Europe (non-EU) · GFSC · DLT Provider · Principles-based

Gibraltar Crypto Licence

The pioneer's licence. Gibraltar wrote one of the world's first purpose-built crypto frameworks in 2018, and its GFSC DLT Provider licence remains a byword for quality — a principles-based, risk-proportionate regime respected by banks worldwide. It sits outside the EU and MiCA, so it doesn't passport into the single market, but as a credible, English-common-law base it's in a class of its own. Vantegris runs the GFSC file.

Last updated · July 2026 · 9-min read

2018
World-first DLT framework
10
Regulatory principles
6–12 mo
Typical timeline
GFSC
Regulator
Don't want to wait out the full application? Buy a ready-made, already-licensed Gibraltar company — or sell yours. We broker both.
Licence M&A →

overview

Why Gibraltar.

Gibraltar got there before almost everyone. Its Distributed Ledger Technology (DLT) Regulatory Framework, launched in January 2018, was one of the first pieces of legislation anywhere written specifically for blockchain businesses, and it set a template many jurisdictions later followed. Any firm using DLT to store or transmit value belonging to others must hold a GFSC DLT Provider licence, backed by VASP registration for AML purposes.

What makes Gibraltar distinctive is its approach. Rather than prescriptive rulebooks, the GFSC applies ten regulatory principles — the original nine plus a tenth, Market Integrity, added in 2021 — and regulates proportionately to your scale and risk. That flexibility, combined with a genuinely selective, quality-first regulator, is why a Gibraltar licence carries weight with banks and counterparties. You need a Gibraltar company, fit-and-proper management with real industry experience, AMLD5/6-standard policies and a risk-based capital reserve. The annual fee is a flat £10,000, with up to £20,000 more where regulating your business is more complex, and the process typically runs six to twelve months. The important caveat: Gibraltar is not in the EU (it left with the UK), so its framework is separate from MiCA and does not passport into the single market — to serve EU users you would pair it with an EU CASP. But as an English-common-law, credible, pioneering base, Gibraltar is a premium choice. We build the file to GFSC standard.

Pioneering frameworkOne of the world's first purpose-built DLT regimes (2018), widely respected.
Principles-basedTen regulatory principles applied proportionately to scale and risk.
Quality-first regulatorA selective GFSC whose licence carries real banking credibility.
Not EU/MiCAOutside the EU — it does not passport into the single market.

advantages

Why operators pick it.

01Reputation

A GFSC DLT licence is a mark of quality that opens doors with banks and partners.

02Proportionate regulation

A principles-based framework that scales to your risk rather than a rigid rulebook.

03Common-law base

An English-common-law jurisdiction familiar to global counterparties.

04Pioneer's depth

Years of DLT supervision and a mature ecosystem of advisers and service providers.

05Predictable fees

A transparent flat annual fee, with complexity loading disclosed up front.

head to head

Gibraltar vs. an EU CASP

CriteriaGibraltar (DLT)EU (CASP/MiCA)
RegulatorGFSC (DLT framework)National regulator under MiCA
StylePrinciples-based (10 principles)Prescriptive, harmonised
EU passportNo (outside the EU)Yes (EU-27)
CapitalRisk-based reserve€50k–€150k by class
ReputationPioneering, premiumStandardised across the bloc
Best suited toQuality-first, global operatorsEU-market operators

who it's for

Built for these operators.

Quality-first operatorsBusinesses that value a premium, reputation-heavy licence over raw market reach.
Exchanges & custodiansPlatforms and custodians that use DLT to hold or transmit client value.
Common-law-minded teamsOperators who prefer an English-common-law regulatory environment.
Global (non-EU-only) firmsBusinesses whose markets don't require EU passporting.

requirements

Eligibility & docs.

A Gibraltar company holding the DLT Provider licence.
A risk-based capital reserve proportionate to scale and risk.
Genuine local substance and operational infrastructure.
A clear ownership and control structure.
Fit-and-proper directors and senior managers with real industry experience.
A dedicated compliance and MLRO function.
Suitability and source-of-funds checks on controllers.
Governance able to evidence the ten regulatory principles.
A detailed business plan and programme of operations.
AML/CFT policies to AMLD5/6 standards.
Risk-management, custody, security and market-integrity frameworks.
Financial projections and evidence of the capital reserve.
Evidence of how each regulatory principle is met.
Check my eligibility →

step by step

From zero to licence.

  1. Readiness & principlesAssess the model against the ten principles and set the substance and capital plan.2–4 weeks
  2. Company & substanceEstablish the Gibraltar company, local substance and management.3–5 weeks
  3. Build the filePrepare the business plan, AML/CFT and principle-by-principle evidence to GFSC standard.6–10 weeks
  4. GFSC applicationFile with the GFSC and manage a thorough, quality-focused review to licence.6–12 months
  5. LaunchOn approval, operate under the DLT framework and ongoing supervision.On approval

Not sure Gibraltar is the right fit?

Tell us your product and target markets — we'll confirm whether Gibraltar or another jurisdiction gets you live fastest, at the lowest all-in cost.

Get my quote →

pricing

Transparent packages.

Licence Application & GFSC liaison
  • Gibraltar company & structure
  • DLT Provider application to the GFSC
  • Business plan & principle evidence
  • Regulator liaison to licence
Choose Licence
Full Banking & scale
  • Everything in Turnkey
  • Crypto-friendly banking introductions
  • Market-integrity & risk frameworks
  • Ongoing compliance & reporting support
Choose Full
Regulatory fees & add-ons
GFSC annual fee (flat)£10,000
Complexity loading (if applicable)up to £20,000
Risk-based capital reserveproportionate to scale/risk
Vantegris application, substance & buildon quote

Budget the flat £10,000 GFSC annual fee (plus up to £20,000 where regulation is more complex), a risk-based capital reserve proportionate to your model, local substance and a full compliance build. Gibraltar is a premium, reputation-first jurisdiction, and it does not passport into the EU. We model the full picture before you start.

obligations

Compliance duties.

Ten principlesDemonstrable adherence to the GFSC's ten regulatory principles, including market integrity.
AML/CFTCustomer due diligence, monitoring and reporting to AMLD5/6 standards.
Compliance & MLROA dedicated compliance officer and MLRO with clear governance.
Client-asset protectionSafeguarding and segregation of client value held on DLT.
ReportingOngoing GFSC reporting and notification of material changes.

technical standards

Technology & IT.

Systems & resilienceRobust, tested systems and business-continuity arrangements.
Custody securitySecure custody, key management and cold-storage controls.
CybersecurityEncryption, access control, monitoring and independent testing.
Market integrityControls preventing market abuse and ensuring fair, orderly operation.
Data protectionCompliant handling of personal and transaction data.

after launch

We stay on after you're live.

Compliance monitoringKeeping the ten-principle and AML/CFT programmes current.
Regulatory reportingManaging ongoing GFSC reporting and supervision.
Banking & institutionsMaintaining banking and counterparty relationships.
Change controlHandling change-of-control and material-change filings.

market access

Reach & restrictions.

A Gibraltar DLT Provider licence supports global business and carries strong reputational weight, but Gibraltar is outside the EU and the licence does not passport into the single market — to serve EU users, pair it with an EU CASP. You still geo-block the United States, sanctioned and FATF-listed territories and any market requiring separate authorisation.

Restricted / prohibited countries
United StatesSanctioned territoriesFATF-listed nationsEU markets requiring a CASPMarkets requiring separate local authorisation

Operators must use GEO-IP blocking for restricted countries and any FATF-blacklisted nation. Non-compliance can lead to licence suspension or revocation.

FAQ

What is a Gibraltar crypto licence?

It is a DLT Provider licence from the Gibraltar Financial Services Commission (GFSC), under a framework launched in January 2018 — one of the world's first purpose-built crypto regimes. Any firm using distributed ledger technology to store or transmit value for others must hold it, backed by VASP registration for AML.

How does Gibraltar regulate crypto?

Through ten regulatory principles applied proportionately to your scale and risk, rather than a prescriptive rulebook — the original nine principles plus a tenth, Market Integrity, added in 2021. It's a quality-first, principles-based approach.

What does it cost and how long does it take?

The GFSC annual fee is a flat £10,000, with up to £20,000 more where regulating your business is more complex, plus a risk-based capital reserve and setup costs. The process typically runs six to twelve months.

Does a Gibraltar licence work in the EU?

No. Gibraltar is outside the EU (it left with the UK), so its DLT framework is separate from MiCA and does not passport into the single market. To serve EU users you would pair it with an EU CASP licence.

Why choose Gibraltar over an EU CASP?

For reputation and a proportionate, principles-based regime in an English-common-law jurisdiction. If EU market access is essential, an EU CASP is the answer; if a premium, globally-respected licence matters more than passporting, Gibraltar is in a class of its own. Many groups hold both.

Reviewed by the Vantegris licensing team · Last updated July 2026. This page is general information, not legal advice. Licensing requirements vary by jurisdiction and change over time.

Proven track record
300+ operators licensed across 40+ jurisdictions.

From crypto casinos to B2B platform providers, operators trust Vantegris to move fast without cutting compliance corners.

See how we ran this for a client →
Itemised feesRegulator schedule shown separately from our service fee.
We stay after issuanceRenewals, reporting and banking, handled long-term.
NDA on requestConfidential from the first message.

Free consultation

Start your Gibraltar file.

Applied, approved and live across every vertical. Free, confidential, no obligation — most enquiries get a reply within 24 hours.

from DLT Provider licence (+ VASP registration) Book a call