Licensing Strategy (iGaming • Financial • Crypto)
SK Consult advises on licensing pathways and regulatory positioning across multiple jurisdictions—helping you to choose the right route, prepare a defensible case, and build compliance-ready foundations.
Important note:
Approvals are made independently by regulators/authorities
Focus
iGaming licensing strategy
Financial licensing
Crypto licensing
What you get
Strategy memo (options, pros/cons, realistic pathway)
Readiness plan (governance, controls, document checklist, timeline)
Execution coordination via licensed partners where required
Licensing is a structuring decision, not a paperwork exercise
Most licensing projects do not fail at the application stage. They fail earlier, at the point where the business model, the corporate structure and the chosen regime stop matching each other. A gaming operator taking EU players, a payment business that needs SEPA reach, and a crypto platform that must remain authorised to serve EU clients all face the same underlying question: which regime can actually carry this business, and what has to be true about the company before a supervisor will say yes.
We work backwards from that question. Before anything is filed, we map the activity against the regimes that genuinely permit it, test the structure against ownership, capital and substance requirements, and identify the points where the file will be challenged. The objective is a defensible position — a licence the business can hold, renew and bank on — rather than a submission that clears the first review and then stalls in questions.
SK Consult advises across three regulated verticals that increasingly overlap: online gaming, financial services (e-money, payment and investment firms) and crypto-asset services. Where a group touches more than one, the sequencing of applications matters as much as their content.
What the engagement covers
Each mandate is scoped to the route selected, but the following components recur in almost every licensing project we run.
Regime and jurisdiction selection
Comparative analysis of the regimes that permit your activity, assessed on the constraints that usually decide the outcome: ownership disclosure, capital, local management, supervisory appetite, and how the resulting licence is treated by banks and payment partners.
Regulatory gap analysis
A written assessment of where the current structure, documentation and governance fall short of the target regime, with a remediation list ordered by what actually blocks the application.
Corporate and ownership structuring
Holding structure, shareholding chain, UBO presentation, and the fitness-and-propriety profile of every person who will be named in the file.
Business plan and financial model
Prepared to supervisory format: revenue model, three-year projections, capital adequacy, own-funds calculation, stress scenarios and a credible wind-down plan.
Policy and procedure suite
AML/CFT manual, KYC and onboarding procedures, business-wide risk assessment, sanctions and PEP screening, transaction monitoring rules, outsourcing, complaints, business continuity, and — depending on the vertical — responsible gaming or safeguarding of client funds.
Governance and key function holders
Board composition, MLRO and compliance officer, risk and internal audit arrangements, four-eyes structure, and the supporting documentation supervisors expect behind each appointment.
Application file and regulator liaison
Assembly, submission and management of the question-and-answer rounds that follow. This stage, not the drafting, is where most timelines are actually decided.
Substance build-out
Local office, resident directors, staffing and the operating footprint the licence assumes — planned at the design stage rather than improvised after approval.
Banking and payment readiness
Positioning the licensed entity for account opening with banks, EMIs and PSPs. This is a separate gate from the licence itself, and it is the one that most often catches operators by surprise.
Who this is for
First-time entrants to a regulated market
Founders and management teams who need the route decided — and the blocking issues named — before committing budget to a specific jurisdiction, technology stack or hiring plan.
Licensed businesses under pressure
Firms facing a remediation programme, a change-of-control notification, a variation of permission, or a supervisory information request that has to be answered precisely and on time.
Groups restructuring or re-domiciling
Operators adding a vertical, relocating a licence, arranging passporting inside the EU, or responding to a regime change such as the MiCA framework or the Curaçao LOK reform.
How the work runs
-
Scoping and preliminary assessment
1 weekActivity, target markets, existing corporate structure, funding, timeline and risk appetite. Output: a shortlist of viable regimes with the blocking issues stated plainly, including the ones that argue against proceeding.
-
Route selection and structure design
2–4 weeksComparative memorandum, chosen route, corporate map, capital and substance plan, key function holder plan, and a project timetable with dependencies.
-
File preparation
6–12 weeksBusiness plan, financial model, full policy suite, governance documentation, corporate instruments, and the due diligence pack on shareholders, directors and key function holders.
-
Submission and supervisory dialogue
3–12 monthsFormal submission, responses to requests for information, meetings and clarifications, amendments to the structure or documentation where the supervisor requires them.
-
Post-authorisation implementation
ongoingConditions precedent, operational readiness testing, banking and payment onboarding, reporting calendar, first regulatory returns, and the ongoing compliance function.
Timelines are indicative and reflect typical mandates. Authorisation is granted by the competent authority at its own discretion; no adviser controls that decision or its timing.
Where these licences are typically held
Jurisdiction is chosen against the market you serve, the counterparties you need and the substance you are prepared to build — not against a headline processing time.
What actually decides the outcome
Substance is tested, not declared
Supervisors increasingly verify that decisions are genuinely taken in the licensing jurisdiction: who signs, who meets, where the systems sit, and whether the local team can explain the business without help from head office.
The people, not the paperwork
Fitness and propriety of shareholders, directors and key function holders is the most common reason files stall. Gaps in history, past regulatory contact and unexplained wealth need to be addressed in the file, not discovered by the supervisor.
Source of funds and source of wealth
Capital has to be traceable to a documented, lawful origin. A transfer from a related company is a movement of funds, not an explanation of wealth, and it will be treated as such.
An AML framework built for your business
Generic manuals are a visible red flag. The risk assessment, customer risk scoring and monitoring rules must reflect your actual products, geographies, payment flows and distribution channels.
Internal consistency of the file
The business plan, financial model, policies, technical description and corporate documents must describe the same business. Inconsistency between them generates the question rounds that consume months.
Banking is a separate gate
A licence improves your position with banks and payment providers; it does not guarantee an account. Onboarding should be planned in parallel with the application, not started after approval.
Where licensing projects go wrong
- Choosing a jurisdiction on price and advertised speed alone, then discovering that no acceptable bank or payment provider will service the resulting entity.
- Filing before the shareholding is settled. A change of ownership mid-application generally restarts the assessment of the new holders.
- Template AML documentation that has not been mapped to the actual product, customer geography and payment architecture.
- Opaque or nominee ownership presented to a supervisor that is both entitled and equipped to look through it.
- Capital that satisfies the stated minimum but fails the adequacy assessment once projected volumes and wind-down costs are modelled.
- Treating local substance as a post-licence problem, then being unable to demonstrate it at the first supervisory review.
- Missing the deadline architecture of a regime change. Under the MiCA framework, the transitional period ended on 1 July 2026 — providing crypto-asset services to EU clients without authorisation is now a breach, not a grey area.
- Appointing key function holders who are unavailable, over-committed across other regulated entities, or unable to answer for the business in an interview.
What we typically need from you
Assembling this early materially shortens the file preparation stage.
- Group structure chart and the full chain of ownership up to the ultimate beneficial owners
- Passports and proof of address for shareholders, directors and proposed key function holders
- CVs, professional references and, where required, criminal record and good standing certificates
- Source of funds and source of wealth evidence for the capital and for each material shareholder
- Business plan, product description, target markets and intended marketing approach
- Financial projections, funding plan and evidence of available capital
- Existing policies, procedures and any prior regulatory correspondence
- Technical description, hosting arrangements, and the list of third-party providers
- Payment flow diagram with existing or intended banking, EMI and PSP arrangements
What drives cost and timeline
Two applications for the same licence can differ by a factor of three. These are the variables that account for it.
- The regime selected and the current workload of the competent authority
- The number of shareholders and officers, and the complexity of their residency and background profile
- Whether the group already has audited financial statements and an operating history
- The complexity of the payment architecture and the number of third-party dependencies
- The quality and completeness of the documentation you already hold
- Whether local substance has to be built from zero or already exists
- The number of supervisory question rounds — consistently the single largest variable
Frequently asked questions
How long does a licence realistically take?
From first scoping call to authorisation, most mandates run between six and eighteen months. Preparation typically takes two to four months; the supervisory phase takes the rest and is the part no adviser controls. Regimes with a defined statutory assessment period still pause the clock each time information is requested, which is why file quality has a direct effect on elapsed time.
Can you guarantee that the licence will be granted?
No, and any adviser who offers such a guarantee is telling you something useful about how they work. Authorisation is granted independently by the competent authority. What can be controlled is the quality and consistency of the file, the suitability of the people named in it, and how quickly and precisely questions are answered — which is where most applications are actually won or lost.
What happens to crypto businesses that were operating under a national regime?
Under the MiCA framework, national transitional arrangements have now ended: the final deadline fell on 1 July 2026, and several member states applied shorter windows. Providing crypto-asset services to EU clients without a CASP authorisation is a breach of EU law. Firms in this position need either an authorisation route in a member state, a reverse-solicitation analysis that genuinely holds, or an orderly withdrawal from the EU market.
Do we really need a local office and local staff?
In every modern regime we work with, yes. The days of a registered address and a non-resident director are over in the jurisdictions worth holding a licence in. What varies is the scale: a minimum viable footprint in one jurisdiction may be a resident director plus a compliance officer, while another expects a physical office, local servers and a staffing plan that grows over the first years of the licence.
Can we start operating while the application is pending?
As a general rule, no. Some regimes provide limited transitional or grandfathering arrangements for firms that were already operating lawfully under a prior national framework, but these are narrow, time-limited and increasingly closed. Operating on the assumption that an application will be approved is one of the more expensive mistakes available in this sector.
Is a Curaçao licence still a viable option?
Yes, but it is now a supervised regime rather than an administrative formality. The Curaçao Gaming Authority licenses operators directly, the old master and sub-licence structure is gone, and licence holders are expected to maintain a local office, a local managing director, an independent compliance officer and local technical infrastructure. It remains a sensible route for certain markets — it is no longer a shortcut.
Can one group hold both a gaming licence and a financial licence?
Yes, and several of our clients do. The practical constraints are sequencing and ring-fencing: supervisors examine the whole group, so a weakness in one entity becomes a question in the other application. We normally recommend completing the more demanding authorisation first and presenting the second application to a supervisor that can already see a clean, supervised structure.
Related services
This page describes SK Consult services and general regulatory practice. It is not legal advice and does not create a client relationship. Regulatory requirements change and are applied at the discretion of the competent authority; any decision should be taken on advice covering your specific facts.
Contact us
If you need practical legal and compliance support for cross-border operations, please get in touch with a brief overview of your business model, the jurisdictions involved, and your key counterparties—such as banks, EMIs, PSPs, or other partners. Based on that information, a proposed scope of work and recommended next steps can be provided.
Contact me
Ready to define the right next step?
Brief us on the objective, jurisdiction and current constraints.
