Crypto Overview in Malta

Regulatory data is for informational purposes only and may not reflect the most current legal developments. Always consult qualified professionals before making decisions.

Legal Classification & Regulatory Framework

Cryptocurrency Status

Malta was the first EU country to establish a comprehensive legal framework for digital assets, passing three landmark laws in July 2018: the Virtual Financial Assets Act (VFA Act, Cap. 590), the Malta Digital Innovation Authority Act (MDIA Act, Cap. 591), and the Innovative Technology Arrangements and Services Act (ITAS Act, Cap. 592). This legislation earned Malta the “Blockchain Island” label and positioned the jurisdiction as a global reference point for crypto regulation.

The VFA Act established a four-category classification system for distributed ledger technology (DLT) assets. Virtual tokens are utility tokens restricted to acquiring goods or services within a specific platform. Financial instruments (security tokens) fall under existing MiFID II regulation. Electronic money tokens are regulated under the Electronic Money Directive. All other digital assets, including most cryptocurrencies, are classified as Virtual Financial Assets (VFAs), the default category for assets used as a medium of exchange, unit of account, or store of value. The MFSA administered a Financial Instrument Test to guide classification under this framework.

Since 30 December 2024, the EU Markets in Crypto-Assets Regulation (MiCA) is the primary framework for crypto-asset service providers, effectively replacing the VFA Act for new applicants. Malta integrated MiCA into national law through Chapter 647 of the Laws of Malta, the Markets in Crypto-Assets Act, enacted as Act XIV of 2024. The VFA Act (Cap. 590) is scheduled for full repeal on 3 July 2026, once the transitional period closes.

Tax Treatment

Malta does not have standalone crypto tax legislation. Existing Income Tax Act provisions apply based on the asset’s classification and the nature of the holder’s activity. Capital gains on coins and utility tokens are generally not subject to income tax for individuals, as these assets do not appear on the list of capital assets in the Income Tax Act. Security tokens (financial instruments) may be subject to capital gains tax under existing securities rules. Active or frequent trading is classified as business income and taxed at progressive personal rates from 0% to 35%. Mining and staking rewards are also treated as business income.

The standard corporate tax rate is 35%, but Malta’s full imputation system allows shareholders to claim a refund of 6/7ths of the corporate tax paid upon dividend distribution, reducing the effective rate to approximately 5% when a Maltese holding and trading company structure is used. A fiscal unity option allows qualifying groups to pay the net effective rate directly, avoiding the cash-flow cost of paying 35% upfront and waiting for the refund. From 2026, EU Directive DAC8 requires CASPs to report user transaction data to tax authorities automatically, with the first international exchanges scheduled for September 2027.

Regulatory Oversight

The Malta Financial Services Authority (MFSA) is the sole competent authority for financial services and crypto-asset service providers, responsible for licensing, prudential supervision, and enforcement under MiCA. The MFSA published its MiCA Rulebook in March 2025. The Malta Digital Innovation Authority (MDIA) promotes and certifies innovative technology arrangements including smart contracts and DLT platforms, operating a Technology Assurance Sandbox for startups and participating in the European Blockchain Regulatory Sandbox and the European Blockchain Partnership. The Financial Intelligence Analysis Unit (FIAU) handles AML and counter-financing of terrorism (CFT) supervision of crypto service providers, issuing sector-specific implementing procedures under the Prevention of Money Laundering Act (PMLA) and conducting compliance examinations.

Business Environment

Banking Relationships

Crypto companies in Malta have historically faced difficulty securing banking services. Local banks have been cautious about onboarding crypto clients, citing AML compliance costs, risks to correspondent banking relationships, and reputational concerns that were particularly acute during Malta’s period on the FATF grey list from June 2021 to June 2022. Malta was the only EU member state to be greylisted during this period, following a MONEYVAL evaluation that found gaps between the legal framework and effective implementation. After demonstrating substantial reforms, MONEYVAL upgraded Malta to compliant or largely compliant on all 40 FATF Recommendations in its May 2021 follow-up report, and Malta exited the grey list in June 2022.

Many crypto businesses continue to rely on Electronic Money Institutions rather than traditional banks. The situation has gradually improved as the regulatory framework matured, and holding a VFA or CASP licence strengthens credibility with compliant financial institutions. Some providers, including Crypto.com (Foris DAX MT), have received authorisation to issue payment cards and offer bank transfer services in Malta.

Innovation Support

Malta’s 2018 “Blockchain Island” initiative was one of the most deliberate government efforts to attract the crypto industry globally, passing all three laws in a single parliamentary session. The MDIA operates a Technology Assurance Sandbox for technology operators and startups to develop DLT solutions under regulatory supervision. Government blockchain projects have included academic credential recording on distributed ledgers and blockchain-based land registration.

While the initial wave of interest peaked in 2018-2019 and was tempered by the FATF greylisting and a high dropout rate among VFA licence applicants (approximately 70% of firms that began the process ultimately withdrew), Malta’s accumulated regulatory experience has become an asset in the MiCA era. The MFSA’s eight years of crypto supervision under the VFA framework are cited by applicants as a key reason to choose Malta as a MiCA hub.

Crypto License in Malta

The Malta Financial Services Authority (MFSA) is the competent authority for CASP authorisations under MiCA, effective 30 December 2024. Malta’s 2018 VFA Act (Cap. 590) produced one of the world’s first four-class crypto licensing regimes (Classes 1 through 4). MiCA replaces that framework for new applicants while existing VFA licensees follow a streamlined conversion route. The MFSA stopped accepting new VFA licence applications on 1 August 2024. The VFA Act is scheduled for full repeal on 3 July 2026.

Licensing Requirements

MiCA capital thresholds vary by service type: EUR 50,000 for advisory and order-reception services, EUR 125,000 for brokerage and dealing, and EUR 150,000 for exchange, custody, and portfolio management. Applicants must satisfy fit-and-proper requirements for directors and qualifying shareholders, demonstrate sound corporate governance, and appoint a Compliance Officer and Money Laundering Reporting Officer (MLRO) both based in Malta.

The MFSA requires real operational substance in Malta at the time of submission, not post-authorisation. That means at least two resident executive directors with genuine decision-making authority, a physical office, and local oversight of outsourced activities. AML obligations under the Prevention of Money Laundering Act (PMLA) and the FIAU’s implementing procedures apply alongside MiCA requirements. The FIAU issued a EUR 1.2 million fine against Okcoin Europe in April 2025 for AML violations dating from 2023.

Authorised Activities

A Malta CASP authorisation covers the nine crypto-asset services under MiCA: custody; operation of a trading platform; exchange for funds or other crypto-assets; execution of orders; placing; reception and transmission of orders; portfolio management; advice; and transfer services. Authorisation from Malta enables passporting across all 27 EU member states by notification, with no separate re-authorisation required in each jurisdiction.

Application Process and Timeline

New applicants submit a full CASP Application Form following a required preliminary meeting with the MFSA. Beneficial owners, qualifying shareholders, directors, and senior managers must each complete a Personal Questionnaire. The MFSA may request clarifications or management interviews. A complete, well-prepared application typically takes three to six months.

Existing VFA licensees (Category A) qualify for the simplified procedure under MiCA Article 143(6): a board resolution, surrender of the VFA licence, and outstanding documentation from the 2024 MFSA thematic questionnaire. Category A applicants receive a 50% reduction in fees. All applicants must complete authorisation by 1 July 2026.

ESMA published a peer review on 10 July 2025 examining the MFSA’s authorisation of an unnamed CASP and found the authority only “partially met expectations.” Unresolved issues at the time of authorisation included ICT infrastructure, Web3 and custody arrangements, and conflict of interest management. ESMA recommended more thorough pre-authorisation assessment. The review also recognised the MFSA’s supervisory resources, sector expertise, and training programs, rating it as fully meeting expectations on institutional settings. The MFSA committed to implementing the recommendations.

Market Characteristics

Adoption Patterns

Malta’s crypto sector has evolved from a boom-era magnet for exchanges seeking regulatory clarity to a compliance-focused ecosystem. The early period attracted hundreds of crypto companies seeking VFA licences, though approximately 70% of firms that began the process ultimately withdrew, finding requirements more stringent than initially anticipated. The remaining operators tend to be well-capitalised, compliance-oriented businesses that treat Malta as a European base. Major platforms have deepened their Maltese operations: OKX (Okcoin Europe) received MiCA pre-authorisation on 22 January 2025 and subsequently acquired a MiFID II-licensed entity in Malta in 2025, expanding into derivatives. Gemini became the fifth CASP authorised by the MFSA and combined its MiCA licence with a MiFID II investment firm licence obtained in May 2025.

Industry Focus

Malta’s crypto industry centres on exchange operations, custody services, and stablecoin issuance, supported by a deep pool of compliance professionals, specialised legal firms, and audit experts built over years of VFA supervision. The MDIA’s Systems Auditors certification program, following ISAE 3000 standards, provides a structured approach to DLT system auditing. The jurisdiction has approximately 15 stablecoin-related licences as of early 2026, reflecting the growing issuer activity around MiCA’s asset-referenced token and e-money token frameworks.

Regulatory Evolution

Malta’s trajectory illustrates both the value and the limitations of first-mover status. The 2018 framework was a global benchmark, but the 2019 MONEYVAL evaluation exposed gaps between legislative ambition and on-the-ground implementation. The June 2021 FATF greylisting, which lasted approximately one year, forced an acceleration of AML reforms and strengthened the FIAU’s enforcement posture. The ESMA peer review of July 2025, while criticising specific aspects of the MFSA’s authorisation process, acknowledged the authority’s overall supervisory capability and recognised it as having built genuine expertise in digital asset supervision. As MiCA standardises requirements across the EU, Malta faces intensifying competition from other member states but retains the advantage of unmatched accumulated experience in crypto regulation, a mature local services ecosystem, and established relationships with major global exchanges.