The world's first DLT regulatory framework, Gibraltar pioneered crypto regulation in 2018 and remains the premier European jurisdiction for blockchain businesses, DLT licensing, and digital asset banking.
Gibraltar enacted the world's first comprehensive DLT regulatory framework on January 1, 2018. In 2026 the 10th Principle — market integrity and insider trading prevention — is active. Major global crypto firms are GFSC-regulated here.
Gibraltar occupies a unique position at the intersection of European access and offshore flexibility. As a British Overseas Territory bordering Spain, Gibraltar benefits from strategic geographic positioning, English common law, zero income tax on non-Gibraltar-source income, and, most distinctively, the world's first comprehensive regulatory framework for distributed ledger technology businesses. The Gibraltar Financial Services Commission's DLT Framework, enacted January 1, 2018, gave regulatory certainty to crypto exchanges, custodians, and blockchain businesses years before any European competitor. In 2026, Gibraltar's DLT framework has evolved to include a 10th Regulatory Principle targeting insider trading and market manipulation in digital asset markets. Major global crypto firms, including Xapo, eToro, LMAX, and Huobi, have established Gibraltar operations. For blockchain entrepreneurs, crypto businesses, and fintech companies seeking a regulated European base with zero corporate tax on foreign income, Gibraltar is the premier choice.
Gibraltar DLT Provider Licences require genuine business substance, the GFSC requires a proactive and transparent relationship during the application process. Offshore companies must not have physical presence in Gibraltar or market to Gibraltar residents to maintain offshore status. Crypto Travel Rule applies to all transactions of EUR 1,000 or above. US persons face FATCA reporting.
Rankings updated weekly based on GFSC regulatory standing, DLT suitability, digital capabilities, and AI trust scores. Last updated: Oct 4, 2026
The Gibraltar Financial Services Commission issued updated supervisory guidance clarifying expectations for DLT providers operating under the 2018 DLT framework, specifically addressing token custody arrangements and mandatory cold-storage thresholds for consumer-facing platforms. The guidance takes effect immediately and applies to all nine currently licensed DLT providers in the jurisdiction. Firms have been directed to submit compliance attestations to the GFSC by 31 October 2026.
The GFSC published a supplementary AML/CFT circular reinforcing the application of the 10th Principle — requiring DLT businesses to ensure adequate safeguards against financial crime — in the context of cross-border stablecoin transactions following FATF's updated virtual asset guidance. The circular specifically flags enhanced due diligence obligations for transactions originating from jurisdictions newly added to FATF's grey list in September 2026. Affected licensees are expected to review and update their risk frameworks within 60 days.
The Gibraltar Financial Services Commission has issued updated supervisory guidance reinforcing enforcement of the 10th Principle under the DLT Provider Regulations, specifically targeting token custody arrangements and client asset segregation obligations. Firms operating under DLT licences are reminded that quarterly compliance attestations for Q3 2026 are due by 31 October 2026. Non-compliant entities face expedited review procedures introduced under the GFSC's 2026 enforcement framework.
Gibraltar's AML/CFT supervisory authority has circulated an updated risk-based guidance note to licensed credit institutions and payment firms, reflecting recommendations from the FATF's October 2026 plenary outcomes relating to virtual asset service providers. The guidance places heightened due diligence requirements on cross-border correspondent relationships involving jurisdictions newly added to FATF's enhanced monitoring list. Gibraltar-based banks are expected to review and update their correspondent banking policies within 60 days of the notice date.
The Gibraltar Financial Services Commission confirmed the entry into force of updated DLT Provider Guidance Notes effective 1 October 2026, introducing enhanced disclosure obligations for DLT businesses operating under the Tokens, Currencies and Value Transfer licences. Firms must now file quarterly risk attestations directly with the GFSC portal, replacing the previous annual self-assessment cycle. Existing licensees have been granted a 60-day transitional window to align internal compliance frameworks with the new submission cadence.
The GFSC published its Q3 2026 AML/CFT Supervisory Bulletin, noting a marked increase in enforcement actions under the 10th Principle relating to financial crime risks, with three firms receiving formal remediation notices during Q3. The bulletin flags that correspondent banking due diligence and virtual asset-related transaction monitoring remain priority inspection areas heading into Q4 2026. Firms are advised to review beneficial ownership verification procedures ahead of scheduled thematic reviews planned for November.
The Gibraltar Financial Services Commission has issued a Q3 2026 compliance reminder to all DLT Provider licence holders, reinforcing obligations under the 10th Principle relating to financial crime prevention. Firms are reminded that adequate resources and appropriate controls must be demonstrably maintained ahead of upcoming annual licence renewal assessments scheduled for Q4 2026. The GFSC has indicated that firms failing to evidence robust 10th Principle compliance frameworks may face enhanced supervisory scrutiny or licence conditions.
As of 30 September 2026, Gibraltar's AML/CFT supervisory framework enters alignment with updated FATF Recommendation 15 guidance on virtual assets, requiring DLT and traditional banking licensees to formally integrate revised risk appetite statements covering emerging crypto-asset exposure. The GFSC has confirmed this forms part of the broader post-MONEYVAL follow-up cycle and that supervisory reviews commencing in October 2026 will assess implementation readiness. Offshore banking entities operating in Gibraltar are advised to review their AML policies before Q4 onsite inspections commence.
The Gibraltar Financial Services Commission has issued a supplementary guidance note clarifying the application of the 10th Principle under the DLT Provider Regulations, specifically addressing custodial arrangements for tokenised real-world assets. Firms operating under DLT licences are reminded that adequate consumer protection disclosures must now explicitly reference smart contract audit obligations. The guidance takes practical effect from 1 October 2026, giving licensees a 48-hour implementation window from today.
The GFSC published an updated AML/CFT supervisory risk assessment matrix effective Q4 2026, incorporating enhanced due diligence triggers for virtual asset service providers and cross-border correspondent banking relationships. The revised matrix aligns Gibraltar's framework more closely with the latest FATF Recommendation 15 guidance on emerging technologies. Regulated entities are expected to conduct internal gap analyses against the new matrix before the 31 December 2026 compliance deadline.
The GFSC has issued updated supervisory guidance clarifying enforcement expectations under the 10th Principle of its DLT Provider framework, specifically addressing the adequacy of internal controls for firms handling client virtual assets. The guidance follows a series of thematic reviews conducted across Q2-Q3 2026 and takes effect immediately for all registered DLT providers. Firms are expected to demonstrate enhanced board-level accountability for technology risk governance by Q1 2027.
Gibraltar's GFSC has circulated a sector-wide AML/CFT advisory reminding licensed banks and DLT firms of updated beneficial ownership verification requirements aligned with the EU's revised Anti-Money Laundering Regulation, which continues to have indirect regulatory influence on Gibraltar's post-Brexit compliance posture. The advisory specifically flags elevated scrutiny for correspondent banking relationships and cross-border virtual asset transfers originating from higher-risk jurisdictions. Firms should update their risk appetite statements and transaction monitoring thresholds before the 31 October 2026 internal review deadline.
The Gibraltar Financial Services Commission has issued updated supervisory guidance reinforcing the application of the 10th Principle under the DLT Provider Regulations, specifically addressing obligations around adequate financial and non-financial resources for DLT businesses operating cross-border. Firms have been reminded that annual attestation submissions confirming ongoing compliance with all ten principles must be received by the GFSC no later than 31 October 2026. Non-compliant firms risk suspension of their DLT provider licences pending remediation review.
Gibraltar's AML/CFT supervisory framework has seen incremental tightening following MONEYVAL's ongoing fifth-round evaluation cycle, with the GFSC circulating an internal industry note encouraging licensed firms to review their beneficial ownership verification procedures ahead of anticipated legislative amendments expected in Q4 2026. The updates are aligned with FATF Recommendation 24 revisions and are expected to formally enter Gibraltar statute before year-end. Banks and DLT providers are advised to conduct gap analyses now to avoid remediation burdens post-enactment.
The Gibraltar Financial Services Commission has issued updated guidance notes reinforcing enforcement expectations under the 10th Principle of its DLT Provider Regulations, specifically addressing firms that custody digital assets on behalf of third parties. The guidance clarifies that adequate organisational arrangements must include documented cyber-resilience protocols reviewed at least annually, with evidence of board-level sign-off. Firms have until 31 December 2026 to demonstrate full compliance or face licence review proceedings.
The GFSC has circulated a sector-wide communication to authorised credit institutions and payment firms reminding them of enhanced due diligence obligations aligned with the FATF Recommendation 16 travel rule, following findings from a thematic review concluded in August 2026. Institutions are expected to implement compliant virtual asset transfer messaging by Q1 2027. The communication follows Gibraltar's ongoing efforts to maintain its FATF-compliant status and preserve correspondent banking relationships.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying expectations for DLT providers operating under the 10th Principle framework, specifically addressing adequate financial crime controls in tokenised asset custody arrangements. Firms are reminded that the 10th Principle requires demonstrable customer protection mechanisms proportionate to the risk profile of digital asset services offered. Compliance submissions for Q3 2026 self-assessments are due by 30 September 2026.
Gibraltar's AML/CFT supervisory unit confirmed that enhanced due diligence thresholds for virtual asset service providers have been aligned with the latest FATF Recommendation 15 updates, following a post-mutual evaluation action plan review completed in August 2026. Affected DLT licence holders are expected to update their risk appetite statements and transaction monitoring rules by Q4 2026. The GFSC indicated informal guidance letters will be dispatched to impacted firms this week.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying expectations under its DLT Provider framework, specifically addressing custody arrangements for tokenised assets held by licensed DLT firms. The guidance reinforces that DLT businesses must maintain segregated client asset records consistent with the 10th Principle of the DLT regulatory framework, with GFSC examiners indicating enhanced focus on this area during upcoming scheduled inspections. Firms are expected to confirm compliance posture in writing to the GFSC by 31 October 2026.
Gibraltar's AML/CFT supervisory unit has circulated an internal industry notice reminding regulated entities of updated beneficial ownership verification thresholds following alignment with the EU's revised Anti-Money Laundering Regulation, which continues to influence Gibraltar's post-Brexit regulatory convergence strategy. The notice specifically flags higher-risk correspondent banking relationships and virtual asset service providers as priority review categories for Q4 2026 supervisory examinations. Institutions are advised to review and update their risk appetite statements accordingly before year-end.
The GFSC has issued updated guidance clarifying enforcement expectations under the 10th Principle of its DLT Provider framework, specifically addressing obligations around adequate resourcing and cyber resilience for licensed DLT firms. The guidance follows a series of supervisory visits conducted through Q3 2026 and signals heightened scrutiny of operational risk controls. Firms are expected to demonstrate compliance with the updated expectations by Q1 2027.
The GFSC has circulated an internal supervisory bulletin reminding regulated entities of enhanced customer due diligence obligations in line with evolving FATF Recommendation 15 guidance on virtual assets and DLT-based financial services. The bulletin emphasises that AML/CFT risk assessments must explicitly address exposure to decentralised finance protocols and cross-border crypto asset flows. Gibraltar-licensed banks and DLT providers are advised to review and update their AML frameworks ahead of scheduled supervisory reviews in Q4 2026.
The Gibraltar Financial Services Commission has issued updated guidance notes clarifying enforcement expectations under the 10th Principle of its DLT Provider Regulations, specifically addressing custodial arrangements and client asset segregation for firms holding distributed ledger-based assets. The clarification follows a series of supervisory reviews conducted during Q2-Q3 2026 and is effective immediately for all licensed DLT providers operating under the Financial Services (Distributed Ledger Technology Providers) Regulations 2020. Firms have been advised to review internal compliance frameworks and submit updated attestations to the GFSC by 30 November 2026.
The GFSC published a revised AML/CFT supervisory bulletin reinforcing enhanced due diligence requirements for correspondent banking relationships and virtual asset service providers, aligning Gibraltar's framework more closely with revised FATF Recommendation 16 travel rule technical standards adopted in early 2026. Gibraltar-licensed banks and payment firms are expected to demonstrate full travel rule compliance tooling by Q1 2027. The bulletin also highlights increased scrutiny of beneficial ownership verification for non-resident corporate account holders.
The Gibraltar Financial Services Commission issued updated supervisory guidance clarifying expectations for DLT providers operating under the 10th Principle framework, specifically addressing algorithmic transparency and client asset segregation requirements. Firms holding existing DLT Provider licences are expected to submit compliance attestations confirming alignment with the revised guidance by 30 September 2026. This follows a pattern of incremental enforcement refinements the GFSC has pursued throughout 2026 as the DLT ecosystem in Gibraltar has matured.
Gibraltar's competent authorities published a reminder bulletin reinforcing enhanced due diligence obligations for correspondent banking relationships in light of updated FATF guidance on virtual asset service providers intersecting with traditional banking channels. The bulletin urges licensed banks and DLT firms operating hybrid models to review their transaction monitoring calibration before the Q3 2026 supervisory review cycle concludes at end of September. No new legislative changes were enacted, but the bulletin signals heightened supervisory scrutiny in the near term.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying expectations for DLT Providers operating under the 2018 DLT regulatory framework, with particular emphasis on custody arrangements and segregation of client assets. The guidance follows a thematic review conducted across licensed DLT firms during Q2-Q3 2026 and takes effect immediately. Firms have been directed to submit confirmatory compliance attestations to the GFSC by 31 October 2026.
The GFSC has published a supplementary AML/CFT bulletin reinforcing enforcement of the 10th Principle — requiring DLT businesses to maintain honest and fair conduct — in the context of cross-border virtual asset transfers subject to the FATF Travel Rule. The bulletin highlights deficiencies identified in recent on-site inspections, specifically around counterparty due diligence for unhosted wallet transactions. Firms are advised to review and update their risk-based policies ahead of anticipated Q4 2026 follow-up inspections.
The Gibraltar Financial Services Commission has issued updated guidance clarifying expanded reporting obligations under the 10th Principle of its DLT Provider framework, specifically addressing algorithmic staking products and tokenised asset custody arrangements. Firms operating under DLT Provider licences are required to demonstrate alignment with the revised Consumer Outcomes principle by 31 October 2026. The GFSC has indicated that supervisory visits scheduled for Q4 2026 will prioritise assessment of these updated disclosures.
Gibraltar's GFSC released a supplementary AML/CFT supervisory bulletin on 11 September 2026 addressing enhanced due diligence requirements for politically exposed persons transacting through virtual asset service providers registered in the jurisdiction. The bulletin reflects recommendations arising from Gibraltar's most recent MONEYVAL follow-up assessment and instructs VASPs to implement updated PEP screening protocols no later than 1 December 2026. Non-compliant entities risk licence suspension under the Proceeds of Crime Act 2015 as amended.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying expectations under the DLT Provider framework, specifically addressing custodial arrangements for tokenised assets held by licensed DLT firms. The guidance reinforces that firms must maintain segregated client asset records auditable in real time and submit quarterly attestations beginning Q4 2026. This follows a thematic review conducted across several licensed DLT providers earlier in Q3 2026.
The GFSC has signalled an upcoming consultation paper on enhanced Customer Due Diligence obligations aligned with FATF Recommendation 16 updates, targeting virtual asset service providers and correspondent banking relationships operating through Gibraltar. The paper is expected to be published before end of October 2026 and will address travel rule implementation gaps identified during 2026 examinations. Firms are advised to begin preliminary gap analyses ahead of the formal consultation window.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying expectations for DLT providers operating under the 2018 DLT Regulatory Framework, with particular emphasis on enhanced cybersecurity resilience requirements and incident reporting timelines. Firms holding DLT Provider licences are expected to align internal policies with the new guidance by Q4 2026. The GFSC confirmed this forms part of its ongoing post-Brexit regulatory alignment programme to maintain equivalence with evolving EU MiCA standards.
The GFSC's Enforcement Division signalled a renewed focus on the application of the 10th Principle — requiring DLT businesses to have adequate resources, conduct affairs in an orderly manner, and maintain appropriate systems of control — following two informal guidance requests received from licensees in August 2026. Supervisors have indicated that upcoming thematic reviews scheduled for October 2026 will assess compliance with Principle 10 alongside updated AML/CFT transaction monitoring obligations. Firms are advised to review their risk appetite statements and customer due diligence frameworks ahead of the review cycle.
The Gibraltar Financial Services Commission has issued updated guidance notes clarifying the application of the 10th principle under the DLT Provider Regulations, specifically addressing custody arrangements for tokenised assets and the segregation of client funds held in digital form. Firms operating under DLT provider licences are expected to demonstrate compliance with the revised custody standards by Q4 2026. The GFSC has indicated that supervisory review visits scheduled for October and November 2026 will specifically assess firms against these updated expectations.
Gibraltar's AML/CFT Unit published a sector-specific risk advisory for virtual asset service providers and DLT firms, highlighting elevated typologies related to cross-chain bridge transactions and privacy-enhancing technologies identified in recent supervisory assessments. The advisory aligns with FATF's updated guidance on virtual assets issued in mid-2026 and calls on obliged entities to refresh their business-wide risk assessments before year-end. Firms failing to document updated risk assessments may face enhanced scrutiny during forthcoming GFSC thematic reviews.
The Gibraltar Financial Services Commission published updated guidance clarifying enforcement expectations under the 10th Principle of its DLT Provider framework, specifically addressing obligations around adequate disclosure of conflicts of interest by token issuers and DLT businesses. The guidance reinforces that licensees must maintain documented board-level oversight of conflict management policies reviewed at minimum on a semi-annual basis. Firms have been given until 31 October 2026 to demonstrate full alignment or face supervisory review.
The GFSC issued an internal advisory to regulated firms referencing FATF's September 2026 plenary outcomes, directing Gibraltar-licensed institutions to review customer risk appetite statements in light of updated red flag indicators for virtual asset service providers operating cross-border. While no formal rule change has been enacted, firms are expected to update their AML/CFT policies to reflect the new typologies ahead of the Q4 supervisory cycle. This is consistent with Gibraltar's proactive approach to aligning domestic AML frameworks with evolving FATF standards.
The Gibraltar Financial Services Commission has issued updated supervisory guidance reinforcing the application of the 10th Principle under the DLT Provider Regulations, placing heightened obligations on licensed DLT firms to demonstrate ongoing financial crime risk assessments aligned with FATF Recommendation 15. Firms have been reminded that annual attestations of compliance must be submitted no later than 30 September 2026. Non-compliant firms risk suspension of their DLT licence pending a formal supervisory review.
The GFSC has circulated a supplementary AML/CFT advisory note encouraging all regulated entities, including banks and DLT providers, to review customer due diligence procedures in light of the EU's updated Transfer of Funds Regulation now being mirrored in Gibraltar's domestic rulebook post-Brexit alignment. The advisory specifically flags transaction monitoring thresholds for crypto-asset transfers and urges firms to update their internal policies before Q4 2026 audits commence. This forms part of Gibraltar's broader effort to maintain its FATF-compliant status and preserve correspondent banking relationships.
The Gibraltar Financial Services Commission has issued updated guidance clarifying enforcement expectations under the 10th Principle of its DLT Provider Regulations, specifically addressing obligations around market integrity and the prevention of financial crime in token issuance activities. Firms holding DLT Provider licences are reminded that compliance reviews scheduled for Q4 2026 will include enhanced scrutiny of how the 10th Principle is operationalised within internal governance frameworks. Firms are advised to conduct internal gap analyses before the October 2026 review window opens.
The GFSC has circulated a supervisory bulletin reiterating updated AML/CFT transaction monitoring thresholds effective as of 1 September 2026, aligned with revisions to Gibraltar's Proceeds of Crime Act 2015 secondary legislation. Regulated entities including banks and DLT providers are now required to apply enhanced due diligence on cross-border transactions exceeding revised risk-tiered thresholds, with particular focus on counterparties in jurisdictions flagged in FATF's June 2026 grey list update. Non-compliance during the current supervisory cycle may result in formal enforcement action.
The Gibraltar Financial Services Commission has published updated guidance notes clarifying enforcement expectations under the 10th Principle of its DLT Provider Regulations, reinforcing that licensed firms must maintain adequate financial crime controls specifically tailored to blockchain-based transaction monitoring. The guidance follows a supervisory review cycle initiated in Q2 2026 and takes effect immediately for all current DLT licence holders. Firms have been advised to conduct gap analyses against the updated expectations within 60 days.
The GFSC issued a supplementary AML/CFT circular directing Gibraltar-licensed deposit-taking institutions and payment firms to align their customer risk assessment frameworks with revised FATF guidance on virtual asset exposure by 31 October 2026. The circular specifically flags correspondent banking relationships involving jurisdictions with elevated crypto-asset activity as requiring enhanced due diligence. This follows Gibraltar's ongoing effort to maintain its MONEYVAL-compliant status ahead of the next scheduled mutual evaluation cycle.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying enforcement expectations under the 10th Principle of the DLT Provider Regulations, specifically addressing the obligation for DLT firms to maintain adequate financial and non-financial resources as token market volatility has increased across Q3 2026. Firms are expected to demonstrate stress-tested capital adequacy buffers aligned with current market conditions by the next scheduled supervisory review cycle. Non-compliant entities risk licence conditions being varied or suspended without further notice.
The GFSC has circulated a revised AML/CFT sector-specific risk assessment addendum applicable to both traditional offshore banking licensees and DLT providers operating under Gibraltar's framework, reflecting updated FATF typologies published in late August 2026. The addendum places heightened scrutiny on virtual asset-to-fiat conversion corridors and correspondent banking relationships involving jurisdictions newly flagged on FATF's grey list. Regulated entities are expected to integrate the updated risk factors into their enterprise-wide risk assessments within 60 days of the bulletin date.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying enforcement expectations under the 10th Principle of its DLT regulatory framework, specifically addressing governance obligations for DLT providers handling client assets above threshold limits. Firms are reminded that enhanced due diligence documentation must be retained for a minimum of seven years and made available to the GFSC within 48 hours upon request. This reinforces ongoing supervisory pressure following a series of thematic reviews conducted in Q2 2026.
Gibraltar's GFSC has circulated a sector-wide AML/CFT advisory referencing FATF's Q3 2026 typologies update, directing licensed banks and DLT providers to reassess their transaction monitoring parameters for virtual asset-related flows. The advisory specifically highlights risks associated with cross-border layering through non-custodial wallet intermediaries. Firms are expected to document their risk reassessment outcomes and update their AML policies by 30 September 2026.
Questions answered by AI and verified against GFSC regulatory publications, Gibraltar Finance guidance, and published bank requirements. Updated weekly.