---
title: "Cyprus Crypto Regulation Monitor | cryptoassets.gi"
canonical: https://cryptoassets.gi/jurisdictions/cyprus/
source_html: /jurisdictions/cyprus/index.html
description: "Cyprus crypto asset regulation: 8 categories, 38 sourced findings, updated 2026-10-25. Licensing, token classification, stablecoins, tax treatment."
generated_at: 2026-11-07T14:19:44Z
content_sha256: 2c8efd02e5c088c02cbccd45df628e5b69e2b76e336b2b0dd74588a35630b81c
generator: "fe-fleet/md-twin@1.0"
---
# Cyprus Crypto & Digital Asset Regulation

schema crypto-v2.0.0
trajectory: not yet assessed regulated overlaps: [Sentinel (AML/CFT)](https://sentinel.gi/jurisdictions/cyprus/), [World Payments](https://payments.gi/jurisdictions/cyprus/)

Last updated 2026-10-25 · 8 categories · 38 sourced
findings · 46 sources in the cumulative register

Download report (PDF) Expand all

Evidence re-verified: 2026-10-25 · Position last changed: 2026-10-25 · Record history & provenance ▾ Methodology & record provenance: Module confidence is derived from the underlying claims (source tier and primary excerpt retention), while statutory legal force is tracked independently.

Review status: AI-synthesised · Tier-1/2 verified · As-of date: 2026-10-26

[Open in Co-Pilot ↗](/reports/?type=copilot&j=CYPRUS)[Build Report](/reports/?j=CYPRUS)[Compare](/compare/?j=CYPRUS)

Framework posture Regulated 7 of 9 modules populated · AI-synthesised · Tier-1/2 verified

Lead supervisory authority ESMA Primary statutory & supervisory perimeter

Next milestone (> 2026-10-26) 2027-Q1 Markets in Crypto-Assets Bill of 2026 - domestic MiCA enforcement framework

Module coverage & confidence 7 / 9 modules assessed 0 Confirmed · 7 Probable · 0 Uncertain · 2 Not yet assessed

8 Categories

0 Moved this cycle 0 Key judgments 6 Open gaps 38 Findings

14 Tier-1 sources

Confidence mix 8 unpopulated
(sums to 8 rendered categories; click to filter)

No categories moved this cycle.

Law made at European Economic Area (Bloc) level that applies in Cyprus is covered once, on the [European Economic Area (Bloc)](/jurisdictions/european-economic-area-bloc/) page. This page covers Cyprus’s own layer: implementation, national authorities, national options and local enforcement.

## Jurisdiction lead brief

###### Latest update · 25 October 2026

#### Lead Signal

Cyprus's crypto-asset regime passed a hard deadline this period. The eighteen-month national transitional arrangement under Article 143(3) of the Markets in Crypto-Assets Regulation, which allowed crypto-asset service providers already operating under Cyprus's pre-existing national regime to keep trading while they sought full authorisation, ran from 30 December 2024 and expired on 1 July 2026. The Cyprus Securities and Exchange Commission had set an internal cut-off of 27 February 2026 for firms to file a complete authorisation application in order to benefit from continued operation during the review period. The Commission has since confirmed that, from 1 July 2026 onward, the provision of crypto-asset services in or from Cyprus is permitted only in full compliance with the Regulation's licensing regime; any provider that did not file a complete application by the February cut-off is required to submit a wind-down plan and cease services. This closes out what had been a multi-year window in which pre-existing Cyprus crypto firms could continue trading on the strength of their national registration alone.

#### Other Developments

On the stablecoin side, the interaction between the Regulation's e-money-token provisions and Cyprus's existing payments licensing regime has been clarified rather than changed this period. Crypto-asset service providers already offering services linked to e-money tokens that separately qualify as payment services under the EU's second Payment Services Directive were required to apply to the Central Bank of Cyprus for Payment Institution or Electronic Money Institution authorisation by 20 February 2026 — a deadline that has now passed. Electronic-money institutions already authorised by the Central Bank and issuing e-money tokens have a further route open to them: they may extend into related crypto-asset services through a notification under Article 60 of the Regulation, a route not available to payment institutions. The practical effect is a two-track structure in which firms issuing e-money tokens sit under the Central Bank's payments authorisation regime while other crypto-asset services sit under the Securities and Exchange Commission's licensing regime, with the Article 60 notification acting as the bridge between the two for qualifying e-money institutions.

#### Cross-Monitor Connections

The dual-licensing mechanics connecting e-money-token services to Cyprus's payment institution and electronic-money institution authorisation regime overlap directly with the broader payments-licensing environment in Cyprus, where the same Central Bank authorisation process and deadline structure apply. That overlap is structural rather than incidental: a firm's standing under one regime is a precondition for its standing under the other wherever e-money tokens are involved.

#### Outlook

With the transitional window now closed, the near-term picture for Cyprus turns on enforcement follow-through: whether firms that missed the February filing deadline have in fact ceased services or wound down, and whether the Commission takes any visible action against providers continuing to operate without authorisation. On the stablecoin side, attention should turn to how many electronic-money institutions make use of the Article 60 notification route to extend into crypto-asset services, since that uptake will shape how concentrated crypto-asset-related activity becomes within Cyprus's existing payments-licensed population versus newly authorised, Commission-licensed entrants.

3 earlier updates not shown here.

###### Standing brief · as of 25 August 2026

Written before the update above. Where they differ, the update is the more recent position.

#### Lead Signal

Cyprus's Markets in Crypto-Assets Regulation transitional backstop has closed. The Article 143(3) national grandfathering arrangement, which had allowed crypto-asset service providers operating under pre-MiCA Cypriot law to continue pending MiCA authorisation, expired on 1 July 2026 -- and this cycle's research corrects an earlier framing that treated that date as still ahead of us. CySEC set 27 February 2026 as the cut-off for MiCA authorisation applications from providers relying on the transitional relief, required wind-down plans from any provider that had not applied by that date, and followed through with a post-deadline AML circular issued 9 July 2026. Together these confirm that Cyprus has moved from a live transitional window into a concluded, actively enforced post-deadline compliance state: any entity now providing crypto-asset services to EU clients without a MiCA licence is in breach of EU law and must have ceased those services or be executing an approved wind-down. This is a material shift in framing rather than a new legal event -- the underlying deadline was always 1 July 2026 -- but it changes how the Cypriot licensing landscape should be read going into the second half of 2026: the question is no longer when the grace period ends but who has actually exited or wound down since it did. CySEC's own authorisation activity in the run-up to and since the deadline -- including MiCA CASP licences granted to Revolut and eToro, which now offer regulated crypto services across the EEA under Cypriot authorisation -- illustrates the licensing side of that transition working as intended, though the specific volume of firms that wound down rather than converting has not yet been independently confirmed and is worth watching for in subsequent research passes.

#### Other Developments

MiCA's token taxonomy continues to apply in Cyprus without any national carve-out: e-money tokens pegged to a single official currency, asset-referenced tokens pegged to other assets or baskets, and other crypto-assets remain three legally distinct categories, with e-money token holders retaining a direct, full-face-value redemption right against the issuer, and non-fungible crypto-assets treated as potentially falling outside the standard fungible-token categories. Consumer-protection rules under MiCA Article 66 and the custody-segregation and white-paper-liability provisions remain in force and unchanged. However, this cycle also surfaced a correction to the evidentiary basis behind Cyprus's amber consumer-protection rating: a previously cited ESMA finding of high cross-border complaint volume and supervisory shortcomings turns out to be a March 2022 MiFID II passporting peer review covering conduct years before MiCA existed, not a crypto-specific or current assessment. It is being retained only as dated, cross-domain context on CySEC's general supervisory capacity, and a fresh MiCA-era supervisory assessment of CySEC is still needed before that rating can be considered well-evidenced. On the stablecoin side, the Central Bank of Cyprus's exact allocation of Title IV credit-institution issuer-authorisation responsibility remains marked to be confirmed on ESMA's own competent-authorities list, and the Central Bank has set itself a 30 September 2026 target to bring EMI/PI supervisory practice into line with MiCA's Title VI market-abuse guidelines -- a prospective milestone rather than settled practice. On-chain activity -- staking, DeFi lending and borrowing, mining, and validator operation -- remains without any dedicated licensing regime at either EU or Cypriot level; the joint EBA/ESMA Article 142 report describes these as market trends without proposing binding rules, and mining and validator treatment specifically remains an unresearched gap rather than a confirmed regulatory silence. Cyprus's tax treatment of crypto-assets remains the thinnest area of this record: no primary-source confirmation exists that the 2002 general capital gains law extends to crypto disposals, and no Inland Revenue Department or Tax Department circular addressing crypto income tax or VAT treatment could be located.

#### Cross-Monitor Connections

Two threads in this cycle sit outside crypto's own analytical lane. The Travel Rule obligations under Regulation (EU) 2023/1113 -- requiring originator CASPs to hold counterparty information on self-hosted-address transfers and to assess address ownership above EUR 1,000 -- together with CySEC's 9 July 2026 post-deadline AML circular, fall within the AML/CFT surface that crypto now subscribes to rather than independently analyses; that material is being routed to financial-integrity for original treatment. Separately, the payments-adjacent dimension of Cyprus's stablecoin regime -- e-money token redemption rights and the Central Bank's Title IV/VI compliance timeline running to 30 September 2026 -- is relevant to how payment instruments are framed and is being flagged to world-payments for tracking on that basis. Neither connection changes crypto's own module ratings this cycle, but both mean that a fuller picture of Cyprus's AML posture and stablecoin-as-payment-instrument treatment will depend on synthesis across monitors rather than this record alone.

#### Outlook

The near-term watch list for Cyprus centres on confirmation rather than new rulemaking. Whether the Central Bank of Cyprus actually brings EMI/PI supervisory practice into compliance with the Title VI market-abuse guidelines by its self-set 30 September 2026 target is the clearest dated marker on the horizon, and its outcome will speak to whether Cyprus's stablecoin_regime amber rating should move. A parallel and less time-bound item is whether the Central Bank clarifies its own share of Title IV credit-institution competent-authority responsibility, which ESMA's list still marks as unresolved. On consumer protection, the priority is sourcing a genuinely current, MiCA-era supervisory assessment of CySEC to replace the stale 2022 MiFID II peer-review evidence now downgraded in this record. And on tax, the absence of any crypto-specific guidance from the Cyprus Inland Revenue Department or Tax Department remains an open structural gap that primary-source research should target directly rather than continuing to infer from general accession-era summaries. None of these items currently point toward a change in Cyprus's overall regulated status, but each represents a live thread that could shift an individual module's rating in either direction as fresh primary-source material becomes available.

Read full brief · 1490 words

Key regulatory facts for Cyprus Regulatory Dimension Cyprus Standing Position

Jurisdiction Cyprus (CY)

Regulatory Scope Crypto & Digital Asset Regulation (8 modules, 38 sourced findings)

Crypto Licensing Cyprus tabled the Markets in Crypto-Assets Bill of 2026 in Parliament on 8 October 2026, to build out CBC/CySEC's domestic enforcement powers and penalties under MiCA.

Token Classification Cyprus follows MiCA's tripartite crypto-asset taxonomy (asset-referenced tokens, e-money tokens, and other crypto-assets including utility tokens and NFTs), applied uniformly under CySEC/CBC supervision.

On-Chain Activity Regime MiCA as applied in Cyprus does not create a bespoke licensing category for staking, DeFi lending, DEX operation, mining, or node/validator operation; these remain either unregulated or captured only incidentally...

Stablecoin Regime The Central Bank of Cyprus (CBC) is designated alongside CySEC for MiCA Title IV (ART/EMT issuance) responsibilities, with CySEC handling non-credit-institution authorisation and CBC handling credit institutions/EMIs.

Primary Instruments Cited ESMA, ESMA, ESMA, CoinDesk, Cyprus CASPs (pre-MiCA national regime)

Last Confirmed / Updated 2026-10-25 (46 sources in cumulative register)

8 of 8 categories

Signal
Moved
Judgment
Gap

Density
Comfortable
Compact

Expand all sources
Reset all

Selections OR within a group, AND across groups. Press / to search.

### Cyprus: C1 Crypto LicensingGreenEnacted in forceModule confidence: Probable▾

Cyprus tabled the Markets in Crypto-Assets Bill of 2026 in Parliament on 8 October 2026, to build out CBC/CySEC's domestic enforcement powers and penalties under MiCA.

Open gap — crypto-int-1 No primary CySEC or Cyprus gazette text locating the national MiCA Art 111 penalty schedule. no under-indexing note recorded

Horizon · 2027-Q1 (± six months) Markets in Crypto-Assets Bill of 2026 - domestic MiCA enforcement framework Proposed · Tier 3 source

#### Crypto Licensing

Cyprus's crypto-licensing landscape is anchored in the Markets in Crypto-Assets Regulation (MiCA), and CySEC operates as Cyprus's Title V competent authority for authorising crypto-asset service providers, with Title IV issuer authorisation and Title V notification for credit institutions and electronic-money institutions falling to the Central Bank of Cyprus. This designation is drawn directly from ESMA's own Article 93 competent-authorities list and is not in question.

The most significant development in this cycle concerns the Article 143(3) national transitional regime -- the mechanism that had allowed crypto-asset service providers operating under pre-MiCA Cypriot law to keep serving clients while their MiCA authorisation applications were pending. That transitional window has now concluded. ESMA's own statement on the end of transitional periods under MiCA confirms the EU-wide backstop expired on 1 July 2026, and Cyprus-specific reporting adds operational detail: CySEC set 27 February 2026 as the deadline for providers relying on the transitional relief to submit a MiCA authorisation application, required a formal wind-down plan from any provider that had not applied by that date, and issued a post-deadline AML circular on 9 July 2026 addressing the compliance state of providers moving through or past the transition. Read together, these facts establish that Cyprus's transitional period is a closed chapter rather than a live one: any entity providing crypto-asset services to EU clients without a MiCA licence after 1 July 2026 is now in breach of EU law and must either have ceased those services or be actively executing an approved wind-down plan.

This closure sits alongside continued licensing activity on the other side of the ledger. CySEC has granted MiCA CASP authorisations to major platforms including Revolut and eToro, each of which is now positioned to offer regulated crypto services across the EEA on the strength of its Cypriot authorisation -- a concrete illustration of MiCA's passporting design operating as intended and of Cyprus's role as an EEA-wide licensing gateway for at least some large platforms. One caution from this cycle's review process is worth flagging explicitly: Taurus, a crypto custodian previously associated with Cyprus in some reporting, holds a MiFID II licence rather than a MiCA CASP authorisation, and should not be read as evidence of MiCA-operative licensing activity. The distinction matters because MiFID II and MiCA authorisations carry different scopes, obligations, and supervisory consequences, and conflating the two would overstate the breadth of CySEC's MiCA-licensed population.

#### Outlook

The crypto-licensing picture in Cyprus is now best read as settled-and-enforced rather than transitional. The open question going forward is less about the rules themselves -- which are fully in force -- and more about compliance outcomes: how many providers that relied on the Article 143(3) transitional window actually completed wind-down versus converted to full MiCA authorisation, and whether CySEC's 9 July 2026 AML circular signals a broader supervisory posture toward post-deadline non-compliance. Continued monitoring of CySEC's authorisation register and enforcement actions over the coming quarters should clarify both points. No change to the green traffic-light rating is indicated by this cycle's findings, but the shift from transition pending to transition concluded and enforced is itself the substantive development worth carrying forward into subsequent cycles.

Read full sub-brief · 524 words Periodic update · new data 2026-10-25

#### Crypto Licensing

Cyprus adopted the full eighteen-month national transitional period permitted under Article 143(3) of the Markets in Crypto-Assets Regulation for crypto-asset service providers that had been operating under the country's pre-existing national regime. That window ran from 30 December 2024 to 1 July 2026. Within it, the Cyprus Securities and Exchange Commission set its own internal deadline of 27 February 2026 by which firms needed to have filed a complete authorisation application in order to continue benefiting from the transitional arrangement while that application was under review.

As of 1 July 2026, the transitional period has fully expired. The Commission has confirmed that the provision of crypto-asset services in or from Cyprus is now permitted only in full compliance with the Regulation's comprehensive authorisation and conduct provisions. Any provider that did not file a complete application by the February cut-off is required to submit a wind-down plan and to cease providing services. This is a hard compliance line rather than a phased one: the regime has moved from a transitional, registration-based tolerance to full-licence-only operation, and non-compliant firms face enforcement rather than a further grace period.

What is not yet independently confirmed from a primary Commission or gazette text is the specific penalty schedule applicable to a firm that continues operating without authorisation after the cut-off, nor the current state of the authorised-versus-wound-down population of former transitional-regime firms. The legal position — that unauthorised operation is now impermissible and wind-down is mandatory — is confirmed; the operational detail of how that is being enforced in practice is not yet visible in the available record.

#### Outlook

The question for the coming period is enforcement follow-through: whether firms that missed the filing deadline have in practice ceased operations, and whether the Commission publishes any formal enforcement notices naming specific providers. Firms that filed by 27 February 2026 and are still awaiting a licensing decision occupy a narrower, but still live, category worth watching, since their position depends on the pace of the Commission's authorisation process rather than on the now-closed transitional window itself.

3 earlier distinct update(s) Periodic update · new data 2026-10-18

#### Crypto Licensing

Cyprus's Markets in Crypto-Assets Regulation transitional period closed on 1 July 2026, marking the end of the full eighteen-month national grandfathering window that began on 30 December 2024. Cyprus adopted this transitional window in full, the maximum period permitted under the regulation, and the Cyprus Securities and Exchange Commission set 27 February 2026 as its internal cut-off for existing national-registrant crypto-asset service providers to file a complete application for authorisation. A pending, incomplete application did not extend the right to continue operating past the 1 July 2026 deadline; non-filers were required to submit wind-down plans. This is now a settled, in-force feature of the Cyprus licensing landscape rather than a live development, but it frames the baseline against which the current legislative move should be read.

The current live development is the Markets in Crypto-Assets Bill of 2026, submitted to the House of Representatives on 8 October 2026 following Cabinet approval on 10 September 2026. The bill would formalise the domestic enforcement architecture underpinning the regulation, granting the Central Bank of Cyprus and the Cyprus Securities and Exchange Commission powers to investigate, conduct inspections, issue compliance orders, and restrict, suspend, or withdraw a crypto-asset service provider's authorisation. The proposed penalty structure is significant in scale: corporate fines of at least five million euro for specified infringements, rising to fifteen million euro or more on a turnover-linked basis for serious market abuse, with individual fines of up to five million euro and the possibility of temporary management restrictions for responsible individuals. No primary bill text or House of Representatives committee record has been retrieved this cycle, so the figures and powers described here should be read as the bill as tabled in press reporting, not as settled, enacted law; the final version may differ following parliamentary scrutiny.

Separately, Cyprus's standing licensing architecture continues to operate via two parallel routes: Article 63 authorisation by the Cyprus Securities and Exchange Commission for new crypto-asset service providers, and an Article 60 notification route available to entities already regulated under another licence, such as existing investment-firm, electronic-money-institution or payment-institution authorisation holders. CySEC maintains separate registers for each route. This structure is unchanged this cycle and continues to govern market entry independently of the pending enforcement bill.

#### Outlook

The Markets in Crypto-Assets Bill of 2026 is expected to progress through further House of Representatives stages, though no specific enactment date is confirmed; the regulatory horizon estimate places material impact around the first quarter of 2027, with a half-year uncertainty band reflecting the absence of a confirmed legislative timetable. Confidence in the bill's final scope, including the precise fine thresholds, will firm once the official parliamentary text and any committee-stage amendments become available. In the meantime, the existing Article 63 and Article 60 licensing routes, and the July 2026 transitional-period closure, remain the settled baseline for market access in Cyprus.

Periodic update · new data 2026-10-11

#### Crypto Licensing

The defining event in Cyprus's crypto-licensing regime this cycle is the complete expiry of the MiCA Article 143(3) national transitional window on 1 July 2026. This transitional regime had permitted crypto-asset service providers that were operating under Cyprus's prior national registration framework to continue doing so for a limited period while pursuing full MiCA authorisation. The mechanism required a complete MiCA authorisation application to be submitted to CySEC by 27 February 2026; entities that did not file by that date were required to submit a wind-down plan and cease CASP operations by 1 July 2026. For entities that did file, continued operation under the national framework was permitted only until CySEC reached a decision, approval or refusal, or until 1 July 2026, whichever came first. That final cutoff has now passed, meaning the transitional pathway is entirely closed: only full MiCA authorisation or an Article 60 cross-border notification now provides a lawful basis for CASP activity in Cyprus.

This closure is structurally significant because it eliminates an entire category of lawful operating basis rather than incrementally raising a compliance bar. A CASP that relied on the transitional window and did not secure either full authorisation or an Article 60 notification by the deadline has, as a matter of law, no remaining basis to continue operating under the prior regime from 1 July 2026 onward. The general prohibition on unauthorised provision of CASP services under MiCA Article 111 applies to any such firm continuing to operate post-deadline, though the exact Cyprus-specific administrative fine maxima implementing Article 111 were not located this cycle; the national fine-maxima table and CySEC's own implementing directive remain a research gap.

Own-funds requirements for Cyprus CASPs follow the standard MiCA tiered structure under Article 67 and Annex IV: approximately EUR 50,000 for firms providing reception and transmission of orders, EUR 125,000 for firms providing execution of orders or exchange services, and EUR 150,000 for firms operating a trading platform for crypto-assets. These figures derive from vendor and consultancy commentary rather than from CySEC's own authorisation directive, which was not independently retrieved this cycle, so they should be treated as probable rather than confirmed pending primary-source verification.

The practical effect of the transitional-regime closure is a narrowing of the Cyprus-domiciled CASP population to those entities that cleared the full MiCA authorisation bar, a materially higher threshold than the prior national registration standard. This narrowing is consistent with the broader EU-wide MiCA rollout pattern, in which national transitional regimes of varying length have been progressively closing across member states through 2026, with Cyprus's 1 July 2026 cutoff representing one of the standard-length transitional windows rather than an outlier.

#### Outlook

The near-term question for Cyprus's crypto-licensing regime is whether CySEC takes visible enforcement action against any entity that continued CASP operations past 1 July 2026 without having secured authorisation or filed a wind-down plan; no such enforcement action has been identified within this cycle's research. A further open item is confirmation of the Cyprus-specific administrative fine maxima implementing MiCA Article 111, which would give a fuller picture of the enforcement exposure facing any residual unauthorised operator. Firms considering Cyprus as a CASP licensing jurisdiction should now treat full MiCA authorisation as the only available pathway, with no further national grace period remaining.

Periodic update · new data 2026-09-28

#### Crypto Licensing

Cyprus's crypto-asset service provider licensing regime completed its transition to full MiCA authorisation this period. Crypto-asset service providers operating in Cyprus must now hold MiCA authorisation from the Cyprus Securities and Exchange Commission (CySEC); the pre-MiCA national CASP registration regime, which had provided a lawful transitional operating basis, expired on 1 July 2026. Firms registered under that national regime were required to have filed a complete MiCA authorisation application by 27 February 2026 in order to continue operating through to the 1 July 2026 cutover; those that did not file were expected to wind down national-regime activity.

This is a confirmed, T1-sourced development directly from CySEC's own published guidance, and it settles what had previously been a transitional and therefore inherently temporary regulatory position. From 1 July 2026 onward there is no parallel national registration track running alongside MiCA authorisation in Cyprus: MiCA is the only lawful basis for CASP activity. The regime is now settled rather than transitional, which is the basis for a green traffic-light rationale on this module notwithstanding the significant procedural change that occurred to reach that settled state.

#### Outlook

With the transitional pathway now closed, the near-term watch item is enforcement visibility: whether any national-regime holdouts continued CASP activity in Cyprus without MiCA authorisation past 1 July 2026, and if so, what enforcement response CySEC takes. No such finding has surfaced this cycle.

1 further periodic run re-emitted the standing brief unchanged and is not shown.

Sources and findings (8)
- T1[ESMA](https://www.esma.europa.eu/sites/default/files/2024-12/List_of_Competent_Authorities_notified_to_ESMA_under_MiCA.pdf) — CySEC is the designated competent authority for authorisation of crypto-asset service providers under Title V of MiCA in Cyprus, while CBC handles Title IV (ARTs/EMTs) and credit institutions/EMIs under Title V notification.
- T1[ESMA](https://www.esma.europa.eu/sites/default/files/2024-12/List_of_MiCA_grandfathering_periods_art._143_3.pdf) — Crypto-asset service providers that provided services in Cyprus in accordance with pre-30 December 2024 national law may continue to do so under Article 143(3) transitional measures until granted or refused MiCA authorisation, or until 1 July 2026, whichever is sooner.
- T1[ESMA](https://www.esma.europa.eu/sites/default/files/2026-04/ESMA75-113276571-1679_Statement_on_the_end_of_transitional_periods_under_MiCA.pdf) — The EU-wide MiCA transitional period expires on 1 July 2026; after this date any entity providing crypto-asset services to EU clients without a MiCA licence is in breach of EU law and must cease such services.
- T3[CoinDesk](https://www.coindesk.com/policy/2025/10/23/revolut-secures-mica-license-in-cyprus-expanding-regulated-crypto-services-across-europe) — CySEC has granted MiCA CASP authorisations to major crypto platforms (e.g., Revolut, eToro), enabling regulated crypto services across the EEA, evidencing an operative licensing regime in Cyprus.
- T3[Cyprus CASPs (pre-MiCA national regime)](https://www.cyprus-insider.com/cyprus-under-mica-crypto-transitional-period/) — MiCA Art 143(3): Cyprus adopted the full 18-month national transitional period for CASPs operating under the pre-existing national regime, running from 30 December 2024 to 1 July 2026, after which continued operation requires MiCA authorisation or a pending application filed by CySEC's 27 February 2026 internal deadline
- T1[CySEC](https://www.agplaw.com/micas-transition-ends-on-1-july-2026-is-your-crypto-business-authorised-to-continue/) — the Article 143(3) MiCA transitional/grandfathering window, which expired on 1 July 2026: CySEC required MiCA authorisation applications by 27 February 2026, mandated wind-down plans for crypto-asset service providers that had not applied, and issued a post-deadline AML circular on 9 July 2026
- T2[Cyprus crypto-asset service providers](https://www.cyprus-insider.com/cysec-mica-regulation-now-fully-enforced-for-crypto-services-unauthorised-providers-face-action/) — From 1 July 2026, CySEC confirmed that provision of crypto-asset services in or from Cyprus is permitted only in full compliance with MiCA; unauthorised providers that did not file a complete application by 27 February 2026 were required to submit a wind-down plan and cease services
- T3[Cyprus crypto-asset service providers](https://www.lckfs.com/post/the-grace-period-is-over-crypto-services-in-cyprus-after-mica) — Crypto-asset services in Cyprus now require either Art 63 CySEC CASP authorisation or an Art 60 notification route for already-regulated entities (e.g. existing CIF/EMI/PI licence holders); CySEC maintains separate registers for each route.

### Cyprus: C2 Token ClassificationGreenEnacted in forceModule confidence: Probable▾

Cyprus follows MiCA's tripartite crypto-asset taxonomy (asset-referenced tokens, e-money tokens, and other crypto-assets including utility tokens and NFTs), applied uniformly under CySEC/CBC supervision. A CY-specific Joint ESAs consumer factsheet confirms EMT redemption rights and NFT non-fungibility treatment as applied in the Cypriot market context.

C2 · Token Classification — Full Module Record 0 sub-modules · 180 words · 4 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login) [View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Cyprus: C3 On-Chain Activity RegimeAmberEnacted in forceModule confidence: Probable▾

MiCA as applied in Cyprus does not create a bespoke licensing category for staking, DeFi lending, DEX operation, mining, or node/validator operation; these remain either unregulated or captured only incidentally where a CASP bundles them as an ancillary service under its Title V authorisation (e.g., Revolut's Cyprus-licensed entity marketing zero-fee staking). EBA/ESMA joint MiCAR Article 142 analysis flags DeFi, lending/borrowing and staking business models as emerging-risk areas without dedicated rules.

C3 · On-Chain Activity — Full Module Record 0 sub-modules · 180 words · 3 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Cyprus: C4 Stablecoin RegimeAmberEnacted in forceModule confidence: Probable▾

The Central Bank of Cyprus (CBC) is designated alongside CySEC for MiCA Title IV (ART/EMT issuance) responsibilities, with CySEC handling non-credit-institution authorisation and CBC handling credit institutions/EMIs. CBC has separately indicated (via the ESMA market-abuse guidelines compliance table) that it intends to comply with Title VI market-abuse guidelines for EMIs/PIs only by 30 September 2026, citing no current express intention of regulated entities to begin related activities — this compliance date is prospective/not-yet-effective and should be read as a CAUTION-flagged, pre-live position rather than a settled in-force requirement.

Periodic update · new data 2026-10-25

#### Stablecoin Regime

Cyprus's stablecoin-adjacent regime operates at the intersection of the Markets in Crypto-Assets Regulation's e-money-token provisions and the country's existing payments licensing framework under the second Payment Services Directive. Crypto-asset service providers that were already offering services connected to e-money tokens, where those services separately qualify as payment services, were required to submit an application to the Central Bank of Cyprus for Payment Institution or Electronic Money Institution authorisation by 20 February 2026. That deadline, confirmed directly from the Central Bank's own published guidance, has now passed.

A separate but related route exists for firms on the other side of this dual structure. Electronic-money institutions that are already authorised by the Central Bank of Cyprus and that issue e-money tokens may extend their activities into related crypto-asset services through a notification made under Article 60 of the Regulation. This notification route is not available to payment institutions, which sit under a narrower authorisation than electronic-money institutions and cannot use it to pick up crypto-asset services on the strength of their existing payments licence alone.

Taken together, the practical architecture is one in which firms whose services touch e-money tokens are channelled toward the Central Bank's payments authorisation regime, while the Cyprus Securities and Exchange Commission's licensing regime governs the broader universe of crypto-asset services. The Article 60 notification is the formal bridge allowing an already-authorised electronic-money institution to add crypto-asset services without needing full, separate authorisation from the Commission for that specific extension. Reserve-asset and prudential specifics applicable to Cyprus-domiciled e-money-token issuers have not been independently verified from a primary source this period.

#### Outlook

The period ahead should show how many electronic-money institutions authorised by the Central Bank actually make use of the Article 60 notification route, which will indicate whether e-money-token-linked crypto-asset activity in Cyprus concentrates within the existing payments-licensed population or shifts toward separately Commission-licensed crypto-asset service providers. Any divergence between the two tracks is likely to surface first through authorisation announcements from either the Central Bank or the Commission rather than through legislative change, since the underlying rule structure is now settled.

Periodic update · new data 2026-09-28

#### Stablecoin Regime

Cyprus's stablecoin-relevant regulatory position rests on the directly-applicable EU framework: MiCA Titles III and IV, covering asset-referenced tokens (ARTs) and e-money tokens (EMTs) respectively, have been in application in Cyprus, as in every EU member state, since 30 June 2024. No Cyprus-specific derogation or supplementary national instrument was identified this cycle.

A notable development this period is market commentary characterising the Cyprus electronic-money-institution (EMI) licence, issued and supervised by the Central Bank of Cyprus, as a viable issuance foundation for MiCA-compliant e-money tokens. The reasoning offered is that the EMI capital and safeguarding regime already administered by the Central Bank of Cyprus under existing EMI rules provides infrastructure that maps naturally onto the prudential requirements MiCA imposes on EMT issuers. This is market/industry commentary rather than a confirmed regulatory position from CySEC or the Central Bank of Cyprus itself, and is accordingly held at an uncertain confidence tier; it should be read as an indication of market positioning and legal-advisory framing rather than a settled supervisory statement.

The combination of a settled EU-wide token-classification framework and an active national EMI licensing route gives Cyprus a plausible institutional pathway into EMT issuance, even though the specific claim that the EMI route is being actively used or endorsed for that purpose is not yet confirmed.

#### Outlook

Watch for any CySEC or Central Bank of Cyprus statement directly addressing the use of the EMI licence as an EMT issuance vehicle, which would upgrade this from market commentary to a confirmed regulatory position.

C4 · Stablecoins & EMTs — Full Module Record 0 sub-modules · 180 words · 5 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Cyprus: C5 Consumer ProtectionAmberEnacted in forceModule confidence: Probable▾

MiCA-derived consumer-protection duties (marketing fairness, custody segregation, complaint handling, risk disclosure) apply to CY-licensed CASPs. However, an ESMA peer review specifically targeting CySEC found Cyprus had the highest level of outgoing cross-border activity and complaint volume among six reviewed NCAs, with supervisory shortcomings in monitoring aggressive marketing of speculative products — prompting the first-ever Article 16 ESMA recommendations issued to a national competent authority.

Open gap — crypto-int-5 No CY-specific CySEC guidance or enforcement detail on custody/segregation of client crypto-assets (MiCA Art 75). no under-indexing note recorded

#### Consumer Protection

Cyprus's consumer-protection framework for crypto-assets rests on binding, in-force MiCA provisions. Article 66 requires crypto-asset service providers to give clients information that is fair, clear, and not misleading, including ensuring that marketing communications are clearly identified as such. Providers must also keep client crypto-assets and funds segregated from their own assets and are prohibited from using client assets on their own account. Issuers of asset-referenced tokens carry a further set of obligations: they must publish a crypto-asset white paper and their marketing communications on their website, and they are liable for damages arising from incorrect information in that white paper. None of these provisions is new or contested in this cycle; they represent settled, binding EU law as applied in Cyprus.

The more consequential development this cycle is a correction to the evidentiary basis underlying Cyprus's amber consumer-protection rating. A previously cited ESMA finding -- that CySEC had the highest outgoing cross-border activity and complaint volume among six reviewed national competent authorities, alongside noted supervisory shortcomings -- has been re-examined and found to originate from a March 2022 ESMA peer review of cross-border MiFID II passporting activity, covering supervisory conduct between August 2018 and August 2020. That review predates MiCA entirely and concerns securities-market passporting supervision, not crypto-asset or MiCA-specific supervision. Treating it as current, crypto-specific evidence would have overstated what is actually known about CySEC's present-day MiCA-era supervisory performance. It is retained in this record only as dated, cross-domain context on CySEC's general supervisory capacity -- useful background, but not a substitute for a genuine assessment of how CySEC is currently supervising crypto-asset service providers under MiCA.

#### Outlook

The substantive consumer-protection rules in force in Cyprus are not in question and require no further monitoring at this time beyond routine confirmation of continued application. What does require attention is sourcing a current, MiCA-era supervisory assessment of CySEC -- whether through a future ESMA peer review specific to crypto-asset supervision, enforcement statistics, or CySEC's own reporting -- to properly ground this module's amber rating going forward. Until such a source is located, the rating should be understood as resting on the strength of the binding rules themselves rather than on any confirmed assessment of supervisory execution.

Read full sub-brief · 368 words Periodic update · new data 2026-10-18

#### Consumer Protection

The Cyprus Securities and Exchange Commission published public warnings on 2 and 6 October 2026, naming six websites offering or appearing to offer investment or crypto-asset services without the required authorisation in or targeting Cyprus. This is dated, direct regulator action within the current recency window and demonstrates that CySEC's market-surveillance function continues to identify and publicise unauthorised activity on an ongoing basis, independent of the broader legislative changes moving through Parliament.

This warning activity sits alongside a standing supervisory programme: the Cyprus Securities and Exchange Commission is conducting on-site and desk-based reviews of a representative sample of authorised Cyprus crypto-asset service providers, running from the second half of 2026 through the first half of 2027, under the European Securities and Markets Authority's 2026 Common Supervisory Action. The programme's focus areas are custody security, key and storage management, and digital resilience, directly relevant to consumer-protection outcomes for clients of authorised Cyprus crypto-asset service providers. While this programme predates the current cycle and is not a new development in itself, it remains material to the jurisdiction's overall consumer-protection posture and should be read together with the unauthorised-website warnings as two complementary strands of the same supervisory effort: one targeting unauthorised actors operating outside the regulatory perimeter, and the other targeting the operational robustness of firms already inside it.

The pending Markets in Crypto-Assets Bill of 2026, while primarily a licensing and enforcement-powers development, also carries consumer-protection significance: the bill's proposed fines for serious market abuse, up to fifteen million euro or more on a turnover-linked basis, and its provision for restricting or suspending a firm's authorisation, would give the Central Bank of Cyprus and CySEC a materially stronger toolkit for responding to conduct that harms consumers of regulated crypto-asset services, beyond the public-warning mechanism currently used against unauthorised, unregulated actors.

#### Outlook

CySEC's practice of issuing dated public warnings against unauthorised websites is expected to continue as a routine feature of ongoing market surveillance, independent of the pending legislative changes. The European Securities and Markets Authority's Common Supervisory Action on custody is scheduled to run through the first half of 2027, and its findings, once published, would be expected to inform any subsequent consumer-protection-focused supervisory or enforcement action. Should the Markets in Crypto-Assets Bill of 2026 be enacted substantially as tabled, the resulting enforcement powers would be expected to extend CySEC's consumer-protection toolkit beyond public warnings to include inspections, compliance orders, and suspension or withdrawal of authorisation for regulated firms found non-compliant.

1 earlier distinct update(s) Periodic update · new data 2026-10-11

#### Consumer Protection

Following the 1 July 2026 expiry of the MiCA Article 143(3) transitional regime, CySEC echoed a statement from the European Securities and Markets Authority (ESMA) warning that clients of unauthorised crypto-asset providers do not benefit from MiCA's client-asset safeguards. This warning is a direct consumer-protection consequence of the licensing-regime closure covered elsewhere in this brief: with the transitional pathway closed, any entity continuing to provide crypto-asset services in Cyprus without full MiCA authorisation or an Article 60 cross-border notification falls outside the perimeter of MiCA's protective framework entirely, meaning clients dealing with such an entity have no recourse to MiCA's client-asset segregation, custody, and safeguarding provisions.

The significance of this warning lies in its timing and its function as a clear-cut consumer-facing signal rather than a technical compliance notice. By issuing it immediately following the transitional-regime expiry, CySEC is drawing a bright line for Cyprus-based or Cyprus-facing crypto-asset clients: the protective value of MiCA's safeguards is now conditional on dealing with a properly authorised entity, and that authorisation status is no longer ambiguous or subject to a transitional grace period. For consumers who may not be aware that a provider's transitional registration has lapsed, this creates a meaningful information gap that the ESMA-echoed warning is intended to close.

Beyond this post-transition warning, no additional Cyprus-specific consumer-protection development, such as new custody or segregation guidance going beyond the text of MiCA Article 75, was located this cycle. The consumer-protection regime in Cyprus continues to rest on the MiCA framework's own protective provisions, supplemented by this cycle's regulatory warning rather than by any new national rule or guidance document.

#### Outlook

The practical test of this warning's effectiveness will be whether Cyprus-based crypto-asset clients meaningfully shift away from any remaining unauthorised providers in response to it, a shift that is not yet observable from the available record. CySEC's willingness to echo ESMA-level consumer warnings promptly following a regulatory-deadline closure suggests the regulator intends to maintain active consumer-facing communication as the post-transition landscape settles, and further warnings of this kind may follow if unauthorised provision persists.

1 further periodic run re-emitted the standing brief unchanged and is not shown.

Sources and findings (5)
- T1[ESMA](https://www.esma.europa.eu/sites/default/files/2025-07/ESMA35-1872330276-2380_Final_Report_on_MiCA_Guidelines_on_knowledge_and_competence.pdf) — Article 66 of MiCA provides that crypto-asset service providers shall provide their clients with information that is fair, clear and not misleading, including in marketing communications, which shall be identified as such.
- T1[ESMA](https://www.esma.europa.eu/press-news/esma-news/esma-finds-shortcomings-in-supervision-cross-border-investment-activities-and) — ESMA found that out of six jurisdictions reviewed, Cyprus had the highest level of outgoing cross-border activity and by far the highest number of complaints relating to firms' cross-border activities, with CySEC's supervisory activities proving insufficient to address risks from aggressive marketing of speculative products.
- T1[EUR-Lex](https://eur-lex.europa.eu/EN/legal-content/summary/european-crypto-assets-regulation-mica.html) — MiCA requires crypto-asset service providers to keep clients' crypto-assets and funds separate from other assets and not use them on their own account.
- T1[EUR-Lex](https://eur-lex.europa.eu/EN/legal-content/summary/european-crypto-assets-regulation-mica.html) — Issuers of asset-referenced tokens must publish a crypto-asset white paper and any marketing communication on their website and are liable for damages for incorrect information in the white paper.
- T3[CySEC](https://news.bitcoin.com/regulation-and-legal/cyprus-targets-on-site-audits-for-crypto-custodians/) — CySEC is running on-site inspections and desk-based reviews of a representative sample of authorised Cyprus CASPs from H2 2026 through H1 2027 under ESMA's 2026 Common Supervisory Action, examining custody security, key/storage management and digital resilience.

### Cyprus: C6 Tax TreatmentAmberEnacted in forceModule confidence: Probable▾

No CY-specific Inland Revenue Department circular or CySEC/Ministry of Finance guidance on the taxation of crypto-asset gains, income, or VAT treatment was located in this research pass. Cyprus's general capital gains tax law (adopted 2002) is historically scoped to disposals of Cyprus immovable property and shares in companies holding such property; whether or how it extends to crypto-asset disposals has not been confirmed by a primary tax-authority source in this pass. This module is emitted amber pending primary-source escalation.

Periodic update · new data 2026-10-11

#### Tax Treatment

Cyprus introduced a new, clearly defined tax treatment for individual crypto-asset gains this cycle. Article 20E of the Income Tax Law imposes a flat 8% tax on an individual Cyprus tax resident's profit from the disposal of crypto-assets, effective from 1 January 2026. The tax base is calculated as disposal proceeds minus acquisition cost and directly related expenses, and the flat rate applies independently of the individual's other income and independently of Cyprus's progressive income-tax bands, meaning crypto-disposal gains are carved out of the ordinary personal income-tax schedule entirely and taxed instead at a single, predictable rate regardless of the taxpayer's overall income level.

This is a well-sourced and dated statutory provision, directly traceable to the Income Tax Law amendment, and represents a meaningful simplification relative to a scenario in which crypto gains might otherwise have been taxed at Cyprus's progressive income-tax rates, which rise considerably higher than 8% at upper income bands. For Cyprus tax-resident individuals holding or trading crypto-assets, the flat 8% regime offers rate certainty: the tax liability on a given disposal is calculable without reference to the taxpayer's other income sources for the year.

Accompanying the new tax rate is a record-keeping obligation: taxpayers must retain, for each crypto-asset disposal, the acquisition date, the quantity disposed of, the cost base, transaction fees incurred, the disposal date, the disposal value, the transaction type, and the resulting gain-or-loss computation. This documentation requirement gives the Article 20E regime an administrative backbone, ensuring that the Cyprus tax authority has a basis to verify the flat-rate tax computation on audit, and placing a non-trivial bookkeeping burden on individual crypto investors who may not otherwise maintain transaction-level records of this granularity.

The combination of a clear flat rate and a specific record-keeping requirement suggests Cyprus has approached crypto taxation as a distinct, self-contained regime rather than attempting to fit crypto-asset gains into existing capital-gains or income-tax categories by interpretation. This is a notable degree of statutory specificity relative to many jurisdictions that continue to apply general tax principles to crypto-assets without a dedicated statutory provision.

#### Outlook

The first full test of the Article 20E regime will come with the 2026 tax year's filing cycle, when individual Cyprus tax residents will need to apply both the flat 8% rate and the accompanying record-keeping requirements to their actual disposal activity for the first time. Whether the Cyprus tax authority issues further implementing guidance on edge cases, such as treatment of crypto-to-crypto exchanges, staking rewards, or airdrops, within the Article 20E framework remains to be seen and was not located within this cycle's research.

C6 · Tax Treatment — Full Module Record 0 sub-modules · 180 words · 5 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Cyprus: C7 Cross-Border TransferGreenEnacted in forceModule confidence: Probable▾

Cyprus-based CASPs are subject to EU Regulation 2023/1113 (the crypto Travel Rule), which extends FATF-style originator/beneficiary information requirements to crypto-asset transfers and treats EMTs as crypto-assets for this purpose. MiCA authorisation obtained via CySEC additionally passports Cypriot CASPs to operate across all EEA states without additional national cross-border restriction.

Periodic update · new data 2026-09-28

#### Cross-Border Transfer

Cyprus's 2025 sanctions-reform legislation carries a direct and confirmed implication for cross-border crypto-asset transfer. Law 150(I)/2025, the National Sanctions Implementation Unit Law, defines "funds" to expressly include crypto-assets by reference to MiCA Article 3(1)(5). This definitional choice brings crypto-asset freezing and reporting obligations squarely within the remit of the National Sanctions Implementation Unit (NSIU/EMEK), the body established under the same July 2025 legislative package to centralise Cyprus's sanctions-enforcement architecture.

For cross-border crypto-asset transfer specifically, this means that any crypto-asset transfer implicating an EU or UN sanctions designation is now subject to the same freezing and reporting framework that applies to conventional funds, with the NSIU as the coordinating authority. This is a confirmed, statutorily-grounded extension of Cyprus's sanctions perimeter into the crypto-asset space, and it sits at the boundary between this consumer's cross_border_transfer module and the financial_integrity monitor's ownership of the underlying AML/sanctions obligation — this brief notes the crypto-specific nexus without re-analysing the sanctions architecture itself, which is financial_integrity's domain.

#### Outlook

Watch for the NSIU's first practical application of its crypto-asset freezing or reporting powers, an area where no Cyprus-specific implementation finding has surfaced yet beyond the statutory definitional basis itself.

C7 · Cross-Border & Travel Rule — Full Module Record 0 sub-modules · 180 words · 6 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Cyprus: C9 Commercial Activity unpopulated ▾

## Commercial Activity

Two discrete commercial events mark Cyprus's crypto-adjacent commercial activity this cycle, both involving regulated EU footprints anchored in Cyprus entities. Gate.io's Cyprus-based MiFID entity, which it acquired via its 2024 purchase of CFD broker Sheer Markets, was rebranded as Gate Securities (Cyprus) Ltd, with the rebrand announced in January 2026. The transaction's financial terms were not publicly disclosed. This rebrand reflects Gate.io's continued build-out of a regulated brokerage presence in the EU, using its existing Cyprus MiFID licence, obtained through the Sheer Markets acquisition, as the vehicle for expanding into brokerage services alongside its core exchange business.

Separately, crypto custodian Taurus SA, a Switzerland-domiciled custody specialist, was granted a MiFID II investment licence by CySEC, announced 6 May 2026. The licence enables Taurus to provide tokenised-instrument services to EU banks and asset managers, giving the firm a CySEC-supervised base specifically for institutional-client-facing tokenisation services. A MiCA application was reported as pending at the time of the licence announcement, suggesting Taurus intends to pursue a complementary MiCA authorisation alongside its MiFID II licence, likely to cover crypto-asset service activities that fall outside MiFID II's traditional securities-market perimeter. The CySEC regulatory review associated with this licence grant was a standard sector-licensing process and was cleared.

Neither transaction disclosed financial terms, which is consistent with the nature of these events as regulatory-licensing-driven commercial developments, an entity rebrand following an earlier acquisition, and a fresh licence grant, rather than disclosed-value M&A transactions with negotiated purchase prices. Both events nonetheless illustrate a broader commercial pattern: crypto-native and crypto-adjacent firms continue to view Cyprus's CySEC-supervised MiFID licensing regime as an attractive entry point into regulated EU financial-services activity. — Outlook: Whether Taurus's reported pending MiCA application is granted, and on what timeline, is not yet observable from the available record, but its pursuit alongside an already-secured MiFID II licence suggests an intent to build comprehensive EU regulatory coverage spanning both securities and crypto-asset service categories from a Cyprus base. The Gate Securities rebrand's longer-term commercial trajectory, whether it becomes a platform for expanded EU brokerage activity beyond its current scope, remains to be observed in subsequent cycles.

No periodic updates recorded in this cycle

Sources and findings (2)
- T3[Gate Securities (Cyprus) Ltd](https://www.financemagnates.com/cryptocurrency/crypto-exchange-gateio-rebrands-cyprus-mifid-entity-joining-cryptos-brokerage-push/) — Gate.io's Cyprus MiFID entity (acquired via 2024 purchase of CFD broker Sheer Markets) was rebranded as Gate Securities (Cyprus) Ltd, announced January 2026.
- T3[Taurus SA](https://www.coindesk.com/policy/2026/05/06/crypto-custody-firm-taurus-granted-mifid-license-in-cyprus) — CySEC granted crypto custodian Taurus a MiFID II investment licence (6 May 2026), enabling tokenised-instrument services to EU banks/asset managers; a MiCA application was reported pending.