LogoRegulatory Alerts

Cyprus: fintech & payments regulation

Regulated

Cyprus fintech: CySEC oversees MiCA crypto licensing; CbC regulates payments and consumer credit

Lead regulator:
Cyprus Securities and Exchange Commission (CySEC)
Key law:
Market in Crypto-Assets Regulation (MiCA)
Last updated:
2026-07-12

Cyprus has established a dual regulatory framework for fintech, with the Cyprus Securities and Exchange Commission (CySEC) taking the lead on crypto-asset services under the EU-wide MiCA regulation. The Central Bank of Cyprus (CbC) retains authority over traditional payment services, currency exchange, and consumer credit intermediaries under national directives.

Under MiCA, existing crypto-asset service providers (CASPs) operating before December 2024 are subject to a transitional period requiring notification to CySEC, with full authorization deadlines set for July 2026. New entrants and existing financial institutions offering crypto services must comply with strict notification and authorization procedures overseen by CySEC.

For non-crypto fintech activities, the CbC mandates prior authorization for bureaux de change and consumer credit intermediaries, enforcing rigorous fitness and probity assessments. This creates a segmented landscape where crypto assets are regulated by the securities regulator under EU law, while traditional payment and credit activities remain under the central bank's national supervision.

Who regulates

  • Cyprus Securities and Exchange Commission (CySEC)

    Primary supervisor for crypto-asset service providers (CASPs) under MiCA and investment firms.

    [1][2][3]

  • Central Bank of Cyprus (CbC)

    Supervisor for bureaux de change, payment institutions, and consumer credit intermediaries.

    [4][5]

Core laws & rules

  • Market in Crypto-Assets Regulation (MiCA) (2023 (applicable 2024-2026))

    EU regulation governing crypto-asset service providers, requiring authorization or notification to CySEC for entities providing services in Cyprus.

    [1][2][3]

  • Bureaux de Change Businesses Directive 2014 (2014)

    National directive requiring prior authorization from the Central Bank of Cyprus for businesses buying or selling foreign currency to the public.

    [5]

  • Directive on Authorisation and Supervision of Non-Credit Institutions and Credit Intermediaries (2018)

    Establishes the framework for authorizing non-credit institutions and credit intermediaries offering residential consumer credit agreements.

    [4]

Licensing & registration

  • Crypto-asset Service Provider (CASP) - Transitional

    Existing CASPs operating before 30 December 2024 must submit evidence of prior activities to CySEC to operate under a transitional period until 1 July 2026 or until final authorization decision. Timeline: Until 1 July 2026

    [1]

  • Crypto-asset Service Provider (CASP) - New/Existing Financial Institutions

    New entrants and existing regulated entities (e.g., investment firms) must notify CySEC of their intention to provide crypto-asset services under Article 60 of MiCA. Timeline: Immediate notification required

    [2][3]

  • Bureau de Change

    Requires prior authorization from the Central Bank of Cyprus to operate.

    [5]

  • Consumer Credit Intermediary

    Requires authorization from the Central Bank of Cyprus, including fitness and probity assessments for shareholders and management.

    [4]

Restrictions & warnings

  • Crypto-asset service providers must cease reliance on the transitional period by 1 July 2026 if full authorization has not been granted.

    [1]

  • Bureaux de change and credit intermediaries cannot operate without prior authorization from the Central Bank of Cyprus.

    [5][4]

Direction of travel

  • The regulatory landscape is stabilizing under MiCA, with CySEC actively enforcing transitional deadlines and authorization processes for crypto entities.

    [1]

  • Traditional fintech sectors remain under strict national supervision by the Central Bank of Cyprus, with no recent legislative changes indicated in the provided documents.

    [4][5]

Sources

  1. Transitional period for crypto-asset service providers under MiCAR Article 143(3) · 2024-12-31
  2. Notification of crypto asset services under article 60 of MiCA · 2024-07-31
  3. CySEC Notification of Crypto Asset Services Under Article 60 of MiCA · 2024-06-26
  4. Authorisation and Supervision of Non-Credit Institutions and Credit Intermediaries providing Credit Agreements for Consumers relating to Residential Immovable Property Directive of 2018 · 2019-03-20
  5. Bureaux de Change Businesses Directive 2014 · 2018-04-11

Email alerts for Cyprus updates

New circulars, rules and guidance — a digest in your inbox, same day.

This guide is compiled automatically from 5 primary-source documents published by Cyprus's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.