Crypto Overview in Portugal

Regulatory data is for informational purposes only and may not reflect the most current legal developments. Always consult qualified professionals before making decisions.

Legal Classification and Regulatory Framework

Cryptocurrency Status

Cryptocurrencies are legal to own, trade, and use in Portugal but are not recognized as legal tender. Under Law 83/2017 of 18 August 2017 (the Portuguese AML/CFT Law, as amended by Law 99-A/2021), virtual assets are defined as digital representations of value that can be electronically exchanged and accepted as a medium of exchange or investment. This definition is broader than the EU’s Fifth Anti-Money Laundering Directive (AMLD5), explicitly including assets accepted for investment purposes.

Security tokens are classified on a case-by-case basis by the CMVM. Tokens representing rights or obligations entitling holders to investment returns fall under Portuguese securities law. Non-fungible tokens (NFTs) are explicitly excluded from the crypto capital gains framework. With the transposition of MiCA via Law 69/2025, additional classifications apply: crypto-assets, asset-referenced tokens (ARTs), e-money tokens (EMTs), and utility tokens are now formally distinguished under Portuguese law.

Regulatory Authority

Portugal employs a “twin peaks” supervisory model for crypto-asset regulation introduced by Law 69/2025 of 1 December 2025. The Banco de Portugal (BdP) is the competent authority for CASP authorization, prudential requirements, governance, the issuance of ARTs and EMTs, and oversight of significant CASPs (those with at least 15 million average annual users). The Comissao do Mercado de Valores Mobiliarios (CMVM) supervises public offerings of crypto-assets other than stablecoins, market abuse prevention, conduct-of-business obligations, client protection, custody, and trading platforms. Under the CASP authorization procedure, applications are submitted to BdP, which notifies CMVM within two working days; CMVM then has 10-15 business days to issue a reasoned opinion, and silence within that window is deemed no objection.

Prior to the MiCA framework, BdP was the sole VASP registration authority under Law 83/2017, with registration requirements focused exclusively on AML/CFT compliance. Portugal published its MiCA implementing legislation one year after the regulation became directly applicable EU-wide, delayed by a snap parliamentary election in March 2024 and subsequent government instability. The Portugal FinLab, jointly operated by BdP, CMVM, and ASF (the insurance supervisor), serves as a communication channel between innovative firms and regulators.

Tax Treatment

Portugal was historically regarded as a crypto tax haven, but the 2023 State Budget (effective 1 January 2023) introduced a dedicated crypto tax framework under the personal income tax (IRS) system, replacing prior administrative interpretation with statutory rules.

For individuals, Category G capital gains rules apply to crypto disposals. Gains on crypto held for less than 365 days are taxed at a flat 28% rate. Gains on holdings of 365 days or more are exempt, provided the asset is not a security-type token and the counterparty is not in a blacklisted jurisdiction. The FIFO method determines acquisition cost; losses carry forward for five years when income is aggregated.

Category E (investment income) applies to staking rewards and lending interest, taxed at a flat 28% rate with no 365-day holding exemption. For crypto-denominated rewards, the taxable event arises on conversion to fiat, not on receipt. In October 2025, the Autoridade Tributaria e Aduaneira (AT) issued binding guidance that a purely technical, immediate swap to a stablecoin solely to enable fiat conversion is not a separate taxable disposal; the taxable event is the eventual fiat conversion.

Mining and professional trading income is Category B (professional/business income), subject to progressive IRS rates of 14.5%-53%; under the simplified regime, a 0.95 coefficient applies to mining (95% of income is taxable). Crypto received as employment remuneration is Category A income at progressive rates. Income from blacklisted tax haven jurisdictions faces a 35% rate. Stamp duty of 10% applies to gifts and inheritance of crypto-assets. For corporations, the standard 21% IRC rate applies; qualifying entities in the Zona Franca da Madeira benefit from a 5% rate. Crypto exchange services are exempt from VAT under ECJ case law. Since 2024, all crypto transactions must be reported annually, and service providers must report all client operations to the AT by 31 January (Law 82/2023); DAC8 data sharing extends AT visibility to cross-border holdings.

Business Environment

Banking Relationships

Banking access for crypto businesses in Portugal varies by institution. Major banks including Millennium BCP, Santander Totta, and Novobanco apply individual risk assessments; no blanket prohibition on crypto-related accounts exists, though some users have experienced account limitations. Bison Digital Assets, a subsidiary of Bison Bank, became Portugal’s first bank-owned registered VASP in 2022, offering custody and trading services primarily for high-net-worth clients and expanding into real-world asset tokenization.

The neo-banking sector is active, with approximately 31 digital banks operating in Portugal including Revolut, Nexo, and Wirex. According to a 2024 study, roughly 43% of Portuguese investors held digital assets, nearly double the European average.

Innovation Support

Portugal has cultivated a strong fintech and blockchain ecosystem. The DLT Pilot Regime (Decree-Law 66/2023) implements the EU framework for blockchain-based market infrastructures, permitting trading and settlement of shares, bonds, and fund units on distributed ledger technology under a six-year testing period supervised by CMVM. Lisbon’s tech ecosystem is anchored by Web Summit (committed until 2028), and blockchain accounts for approximately 36% of all venture capital funding in Portugal. An estimated 22% of Portuguese startups use blockchain technology. Seven Portuguese tech unicorns, collectively valued at EUR 34 billion, demonstrate the broader ecosystem’s maturity. Mercado Bitcoin invested EUR 50 million in Portugal in 2025 for its European expansion, selecting the country as its EU base under the MiCA passporting regime.

Crypto License in Portugal

Portugal’s CASP licensing framework was restructured in late 2025. Law 69/2025 of 1 December (published 22 December 2025) transposed MiCA Regulation (EU) 2023/1114 into Portuguese law, replacing VASP registration with a full authorization regime jointly administered by BdP and CMVM. Authorized CASPs gain EU-wide passporting rights under MiCA’s single rulebook.

Licensing Requirements

Under the MiCA framework as implemented by Law 69/2025, CASP authorization requires substantially more than the former VASP registration. Applicants must establish a Portuguese legal entity, maintain a registered office and effective management in Portugal, and submit a comprehensive application to BdP covering: detailed business plan and financial projections; governance arrangements meeting MiCA Article 68 standards; DORA-compliant information and communications technology risk management; safekeeping arrangements for client crypto-assets and funds (MiCA Article 70); conflicts of interest policy; complaints-handling procedures; and a full AML/CFT compliance program meeting Law 83/2017 requirements.

Under the prior VASP regime (Law 83/2017, Article 89-A et seq.), requirements were lighter: Portuguese legal entity with physical presence, minimum share capital of EUR 5,000, appointment of a Money Laundering Reporting Officer, and a basic AML/CFT program. BdP halted new VASP registration applications in December 2024 pending the MiCA transition; approximately 10 entities held active registrations eligible for the transitional regime. Penalties under the new framework reach EUR 5 million for companies and EUR 2.5 million for individuals, with market abuse infractions carrying fines up to 15% of annual revenue.

Authorized Activities

MiCA defines 10 categories of crypto-asset service, each of which must be individually specified in a CASP authorization: custody and administration; operation of a trading platform; exchange for fiat or other crypto-assets; execution, placing, reception and transmission of orders; investment advice; portfolio management; and transfer services on behalf of clients. Authorized CASPs may passport their services to other EU member states by notifying BdP, which coordinates with ESMA and the host state regulator, removing the need for separate national licenses in each jurisdiction.

Application Process and Timeline

Applications for CASP authorization are submitted to BdP. BdP must notify CMVM within two working days of receiving a complete application. CMVM then has 10-15 business days to issue a reasoned opinion identifying any grounds that could prevent a favorable decision; silence within this window is treated as no objection. BdP takes the final authorization decision. Under MiCA Article 14, the competent authority has 25 working days to assess completeness and 40 working days to reach a decision on a complete application.

CASP authorization applications became possible in Portugal only from late December 2025, following the enactment of Law 69/2025. VASPs registered with BdP before 30 December 2024 that had commenced and notified their activity may continue under the transitional regime until 1 July 2026 or until their CASP authorization is decided, whichever is earlier. Entities registered but without commenced activity by that date had their registrations automatically expire. The Zona Franca da Madeira’s 5% IRC rate remains available to qualifying CASP entities established there.

Market Characteristics

Adoption Patterns

Portugal has achieved above-average cryptocurrency adoption driven by a technically skilled population, favorable living conditions that attract digital nomads and international entrepreneurs, and what was historically one of Europe’s most accommodating tax environments for crypto. The 43% digital asset ownership rate among Portuguese investors (2024 study) positions the country well above the European average. Consumer adoption spans retail trading through both domestic and international platforms, with euro on-ramps widely available through licensed exchanges, neo-banks, and payment apps.

Industry Focus

Portugal’s crypto industry strengths lie in exchange services, payment processing, fintech development, and increasingly in real-world asset tokenization and blockchain infrastructure. The country’s large community of software engineers and its status as a European tech hub support development activities across the ecosystem. Notable examples include Criptoloja, one of Portugal’s earliest registered crypto exchanges and a pioneer in domestic retail crypto trading; Bison Digital Assets, bridging traditional private banking with digital asset custody; and xMoney (formerly Utrust, founded in Portugal), a payments platform that raised USD 21.5 million in September 2025 from the Sui Foundation and is developing MiCA-compliant stablecoins (EURXM, USDXM) targeted for launch in mid-2026. The Zona Franca da Madeira continues to attract crypto businesses seeking a 5% corporate tax rate within an EU-regulated environment.

Regulatory Evolution

Portugal’s regulatory journey moved through three phases. First, effectively zero taxation on long-term crypto holdings made the country a magnet for investors and digital nomads. Second, the 2023 State Budget introduced the current 28% short-term and 0% long-term framework. Third, MiCA transposition came late: Portugal published Laws 69/2025 and 70/2025 in December 2025, a year after MiCA became directly applicable EU-wide, due to political instability. During most of 2025, no competent MiCA authority was designated and BdP accepted no new VASP applications. Full enforcement begins 1 July 2026.

Portugal’s FATF 4th round mutual evaluation (adopted November 2017) found a sound AML/CFT regime but identified weaknesses in non-financial business supervision and low STR volumes. The introduction of VASP registration requirements under Law 99-A/2021 addressed virtual asset gaps. The EU Anti-Money Laundering Regulation (AMLR), applicable from 10 July 2027, will extend AML obligations further across the crypto sector.