DeFi Intel
Home · Regulation · Jurisdiction Guides · Cyprus

Cyprus Curated

DeFi Intel Research Desk2026-07-14Asia

ISO 3166-1CY
RegionAsia
CapitalNicosia
Population1.25M
GDP rank (global)#107
Profile depthCurated

Yes — cryptocurrency is legal in Cyprus. Current status: Legal — MiCA fully operative. Oversight sits with CySEC — MiCA competent authority. Full details — governing law, licensing, tax and dated enforcement history — follow below (last reviewed 2026-07-14).

Legal status

Legal — MiCA fully operative

Primary regulator

CySEC — MiCA competent authority

Stablecoin status

Allowed — MiCA EMT/ART rules apply directly

Framework: MiCA (Regulation (EU) 2023/1114), with CySEC as competent authority; legacy national CASP registration under the AML/CFT framework (transitional effect ended 1 July 2026); EU Transfer of Funds Regulation (EU) 2023/1113.

Cyprus has converted a decade of retail-brokerage supervision into one of MiCA's busiest licensing desks. ESMA's interim MiCA register lists 21 crypto-asset service providers with Cyprus as home member state as of mid-July 2026 — behind only Germany, France, the Netherlands and Malta in absolute terms, and far ahead of all of them per capita for an island of 1.25 million. CySEC opened its MiCA application window in November 2024, among the first EU regulators to do so, and the register shows what happened next: the island's established investment-firm cluster converted CySEC familiarity into CASP authorisations. eToro (Europe) Ltd was authorised on 16 January 2025, followed by Trading 212, Stratos (Tradu), Revolut's digital-assets arm, capital.com's Capital Vault and XTB through 2025, with a second wave of fintech and payments names landing in the first half of 2026.

The transition ran on a fixed clock. MiCA's CASP titles apply since 30 December 2024; firms operating under Cyprus's legacy national registration could continue under transitional grandfathering, but CySEC's 23 December 2025 announcement fixed the operational deadline — apply for MiCA authorisation by 27 February 2026 or submit a wind-down plan, with the transitional period ending on 1 July 2026 in any event. That cliff has now passed: providing crypto-asset services in or from Cyprus without a MiCA authorisation, or an EU passport from another member state's CASP licence, breaches directly applicable EU law. MiCA's own capital classes govern new applicants — €50,000 (Class 1) to €125,000 (Class 2) and €150,000 (Class 3) depending on the services provided.

The passporting-hub model — and its scrutiny

Cyprus's pitch is structural, not just fiscal: a single CySEC authorisation passports across all 30 EEA states, the regulator works in English, and the island carries the EU's densest concentration of licensed retail-brokerage infrastructure — compliance staff, legal counsel and technology vendors that already know CySEC's supervisory style from the CIF (Cyprus Investment Firm) regime. That is why the Cyprus CASP roster looks different from Malta's exchange-heavy list: it is dominated by multi-asset brokers adding crypto execution and custody to existing regulated businesses.

Speed has a price, and EU-level scrutiny of fast-authorising hubs is now explicit. ESMA's fast-track peer review of Malta's MFSA, published 10 July 2025, found that hub's authorisation of a CASP only "partially met expectations" — and pointedly addressed its recommendations to all national competent authorities, flagging business-growth assessment, conflicts of interest, and governance and intragroup arrangements as areas demanding particular attention. Cyprus, whose register count climbed steeply through 2025-2026 largely via conversions of existing CySEC-supervised firms, sits squarely in the category that review was designed to discipline, even though no Cyprus-specific peer review had been published as of July 2026.

Tax treatment

Until the end of 2025, Cyprus had no crypto-specific tax rules and its general architecture applied: Cyprus imposes no broad capital-gains tax — CGT attaches only to gains connected with Cyprus-situated immovable property — so occasional disposals by individuals not trading in a business-like manner typically escaped tax altogether, while profits of a trading nature fell into income tax (up to 35% for individuals, 12.5% corporate).

That era ended with the tax-reform vote of 22 December 2025, when the House of Representatives approved five of the six reform bills. From 1 January 2026, a dedicated regime — new Article 20E of the Income Tax Law — taxes gains on the disposal of crypto-assets at a flat 8%, for individuals and companies alike. "Disposal" is broad: sale into fiat, crypto-to-crypto exchange, spending crypto on goods or services, and transfers without consideration. Losses are ring-fenced — deductible only against crypto gains realised in the same tax year, with no carry-forward and no offset against other income. Mining sits outside the 8% regime and remains taxable under general income-tax rules. The same reform raised the corporate income-tax rate from 12.5% to 15%, aligning Cyprus with the OECD global-minimum-tax floor.

Travel rule applicability

Status: yes — EU Transfer of Funds Regulation, no minimum threshold. Regulation (EU) 2023/1113 has applied since 30 December 2024 and is directly applicable in Cyprus: crypto-asset service providers must attach complete, verified originator and beneficiary information to crypto-asset transfers, with no de-minimis exemption, in line with the EBA's Travel Rule Guidelines applying from the same date. CySEC's 23 December 2025 announcement reminded legacy CASPs that Regulation 2023/1113 binds them throughout the transitional period as well. Compliance supervision for Cyprus-authorised CASPs sits with CySEC.

Notable enforcement and regulatory events

Public licensed CASP list

Crypto-asset service providers authorised under MiCA with home member state Cyprus (competent authority: Cyprus Securities and Exchange Commission (CySEC)), per ESMA's consolidated CASP register:

Showing 12 of 21 Cyprus entries in the register. Source: ESMA interim MiCA register — authorised crypto-asset service providers, as of July 2026.

Comparison to neighbours

Compare Cyprus crypto regulation with three geographically adjacent jurisdictions:

Greece Turkey Israel

Doing business in Cyprus — practical notes

Cyprus is now arguably the default EU venue for brokerage-model crypto — execution, custody and portfolio services built on existing CIF infrastructure. The practical draws: an English-language regulator with deep retail-brokerage experience, MiCA capital classes starting at €50,000, a 15% corporate rate from 2026, no capital-gains tax outside real estate, and — since 1 January 2026 — a defined flat 8% tax on crypto disposals in place of prior classification uncertainty. Two cautions. First, the legacy national CASP register confers no right to operate anymore: verify any Cyprus counterparty against ESMA's MiCA register, and treat firms that missed the 27 February 2026 filing deadline as wind-down cases. Second, the supervisory-convergence fight matters more to Cyprus than to most member states — its model depends on fast authorisations that survive EU-level quality review of the kind ESMA applied to Malta in July 2025, so expect authorisation timelines and governance scrutiny to tighten rather than loosen. Mining income and business-like trading still fall under general income tax; the 8% regime covers disposals only.

Methodology and sources

This profile was researched and updated by DeFi Intel's research desk on 2026-07-14 from the primary and secondary sources listed below. Claims that could not be verified against a source are omitted or marked pending — we do not republish unverified third-party datasets. Submit corrections and primary-source links to [email protected].

Sources

Track Cyprus regulatory developments

Subscribe to the DeFi Intel weekly digest — every new jurisdiction guide, enforcement action and licensing update from our research desk.

Subscribe (free) Browse all jurisdictions →

Entities mentioned

Cyprus Securities and Exchange CommissionRevolut