Key points
- Substance means real presence: entity, address, people, operations that match the file
- The elements are sequential and interdependent — the order costs more than the items
- True cost is application plus substance plus every year of maintenance afterwards
- A refusal is not the end, but the reason must be understood before re-filing
- Nobody can guarantee an approval, and no arrangement makes substance optional
Substance is what a regulator means when it asks whether your presence in a jurisdiction is real: an entity, a verifiable address, people who can genuinely perform their roles, and an operation that matches the documents. It is the most underestimated part of a licensing project, the largest part of the true cost, and the most common reason a chosen route quietly fails.
Three subjects on one page because they are the same subject. What a regime demands you actually have in a place is what a licence actually costs, and failing to have it is why applications are refused.
What does 'substance' actually mean?
What substance actually consists of
- A local entity that is properly incorporated, funded to the regime's threshold and in good standing
- A registered address that can be verified and where correspondence genuinely reaches someone
- A compliance or AML officer with relevant credentials who can answer questions about your business, not compliance in general
- Directors who meet the regime's fit-and-proper standards and understand what they are responsible for
- Ownership that resolves cleanly to natural persons, with no unexplained intermediate layers
- An operating reality — systems, records, monitoring — that matches what the filed procedures describe
Substance is the regulator's answer to a simple suspicion: that a company has incorporated in a jurisdiction to obtain a permission and has no real connection to it. Every credible regime now tests for this, and the tests have tightened steadily. The six items in the checklist above are the general shape; the detail varies, but the underlying question does not.
The two that carry the most weight are the compliance officer and the operating reality. An officer is expected to be someone who can discuss your specific business, your specific customer risk and your specific monitoring — not a qualified individual whose name appears on several unrelated files. And the operating reality is tested by comparing what the procedures say against what the systems actually do. A monitoring procedure describing rules that no system implements is not a documentation gap; it is a statement that the control does not exist.
Why the order costs more than the items
Each element of substance is individually obtainable. The expense comes from the dependencies, which are rigid and which nobody warns you about.
| Element | Waits on | What goes wrong |
|---|---|---|
| Registered address | Nothing — start here | An address with no genuine presence fails the substance test later |
| Local entity | The address | Incorporating before the licensing route is settled, then needing a different structure |
| Compliance officer | Knowing the regime and the business | Recruitment starting last, when it has the longest lead time |
| Bank account | The entity, and usually the permission | Assumed to be routine; it is the single most common blocker |
| Monitoring tooling | The procedures being written | Bought first, then found not to implement the procedures |
| The application itself | All of the above | Filed early, describing an organisation that does not yet exist |
Read the right-hand column as the list of things that add months. The most costly is filing early: an application describing a company that has not been built reads exactly that way to a reviewer, and the resulting question round is far more searching than it would otherwise have been.
What does a licence actually cost?
We do not publish fees, and we would treat a published fee table for this kind of work with caution — the variance between two applications in the same jurisdiction is enormous. What we can do is set out the shape of the cost so a quote can be read properly.
There are three layers. The application layer: regulator or SRO fees, and professional fees for preparation. The substance layer: the entity, the address, the officer's compensation, capital that must be held rather than spent, and the monitoring tooling. And the maintenance layer: annual audit, reporting, training, procedure updates, and the officer's continuing cost — every year, for as long as you hold the permission.
Founders budget for the first layer and are surprised by the other two. In our experience the second and third are together much larger than the first over any realistic time horizon, which is why post-licence compliance belongs in the decision rather than after it. A quote that covers only the application layer is not a cheaper offer; it is a partial one.
The layer people forget entirely is capital held rather than spent. Where a regime sets a minimum capital requirement, that money is not a fee — it is working capital you cannot deploy. For an early-stage business that constraint is sometimes more binding than the fees.
What happens after a refusal?
If an application is refused
- Establish the real reason. The stated ground in a decision letter is frequently narrower than the underlying concern
- Decide whether it is remediable in this jurisdiction, or whether the model does not fit this regime at all
- Assume the refusal is visible. Future regulators and counterparties will ask, and a candid account is far better received than a discovered one
- Fix the substance before re-filing. Re-submitting the same file with better wording is how a second refusal happens
- Reassess the jurisdiction honestly — sometimes the correct response is a different regime, not a better application
Refusals happen, including to well-prepared applicants, because regulators retain full discretion. What matters is the response, and the checklist above is the sequence.
The step everyone wants to skip is the first. A decision letter states a ground, and that ground is often a narrow expression of a broader concern — about the business model, the ownership, or whether the organisation described in the file actually exists. Re-filing against the stated ground while leaving the underlying concern untouched produces a second refusal, which is materially worse than the first: a pattern is harder to explain than an event.
Assume it is visible. Future regulators ask, banks ask during onboarding, and acquirers ask in diligence. A candid account of what went wrong and what changed is received far better than a history discovered later.
And be willing to conclude that the jurisdiction was wrong. Sometimes a refusal is telling you something true — that the model does not fit this regime and no amount of drafting will make it fit. That conclusion is on choosing a licence, and it is cheaper to reach before the first application than after the second.
The two things nobody can change
No adviser can guarantee approval. Regulators keep full discretion, and a firm quoting an approval rate is describing something it cannot know. And substance cannot be outsourced: the presence, the people and the controls have to be real, and they have to be yours. An adviser can source, sequence, draft and represent — the standards behind all of it deriving from the FATF recommendations and each regime's own layer on top, whether that is FINMA's framework in Switzerland or MiCA in the EU. What none of them can do is be the operation for you.
Which parts of this you can reasonably carry alone is set out on doing it yourself versus using an adviser. This page is general information rather than legal advice, and reflects the position as at August 2026. CryptoLicense is an advisory firm, not a regulator and not a law firm.
