#
AML/CFT Regime
Gibraltar's crypto AML/CFT framework operates under the Proceeds of Crime Act 2015 (POCA 2015) and the Funds (Transfer) Regulations 2026 (LN 2026/134, commenced 15 July 2026, replacing the 2021 Transfer of Virtual Assets Regulations). Part 3 of LN 2026/134 enforces the virtual-asset Travel Rule with no general de minimis threshold on required originator and beneficiary information, while requiring additional ownership/control verification for transfers involving self-hosted addresses above the EUR 1,000 threshold (reg.16(5) outbound exceeding the sterling equivalent of EUR 1,000; reg.18(2) inbound exceeding EUR 1,000). Token issuers selling their own tokens remain subject to AML registration under the POCA 2015 (Relevant Financial Business) (Registration) Regulations 2021 (per the GFSC VASP Registration Scope Guidance Note v1.0), whereas Virtual Asset Arrangement Providers moved into full Part 7 Financial Services Act 2019 authorisation under LN 2025/254 from 27 October 2025. Under Schedule 1B of the Financial Services (Fees) Regulations 2020 (as amended by LN 2025/257, effective 1 April 2026), DLT Providers and VAA Providers in Fee Block G1 pay a dedicated £4,017 annual AML supervision fee.
no periodic updates on record for this sub-brief
Sources and findings (2)
- T1 · Government of Gibraltar (Gibraltar Laws)Government of Gibraltar (Gibraltar Laws) — Funds (Transfer) Regulations 2026 (LN 2026/134, commenced 15 July 2026) govern virtual-asset Travel Rule obligations under POCA 2015 with no general Part 3 de minimis exemption and mandatory self-hosted-address ownership/control assessments above EUR 1,000 (reg.16(5) / reg.18(2)).retrieved M5bindingin force
- T1 · Gibraltar Financial Services CommissionGibraltar Financial Services Commission — Token issuers selling their own tokens remain registered under the POCA 2015 (Relevant Financial Business) (Registration) Regulations 2021, while VAA businesses transitioned to FSA 2019 Part 7 permission under LN 2025/254.retrieved M4bindingin force