7 October 2026 · 3 min read
Crypto exchange licence requirements, what a developer can and cannot tell you
Where the licensing question actually sits, what it tends to cost, and the four build decisions that change your regulatory position whether you meant them to or not.
Every developer who answers this question confidently is guessing with your money, including us. What a developer can tell you is which build decisions change the question, and that is genuinely useful before you speak to a lawyer.
The four decisions that move the answer
1. Do you hold customer funds? Custodial means you are responsible for other people's money. This is the single biggest regulatory trigger, and it is why non custodial designs exist.
2. Do you touch fiat? Crypto to crypto and fiat on ramps are regulated very differently almost everywhere. A P2P venue where fiat moves between users is not the same as one where it passes through you.
3. Who are your users, and where? Jurisdiction follows your users, not your server. Blocking a country is a product decision with regulatory consequences and it belongs in the build from day one, not bolted on later.
4. Do you offer leverage? Derivatives are usually a separate and much heavier regime than spot. Futures and perpetuals is a licensing conversation before it is an engineering one.
What it tends to cost
Public figures from operators in adjacent markets put licensing in the tens of thousands, and in heavily regulated jurisdictions considerably more, before any development spend. One operator interviewed publicly put licensing at around thirty thousand dollars against forty thousand for development.
Treat those numbers as a sense of scale, not a quote. The spread between jurisdictions is enormous and the rules move.
If the licence costs more than the build, that is normal. It is also the reason buyers start by asking what software costs, when the software is the cheaper half.
What we build regardless of your answer
Some things belong in an exchange whether or not a regulator ever asks:
- An audit trail on every admin action, especially withdrawal approvals
- A reserve report, comparing holdings with customer liabilities, on demand
- KYC hooks, even if you start with manual review
- Exportable statements per user and per period
- Geo controls that can block signups or trading by country
Retrofitting any of those after the first letter arrives is a bad month. Building them from the start costs almost nothing extra.
The honest division of labour
Your lawyer answers whether you need a licence, which one, and what it costs. We answer what the software must do to satisfy it, and build it so the evidence exists when it is asked for. Anyone offering both from one desk is selling you a comfortable answer.
Questions
Is a licence needed to run a crypto exchange
It depends on your jurisdiction, whether you hold customer funds, whether fiat is involved and where your users are. It is a legal question, and a developer who answers it confidently is guessing.
How much does a crypto exchange licence cost
Public figures from operators run into the tens of thousands before development, and far more in strictly regulated jurisdictions. The spread between countries is wide enough that only a lawyer can quote yours.
Can I avoid licensing by being non custodial
Not holding customer funds removes the largest trigger in most places, which is why non custodial designs exist. It does not automatically remove every obligation.
What should the software do for compliance
Audit every admin action, produce a reserve report on demand, support KYC hooks and exportable statements, and allow geographic blocking. Those are cheap at the start and expensive to retrofit.
Does blocking a country actually work
Signup and trading controls plus IP checks block casual access, not determined users. They are a necessary signal of intent rather than a guarantee, and your lawyer should say which ones you need.
Can you handle licensing for me
No. We build the software and the evidence it has to produce. Licensing is a lawyer's job in your jurisdiction, and we would rather say so than sound reassuring.