Malta is crypto-friendly, regulating crypto-assets under the EU MiCA Regulation and the national Markets in Crypto-Assets Act (Cap. 647), with the MFSA as competent authority. The transitional regime for VFA Act licence holders ended on 30 June 2026.
| Status | crypto_friendly |
| Risk Score | 15/100 (Low Risk) |
| Region | europe |
| Currency | EUR |
| Adoption Rank | #19 |
| Capital Gains (Personal) | No capital gains tax on crypto held as an investment (crypto coins fall outside the assets covered by Malta's capital gains rules); trading gains taxed as income at progressive rates up to 35% |
| Capital Gains (Corporate) | 35% corporate income tax |
| VAT on Crypto | No |
Malta taxes capital gains only on listed asset classes such as real estate, shares and securities, so gains on crypto coins held as investments are generally not taxed, unless the token qualifies as a security. Gains from crypto trading are taxed as income at progressive rates up to 35%. Companies pay 35% corporate income tax. The Commissioner for Revenue issued guidelines on the income tax treatment of DLT assets in 2018.
| Required | Yes |
| Regulator | MFSA |
| Framework | Markets in Crypto-Assets Act (Chapter 647, Laws of Malta) and MiCA Regulation (EU) 2023/1114 |
| Ease | medium |
| Cost (USD) | $30,000 - $200,000 |
The MFSA authorises CASPs under the Markets in Crypto-Assets Act (Cap. 647) and MiCA. The transitional period for VFA Act licence holders ended on 30 June 2026; providers without a CASP licence by that date had to wind down their crypto services.
| Name | Year | Status | Scope |
| Regulation (EU) 2023/1114 on Markets in Crypto-Assets (MiCA) | 2023 | Active | supranational |
| Establishes a comprehensive EU framework for crypto-asset service providers (CASPs), stablecoin issuers (ART/EMT), and trading platforms; prohibits market abuse in crypto-assets; full application from 30 December 2024. | |||
| Regulation (EU) 2023/1113 on Transfer of Funds and Certain Crypto-Assets (TFR) | 2023 | Active | supranational |
| Extends FATF Travel Rule to crypto-asset transfers; requires CASPs to collect and transmit originator/beneficiary information for all transfers, removing the EUR 1000 threshold; applies from 30 December 2024. | |||
| Council Directive (EU) 2023/2226 (DAC8) | 2023 | Active | supranational |
| Amends Directive 2011/16/EU to require mandatory automatic exchange of information on crypto-asset transactions held by EU tax residents; CASPs must report to national tax authorities from 1 January 2026. | |||
| Regulation (EU) 2022/2554 on Digital Operational Resilience for the Financial Sector (DORA) | 2022 | Active | supranational |
| Mandates ICT risk management, incident reporting, third-party provider oversight, and digital operational resilience testing for financial entities including CASPs covered by MiCA; applies from 17 January 2025. | |||
| Directive (EU) 2018/843 (5th Anti-Money Laundering Directive) | 2018 | Active | supranational |
| First EU directive to bring crypto-asset exchange services and custodian wallet providers within AML/CFT scope; introduced KYC obligations and registration requirements for Virtual Asset Service Providers. | |||
| Directive (EU) 2018/1673 on Combating Money Laundering by Criminal Law (6AMLD) | 2018 | Active | supranational |
| Harmonises criminal-law definitions and penalties for money laundering across EU member states; establishes minimum custodial sentences and corporate liability rules applicable to crypto-related ML offences. | |||
| Regulation (EU) 2024/1624 on Anti-Money Laundering Requirements (AML Regulation) | 2024 | Active | supranational |
| Replaces 5AMLD/6AMLD with a single AML Regulation directly applicable in all member states; tightens KYC/CDD requirements for CASPs and sets EUR 1000 cash-equivalent threshold for crypto transactions; phased application 2027. | |||
| Commission Delegated Regulation (EU) 2024/2795 supplementing MiCA | 2024 | Active | supranational |
| MiCA Level 2 delegated act setting regulatory technical standards on information requirements and procedures for competent authority notifications under MiCA; part of the MiCA implementation package applicable from December 2024. | |||
MFSA has taken enforcement action against VFA agents for compliance failures and issued warnings about unlicensed entities. Malta was removed from the FATF grey list in 2023 after strengthening its AML enforcement.
| KYC Required | Yes |
| Travel Rule | Yes |
| FATF Member | No |
| FATF Status | compliant |
| Suspicious-Activity Reporting | Yes |
Status: regulated
DeFi activities fall under the regulatory scope of MiCA and the Markets in Crypto-Assets Act, requiring compliance with applicable licensing and AML rules.
Status: regulated
Stablecoins are regulated under the EU MiCA framework and Malta's Markets in Crypto-Assets Act, with specific requirements for issuance and operation.
Status: Unclear
The VFA Act includes provisions for DLT assets that may cover certain NFTs. Under MiCA, unique NFTs are excluded but fungible-like NFTs may be covered.
| Legal | Yes |
| Electricity Cost | $0.13/kWh |
| Renewable Energy | 30% |
| Infrastructure | good |
Mining is legal with moderate electricity costs and a temperate climate favorable for operations. Infrastructure quality is good, supporting data centers and mining activities.
| Stability | stable |
| Sanctions | No |
| Corruption Index | 54/100 |
| Banking Access | open |
| Sanctions Program Active | No |
Risk Factors
Malta is politically stable with a strong regulatory framework and open banking environment. It is not subject to international sanctions and has moderate corruption levels. Key risks include its small market size and potential regulatory shifts.
Malta is crypto-friendly, regulating crypto-assets under the EU MiCA Regulation and the national Markets in Crypto-Assets Act (Cap. 647), with the MFSA as competent authority. The transitional regime for VFA Act licence holders ended on 30 June 2026.
Malta is classified by FATF as: compliant.
Yes, licensing is required for VASPs.
KYC is mandatory for crypto businesses.
Soken combines Web3 security engineering and crypto-legal counsel: two specialised tracks, one team. Pick the side that matches your need.
VASP licensing, jurisdiction analysis, AML/KYC, legal opinions, company registration and banking access.
Explore Legal Services → IT & SecuritySmart-contract audits, penetration testing, Web3 development, AI/LLM security audits.
Explore IT Services →Last reviewed: 2026-09-02 · Data source: Soken Crypto Legal Map
← Back to Crypto Map