Malta comes up in almost every conversation we have with founders weighing an EU license. It’s an EU member state, so a Maltese authorization can be passported across the bloc, and the Malta Financial Services Authority (MFSA) has a reputation for being approachable but thorough. What founders often get wrong is the capital figure. Older articles quote numbers that no longer apply, and a budget built on them can be badly off.
Here’s the picture as it stands now, with the caveats you should know about.
What a Malta “forex license” actually is
There’s no licence literally called a forex licence. What brokers mean is an investment services licence from the MFSA, issued under Malta’s Investment Services Act and the EU’s MiFID framework. Forex and CFD brokerage fall under specific investment services within it, such as execution of client orders, and the permissions you apply for determine your category and your capital.
As with other EU regulators, an authorized Maltese firm can passport its services into other EU/EEA countries, subject to each country’s local conduct and marketing rules.
Licence categories in plain English
Malta has historically sorted firms into categories, and many guides still use those labels. The MFSA has been updating its terminology, so check the current rulebooks, but the logic is stable.
| Category | What it allows | Relevance to forex brokers |
| 1A / 1B | Advice, and reception and transmission of orders, with no holding of client money | Introducing-style models only |
| 2 | Broader services, including holding client money, but not dealing on own account | Common for execution-only brokers who hedge flow with liquidity providers |
| 3 | The broadest scope, including dealing on own account | Market-maker style brokers |
The practical question is the same one we ask every founder: will you pass client flow to liquidity providers, or take the other side of client trades yourself? That answer decides your category and your capital more than anything else.
Initial capital: why older numbers mislead you
You’ll still see figures like €125,000 for Category 2 and €730,000 for Category 3 in many guides. Those reflect the older regime. Under the current investment firms’ prudential framework, the minimum initial capital bands are generally described as:
| Business profile | Minimum initial capital |
| Services where no client money or securities are held | €75,000 |
| Services where client money or securities are held | €150,000 |
| Dealing on own account, underwriting, or firm-commitment placing | €750,000 |
Two cautions:
- These are minimums at authorization. Ongoing own-funds requirements can be higher, because they’re tied to your fixed overheads and the risks you run.
- Sources disagree on labels and figures, so confirm the current numbers directly with the MFSA or a Maltese adviser before you budget.
Who the MFSA actually assesses
A licence is as much about people as capital. The MFSA looks closely at the integrity, competence, and financial soundness of:
- Directors and senior managers
- The CEO or equivalent
- The Compliance Officer
- The Money Laundering Reporting Officer (MLRO)
- Other key function holders for risk, internal controls, and outsourcing.
You’ll also need to show who is accountable for each control area, and who will perform and oversee it once the firm is live. Applications that name people without showing real responsibility tend to attract the most questions.
The process, stage by stage
The MFSA process is typically described in three stages rather than a fixed calendar.
| Stage | What happens |
| Preparatory | Early meeting with the MFSA, drafting the application and supporting documents, MFSA review of the draft |
| Pre-licensing | “In principle” approval, incorporation of the company, and submission of the final signed application |
| Post-licensing, pre-commencement | Satisfying remaining conditions before business can start |
Two points matter here. First, in-principle approval isn’t permission to trade; you can’t start business until the final authorization and conditions are met. Second, the MFSA has been updating its submission process, with filings from October 2026 reportedly starting with an intent submission through its portal. Check the current procedure before you plan your timeline.
Overall timelines vary widely with application quality and MFSA workload. We’d rather not give a single number, and we’d be cautious about any adviser who promises a precise date.
What to prepare
Be prepared to create some serious documentation, not a form:
- Detailed business plan and financial projections
- A service and financial flow plan detailing your services as a programme of operations
- Governance, risk management, conflicts of interest and outsourcing policies.
- An AML/CFT procedure and a business risk assessment.
- The documents relating to ICT and operational resilience
- Fit and proper information of members, directors and key staff, including source of funds and wealth.
Simple, straightforward paperwork goes quicker. Delays are often due to conflicts between your business plan and your policies.
Substance: a point to verify, not assume
One question that founders frequently ask is how many people and an office they require in Malta. Well, the truth is that it’s subjective, based on your model and what the MFSA expects in your particular case, and there are no published guidelines that have a single headcount. What is evident is that the regulator is looking for actual control and governance of the business and not a shell. When planning your project, be sure to communicate with the MFSA or local adviser before assuming about the structure of your project, such as whether you plan to outsource.
After authorization: what changes
Licensing does not end compliance; it begins it.
- EU retail CFD rules on leverage limits, risk warnings, negative balance protection.
- Strict marketing and promotion rules having impact on IB programmes and advertisements
- Reporting of regulatory and transactional information.
- Operational resilience and ICT needs
- Continuous assessment of capital adequacy issues.
One thing that brokers who come from offshore regimes tend to overlook is this. Plan your marketing, IB, and product strategy from the ground up based on these rules.
Common mistakes
- Using old capital estimates
- Making a selection of category before determining the business model.
- Assigning names to significant individuals who cannot show good character.Designating names of important individuals who cannot show accountability!
- Lack of adequate source of funds for shareholders
- Waiting for the approval before finalizing technology, banking and liquidity
- When “in-principle” is approved, it means that you can begin trading.
Is Malta the right fit?
Malta is for founders who have the vision and the means to back EU credibility and passports. An offshore route might be more appropriate, though, if you’re in a hurry to launch, or have a light touch plan, and the banking and trust implications that go along with it.
How Device Doctor India can help
The licence is one half of the work. The other half is the technology and operations around it: a CRM with compliant onboarding and KYC, back-office reporting, IB and affiliate controls that respect marketing rules, and payment and platform integration. We build that layer for forex brokers and plan it alongside your licensing timeline, so it’s ready when authorization arrives. See how it fits together in our Forex CRM work.
This guide is general information, not legal advice. Requirements and fees change, so confirm current details with the MFSA or a qualified Maltese legal adviser before applying.
If you’re planning a Malta application and want the technology built in step with it, book a free consultation or call Device Doctor India directly at +91 81144 71036.
Current bands are generally €75,000, €150,000, or €750,000 depending on whether you hold client money and whether you deal on own account. Confirm with the MFSA.
It appears in older guides from the previous regime. Check current MFSA rules, which describe higher-capital firms differently.
Generally yes, through passporting, though local marketing and conduct rules still apply.
No. You must complete the final authorization steps and conditions first.
It offers more credibility and EU access, with higher cost and tighter rules. The right choice depends on your clients and budget.
