Cyprus: crypto & digital assets regulation

Regulated

Cyprus crypto regime: MiCA implementation with CySEC as primary supervisor

Lead regulator:: Cyprus Securities and Exchange Commission (CySEC)
Key law:: EU Regulation 2023/1113 (MiCA)
Last updated:: 2026-07-12

Cyprus has adopted the EU Market in Crypto-Assets Regulation (MiCA), establishing a comprehensive licensing and supervisory framework for crypto-asset service providers (CASPs). The Cyprus Securities and Exchange Commission (CySEC) serves as the primary supervisor for these entities, overseeing authorization, governance, and ongoing compliance.

Entities operating before the regulation's full application are subject to a transitional period, requiring them to submit evidence of prior activities to maintain operations until authorization is granted or refused, with a deadline of 1 July 2026. This transition ensures continuity for existing market participants while they align with new EU-wide standards.

The regulatory environment is heavily focused on anti-money laundering (AML) and counter-terrorist financing (CTF) compliance. Regulators have adopted EBA guidelines on governance, recovery plans, and risk factors, mandating robust internal controls, risk-based customer due diligence, and specific reporting obligations such as the Travel Rule.

Recent directives from the Central Bank of Cyprus and CySEC emphasize enhanced scrutiny of high-risk transactions and the implementation of strict governance arrangements for asset-referenced token issuers. The jurisdiction has improved its FATF compliance rating, reflecting a concerted effort to align with international standards and mitigate ML/TF risks in the virtual asset sector.

Who regulates

Cyprus Securities and Exchange Commission (CySEC)
Primary supervisor for crypto-asset service providers (CASPs) and issuers under MiCA; oversees authorization, governance, and reporting.
^{[1][2][3][4][5][6][7][8][9]}
Central Bank of Cyprus (CBC)
Issues directives for the prevention of money laundering and terrorist financing for obliged entities, including those in the crypto sector.
^[10]

Core laws & rules

EU Regulation 2023/1113 (MiCA) (2023)
The core EU regulation governing crypto-assets, establishing harmonized rules for issuance and trading of crypto-assets and services across the EU, applicable in Cyprus.
^[2][6][7]
Central Bank of Cyprus Directive for the Prevention of Money Laundering and Terrorist Financing 2025 (2025)
Establishes comprehensive AML/CFT requirements for obliged entities, including robust governance and risk-based customer due diligence for crypto activities.
^[10]

Licensing & registration

Crypto-Asset Service Provider (CASP) Authorization
Entities must obtain authorization from CySEC to provide crypto-asset services. A transitional period allows pre-existing providers to operate until 1 July 2026 while submitting evidence of prior activities. Timeline: Transitional period until 1 July 2026
^[1]
Notification for Existing Financial Firms
Existing regulated entities (e.g., investment firms) must notify CySEC of their intention to provide crypto-asset services under Article 60 of MiCA. Timeline: Notifications required by specified deadlines (e.g., 9 August 2024 for initial round)
^[6]

Restrictions & warnings

CASPs must implement risk-based procedures for verifying originators and beneficiaries (Travel Rule) and adhere to EBA guidelines on ML/TF risk factors.
^[2][8]
Asset-Referenced Token (ART) issuers must maintain detailed governance arrangements and recovery plans as specified by EBA guidelines adopted by CySEC.
^[3][5]
Entities must submit annual Risk Based Supervision Framework (RBSF) information electronically to CySEC.
^[4]

Direction of travel

Cyprus is aligning its regulatory framework with EU-wide standards, with a focus on strengthening AML/CFT compliance and improving its international FATF/MONEYVAL ratings.
^[11][12]
Regulators are actively implementing EBA guidelines and monitoring the transitional period to ensure a smooth transition to full MiCA compliance.
^[1][2]

Sources

Email alerts for Cyprus updates

New circulars, rules and guidance — a digest in your inbox, same day.

This guide is compiled automatically from 12 primary-source documents published by Cyprus's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.