Is crypto legal in Cyprus? Rules & regulation (2026)

Legal framework

EU Markets in Crypto-Assets Regulation (MiCA, Regulation (EU) 2023/1114) directly applicable; national supervision by the Cyprus Securities and Exchange Commission (CySEC) with the Central Bank of Cyprus competent for e-money tokens. Pre-existing CySEC CASP Register under the Prevention and Suppression of Money Laundering and Terrorist Financing Law of 2007 (as amended) remains in force through the MiCA transitional period.

Status by sub-area

• Stablecoins

  In force

  MiCA Titles III (asset-referenced tokens) and IV (e-money tokens) have applied directly in Cyprus since 30 June 2024, setting authorisation, reserve-backing, redemption-at-par, white-paper and own-funds requirements for stablecoin issuers. EMT issuance is reserved to credit institutions or authorised EMIs, with the Central Bank of Cyprus competent.

• Exchanges / VASP

  In force

  MiCA's full CASP authorisation regime, covering exchanges, brokers, trading platforms and other VASP-style activities, has applied since 30 December 2024 with CySEC as competent authority. A national CASP Register under the Cyprus AML law continues to operate during the transitional period, with applications for MiCA licences due by 27 February 2026.

• Token Offerings

  In force

  Token offerings in Cyprus are regulated through a combination of MiCA (white paper, disclosure and marketing requirements for non-financial-instrument crypto-assets) and the EU Prospectus Regulation as transposed in Cyprus for security tokens. There is no separate dedicated national ICO/STO statute; CySEC's Innovation Hub provides classification guidance.

• Custody

  In force

  Custody of crypto-assets is a regulated CASP activity under MiCA, requiring segregation of client crypto and funds, clear custody policies, on-distributed-ledger reconciliation, and liability of the custodian for loss attributable to incidents within its control. CySEC supervises these requirements in Cyprus.

• DeFi

  Partial

  Fully decentralised crypto-asset services without an identifiable intermediary fall outside MiCA's scope (Recital 22), but front-ends, DAOs and protocols with sufficient centralisation can be brought in as CASPs. CySEC's chair has publicly flagged decentralised models as a key area of ongoing implementation difficulty, and no dedicated Cypriot DeFi law exists.

  Still pending: CySEC clarification on decentralized DeFi models and dedicated Cypriot DeFi law pending

• Tax

  In force

  From 1 January 2026, Cyprus's tax reform introduces a dedicated 8% flat tax on profits from the disposal of crypto-assets for both individuals and companies, with no separate capital gains tax. Holding crypto is not a taxable event; mining income is taxed under general income tax rules; crypto-to-crypto swaps, sales for fiat, and use of crypto to pay for goods all qualify as disposals.

How to get a crypto license in Cyprus

To provide crypto-asset services in Cyprus you need a MiCA CASP authorisation (Crypto-Asset Service Provider), supervised by the Cyprus Securities and Exchange Commission (CySEC), under the EU Markets in Crypto-Assets Regulation (MiCA), Title V.

Authority

the Cyprus Securities and Exchange Commission (CySEC)

License required

a MiCA CASP authorisation (Crypto-Asset Service Provider)

Framework / law

the EU Markets in Crypto-Assets Regulation (MiCA), Title V

Minimum capital

€50,000–€150,000 minimum, by service class (Class 1/2/3)

Timeline

about 40 working days of substantive review; 1–3 months for a well-prepared application

Cost

an application fee of roughly €5,000–€25,000, plus ongoing supervisory fees

Passporting

Yes: a single MiCA CASP licence passports across all 27 EU member states.

Step by step: getting a crypto license in Cyprus

1. 1

   Incorporate a legal entity with a registered office in the member state, with at least one director resident in the EU.

2. 2

   Build the application file: programme of operations, business plan, governance, AML/CFT, ICT resilience and client-asset segregation.

3. 3

   Submit the application to the national competent authority.

4. 4

   Completeness check: the authority has 25 working days to confirm the file is complete and request anything missing.

5. 5

   Substantive assessment: the authority has 40 working days to grant or refuse the authorisation.

6. 6

   Once authorised, notify the passport to the host member states you intend to serve, then begin operating across the EU.

Key points: crypto & digital assets in Cyprus

1. 01MiCA directly applicable; CySEC is competent authority

   MiCA (Regulation (EU) 2023/1114) applies directly in Cyprus. CySEC is the designated competent authority for CASP authorisation, supervision, and enforcement; the Central Bank of Cyprus is competent for e-money token issuers.

   cysec.gov.cy centralbank.cy

2. 02MiCA CASP application deadline 27 February 2026

   CySEC has formally set 27 February 2026 as the deadline for incumbent CASPs to file MiCA licence applications. Firms that miss the deadline must submit a wind-down plan; national-regime services may continue only until 1 July 2026 or earlier decision on the application.

   cysec.gov.cy harneys.com

3. 03Pre-MiCA national CASP Register under AML law

   Since 2021, CASPs providing services in or from Cyprus must register on the CySEC CASP Register under the Prevention and Suppression of Money Laundering and Terrorist Financing Law of 2007 (as amended), requiring local substance, fit-and-proper directors and AML/CFT compliance.

   cysec.gov.cy

4. 042026 tax reform, flat 8% on crypto disposals

   Effective 1 January 2026, profits from the disposal of crypto-assets (sale for fiat, crypto-to-crypto swaps, payments in crypto, NFT sales) are subject to a dedicated 8% flat income tax; mere holding is untaxed; mining is taxed under general income tax rules; no separate capital gains tax applies.

   harneys.com harneysfiduciary.com

5. 05EU passporting and Cyprus as a MiCA hub

   A MiCA authorisation granted by CySEC passports across the EEA. Several major firms (e.g. Revolut) have been authorised in Cyprus, and CySEC's chair has positioned the jurisdiction as an early leader in MiCA implementation.

   coindesk.com cyprus-mail.com

6. 06Token offerings, MiCA white papers plus residual securities law

   Non-financial-instrument crypto-assets fall under MiCA white-paper/disclosure rules; tokens qualifying as transferable securities fall under the EU Prospectus Regulation (national threshold for prospectus exemption raised to EUR 5,000,000). Cyprus has no separate dedicated ICO/STO statute beyond these regimes.

   advocatescyprus.com lexology.com

Crypto license in Cyprus: FAQ

Timeline of decisions

1. 1 Jul 2026Decision · official
   MiCA Transitional Period Expires — National CASP Regime Ends in Cyprus

   Cyprus's 18-month transitional window under Article 143(3) of MiCA closed, terminating the national CASP registration framework. All providers must now hold full MiCA authorisation from CySEC or have ceased EU operations; ESMA called on unauthorised firms still operating to wind down immediately.

   CySEC

2. 27 Feb 2026Guidance · official
   CySEC Sets Hard Deadline for MiCA CASP Authorisation Applications

   CySEC issued a formal press release setting 27 February 2026 as the cut-off for existing CASPs to submit MiCA authorisation applications; firms that missed the deadline were required to file wind-down plans and could no longer provide crypto-asset services after 1 July 2026.

   CySEC Press Release

3. 13 Nov 2024Decision
   CySEC Opens Preliminary MiCA CASP Application Phase

   CySEC announced on 13 November 2024 the commencement of a preliminary phase for accepting MiCA CASP applications and grandfathering notifications ahead of the 30 December 2024 full-application date, positioning Cyprus as an early-mover EU hub for crypto-asset service authorization and giving incumbents a head start on the formal process.

   Harneys Regulatory Blog (citing CySEC circular)

4. 30 Jun 2024Law · official
   MiCA Stablecoin Rules (ART/EMT Titles) Enter into Force

   Titles III and IV of MiCA, covering asset-referenced tokens and e-money tokens, became applicable on 30 June 2024, requiring stablecoin issuers targeting EU consumers to obtain authorisation; CySEC was designated the competent authority in Cyprus for ART issuers, with the Central Bank of Cyprus overseeing EMT issuers.

   Central Bank of Cyprus

5. 10 Oct 2023Enforcement
   Cyprus Warns Unregistered Crypto Firms: Fines Up to €350,000 and Five Years' Imprisonment

   Cyprus authorities publicly warned crypto exchanges and service providers operating without CySEC registration that they faced administrative fines of up to €350,000 and criminal penalties of up to five years' imprisonment, signalling active enforcement of the national CASP regime ahead of MiCA's full application.

   Cyprus Mail

6. 25 Jun 2021Guidance · official
   CySEC Issues CASP Registration Directive (R.A.D. 269/2021)

   CySEC published Directive R.A.D. 269/2021 under Article 61E of the AML Law, establishing detailed registration procedures, AML/CFT compliance obligations, and operational standards for Crypto-Asset Service Providers; existing businesses with material crypto activity had until end-October 2021 to apply, with a €10,000 application fee.

   CySEC

7. 18 Feb 2021Law · official
   Cyprus Transposes 5AMLD — Crypto Assets Formally Enter AML/CFT Framework

   Parliament amended the Prevention and Suppression of Money Laundering Law L.188(I)/2007 to transpose EU Directive 2018/843 (5AMLD), formally defining crypto assets as a regulated category, classifying CASPs as obliged entities with full KYC and AML/CFT duties, and empowering CySEC to create and maintain a public CASP register.

   Cyprus Department of Registrar of Companies (Official Guidance)

8. 1 May 2019Decision · official
   Cyprus Publishes National Blockchain Strategy

   The Cyprus government published its National Blockchain Strategy, the outcome of the 2018 working group, with the core aim of promoting distributed ledger technology through innovation and public-private cooperation; the strategy positioned Cyprus as an aspiring EU hub for blockchain and digital assets investment.

   Republic of Cyprus Government

9. 15 May 2018Guidance · official
   CySEC Circular C268: Updated Rules Governing Crypto Derivatives, Replaces C244

   CySEC issued Circular C268, incorporating ESMA's product intervention measures and confirming that cryptocurrency derivatives qualify as financial instruments under Cyprus law, while imposing enhanced client risk warnings, leverage restrictions, and capital adequacy requirements on Cyprus investment firms offering crypto CFDs.

   CySEC

10. 13 Oct 2017Guidance · official
    CySEC Circular C244: First Formal Guidance on Virtual Currency Trading

    CySEC issued its inaugural guidance on virtual currencies and crypto CFDs, noting the absence of a specific EU regulatory framework while requiring Cyprus investment firms to provide client risk disclosures, comply with MiFID organisational rules, and advise clients that investor compensation fund protections do not apply to crypto products.

    CySEC

Sources

1. 1.cysec.gov.cy/en-GB/mica-regulation-overview/
2. 2.cysec.gov.cy/CMSPages/GetFile.aspx?guid=3c2571bc-1e2f-4537-b139-bc6bdc375719
3. 3.cysec.gov.cy/en-GB/entities/crypto-asset-services-providers-casps/
4. 4.centralbank.cy/en/licensing-supervision/micar-markets-in-crypto-assets-regulation
5. 5.esma.europa.eu/esmas-activities/digital-finance-and-innovation/markets-crypto-assets
6. 6.harneys.com/our-blogs/regulatory/cysec-casps-must-apply-for-mica-licence-by-27-fe
7. 7.harneys.com/our-blogs/regulatory/a-new-era-for-cyprus-taxation-the-key-insights-o
8. 8.cyprus-mail.com/2026/04/02/cysec-chief-outlines-early-lessons-from-eu-crypto-rules
9. 9.harneysfiduciary.com/insights/cyprus-tax-reform-2026-new-tax-measures-on-digital-assets/
10. 10.coindesk.com/policy/2025/10/23/revolut-secures-mica-license-in-cyprus-expanding-re
11. 11.advocatescyprus.com/prospectus-law-for-security-token-offering-in-cyprus-stos-in-cyprus/
12. 12.lexology.com/library/detail.aspx?g=3672d9e0-7cc2-4a37-978c-2677209d8005