Crypto License in Gibraltar

First-mover DLT framework (2018). Application built around the GFSC nine regulatory principles — substance-based, not a tick-box exercise. Below is the quick reference for Gibraltar: regulator, capital, timeline, tax and the lead expert in this market. Detailed requirements, process steps, document checklist and an FAQ follow.

Why Gibraltar?

Gibraltar sits in the Europe regulatory landscape and runs digital asset business through Gibraltar Financial Services Commission (GFSC). The combination of timeline (16–24 weeks), capital threshold (Substance-based) and tax treatment (12.5%) defines the practical envelope. The deeper question — whether the regime fits your model — turns on activity scope, banking access and substance burden.

• Regulator credibility. Gibraltar Financial Services Commission (GFSC) provides counterparty-acceptable authorisation for Gibraltar-based activity.
• License coverage. Categories cover DLT Provider Licence (9 principles), mapped to specific permitted activities and customer profiles.
• Timeline and predictability. Typical authorisation in 16–24 weeks, sensitive to category and applicant profile.
• Tax treatment. 12.5%. Specific exemptions and free-zone rules may apply for qualifying activities.
• Substance burden. Local entity, qualifying officer and domestic MLRO are typically required.

What licences are available in Gibraltar?

Gibraltar authorisations under Gibraltar Financial Services Commission (GFSC) cover the following categories: DLT Provider Licence (9 principles). Each category maps to a different set of permitted activities and a different capital and substance burden. Mapping your business model to the right category is the first task on any application. Categories cannot be combined retrospectively without a fresh authorisation.

We see most applicants narrow the choice within the first hour of an initial assessment. The remaining decision usually turns on banking compatibility and the speed of regulator review for the chosen category.

What are the requirements for a Gibraltar crypto licence?

Requirements are category-specific but converge on a common structural set. Building these from day one keeps the application timeline honest and avoids late-stage rebuilds.

Corporate

• Local entity: Gibraltar-incorporated company in the relevant jurisdiction or special economic zone.
• Office space: qualifying physical office. Virtual offices generally don't satisfy substance requirements.
• Capital: Substance-based paid-up minimum, deposited in a regulated bank with auditor confirmation.

Personnel

• Resident senior officer: CEO or equivalent must be locally resident and pass fit-and-proper review.
• MLRO: Money Laundering Reporting Officer with relevant qualifications and time commitment.
• Compliance and risk officers: may be the same individual at smaller firms but must be evidenced as competent.

Operational

• AML / KYC programme: written manual, transaction monitoring rules, FATF Travel Rule readiness.
• IT security: ISO 27001 or equivalent, penetration testing, encryption and key-management procedures for custodial models.
• Operational resilience: business continuity plan, disaster recovery testing, third-party concentration risk.
• Insurance: professional indemnity. Custodial models add cyber and crime cover with adequate limits.

How does the application process work in Gibraltar?

1. Pre-engagement (1–3 weeks). Jurisdiction confirmation, framework selection, gap analysis against the rulebook, banking pre-checks.
2. Entity formation (3–6 weeks). Gibraltar incorporation, office lease, opening of receiving bank account, capital wire and confirmation.
3. Application drafting. Business plan, financial projections, AML manual, IT security, operational resilience, fit-and-proper packs.
4. Submission and regulator review. Formal filing with Gibraltar Financial Services Commission (GFSC), response to supplementary questions, on-site interviews where required.
5. Conditional approval. Permit issued subject to specific conditions. Typically systems readiness and final substance milestones.
6. Operating licence. Conditions cleared, full operating permit issued, first compliance reporting cycle starts.

What does it cost in Gibraltar?

Year-one budget for a Gibraltar crypto licence breaks down across regulator fees, capital lock-up, legal, AML build-out, substance and insurance. The capital component (Substance-based) is typically the largest single line. Legal fees the most variable. Ongoing personnel and audit costs the largest year-two driver.

• Regulator and government fees. Application and annual supervision fees, payable to Gibraltar Financial Services Commission (GFSC).
• Paid-up capital. Substance-based, deposited in a regulated bank.
• Legal fees. USD 30,000–250,000 for end-to-end licensing on a single category, varying with model complexity.
• Office and substance. Year-one office, lease deposits and physical setup.
• Personnel. Resident MLRO and compliance officer. Outsourced MLRO where allowed by the regime.
• IT and security. ISO 27001 audit, penetration testing and operational resilience uplift.
• Insurance. Annual professional indemnity. Custodial models add cyber and crime cover.

How is crypto taxed in Gibraltar?

Headline corporate tax in Gibraltar is 12.5%. Effective taxation depends on entity type, qualifying activities and the use of any free-zone or special-regime exemptions. We model year-two financials at the headline rate and treat exemptions as upside, not the baseline assumption. Exemption rules change. Applicant facts can move in or out of qualifying status at audit.

What documents do you need?