Iceland#
Iceland is an EEA/EFTA state; a MiCA authorisation granted by any EU/EEA competent authority already carries passporting rights into Iceland as part of the EEA single market for crypto-asset services. However, MiCA's own domestic transposition into Icelandic law lags the EU timeline: as of the most recent ESMA compliance materials located, a bill to implement MiCA in Icelandic law was only expected to be submitted to Alþingi (Parliament) in fall 2025 with an intended entry into force of 1 January 2026, and the Central Bank of Iceland's designation as the national competent authority (NCA) is still flagged with an asterisk denoting non-finalised formal designation status. Pending confirmation, the applicable domestic regime for VASPs (virtual asset service providers) is the pre-MiCA AML Act framework, which already requires licensing/registration and risk-based AML/CFT supervision of VASPs, consistent with FATF Recommendation 15.
The trajectory here is liberalising: a working licensing gateway now exists and has produced at least one authorised participant, which is a meaningfully different posture from an EEA state that has incorporated MiCA in principle but has not yet seen the gateway used in practice. At the same time, the module carries a genuine open question rather than a settled one. The precise Icelandic implementing instrument — the specific domestic legal act or administrative decision that transposes MiCA's authorisation regime into Icelandic law, and the date on which it took effect — could not be confirmed from the sources available this cycle. This is logged as a sourcing gap rather than resolved by inference; the underlying EU-level framework is well evidenced, but the domestic transposition detail is not.
A related open question is enforcement architecture: whether Iceland has adopted a national penalty provision transposing MiCA Article 111, which governs the administrative sanctions available to supervisory authorities for breaches of the authorisation regime, was not located this cycle. Until that is confirmed, the practical consequences of operating without the required Article 63 authorisation in Iceland specifically remain unevidenced, even though the authorisation requirement itself is confirmed.
Outlook
The module's next material movement is likely to come from confirmation of the domestic implementing instrument and its effective date, which would resolve the current uncertainty and allow the licensing posture to be assessed with the same confidence as the EU-level framework already carries. A second authorised entity, or confirmation of the penalty regime, would also mark a step toward a fuller supervisory record.
Crypto Licensing
Iceland's crypto-licensing baseline is presently disputed rather than settled. One line of secondary commentary places Iceland among the EEA states that completed the constitutional steps for MiCA incorporation by June 2025, operating thereafter under an 18-month transitional regime that ended 1 July 2026, which would imply MiCA-equivalent authorisation requirements are now the operative standard for crypto-asset service providers in Iceland. A competing line of commentary, arising from coverage of Iceland's 29 August 2026 EU-membership referendum, states that Iceland remains outside the MiCA framework altogether pending future regulatory change. No Icelandic primary instrument, whether gazette text, Alþingi act, or Central Bank of Iceland notice, has been located to resolve this conflict.
What is better established is the pre-MiCA baseline: virtual-asset-service-provider registration with the Central Bank of Iceland operated under AML-oriented Rules No. 151/2023 and 152/2023, a registration regime that conferred no EEA passporting right. Whether this regime remains the operative licensing standard today, has been superseded by MiCA, or continues to operate in parallel with a MiCA-equivalent authorisation track, is not established. No Icelandic enforcement action, fine, or supervisory penalty against a crypto-asset service provider has been located, and the Central Bank of Iceland has not, per available commentary, authorised any pure crypto-asset service provider as of the most recent reporting found.
The practical consequence for any institution assessing an Icelandic-licensed or Icelandic-domiciled crypto-asset service provider is that the applicable licensing regime, and therefore the applicable prudential, conduct, and governance obligations, cannot presently be confirmed from available secondary sources. This is a materiality-5 gap: it affects the baseline characterisation of the entire regulatory perimeter for crypto activity in Iceland, not a narrow technical point.
Outlook
The licensing-status question depends on locating either an Icelandic implementing instrument or an authoritative EEA Joint Committee decision text. Until one is found, Iceland's crypto-licensing status should be treated as unresolved, and the Rules No. 151/2023 and 152/2023 registration regime should be treated as the only confirmed baseline, with MiCA's applicability remaining an open question rather than an assumed fact.
Sources and findings (10)
- T3CoinDesk — A MiCA license issued by any EU/EEA national regulator permits a crypto-asset service provider to operate throughout the European Economic Area, which comprises the 27-nation EU as well as Norway, Iceland, and Liechtenstein. retrieved M4 binding in force
- T1ESMA — A legislative bill to implement MiCA in the Icelandic legal order was expected to be submitted to the Icelandic Parliament in fall 2025 and enter into force 1 January 2026. retrieved M5 binding proposed
- T1ESMA — The Central Bank of Iceland is listed by ESMA as Iceland's notified competent authority under MiCA across all sections, though the designation carries an asterisk denoting that formal designation had not yet been finalised as of the referenced list update. retrieved M4 binding proposed
- T1FATF — Under FATF Recommendation 15 as implemented via Iceland's AML Act, virtual asset service providers (VASPs) are required to be licensed or registered and subject to risk-based AML/CFT supervision by a competent authority. retrieved M4 binding in force
- T4Iceland MiCA/EEA incorporation status — Secondary sources disagree on whether MiCA has been incorporated into the EEA Agreement for Iceland: some state incorporation occurred in 2025 under Central Bank supervision; an August 2026 report states Iceland remains outside the MiCA framework pending EEA developments tied to an EU-accession-talks referendum. retrieved M4 non-binding in force
- T3Central Bank of Iceland — MiCAR Article 63 authorisation before providing CASP services in Iceland M5 binding in force
- T4Iceland crypto enforcement regime — No Iceland-specific crypto enforcement action was located this cycle; penalty regime for unauthorised crypto-asset services not confirmed against a primary source. retrieved M2 non-binding in force
- T1Seðlabanki Íslands — Providing crypto-asset services in Iceland without authorisation is prohibited from the end of the transitional period. retrieved M5 binding in force
- T1Myntkaup ehf — Myntkaup ehf was authorised by the Central Bank of Iceland as a crypto-asset service provider on 25 June 2026, covering custody and administration, exchange of crypto-assets for funds, exchange of crypto-assets for other crypto-assets, and transfer services. retrieved M4 binding in force
- T1Seðlabanki Íslands — From 1 July 2026, only entities holding a CASP licence may lawfully provide virtual-asset services in Iceland; providers without a licence must cease MiCA-scoped activity. retrieved M5 binding in force