LogoRegulatory Alerts

Gibraltar: fintech & payments regulation

Regulated

Gibraltar VASP registration under POCA 2015; DLT licensing under FSA 2019; GFSC oversight

Lead regulator:
Gibraltar Financial Services Commission (GFSC)
Key law:
Proceeds of Crime Act 2015; Financial Services Act 2019
Last updated:
2026-07-12

Virtual Asset Service Providers (VASPs) operating in Gibraltar must register with the GFSC under the Proceeds of Crime Act 2015, with specific guidance clarifying the scope of in-scope activities and the requirement to conduct business from Gibraltar.

For broader Distributed Ledger Technology (DLT) activities, including the storage or transmission of value, firms are subject to the outcomes-focused, principles-based regime established under the Financial Services Act 2019, overseen by the GFSC.

The regulatory environment is actively refined through recent guidance notes, including those on change of control assessments and the specific scope of DLT and VASP activities, indicating a mature and responsive supervisory stance.

Who regulates

  • Gibraltar Financial Services Commission (GFSC)

    Primary supervisor for VASP registration, DLT licensing, and financial services oversight under the FSA 2019 and POCA 2015.

    [1][2][3][4]

Core laws & rules

  • Proceeds of Crime Act 2015 (2015)

    Establishes the mandatory registration regime for Virtual Asset Service Providers (VASPs) and defines the scope of regulated activities for anti-money laundering purposes.

    [4]

  • Financial Services Act 2019 (2019)

    Provides the legislative framework for the Distributed Ledger Technology (DLT) regime, covering the storage and transmission of value, and governs change of control assessments.

    [1][2][3]

Licensing & registration

  • VASP Registration

    Firms carrying out VASP activities by way of business from Gibraltar must register with the GFSC under the Proceeds of Crime Act 2015.

    [4]

  • DLT License

    Firms using DLT for the storage or transmission of value belonging to others are subject to the DLT Framework under the Financial Services Act 2019.

    [2][3]

Restrictions & warnings

  • Prior notification is mandated for transactions involving significant influence or aggregated holdings that constitute a change of control under the Financial Services Act 2019.

    [1]

Direction of travel

  • The GFSC continues to issue detailed guidance notes to clarify the scope of the DLT and VASP regimes, indicating an ongoing effort to refine regulatory expectations and ensure compliance.

    [2][3][4]

Sources

  1. GFSC Guidance Note on Change of Control: Assessment of Acquisitions and Increases in Control · 2026-06-01
  2. GFSC Guidance Note on the Scope of the DLT Framework · 2026-03-25
  3. GFSC Guidance Note on Scope of the DLT Framework · 2025-03-28
  4. VASP Registration Scope Guidance Note · 2022-10-12

Email alerts for Gibraltar updates

New circulars, rules and guidance — a digest in your inbox, same day.

This guide is compiled automatically from 4 primary-source documents published by Gibraltar's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.