Cryptocurrency in Cyprus: regulation, taxes and licensing
In short. Crypto is legal in Cyprus and the licensing is real: CySEC authorises service providers under the EU's MiCA regime. The thing most guides still get wrong is the calendar. Applications closed on 27 February 2026 and the transition for firms already operating ended on 1 July. Individuals face a flat 8% on disposals, and residents with non-domiciled status may owe nothing at all on investment gains.
- DISPOSAL BY AN INDIVIDUAL
- 8%flat, under Article 20E
- NON-DOM INVESTMENT GAINS
- 0%no CGT, no income tax, no SDC
- CORPORATE RATE
- 15%raised from 12.5% on 1 January 2026
- MINIMUM CAPITAL
- 50k-150k eurosby the services provided
- APPLICATION DEADLINE
- 27 Feb 2026closed
- TRANSITION ENDED
- 1 Jul 2026licence now required
- LICENCE
- MiCA CASPissued by CySEC, valid EU-wide
Who regulates crypto in Cyprus
Supervision sits with the Cyprus Securities and Exchange Commission, CySEC. Since MiCA applies in full, a crypto-asset service provider licence issued in Cyprus is valid across the European Union, and a licence issued in any other member state is valid here. That is the main reason firms incorporate on the island: not the tax number it used to be known for, but a single authorisation that reaches the whole bloc.
The regime is broader than exchanges. It covers trading platforms, custodial wallets, advisory and portfolio management, placement and transfer services, and issuers of asset-referenced tokens and e-money tokens. Minimum capital is set by what a firm actually does: 50,000 euros at the lowest tier, 125,000 or 150,000 for the wider permissions.
The window that already closed
Existing providers had until 27 February 2026 to lodge a MiCA application with CySEC. Firms that filed in time could keep operating under the earlier national regime until 1 July 2026 or until CySEC decided their application, whichever came first. Both dates have passed. From a Cyprus base, crypto-asset services now require a CySEC-issued MiCA licence, and new applicants join the ordinary authorisation queue rather than a transition.
Two tax answers that both hold
Profits from disposing of crypto-assets are taxed at a flat 8% under Article 20E of the Income Tax Law. A Cyprus tax resident with non-domiciled status may nonetheless owe nothing on the same gains: crypto is not immovable property so capital gains tax does not reach it, investment activity is not trading income, and the special defence contribution is waived under the non-dom exemption.
Both answers are correct and they apply to different people. Which one applies turns on status and on whether the activity is investing or trading, and that is settled on facts — frequency, intent, financing, how the position is managed — rather than on what a taxpayer would prefer.
What changed for companies
Cyprus was known for a 12.5% corporate rate. From 1 January 2026 the headline rate is 15% under this year's tax reform, a fifth higher in relative terms. A licensed provider is taxed under the ordinary corporate regime at that rate.
Reporting runs whatever the licence says
DAC8 took effect across the EU on 1 January 2026. Crypto-asset service providers report their users' transactions to tax authorities, and member states exchange that information automatically between themselves. A licence is a permission to operate; reporting is a pipe that runs regardless. The first data covering 2026 is transmitted in 2027.
Allowed
- Hold and trade crypto as an individual, with disposals taxed at a flat 8%
- Owe nothing on investment gains as a resident with non-domiciled status
- Operate EU-wide on a CySEC licence, and operate here on any member state's licence
- Set up a licensed provider with 50,000 to 150,000 euros of capital, depending on services
Restricted
- Providing crypto-asset services from Cyprus without a CySEC MiCA licence — since 1 July 2026
- The transition for existing providers is over; new applicants join the ordinary queue
- Trading activity is taxed as income, not at the 8% disposal rate — the line is drawn on facts
- Reporting under DAC8 applies to providers regardless of what the licence permits
How the rules took shape
MiCA enters into force across the EU, setting a single licensing regime for crypto-asset service providers.
The corporate headline rate rises from 12.5% to 15% under the tax reform. DAC8 reporting begins.
The deadline passes for existing providers to lodge a MiCA application with CySEC.
The transition ends. Only a CySEC-issued MiCA licence permits crypto-asset services from a Cyprus base.
The first DAC8 data, covering 2026 transactions, is transmitted between member states.
Worth knowing
Cyprus built its reputation on a 12.5% corporate rate and gave it up on 1 January 2026, raising the headline rate to 15%. The jurisdiction is now chosen for its regime and EU market access rather than for the number it was known by.
Common questions
Is crypto legal in Cyprus?
Yes. It is not legal tender, but holding, trading and licensed service provision are all permitted.
Can I still apply under the transition?
No. The deadline was 27 February 2026 and the transition ended on 1 July. New applicants go through ordinary CySEC authorisation.
Do I pay 8% or nothing?
It depends on status and activity. The flat 8% applies to disposals under Article 20E; a non-dom resident whose activity is investment rather than trading may owe nothing.
What decides investing versus trading?
Facts: how often you transact, your intent, how the position is financed and managed. It is not a choice made on a tax return.
Does a Cyprus licence work elsewhere in the EU?
Yes. Under MiCA a licence from one member state is valid across the union, and the reverse also holds.
Will my exchange report me?
If it is an EU provider, yes. DAC8 has applied since 1 January 2026 and member states exchange the data automatically.
Sources
Related reading
Other countries
Updated 25.09.2026 · this is reference material, not investment or tax advice