Finjuris guides brokers, fintech companies, and investment firms through the MFSA licensing process, delivering comprehensive legal, compliance, and regulatory support to establish a MiFID II-compliant business with access to the European market.
Most jurisdictions in this guide compete on being easier. Malta competes on being trusted. A Malta-licensed broker passports across all 30 EEA states under MiFID II and wears a badge that institutional partners, banks and serious clients recognise on sight.
The trade-off is real: Malta has consciously priced out the casual operator, and its retail-forex rules are tougher than the EU baseline. If your ambition is a long-term European brand rather than a quick launch, this is your jurisdiction — and Finjuris builds it to last.
A “Malta forex license” is an Investment Services Licence issued by the Malta Financial Services Authority (MFSA) under the Investment Services Act (Chapter 370), transposing MiFID II. For a forex/CFD broker it takes one of two forms — Category 2 (holding client money, the STP/white-label route) or Category 3 (dealing on own account, the market-maker route) — and, once granted, it passports across the European Economic Area without a second licence.
Malta has established itself as one of the most selective regulatory jurisdictions within the European Union for forex and CFD brokers. Rather than positioning itself as a low-barrier entry point, the MFSA has adopted a more rigorous approach to licensing, placing significant emphasis on capital strength, governance, operational substance, and long-term business sustainability.
For retail-focused forex and CFD businesses, capital expectations are generally higher than those found in some other EU jurisdictions, reflecting the regulator's focus on financial resilience and investor protection. Applicants are expected to demonstrate sufficient resources, experienced management, robust risk controls, and a credible operational framework capable of supporting regulated activities on an ongoing basis.
The MFSA also places considerable weight on the quality of shareholders, senior management, and governance arrangements, assessing whether the proposed structure is capable of meeting the standards expected of an EU-regulated financial institution.
While these requirements can increase the complexity and cost of obtaining authorisation, they also contribute to the strong reputation and credibility associated with an MFSA Investment Services License. For many firms, this enhanced regulatory standing can provide meaningful advantages when engaging with banks, payment providers, liquidity providers, institutional counterparties, and clients. At Finjuris, we help clients assess whether Malta is the most suitable EU jurisdiction for their business model, capital position, and growth objectives, while also evaluating alternative licensing options where appropriate.
The appropriate MFSA Investment Services License category will depend primarily on your brokerage's execution model, risk profile, and intended activities. While different licence categories provide different permissions, retail forex and CFD firms are generally assessed under enhanced regulatory expectations relating to capital, governance, and operational substance.
The decision between Category 2 and Category 3 should be driven by the firm's actual operating model rather than solely by initial capital considerations. Finjuris assists clients in evaluating their proposed business structure and determining the most appropriate MFSA license category based on regulatory requirements, commercial objectives, and long-term growth plans.
| Requirement | Category 2 | Category 3 |
|---|---|---|
| Core Permission | Typically suited to STP, agency, and white-label brokerage models. | Commonly used by brokers operating as principal dealers or market makers. |
| Typical Broker | Permits the provision of investment services and the holding of client money, while orders are generally executed through external liquidity providers. | Permits firms to deal on own account and act as counterparty to client transactions, in addition to broader investment service permissions. |
| Retail-Forex Capital | Often selected by firms seeking an agency-based execution structure. | Typically chosen by businesses intending to internalise risk and operate a market-making model. |
| Shareholding | Typically suited to STP, agency, and white-label brokerage models. | Commonly used by brokers operating as principal dealers or market makers. |
Serve clients across the entire EEA on one licence, by notification — no second authorisation, no second office.
A long-standing EU regulator and ESMA member; the licence opens banking, PSP and institutional doors that lighter regimes can't.
MiFID II conduct rules, client-money segregation and Investor Compensation Scheme cover (up to EUR 100,000 per client) you can put in front of clients.
Malta's full-imputation refund mechanism can bring the effective corporate rate well below the 35% headline.
An English-speaking jurisdiction with deep financial-services talent and a mature iGaming/fintech ecosystem alongside.
The MFSA does not licence a plan — it licences a fully-built, ready-to-run firm. A complete file must evidence:
| The File Must Show… | In Practice | Why the MFSA Cares |
|---|---|---|
| A Maltese Company | A company incorporated in Malta to hold the Investment Services Licence. | The licensed legal entity. |
| Capital, Paid and Held | EUR 730,000 for retail FX/CFD, maintained on an ongoing basis, not just at application. | Solvency through market stress, the MFSA's core concern for CFDs. |
| A Regulated Shareholder | At least one qualifying shareholder already regulated in financial services, potentially active in management. | Aligns the firm with an experienced, supervised owner. |
| Real Maltese Substance | Sufficient Malta-based human resources, a local office and records held in Malta for inspection. | Substance and supervisability; letterbox firms are refused. |
| A Local Risk Function | A dedicated, Malta-based risk-management function designing and monitoring controls. | Retail CFD risk must be actively managed on the ground. |
| Governance & Key People | Fit-and-proper directors and key function holders (compliance, risk, internal audit, MLRO). | Competent, accountable control structure. |
| Client-Facing Safeguards | Negative-balance protection, margin-close-out rules, risk warnings and loss-percentage disclosure for retail clients. | ESMA-aligned retail protections, strictly enforced. |
| DORA / ICT Resilience | A documented operational-resilience framework with incident reporting (mandatory for EU firms since Jan 2025). | Digital resilience is now a hard requirement. |
| Approved Counterparties | Vetted liquidity providers and counterparties, with execution and conflict policies. | Order-handling integrity and best execution. |
While MiFID II provides regulatory timeframes for assessing complete applications, the overall duration of an MFSA license application is largely influenced by the quality of preparation, governance readiness, and completeness of the submission package. For most forex and CFD firms, the process typically spans approximately 8–14 months from initial planning to operational launch. Rather than treating the process as a series of isolated steps, Finjuris manages the application through multiple coordinated workstreams to accelerate readiness and reduce delays.
Timelines are practical estimates; the six-month statutory clock runs only from a complete file, so front-loaded preparation is what actually shortens the journey.
| Element | Rate | Notes |
|---|---|---|
| Corporate Income Tax (Headline) | 35% | Charged on company profits before the refund mechanism. |
| Effective Rate After Refund | ~5% | Typical outcome for trading profits via the 6/7ths shareholder refund, where conditions are met. |
| Participation Exemption | 0% | Qualifying dividends and gains from participating holdings may be exempt. |
| EU Framework | MiFID / Passporting | Full single-market access and an extensive treaty network. |
This is general information, not tax advice. Outcomes depend on structure, residence and the rules in force at the time; obtain tailored advice before relying on any figure.
Obtaining an MFSA Investment Services License requires careful financial planning beyond the initial application stage. Firms should evaluate both regulatory costs and ongoing operational commitments to ensure sufficient capital resources are available before launch and throughout the life of the business.
Applicants are required to pay statutory application and authorisation fees to the MFSA, with costs varying depending on the licence category, proposed activities, and business model.
Licensed firms are subject to annual supervisory fees and may be required to contribute to applicable investor protection or compensation schemes, depending on the nature of their regulated activities.
Firms should budget for locally based governance and control functions, which may include resident directors, compliance personnel, risk management functions, and MLROs, where required.
Ongoing operational expenses typically include annual external audits, compliance monitoring, regulatory reporting, cybersecurity assessments, and technology assurance reviews — plus enhanced ICT governance under DORA.
Additional costs may include office facilities, legal and compliance support, corporate administration, accounting services, regulatory reporting tools, and other resources necessary to maintain a compliant operation.
At Finjuris, we help clients assess both licensing costs and long-term operational commitments, enabling informed budgeting and realistic planning before embarking on the MFSA authorisation process.
Before you spend, we tell you whether your capital and regulated-shareholder position actually fit Malta — or whether Cyprus or Latvia is the smarter EU entry.
We help you solve the regulated-shareholder requirement and stand up genuine Maltese substance — the two things that most often stall applications.
We assemble a complete Standard Licence Conditions file so the six-month MFSA clock starts on submission, not months later.
Crypto, fintech and financial-services licensing across multiple regimes, so Malta sits sensibly inside your wider group.
Tax structuring, AML and data-protection compliance, and litigation support as you scale across the EEA.
Tell us your model, your capital position and your shareholding, and our regulatory team will give you a straight read on whether Malta fits — then build the category, structure and file to get you passported across the EEA. One point of contact from first call to launch.
