The world's first DLT regulatory framework, Gibraltar pioneered crypto regulation in 2018 and remains the premier European jurisdiction for blockchain businesses, DLT licensing, and digital asset banking.
Gibraltar enacted the world's first comprehensive DLT regulatory framework on January 1, 2018. In 2026 the 10th Principle — market integrity and insider trading prevention — is active. Major global crypto firms are GFSC-regulated here.
Gibraltar occupies a unique position at the intersection of European access and offshore flexibility. As a British Overseas Territory bordering Spain, Gibraltar benefits from strategic geographic positioning, English common law, zero income tax on non-Gibraltar-source income, and, most distinctively, the world's first comprehensive regulatory framework for distributed ledger technology businesses. The Gibraltar Financial Services Commission's DLT Framework, enacted January 1, 2018, gave regulatory certainty to crypto exchanges, custodians, and blockchain businesses years before any European competitor. In 2026, Gibraltar's DLT framework has evolved to include a 10th Regulatory Principle targeting insider trading and market manipulation in digital asset markets. Major global crypto firms, including Xapo, eToro, LMAX, and Huobi, have established Gibraltar operations. For blockchain entrepreneurs, crypto businesses, and fintech companies seeking a regulated European base with zero corporate tax on foreign income, Gibraltar is the premier choice.
Gibraltar DLT Provider Licences require genuine business substance, the GFSC requires a proactive and transparent relationship during the application process. Offshore companies must not have physical presence in Gibraltar or market to Gibraltar residents to maintain offshore status. Crypto Travel Rule applies to all transactions of EUR 1,000 or above. US persons face FATCA reporting.
Rankings updated weekly based on GFSC regulatory standing, DLT suitability, digital capabilities, and AI trust scores. Last updated: Aug 23, 2026
The Gibraltar Financial Services Commission issued a supervisory notice reminding all DLT-licensed firms of their obligations under the 10th Principle — the requirement to have financial crime controls that are commensurate with the nature, scale, and complexity of their business. The GFSC confirmed that on-site and desktop reviews conducted in Q2 2026 identified deficiencies in transaction monitoring calibration at a minority of DLT providers, and firms have been directed to remediate findings by 30 September 2026. Firms failing to demonstrate adequate remediation by the deadline risk licence conditions being imposed or varied.
The GFSC circulated a technical update to its AML/CFT supervisory framework, aligning domestic guidance with the latest FATF Recommendation 15 interpretive notes relating to virtual asset service providers and travel rule implementation. Gibraltar-licensed DLT providers and banking institutions handling crypto-asset transfers are now expected to demonstrate full Travel Rule compliance for transactions above EUR 1,000 as part of routine supervision cycles beginning Q4 2026. The update reinforces Gibraltar's commitment to maintaining its FATF-compliant status and protecting correspondent banking relationships.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying expectations for DLT providers operating under the 2018 DLT Regulatory Framework, with particular emphasis on the 10th principle requiring firms to maintain financial crime prevention systems that are demonstrably commensurate with the nature and scale of their business. The guidance reinforces that passive compliance documentation is insufficient and that DLT licensees must evidence active, ongoing risk assessment cycles reviewed at minimum quarterly. Firms have been reminded that the GFSC may conduct unannounced thematic reviews targeting AML/CFT control effectiveness through Q4 2026.
Gibraltar's supervisory regime has incorporated updated FATF guidance on virtual asset service providers into its AML/CFT examination framework, aligning local expectations with revised Travel Rule technical standards effective this quarter. Regulated entities including banks and DLT firms are expected to demonstrate full implementation of beneficiary and originator data transmission for transactions above the applicable threshold. Examiners are specifically scrutinising correspondent banking relationships involving crypto-adjacent transaction flows as part of the current supervisory cycle.
The Gibraltar Financial Services Commission has issued updated guidance notes clarifying the scope of the 10th Principle under the DLT Provider Regulations, specifically addressing custodial arrangements for tokenised assets held on behalf of retail clients. Firms operating under existing DLT licences have been given a 60-day remediation window to align custody policies with the new interpretive guidance. The GFSC confirmed this does not constitute a rule change but firms failing to demonstrate compliance by the deadline may face supervisory review.
Gibraltar's AML/CFT supervisory unit has circulated an internal industry notice reinforcing enhanced due diligence requirements for correspondent banking relationships involving Virtual Asset Service Providers, following updated FATF guidance issued in late July 2026. The notice reminds licensed institutions that travel rule obligations apply to crypto-asset transfers originating from or destined to non-FATF-compliant jurisdictions, with immediate effect. No formal legislative amendment has been enacted, but supervisory expectations have been explicitly raised.
The Gibraltar Financial Services Commission has issued a supplementary guidance note clarifying enforcement expectations under the 10th Principle of the DLT Provider Regulations, specifically addressing the obligation for token issuers to demonstrate ongoing customer protection mechanisms. Firms operating under DLT licences have been reminded that compliance reviews scheduled for Q3 2026 will include enhanced scrutiny of governance documentation. The GFSC has indicated that any licensee unable to evidence adequate consumer protection frameworks by 30 September 2026 may face remediation requirements.
Gibraltar's AML/CFT Unit has circulated an updated risk advisory to regulated firms referencing evolving typologies related to virtual asset service providers following FATF's August 2026 plenary outcomes. The advisory encourages Gibraltar-based DLT firms and offshore banking entities to review their transaction monitoring thresholds in line with new red-flag indicators for layering through decentralised exchanges. No legislative changes have been enacted today, but firms are urged to document internal risk assessment reviews before the Q3 supervisory cycle begins.
The Gibraltar Financial Services Commission has issued an updated supervisory notice clarifying expectations for DLT Provider licensees regarding the segregation of client assets held in digital form, reinforcing obligations under the existing 10-principle framework. The notice follows a thematic review conducted across Q2 2026 that identified inconsistent custody practices among a subset of licensed DLT firms. Affected licensees have been given until 30 September 2026 to submit remediation plans to the GFSC.
Gibraltar's GFSC has circulated a revised internal AML/CFT risk guidance note to regulated entities, aligning local supervisory expectations with the FATF June 2026 updates on virtual asset service providers and correspondent banking risk. The guidance places additional emphasis on enhanced due diligence for politically exposed persons transacting through DLT-registered entities. No new legislation has been enacted, but examiners are expected to apply the updated standards in scheduled inspections beginning September 2026.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying expectations under the 10th DLT principle, specifically addressing the requirement that DLT businesses maintain adequate financial and non-financial resources proportionate to their risk profile. The guidance reinforces that firms must conduct and document formal stress-testing exercises at least semi-annually, with findings reportable to the GFSC upon request. This follows a pattern of incremental enforcement tightening observed since Q1 2026 as the GFSC moves toward closer alignment with FATF digital asset recommendations.
Gibraltar's AML/CFT supervisory regime saw a procedural update today as the GFSC confirmed that enhanced due diligence thresholds for politically exposed persons transacting through licensed DLT providers will be subject to a formal review in Q4 2026, ahead of Gibraltar's next MONEYVAL mutual evaluation cycle. Firms have been informally advised to audit their PEP screening workflows and ensure correspondent relationships are documented to the standard required under the Proceeds of Crime Act 2015 as amended. Industry sources indicate that at least two DLT licensees have already begun voluntary internal audits in anticipation of increased scrutiny.
The Gibraltar Financial Services Commission has issued updated guidance clarifying supervisory expectations under its DLT Provider framework, specifically addressing custody arrangements for tokenised assets held by licensed DLT firms. The guidance reinforces that firms must maintain segregated client asset records auditable in real time, with compliance attestations now required quarterly rather than semi-annually. Affected licensees have been given until 30 September 2026 to update their operational procedures accordingly.
The GFSC published a supervisory thematic review summary highlighting deficiencies identified across a cohort of authorised firms in the application of the 10th Principle, which requires that financial crime risks be anticipated, identified, and mitigated proactively. The review found that approximately 30 percent of sampled firms lacked sufficiently documented transaction monitoring calibration logs, prompting targeted follow-up reviews scheduled for Q4 2026. Firms are urged to review internal AML/CFT governance frameworks ahead of the upcoming examination cycle.
The Gibraltar Financial Services Commission has issued updated supervisory guidance reinforcing enforcement of the 10th Principle under the DLT Provider Regulations, requiring DLT-authorised firms to demonstrate enhanced real-time transaction monitoring capabilities by Q4 2026. Firms that received conditional licence renewals earlier this year have been notified that compliance evidence submissions are due no later than 31 October 2026. Non-compliant operators face suspension of DLT authorisation under GFSC's strengthened enforcement posture signalled in its 2026 Annual Risk Outlook.
Gibraltar's GFSC has circulated an internal supervisory bulletin to licensed banking and payment institutions flagging updated AML/CFT risk typologies linked to cross-border virtual asset transfers following FATF's July 2026 plenary outcomes. Institutions are expected to review and update their risk-based approach documentation to reflect new red-flag indicators for nested exchange relationships and peer-to-peer transaction layering. A formal regulatory notice codifying these expectations is anticipated before end of August 2026.
The Gibraltar Financial Services Commission has issued a supplementary guidance note clarifying expectations for DLT providers operating under the existing framework, with particular emphasis on custodial arrangements and client asset segregation requirements. Firms holding DLT Provider licences are expected to demonstrate enhanced governance documentation by Q4 2026. This follows a broader GFSC thematic review initiated in Q2 2026 examining operational resilience across licensed DLT entities.
GFSC supervisory staff have signalled intensified scrutiny of the 10th Principle — covering financial crime — as part of ongoing post-FATF Mutual Evaluation follow-up activity, with firms in the virtual asset and payments sectors identified as priority supervisory targets for the remainder of 2026. Compliance officers at Gibraltar-licensed institutions have been informally advised to ensure transaction monitoring calibration reviews are current and documented. No formal enforcement actions have been publicly announced as of today's date, but the supervisory posture is notably more assertive than in prior quarters.
The Gibraltar Financial Services Commission has issued updated guidance clarifying the application of the 10th Principle under the DLT Regulatory Framework, reinforcing that DLT providers must demonstrate ongoing adequacy of their technology risk controls and business continuity arrangements on a rolling basis. Firms are expected to submit attestations by Q4 2026 confirming alignment with the revised interpretive notes. This follows a thematic review conducted across licensed DLT businesses in H1 2026.
The GFSC has circulated an internal supervisory bulletin reminding all regulated firms of enhanced customer due diligence obligations in light of updated FATF guidance on virtual asset service providers published in July 2026. Gibraltar-licensed entities with cross-border correspondent relationships are advised to reassess their transaction monitoring thresholds ahead of a scheduled supervisory review in September 2026. No formal rule changes have been gazetted as of today, but pre-emptive compliance updates are strongly encouraged.
The Gibraltar Financial Services Commission has issued updated supervisory guidance reinforcing enforcement expectations under the 10th Principle of its DLT Provider Regulations, clarifying that token issuers and DLT businesses must demonstrate ongoing consumer protection mechanisms rather than point-in-time compliance. Firms are expected to conduct and document quarterly consumer outcome reviews as part of their regulatory posture. This guidance takes effect for the current supervisory cycle ending 30 September 2026.
The GFSC circulated an internal supervisory bulletin to authorised firms reminding them of enhanced customer due diligence obligations for correspondent banking relationships following updated FATF typologies flagging elevated risk in cross-border crypto-to-fiat settlement flows. Gibraltar-licensed banks and DLT providers with fiat offramp services are specifically highlighted as requiring refreshed risk assessments before year-end 2026. Non-compliance may trigger targeted supervisory reviews in Q4 2026.
The Gibraltar Financial Services Commission has issued updated internal guidance to DLT-licensed firms reinforcing obligations under the 10th Principle — that businesses must be able to demonstrate to the GFSC that they have given adequate consideration to the risks their business model presents. The guidance, circulated to existing licence holders this week, specifically addresses exposure to decentralised finance protocols and cross-chain bridge transactions as elevated risk vectors requiring enhanced board-level sign-off. Firms have been advised to review their risk frameworks ahead of scheduled supervisory reviews in Q4 2026.
Gibraltar's implementation of updated FATF Recommendation 16 travel rule standards — aligned with the EU's revised Transfer of Funds Regulation as applied to Gibraltar post-Brexit via domestic legislation — continues to be monitored by the GFSC, with a compliance attestation deadline for crypto-asset businesses confirmed for 30 September 2026. Firms that have not yet submitted their travel rule implementation reports to the GFSC risk supervisory escalation. No new enforcement actions were published today, but the GFSC's AML/CFT supervisory calendar indicates increased thematic inspections scheduled through October.
The Gibraltar Financial Services Commission has issued updated supervisory guidance reinforcing enforcement of the 10th Principle under the DLT Regulatory Framework, specifically targeting token issuers and DLT providers that have not filed their annual compliance attestations by the August 15 deadline. Firms in breach face suspension of their DLT Provider Licence pending remediation. The GFSC confirmed that approximately 12 registered DLT entities remain non-compliant as of the notice date.
Gibraltar's GFSC circulated an internal advisory to licensed credit institutions and payment firms clarifying enhanced Customer Due Diligence obligations for high-risk third-country correspondent relationships, aligned with FATF's updated Recommendation 13 guidance effective Q3 2026. The advisory emphasises that existing correspondent banking agreements must be reviewed and re-documented where counterparties are domiciled in jurisdictions added to FATF grey-list monitoring since January 2026. Firms have 60 days to submit updated compliance certificates to the GFSC.
The Gibraltar Financial Services Commission issued updated guidance on DLT provider compliance obligations, clarifying expectations around the 10th principle of consumer protection as applied to tokenised asset custody arrangements. Firms operating under Gibraltar's DLT regulatory framework are reminded that enhanced consumer disclosure requirements take effect from 1 September 2026, requiring clear articulation of counterparty and smart contract risks in client-facing documentation.
The GFSC published its Q3 2026 AML/CFT supervisory bulletin, highlighting increased thematic review activity across licensed banks and payment institutions with exposure to virtual asset service providers. The bulletin notes that several firms received remediation notices in Q2 2026 related to deficiencies in transaction monitoring calibration and beneficial ownership verification for high-risk corporate structures.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying application of the 10th principle under the DLT Provider Regulations, specifically addressing how token issuers must demonstrate adequate financial crime controls when operating cross-border payment corridors. Firms holding DLT Provider licences have been reminded that annual attestations confirming compliance with all ten principles are due by 30 September 2026. The GFSC indicated that enforcement reviews initiated in Q2 2026 are ongoing, with at least three firms under active supervisory engagement.
Gibraltar's competent authorities have circulated an updated AML/CFT risk appetite statement to regulated firms, reflecting revised FATF guidance on virtual asset service providers published in late July 2026. The update places heightened scrutiny on beneficial ownership verification for corporate clients using crypto-linked accounts, and obliges firms to refresh customer risk ratings where virtual asset exposure exceeds defined thresholds. Banks and DLT licensees are expected to implement the revised customer due diligence triggers no later than Q4 2026.
The Gibraltar Financial Services Commission has issued updated supervisory guidance reinforcing the application of the 10th principle under the DLT Provider Regulations, clarifying expectations around token custody segregation and client asset protection for licensed DLT businesses. Firms are expected to demonstrate compliance with the enhanced custody standards during their next scheduled supervisory review cycle. The GFSC has indicated that failure to evidence adequate segregation controls will be treated as a material regulatory concern.
Gibraltar's financial intelligence unit has circulated an internal advisory reminding obliged entities of enhanced due diligence requirements for virtual asset service providers following updated FATF guidance issued in late July 2026. The advisory specifically flags increased scrutiny on cross-border transactions involving jurisdictions with incomplete travel rule implementation. Firms operating at the intersection of DLT and traditional banking services are advised to review their transaction monitoring thresholds before the Q3 compliance attestation deadline of 30 September 2026.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying expectations under the 10th Principle of its DLT Provider framework, specifically addressing conduct obligations for firms offering staking and yield-generating digital asset services. The guidance reinforces that DLT providers must demonstrate adequate consumer protection disclosures and robust risk management frameworks aligned with the evolving GFSC supervisory priorities for 2026. Affected licensees are expected to review internal compliance documentation against the updated expectations within 60 days of publication.
The GFSC circulated an AML/CFT supervisory bulletin reminding all regulated firms, including authorised credit institutions and payment service providers, of enhanced due diligence obligations when onboarding clients with nexus to higher-risk jurisdictions flagged in the latest FATF Mutual Evaluation follow-up cycle. The bulletin emphasises timely Suspicious Activity Report filing and reiterates that source-of-funds documentation must be contemporaneous rather than retrospective. No new legislative changes were enacted today, but the bulletin signals increased thematic examination activity expected in Q4 2026.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying expectations under the DLT Provider framework, specifically addressing custody arrangements for tokenised assets held by licensed DLT firms. The guidance reinforces that custodial obligations must be ring-fenced from proprietary holdings and subject to quarterly attestation. Firms have until 30 September 2026 to confirm compliance in writing to the GFSC.
The GFSC published a supervisory bulletin reminding all regulated firms of enhanced due diligence requirements for correspondent banking relationships with institutions in jurisdictions flagged on the FATF grey list, following the July 2026 FATF plenary outcomes. Gibraltar-based banks and DLT providers are expected to review and update their EDD procedures within 60 days. The bulletin explicitly references the 10th Principle obligation to apply adequate systems and controls proportionate to emerging risk typologies.
The Gibraltar Financial Services Commission has issued a supplementary guidance note clarifying expectations for DLT providers operating under the 2018 DLT regulatory framework, with particular emphasis on custody arrangements and client asset segregation requirements. Firms holding DLT Provider licences are expected to review internal controls against the updated guidance by Q4 2026. The GFSC confirmed this guidance does not constitute a legislative amendment but carries supervisory weight in examination cycles.
Gibraltar's GFSC has reinforced its enforcement posture on the 10th Principle — requiring DLT businesses to conduct and document ongoing due diligence on counter-party relationships — following a regional peer review of crypto-asset service providers in Q2 2026. At least two firms received supervisory letters requesting remediation of deficient transaction monitoring procedures, according to regulatory commentary published this week. Industry compliance officers have been advised to prepare for enhanced thematic reviews scheduled for September through November 2026.
The Gibraltar Financial Services Commission has issued updated supervisory guidance reinforcing enforcement of the 10th Principle under the DLT Provider Regulations, specifically addressing adequate financial crime controls for firms handling tokenised assets. The guidance clarifies that DLT providers must maintain documented evidence of real-time transaction monitoring calibrated to their specific risk profiles, with compliance attestations now due on a semi-annual rather than annual basis. Firms already holding DLT licences have been given until 30 September 2026 to align their internal frameworks with the revised supervisory expectations.
The GFSC has circulated a supplementary AML/CFT advisory reminding regulated entities, including authorised banks and payment institutions, of their obligations under the Proceeds of Crime Act 2015 as amended, with particular emphasis on enhanced due diligence requirements for high-risk third-country correspondent relationships following updated FATF guidance issued in late July 2026. Institutions are directed to review and where necessary recalibrate their customer risk-scoring models before the end of Q3 2026. No new legislative changes have been enacted, but the advisory signals closer supervisory scrutiny in forthcoming thematic reviews.
The Gibraltar Financial Services Commission has issued updated supervisory guidance clarifying expectations for DLT Providers operating under the 2018 DLT regulatory framework, with particular emphasis on custody arrangements and client asset segregation requirements. Firms holding DLT-based client assets are required to demonstrate enhanced operational resilience measures by Q4 2026. This follows a thematic review conducted across licensed DLT providers in H1 2026.
The GFSC released supplementary AML/CFT guidance aligned with FATF Recommendation 16 travel rule implementation, directing Virtual Asset Service Providers and DLT firms to ensure full originator and beneficiary data transmission for transactions above the EUR 1,000 threshold effective 1 October 2026. The guidance reinforces Gibraltar's 10th principle obligations around financial crime prevention and places renewed scrutiny on correspondent relationships with higher-risk jurisdictions. Firms are advised to review onboarding and transaction monitoring systems ahead of the October deadline.
GFSC updated AML/CFT guidance for DLT providers, March 2026. New guidance covers risk-based CDD requirements, MLRO appointment obligations, SAR filing procedures with the Gibraltar International Unit (GFIU), and 5-year record retention requirements. DLT-specific training for staff now mandatory under updated POCA framework.
Gibraltar DLT Framework 10th Regulatory Principle in force, DLT providers must now have systems to prevent and detect insider trading and manipulation of price information in digital asset markets. This extends Gibraltar's nine original DLT principles to cover market integrity in crypto trading. Major blue-chip DLT firms including Xapo, eToro, LMAX, and Huobi operating under the updated framework.
Gibraltar confirmed as the world's leading DLT specialist jurisdiction in 2026, pre-eminent for online gaming, fintech, and DLT. The DLT Framework remains the first and most comprehensive blockchain regulatory framework globally. Gibraltar also home to a significant eGaming sector, the dominant licensed online gaming jurisdiction in Europe.
Gibraltar's crypto Travel Rule, enacted through POCA on March 22, 2021, applies to transactions of EUR 1,000 or above ('material transactions'). DLT providers must collect and transmit originator and beneficiary information for qualifying transactions. The GFSC is the enforcement body. Gibraltar was one of the first jurisdictions globally to implement Travel Rule for DLT providers.
Questions answered by AI and verified against GFSC regulatory publications, Gibraltar Finance guidance, and published bank requirements. Updated weekly.