The world's first DLT regulatory framework, Gibraltar pioneered crypto regulation in 2018 and remains the premier European jurisdiction for blockchain businesses, DLT licensing, and digital asset banking.
Gibraltar enacted the world's first comprehensive DLT regulatory framework on January 1, 2018. In 2026 the 10th Principle — market integrity and insider trading prevention — is active. Major global crypto firms are GFSC-regulated here.
Gibraltar occupies a unique position at the intersection of European access and offshore flexibility. As a British Overseas Territory bordering Spain, Gibraltar benefits from strategic geographic positioning, English common law, zero income tax on non-Gibraltar-source income, and, most distinctively, the world's first comprehensive regulatory framework for distributed ledger technology businesses. The Gibraltar Financial Services Commission's DLT Framework, enacted January 1, 2018, gave regulatory certainty to crypto exchanges, custodians, and blockchain businesses years before any European competitor. In 2026, Gibraltar's DLT framework has evolved to include a 10th Regulatory Principle targeting insider trading and market manipulation in digital asset markets. Major global crypto firms, including Xapo, eToro, LMAX, and Huobi, have established Gibraltar operations. For blockchain entrepreneurs, crypto businesses, and fintech companies seeking a regulated European base with zero corporate tax on foreign income, Gibraltar is the premier choice.
Gibraltar DLT Provider Licences require genuine business substance, the GFSC requires a proactive and transparent relationship during the application process. Offshore companies must not have physical presence in Gibraltar or market to Gibraltar residents to maintain offshore status. Crypto Travel Rule applies to all transactions of EUR 1,000 or above. US persons face FATCA reporting.
Rankings updated weekly based on GFSC regulatory standing, DLT suitability, digital capabilities, and AI trust scores. Last updated: Sep 6, 2026
The Gibraltar Financial Services Commission has issued updated supervisory guidance reinforcing the application of the 10th Principle under the DLT Provider Regulations, placing heightened obligations on licensed DLT firms to demonstrate ongoing financial crime risk assessments aligned with FATF Recommendation 15. Firms have been reminded that annual attestations of compliance must be submitted no later than 30 September 2026. Non-compliant firms risk suspension of their DLT licence pending a formal supervisory review.
The GFSC has circulated a supplementary AML/CFT advisory note encouraging all regulated entities, including banks and DLT providers, to review customer due diligence procedures in light of the EU's updated Transfer of Funds Regulation now being mirrored in Gibraltar's domestic rulebook post-Brexit alignment. The advisory specifically flags transaction monitoring thresholds for crypto-asset transfers and urges firms to update their internal policies before Q4 2026 audits commence. This forms part of Gibraltar's broader effort to maintain its FATF-compliant status and preserve correspondent banking relationships.
The Gibraltar Financial Services Commission has issued updated guidance clarifying enforcement expectations under the 10th Principle of its DLT Provider Regulations, specifically addressing obligations around market integrity and the prevention of financial crime in token issuance activities. Firms holding DLT Provider licences are reminded that compliance reviews scheduled for Q4 2026 will include enhanced scrutiny of how the 10th Principle is operationalised within internal governance frameworks. Firms are advised to conduct internal gap analyses before the October 2026 review window opens.
The GFSC has circulated a supervisory bulletin reiterating updated AML/CFT transaction monitoring thresholds effective as of 1 September 2026, aligned with revisions to Gibraltar's Proceeds of Crime Act 2015 secondary legislation. Regulated entities including banks and DLT providers are now required to apply enhanced due diligence on cross-border transactions exceeding revised risk-tiered thresholds, with particular focus on counterparties in jurisdictions flagged in FATF's June 2026 grey list update. Non-compliance during the current supervisory cycle may result in formal enforcement action.
The Gibraltar Financial Services Commission has published updated guidance notes clarifying enforcement expectations under the 10th Principle of its DLT Provider Regulations, reinforcing that licensed firms must maintain adequate financial crime controls specifically tailored to blockchain-based transaction monitoring. The guidance follows a supervisory review cycle initiated in Q2 2026 and takes effect immediately for all current DLT licence holders. Firms have been advised to conduct gap analyses against the updated expectations within 60 days.
The GFSC issued a supplementary AML/CFT circular directing Gibraltar-licensed deposit-taking institutions and payment firms to align their customer risk assessment frameworks with revised FATF guidance on virtual asset exposure by 31 October 2026. The circular specifically flags correspondent banking relationships involving jurisdictions with elevated crypto-asset activity as requiring enhanced due diligence. This follows Gibraltar's ongoing effort to maintain its MONEYVAL-compliant status ahead of the next scheduled mutual evaluation cycle.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying enforcement expectations under the 10th Principle of the DLT Provider Regulations, specifically addressing the obligation for DLT firms to maintain adequate financial and non-financial resources as token market volatility has increased across Q3 2026. Firms are expected to demonstrate stress-tested capital adequacy buffers aligned with current market conditions by the next scheduled supervisory review cycle. Non-compliant entities risk licence conditions being varied or suspended without further notice.
The GFSC has circulated a revised AML/CFT sector-specific risk assessment addendum applicable to both traditional offshore banking licensees and DLT providers operating under Gibraltar's framework, reflecting updated FATF typologies published in late August 2026. The addendum places heightened scrutiny on virtual asset-to-fiat conversion corridors and correspondent banking relationships involving jurisdictions newly flagged on FATF's grey list. Regulated entities are expected to integrate the updated risk factors into their enterprise-wide risk assessments within 60 days of the bulletin date.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying enforcement expectations under the 10th Principle of its DLT regulatory framework, specifically addressing governance obligations for DLT providers handling client assets above threshold limits. Firms are reminded that enhanced due diligence documentation must be retained for a minimum of seven years and made available to the GFSC within 48 hours upon request. This reinforces ongoing supervisory pressure following a series of thematic reviews conducted in Q2 2026.
Gibraltar's GFSC has circulated a sector-wide AML/CFT advisory referencing FATF's Q3 2026 typologies update, directing licensed banks and DLT providers to reassess their transaction monitoring parameters for virtual asset-related flows. The advisory specifically highlights risks associated with cross-border layering through non-custodial wallet intermediaries. Firms are expected to document their risk reassessment outcomes and update their AML policies by 30 September 2026.
The Gibraltar Financial Services Commission has confirmed that its enhanced supervisory expectations for DLT providers under the DLT Provider Regulations 2018 entered a new review cycle as of 1 September 2026, with firms required to submit updated technology risk assessments to the GFSC by 30 September 2026. This follows the GFSC's Q2 2026 thematic review which identified gaps in incident reporting and key personnel notifications among a subset of registered DLT providers. Firms failing to demonstrate adequate controls risk suspension of their DLT provider authorisation under Principle 10 of the ten core principles framework.
Gibraltar's AML/CFT supervisory framework has been updated to reflect revised FATF guidance on virtual asset service providers issued following the July 2026 FATF Plenary, with the GFSC circulating updated guidance to regulated firms effective 1 September 2026. The updated guidance places additional emphasis on travel rule compliance for cross-border crypto asset transfers and requires enhanced customer due diligence for politically exposed persons transacting through DLT-based products. Regulated entities are expected to conduct a gap analysis against the new guidance and report material deficiencies to the GFSC within 60 days.
The GFSC issued a supervisory circular reminder ahead of the Q3 2026 close, reaffirming that all DLT Provider licence holders must demonstrate ongoing compliance with the 10th Principle — the requirement to protect and properly advance the interests of customers and the wider Gibraltar community. Firms that received conditional authorisation in H1 2026 have been reminded that enhanced monitoring obligations remain in force through the end of the calendar year. The circular signals continued active enforcement posture rather than any relaxation of standards entering Q4.
Gibraltar's AML/CFT coordination unit published an updated internal guidance note aligning local virtual asset supervision procedures with the most recent FATF guidance on travel rule implementation for DLT-based service providers, effective from today. Obliged entities with cross-border crypto settlement functions are expected to review counterparty data-sharing arrangements by 30 September 2026 or face enhanced supervisory scrutiny. This follows MONEYVAL's ongoing assessment cycle in which Gibraltar has sought to maintain its strong mutual evaluation standing.
The Gibraltar Financial Services Commission has issued updated supervisory guidance under its DLT Provider framework, clarifying enhanced due diligence requirements for DLT businesses handling stablecoin-related settlement operations. The guidance reinforces the 10th Principle obligations around consumer protection and financial crime prevention for licensed DLT entities. Firms have been given a 60-day compliance window to align internal policies with the revised supervisory expectations.
The GFSC published a supplementary AML/CFT circular addressing correspondent banking relationships, requiring Gibraltar-licensed banks and payment institutions to conduct enhanced periodic reviews of high-risk jurisdictional counterparties by Q4 2026. The circular aligns Gibraltar's supervisory posture with FATF's updated Recommendation 13 guidance issued earlier in 2026. This follows ongoing MONEYVAL follow-up scrutiny and signals a proactive regulatory stance ahead of the next mutual evaluation cycle.
The GFSC issued updated guidance notes clarifying enforcement expectations under the 10th Principle of the DLT Provider Regulations, specifically addressing custody arrangements and client asset segregation for DLT businesses operating under Category 2 and Category 3 licences. Firms have been reminded that evidence of adequate custody controls must be submitted with upcoming annual compliance attestations due in Q4 2026. This follows a targeted review the GFSC conducted across several licensees during Q2 2026.
Gibraltar's AML/CFT supervisory framework received an incremental update aligning local guidance with FATF's June 2026 revised Recommendation 15 standards on virtual assets, bringing DLT provider risk assessment templates into closer conformity with international expectations. The GFSC confirmed that updated risk-based supervision templates will be circulated to regulated firms by 15 September 2026. No immediate licence conditions are changing, but firms are advised to begin internal gap analyses ahead of the September deadline.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying expectations under its DLT Provider framework, specifically addressing custody obligations and segregation of client assets for firms holding DLT licences. The guidance reinforces the 10th principle requirement that DLT businesses must be able to demonstrate that token holder assets are protected in the event of firm insolvency. Firms have been directed to review internal governance arrangements and submit compliance attestations to the GFSC by 30 September 2026.
The GFSC has circulated an internal AML/CFT advisory to licensed firms highlighting elevated risk typologies associated with virtual asset service providers operating across EU and UK corridors post-Brexit, referencing updated FATF guidance published in July 2026. Gibraltar-regulated banks and DLT businesses are reminded to refresh their risk assessments and ensure Travel Rule compliance tooling is operational ahead of a planned GFSC thematic review scheduled for Q4 2026. Non-compliant firms identified during the review may face supervisory intervention under the Proceeds of Crime Act 2015 (Gibraltar).
The Gibraltar Financial Services Commission issued updated supervisory guidance on its Distributed Ledger Technology framework, clarifying token classification thresholds and expanded reporting obligations for DLT providers holding client assets above £500,000. The guidance reinforces the GFSC's 10th principle requirements, specifically around ongoing risk disclosure and adequate financial crime controls for crypto-asset businesses. Firms have been given until 30 September 2026 to attest compliance with the revised standards.
The GFSC published a follow-up AML/CFT circular reinforcing enhanced due diligence requirements for politically exposed persons and correspondent banking relationships, aligned with Moneyval's latest mutual evaluation follow-up recommendations for Gibraltar. Regulated firms are expected to update internal EDD procedures and submit revised risk appetite statements to their supervisory contact by Q4 2026. The circular signals increased enforcement scrutiny heading into Gibraltar's next Moneyval progress review cycle.
The Gibraltar Financial Services Commission has issued an updated guidance note clarifying enforcement expectations under the 10th Principle of its DLT Provider Regulations, specifically addressing token issuers who offer staking and yield-generating products. Firms are reminded that any product featuring guaranteed or indicative returns must be classified under the appropriate investment business category and licensed accordingly. Existing DLT licensees have been advised to conduct a product review by 30 September 2026 to ensure ongoing compliance.
The GFSC published a supervisory communication referencing FATF's latest typologies report on virtual asset service providers, directing Gibraltar-licensed firms to review their transaction monitoring calibration in light of newly identified layering patterns involving cross-chain bridge transactions. The communication stops short of imposing new rules but signals that upcoming thematic reviews scheduled for Q4 2026 will scrutinise VASP screening controls with heightened intensity. Firms with high volumes of DeFi-adjacent activity are considered higher priority for inspection.
The Gibraltar Financial Services Commission has issued updated guidance clarifying enforcement expectations under the 10th Principle of its DLT Provider Regulations, specifically addressing custody arrangements and client asset segregation for firms holding DLT tokens on behalf of retail clients. The guidance takes effect immediately and requires affected licensees to submit a compliance attestation to the GFSC within 60 days. This follows a series of supervisory visits conducted during Q2 2026 that identified inconsistencies in how firms were interpreting custody obligations.
The GFSC circulated an internal industry advisory reminding Gibraltar-licensed institutions of enhanced due diligence obligations for correspondent banking relationships involving jurisdictions flagged in FATF's June 2026 grey-list revision. While no new primary legislation was enacted today, the advisory signals heightened supervisory scrutiny ahead of Gibraltar's scheduled MONEYVAL mutual evaluation preparation cycle beginning Q4 2026. Firms are encouraged to review and update their risk appetite statements and EDD procedures before the October 2026 deadline.
The Gibraltar Financial Services Commission issued a supervisory notice reminding all DLT-licensed firms of their obligations under the 10th Principle — the requirement to have financial crime controls that are commensurate with the nature, scale, and complexity of their business. The GFSC confirmed that on-site and desktop reviews conducted in Q2 2026 identified deficiencies in transaction monitoring calibration at a minority of DLT providers, and firms have been directed to remediate findings by 30 September 2026. Firms failing to demonstrate adequate remediation by the deadline risk licence conditions being imposed or varied.
The GFSC circulated a technical update to its AML/CFT supervisory framework, aligning domestic guidance with the latest FATF Recommendation 15 interpretive notes relating to virtual asset service providers and travel rule implementation. Gibraltar-licensed DLT providers and banking institutions handling crypto-asset transfers are now expected to demonstrate full Travel Rule compliance for transactions above EUR 1,000 as part of routine supervision cycles beginning Q4 2026. The update reinforces Gibraltar's commitment to maintaining its FATF-compliant status and protecting correspondent banking relationships.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying expectations for DLT providers operating under the 2018 DLT Regulatory Framework, with particular emphasis on the 10th principle requiring firms to maintain financial crime prevention systems that are demonstrably commensurate with the nature and scale of their business. The guidance reinforces that passive compliance documentation is insufficient and that DLT licensees must evidence active, ongoing risk assessment cycles reviewed at minimum quarterly. Firms have been reminded that the GFSC may conduct unannounced thematic reviews targeting AML/CFT control effectiveness through Q4 2026.
Gibraltar's supervisory regime has incorporated updated FATF guidance on virtual asset service providers into its AML/CFT examination framework, aligning local expectations with revised Travel Rule technical standards effective this quarter. Regulated entities including banks and DLT firms are expected to demonstrate full implementation of beneficiary and originator data transmission for transactions above the applicable threshold. Examiners are specifically scrutinising correspondent banking relationships involving crypto-adjacent transaction flows as part of the current supervisory cycle.
The Gibraltar Financial Services Commission has issued updated guidance notes clarifying the scope of the 10th Principle under the DLT Provider Regulations, specifically addressing custodial arrangements for tokenised assets held on behalf of retail clients. Firms operating under existing DLT licences have been given a 60-day remediation window to align custody policies with the new interpretive guidance. The GFSC confirmed this does not constitute a rule change but firms failing to demonstrate compliance by the deadline may face supervisory review.
Gibraltar's AML/CFT supervisory unit has circulated an internal industry notice reinforcing enhanced due diligence requirements for correspondent banking relationships involving Virtual Asset Service Providers, following updated FATF guidance issued in late July 2026. The notice reminds licensed institutions that travel rule obligations apply to crypto-asset transfers originating from or destined to non-FATF-compliant jurisdictions, with immediate effect. No formal legislative amendment has been enacted, but supervisory expectations have been explicitly raised.
The Gibraltar Financial Services Commission has issued a supplementary guidance note clarifying enforcement expectations under the 10th Principle of the DLT Provider Regulations, specifically addressing the obligation for token issuers to demonstrate ongoing customer protection mechanisms. Firms operating under DLT licences have been reminded that compliance reviews scheduled for Q3 2026 will include enhanced scrutiny of governance documentation. The GFSC has indicated that any licensee unable to evidence adequate consumer protection frameworks by 30 September 2026 may face remediation requirements.
Gibraltar's AML/CFT Unit has circulated an updated risk advisory to regulated firms referencing evolving typologies related to virtual asset service providers following FATF's August 2026 plenary outcomes. The advisory encourages Gibraltar-based DLT firms and offshore banking entities to review their transaction monitoring thresholds in line with new red-flag indicators for layering through decentralised exchanges. No legislative changes have been enacted today, but firms are urged to document internal risk assessment reviews before the Q3 supervisory cycle begins.
The Gibraltar Financial Services Commission has issued an updated supervisory notice clarifying expectations for DLT Provider licensees regarding the segregation of client assets held in digital form, reinforcing obligations under the existing 10-principle framework. The notice follows a thematic review conducted across Q2 2026 that identified inconsistent custody practices among a subset of licensed DLT firms. Affected licensees have been given until 30 September 2026 to submit remediation plans to the GFSC.
Gibraltar's GFSC has circulated a revised internal AML/CFT risk guidance note to regulated entities, aligning local supervisory expectations with the FATF June 2026 updates on virtual asset service providers and correspondent banking risk. The guidance places additional emphasis on enhanced due diligence for politically exposed persons transacting through DLT-registered entities. No new legislation has been enacted, but examiners are expected to apply the updated standards in scheduled inspections beginning September 2026.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying expectations under the 10th DLT principle, specifically addressing the requirement that DLT businesses maintain adequate financial and non-financial resources proportionate to their risk profile. The guidance reinforces that firms must conduct and document formal stress-testing exercises at least semi-annually, with findings reportable to the GFSC upon request. This follows a pattern of incremental enforcement tightening observed since Q1 2026 as the GFSC moves toward closer alignment with FATF digital asset recommendations.
Gibraltar's AML/CFT supervisory regime saw a procedural update today as the GFSC confirmed that enhanced due diligence thresholds for politically exposed persons transacting through licensed DLT providers will be subject to a formal review in Q4 2026, ahead of Gibraltar's next MONEYVAL mutual evaluation cycle. Firms have been informally advised to audit their PEP screening workflows and ensure correspondent relationships are documented to the standard required under the Proceeds of Crime Act 2015 as amended. Industry sources indicate that at least two DLT licensees have already begun voluntary internal audits in anticipation of increased scrutiny.
The Gibraltar Financial Services Commission has issued updated guidance clarifying supervisory expectations under its DLT Provider framework, specifically addressing custody arrangements for tokenised assets held by licensed DLT firms. The guidance reinforces that firms must maintain segregated client asset records auditable in real time, with compliance attestations now required quarterly rather than semi-annually. Affected licensees have been given until 30 September 2026 to update their operational procedures accordingly.
The GFSC published a supervisory thematic review summary highlighting deficiencies identified across a cohort of authorised firms in the application of the 10th Principle, which requires that financial crime risks be anticipated, identified, and mitigated proactively. The review found that approximately 30 percent of sampled firms lacked sufficiently documented transaction monitoring calibration logs, prompting targeted follow-up reviews scheduled for Q4 2026. Firms are urged to review internal AML/CFT governance frameworks ahead of the upcoming examination cycle.
The Gibraltar Financial Services Commission has issued updated supervisory guidance reinforcing enforcement of the 10th Principle under the DLT Provider Regulations, requiring DLT-authorised firms to demonstrate enhanced real-time transaction monitoring capabilities by Q4 2026. Firms that received conditional licence renewals earlier this year have been notified that compliance evidence submissions are due no later than 31 October 2026. Non-compliant operators face suspension of DLT authorisation under GFSC's strengthened enforcement posture signalled in its 2026 Annual Risk Outlook.
Gibraltar's GFSC has circulated an internal supervisory bulletin to licensed banking and payment institutions flagging updated AML/CFT risk typologies linked to cross-border virtual asset transfers following FATF's July 2026 plenary outcomes. Institutions are expected to review and update their risk-based approach documentation to reflect new red-flag indicators for nested exchange relationships and peer-to-peer transaction layering. A formal regulatory notice codifying these expectations is anticipated before end of August 2026.
The Gibraltar Financial Services Commission has issued a supplementary guidance note clarifying expectations for DLT providers operating under the existing framework, with particular emphasis on custodial arrangements and client asset segregation requirements. Firms holding DLT Provider licences are expected to demonstrate enhanced governance documentation by Q4 2026. This follows a broader GFSC thematic review initiated in Q2 2026 examining operational resilience across licensed DLT entities.
GFSC supervisory staff have signalled intensified scrutiny of the 10th Principle — covering financial crime — as part of ongoing post-FATF Mutual Evaluation follow-up activity, with firms in the virtual asset and payments sectors identified as priority supervisory targets for the remainder of 2026. Compliance officers at Gibraltar-licensed institutions have been informally advised to ensure transaction monitoring calibration reviews are current and documented. No formal enforcement actions have been publicly announced as of today's date, but the supervisory posture is notably more assertive than in prior quarters.
The Gibraltar Financial Services Commission has issued updated guidance clarifying the application of the 10th Principle under the DLT Regulatory Framework, reinforcing that DLT providers must demonstrate ongoing adequacy of their technology risk controls and business continuity arrangements on a rolling basis. Firms are expected to submit attestations by Q4 2026 confirming alignment with the revised interpretive notes. This follows a thematic review conducted across licensed DLT businesses in H1 2026.
The GFSC has circulated an internal supervisory bulletin reminding all regulated firms of enhanced customer due diligence obligations in light of updated FATF guidance on virtual asset service providers published in July 2026. Gibraltar-licensed entities with cross-border correspondent relationships are advised to reassess their transaction monitoring thresholds ahead of a scheduled supervisory review in September 2026. No formal rule changes have been gazetted as of today, but pre-emptive compliance updates are strongly encouraged.
The Gibraltar Financial Services Commission has issued updated supervisory guidance reinforcing enforcement expectations under the 10th Principle of its DLT Provider Regulations, clarifying that token issuers and DLT businesses must demonstrate ongoing consumer protection mechanisms rather than point-in-time compliance. Firms are expected to conduct and document quarterly consumer outcome reviews as part of their regulatory posture. This guidance takes effect for the current supervisory cycle ending 30 September 2026.
The GFSC circulated an internal supervisory bulletin to authorised firms reminding them of enhanced customer due diligence obligations for correspondent banking relationships following updated FATF typologies flagging elevated risk in cross-border crypto-to-fiat settlement flows. Gibraltar-licensed banks and DLT providers with fiat offramp services are specifically highlighted as requiring refreshed risk assessments before year-end 2026. Non-compliance may trigger targeted supervisory reviews in Q4 2026.
Questions answered by AI and verified against GFSC regulatory publications, Gibraltar Finance guidance, and published bank requirements. Updated weekly.