Malta Curated

DeFi Intel Research Desk2026-07-14Europe

Is crypto legal in Malta? (2026)

Yes — cryptocurrency is legal in Malta. Current status: Legal — MiCA-authorised CASP regime. Oversight sits with Malta Financial Services Authority (MFSA). Full details — governing law, licensing, tax and dated enforcement history — follow below (last reviewed 2026-07-14).

Framework: Virtual Financial Assets Act 2018 → Markets in Crypto-Assets Act (Chapter 647, Laws of Malta; Act No. XXXVI of 2024) transposing MiCA (Regulation (EU) 2023/1114).

Malta was the first EU member state to legislate comprehensively for crypto. The Virtual Financial Assets Act (VFA Act), part of a three-law "Blockchain Island" package enacted in 2018 alongside the Malta Digital Innovation Authority Act and the Innovative Technology Arrangements and Services Act, created a bespoke licensing regime for virtual-financial-asset services years before any pan-European rule existed. That first-mover framework has since been folded into the EU's Markets in Crypto-Assets Regulation (MiCA, Regulation (EU) 2023/1114). Malta gave MiCA its domestic scaffolding through the Markets in Crypto-Assets Act — Chapter 647 of the Laws of Malta, enacted as Act No. XXXVI of 2024 and assented to on 5 November 2024 — which supplements the directly-applicable EU regulation with national authorisation procedures, supervisory powers, penalties and fees (the latter set by Legal Notice 295 of 2024). The Malta Financial Services Authority (MFSA) is the single national competent authority responsible for authorising and supervising both crypto-asset service providers (CASPs) and issuers of crypto-assets under Cap. 647.

VFA-to-CASP transition and licensing regime

Because Malta already licensed crypto firms under the VFA Act, its central regulatory task in 2025–2026 was migration rather than a standing start. In March 2025 the MFSA published its MiCA Rulebook — a document exceeding 300 pages that consolidates the conduct, prudential, governance and safeguarding rules CASPs must apply day to day — and in April 2025 issued a circular introducing a periodic CASP Return to give supervision a structured reporting stream. VFA licence holders authorised before 30 December 2024 were grandfathered: they could keep operating under their existing VFA licence until 1 July 2026, or until their MiCA CASP authorisation was granted or refused, whichever came first. That 1 July 2026 cut-off is the outer limit fixed by MiCA's own transitional provision (Article 143(3)); after it, a firm serving EU clients without a MiCA authorisation loses its legal basis to do so. Malta's practical selling points are speed and reach: a single MFSA CASP authorisation passports across all 27 EU/EEA states on notification to host regulators, and the MFSA is generally reported to clear applications faster than several larger member states. Stablecoins are permitted but sit under MiCA's harmonised titles for e-money tokens (EMTs, in force since 30 June 2024) and asset-referenced tokens (ARTs), whose issuers must themselves be authorised — a credit institution or e-money institution in the EMT case — rather than under any Malta-specific stablecoin rule.

Tax treatment

Malta has no dedicated crypto tax statute. The treatment flows from three sets of guidelines the Commissioner for Revenue (now the Malta Tax and Customs Administration) issued in November 2018, covering income tax, VAT and duty on documents. Those guidelines classify DLT assets as coins, financial (security) tokens, utility tokens or hybrids, and make the decisive question the purpose and context of a transaction rather than the label on the asset.

• Crypto coins — no capital gains tax. Coins and utility tokens are not among the "capital assets" whose transfer triggers capital gains tax under Malta's Income Tax Act, so disposing of them does not generate a capital gain. Long-term holding and occasional disposal of crypto coins therefore falls outside CGT, and profit on exchanging coins is treated the same way as gains on exchanging fiat currency.
• Trading — taxed as income up to 35%. Where activity amounts to trading — frequent, business-like dealing — the profit is a revenue-account receipt and is taxed as ordinary income at Malta's progressive personal rates, which top out at 35%. Mining rewards are likewise income.
• Security tokens. Financial (security) tokens held as capital assets can fall within capital gains tax on transfer, unlike coins.
• Non-domiciled residents. Individuals resident but not domiciled in Malta are taxed on a source-and-remittance basis: foreign-source capital gains are outside Maltese tax even if remitted to Malta, and foreign income is taxed only when remitted — the feature that draws internationally-mobile crypto holders to Maltese residence.

Travel rule applicability

Status: yes — EU Transfer of Funds Regulation, no minimum threshold. Regulation (EU) 2023/1113 (the recast Transfer of Funds Regulation) has applied directly across the EU, including Malta, since 30 December 2024. Maltese CASPs must attach complete, verified originator and beneficiary information to every crypto-asset transfer, with no de-minimis threshold and no size exemption, in line with the EBA's Travel Rule Guidelines applying from the same date. Separately, on the tax-reporting side, Malta transposed DAC8 — the EU directive extending automatic exchange of information to crypto-assets — via Legal Notice 162 of 2026: CASPs must collect and report reportable-user data, with the first reporting period running over calendar year 2026 and returns due to the Commissioner for Tax and Customs by 30 September 2027.

Notable enforcement and regulatory events

• 21 February 2020. The MFSA issued a public statement clarifying that Binance was not, and had never been, authorised by the MFSA to operate in or from Malta and fell outside its regulatory oversight — notwithstanding Binance's earlier public self-association with the "Blockchain Island". The MFSA reiterated the warning in July 2021.
• 5 November 2024. The Markets in Crypto-Assets Act (Cap. 647, Act No. XXXVI of 2024) receives presidential assent, giving MiCA its Maltese implementing framework.
• 27 January 2025. The MFSA grants its first MiCA CASP authorisations — OKX Europe Limited, Bitpanda's BP23 CA Limited and Crypto.com's Foris DAX MT Limited among the earliest — positioning Malta as an early EU gateway under the new regime.
• March–April 2025. The MFSA publishes its 300-plus-page MiCA Rulebook (March) and issues the circular introducing the periodic CASP Return (April).
• 10 July 2025. ESMA publishes a fast-track peer review of the MFSA's authorisation and supervision of a single (unnamed) CASP. It rated the MFSA as fully meeting expectations on supervisory resources and institutional set-up and largely meeting expectations on post-authorisation supervision, but found the authorisation process did not fully meet expectations: material issues were unresolved or pending remediation when the licence was granted, and key risk areas — business-plan growth, conflicts of interest, governance and intragroup arrangements, ICT and custody, and AML/CFT — were not adequately assessed, with the licence issued ahead of other member states. The MFSA publicly welcomed the review and its recommendations.
• 1 July 2026. The VFA-to-CASP grandfathering window closes; only MiCA-authorised firms may lawfully provide crypto-asset services from Malta.

Public licensed CASP list

Crypto-asset service providers authorised under MiCA with home member state Malta (competent authority: Malta Financial Services Authority (MFSA)), per ESMA's consolidated CASP register:

• OKX Europe Limited — authorised 27 Jan 2025 — custody; trading platform; exchange (fiat & crypto); order execution; placing; reception & transmission of orders; portfolio management; transfers
• BP23 CA Limited (Bitpanda) — authorised 27 Jan 2025 — custody; exchange (fiat & crypto); order execution; reception & transmission of orders; transfers
• Foris DAX MT Limited (Crypto.com) — authorised 27 Jan 2025 — custody; exchange (fiat & crypto); order execution; reception & transmission of orders; transfers
• Zillion Bits Limited (ZBX) — authorised 6 Feb 2025 — custody; trading platform; exchange (fiat & crypto); order execution; placing; reception & transmission of orders; transfers
• Gemini Intergalactic EU Ltd — authorised 21 Aug 2025 — custody; exchange (fiat & crypto); order execution; placing; reception & transmission of orders; transfers
• Socios Europe Services Limited (Socios.com) — authorised 10 Sep 2025 — custody; exchange (fiat & crypto); placing; transfers
• Gate Technology Limited — authorised 29 Sep 2025 — custody; trading platform; exchange (fiat & crypto); order execution; transfers
• Blue Cube (Malta) Limited (Blockchain.com) — authorised 22 Oct 2025 — custody; exchange (fiat & crypto); order execution; transfers
• System Pay Services (Malta) Limited (BVNK) — authorised 13 Feb 2026 — custody; exchange (fiat & crypto); order execution; transfers
• Zap (Strike) Europe Limited — authorised 25 Jun 2026 — custody; exchange (crypto–fiat); order execution; transfers
• FalconX Limited — authorised 26 Jun 2026 — custody; exchange (fiat & crypto); order execution; transfers
• Bequant Pro Limited — authorised 30 Jun 2026 — custody; exchange (fiat & crypto); transfers

Showing 12 of 22 Malta entries in the register. Source: ESMA interim MiCA register — authorised crypto-asset service providers, as of July 2026.

Comparison to neighbours

Compare Malta crypto regulation with three geographically adjacent jurisdictions:

Doing business in Malta — practical notes

An MFSA MiCA CASP authorisation is now the only route to provide crypto-asset services from Malta; the legacy VFA licence ceased to be a standalone basis when the grandfathering window closed on 1 July 2026. Malta's draw is the combination of a single authorisation that passports across the EU/EEA, a supervisor with rare pre-MiCA experience, and a tax environment where crypto-coin gains generally fall outside capital gains tax, non-domiciled residents are taxed on a remittance basis, and the 35% headline corporate rate is reduced for many shareholders to an effective rate of about 5% through Malta's full-imputation system and its 6/7ths tax refund on distributed profits. The counterweight, underlined by the July 2025 ESMA peer review, is heightened scrutiny at the authorisation gate: applicants should expect the MFSA to probe business-plan growth assumptions, conflicts of interest, governance and intragroup structures, ICT and custody arrangements, and AML/CFT controls more rigorously than the "Blockchain Island" branding once implied. For the current roster of authorised providers, see the public licensed CASP list above.

Methodology and sources

This profile was researched and updated by DeFi Intel's research desk on 2026-07-14 from the primary and secondary sources listed below. Claims that could not be verified against a source are omitted or marked pending — we do not republish unverified third-party datasets. The licensed-CASP list is reproduced from ESMA's interim MiCA register (source shown with the list). Submit corrections and primary-source links to [email protected].

Sources

• MFSA — Crypto-Assets (competent authority under the Markets in Crypto-Assets Act, Cap. 647)
• Mamo TCV — Furthering MiCAR in Malta by Chapter 647 (Act XXXVI of 2024, assent 5 Nov 2024; LN 295 of 2024)
• MFSA — VFA Licence and Transition to CASP under the MiCA Act (grandfathering to 1 July 2026)
• BDO Malta — MFSA introduces the CASP Return under MiCA (April 2025) and 300-plus-page MiCA Rulebook (March 2025)
• ESMA — Fast-track peer review of CASP authorisation and supervision in Malta (10 July 2025)
• Harneys — ESMA reviews Malta's MiCA authorisation standards (July 2025 peer-review findings)
• The Malta Independent — MFSA welcomes ESMA peer review on CASP authorisation and supervision (10 July 2025)
• Alliott Global — Taxing cryptocurrencies in Malta (Nov 2018 CfR DLT guidelines; coins outside CGT; trading taxed as income)
• International Bar Association — Is Malta the domicile of choice for crypto-millionaires? (coins/utility tokens outside CGT; non-dom remittance basis)
• Taxbit — Malta transposes DAC8 (Legal Notice 162 of 2026; first reporting period 2026, returns due 30 Sep 2027)
• Contact Advisory — Malta corporate tax: 35% headline, full imputation and 6/7ths refund to ~5% effective
• EUR-Lex — Regulation (EU) 2023/1113 (recast Transfer of Funds Regulation; travel rule, no threshold, from 30 Dec 2024)
• MFSA — Public statement / warning that Binance is not authorised in or from Malta (21 Feb 2020; reiterated July 2021)