MiCA and PSD2 Dual Licensing in Cyprus: Costs, Options, Hiring | Emerald Zebra

Licensing Under MiCA and PSD2: A Strategic Grid for Crypto and Payment Firms in Cyprus

The collision between MiCA and PSD2 has created confusion at nearly every fintech firm in Cyprus that touches crypto or stablecoins. The European Banking Authority clarified in June 2025 that certain Electronic Money Token services qualify as payment services under PSD2, triggering a requirement for dual authorisation. The enforcement pause ended on 2 March 2026. By that date, firms offering EMT services needed to either pursue dual licensing, establish a contractual partnership with an already-licensed PSP, or restructure their business to avoid the overlap. Each choice has different hiring implications: a firm pursuing dual licensing needs different people than a firm partnering with a PSP. The licensing decision you made (or did not make) determines your org structure for the next three years.

The Regulatory Overlap

MiCA covers crypto-asset service providers; PSD2 covers payment services and electronic money. The overlap occurs with Electronic Money Tokens, essentially digital versions of traditional electronic money. Under the EBA Opinion of June 2025, certain EMT services qualify as payment services under PSD2, requiring dual authorisation or a partnership with a licensed PSP during the transition.

The EBA advised national competent authorities, including the Central Bank of Cyprus and CySEC, to refrain from immediate enforcement until 2 March 2026. That grace period was for firms to analyse their models, apply for the right authorisation or structure compliant partnerships. After that date, continuing EMT services without PSD2 coverage constitutes unauthorised payment activity, exposing firms to administrative fines and potential licence action.

The Three Strategic Paths

Option A: Dual licensing (MiCA plus PSD2 or EMI). Full operational control; suits firms whose business genuinely spans crypto-asset services and payments, with capital and compliance capacity to absorb the cost. Burden: stacked capital requirements, separate governance and risk frameworks, dual audit trails and reporting. Hiring: Chief Compliance Officer (EUR 100k to 160k), Senior Compliance Lead MiCA (EUR 80k to 120k), Senior Compliance Lead PSD2/EMI (EUR 80k to 120k), Dual Licensing Programme Manager (EUR 75k to 110k), Head of Operations (EUR 85k to 130k). Total incremental hiring: 4 to 6 FTE plus governance overhead.

Option B: Partnership with a licensed PSP (MiCA only). The firm holds MiCA authorisation; a licensed PSP or EMI handles the payment and settlement component. Suits firms whose core business is crypto-asset services with payments as an ancillary feature. Hiring: Head of Compliance MiCA (EUR 85k to 130k), Regulatory Affairs Officer (EUR 65k to 95k), Payments Operations Manager (EUR 60k to 90k), Partnership Manager (EUR 70k to 100k). Total: 2 to 3 FTE, relationship-focused. Trade-off: less control over the payment experience and dependence on partner terms.

Option C: Restructure to avoid the overlap (MiCA only, no EMT services). Product architecture explicitly avoids payment service definitions: trading, custody and advice within MiCA; users manage their own fiat on-ramps. Hiring: Head of Regulatory Affairs MiCA (EUR 80k to 130k), Senior Compliance Officer (EUR 70k to 110k). Total: 1 to 2 FTE. Trade-off: product limitations and possible constraints on addressable market.

The Enforcement Signal

The 2 March 2026 date was not soft. Firms operating without the right licence or partnership face administrative fines (in serious sanctions-related cases up to EUR 5 million or 10 percent of annual turnover under the Criminalisation of the Violation of Restrictive Measures Law), remedial orders and potential licence revocation.

In practice firms sit in three groups: those that decided and executed by mid-2026 and are now hiring and ramping; those still in board discussions, mostly leaning toward partnerships because dual licensing costs exceeded expectations; and a smaller cohort that ignored the issue and now carries enforcement risk.

The Hiring Timeline by Option

Option A: board decision and CCO hire, then additional compliance hires and applications, then a 4 to 6 month approval wait, then full team ramp post-approval. Core compliance hiring window spans roughly two to three quarters.

Option B: partner selection and contract, MiCA application, approval wait, go-live. Hiring window of one to two quarters for compliance plus partnership management.

Option C: product roadmap reset, MiCA application, minimal compliance hiring in a single quarter.

The key difference: dual licensing means the longest and most expensive hiring cycle across two frameworks; partnership means a medium cycle focused on coordination; restructuring means a minimal cycle focused on core compliance.

Governance and Compliance Cost Analysis

Indicative annual running costs post-approval (validate against current advisory quotes before publication):

Capital requirements: MiCA EUR 50k to 150k locked capital by service class; PSD2 or EMI EUR 50k to 300k by category, often stacked rather than shared. Execution cost for the licensing cycle: Option A roughly EUR 500k to 1.5M; Option B EUR 200k to 500k; Option C EUR 100k to 250k.

The Strategic Decision Grid

Choose A if stablecoins or EMTs are core to the value proposition and institutional clients expect banking-grade infrastructure. Choose B if crypto-asset services are the moat and payments are a feature. Choose C if the model works without the payments perimeter and regulatory simplicity is worth product constraints.

What Emerald Zebra Is Seeing in the Market

Senior Compliance (EUR 85k to 130k), Partnership Managers (EUR 70k to 100k), Regulatory Affairs Officers (EUR 65k to 95k).

The PSD3 Horizon

PSD3, applicable late 2027 to early 2028, will eventually harmonise the MiCA and payments overlap more tightly. That is not a reason to wait. Firms that chose dual licensing are already operating in the most complex framework and may find PSD3 simplifies things; partnership firms will need to reassess partnership economics under PSD3; restructured firms hold the cleanest position with the option to expand later. Make the decision on the current business model now.

Key Citations and Sources

• EBA Opinion on the MiCA and PSD2 overlap (June 2025)
• EBA enforcement pause guidance and the 2 March 2026 date
• Criminalisation of the Violation of Restrictive Measures Law (fines structure)
• CBC and CySEC supervisory framework
• PSD3 timeline (provisional agreement November 2025)