---
title: "Spain Crypto Regulation Monitor | cryptoassets.gi"
canonical: https://cryptoassets.gi/jurisdictions/spain-crypto-digital-asset-regulation/
source_html: /jurisdictions/spain/index.html
description: "Spain crypto asset regulation: 9 categories, 68 sourced findings, updated 2026-11-04. Licensing, token classification, stablecoins, tax treatment."
generated_at: 2026-11-07T14:19:44Z
content_sha256: a16d6f5cb621b3d0d469d4392498e185ef626f7f0903a11670e38365769d146c
generator: "fe-fleet/md-twin@1.0"
---
# Spain Crypto & Digital Asset Regulation

schema crypto-v2.0.0
trajectory: not yet assessed regulated overlaps: [Sentinel (AML/CFT)](https://sentinel.gi/jurisdictions/spain/), [World Payments](https://payments.gi/jurisdictions/spain/)

Last updated 2026-11-04 · 9 categories · 68 sourced
findings · 84 sources in the cumulative register

Download report (PDF) Expand all

Evidence re-verified: 2026-11-04 · Position last changed: 2026-11-04 · Record history & provenance ▾ Methodology & record provenance: Module confidence is derived from the underlying claims (source tier and primary excerpt retention), while statutory legal force is tracked independently.

Review status: AI-synthesised · Tier-1/2 verified · As-of date: 2026-10-26

[Open in Co-Pilot ↗](/reports/?type=copilot&j=SPAIN)[Build Report](/reports/?j=SPAIN)[Compare](/compare/?j=SPAIN)

Framework posture Regulated 8 of 9 modules populated · AI-synthesised · Tier-1/2 verified

Lead supervisory authority CNMV Primary statutory & supervisory perimeter

Next milestone (> 2026-10-26) 2026-10-28 RD 813/2026 SEPBLAC-gateway requirement enters into force

Module coverage & confidence 8 / 9 modules assessed 0 Confirmed · 8 Probable · 0 Uncertain · 1 Not yet assessed

9 Categories

0 Moved this cycle 0 Key judgments 4 Open gaps 68 Findings

15 Tier-1 sources

Confidence mix 9 unpopulated
(sums to 9 rendered categories; click to filter)

No categories moved this cycle.

Law made at European Economic Area (Bloc) level that applies in Spain is covered once, on the [European Economic Area (Bloc)](/jurisdictions/european-economic-area-bloc/) page. This page covers Spain’s own layer: implementation, national authorities, national options and local enforcement.

## Jurisdiction lead brief

###### Latest update · 4 November 2026

#### Lead Signal

Spain's crypto perimeter has closed the gap between market-access authorisation and anti-money-laundering supervision. The national transitional window that let pre-existing virtual-asset firms keep operating without full crypto-asset-service-provider authorisation expired on 1 July 2026, the full eighteen months permitted under the transitional provision of the EU's crypto-asset markets framework. From that date only providers holding authorisation from the Comisión Nacional del Mercado de Valores, or passported in from another EU competent authority, may lawfully offer crypto-asset services in the country. Layered onto that closure, a decree amending Spain's foundational anti-money-laundering statute now places crypto-asset service providers formally among obliged entities, and a failure to comply with the transfer-information duties under the EU's accompanying funds-and-crypto-transfer regulation is treated as a serious infringement carrying a minimum fine of sixty thousand euros. Together the two measures mean that market entry and financial-crime compliance are no longer governed by separate clocks: a firm that clears authorisation but falls short on transfer-information duties now faces exposure under the same enforcement architecture that governs its licence. A further procedural step, reported in the press but not yet confirmed against a primary supervisory text, would have applicants obtain a report from the national financial-intelligence unit on the adequacy of their anti-money-laundering procedures before the securities regulator will grant authorisation at all. If that step is confirmed, it would make financial-crime readiness a precondition of market entry rather than a parallel obligation.

#### Other Developments

On the commercial side, Bit2Me's securities-token-exchange arm, known as STX, is reported to have received clearance around 28 October 2026 to launch a native blockchain-based stock exchange. The finding currently rests on a single secondary aggregator reference rather than a primary notice from the securities regulator, so the scope, conditions and formal status of any review remain unclear. If confirmed, it would mark one of the more concrete steps yet taken toward operating exchange infrastructure for tokenised securities on home soil, building on Bit2Me's position as the first Spanish-speaking fintech to have obtained crypto-asset-service-provider authorisation from the securities regulator.

#### Cross-Monitor Connections

The integration of crypto-asset service providers into the anti-money-laundering obliged-entity framework, and the attachment of a minimum sixty-thousand-euro fine to transfer-information failures, touches directly on the financial-crime compliance architecture that governs other regulated financial firms in the country. A provider now sits inside the same reporting, due-diligence and sanctions-screening perimeter as other obliged entities, which narrows the room previously available to treat crypto activity as a distinct, lighter-touch compliance track.

#### Outlook

The immediate question is how the securities regulator processes authorisation requests now that the transitional cushion has disappeared entirely: firms that have not secured a licence or a passport no longer have a fallback basis to continue operating. Whether the reported requirement for a prior financial-intelligence-unit report becomes a formal gating step in that authorisation process is the next point to watch, since it would materially lengthen or complicate the path to a licence for new entrants. On the commercial front, confirmation of the Bit2Me STX clearance from the regulator itself, rather than from secondary reporting, would clarify how far tokenised-securities trading infrastructure is actually permitted to go under the current licensing architecture, and would be the clearest signal yet of how the domestic market intends to treat blockchain-native exchange models going forward.

7 earlier updates not shown here.

###### Standing brief · as of 3 August 2026

Written before the update above. Where they differ, the update is the more recent position.

#### Lead Signal

Spain's crypto-asset regime has moved from build-out to full operation. The Comision Nacional del Mercado de Valores (CNMV) is now confirmed as the competent authority for CASP authorisation and market conduct under MiCA Titles II, V and VI, while Banco de Espana holds parallel competence over asset-referenced and e-money token (ART/EMT) issuer authorisation under Titles III and IV, both designations formalised on ESMA's Article 93 competent-authority list. The defining development this cycle is the closure of the transitional window that has shielded pre-existing crypto firms from full authorisation requirements. ESMA confirmed the EU-wide MiCA transitional period ended 1 July 2026, placing any still-unauthorised crypto-asset service provider in open breach of EU law. Spain's own national grandfathering arrangement, which had at one point been reported as a shortened twelve-month window running to December 2025, was confirmed via ESMA's December 2025 update to Member State grandfathering periods to have instead been extended to the full eighteen-month window permitted under MiCA Article 143(3), closing 30 June 2026 -- effectively aligning with, rather than preceding, the EU-wide deadline. This correction, folded in via Challenger review, resolves what had been an internal contradiction between an earlier hedged claim and the confirmed EU-wide closure date. CNMV has separately stated publicly that no exceptions or extensions will be granted to firms that have not secured authorisation, and that it is coordinating an orderly wind-down of unauthorised operators. Taken together, these three data points describe a single coherent event: Spain's crypto licensing perimeter has now fully closed, and the operating environment for any firm still outside CNMV or Banco de Espana authorisation has hardened materially.

#### Other Developments

Beyond licensing, Spain's implementation of the MiCA token taxonomy is settled and stable. E-money tokens require credit-institution or e-money-institution authorisation supervised by Banco de Espana; asset-referenced tokens require Banco de Espana authorisation before public offer or trading admission; other crypto-assets fall under CNMV's Title II white-paper and notification regime; NFTs are generally excluded unless issued in large series; and tokens meeting MiFID II financial-instrument criteria sit outside MiCA entirely under existing Spanish securities law. The stablecoin regime built on this taxonomy is fully operational: EMT/ART issuers must hold segregated reserves in low-risk, same-currency assets, token holders retain an at-any-time redemption right, issuers must maintain and update MiCA-compliant white papers with liability exposure for inaccuracies, and tokens designated 'significant' under the EU framework face enhanced own-funds and interoperability obligations. Consumer protection provisions are similarly active: CNMV enforces white-paper amendment and re-notification obligations, the Joint ESAs (ESMA, EBA, EIOPA) maintain a standing warning that MiCA protections do not extend to all crypto-assets or to unauthorised firms, custody delegation to non-CASP entities is prohibited, and CASPs providing advice or portfolio management must meet Article 81 suitability requirements under ESMA's 2025 guidelines. Tax treatment is comparatively less settled: Spanish residents are understood to face an informational reporting obligation for crypto-assets held abroad, with secondary sources naming this instrument as Modelo 721 (in force since the 2023 reporting year, EUR 50,000 threshold, legal basis Order HFP/886/2023), though this has not yet been confirmed against a primary AEAT source. The EU's DAC8 cross-border reporting obligation for crypto-asset service providers took effect 1 January 2026 with a compliance grace period to 1 July 2026, though this claim rests on a single T4 source and warrants further corroboration. VAT and withholding treatment of crypto-asset transactions in Spain remain unverified sourcing gaps. On-chain activity -- staking, DeFi lending, mining, validator operation, DEX activity -- continues to sit outside any dedicated Spanish licensing regime, mirroring an EU-wide supervisory gap flagged by EBA and ESMA rather than a Spain-specific policy choice. Cross-border transfer rules are comparatively firm: the EU travel rule under Regulation (EU) 2023/1113 applies directly to crypto-asset transfers in Spain, with no distinct national reporting threshold or outbound capital control identified beyond that framework.

#### Cross-Monitor Connections

Two threads in this cycle extend beyond the crypto-licensing lens. First, the sanctions-nexus finding -- that EU financial sanctions regimes apply to crypto-asset transfers in Spain in the same manner as other financial transfers, with no crypto-specific derogation identified -- is carried here as adjacent context only; the substantive AML/CFT and sanctions analysis for Spain sits with financial-integrity's monitoring of SEPBLAC and Law 10/2010, to which this jurisdiction's aml_cft_regime module is formally subscribed rather than independently researched. Second, the e-money-token issuance and redemption framework, together with the DAC8 cross-border tax-data reporting obligation, carries payment-instrument and cross-border-data adjacency of interest to world-payments' broader tracking of instrument-level and reporting-regime developments, beyond what a crypto-issuance-and-licensing frame alone would capture.

#### Outlook

With both the EU-wide and Spain's own national transitional windows now closed, the near-term signal to watch is enforcement posture -- specifically how CNMV's stated orderly-wind-down approach plays out against firms that failed to secure authorisation ahead of the deadline. On the verification side, several primary-source gaps remain open: Spain's actual national MiCA transposition instrument has not been directly retrieved (the current position rests on ESMA's aggregated Member State list and secondary commentary); the precise scope of the Modelo 721 crypto-reporting instrument awaits AEAT confirmation; and VAT and withholding treatment of crypto transactions in Spain remain unaddressed by any primary source identified to date. The DAC8 compliance grace period ending 1 July 2026 is a further near-term marker worth tracking for confirmation from higher-tier sources. Whether the CNMV/Banco de Espana dual-competent-authority structure should be treated as a formal split jurisdiction record, as has been done elsewhere for multi-regulator markets, remains an open registry question rather than a Spain-specific regulatory development.

Read full brief · 1492 words

Key regulatory facts for Spain Regulatory Dimension Spain Standing Position

Jurisdiction Spain (ES)

Regulatory Scope Crypto & Digital Asset Regulation (9 modules, 68 sourced findings)

Crypto Licensing Spain applies MiCA (Regulation (EU) 2023/1114) directly as an EU Member State.

Token Classification MiCA's Article 2-3 taxonomy (EMTs, ARTs, utility tokens under Title II, NFT exclusion with large-series exception, and MiFID II security-token exclusion) is settled EU law directly applicable in Spain, with ESMA/EBA...

On-Chain Activity Regime No Spain-specific rules govern staking, DeFi lending, mining, validator operation or DEX activity; these are captured only indirectly via the general MiCA CASP perimeter, mirroring an EU-wide supervisory gap flagged...

Stablecoin Regime ART/EMT issuance, reserve, redemption and disclosure rules have been in force since 30 June 2024, actively supervised by Banco de Espana, with an enhanced-obligation tier applicable to tokens designated 'significant'...

Primary Instruments Cited CNMV, CNMV, MiCA transitional (grandfathering) regime, CNMV, Spain (national MiCA transposition)

Last Confirmed / Updated 2026-11-04 (84 sources in cumulative register)

9 of 9 categories

Signal
Moved
Judgment
Gap

Density
Comfortable
Compact

Expand all sources
Reset all

Selections OR within a group, AND across groups. Press / to search.

### Spain: C1 Crypto LicensingGreenEnacted in forceModule confidence: Probable▾

Spain applies MiCA (Regulation (EU) 2023/1114) directly as an EU Member State. The CNMV is the primary competent authority for CASP authorisation; the Banco de España retains a role for e-money-token/asset-referenced-token issuance and AML aspects. Spain's transitional period for pre-MiCA-registered entities (the 2021 Banco de España AML VASP register) closed on 1 July 2026; from that date only CNMV-authorised or EU-passported CASPs may operate.

Open gap — crypto-int-2 SEPBLAC pre-authorisation report's statutory turnaround time under the CNMV CASP procedure has not been established from a primary source. no under-indexing note recorded

Open gap — crypto-es-2026-11-02-G001 No single primary (T1) Spanish statutory or CNMV source directly quoting the 1 July 2026 transitional-deadline end-date was retrieved within budget; relied on T3 commentary and a CNMV circular reference. no under-indexing note recorded

Horizon · 2026-07-01 (± a quarter) MiCA grandfathering window closes for legacy VASPs In force · Tier 1 source

Horizon · 2028-04-08 (± a quarter) RD 813/2026 crypto-ATM identification duty becomes fully applicable Adopted, not yet in force · Tier 1 source

Horizon · 2026-10-28 (± a quarter) RD 813/2026 SEPBLAC-gateway requirement enters into force Adopted, not yet in force · Tier 1 source

Horizon · 2026-07-01 (± a quarter) MiCA transitional regime expiry In force · Tier 1 source

#### Crypto Licensing

Spain's crypto-licensing architecture is now fully populated and, as of this cycle, fully in effect. The Comision Nacional del Mercado de Valores (CNMV) is confirmed as the national competent authority for MiCA Titles II, V and VI -- covering crypto-asset service provider (CASP) authorisation and market conduct -- per Article 93 of MiCA and ESMA's published list of Member State competent authorities. Banco de Espana holds the parallel designation for Titles III and IV, covering authorisation and supervision of asset-referenced token (ART) and e-money token (EMT) issuers. This dual-authority structure means that a single Spanish crypto-asset business may face two separate supervisors depending on whether its activity is CASP service provision or stablecoin issuance, a structural feature that mirrors the France AMF/ACPR split seen elsewhere in the EU and has been flagged, though not resolved, as a candidate for a formal multi-regulator jurisdiction record.

The most consequential development this cycle concerns the closure of MiCA's transitional, or 'grandfathering', arrangements. ESMA's April 2026 statement confirmed that the EU-wide transitional period under MiCA closed on 1 July 2026, meaning any crypto-asset service provider still operating without MiCA authorisation is now in direct breach of EU law rather than merely operating under a lapsing dispensation. Layered onto this is a national-level correction of particular note: earlier reporting had suggested Spain intended to shorten its own national grandfathering period below the eighteen-month maximum permitted under MiCA Article 143(3), with some accounts citing a twelve-month window ending as early as December 2025. This was flagged internally as an unresolved hedge pending primary confirmation. A Challenger-driven correction this cycle resolved the ambiguity: ESMA's own updated list of Member State grandfathering periods, published 1 December 2025, confirms that Spain in fact extended its national window to the full eighteen months, closing 30 June 2026 -- essentially converging with, rather than undercutting, the EU-wide 1 July 2026 deadline. This claim is retained at Probable confidence rather than upgraded to Confirmed, reflecting that it rests on a single tier-three secondary legal-commentary source rather than a directly retrieved Spanish transposition instrument; that underlying transposition text itself remains an open sourcing gap.

Supervisory posture has also hardened in parallel. CNMV has stated publicly, and repeated to industry press, that no exceptions or extensions will be granted to firms -- including named large exchanges -- that fail to secure MiCA authorisation ahead of the deadline, and that it is actively coordinating an orderly wind-down process for unauthorised operators still active in the Spanish market. This is treated as a non-binding supervisory statement of intent rather than a formal legal instrument, and is recorded without a regulatory_stage designation accordingly, consistent with its non-normative character.

Together, these three data points -- the EU-wide closure, the corrected national closure date, and CNMV's enforcement posture -- describe a single coherent narrative: Spain's crypto-licensing perimeter is now closed on both the European and national tracks, and the operative question going forward is one of enforcement and wind-down execution rather than further rule-making.

#### Outlook

The immediate forward-looking signal is enforcement follow-through: how CNMV's stated 'no exceptions' posture is applied in practice to firms that missed the deadline, and whether an orderly wind-down process materialises in observable regulatory action. On the evidentiary side, the leading open item is direct retrieval of Spain's actual national MiCA transposition statute or royal decree, which would allow the national grandfathering finding to be upgraded from Probable to Confirmed and would close the residual sourcing gap noted this cycle. The unresolved question of whether the CNMV/Banco de Espana dual-authority structure warrants a formal split-jurisdiction record is a registry-level decision rather than a substantive regulatory development, and is noted here for operator attention rather than resolved.

Read full sub-brief · 613 words Periodic update · new data 2026-10-24

#### Crypto Licensing

Spain's crypto-asset licensing perimeter under the Markets in Crypto-Assets framework is now being actively policed at its edges. The CNMV, Spain's national securities regulator and the designated competent authority for crypto-asset service provider authorisation, issued a public warning identifying GDLP, reachable at the domain m.gdlpltd.com, as one of at least four platforms soliciting funds from the Spanish public while providing crypto-asset services without the authorisation that MiCA has required nationally since the transitional regime lapsed on 1 July 2026. Three further platforms referenced in the warning were not individually named in available reporting.

The substance of the warning is straightforward: any entity offering crypto-asset services to Spanish residents on or after that date must hold MiCA authorisation, either obtained directly from CNMV or passported from another EU member state's competent authority, and an entity soliciting Spanish investor funds without that authorisation sits outside the regulated perimeter regardless of where it is incorporated or hosted. The warning functions as CNMV's primary tool for signalling that status to the public once the transitional grace period has run out.

More revealing than the warning itself is CNMV's accompanying acknowledgement of its own practical limits: the regulator stated it has no power to close a foreign-registered domain or to freeze deposits held by a platform operating from outside Spain. This is a significant admission from the authority itself, and it indicates that for offshore unauthorised platforms, the CNMV's enforcement toolkit in practice reduces to public designation, which can prompt banks, payment processors and advertising intermediaries to sever ties, rather than to any order the platform is itself compelled to follow domestically. For a Spanish-based or Spanish-licensed entity, by contrast, the same unauthorised-activity finding would carry materially greater direct consequence, up to and including formal sanction proceedings and licence-related measures the CNMV can actually impose within its own jurisdiction.

The finding reached the record through contemporaneous Spanish financial press reporting rather than through a CNMV decision document retrieved directly, so the precise instrument, docket reference, and any formal sanctioning track remain to be confirmed as further primary-source material becomes available. The underlying fact, that CNMV is treating post-1 July 2026 unauthorised solicitation of Spanish investors as an active enforcement priority, is nonetheless well attested.

#### Outlook

Expect CNMV to continue using public warnings as its primary deterrent against unauthorised crypto-asset solicitation now that the MiCA transitional period has fully lapsed, with the pace of such warnings likely to track the volume of unauthorised cross-border platforms still targeting Spanish retail investors. The more durable question is structural: CNMV's own statement that it cannot compel a foreign domain's closure or freeze offshore deposits implies that purely domestic designation has a ceiling as an enforcement tool, and firms operating in or advising on the Spanish market should watch for any move toward coordinated EU-level action, payment-rail restrictions, or advertising-intermediary pressure as the next layer of response once naming alone is judged insufficient.

5 earlier distinct update(s) Periodic update · new data 2026-10-18

#### Crypto Licensing

Spain's MiCA transitional period for crypto-asset service providers ended 1 July 2026, the same date across every EU Member State, bringing the full Regulation (EU) 2023/1114 authorisation regime into effect. By 2 October 2026, the CNMV's register listed fifteen Spanish entities under the post-transition regime: nine authorised crypto-asset service providers and six notified banks. Under MiCA Articles 59 and 63, a provider without an otherwise eligible financial licence must obtain full CNMV authorisation; an eligible already-licensed entity may instead notify under Article 60 at least 40 working days before starting crypto-asset services, though this notification route is not a blanket exemption for regulated firms and the underlying conduct standards still apply. Providing crypto-asset services without authorisation or a valid passport exposes a provider to administrative sanctions: EU national competent authorities, including the CNMV, have the power to order cessation of services, impose fines of up to 12.5 percent of annual turnover, and publish enforcement actions publicly, though the exact Spanish national penalty schedule was not independently confirmed this cycle.

#### Outlook

With the transitional period closed, the authorisation regime is now fully operative, and further movement is likely to come from individual authorisation decisions rather than structural change. Spain's exact national gold-plating, if any, of MiCA's prudential-capital requirements under Article 67 was not confirmed this cycle and remains a research gap to close in a future cycle.

Periodic update · new data 2026-10-12

#### Crypto Licensing

Spain's crypto-asset licensing regime is anchored in Regulation (EU) 2023/1114 (MiCA), supervised domestically by the CNMV. The national transitional period that MiCA allowed member states to offer to already-operating providers ended on 1 July 2026, having exercised the regulation's maximum 18-month transitional option under article 143(3). Since that date, only entities holding CNMV authorisation or an EU passport issued by another MiCA-competent authority may lawfully provide crypto-asset services in Spain. This core authorisation architecture is settled and in force, and no development this cycle disturbs it.

What has changed sits in the implementing detail layered on top of that settled regime. Real Decreto 813/2026 introduces a new precondition for CASP authorisation: applicants must obtain a prior report from SEPBLAC before CNMV can grant MiCA authorisation. The decree's own preamble connects this change to Spain's forthcoming FATF mutual evaluation, framing the SEPBLAC gateway as part of a broader pre-emptive tightening of the country's AML architecture ahead of that review. This requirement is enacted but not yet effective; it is scheduled to take legal effect on 28 October 2026. Separately, the same decree mandates identity verification for every transaction at a crypto-asset ATM or kiosk, regardless of the transaction amount, closing an anonymity gap that previously allowed small-value crypto-ATM transactions to proceed without identification. This duty carries an 18-month transitional period, becoming fully applicable on 8 April 2028.

An open question from this cycle is whether the SEPBLAC prior-report requirement reaches back to CASPs already authorised under the existing regime, or applies only to new applicants submitting authorisation requests after the rule's effective date. This was not established in the material reviewed this cycle, and it matters directly to the group of banks and fintechs reported to already hold CNMV authorisation.

#### Outlook

The 28 October 2026 effective date for the SEPBLAC gateway and the 8 April 2028 end of the crypto-ATM transitional period are the two concrete dates to track. Beyond those, the retroactivity question for already-authorised CASPs is the clearest gap likely to be resolved as CNMV or SEPBLAC issue further implementing guidance, and would materially affect compliance planning for the firms already holding authorisation.

Periodic update · new data 2026-10-06

#### Crypto Licensing

Spain's application of the Markets in Crypto-Assets Regulation's national transitional arrangement for pre-existing crypto-asset service providers, under Article 143(3), ended on 30 June 2026. The CNMV confirms that Spain had decided to apply this transitional period through that date, giving providers already operating in the Spanish market before MiCA's full application a defined window to secure CNMV authorisation rather than face immediate cessation of activity. That window has now closed.

From 1 July 2026, the practical consequence is that any crypto-asset service provider operating in Spain without CNMV authorisation under MiCA no longer has a lawful basis to onboard new customers or market its services, and is expected to take immediate steps to wind down its EU activities in an orderly manner. ESMA has stated this expectation directly, and frames it with two elements held together: orderly cessation of unauthorised activity, and active safeguarding of client interests together with mitigation of risks to market integrity during that process. The pairing matters because it signals that supervisory attention is directed not only at the authorisation gap itself but at how an exit is managed — stranded client assets or abrupt service interruption during wind-down would themselves be a supervisory concern distinct from the underlying authorisation question.

This development sits within the crypto licensing module because it concerns market access and authorisation status directly: the transitional period functioned as a grandfathering mechanism, and its expiry removes that accommodation rather than altering the underlying authorisation requirement, which has applied under MiCA since the regulation's entry into application. The regulatory stage for this requirement is properly characterised as in force, since the operative deadline — 30 June 2026 — has passed and the obligation to be authorised, or to be winding down, is now the live legal position rather than a forward-looking one.

What the available evidence does not establish is the on-the-ground compliance picture following the deadline: how many previously-unauthorised providers have completed wind-down, how many have since obtained authorisation, and how many continue to operate despite the expired transitional status. That gap is a function of what has been reliably retrievable to date, not a finding about market conditions, and is not asserted either way here.

#### Outlook

The legal position is now settled: MiCA authorisation is required for crypto-asset service provision in Spain, the prior transitional accommodation has expired, and both the CNMV and ESMA have articulated an active expectation of authorisation or orderly exit. Future periods should be watched for any CNMV disclosure of authorised-entity counts or enforcement activity against providers that remain unauthorised, since that is the information that would convert the current legal expectation into an observable compliance outcome.

Periodic update · new data 2026-09-28

#### Crypto Licensing

Spain's crypto-asset licensing regime completed its most consequential transition to date on 1 July 2026, when the MiCA transitional period for legacy virtual-asset service providers closed. The CNMV's own FAQ documentation states directly that the transitional period concludes on this date, and from that point forward only CNMV-authorised crypto-asset service providers, or those authorised in another EU member state and passported into Spain, may lawfully provide crypto-asset services in the jurisdiction. This is a confirmed, in-force change with direct primary-source support, and it represents the culmination of the phased MiCA rollout rather than a discrete new development layered onto a stable base.

The practical consequence for the licensing architecture is significant. Prior to this cliff, Spain operated a dual-track system in which the Banco de España maintained a register of virtual-currency-exchange and custodial-wallet providers that allowed firms to operate on a transitional basis while full MiCA authorisation was pending. That legacy register is now, on the evidence available this cycle, a wound-down list: it no longer confers an independent licence to provide crypto-asset services in Spain. Any firm that continues to rely on legacy Banco de España registration alone, without having separately obtained CNMV CASP authorisation, sits outside the lawful operating perimeter as of the transitional close-out. This shifts Spain's authorisation architecture from the prior dual Banco de España/CNMV structure to a single CNMV gate, a structural narrowing of the licensing pathway rather than a mere administrative housekeeping change.

A genuine gap remains in the evidence base: whether any specific legacy registrant failed to secure CNMV CASP authorisation before the cliff and is currently operating unlawfully was not established this cycle. This is not a finding one way or the other, simply an unresearched question, and it should not be read as either confirming or ruling out non-compliant legacy operators in the current Spanish market. The token-classification framework that governs what falls within this licensing perimeter, MiCA's asset-referenced-token, e-money-token and other-crypto-asset taxonomy, applies directly in Spain without a national variant, meaning the classification question and the licensing question sit within the same directly-applicable EU legal framework rather than diverging at the national level.

#### Outlook

The central open question for the licensing module going into the next cycle is enforcement follow-through: whether the CNMV, now sole gatekeeper, identifies and acts against any legacy registrant that failed to transition into full CASP authorisation before 1 July 2026. Because the underlying instrument is the directly-applicable MiCA regulation rather than a Spain-specific transitional rule subject to further domestic amendment, the single-gate architecture established this cycle should be read as a durable feature of the Spanish market rather than a temporary state pending further legislative action. Confirmation of the post-cliff compliance picture, and any CNMV enforcement action against non-compliant legacy operators, would be the most consequential development to track next.

Periodic update · new data 2026-09-21

#### Crypto Licensing

Spain's crypto-asset service provider licensing regime completed its MiCA transition this cycle. As of 1 July 2026, all crypto-asset service providers operating in Spain must hold full CNMV authorisation under MiCA Title V; legacy Bank-of-Spain VASP registration alone is no longer sufficient. Spain adopted the maximum eighteen-month transition window running to 1 July 2026, notwithstanding earlier signals from Spanish authorities that they might shorten it to 31 December 2025. The comply-or-quit deadline has now passed.

#### Outlook

The traffic-light posture is amber pending clarity on CNMV's enforcement approach toward providers that have not completed authorisation; watch for the first enforcement actions against stragglers as the clearest signal of how strictly the deadline will be policed.

Sources and findings (21)
- T3[CNMV](https://hokenfi.com/en/mica-spain-timeline-status-2026/) — All crypto-asset service providers operating in Spain must hold full MiCA CASP authorisation from CNMV; legacy VASP registration alone is insufficient after 1 July 2026. (3× uses collapsed)
- T1 · European Securities and Markets Authority (ESMA)[CNMV](https://www.esma.europa.eu/sites/default/files/2024-12/List_of_Competent_Authorities_notified_to_ESMA_under_MiCA.pdf) — MiCA Titles II, V and VI (CASP authorisation and market conduct) in Spain
- T1 · European Securities and Markets Authority (ESMA)[Banco de Espana](https://www.esma.europa.eu/sites/default/files/2024-12/List_of_Competent_Authorities_notified_to_ESMA_under_MiCA.pdf) — MiCA Titles III and IV (ART/EMT issuer authorisation and supervision) in Spain
- T1 · European Securities and Markets Authority (ESMA)[MiCA transitional (grandfathering) regime](https://www.esma.europa.eu/sites/default/files/2026-04/ESMA75-113276571-1679_Statement_on_the_end_of_transitional_periods_under_MiCA.pdf) — 1 July 2026 EU-wide; unauthorised crypto-asset service providers are now in breach of EU law
- T4 · The Block[CNMV](https://www.theblock.co/post/406362/spain-says-no-exceptions-extensions-binance-other-crypto-firms-mica-deadline) — crypto firms failing to secure MiCA authorisation ahead of the transitional deadline; CNMV is coordinating orderly wind-down of unauthorised firms
- T3 · Global Fintech & Digital Assets Blog (Bryan Cave Leighton Paisner)[Spain (national MiCA transposition)](https://www.fintechanddigitalassets.com/2025/12/mica-cliff-edge-risk-in-spain-mitigated-as-esma-updates-list-of-grandfathering-periods/) — Spain initially communicated a shortened 12-month national MiCA grandfathering window (ending 30 December 2025), but per ESMA's updated list of Member State grandfathering periods (published 1 December 2025), Spain extended this to the full 18-month window permitted under MiCA Article 143(3), aligning with the EU-wide deadline of 1 July 2026 (extension running to 30 June 2026).
- T2[GDLP (m.gdlpltd.com)](https://www.merca2.es/2026/10/17/cnmv-criptomonedas-mica-firmas-sin-licencia-2475645/) — CNMV publicly warned that GDLP, together with three other unidentified platforms, solicited funds from the public in Spain as crypto-asset service providers without the MiCA authorisation required since the transitional period ended on 1 July 2026.
- T3[MiCA Art 143(3) transitional provision](https://hokenfi.com/en/mica-spain-timeline-status-2026/) — Spain's national transitional period for pre-MiCA-registered CASPs ended on 1 July 2026 (the full 18-month maximum); only CNMV-authorised or passported CASPs may now provide crypto-asset services in Spain.
- T3[Royal Decree-law 25/2026](https://innovatech.legal/en/crypto-assets/crypto-travel-rule-spain/) — Amends Law 10/2010 art 2(1)(z) so that crypto-asset service providers are obliged entities; breach of the Travel Rule (Reg (EU) 2023/1113) is a serious infringement carrying a minimum fine of €60,000.
- T3[SEPBLAC pre-authorisation report requirement](https://www.elespanol.com/invertia/mercados/20260806/proveedores-criptos-necesitaran-informe-previo-sepblac-lograr-luz-verde-cnmv-operar-espana/1003744345014_0.html) — CASP applicants require a prior SEPBLAC report on AML-procedure adequacy before CNMV grants authorisation; compliance failures on information, control and retention duties for crypto transfers are classified as serious infringements.
- T1 · Boletín Oficial del Estado (BOE)[Ley 10/2010 (as amended)](https://www.boe.es/buscar/pdf/2010/BOE-A-2010-6737-consolidado.pdf) — z) Los proveedores de servicios de criptoactivos.
- T1 · Comisión Nacional del Mercado de Valores (CNMV)[Reglamento (UE) 2023/1114 (MiCA) / Spain transitional regime](https://www.cnmv.es/portal/mica/regulacion-criptoactivos?lang=en) — 2026-07-01
- T2 · Criptoinforme[CNMV](https://criptoinforme.com/estafas/cnmv-advierte-cuatro-webs-cripto-sin-licencia-mica/) — EXCHSEC, ZSYSC, GDLP, CMC GROUP MARKETS
- T1 · Boletín Oficial del Estado / CNMV (via derecho.com)[CNMV](https://www.derecho.com/boe/resolucion-de-3-de-noviembre-de-2025-de-la-comision-nacional-del-mercado-de-valores-por-la-que-se-publica-la-sancion-por-infraccion-muy-grave-impuesta-a-twitter-international-unlimited-company-853278) — CNMV — 5000000
- T3 · law2bit.com[MiCA Art 143.3 transitional regime (Spain)](https://law2bit.com/cnmv-y-mica/) — 2026-07-01
- T1 · CNMV / BOE[CNMV Circular 2/2025](https://www.cnmv.es/DocPortal/DocFaseConsulta/CNMV/Circular2_2025.pdf) — Circular 2/2025, 26 March 2025
- T3[MiCA (Regulation (EU) 2023/1114)](https://one-constellation.com/blog/mica-casp-authorisation-after-transition/) — Spain's MiCA transitional period for CASPs ended 1 July 2026
- T3[MiCA Article 111](https://www.zitadelleag.com/services/vasp-licensing/mica-casp) — Providing crypto-asset services without CASP authorisation or valid passport exposes a provider to administrative sanctions
- T3[MiCA Article 59/63 and Article 60](https://gofaizen-sherle.com/casp-license) — A CASP without another eligible licence must obtain full CNMV authorisation; eligible already-licensed entities may notify under Art 60 at least 40 working days before starting

### Spain: C2 Token ClassificationGreenEnacted in forceModule confidence: Probable▾

MiCA's Article 2-3 taxonomy (EMTs, ARTs, utility tokens under Title II, NFT exclusion with large-series exception, and MiFID II security-token exclusion) is settled EU law directly applicable in Spain, with ESMA/EBA guidance operationalising boundary cases.

C2 · Token Classification — Full Module Record 0 sub-modules · 180 words · 6 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login) [View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Spain: C3 On-Chain Activity RegimeAmberEnacted in forceModule confidence: Probable▾

No Spain-specific rules govern staking, DeFi lending, mining, validator operation or DEX activity; these are captured only indirectly via the general MiCA CASP perimeter, mirroring an EU-wide supervisory gap flagged by EBA/ESMA rather than reflecting a Spain-specific policy choice.

C3 · On-Chain Activity — Full Module Record 0 sub-modules · 180 words · 3 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Spain: C4 Stablecoin RegimeGreenEnacted in forceModule confidence: Probable▾

ART/EMT issuance, reserve, redemption and disclosure rules have been in force since 30 June 2024, actively supervised by Banco de Espana, with an enhanced-obligation tier applicable to tokens designated 'significant' under the EU stablecoin framework.

Periodic update · new data 2026-09-21

#### Stablecoin Regime

Issuance of e-money tokens and asset-referenced tokens in Spain requires Banco de España authorisation under MiCA Titles III and IV, a requirement in force since 30 December 2024. This authorisation gate sits alongside CNMV's CASP licensing track and completes the domestic supervisory split under MiCA, with Banco de España responsible for EMT/ART issuers and CNMV responsible for other crypto-asset service provision. This finding is the direct input to the World Payments Monitor's subscribed w2_stablecoins_digital_money module; no ES-specific stablecoin-issuer authorisation activity was independently verified this cycle beyond the standing framework being in force.

#### Outlook

Watch for the first Banco de España EMT/ART issuer authorisation decisions under this framework, which would be the first concrete test of the in-force regime rather than its mere existence.

C4 · Stablecoins & EMTs — Full Module Record 0 sub-modules · 180 words · 7 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Spain: C5 Consumer ProtectionGreenEnacted in forceModule confidence: Probable▾

MiCA marketing, custody, complaint-handling and suitability protections are in force and actively enforced by CNMV, supplemented by a joint ESMA/EBA/EIOPA consumer warning noting that these protections do not extend to unauthorised firms or all crypto-assets.

Horizon · 2027-Q1 (± a quarter) CNMV draft Circular extending complaints procedure to CASP/crowdfunding clients Consultation · Tier 2 source

#### Consumer Protection

Spain's consumer-protection framework for crypto-assets rests almost entirely on MiCA's directly applicable provisions, actively enforced by CNMV. Offerors and CASPs are required to modify and re-notify their published white papers and marketing communications to CNMV whenever a significant new factor or material inaccuracy capable of affecting an investor's assessment arises, ensuring that disclosure documents remain current rather than static at the point of initial notification. Sitting alongside this obligation, the Joint European Supervisory Authorities -- ESMA, EBA and EIOPA -- maintain a standing consumer warning clarifying that MiCA's protections do not cover all crypto-assets or extend to unauthorised firms, and that crypto markets more generally remain volatile and prone to fraud and cyberattack; this warning is non-binding guidance rather than a legal instrument, and is recorded accordingly without a regulatory_stage designation.

On custody, MiCA prohibits authorised CASPs from outsourcing or delegating custody services to entities that are not themselves authorised as CASPs, closing off a route by which client assets might otherwise be routed to unsupervised third parties. MiCA-authorised firms are further required to provide transparent complaint-handling procedures and access to comprehensive product information -- a protection that, notably, does not extend to firms operating outside MiCA authorisation, reinforcing the practical stakes of the licensing-perimeter closure described elsewhere this cycle. Finally, CASPs providing advice or portfolio-management services must comply with MiCA Article 81 suitability requirements, including obtaining, verifying and periodically updating client information, per ESMA's 2025 suitability and periodic-statement guidelines.

Taken as a whole, this module describes a reasonably mature and actively enforced set of protections, with EU-level guidance from ESMA, EBA and EIOPA doing much of the work of operationalising specific requirements such as suitability assessment and consumer warnings.

#### Outlook

Core consumer-protection provisions are expected to remain stable, with continued EU-level guidance refining specific obligations such as suitability assessment rather than the underlying MiCA text changing. The most consequential dynamic to watch is the interaction between this module and the closure of the transitional licensing window: because several of these protections -- complaint-handling standards in particular -- are explicitly tied to MiCA-authorised status, the population of firms still winding down outside authorisation represents a corresponding population of consumers newly outside these protections.

Read full sub-brief · 365 words Periodic update · new data 2026-10-18

#### Consumer Protection

The CNMV opened a public consultation on 15 October 2026, closing 16 November 2026, on a draft Circular amending its existing Circular 7/2013 to extend its formal consumer-complaints procedure to clients of crypto-asset-service and crowdfunding-platform providers. This responsibility has been assigned to the CNMV's Investor Protection, Fraud Prevention and Financial Education Department, a structural indicator that the regulator intends to fold crypto-asset consumer redress into its existing investor-protection infrastructure rather than create a standalone mechanism. Separately, under MiCA Article 75, a crypto-asset service provider offering custody and administration of client assets must conclude a custody agreement with each client, maintain a per-client register of positions, and establish a custody policy designed to minimise the risk of loss; this is a directly applicable EU-level duty already in force, and whether Spain has added any national-specific gold-plating to it was not confirmed this cycle.

#### Outlook

If adopted, the draft Circular is expected to enter into force 20 days after publication in the BOE, which would place commencement in the consultation's aftermath, likely in late 2026 or early 2027. This would mark a concrete expansion of CNMV-administered consumer redress to a population, crypto-asset and crowdfunding clients, that previously fell outside its formal complaints procedure.

Sources and findings (7)
- T1 · EUR-Lex / Publications Office of the European Union[Offerors and CASPs](https://eur-lex.europa.eu/ES/legal-content/summary/european-crypto-assets-regulation-mica.html) — published white papers and marketing communications whenever a significant new factor or material inaccuracy capable of affecting investors' assessment arises
- T1 · ESMA, EBA, EIOPA (Joint ESAs)[ESMA, EBA and EIOPA (Joint ESAs)](https://www.eba.europa.eu/assets/Updated%20Joint%20ESAs%20revised%20warning%20on%20crypto-assets/Updated%20Joint%20ESAs%20revised%20warning%20on%20crypto-assets_ES.pdf) — that MiCA protections do not cover all crypto-assets or unauthorised firms, and that crypto markets remain volatile and prone to fraud and cyberattacks
- T1 · European Securities and Markets Authority (ESMA)[MiCA](https://www.esma.europa.eu/sites/default/files/2026-06/ESMA75-113276571-1710_Public_Statement_MiCA_transitional_period_ends.pdf) — outsourcing or delegating custody services to entities that are not themselves authorised as CASPs
- T1 · ESMA, EBA, EIOPA (Joint ESAs)[MiCA-authorised firms](https://www.eba.europa.eu/assets/Updated%20Joint%20ESAs%20revised%20warning%20on%20crypto-assets/Updated%20Joint%20ESAs%20revised%20warning%20on%20crypto-assets_ES.pdf) — transparent complaint-handling procedures and access to comprehensive product information, a protection that does not extend to non-MiCA-compliant firms
- T1 · European Securities and Markets Authority (ESMA)[CASPs providing advice or portfolio management](https://www.esma.europa.eu/sites/default/files/2025-03/ESMA35-1872330276-2031_Guidelines_on_suitability_and_periodic_statement_MiCA_ES.pdf) — MiCA Article 81 suitability requirements, including obtaining, verifying and periodically updating client information per ESMA's 2025 suitability guidelines
- T2[MiCA Article 75](https://acquislaw.com/law/mica/75) — CASPs providing custody and administration of crypto-assets must conclude a custody agreement, keep a per-client register of positions, and establish a custody policy minimising loss risk
- T1[CNMV](https://www.cnmv.es/portal/mica/regulacion-criptoactivos?lang=en) — The CNMV applies Spain-specific circulars restricting crypto-asset marketing and advertising, in addition to and predating MiCA's EU-wide marketing-communication rules.

### Spain: C6 Tax TreatmentAmberEnacted in forceModule confidence: Probable▾

DAC8 cross-border reporting and general IRPF capital-gains treatment are reasonably well evidenced; Spain-specific instrument-level detail (the Modelo 721 reporting instrument, VAT/IVA treatment, withholding rules) still requires primary AEAT confirmation despite Challenger-supplied secondary detail this cycle.

Horizon · 2026-01-01 (± a quarter) DAC8/CARF transposition into LGT In force

Periodic update · new data 2026-09-21

#### Tax Treatment

DAC8 tax-reporting rules took effect in Spain on 1 January 2026, requiring crypto exchanges and other crypto-asset service providers to report transaction data to the Agencia Tributaria. The same instrument grants the Spanish Treasury the power to order the blocking or liquidation of a taxpayer's crypto assets to settle outstanding tax debts, a power set to extend to European exchanges once automatic cross-border data exchange under DAC8 activates. This is a material tightening of the compliance burden on CASPs and individual holders alike.

#### Outlook

Watch for the first exercised instances of the Treasury's asset-blocking power, and for the activation of automatic cross-border data exchange, which would extend Treasury visibility to European exchanges holding Spanish taxpayers' crypto assets.

C6 · Tax Treatment — Full Module Record 0 sub-modules · 180 words · 9 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Spain: C7 Cross-Border TransferGreenEnacted in forceModule confidence: Probable▾

The EU travel rule is in force and directly applicable in Spain; residual gaps (distinct national reporting thresholds, capital controls) reflect absence of additional national measures rather than regulatory uncertainty. A related sanctions-nexus finding is carried as adjacent context routed to financial-integrity.

C7 · Cross-Border & Travel Rule — Full Module Record 0 sub-modules · 180 words · 5 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Spain: C8 AML/CFT RegimeAmberEnacted in forceModule confidence: Probable▾

This module is out-of-scope by design for the crypto monitor: AML/CFT supervision in Spain (SEPBLAC, Law 10/2010) is subscribed to financial-integrity's aml_cft_regime coverage per fleet architecture pending its consolidation there. Crypto carries only the subscribed surface; no independent claims were researched or composed for this module this cycle.

C8 · AML/CFT Regime — Full Module Record 0 sub-modules · 180 words · 2 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) .

[Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/)

### Spain: C9 Commercial Activity limited signal unpopulated ▾

## Commercial Activity

Commercial uptake of MiCA CASP authorisation in Spain shows material scale: CNMV has reportedly granted authorisation to six Spanish banks, BBVA, Cecabank, Openbank, Renta 4, CaixaBank, and Kutxabank, and five fintechs, Bit2Me, Crossmint, Minos, Criptan, and Fazil Crypto, by early 2026. This finding is sourced from a single vendor/law-firm secondary source rather than independent confirmation against CNMV's own authorised-entity register this cycle, so the completeness and exact dating of this list carries that caveat. No transaction value or consideration is disclosed for any of these authorisations, consistent with the nature of a regulatory licensing event rather than a disclosed commercial transaction.

The mix of six major banks alongside five fintech entrants indicates that CASP authorisation in Spain has moved beyond a narrow early-mover cohort into broader institutional participation, spanning both incumbent financial institutions and crypto-native firms. This pattern of broad-based authorisation uptake sits alongside the AML-gateway tightening introduced by Real Decreto 813/2026, meaning newer applicants entering the market after 28 October 2026 will face the added SEPBLAC prior-report step that the entities named above evidently cleared under the prior process. — Outlook: Independent confirmation of this authorised-entity list against CNMV's own register would sharpen confidence in the current count and timing. Whether additional banks or fintechs pursue CASP authorisation under the now-tightened SEPBLAC-gateway process, and how that process affects the pace of new applications, is the development most likely to be visible in the next cycle.

Open gap — crypto-int-1 CNMV's own primary notice confirming Bit2Me STX's blockchain-exchange clearance has not been located; the sole source is a T4 aggregator snippet. no under-indexing note recorded

No periodic updates recorded in this cycle

Sources and findings (6)
- T3[CNMV MiCA CASP authorisations](https://crassula.io/es/guides/licenses/mica-casp/) — CNMV granted MiCA CASP authorisation to six Spanish banks (BBVA, Cecabank, Openbank, Renta 4, CaixaBank, Kutxabank) and five fintechs (Bit2Me, Crossmint, Minos, Criptan, Fazil Crypto) by early 2026
- T4[Bit2Me STX](https://www.crunchbase.com/organization/bit2me/news_and_analysis) — Bit2Me's securities-token-exchange unit ('STX') reportedly obtained CNMV clearance around 28 October 2026 to launch a native blockchain-based stock exchange.
- T3[Bit2Me](https://www.elespanol.com/invertia/mercados/criptomonedas/20260224/bit2me-ampliara-ronda-nuevos-inversores-iniciar-expansion-italia-portugal-francia-alemania/1003744142096_0.html) — Bit2Me raised/expanded a EUR 30 million funding round to fund expansion into Italy, Portugal, France and Germany
- T3[Criptan](https://www.eleconomista.es/cripto/noticias/13974850/06/26/criptan-negocia-una-ronda-de-inversion-con-cuatro-bancos-espanoles-y-un-family-office-de-andorra.html) — Criptan was negotiating a EUR 7 million funding round with four Spanish banks and an Andorran family office while preparing a CNMV Agencia de Valores licence application
- T1 · Bit2Me (via PR Newswire)[Bit2Me](https://www.prnewswire.com/news-releases/bankinter-joins-bit2mes-capital-structure-following-30-million-funding-round-302662810.html) — Bankinter
- T2 · El Español (Invertia)[Bit2Me](https://www.elespanol.com/invertia/mercados/criptomonedas/20260224/bit2me-ampliara-ronda-nuevos-inversores-iniciar-expansion-italia-portugal-francia-alemania/1003744142096_0.html) — Bit2Me — 5346000000