For most of the last decade, launching a payments company, a crypto exchange or an investment brokerage followed a predictable and painful script. You incorporated, hired a compliance officer or two, drafted manuals nobody outside the firm would ever read, and then you waited — sometimes for a year and a half or more — while a regulator worked out whether you were fit to trade. Plenty of good businesses never made it out of that waiting room. That script is now being rewritten, and the people rewriting it are the founders themselves.
Rather than starting from a blank page, a growing number of entrepreneurs are buying companies that already hold the permissions they need, or leaning on specialist advisers to push an application through faster than they ever could alone. Marketplaces such as Financial License Market have taken what used to be a strictly word-of-mouth trade — one lawyer quietly knowing another with a dormant electronic money licence to sell — and turned it into something closer to a transparent listings service, where a buyer can compare jurisdictions, permissions and asking prices in an afternoon.
The other half of that equation is advisory muscle. Regulatory consultancies like Zitadelle AG, which works across more than forty jurisdictions on payment, e-money, crypto-asset and gaming mandates, spend their days doing the unglamorous translation work: turning a dense national rulebook into an application a regulator will actually sign off. Between the marketplace and the adviser, the timeline that once ran to eighteen months can, in the right circumstances, shrink to a matter of weeks.
Why the shift is happening now
Three things have converged. The first is cost. Compliance has become the single heaviest line item in a young financial firm’s budget, and it arrives long before the first customer does. Anti-money-laundering systems, transaction monitoring, audited capital, a board with the right pedigree — none of it is optional, and all of it is expensive to build from scratch.
The second is regulatory tightening. Europe’s Markets in Crypto-Assets framework brought crypto firms fully inside the perimeter, and the international travel rule now follows funds across borders in a way it simply did not five years ago. Regulators are asking harder questions, and they are asking them earlier. A licence that already exists, with a supervisory track record attached to it, sidesteps a great deal of that scrutiny.
The third is speed itself. In fast-moving sectors — payments, digital assets, online trading — being twelve months late to market is often the same as not arriving at all. A competitor with a ready-made permission can be live and taking clients while a rival is still drafting its business plan for a case officer who has not yet been assigned.
A licence is only as good as what sits behind it
None of this makes buying a licence a shortcut around the rules, and anyone selling it that way should be treated with suspicion. A permission is a living thing. It comes with reporting obligations, capital requirements, and a regulator who expects the people running the business to know exactly what they have taken on. Buy a shell without understanding its history and you inherit its problems — unfiled returns, a compliance framework that exists only on paper, or worse, a past the previous owners would rather you did not look into too closely.
This is where the due diligence matters more than the price tag. Serious buyers commission a full review before signing: who the ultimate beneficial owners were, whether the firm ever actually traded, whether its AML manuals reflect current law or were photocopied from a template in 2019, and whether the regulator has any open questions on file. The gap between a clean licensed entity and a distressed one is the difference between a running start and a very expensive liability. Good advisers earn their fee precisely here, in the reading of the small print that a founder in a hurry would rather skip.
Jurisdiction is a strategy, not a formality
Where a firm chooses to be licensed shapes almost everything that follows: which clients it can serve, how it is taxed, how much capital it must hold, and how a bank or payment partner will view it. A European e-money institution carries weight with counterparties but comes with demanding oversight. Offshore and mid-shore centres — the likes of Mauritius, Labuan in Malaysia, or several Caribbean jurisdictions — can offer a lighter, faster path, but reputable ones now expect substance: real staff, real offices, real governance, not a nameplate on a wall.
The old assumption that “offshore” meant “no questions asked” has not survived the last few years of international pressure. The credible jurisdictions have professionalised, and that is arguably good news for legitimate operators, because it means the licence they hold is one their banking partners will actually respect. Choosing between them is less a box-ticking exercise than a genuine business decision, and it rewards advice from people who have run applications through those same regulators before and know how each one behaves in practice.
Where this leaves founders
The romance of building a regulated business entirely from the ground up is fading, and few in the industry are mourning it. The founders winning today tend to be the ones who treat licensing as a market to be navigated rather than a rite of passage to be endured. Some buy; some apply with expert help; many do a bit of both, acquiring a base permission in one jurisdiction while an adviser builds out a fresh application in another.
What has not changed is the need to do it properly. A licence bought carelessly is a lawsuit waiting to happen, and a regulator who feels misled is the hardest audience a financial firm will ever face. But for those who go in with clear eyes, the right due diligence and the right people in their corner, the path into regulated finance has never been shorter — or, handled well, safer. The waiting room, it turns out, was never as unavoidable as everyone assumed.
