Crypto License in Gibraltar

Is This Route Right for Your Project?

Consider this route for DLT storage or transmission of others’ value in or from Gibraltar. Identify who controls customer assets and check target-market rules.

Own-account trading without client service and pure software or research can fall outside. Exchange arrangements can require permission without custody.

DLT Permission and VAA Permission

Activity	Regulatory Output	Authority	Key Requirement	Limitation
Store or transmit others’ value using DLT	DLT Part 7 permission	GFSC	Meet applicable principles	Exclusions apply
Exchange or arrange exchanges of virtual assets with money or other virtual assets	VAA Part 7 permission	GFSC	Activity-specific safeguards	Permission may be required without custody

You may need additional permissions if your services involve securities, payments or electronic money.

Activities and Business Models

• For custodial exchanges and wallets, check who controls customer assets and holds the keys.
• For custody and transfer services, identify who stores or moves customer value.
• Noncustodial brokers may need VAA permission when arranging over-the-counter (OTC) exchanges.
• For token issuance, lending, NFTs and stablecoins, assess product functions and applicable financial-instrument or electronic-money rules.

Regulation can still apply to decentralized services.

Fees and Capital Resources

Work or Cost	Professional Fee	Official Fee	Third-Party Cost	Dependency
Application preparation and filing	Agreed for included tasks	£45,000 initial DLT/VAA application	Setup costs as applicable	Activities and permissions
Annual supervision	Ongoing support agreed separately	G1 calculation below; £4,017 AML supervision	Compliance and audit costs as applicable	Activity and volume
Company and office setup	Confirm included tasks	Applicable setup charges	Office and local-provider costs	Required arrangements

The annual G1 fee combines £12,254, 0.1% of relevant trade value (capped at £92,700) and an additional £28,183. Trade value means DLT reported volume or VAA trades arranged. Additional permissions and approved-person charges can add costs.

The company must also have enough financial resources to cover its risks and pay its debts if it stops operating. These funds belong to the company and are not a fee paid to the regulator.

There is no £50,000 minimum that applies to every provider.

What to Prepare

To assess your plans and identify the requirements that apply, provide the following information and documents:

• Owners, ultimate beneficial owners (UBOs), directors, managers and key persons; founder residence
• Products, customers, target markets, custody or control arrangements and revenue model
• Fiat and asset flows, counterparties and expected volumes
• Entity’s details, ownership chart and sources of wealth and funds
• Business plan, financial forecasts, policies, technical and security documents, and previous applications.
• Your office, capital and governance plans, including who is responsible for money-laundering reporting.

Timeline

GFSC’s best-endeavoured DLT review target is nine months: five for Stage 1, two for Stage 2 and two for Stage 3. Work starts after the required fee payment and information arrival, and may pause for further information.

Client information and setup, consultant preparation and bank account opening might take longer time. The DLT target is neither a VAA timeline nor a launch promise.

Which Rules Apply

Part 7 permission covers relevant activities in or from Gibraltar under the Financial Services Act 2019 and Financial Services (DLT Providers and VAA Providers) Regulations 2020.
DLT covers business use of distributed ledger technology to store or transmit value belonging to others.
VAA covers exchanging virtual assets for money or other virtual assets, including arranging these exchanges. Check whether any exclusions or other financial-services rules apply. GFSC supervises both categories. VAA authorization now goes beyond AML registration.

DLT providers must follow ten regulatory principles proportionate to their risks. The Proceeds of Crime Act 2015 and applicable GFSC guidance provide the basis for financial-crime controls. Your permission lists permitted activities. It does not give unrestricted foreign-market access.

Current Regulatory Status

Regime	Authority	Current Status	Source	Applicant Action
DLT	GFSC	Part 7 permission	2020 Regulations	Assess customer-value activities
VAA	GFSC	Part 7 permission; inclusion effective 27 October 2025	2020 Regulations	Assess exchange arrangements
Provider status	GFSC	Live register with linked permissions	DLT Providers Register	Check firm and permitted services

Duties After Approval

Providers must maintain governance and adequate resources, manage risks, protect customers, keep systems secure and remain resilient. The ten DLT principles also address honesty, fair treatment and market integrity. AML/CFT/CPF stands for anti-money laundering, counter-terrorist financing and counter-proliferation financing. Match controls, monitoring and suspicious-transaction reporting to your risks. For VAA services, tailor safeguards to how you hold assets and handle client money.

Plan for recordkeeping, reports, required audits and annual fees. Tell GFSC promptly about events affecting compliance with the principles. Follow the applicable procedure for material changes and changes to controllers or key persons. Notify the GFSC at least 30 days before declaring dividends or deciding to distribute capital. The company may make the payment only if the GFSC has not objected.

Permissions Before Launch

Get the required permissions before you begin regulated activities. Breaching regulatory rules can lead to administrative penalties. GFSC can also prohibit an unfit person from specified functions.

Banking and Operational Setup

A license does not guarantee acceptance by a bank, electronic-money institution (EMI) or payment-service provider (PSP). Each institution assesses risk differently, so allow time for its account-opening process.

Prepare ownership, funds or wealth documents, flows, markets, counterparties, volumes and compliance controls.

Taxes on Business Income

Since 1 July 2024, the standard corporation tax rate for most companies has been 15%. Business profits or gains are taxable if they accrue in or are derived from Gibraltar. Income is not automatically exempt because your customers are overseas. Check your structure’s income source and tax residence. Consider individual and transaction taxes separately.

Compare Relevant Regulatory Routes

Regime	Regulator	Market Scope	Key Requirement	Limitation
Gibraltar DLT	GFSC	Activities in or from Gibraltar	Local office and management	No MiCA passport or automatic UK access
EU MiCA CASP	National authority	Union cross-border services	EU office, effective management and Article 65 notification	Requires EU authorisation
Georgia VASP	National Bank of Georgia	National virtual-asset services	Registration	No EU passport
UK crypto	FCA	UK activities and consumer promotions	Assess AML, promotions and regulated-token rules	Future FSMA crypto rules start 25 October 2027