Last Update: 25.02.2026
Cyprus is one of the leading European jurisdictions for establishing a regulated cryptocurrency business. The country combines EU regulatory certainty, developed financial infrastructure, and a competitive tax environment, making it attractive for international crypto companies seeking access to the European market.
Crypto activities in Cyprus are supervised by the Cyprus Securities and Exchange Commission (CySEC) under the authority of the Ministry of Finance. Since 2021, registration of Crypto-Asset Service Providers (CASPs/VASPs) has been mandatory under anti-money laundering legislation. Cyprus has also aligned its framework with the EU Markets in Crypto-Assets Regulation (MiCA), fully implemented across the European Union.
A Cyprus crypto license allows companies to legally provide digital asset services locally and across the EU, subject to regulatory compliance and operational requirements.
Regulatory Overview
Cryptocurrencies in Cyprus are recognized as digital assets rather than legal tender. Regulation focuses on service providers rather than the assets themselves.
Supervisory Authority
- Cyprus Securities and Exchange Commission (CySEC) — licensing and supervision of CASPs.
- Oversight operates within AML/CFT legislation and EU regulatory directives.
Regulated Activities
Licensed companies may provide:
- crypto-to-fiat exchange services;
- crypto-to-crypto exchange;
- custody and wallet services;
- crypto portfolio management;
- investment advice related to digital assets;
- token issuance and ICO support;
- transfer and administration of crypto assets.
Cryptocurrency mining is not restricted under Cypriot law.
Advantages of a Cyprus Crypto License
- Established regulatory framework with experienced financial supervision.
- Full access to the EU market under MiCA passporting.
- Competitive corporate taxation.
- Strong banking and financial infrastructure.
- Developed fintech and crypto ecosystem.
- Recognition of innovative financial instruments.
- Availability of regulated banking and EMI payment solutions.
- Stable legal environment aligned with EU legislation.
Requirements for Obtaining a Crypto License in Cyprus
Company Registration
- Legal entity incorporated in Cyprus.
- Physical office required (virtual office not accepted).
- Local corporate bank account.
Board of Directors
- Minimum four directors.
- At least two executive directors residing in Cyprus.
- Directors must pass CySEC qualification and fit & proper tests.
Shareholders and Beneficiaries
- Background and reputation checks.
- Transparency of ownership structure.
Staffing
- Key operational staff located in Cyprus.
- Appointment of qualified AML Officer.
Internal Policies
Companies must implement:
- AML/CTF procedures;
- KYC and risk assessment systems;
- internal governance policies;
- business continuity and recovery plan;
- conflict-of-interest controls.
Reporting and Audit
- Regular regulatory reporting.
- Annual audited financial statements.
- Internal and external audits required.
Procedure for Obtaining a Cyprus Crypto License
Step 1 — Company Incorporation (≈2 weeks)
- Establish Cyprus legal entity.
- Secure physical office.
- Appoint directors.
- Deposit share capital.
Step 2 — Preparation of Corporate Documentation (2–4 weeks)
- Articles of Association.
- Memorandum.
- corporate governance documents.
- translations into English or Greek.
Step 3 — Development of Compliance Framework (3–5 weeks)
- AML/KYC policies.
- risk management procedures.
- operational manuals.
- appointment of AML Officer.
Step 4 — Submission to CySEC (up to 6 months)
- Application submitted digitally and physically.
- Payment of €10,000 application fee.
- Regulatory review and additional requests.
Step 5 — License Approval
- Entry into CySEC CASP register.
- Authorization to provide crypto services across the EU.
Types of Crypto License in Cyprus
Class 1 License
- Financial advisory services only.
- Minimum capital: €50,000.
Class 2 License
Allows:
- order execution,
- crypto exchange services,
- portfolio management,
- client order transmission.
Minimum capital: €125,000.
Class 3 License
Includes all Class 1–2 services plus:
- custody of crypto assets,
- private key management,
- multilateral trading systems.
Minimum capital: €150,000.
Adaptation of Cyprus CASP License to MiCA
Following EU MiCA implementation, licensed providers must:
- align licenses with MiCA service categories;
- enhance disclosure and transparency standards;
- implement stablecoin reserve compliance where applicable;
- strengthen market manipulation monitoring;
- update internal governance procedures.
Required adaptation measures include:
- auditing internal documentation;
- staff compliance training;
- monitoring CySEC implementation updates;
- restructuring license classifications if necessary.
Overview of Crypto Regulation in Cyprus
| Parameter | Requirement |
|---|---|
| Licensing timeframe | Up to 6 months |
| Application fee | 10000 |
| Minimum capital | €50,000–€150,000 |
| Corporate tax | 12.5% |
| Annual supervision fee | 5000 |
| Local presence | Required |
| Executive directors | 2 Cyprus residents |
| AML officer | Mandatory |
| Accounting audit | Mandatory |
| Regulatory stability | High |
Legal Framework Governing Crypto Activities
Crypto companies operate under both EU and national legislation:
- Anti-Money Laundering and Counter-Terrorist Financing Law.
- CySEC CASP Registry Directive.
- CySEC AML Directive.
- Financial and Investment Services (CIF) Law.
- GDPR data protection rules.
- EU MiCA Regulation.
- AMLD5 and AMLD6 directives.
CySEC maintains a public register of licensed crypto companies containing authorization scope and company details.
Taxation of Crypto Companies in Cyprus
| Tax Type | Rate |
|---|---|
| Corporate Income Tax | 12.5% |
| Dividend Withholding Tax | 0% (non-residents) |
| Capital Gains (crypto) | Often exempt depending on structure |
| IP Box Effective Rate | ~2.5% |
| Annual License Fee | 5000 |
Ongoing Obligations for Licensed Companies
Licensed CASPs must:
- maintain required capital levels;
- submit quarterly and annual reports;
- conduct annual AML risk assessments;
- maintain updated KYC documentation;
- perform cybersecurity testing;
- appoint GDPR data protection officer;
- train employees on compliance procedures;
- update policies according to regulatory changes.
Non-compliance may result in fines, suspension, or license revocation.
Liability for Non-Compliance
CySEC may impose:
- fines up to €1 million or twice unlawful profit;
- daily penalties for ongoing violations;
- license suspension or revocation;
- restrictions on management activities;
- mandatory public disclosure of violations.
Conclusion
Cyprus remains one of the most attractive EU jurisdictions for crypto businesses due to regulatory clarity, competitive taxation, and access to the European market. The transition to MiCA strengthens legal certainty while increasing compliance standards.
Companies that properly structure governance, implement AML/KYC systems, and maintain regulatory transparency gain a stable foundation for long-term crypto operations within the European Union.