Banks with MiCA license in Spain: verified list as of October 2026

As of 2 October 2026, six Spanish credit institutions are listed in the CNMV register as authorized to provide crypto-asset services under MiCA: BBVA, Openbank, Cecabank, Renta 4 Banco, CaixaBank and Kutxabank. They do not have a CASP authorization: they have notified it through the Art. 60 route. In addition, the CNMV has authorized nine Spanish CASPs.

Verified on 2 October 2026 in the CNMV register of crypto-asset service providers (list updated that same day) and in the ESMA interim MiCA register (update of 30 September 2026). The list changes: check it before making a decision.

What is a bank's “MiCA license”

The press calls it a license, but a bank is not authorized as a CASP from scratch. Art. 60.1 of Regulation (EU) 2023/1114 (MiCA) allows a credit institution to provide crypto-asset services if it notifies its competent authority at least 40 business days in advance of starting. In Spain, that authority is the CNMV. Other already authorized entities, such as investment firms or central securities depositories, have the same route, but limited to services equivalent to their original authorization.

A company that is not a financial institution, however, needs full authorization as a crypto-asset service provider (CASP), with the application and assessment under Arts. 62 and 63.

MiCA lists ten services (Art. 3.1.16): custody and administration, operation of a trading platform, exchange of crypto-assets for funds, exchange for other crypto-assets, execution of orders, placement, reception and transmission of orders, advice, portfolio management and transfer. Each entity notifies only those it intends to provide, and the register reflects what it can do, not what it has already launched to the client.

The six banks in the CNMV register

Dates and services according to the CNMV register; Member States column according to the ESMA register. What the table shows:

• The six have remained in custody and order routing. None has notified a trading platform, exchange on own account, placing, advice or portfolio management of crypto-assets.
• Only Openbank provides services outside Spain according to ESMA. Its service was launched on 16 September 2025 in Germany, with Spain announced for the following weeks, according to the statement from Santander Group.
• BBVA was the first. It opened bitcoin and ether trading and custody to all its retail clients in Spain from the app on 4 July 2025, according to its statement.
• Cecabank is a wholesale bank: its scope (custody, orders and transfers) is designed to serve other institutions rather than the public.
• CaixaBank and Kutxabank share a date, 27 March 2026. As of 2 October 2026, no other Spanish credit institution appears in the register.

The nine Spanish CASPs authorised by the CNMV

Bit2Me was the first. The others arrived around the end of the transitional regime: five in the second half of June 2026 and three after 1 July. The register also includes a Spanish branch of a German CASP (IG Europe) and more than 160 providers from other States operating under the European passport (art. 65), such as Coinbase, Bitpanda or OKX.

The practical difference from banks: a CASP is not a credit institution, does not take deposits and must keep its clients' money at a credit institution or a central bank (art. 70.3). A notified bank handles the euro part within the same entity.

What the MiCA notification does not authorise

• Nothing on security tokens. A tokenized security falls outside MiCA (art. 2.4) and is governed by the Ley 6/2023 and MiFID II. Having the notification adds or removes nothing for issuing, holding in custody or distributing them. We explain it in why security tokens do not fall under MiCA.
• It does not turn the bank into an ERIR. The ERIR is the entity that keeps the register of tokenized securities (art. 8 of Ley 6/2023 and RD 814/2023). The CNMV's register of ERIRs lists as of 2 October 2026 one entity, URSUS-3 Capital, the first authorised ERIR (November 2024). The press published in May 2026 the authorisation of Bestinver Securities, which does not yet appear in the register.
• It does not allow issuing stablecoins. An asset-referenced token requires authorization or, for a bank, approval of the white paper (arts. 16 and 17). An electronic money token requires being a credit or electronic money institution and notifying its white paper (arts. 48 and 51). In Spain they are supervised by the Bank of Spain (art. 251.h of Ley 6/2023).

What changes for an issuer of security tokens

Your legal regime does not change. What changes is the availability of regulated counterparties in Spain for what surrounds the issuance: custody of ancillary crypto-assets, such as a stablecoin used for settlement, and euro accounts linked to the operations. Custody of the tokenized security itself follows securities rules, not MiCA rules (see custody of security tokens in Spain).

The infrastructure map has also moved: on 26 November 2025 the CNMV authorised Spain's first DLT trading and settlement system, by Securitize Europe Brokerage and Markets, S.V., under the DLT Pilot Regime.

HokenFi is a technology platform for issuing tokenized securities. It is not a bank, a CASP or an entity authorised by the CNMV: the regulated steps are carried out by authorised partners.

How to check the list yourself

1. On the CNMV website, go to Queries to official registers and then to Crypto-asset service providers. Download the list in PDF.
2. Look at the «Entity types» column: «CREDIT INSTITUTION (SPAIN)» is a bank notified under art. 60; «PSC (SPAIN)», a CASP authorised by the CNMV; «PSC UNDER LP REGIME», a provider from another State with a passport.
3. The last column gives the date from which each entity can provide MiCA services, and the third column, the services.
4. To find out in which countries each one provides services, download the CASP file from the ESMA register and filter by State of origin.

The full context of the end of the transitional period is in MiCA in Spain: timeline and status after 1 July 2026.

This content is informative and educational. It does not constitute legal, tax, or investment advice. Check the current version of each regulation in the BOE and on EUR-Lex.

HokenFi is a software and infrastructure provider; it does not provide regulated services (CASP, ESI, EAF, or ERIR). This article is informative and does not constitute financial or legal advice.