--- title: "Malta Crypto Regulation Monitor | cryptoassets.gi" canonical: https://cryptoassets.gi/jurisdictions/malta-crypto-digital-asset-regulation/ source_html: /jurisdictions/malta/index.html description: "Malta crypto asset regulation: 9 categories, 42 sourced findings, updated 2026-10-25. Licensing, token classification, stablecoins, tax treatment." generated_at: 2026-11-07T14:19:44Z content_sha256: 07332a787b1f9f0cd4c3cf2fd0bd5857e39d1a73ef55fc71b52cc47593acedee generator: "fe-fleet/md-twin@1.0" --- # Malta Crypto & Digital Asset Regulation schema crypto-v2.0.0 trajectory: not yet assessed regulated overlaps: [Sentinel (AML/CFT)](https://sentinel.gi/jurisdictions/malta/), [World Payments](https://payments.gi/jurisdictions/malta/) Last updated 2026-10-25 · 9 categories · 42 sourced findings · 44 sources in the cumulative register Download report (PDF) Expand all Evidence re-verified: 2026-10-25 · Position last changed: 2026-10-25 · Record history & provenance ▾ Methodology & record provenance: Module confidence is derived from the underlying claims (source tier and primary excerpt retention), while statutory legal force is tracked independently. Review status: AI-synthesised · Tier-1/2 verified · As-of date: 2026-10-26 [Open in Co-Pilot ↗](/reports/?type=copilot&j=MALTA)[Build Report](/reports/?j=MALTA)[Compare](/compare/?j=MALTA) Framework posture Regulated 8 of 9 modules populated · AI-synthesised · Tier-1/2 verified Lead supervisory authority MiCA (Regulation (EU) 2023/1114) Primary statutory & supervisory perimeter Next milestone (> 2026-10-26) 2026-Q4 MFSA DeFi/MiCA perimeter discussion paper outcome Module coverage & confidence 8 / 9 modules assessed 0 Confirmed · 8 Probable · 0 Uncertain · 1 Not yet assessed 9 Categories 0 Moved this cycle 0 Key judgments 3 Open gaps 42 Findings 12 Tier-1 sources Confidence mix 9 unpopulated (sums to 9 rendered categories; click to filter) No categories moved this cycle. Law made at European Economic Area (Bloc) level that applies in Malta is covered once, on the [European Economic Area (Bloc)](/jurisdictions/european-economic-area-bloc/) page. This page covers Malta’s own layer: implementation, national authorities, national options and local enforcement. ## Jurisdiction lead brief ###### Latest update · 25 October 2026 #### Lead Signal Malta's crypto-asset regulatory picture is shaped by a single, cross-cutting development rather than a change to the core licensing architecture: on 19 October 2026 the Malta Financial Services Authority issued a circular addressing how prediction markets and event contracts should be classified, stating that such a product may be treated as a MiFID II financial instrument, a MiCA crypto-asset, or a gambling product depending on a comprehensive assessment of the operator's activities and the specific contract features. This is a classification clarification rather than a new statutory duty, but it is a significant one for any Malta-based platform offering or contemplating event-contract products, because it confirms that no single regime automatically captures this product class and that the correct authorisation route must be determined case by case. The clarification lands against a backdrop in which Malta's domestic crypto framework has already completed a structural transition: the Virtual Financial Assets Act, Chapter 590, was repealed on 3 July 2026 following the close of the Markets in Crypto-Assets Regulation's Article 143 transitional period on 1 July 2026, with the Markets in Crypto-Assets Act, Chapter 647, now standing as the applicable domestic instrument alongside MiCA itself. That transition had already occurred before this cycle and is noted here as background context for the classification question now in front of Malta-based operators, not as a new development. #### Other Developments Consumer-facing marketing restriction confirmed for a specific contract type. The MFSA's circular also confirms that binary yes/no event contracts carrying a fixed payout, where such a contract is classified as a financial instrument, remain subject to the existing EU-wide prohibition on marketing binary options to retail clients. This restriction itself is pre-existing EU law rather than a new rule, but its application to this specific product type was clarified in the same 19 October 2026 circular, closing off one practical route to retail distribution for the narrowest and most bet-like structure within the event-contract category regardless of which regulatory regime ultimately claims jurisdiction over it. Licensing architecture stable following completed transition. With the VFA Act repealed and the MiCA transition complete, Malta's domestic crypto-licensing framework is now anchored solely in MiCA and Chapter 647, administered by the Malta Financial Services Authority. No new licensing development was identified beyond the classification question above; the repeal itself, while materially significant to the framework's structure, had already taken effect before this cycle began and is recorded here only as the structural backdrop against which the event-contract classification question now plays out. #### Cross-Monitor Connections The same MFSA circular that drives the crypto-sector signal also carries implications outside the digital-asset perimeter narrowly defined. Because the circular's classification test explicitly contemplates a gambling-law outcome as one of three possible homes for a given event-contract product, the same underlying regulatory action is independently material to gambling-sector oversight of Malta, where the open question is which products fall under the Gaming Act rather than under MiCA or MiFID II. The circular's financial-instrument limb also connects to broader payments-and-market-infrastructure considerations, since a product reclassified as a financial instrument carries settlement and client-money-handling implications distinct from either a crypto-asset or a gambling product. No sanctions, beneficial-ownership, or illicit-finance dimension was identified in connection with the Malta findings. #### Outlook The central open question following is how the MFSA's three-way classification test will be applied to specific, named products rather than stated only as general guidance; the circular as retrieved sets out the test but does not resolve individual cases. Malta-based platforms offering or planning event-contract products should expect further case-specific guidance or decisions to narrow this classification question over coming cycles. No change is foreseen to the now-settled MiCA/Chapter 647 licensing architecture itself, which stands as the stable backdrop against which this classification question will be resolved. 4 earlier updates not shown here. ###### Standing brief · as of 3 August 2026 Written before the update above. Where they differ, the update is the more recent position. #### Lead Signal Malta's transitional cover for crypto-asset service providers under MiCA Article 143 closed on 1 July 2026, a date corrected this cycle from an earlier misreported 30 June 2026 (per ESMA's official grandfathering tracker). The practical effect is that every crypto-asset service provider operating in or from Malta must now hold full MiCA CASP authorisation, or be winding down, with no further transitional cover available. This settles what had been an open compliance runway since MiCA's CASP provisions became directly applicable across the EU from 30 December 2024, with Malta's MFSA sitting as the designated national competent authority holding supervisory competence across all Titles of the Regulation. The settling of this deadline is not, however, an unqualified clean bill: an ESMA fast-track peer review of MFSA's CASP authorisation practice found that Malta authorised at least one CASP despite unresolved issues, and identified gaps in governance, conflicts-of-interest management, ICT architecture and business-risk assessment, alongside positive findings on MFSA's resourcing and supervisory engagement. Malta's crypto-licensing regime is therefore best read as settled in perimeter but still carrying supervisory-quality risk, with the current status and any remediation steps arising from that peer review not yet known. #### Other Developments Token classification in Malta continues its shift toward EU-level primacy, with the MiCA Title III/IV taxonomy of asset-referenced tokens and e-money tokens now sitting alongside Malta's residual Virtual Financial Assets Act Financial Instrument Test, which continues to distinguish utility-only 'virtual tokens' from financial instruments and virtual financial assets. MFSA had earlier proposed excluding non-fungible tokens displaying clear uniqueness from the VFA framework's scope, anticipating MiCA's own NFT carve-out, though this remains a proposal rather than a finalised rule. The on-chain activity perimeter is the least settled area this cycle: MFSA issued a discussion paper in June 2026 exploring whether DeFi protocols that retain centralised features -- admin keys, concentrated governance, upgrade rights or control over user interfaces -- should fall within MiCA's authorisation perimeter, treating decentralisation as a spectrum rather than a binary; that consultation is reported closed as of 10 July 2026, with the outcome not yet published. Separately, EBA and ESMA jointly published an Article 142 report analysing DeFi, lending, borrowing and staking business models and associated ICT and money-laundering/terrorist-financing risks, without issuing binding policy recommendations, while CASPs offering crypto-asset lending remain bound by MiCA's general conduct-of-business obligations in the meantime. The stablecoin regime is fully binding and in force: asset-referenced and e-money token issuers must obtain MiCA authorisation before offering tokens to the public or seeking trading admission, must maintain a reserve of assets plus minimum own funds, and must communicate with token holders fairly and maintain complaint-handling procedures. ESMA and the European Commission had set an end-Q1-2025 deadline for bringing non-compliant stablecoin offerings into line with Titles III and IV. Several of these stablecoin claims, along with the Article 66 marketing-conduct rule and the ART complaint-handling obligation in consumer protection, and the ART/EMT classification claim in token classification, were downgraded this cycle from Confirmed to Probable confidence: a Challenger-identified batch finding found seven Confirmed-tier claims rested solely on T2 ESMA/EBA overview pages rather than the MiCA regulation text itself, failing the crypto monitor's confidence floor requiring at least two independent T1/T2 anchors for Confirmed status. Consumer protection otherwise remains binding but supervisors themselves caution that it is narrower than traditional finance: the Joint ESAs (EBA, ESMA, EIOPA) warn that MiCA's protections are less extensive than for conventional financial products and that no compensation scheme applies if a CASP fails, while lending-specific risk disclosure obligations apply because MiCA's safeguarding rules do not extend to assets used in lending programmes. Tax treatment remains the weakest-sourced module this cycle. Malta's DAC8 transposition requires crypto-asset service providers to report detailed user and transaction data to the Commissioner for Revenue from 1 January 2026; this claim was re-sourced this cycle from a stale, speculative 2023 news article to Malta's own Tax and Customs Administration confirmation of the domestic transposition instrument (Legal Notice 162 of 2026), though the reporting date itself was already correct. Beyond DAC8, no primary-source Commissioner for Revenue guidance specific to crypto-asset capital gains versus trading income could be verified this pass; the general Income Tax Act is understood to apply, with treatment reportedly depending on the nature and frequency of transactions, but this rests on secondary commentary rather than confirmed primary guidance. Cross-border transfer is more settled: MFSA-granted CASP authorisation permits passporting of crypto-asset services across all EU/EEA member states without further national authorisation, a mechanism industry reporting associates with firms expanding across more than thirty European jurisdictions from a Malta licence, and DAC8 additionally extends binding cross-border tax-data reporting obligations to Malta-established providers from 1 January 2026. #### Cross-Monitor Connections Malta's AML/CFT supervision of crypto-asset service providers sits on the financial-integrity monitor's subscribed surface rather than this one; FIAU supervises alongside MFSA, and this record retains only disambiguation context rather than substantive findings on that front. The stablecoin regime's reserve, redemption and disclosure requirements under MiCA Titles III and IV, together with DAC8's cross-border tax-data reporting obligations for Malta-established providers, carry a payments- and tax-data-adjacent framing that the world-payments monitor should track for its payment-instrument angle on asset-referenced and e-money tokens. #### Outlook Three threads warrant continued attention. First, whether MFSA's June 2026 DeFi discussion paper produces a formal authorisation sub-category for protocols retaining centralised features, or is shelved, will determine whether Malta's on-chain activity perimeter moves from amber toward a settled rating. Second, the ESMA peer-review criticisms of MFSA's fast-track CASP authorisation practice raise an open question of whether any remediation, suspension, or EU-level enforcement follows -- a development that could weigh on the currently green crypto-licensing rating even though the underlying authorisation requirement itself is settled. Third, tax treatment requires a dedicated primary-source research pass: no Commissioner for Revenue guideline specific to crypto-asset gains has yet been confirmed, and Malta's VAT/GST treatment of crypto-exchange services remains unverified against the EU's Skatteverket/Hedqvist case-law line. This composed record carries a held publication gate on module-uncertainty grounds, reflecting the concentration of Uncertain-confidence and thinly-sourced claims across the on-chain-activity and tax-treatment modules pending further primary-source escalation. Read full brief · 1669 words Key regulatory facts for Malta Regulatory Dimension Malta Standing Position Jurisdiction Malta (MT) Regulatory Scope Crypto & Digital Asset Regulation (9 modules, 42 sourced findings) Crypto Licensing Malta operates a dual-track crypto regime under the MFSA: new entrants apply directly for MiCA CASP authorisation; the legacy VFA Act (Chapter 590) was formally repealed effective 3 July 2026 under Act XXXVI of 2024,... Token Classification The EU-level MiCA taxonomy of asset-referenced tokens (ARTs) and e-money tokens (EMTs) now sits alongside Malta's national VFA Act Financial Instrument Test, which distinguishes utility-only 'virtual tokens' from... On-Chain Activity Regime Malta's on-chain/DeFi perimeter is the least settled module: MFSA's June 2026 discussion paper is exploring whether DeFi protocols with residual centralisation should be brought within MiCA's authorisation scope,... Stablecoin Regime ART/EMT issuance, reserve, own-funds, redemption and disclosure obligations are fully binding and in force under MiCA Titles III/IV, with MFSA as competent authority. Primary Instruments Cited MiCA (Regulation (EU) 2023/1114), Virtual Financial Assets Act (Chapter 590), MiCA Article 143 transitional (grandfathering) mechanism, MFSA fast-track authorisation pathway, Malta Financial Services Authority (MFSA) Last Confirmed / Updated 2026-10-25 (44 sources in cumulative register) 9 of 9 categories Signal Moved Judgment Gap Density Comfortable Compact Expand all sources Reset all Selections OR within a group, AND across groups. Press / to search. ### Malta: C1 Crypto LicensingGreenEnacted in forceModule confidence: Probable▾ Malta operates a dual-track crypto regime under the MFSA: new entrants apply directly for MiCA CASP authorisation; the legacy VFA Act (Chapter 590) was formally repealed effective 3 July 2026 under Act XXXVI of 2024, closing the legacy route entirely. Open gap — crypto-int-3 Chapter 647 penalty provisions for unauthorised crypto-asset services in Malta were not independently re-verified this cycle. no under-indexing note recorded Horizon · 2026-07-03 (± a quarter) VFA Act repeal takes effect Adopted · Tier 3 source Horizon · 2026-Q4 (± six months) MFSA current list of granted MiCA CASP authorisations awaited In force · Tier 3 source #### Crypto Licensing Malta's crypto-licensing framework rests on two layers: the pre-existing national Virtual Financial Assets Act (Chapter 590), and the directly-applicable EU Markets in Crypto-Assets Regulation (MiCA, Regulation (EU) 2023/1114), with MFSA designated as Malta's competent authority under MiCA holding supervisory competence across all of the Regulation's Titles. MiCA's CASP authorisation requirement became applicable to most crypto-asset service providers from 30 December 2024, meaning any entity providing crypto-asset services within the EU, including from Malta, must hold a national competent authority CASP authorisation. Independently, the VFA Act requires an MFSA licence for admission of virtual financial assets to trading, or for offering virtual financial assets to the public, in and from Malta; this claim was corrected this cycle after a Challenger finding identified that it had been sourced to a Binance-specific news article rather than the VFA Act's own primary text, and it now carries a Probable rather than Confirmed confidence rating pending a second independent anchor, consistent with the crypto monitor's confidence-floor rule. The defining licensing development this cycle is the closure of MiCA's Article 143 transitional grandfathering mechanism. That provision had permitted existing Malta crypto-asset providers who were operating lawfully before 30 December 2024 to continue operating without MiCA authorisation until the earlier of authorisation, refusal, or a fixed cutoff date. A Challenger finding corrected that cutoff this cycle: the deadline is 1 July 2026, not the 30 June 2026 date originally recorded, per ESMA's official grandfathering-periods tracker -- and that corrected deadline has now passed. The practical consequence is that Malta's crypto-licensing regime has moved from a transitional posture to a settled one: every provider must now hold full MiCA authorisation, with no residual grandfathering cover remaining. That settlement, however, comes with a live supervisory-quality caveat. An ESMA fast-track peer review of MFSA's CASP authorisation and supervision practice found that MFSA authorised at least one CASP despite unresolved issues, and identified gaps in governance arrangements, conflicts-of-interest management, ICT architecture, and business-risk assessment -- alongside positive findings on MFSA's resourcing levels and supervisory engagement. Related to this, MFSA's accelerated pre-authorisation pathway for existing VFA licence holders transitioning to MiCA CASP status has drawn industry commentary characterising it as favourable or fast-tracked treatment; this cycle's review reframed that characterisation away from an affirmative 'quasi-equivalence recognition' (which the underlying source itself does not assert) and toward what the ESMA peer review frames as industry-observed practice that itself drew supervisory scrutiny. No field values were changed in that reframing -- the claim's confidence remains Probable, as it was already, but the characterisation was tightened to avoid overstating a formal equivalence determination that ESMA's review does not describe as having occurred. Traffic light for this module remains green: Malta operates a comprehensive, binding licensing regime combining VFA Act and MiCA CASP authorisation, and the transitional period has now definitively closed, leaving a settled authorisation requirement. The green rating nonetheless carries the ESMA peer-review caveat as a material qualifier rather than a disqualifying factor, since the underlying legal requirement to be authorised is not in doubt -- only the quality of some past authorisation decisions. #### Outlook The open question for this module is what, if anything, follows from ESMA's critical peer review of MFSA's fast-track authorisation practice. As of this cycle, it is not known whether any authorised CASPs are subject to remediation, corrective measures, authorisation review, or any EU-level escalation -- this is flagged as an unresolved research question requiring direct MFSA/ESMA follow-up. Given that the underlying licensing perimeter is otherwise settled, the trajectory to watch is less about new legislative change and more about supervisory enforcement follow-through: whether Malta's regulator responds visibly to the peer-review criticisms, and whether that response affects market confidence in the fast-track pathway that helped establish Malta's positioning as a CASP hub. Any confirmed action on this front would likely shift the module's traffic-light rationale, even without a change to the underlying legal requirement. Read full sub-brief · 647 words Periodic update · new data 2026-10-25 #### Crypto Licensing Malta's domestic crypto-licensing framework has completed its transition to the Markets in Crypto-Assets Regulation. The Virtual Financial Assets Act, Chapter 590, which had provided Malta's original domestic crypto-asset framework since entering into force on 1 November 2018, was repealed on 3 July 2026, following the close of MiCA's Article 143 transitional window on 1 July 2026. The Markets in Crypto-Assets Act, Chapter 647, now stands as the applicable domestic implementing instrument alongside MiCA itself, administered by the Malta Financial Services Authority. This transition had already occurred before the start of this cycle and is recorded here as the stable structural backdrop against which the one notable development, the MFSA's event-contract classification circular, should be read. No new licensing requirement, authorisation pathway, or penalty provision specific to Chapter 647 was identified as a new development; the precise penalty provisions for unauthorised crypto-asset services under Chapter 647 were not independently re-verified against primary legislative text and remain a documented gap. For an operator assessing Malta's licensing environment, the relevant framework is now singular and EU-harmonised rather than split between a domestic VFA regime and MiCA, which simplifies the authorisation landscape relative to the pre-transition period, though the exact current count of MFSA-authorised crypto-asset service providers is contested between secondary sources and was not independently confirmed against the MFSA's own register. #### Outlook The licensing architecture itself is not expected to change materially in the near term, having just completed its structural transition to the MiCA/Chapter 647 regime. What remains open is the application of adjacent guidance, particularly the MFSA's event-contract classification circular, to specific licensing decisions: a product found to be a crypto-asset under that circular's three-way test would fall to be licensed under Chapter 647/MiCA rather than under gambling or financial-instrument rules, and the first such determination would be a useful marker of how the classification test operates in practice. Independent verification of the current MFSA-authorised CASP register and of Chapter 647's penalty regime for unauthorised activity remain open items for a future cycle. 4 earlier distinct update(s) Periodic update · new data 2026-10-18 #### Crypto Licensing Malta's crypto-asset licensing framework completed a structural transition this cycle. The Virtual Financial Assets Act, Chapter 590, was formally repealed with effect from 3 July 2026 under Article 64 of Act XXXVI of 2024. The MiCA-based Chapter 647 Crypto-Asset Service Provider authorisation regime is now the sole legal basis for crypto-asset services in Malta; there is no longer a parallel VFA pathway. The transitional grandfathering window available to pre-existing VFA licence holders closed on the earlier of 1 July 2026 or the date on which the Malta Financial Services Authority granted or refused CASP authorisation to that firm under Article 63 of MiCA. No new VFA applications have been accepted since the transition began, meaning any firm that has not by now secured CASP authorisation, or had it refused, is operating without a lawful VFA fallback. Alongside this completed transition, a supervisory-quality finding has emerged regarding how Malta administers the new regime. ESMA's ad hoc Peer Review Committee reviewed the MFSA's CASP authorisation process and found that it partially met expectations, recommending that the Authority place greater weight on the threat of licence rejection at the point of authorisation rather than relying primarily on post-authorisation monitoring to catch deficiencies after the fact. This finding is about supervisory process and institutional capacity rather than a named enforcement action against any firm, and it should be read as a signal about how rigorously new CASP applications are likely to be scrutinised going forward, not as a retrospective judgment on firms already authorised. The combination of these two facts, a completed and now-exclusive MiCA/CASP legal basis together with an external finding that the authorisation process underpinning it only partially meets expectations, defines the current state of Malta's crypto licensing regime: settled in law, but under active scrutiny in practice. Malta's licensing population includes firms combining e-money institution authorisation with CASP status, reflecting a commercial pattern of building on an existing EMI base to add digital-asset services, discussed further under commercial activity. The exact penalty provisions in Chapter 647 for unauthorised crypto-asset services were not independently fetched this cycle and remain an open item. #### Outlook The item to watch is whether the MFSA responds to the ESMA peer-review finding by tightening its authorisation-stage scrutiny, as recommended, and whether any further ESMA or MFSA register update confirms new CASP authorisation activity in Malta within the next review window. No such confirmation was available via the MFSA or ESMA register this cycle. Periodic update · new data 2026-10-12 #### Crypto Licensing Malta's crypto-asset licensing framework has fully consolidated onto the Markets in Crypto-Assets Act, Cap. 647, following the repeal of the Virtual Financial Assets Act (Cap. 590) on 3 July 2026. That repeal came at the end of the maximum eighteen-month MiCA grandfathering period available to Member States, and legacy VFA licences were cancelled on 2 July 2026, or upon the grant or refusal of MiCA authorisation for a given firm, whichever occurred earlier. The practical effect is that there is no longer a parallel domestic crypto-licensing track in Malta: every crypto-asset service provider operating from Malta must now hold, or be in the process of obtaining, authorisation under the MiCA-implementing Cap. 647 framework administered by the Malta Financial Services Authority. The stakes attached to that authorisation requirement are substantial. Breach of the Article 59 authorisation requirement under Cap. 647 carries a penalty of up to six years' imprisonment and fines of up to EUR5,000,000 for a natural person or EUR15,000,000 for a legal person. This is a criminal, not merely administrative, sanctions structure, and it signals that Malta has retained, through its domestic implementing legislation, a materially more severe enforcement posture for unauthorised crypto-asset activity than a purely civil-penalty framework would provide. Against this backdrop, ESMA's fast-track peer review of Malta's CASP authorisation and supervision regime, published 10 July 2025, offers a mixed assessment. ESMA found Malta fully meeting expectations on supervisory settings and resources, and largely meeting expectations on the conduct of supervisory reviews. However, it found Malta only partially meeting expectations on the CASP authorisation process itself. This distinction matters for anyone assessing the reliability of a Maltese MiCA authorisation as a passport into the wider EU market: the supervisory apparatus once a firm is authorised appears, on ESMA's own assessment, considerably more robust than the process by which that authorisation is granted in the first place. No current, published list of Malta-granted MiCA CASP authorisations for Malta-domiciled firms was located this cycle. This leaves unresolved exactly which of the formerly VFA-licensed firms successfully transitioned to MiCA authorisation, and which wound down or had their MiCA applications refused following the 3 July 2026 cutover. The absence of such a published register is itself a gap worth noting for market participants trying to assess the current competitive landscape of licensed Maltese CASPs. #### Outlook The clearest forward-looking item for Malta's crypto-licensing regime is whether the Malta Financial Services Authority publishes a current register of granted MiCA CASP authorisations, which would resolve the open question of which firms converted successfully from the VFA regime. Given ESMA's finding that Malta's authorisation process only partially meets expectations, continued supervisory attention to how new and converting CASP applications are processed should be expected. No Malta-specific on-chain activity regime distinct from the MiCA CASP perimeter was identified this cycle, suggesting the authorisation question is likely to remain the single dominant licensing issue for Malta in the near term. Periodic update · new data 2026-10-05 #### Crypto Licensing Malta's crypto-asset licensing framework completed a dated statutory transition this cycle. The Virtual Financial Assets Act (Cap. 590) was repealed effective 3 July 2026, pursuant to Article 64 of the Markets in Crypto-Assets Act (Chapter 647), itself enacted as Act 36 of 2024; the repeal operates without prejudice to anything done or omitted to be done under the VFA Act prior to that date. Under the Malta Financial Services Authority's own transitional guidance, VASPs holding a VFA Act licence as at 30 December 2024 were permitted to continue operating under that licence only until 1 July 2026, or until the Authority granted or refused a CASP authorisation application, whichever occurred first. Any entity that had not, by that point, obtained CASP authorisation or wound down its licensed activity was required to do so while continuing to safeguard client assets and meet its existing anti-money-laundering obligations throughout the transition. Separately, and consistent with the wind-down of the legacy gateway, the Authority ceased accepting new applications under the VFA Act as of August 2024. Since that point, any new applicant seeking to provide crypto-asset services from Malta has been required to apply directly for CASP authorisation under Chapter 647; there is no residual VFA Act pathway available to new entrants. Together, these two facts describe a licensing perimeter that has now fully pivoted to the MiCA-derived Chapter 647 regime for new business, while a defined and now-closed window governed the conversion or exit of the pre-existing VFA Act licensee population. The practical consequence for any entity whose status has not been independently confirmed is uncertainty: a grandfathered VASP whose CASP application had not been granted or refused by 3 July 2026 sits in an unresolved position under the current evidence, since the repeal of the VFA Act removes the legal basis for continuing to rely on the old licence beyond the earlier of the two triggering events. This is a live, dated transition rather than a settled structural fact, and the population of affected entities and their individual conversion status were not independently confirmed from a primary Authority source this cycle beyond the general transitional rule itself. #### Outlook The near-term question for this module is the status of any VASP whose CASP application remained pending as the 3 July 2026 repeal date passed: whether such an entity secured authorisation, was refused, or is operating in a gap between the two regimes is not resolved in the current evidence base. Confirmation of the CASP own-funds and prudential capital schedule by service class, and of the administrative-fine maxima under Chapter 647 for unauthorised crypto-asset service provision, both remain outstanding from a primary Malta Financial Services Authority source and would materially sharpen the entry-cost and non-compliance-risk picture for this module going forward. Periodic update · new data 2026-09-11 #### Crypto Licensing Malta operates a fully harmonised MiCA authorisation regime for crypto-asset service providers and issuers or offerors, requiring authorisation by the Malta Financial Services Authority under the Markets in Crypto-Assets Act. This is a high-confidence, primary-sourced standing baseline position. The legacy transition arrangement, under which existing Virtual Financial Assets Act licensees could continue operating pending full MiCA authorisation, ended on 1 July 2026, closing what had been the principal remaining accommodation for pre-MiCA licensees. This closure is itself a high-confidence finding and marks the crypto-licensing module as having reached a settled, fully in-force baseline rather than a transitional state. The practical effect of the grandfathering closure is that every CASP now operating in Malta must hold direct MiCA authorisation; there is no longer a legacy pathway available to new or continuing licensees. This represents the completion of a multi-year regulatory transition rather than a new development in its own right, and it is the reason the module's traffic-light rationale characterises the regime as fully harmonised with a now-closed transition pathway. #### Outlook With the transition period closed, the crypto-licensing module has reached a stable baseline; future cycles are more likely to surface enforcement or supervisory-practice developments under this module than further structural licensing-pathway change. Sources and findings (11) - T1 · European Banking Authority (EBA)[MiCA (Regulation (EU) 2023/1114)](https://www.eba.europa.eu/regulation-and-policy/asset-referenced-and-e-money-tokens-mica) — CASP authorisation from a national competent authority to operate within the EU; the regime became applicable to most CASPs from 30 December 2024 - T1 · Laws of Malta / EUR-Lex national implementing measure[Virtual Financial Assets Act (Chapter 590)](https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=NIM:202103962) — an MFSA licence for admission of virtual financial assets to trading, or for offering virtual financial assets to the public, in and from Malta - T1 · ESMA[MiCA Article 143 transitional (grandfathering) mechanism](https://www.esma.europa.eu/sites/default/files/2024-12/List_of_MiCA_grandfathering_periods_art._143_3.pdf) — existing Malta crypto-asset providers operating lawfully before 30 December 2024 to continue operating without MiCA authorisation until 1 July 2026 (or until authorised/refused, whichever is sooner) - a deadline that has now passed - T3 · CoinDesk[MFSA fast-track authorisation pathway](https://www.coindesk.com/news-analysis/2025/06/30/malta-the-small-island-nation-granting-big-exchanges-access-to-europe) — an accelerated pre-authorisation route for existing VFA licence holders transitioning to MiCA CASP status; per ESMA's peer review, this is industry-observed favourable treatment rather than a formally documented equivalence determination, and is itself what drew supervisory scrutiny - T1 · ESMA[Malta Financial Services Authority (MFSA)](https://www.esma.europa.eu/sites/default/files/2024-12/List_of_Competent_Authorities_notified_to_ESMA_under_MiCA.pdf) — Malta's competent authority under MiCA holding supervisory competence across all Titles of the Regulation - T3 · Gofaizen & Sherle[Markets in Crypto-Assets Act (Chapter 647), Act 36 of 2024](https://www.mamotcv.com/insights/fintech-insights-8-furthering-micar-in-malta-by-chapter-647/) — Virtual Financial Assets Act (Cap. 590) is repealed on 3 July 2026 without prejudice to anything done or omitted to be done thereunder. - T1[VFA Act (Malta)](https://www.mfsa.mt/publication/vfa-licence-and-transition-to-casp-under-the-markets-in-crypto-assets-act-mica-act/) — VASPs licensed under the VFA Act as at 30 December 2024 may continue under it until 1 July 2026, or until the MFSA grants/refuses a CASP authorisation, whichever occurs first; grandfathered entities must obtain CASP authorisation or wind down while safeguarding clients and meeting AML obligations. - T4[Malta Financial Services Authority](https://legalbison.com/blog/malta-vasp-vs-casp-comparison/) — MFSA ceased accepting new applications under the VFA Act as of August 2024; any new crypto-asset service applicant in Malta must apply directly for CASP authorisation under Chapter 647. - T1[Malta Financial Services Authority](https://www.mfsa.mt/our-work/crypto-assets/) — Crypto-asset service providers and issuers/offerors in Malta must be authorised by MFSA under the Markets in Crypto-Assets Act implementing MiCA - T3 · Gofaizen & Sherle[Malta MiCA grandfathering (VFA transition)](https://gofaizen-sherle.com/casp-license-in-malta) — Malta's MiCA grandfathering period for existing VFA-licensed CASPs ended 1 July 2026 - T1[Malta Financial Services Authority](https://www.mfsa.mt/publication/vfa-licence-and-transition-to-casp-under-the-markets-in-crypto-assets-act-mica-act/) — CASP authorisation under the Markets in Crypto-Assets Act is the sole lawful basis to provide crypto-asset services in/from Malta since 1 July 2026, when the VFA Act transitional grandfathering window closed. ### Malta: C2 Token ClassificationGreenEnacted in forceModule confidence: Probable▾ The EU-level MiCA taxonomy of asset-referenced tokens (ARTs) and e-money tokens (EMTs) now sits alongside Malta's national VFA Act Financial Instrument Test, which distinguishes utility-only 'virtual tokens' from financial instruments and virtual financial assets. MFSA has proposed excluding unique, non-fungible NFTs from VFA scope, anticipating MiCA's own NFT exclusion. Classification is settled and largely harmonised, though the ART/EMT classification claim was downgraded this cycle from Confirmed to Probable for T2-only sourcing. Periodic update · new data 2026-10-25 #### Token Classification The Malta Financial Services Authority issued a circular on 19 October 2026 addressing the classification of prediction markets and event contracts, a product category that had not previously been addressed at this level of specificity. The circular states that whether such a contract is a MiFID II financial instrument, a MiCA crypto-asset, or a gambling product under national law depends on a comprehensive assessment of both the contract's specific features and the operator's activities, rather than being resolved by the product category's label alone. This is a high-level clarification of the applicable test rather than a resolution of specific borderline cases, meaning genuinely marginal products will continue to require fact-specific assessment rather than being able to rely on a bright-line rule. The circular is regulatory guidance issued by the MFSA rather than a change to MiCA itself or to any Maltese primary legislation; it reflects the regulator's reading of how existing, already-enacted frameworks interact with a novel product type, rather than introducing a new instrument of its own. For any Malta-based platform currently offering or considering event-contract products, this clarification is directly material: it confirms that no single regulatory regime automatically captures the product category, and that the operator bears the burden of assessing where a specific contract sits in the MiFID II / MiCA / gambling-law taxonomy. #### Outlook The practical significance of this classification test will only become clear once it is applied to specific products rather than stated as general guidance. Malta-based platforms in this space should expect further MFSA engagement, whether through additional guidance, individual authorisation decisions, or enforcement action, that will narrow today's classification uncertainty. No indication of a timeline for such further clarification was identified. C2 · Token Classification — Full Module Record 0 sub-modules · 180 words · 4 traced claims · Re-verified 2026-10-25 The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login) [View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Malta: C3 On-Chain Activity RegimeAmberEnacted in forceModule confidence: Probable▾ Malta's on-chain/DeFi perimeter is the least settled module: MFSA's June 2026 discussion paper is exploring whether DeFi protocols with residual centralisation should be brought within MiCA's authorisation scope, treating decentralisation as a spectrum; the consultation reportedly closed 10 July 2026 with the outcome pending. At EU level, EBA/ESMA's Article 142 joint report analysed DeFi, lending, borrowing and staking business models without issuing binding recommendations, and CASPs offering lending remain subject to MiCA's general conduct obligations in the interim. Horizon · 2026-Q4 (± six months) MFSA DeFi/MiCA perimeter discussion paper outcome Consultation · Tier 3 source Horizon · 2026-Q4 (± six months) MFSA DeFi/MiCA perimeter discussion paper outcome Consultation · Tier 3 source Periodic update · new data 2026-09-11 #### On-Chain Activity Regime The Malta Financial Services Authority published a discussion paper in June 2026 proposing that decentralisation be treated as a spectrum, rather than assessed through a binary test, when determining whether a DeFi project falls inside MiCA's intermediary-based regulatory perimeter. The paper observes that many DeFi projects retain centralised features, such as an identifiable operator, an upgrade-key holder, or a fee-collection mechanism, that could in practice bring them inside MiCA's scope notwithstanding the Regulation's general exclusion of fully decentralised services. This is a high-confidence finding as to what the paper says, though it is explicitly non-binding: no rule, guidance, or consultation response has yet followed from it. This is the first substantive Malta-specific regulatory engagement with the DeFi question identified in the record, and it should be read as an early-stage, discussion-paper-level signal rather than a settled supervisory position. No MFSA formal consultation response or rulebook change following the paper has been identified this cycle, a gap that leaves the module's traffic-light rationale as active regulatory uncertainty rather than resolved. #### Outlook The discussion paper's evolution toward a formal consultation, expected around the fourth quarter of 2026, is the key item to watch; until it does, the module remains in an active-uncertainty state rather than a settled baseline. C3 · On-Chain Activity — Full Module Record 0 sub-modules · 180 words · 4 traced claims · Re-verified 2026-10-25 The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Malta: C4 Stablecoin RegimeGreenEnacted in forceModule confidence: Probable▾ ART/EMT issuance, reserve, own-funds, redemption and disclosure obligations are fully binding and in force under MiCA Titles III/IV, with MFSA as competent authority. Several claims in this module (reserve requirement, disclosure obligation, and the end-Q1-2025 compliance deadline for non-compliant stablecoin offerings) were downgraded this cycle from Confirmed to Probable for resting solely on T2 ESMA/EBA guidance rather than the MiCA text itself. Periodic update · new data 2026-09-11 #### Stablecoin Regime A MiCA-regulated Malta entity received an MFSA Limited Financial Institutions licence on 27 February 2026, authorising payment services exclusively in relation to electronic money tokens. This is a high-confidence, Tier 2-sourced finding, and it directly illustrates how the MFSA is managing the overlap between MiCA's Title III/IV asset-referenced-token and e-money-token provisions and the Financial Institutions Act's PSD2-derived payment-services perimeter, rather than treating the two regimes as operating in isolation from one another. The licence itself is narrowly scoped to electronic-money-token-related payment services, reflecting a deliberate MFSA approach to keeping the stablecoin-adjacent payments perimeter tightly defined even as it actively grants new authorisations within it. The module's traffic-light rationale of a regime in force and being actively applied to new licensing scenarios reflects this single but concrete licensing event, rather than any broader stablecoin-specific rule change this cycle. #### Outlook Further MFSA licensing activity in the MiCA/PSD2 overlap space would be the clearest signal of how this perimeter continues to be managed in practice; no such further activity was identified this cycle beyond the single licence described above. C4 · Stablecoins & EMTs — Full Module Record 0 sub-modules · 180 words · 8 traced claims · Re-verified 2026-10-25 The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Malta: C5 Consumer ProtectionAmberEnacted in forceModule confidence: Probable▾ Binding disclosure, marketing and complaint-handling rules under MiCA are in force, but Joint ESAs themselves flag materially narrower protections than traditional finance, with no compensation scheme applying if a CASP fails. Lending-specific risk disclosure obligations apply because MiCA safeguarding rules do not extend to assets used in lending programmes. Three of this module's four claims were downgraded this cycle from Confirmed to Probable for T2-only sourcing. Open gap — crypto-int-2 Pinpoint MiCA Art 75 custody/segregation detail as applied by the MFSA was not independently re-verified against the primary text this cycle. no under-indexing note recorded #### Consumer Protection Malta's crypto consumer-protection framework runs through MiCA's conduct-of-business provisions rather than a bespoke national consumer-protection statute, and MFSA is the responsible supervisory authority. Under MiCA Article 66, crypto-asset service providers must give clients fair, clear and non-misleading information, including in marketing communications, which themselves must be identified as such; this claim's confidence was downgraded this cycle from Confirmed to Probable, as part of the same batch correction affecting seven claims whose sole support was a T2 ESMA guidelines report rather than the MiCA regulation text itself. Complaint-handling obligations run in parallel: ART issuers must maintain effective, transparent complaint-handling procedures and treat token holders equally under MiCA, a claim carrying the same Probable-confidence, T2-sourcing caveat. A materially important qualifier on this module comes directly from supervisors rather than from any gap in the rules as drafted. The Joint European Supervisory Authorities (EBA, ESMA and EIOPA) have warned that MiCA's consumer protections for crypto-assets are less extensive than for traditional financial products, and that no compensation scheme applies if a crypto-asset service provider fails -- meaning a Malta-licensed CASP's clients do not benefit from anything equivalent to a deposit-guarantee or investor-compensation scheme in the event of provider failure. This warning claim was also downgraded to Probable under the same batch sourcing correction, but its substantive content -- supervisors themselves flagging a structural protection gap -- is unaffected by that confidence adjustment. A further disclosure obligation applies specifically to crypto-asset lending: CASPs providing crypto-asset lending services must disclose counterparty, collateral-shortfall and access-loss risks to clients in a fair, clear and non-misleading way, precisely because MiCA's asset-safeguarding rules do not extend to assets that clients have placed into lending programmes. This creates a two-tier client-asset protection picture within the same regulatory regime: standard custody-type holdings benefit from MiCA's safeguarding rules, while assets committed to lending programmes rely on disclosure of risk rather than a safeguarding backstop. The module's amber traffic light reflects this combination directly: binding disclosure, marketing and complaint-handling rules do exist and are in force, but supervisors themselves characterise the overall protection level as materially narrower than in traditional finance, with no compensation-scheme backstop for provider failure. #### Outlook Because the principal constraint on this module is architectural -- MiCA was designed with a lighter consumer-protection layer than parallel traditional-finance regimes, and that design choice is not something Malta's national implementation can independently remedy -- the trajectory to watch is EU-level rather than Malta-specific. Any future EU-level move to introduce a compensation-scheme mechanism for CASP failure, or to extend safeguarding rules to lending-committed assets, would be a materially significant regulatory shift for this module and would likely move its traffic-light rating from amber toward green. Absent such a change, the Joint ESAs' warning suggests supervisors expect this structural gap to persist, and retail-facing communications about crypto-asset risk in Malta should be read against that backdrop. Read full sub-brief · 474 words Periodic update · new data 2026-10-25 #### Consumer Protection The MFSA's 19 October 2026 circular on prediction markets and event contracts also confirms a consumer-protection point tied to the same classification question: binary yes/no event contracts carrying a fixed payout, to the extent they are classified as a financial instrument, remain subject to the existing European Union prohibition on marketing binary options to retail clients. This restriction itself predates the circular and is not a new rule; what the circular does is confirm that it continues to apply to this specific, narrowly-structured sub-type of event contract where the financial-instrument classification limb of the broader three-way test is the one that applies. For Malta-based platforms, this means the narrowest and most bet-like structure within the event-contract category, a fixed-payout binary outcome, cannot be marketed to retail clients if it is found to be a financial instrument, regardless of whether the broader product family is ultimately treated as falling under MiCA or under gambling law in other configurations. The consumer-protection implications of the MiCA custody and asset-segregation requirements under Article 75, as applied specifically by the MFSA to Malta-authorised crypto-asset service providers, were not independently re-verified against primary text and remain a documented gap. #### Outlook The binary-options marketing restriction is a stable, pre-existing feature of EU law and is not expected to change; what remains to be seen is how frequently Malta-based platforms structure event-contract products in the fixed-payout binary form that triggers it, versus more complex structures that may fall outside this specific restriction even where classified as financial instruments. Independent verification of MiCA Article 75 custody and segregation practice as applied in Malta remains an open item. Sources and findings (6) - T1 · ESMA[MiCA Article 66](https://www.esma.europa.eu/sites/default/files/2025-07/ESMA35-1872330276-2380_Final_Report_on_MiCA_Guidelines_on_knowledge_and_competence.pdf) — crypto-asset service providers to give clients fair, clear and non-misleading information, including in marketing communications, which must be identified as such - T1[Joint ESAs (EBA, ESMA, EIOPA)](https://www.esma.europa.eu/sites/default/files/2025-10/Joint_ESAs_revised_warning_on_crypto-assets.pdf) — that MiCA consumer protections for crypto-assets are less extensive than for traditional financial products, and that no compensation scheme applies if a CASP fails - T1 · ESMA[ART issuers](https://www.esma.europa.eu/esmas-activities/digital-finance-and-innovation/markets-crypto-assets-regulation-mica) — effective, transparent complaint-handling procedures and treat token holders equally under MiCA - T1 · ESMA[CASPs providing crypto-asset lending](https://www.esma.europa.eu/publications-data/questions-answers/2883) — counterparty, collateral-shortfall and access-loss risks to clients in a fair, clear and non-misleading way, since MiCA safeguarding rules do not extend to assets used in lending programmes - T1[MiCA Title V (custody and administration)](https://www.mfsa.mt/our-work/crypto-assets/) — CASPs providing custody and administration of crypto-assets on behalf of clients in Malta must comply with MiCA's client-asset segregation requirements as applied by the MFSA (held-corpus item, not independently re-verified at pinpoint-provision level this cycle). - T1[Crypto-asset service providers (Malta, custody)](https://www.mfsa.mt/our-work/crypto-assets/) — CASPs providing custody in Malta must comply with MiCA's client-asset segregation requirements as applied by MFSA ### Malta: C6 Tax TreatmentAmberEnacted in forceModule confidence: Probable▾ No bespoke crypto-specific tax statute has been verified at primary source. DAC8 reporting obligations for Malta CASPs (from 1 January 2026) were re-sourced this cycle to Malta's MTCA transposition confirmation (Legal Notice 162 of 2026), correcting a stale news citation. The general Income Tax Act is understood to apply absent bespoke crypto legislation, but this rests on secondary commentary; Malta's comparative low-tax positioning is a speculative, commentary-grade claim only. Periodic update · new data 2026-10-18 #### Tax Treatment Malta's crypto-asset tax reporting framework is now operative under DAC8. The Cooperation with Other Jurisdictions on Tax Matters (Amendment) Regulations 2026, Legal Notice 162 of 2026, transposes Directive (EU) 2023/2226 and has been in force since 1 January 2026. Under this instrument, a Reporting Malta Crypto-Asset Service Provider must report crypto-asset transaction information to the Commissioner for Tax and Customs within nine months of the end of each reporting year. The instrument's own text specifies that information must be reported to the Commissioner for Tax and Customs within nine months following the end of the relevant calendar year, which for the first reporting period, covering calendar year 2026, fixes the deadline at 30 September 2027. This is a periodic, recurring annual reporting obligation rather than a one-off filing: each subsequent calendar year's crypto-asset transaction data will fall due nine months after that year closes, on the same recurring basis. The obligation attaches to the Reporting Malta Crypto-Asset Service Provider as the obliged role, meaning any MiCA-authorised CASP operating from Malta that meets the DAC8 reporting-entity definition falls within scope once it begins providing reportable crypto-asset transaction services. No change to Malta's substantive tax treatment of crypto-asset gains, income or VAT position was identified this cycle; the development is confined to the DAC8 information-reporting layer, which operates independently of how any given transaction is ultimately taxed. #### Outlook The fixed point to track is the first DAC8 reporting deadline of 30 September 2027, covering the 2026 calendar year, which will be the first practical test of how Malta's Reporting CASPs have operationalised the nine-month reporting cycle under LN 162/2026. C6 · Tax Treatment — Full Module Record 0 sub-modules · 180 words · 3 traced claims · Re-verified 2026-10-25 The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Malta: C7 Cross-Border TransferGreenEnacted in forceModule confidence: Probable▾ EU-wide MiCA passporting is settled and directly applicable: an MFSA-granted CASP authorisation permits passporting across all EU/EEA member states without additional national authorisation. DAC8 adds a binding cross-border tax-data reporting obligation for Malta-established providers from 1 January 2026. No incremental Malta-specific cross-border restriction was identified. C7 · Cross-Border & Travel Rule — Full Module Record 0 sub-modules · 180 words · 5 traced claims · Re-verified 2026-10-25 The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Malta: C8 AML/CFT RegimeGreenEnacted in forceModule confidence: Probable▾ This module is intentionally not substantively populated this cycle: AML/CFT supervision of Malta's crypto-asset service providers is subscribed surface pending consolidation into the financial-integrity monitor. FIAU supervises alongside MFSA (e.g. the OKX AML settlement is disambiguation context only, not a substantive finding of this record). No structured claims are asserted here; substantive AML/CFT analysis belongs to financial-integrity's own research. C8 · AML/CFT Regime — Full Module Record 0 sub-modules · 180 words · 4 traced claims · Re-verified 2026-10-25 The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Malta: C9 Commercial Activity ▾ ## Commercial Activity BVNK secured a MiCA Crypto-Asset Service Provider licence from the Malta Financial Services Authority this cycle, adding it to its existing Malta e-money institution authorisation. This combined EMI-plus-CASP structure allows BVNK to offer digital-asset and stablecoin services across all EEA member states from its Malta base, building on its pre-existing status as an authorised e-money institution there. The exact date of the CASP grant was not stated in the retrieved source, so this should be treated as a confirmed development with an unconfirmed precise date rather than a dated event. This development illustrates a broader commercial pattern visible in Malta's crypto-asset sector: firms building a combined EMI-plus-CASP licensing structure to serve EEA-wide digital-asset and stablecoin business from a single Maltese base, leveraging the jurisdiction's established e-money institution regime alongside its now-exclusive MiCA/CASP crypto-licensing route. No other new commercial event, such as a funding round, acquisition, or new market entrant, was identified within the research window this cycle. — Outlook: The BVNK development is consistent with Malta continuing to attract combined-licence commercial structures following the VFA-to-MiCA transition; whether further firms replicate this EMI-plus-CASP pattern is the item to watch going into the next cycle. No periodic updates recorded in this cycle Sources and findings (1) - T4[Malta cryptocurrency-sector startups](https://tracxn.com/d/explore/cryptocurrencies-startups-in-malta/__lVW6fOYZmrdL0yaq3-8mDEDWJ-IAQX98k53fNmePV8Q) — 144 crypto-sector startups have collectively raised $1.86M in disclosed venture funding to date, with 2 acquisitions recorded; no new round dated within the recency window by a primary source.