US Apostilles for Malta Crypto Licensing: The VFA Act Is Closed, CASP Under MiCA Is the Only Route Now

Malta earned its "Blockchain Island" reputation through the Virtual Financial Assets Act, one of the world's first comprehensive crypto regulatory frameworks when it launched in 2018. That framework is no longer open to new applicants. Under the EU's Markets in Crypto-Assets Regulation, the MFSA now authorizes crypto businesses exclusively through CASP licensing, and the VFA Act's grandfathering window for existing license holders to transition closed on July 1, 2026. If you're planning a Malta crypto entity today, the VFA route the brief you might be working from describes isn't available to you regardless of how it's marketed, and if you already held a VFA license before that deadline, confirm your transition status immediately, since failing to complete it means losing the right to provide crypto-asset services in the EU entirely.

Here's the current picture, and what U.S. founders, directors, and parent companies actually need authenticated for a CASP application.

New Applicants Go Straight to CASP

There is no legacy shortcut anymore. New market entrants apply directly for CASP authorization under Malta's Chapter 647, filed through the MFSA's Licensee Hub portal, with capital requirements set by MiCA's own framework, generally ranging from €50,000 to €150,000 depending on the specific service class you're licensed for. The MFSA's years of VFA-era supervisory experience are a genuine advantage in how efficiently applications get reviewed, but the underlying legal pathway itself is entirely the CASP one now, not the older VFA process some marketing content still describes.

Genuine Substance Is Required, Not a Shell Structure

MFSA expects real governance in Malta, commonly described as "two-mind management," meaning at least two Malta-resident executive directors actually running the business day to day, plus a Malta-based Compliance Officer and Money Laundering Reporting Officer. Remote founders can own the company, but the people actually managing it need to be physically present in Malta. This mirrors a pattern showing up across multiple crypto-friendly jurisdictions covered on this site, the era of thin, shell-style crypto registrations has genuinely ended, and the corporate documents you authenticate need to support a structure that can actually satisfy this substance test.

FBI Background Checks for the Fit-and-Proper Standard

Every proposed director, senior executive, MLRO, and any UBO holding more than 10% ownership has to clear MFSA's integrity vetting, and for U.S. citizens and residents, that means an FBI Identity History Summary. It's a federal document, authenticated at the federal level by the U.S. Department of State, not any state Secretary of State, the same routing rule that governs this document throughout every country covered on this site. MFSA commonly expects this report issued within three to six months of submission, so time your request against your actual filing date rather than ordering it early in your preparation. Given how many people a typical fit-and-proper review covers on a real founding team, plan for several FBI checks moving through the federal pipeline at once.

Malta Business Registry Filings for a US Parent Company

Where a U.S. holding company, a Delaware C-Corp or Wyoming LLC, is the parent shareholder of the Maltese entity, the Malta Business Registry requires the parent's Certificate of Incorporation or Organization and Certificate of Good Standing, apostilled directly by the state that issued them. Articles and bylaws, being private governance documents rather than direct government records, require notarization first, with the apostille issued by the state where that notarization actually occurred.

The Power of Attorney for Remote Formation

U.S. founders rarely travel to Valletta to sign incorporation documents or open corporate bank accounts in person. A notarized, apostilled power of attorney lets a Maltese corporate service provider execute formation documents on your behalf, following the same sequence as every power of attorney covered on this site: a U.S. notary witnesses your signature, and the apostille comes from the Secretary of State of the state where that notarization took place. Notarized passport copies typically accompany the filing alongside it.

English Documents Need No Translation

This is a genuine advantage worth confirming rather than assuming. English is an official language of Malta, and MFSA and MBR submissions are conducted in English, so standard U.S. public documents generally require no translation. This removes an entire cost and timing variable that applies in most other European jurisdictions covered on this site. It doesn't remove the apostille requirement, only the translation step.

Bank and EMI Onboarding: Confirm What's Actually Requested

Opening fiat rails through a Maltese bank or licensed electronic money institution involves real KYC documentation, and it's worth confirming exactly what the specific institution wants before authenticating everything preemptively. An apostilled IRS Form 6166 U.S. tax residency certificate is sometimes requested in this context, but as covered in more depth in our dedicated guide to that specific document, it isn't universally required, and whether your specific bank or EMI actually needs it depends on their own compliance process rather than a blanket rule. Confirm before ordering one.

Where Malta Crypto Filings Fail

• Assuming the VFA Act is still open to new applicants, when it closed to new entrants and its grandfathering window for existing holders ended July 1, 2026

• Structuring around a thin or shell entity, when MFSA's two-mind management standard requires genuine Malta-resident leadership

• FBI reports for directors, MLROs, or UBOs sent to a state office, which cannot authenticate a federal document

• Letting the FBI check exceed its typical three-to-six-month validity window

• A power of attorney with vague authority rather than one naming the specific formation act

• Authenticating an IRS Form 6166 that the specific bank or EMI never actually requested

• State-issued parent company documents sent to the wrong state, or private governance documents authenticated in the state of incorporation instead of the state of actual notarization

Send Us Your Structure and Team

American Apostille handles authentication of U.S. corporate documents and federal FBI Identity History Summaries for Malta CASP licensing applications, Certificates of Good Standing, Articles of Incorporation, powers of attorney, and background checks for every director, MLRO, and UBO on your team, from any U.S. state.

Tell us your target CASP service class and current VFA transition status if applicable, and who on your team needs a background check authenticated. We'll tell you which documents can be authenticated as they stand and how the timeline holds up against your licensing deadline.

American Apostille Email: Jared@ApostilleLLC.com Phone: +1-848-467-7740