Application for a Gibraltar DLT LicenseApplies to services related to the storage or transfer of value for others through the business-oriented use of distributed ledger technology, either locally or originating from the jurisdiction, and is subject to approval by the GFSC. Key considerations for the application include the actual scope of business, management team, capital, protection of client assets, and compliance capabilities.
ChesaGroup can assist with business scope assessments, company formation, application documentation, and preparations for local operations. This page also explains the differences between DLT providers and VAA providers, the three-stage application process, and ongoing obligations after approval.
Before applying for a Gibraltar DLT license, you should first determine how client assets will be transferred, who will control the private keys and execute transactions, and the target client market. The following sections outline regulatory fees, operating budgets, and the scope of services separately, to avoid equating company registration or general VASP registration with DLT authorization.
The DLT license authorizes the storage or transfer of value on behalf of others. The Scope Guidance, Version 3, issued by the GFSC on March 26, 2026, also outlines the VAA (Virtual Asset Arrangements) license, which covers activities related to the exchange of virtual assets for fiat currency or other virtual assets, conducted or arranged on a commercial basis.
The non-custodial model does not automatically grant an exemption: DLT, VAA, or other applicable frameworks should be identified based on actual functions. Technical terminology, company registration, and general VASP designations cannot substitute for an analysis of the regulatory scope. Please refer toGFSC Current Scope Guidance.
The project budget proposal should itemize the following: regulatory application and annual fees, company incorporation and professional service fees, regulatory capital, office and personnel expenses, auditing, insurance, system security, and third-party vendor costs. Government fees shall be based on the fee regulations in effect at the time of submission and the applicable categories confirmed by the GFSC.
Capital must be commensurate with business risks and the requirements for an orderly liquidation; a fixed amount cannot be treated as a uniform requirement for all DLT applications. Free consultations do not include government fees or free license processing; the specific scope of delivery for customized packages and third-party fees are subject to written agreements.
The GFSC conducts its review in phases; applicants are notified to proceed to the next phase only after meeting the requirements of the previous phase. The progress of the review may be affected by the quality of the application materials, the complexity of the equity structure, the eligibility of key personnel, the technical proposal, and responses to requests for additional information.
We recommend first developing business process diagrams, staffing plans, and funding plans before establishing a feasible project timeline. Company incorporation, regulatory authorization, and opening a bank account are separate processes; no service timeline constitutes a guarantee of approval or account opening.
Get started on your journey to starting a business in Gibraltar with our service packages.
Consultation on Establishing Licensed Cryptocurrency Companies in Gibraltar
Coordinated support for incorporation, application preparation and the operational workstreams agreed for the project.
Considering an acquisition as a route to market? An existing regulated business may offer an alternative to a new application, subject to due diligence and any required change-of-control approvals or notifications.
We maintain a changing selection of regulated businesses available for acquisition across jurisdictions.
Contact us for current availability, indicative pricing and transaction requirements.
We recommend using the table below to organize the proposed services and key facts for the scope assessment by local professional advisors and the GFSC. The table is intended to assist in preparing materials and does not replace regulatory conclusions regarding specific projects.
| Business Model | Facts That Need to Be Clarified |
|---|---|
| Custodial Wallets and Value Transfer | Who controls the private key, who can initiate or block transfers, and who is responsible for asset ownership and delivery |
| Trading Platforms and OTC Services | Who arranges the transactions, whether client assets are held, and how fiat currency and virtual assets are settled |
| Non-Custodial Exchange Arrangements | Exemption should not be determined solely on the basis of not holding a private key; the VAA authorization path should be evaluated. |
| Smart Contracts or Decentralized Platforms | Management Authority, Upgrade Authority, Trading Intervention, and Ongoing Commercial Revenue |
| Token Issuance, Investment, or Payment Products | Product Rights, Redemption Commitments, and Whether Other Financial Services Licenses Are Required |
The business plan should specify each contracting party, the customer’s country of residence, marketing channels, and service restrictions. Authorization in Gibraltar should not be construed as automatically conferring the right to operate in other markets; a separate local market access assessment must be conducted before expanding into new customer regions or introducing new products.
For comparisonUK Guidelines on the Regulation of Crypto Assets with Global Crypto Licensing Guide, based on the actual customer's market planning framework.
The GFSC places great emphasis on the exercise of actual management from the Gibraltar office and consistently enforces the “four-eyes” principle of dual oversight. Simply providing a registered address or appointing a nominal director is not sufficient to demonstrate compliance with the requirements. The personnel plan should reflect day-to-day decision-making authority, the actual location where duties are performed, experience, and the division of responsibilities.
The DLT framework adopts ten regulatory principles covering integrity, client interests, resources, risk, asset protection, governance, technological security, financial crime prevention, business resilience, and market integrity. Different models should be implemented in accordance with their respective scopes of application; a single template should not be mechanically applied across the board.
It is recommended to establish a checklist for each system that includes “Person in Charge—Operational Steps—Evidence Records—Review Frequency.” For example, the protection of customer assets can be implemented through a wallet access rights list, balance reconciliations, and records of escalated anomalies; cybersecurity can be implemented through access authorization, recovery drills, and a closed-loop process for vulnerability remediation.
When providing trading services, entities should establish systems for monitoring abnormal trading, managing manipulation risks, and controlling conflicts of interest in accordance with their respective roles. It is recommended to clearly designate the individuals responsible for related-party transactions, employee trading, listing reviews, and customer complaints, and to maintain records of investigations and resolutions. Since the risks associated with custodial services differ from those of trading platforms, control measures should be adjusted accordingly.
For guidance on compliance preparation, please refer toAML and KYC compliance services; In addition to customer identification, the requirements should also cover risk classification, sanctions screening, ongoing monitoring, suspicious transaction reporting, and applicable virtual asset transfer information requirements.
Effective July 1, 2024, the standard corporate tax rate for most companies in Gibraltar is 15 percent. Taxability is determined based on the source of income and applicable statutory rules; the fact that a client is located overseas, that funds are deposited into an overseas account, or that a transaction involves cryptocurrency does not, by itself, constitute grounds for tax exemption on profits. For regulated businesses, the relevant rules governing the determination of income source must also be verified.
It is recommended that a tax advisor conduct an assessment based on the actual location of operations, types of income, related-party transactions, and overseas tax obligations. Licensing, corporate tax, and banking compliance are separate matters and should be addressed individually.
It is recommended to establish an annual compliance calendar to track regulatory fees, audits and filings, funding budgets, staff responsibilities, policy updates, and system drills. When changes to equity, scope of business, key personnel, or significant outsourcing arrangements are proposed, first verify the applicable approval or notification requirements.
When acquiring an existing business, you should verify the legal entity and scope of licensing in the GFSC registry, as well as any historical compliance issues, client assets, and banking arrangements. Purchasing a company does not automatically confer a freely transferable license; the time estimates provided in the acquisition module on this page are for service planning purposes only and do not substitute for a regulatory due diligence review.
When preparing for a consultation, please provide information on your business processes, target countries, equity structure, team composition, and technology providers viacontact ChesaGroupConfirm the list of materials and scope of services for the next step. Document review date: November 2026.
First, confirm the applicable regulatory pathway; the formal application process should proceed in stages in accordance with the GFSC’s notice. The actual timeline depends on the documentation, the complexity of the business, and the review feedback; there is no set timeframe for approval.
Following initial discussions regarding the scope, submit the application, Phase 1 business plan, information on the controlling party, and proof of funding sources in accordance with the GFSC phase requirements. The Group Shared Services department should provide details on the relevant arrangements.
Preparatory Outcomes:Business process diagrams, equity and beneficial ownership structures, financial budgets, and the responsibilities and resumes of key personnel. The initial submission must comply with Phase 1 requirements; subsequent submissions should proceed in accordance with regulatory notices.
Upon entering the second phase, submit the relevant materials on risk management, technical architecture, outsourcing, asset protection, and AML/CFT, and respond to regulatory review questions.
Preparatory Outcomes:Risk and Outsourcing Ledger, Wallet Control Plan, Cybersecurity and Recovery Arrangements, and Customer Risk Assessment Process. The documents should be consistent with the actual systems and personnel operations.
Phase 3 involves finalizing arrangements related to client terms, fees and risk disclosures, complaints, conflicts of interest, and audit banks. Upon completion of the phase review, the GFSC will issue an authorization decision; following approval, an on-site inspection will verify the actual effectiveness of the control measures.
Preparatory Outcomes:List of launch requirements, terms of service, job descriptions and outsourcing documents, and operational evidence. Operations must be conducted in accordance with the final scope and conditions of the license.
Arrange a free initial consultation with our advisory team. We can discuss your questions, review the proposed project and identify regulatory options suited to its objectives and budget.
Contact us and a dedicated adviser will respond within 24 business hours. The initial consultation is free and carries no obligation.
Our legal team has evaluated the following jurisdictions as viable alternatives to the Gibraltar cryptocurrency license.
Get more information about Gibraltar cryptocurrency licenses right away. Our legal team will provide you with a free initial consultation within 24 business hours.
Tell us what you need so we can connect you with the right specialist.
简体中文 简体中文 
English
