Spain: crypto & digital assets regulation

Regulated

MICA implementation via CNMV; PSC licensing for crypto-asset services

Lead regulator
Comisión Nacional del Mercado de Valores (CNMV)
Also involved
Banco de España (AML/CFT supervision) · CNMV (market conduct)
Core law
Law 6/2023 on Securities Markets and Investment Services
Entry capital
Approval timeline
Customer assets
Segregation required; MICA custody rules apply
Data protection
GDPR · Spanish Data Protection Agency (AEPD)
Sandbox

Spain has transposed the EU Markets in Crypto-Assets (MICA) Regulation into national law via Law 6/2023, establishing the CNMV as the primary supervisor for Crypto-Asset Service Providers (PSCs). The regulatory framework focuses on licensing, transparency, and investor protection, with recent circulars streamlining reporting and updating advertising rules to align with EU standards. The regime is fully regulated for service providers, while mining and advisory activities fall under specific supervisory scopes.

Which licence do you need?

Your activityRequirementCapitalTimelineAuthority
Exchange / trading platformLicencePSC (Crypto-Asset Service Provider)[1][2]

Requires PSC authorization under MICA/Law 6/2023

CNMV
Custody of client assetsLicencePSC (Crypto-Asset Service Provider)[1]

Custody is a regulated PSC activity under MICA

CNMV
Token issuance / public offeringLicencePSC (Crypto-Asset Service Provider)[1]

Issuers and CASPs subject to MICA transparency rules

CNMV
Broker-dealer / OTC deskLicencePSC (Crypto-Asset Service Provider)[1]

OTC trading desks require PSC authorization

CNMV
Stablecoin issuanceLicenceART/AMEP authorization[1]

E-money tokens require specific authorization

CNMV
Crypto payments acceptanceLicencePSC (Crypto-Asset Service Provider)[1]

Crypto-to-fiat services require PSC license

CNMV
Mining / staking servicesUncertainverify with regulator

Mining not explicitly regulated; staking may fall under PSC

Advisory / portfolio managementLicencePSC (Crypto-Asset Service Provider)[2]

Advisory services explicitly included in CNMV supervisory scope

CNMV

New — what changed recently

  • 2025-06-22Circular 2/2025Extended CNMV supervisory scope to include PSCs and EAFNs, reducing administrative burden.[2]
  • 2024-12-27Circular 1/2024Repealed Circular 1/2022 to align crypto advertising rules with EU MICA regulations.[3]
  • 2023-03-17Law 6/2023Transposed EU directives including MICA, establishing the current CNMV supervisory framework.[1]

Market-entry checklist

  1. 1Apply for PSC AuthorizationSubmit application to CNMV under Law 6/2023 for the specific crypto-asset service activities.
  2. 2Implement MICA ComplianceEnsure whitepapers and advertising meet EU MICA transparency and content standards.
  3. 3Register with AML SupervisorRegister with the Banco de España for anti-money laundering supervision as required.
  4. 4Establish Custody SafeguardsImplement segregated custody solutions for client assets as mandated by MICA.
  5. 5Update Tax ReportingAlign internal reporting with Law 11/2021 tax fraud prevention and transparency rules.
This guide is compiled automatically from 3 primary-source documents published by Spain's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.