Crypto Overview in Gibraltar

Regulatory data is for informational purposes only and may not reflect the most current legal developments. Always consult qualified professionals before making decisions.

Legal Classification and Regulatory Framework

Cryptocurrency Status

Gibraltar has established itself as one of the world’s pioneering jurisdictions in cryptocurrency and blockchain regulation. Cryptocurrencies are not considered legal tender in Gibraltar; however, the territory has adopted a progressive stance toward digital assets. Rather than attempting to classify cryptocurrencies as traditional financial instruments, Gibraltar’s regulatory approach focuses on the activities and services surrounding digital assets rather than the assets themselves.

Digital assets in Gibraltar are generally treated as property or assets for legal and tax purposes. This classification provides clarity for individuals and businesses engaging with cryptocurrencies while avoiding the complications that arise when attempting to fit novel technology into outdated regulatory categories. The Gibraltar Financial Services Commission (GFSC) and the government recognise cryptocurrencies as a legitimate asset class requiring appropriate oversight without stifling innovation.

Tax Treatment

Gibraltar operates a territorial tax system that taxes only income accrued in or derived from Gibraltar. The standard corporate income tax rate stands at 15%, raised from 12.5% effective 1 July 2024. Licensed DLT providers are deemed to carry on business from Gibraltar by virtue of their licence, meaning all income they generate is considered to accrue in Gibraltar and is therefore taxable at the standard rate. In December 2024, Gibraltar also enacted the Global Minimum Tax Act 2024, aligning with the OECD’s Global Anti-Base Erosion Model Rules and imposing a 15% minimum floor on in-scope multinational groups, applicable to fiscal years beginning on or after 31 December 2023.

Gibraltar imposes no capital gains tax, which means that individuals holding cryptocurrencies are not taxed on appreciation in value upon disposal, provided the activity does not constitute commercial trading. There is no value-added tax (VAT) on cryptocurrency transactions, no dividend tax, no withholding tax applicable to digital asset activities, and no inheritance or gift tax. This combination of tax advantages continues to attract crypto investors and businesses to the jurisdiction.

Regulatory Oversight

The Gibraltar Financial Services Commission (GFSC) serves as the primary regulatory authority overseeing cryptocurrency and distributed ledger technology activities. The GFSC operates under the Financial Services Act 2019 (FSA) and is responsible for licensing, supervising, and enforcing regulations applicable to firms using DLT to store or transmit value belonging to others, as well as firms providing virtual asset arrangements.

Gibraltar’s regulatory framework is built upon the Financial Services (Distributed Ledger Technology Providers) Regulations, which came into force on 1 January 2018, making Gibraltar the first jurisdiction globally to implement purpose-built cryptocurrency regulations. The framework is principles-based, with 10 core regulatory principles: Honesty and Integrity, Customer Care, Resources, Risk Management, Protection of Client Assets, Corporate Governance, Cyber Security, Financial Crime, Resilience, and Market Integrity (the 10th principle, added in 2021, addresses insider trading and price manipulation).

In October 2025, the Financial Services (Regulated Activities) (Amendment) Regulations 2025 brought Virtual Asset Arrangement (VAA) providers fully within the scope of the Financial Services Act 2019. Businesses arranging virtual asset exchanges without taking custody previously needed only AML-focused registration under the Proceeds of Crime Act 2015; they must now hold full Part 7 FSA permission and comply with the complete DLT framework.

All licensees must comply with AML, counter-terrorist financing (CTF), and counter-proliferation financing (CPF) requirements under the Proceeds of Crime Act 2015. The FATF Travel Rule applies from 22 March 2021 (full compliance from 22 September 2022) via the Proceeds of Crime Act 2015 (Transfer of Virtual Assets) Regulations 2021, with a EUR 1,000 threshold requiring firms to transmit specified originator and beneficiary information.

Business Environment

Banking Relationships

While Gibraltar has positioned itself as a crypto-friendly jurisdiction, access to traditional banking services remains a practical challenge for many cryptocurrency businesses, reflecting a broader global trend. Even with a structured licensing framework, startups and established DLT firms can encounter difficulties when opening corporate accounts.

Several financial institutions have developed expertise to service the sector. Xapo Bank represents a notable convergence of traditional banking and digital assets: it operates as both a fully licensed bank and a DLT Provider in Gibraltar, offering fiat and cryptocurrency services under one roof. Banks operating in this space typically require comprehensive documentation including clear business models, robust AML and KYC procedures, audited financials, and transparent ownership structures. Professional introductions through established legal and corporate service providers improve the likelihood of securing banking relationships.

Innovation Support

Gibraltar’s government has been a consistent supporter of blockchain technology. The collaborative approach between the government, the GFSC, and industry practitioners in developing the DLT regulatory framework exemplifies this commitment. In May 2025, Gibraltar launched the world’s first Digital Clearing and Settlement Framework for clearing and settling crypto derivative contracts through regulated central counterparties, developed jointly with Bullish and the GFSC.

While Gibraltar does not operate a formal regulatory sandbox, the GFSC may require new DLT firms to undertake testing phases and restricted operation periods with regulatory oversight, allowing businesses to validate their models before full market launch. The GFSC’s Innovation and Create Team continues to support businesses developing new products for the crypto economy.

Crypto License in Gibraltar

Operating a cryptocurrency business in or from Gibraltar requires authorisation from the GFSC. Since the October 2025 amendments, two licensing pathways exist within the DLT Framework: a DLT Provider licence for custodial businesses that use distributed ledger technology to store or transmit value belonging to others, and a Virtual Asset Arrangement Provider (VAAP) authorisation for non-custodial businesses that arrange the exchange of virtual assets without taking custody. Both pathways are subject to the full 10-principle regulatory framework.

Licensing Requirements

A DLT Provider licence is required for companies that use distributed ledger technology to store or transmit value belonging to others, operating in or from Gibraltar. This covers cryptocurrency exchanges, custodial wallet providers, payment processors, and similar businesses. Applicants must demonstrate compliance with all 10 regulatory principles covering business integrity, customer protection, financial crime prevention, cybersecurity, resilience, and market integrity.

A Virtual Asset Arrangement Provider (VAAP) authorisation is required for non-custodial businesses that arrange virtual asset exchanges, including over-the-counter trading desks and certain token issuance platforms. Following the October 2025 amendments, VAAP applicants no longer fall under the lighter-touch AML registration regime; they must apply for full Part 7 permission under the Financial Services Act 2019 and satisfy the same principles-based requirements as DLT Providers.

All applicants must appoint a Money Laundering Reporting Officer (MLRO) and implement risk-based AML and KYC procedures, with fit and proper assessments for individuals in regulated functions. Approximately 13 firms hold DLT licences in Gibraltar as of 2026, indicating the GFSC’s stringent approach to authorisation.

Authorized Activities

Licensed DLT Providers may operate cryptocurrency exchanges, provide custodial wallet services, facilitate crypto-to-fiat and crypto-to-crypto conversions, and offer related payment and settlement services. VAA Providers may arrange virtual asset exchanges in a non-custodial capacity. Both categories may serve retail and institutional clients, subject to compliance with the Financial Services (Core Principles and Consumer Duty) Regulations 2024, which set minimum standards of care for retail-facing businesses.

Crypto funds structured as Experienced Investor Funds (EIFs) may hold digital assets without requiring a separate DLT licence, provided the fund manager holds appropriate authorisation. Protected Cell Company structures are available for managers running multiple investment strategies under one vehicle, with no cap on assets under management, making Gibraltar attractive for institutional fund vehicles.

Application Process and Timeline

The application process covers four stages: pre-application engagement with the GFSC; initial application submission; full application pack including policies, procedures, governance documents, and individual regulatory function applications; and a review period culminating in a “minded to authorise” letter followed by operational verification. The full process typically takes 9 to 18 months.

Application fees range from approximately GBP 8,000 to GBP 28,000 depending on the complexity of the proposed business. Annual ongoing fees start at approximately GBP 10,000 and may reach GBP 30,000 or more for complex exchange or multi-service operations. Entities previously registered under the AML-only VASP regime and affected by the October 2025 amendments were required to notify the GFSC within 14 days and apply for Part 7 permission within six months to continue operating without a breach of the Act.

Market Characteristics

Adoption Patterns

Gibraltar has attracted significant interest from cryptocurrency businesses seeking regulatory clarity and a supportive business environment. Several prominent companies have established operations in the territory, drawn by regulatory certainty, favourable tax treatment, and access to skilled professional services. Licensed firms include eToro (through its eToroX subsidiary), Huobi (now rebranded as HTX), Xapo Bank, LMAX Digital, Bitso, and Gnosis, among others listed on the GFSC’s public register at fsc.gi.

The jurisdiction has become particularly attractive for cryptocurrency funds and institutional investment vehicles. There is no cap on assets under management for crypto funds in Gibraltar, and Protected Cell Company structures allow multiple investment strategies under one umbrella without requiring separate fund vehicles.

Industry Focus

Gibraltar’s cryptocurrency industry concentrates primarily on exchange services, custody solutions, and fund management. The regulatory framework’s focus on firms that store or transmit value belonging to others naturally attracts businesses operating in these areas. A robust professional services ecosystem has developed around the sector, including law firms, auditors, fund administrators, and corporate service providers with specialist expertise in blockchain and digital assets.

The territory maintains a unique relationship with the United Kingdom that preserves certain financial services access rights following Brexit, making it a strategic base for businesses seeking to serve both UK and international markets under a single regulated licence.

Regulatory Evolution

Gibraltar is not part of the European Union and is therefore not directly subject to the Markets in Crypto-Assets Regulation (MiCA). The territory’s principles-based DLT framework predates MiCA by several years and offers a more flexible, adaptive approach than the EU’s prescriptive rules-based regulation. The GFSC continues to refine its framework: further updates to the DLT Regulations are anticipated in 2026, with VASP registrations expected to be fully consolidated into the DLT Regs framework.

On tax transparency, Gibraltar committed to participating in the OECD’s Crypto-Asset Reporting Framework (CARF), with data collection beginning in 2026 and first automatic exchanges of information scheduled for 2027. This commitment signals continued alignment with international standards while preserving the jurisdiction’s competitive tax environment.