Fintech & payments regulation in Gibraltar (2026)
Fintech and digital payments in Gibraltar: licensing regime.
Gibraltar operates a mature, in-force licensing regime for digital payments and fintech under the consolidated Financial Services Act 2019, with GFSC-issued 'Part 7' permissions covering payment institutions, electronic-money institutions, DLT providers and (since October 2025) virtual asset arrangement providers. PSD2 has been transposed, giving effect to strong-customer-authentication and open-banking (AISP/PISP) rules, and Gibraltar is one of the first jurisdictions worldwide to license DLT-based value transfer and is now developing bespoke rules for clearing/settlement of crypto derivatives. BNPL is not yet subject to a dedicated Gibraltar-specific regime; the sector relies on general consumer-credit and payments law while UK-aligned reform proceeds.
Legal framework
Financial Services Act 2019 with the Financial Services (Payment Services) Regulations 2020 and Financial Services (Electronic Money) Regulations 2020 (transposing PSD2 / EMD2), plus the DLT Regulatory Framework (2018) and Virtual Asset Arrangement (VAA) Regulations (in force 27 October 2025) — all administered by the Gibraltar Financial Services Commission (GFSC).
Key points: digital payments & fintech in Gibraltar
Regulator
The Gibraltar Financial Services Commission (GFSC) is the single competent authority for authorising and supervising payment institutions, e-money institutions, DLT providers and VAA providers under the Financial Services Act 2019.
Payment institutions (PSD2)
The Financial Services (Payment Services) Regulations 2020 transpose PSD2 and require any firm carrying on payment-service business in or from Gibraltar to hold a GFSC Part 7 permission specifying the payment services it may provide.
E-money institutions (EMD2)
The Financial Services (Electronic Money) Regulations 2020 govern the authorisation of EMIs to issue and redeem e-money (including pre-paid cards and online e-money accounts), with EMIs also able to provide payment services under their existing authorisation.
Open banking / SCA
Because PSD2 is transposed, AISPs and PISPs are formally regulated third-party providers and the payments RTS on strong customer authentication and secure communication apply, with GFSC-published PSD II guidance for firms.
DLT & virtual asset licensing
Gibraltar's DLT Regulatory Framework (effective 1 January 2018) requires firms using DLT to store or transmit value on behalf of others to be authorised by the GFSC against ten principles; from 27 October 2025 exchange activity (crypto↔fiat and crypto↔crypto) also requires a GFSC Part 7 permission as a regulated Virtual Asset Arrangement.
BNPL / consumer credit
Gibraltar does not yet have a bespoke BNPL/Deferred-Payment-Credit regime; providers rely on general Gibraltar consumer-credit and payment-services rules while the UK's FCA is bringing DPC into its perimeter from 15 July 2026 under an approach Gibraltar is expected to track.
Timeline of decisions
- Guidance · officialGibraltar announces digital clearing & settlement framework for crypto derivatives
The Government and GFSC unveiled what they describe as the world's first regulatory framework for clearing and settling crypto derivatives, addressing settlement finality, counterparty risk and custody to bolster market integrity.
HM Government of Gibraltar
- Guidance · officialGFSC refreshes DLT regulatory guidance notes
After consultation begun in 2019, the GFSC updated its DLT Providers guidance to better distinguish virtual assets from higher-risk virtual-asset-denominated instruments and tighten onboarding/risk tests for digital asset exchanges.
HM Government of Gibraltar
- Law · officialFinancial Services Act 2019 commences
The Legislative Reform Programme consolidated ~90 financial services instruments (including DLT, e-money and payment services rules) into a single Financial Services Act 2019 plus 41 sets of regulations, creating the unified licensing architecture used today.
HM Government of Gibraltar
- Law · officialPSD2 implemented via the Financial Services (Payment Services) Regulations 2018
Gibraltar transposed the EU Second Payment Services Directive, introducing licensing/authorisation for payment institutions and the new payment-initiation and account-information service providers, with strengthened security and consumer protection.
GFSC
- Law · officialDLT Regulatory Framework launches
The Financial Services (Distributed Ledger Technology Providers) Regulations 2017 took effect on 1 Jan 2018, making Gibraltar one of the first jurisdictions to require firms storing or transmitting value via DLT to obtain a GFSC licence under nine (later ten) core principles.
GFSC
- Law · officialE-money licensing established under the Electronic Money Regulations 2011
Gibraltar's Financial Services (Electronic Money) Regulations 2011 (later re-enacted as the 2020 Regulations) created the GFSC authorisation regime for electronic money institutions, a foundational pillar of the jurisdiction's payments licensing.
GFSC
Sources
- fsc.gi/apply/payment-service
- fsc.gi/apply/emoney-issuer
- fsc.gi/FSC/eMoney
- fsc.gi/firms/psdii
- fsc.gi/FSC/distributed-ledger-technology-providers
- gibraltarlaws.gov.gi/legislations/financial-services-act-2019-4690
- gibraltarlaws.gov.gi/legislations/financial-services-payment-services-regulations-2020-479
- gibraltarlaws.gov.gi/legislations/financial-services-electronic-money-regulations-2020-478
- mondaq.com/gibraltar/financial-services/663974/the-second-payment-services-direc
- bullish.com/us/news-insights/bullish-partners-with-the-gibraltar-government-and-g
- coindesk.com/policy/2025/05/13/gibraltar-to-establish-crypto-derivatives-clearing-
- fca.org.uk/firms/regulating-buy-now-pay-later
- addleshawgoddard.com/en/insights/insights-briefings/2025/financial-regulation/financial-re
Next for Gibraltar: Digital Nomad & ResidencyVia other route
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 16 Sept 2026. Methodology & how to cite · State of Technology Regulation 2026