends entirely on the specific target.
We do both, so this page is not an argument for one of them. It is the comparison we run internally before recommending either.
What are you actually buying?
The framing that causes the most expensive mistakes is treating an acquisition as a purchase of an asset. A licence is not an asset that transfers with the share register. In almost every regime a change of controller in a licensed entity requires the regulator's approval, and the regulator assesses the incoming owners against substantially the same fit-and-proper standards it applies to a new applicant. It can refuse. It can approve subject to conditions that change the economics after you have committed.
So the diligence required is not ordinary corporate diligence with a compliance annex. It is a regulatory assessment with a company attached, and it needs to be run by someone who knows what a supervisor will find. The detail is on licence transfer.
Which is actually faster?
Genuinely unknowable in the abstract. Where the target is clean — scope fits, approved individuals stay, regulator comfortable, banking confirmed — a transfer can put you in the market months ahead. Where it is not, you pay for the purchase, the diligence, the change-of-control filing and a remediation programme, and end up behind where a fresh application would have left you.
The practical test is whether the seller can produce clean regulatory correspondence for the past two years without effort. If routine filings and supervisory exchanges are not readily to hand, the reason is rarely administrative, and the remediation tail is about to become your project.
When does each route win?
When each one is the right answer
Buy when
A clean target exists, its scope genuinely covers your activity, its approved individuals will stay, and being in the market sooner has a value you can quantify.
Walk away when
The seller cannot produce two years of clean regulatory correspondence, the entity has no real operation behind its address, or the banking is asserted rather than confirmed.
The three cards above are the short version. Two additions worth stating plainly.
A fresh application is underrated on scope. Applying lets you define the permission around the business you are actually building. Buying means fitting your business into a permission somebody else obtained for a different one, and scope variations are their own approval with their own uncertainty.
An acquisition is underrated on substance. An entity with a genuine operating history, real local presence and a working bank account carries something a new applicant has to construct from nothing. That is a real asset — it just has to be verified rather than assumed, and it is precisely what the checklist on licence transfer exists to test.
Whichever route you take, the obligations begin at approval rather than ending there — annual audit, reporting, training, procedure updates. That is on post-licence compliance, and it is the same for both. The underlying standards trace to the FATF recommendations, with each jurisdiction layering its own detail; inside the EU, MiCA now governs crypto-asset services and its transitional period closed on 1 July 2026 — which matters when assessing what an older acquired registration actually still permits.
No regulator's approval can be guaranteed, on an application or on a change of control. This page is general information, not legal advice; CryptoLicense is an advisory firm, not a regulator and not a law firm.
| Decision factor | Fresh application | Acquiring a licensed entity |
|---|---|---|
| Starting point | Entity, governance and compliance framework built from nothing, with the scope defined by you. | The entity, the permission and an existing structure already exist — but every one of them has to be verified item by item. |
| What the regulator approves | The application itself: your business, your people, your controls, assessed against the regime's standards. | A change of controller. The incoming owners are assessed against much the same fit-and-proper standards, and approval can be refused or conditioned. |
| History you carry | None. The entity has no past customers, no past filings and no past supervisory correspondence. | All of it. Past customers, past transactions, past reporting and anything the seller has not volunteered. |
| Scope of permission | Defined by what you apply for, so it matches the business you are actually building. | Defined by what the seller obtained. If it does not cover your activity you need a variation, and nobody can promise the regulator will grant it. |
| Where the time goes | Preparation and drafting, then the regulator's assessment and its question rounds. | Due diligence, negotiation, the change-of-control filing, then remediation of whatever diligence uncovered. |
| Banking | Applied for fresh once the entity and permission exist. Slow, but the relationship is yours from the start. | Often presented as included. Banks routinely re-onboard on a change of beneficial ownership and may decline — get it in writing from the bank, not the seller. |
| How the cost behaves | Largely predictable: regulator fees, professional fees, and the cost of the substance the regime requires. | A purchase price plus diligence, plus remediation that cannot be scoped until diligence is done. The tail is the part that surprises people. |
| The risk that matters | That the application is refused, or takes longer than the business plan assumed. | That something material surfaces after completion, when you are the owner and the regulator's counterparty. |
