Industry
Token issuers, crypto-asset service providers and funds operating under MiCA and the CySEC regime.
Crypto & Web3: short answer
Last reviewed
Cyprus offers crypto businesses an EU regulatory home under MiCA supervised by CySEC, alongside a domestic charge on crypto-asset gains introduced in the 2026 reform. The structuring question is where the line falls between investing and trading.
| Regulatory framework | MiCA, applied across the EU and supervised in Cyprus by CySEC |
|---|---|
| Corporate income tax | 15 percent from 1 January 2026 |
| Crypto-asset gains | A dedicated 8 percent charge introduced in the 2026 reform |
| Passporting | An EU authorisation permits service across member states |
| Withholding on dividends to non-residents | None |
| What decides the tax treatment | Whether the activity is investment or trading, judged on the facts |
The crypto industry spent a decade choosing jurisdictions on the basis of what was not regulated. That period has ended in Europe. MiCA applies across the EU, and a crypto-asset service provider now needs an authorisation rather than an absence of one.
Cyprus is a practical place to hold that authorisation. It is an EU member state with an established financial regulator in CySEC, a supervisory apparatus already built for investment firms and funds, and a professional services market that has been doing this work for two decades. An authorisation obtained here permits service across member states rather than in Cyprus alone.
That reframes the choice. The question is no longer where the rules are lightest. It is where a substantive, supervised business can be run at reasonable cost with access to the largest single market in which it can legally operate.
Most crypto groups that arrive here are running two distinct activities that call for different answers.
The regulated activity. Exchange, custody, brokerage or transfer services on behalf of clients. This is what MiCA governs, what CySEC authorises, and what carries capital, governance and reporting obligations. It belongs in an entity built for supervision.
The proprietary position. The firm's own holdings, treasury, or token allocations. This is not a licensing question at all. It is a tax question, and the answer turns on whether the activity is investment or trading.
The 2026 reform introduced a dedicated charge on crypto-asset gains at 8 percent, which gives the personal side a defined rate rather than an argument. On the corporate side, the distinction between a capital holding and a recurring commercial activity continues to matter, because the two are not taxed the same way, and it is judged on the facts of what the business actually does rather than on how it describes itself.
A regulated entity is required to be directed and controlled from where it is authorised. For a crypto business that has historically operated as a distributed team, this is the largest practical change.
It means directors resident here who genuinely participate, a compliance function that exists rather than being outsourced to a template, premises, and records that show decisions were taken before they were executed. Economic substance and regulatory substance point at the same evidence, and building it once serves both.
The reward for doing it properly is durability. An authorisation that reflects a real operation is considerably harder to challenge than one that reflects an address.
The honest constraint on a crypto business in any European jurisdiction is banking, and Cyprus is not an exception to it.
Accounts are obtainable, and the process is longer and more evidential than for an ordinary trading company. What shortens it is the same thing that shortens everything else here: a clear ownership chain, a documented source of funds and wealth, a business model that can be explained in a paragraph, and a regulatory position that is either authorised or clearly outside scope.
Firms that arrive with that file assembled tend to be banked. Firms that arrive expecting the question not to be asked tend to wait.
It depends on whether you provide crypto-asset services to third parties. Exchange, custody, brokerage and transfer services fall within the MiCA regime and require authorisation. Holding and trading your own positions is a different question and is not licensed on that basis.
The 2026 reform introduced a dedicated charge on crypto-asset gains at 8 percent. Separately, whether a corporate activity is treated as investment or as trading turns on the facts, and the two are not taxed the same way.
An authorisation obtained in one member state permits service across the others under the MiCA framework, subject to the notification requirements that apply.
It is more evidential than for an ordinary trading company, and it is achievable. The determining factor is the quality of the file: ownership chain, source of funds and wealth, and a clearly stated regulatory position.
2 pages
Decision
The structure is usually straightforward. What decides the outcome is order. A Cyprus International Trust requires a settlor who was not Cyprus tax resident in the calendar year before the trust's creation, so a relocating settlor is working against a closing window, and custody, key control and the movement of the assets each carry their own sequencing question.
Decision
Most Cyprus companies need no licence. The question turns on what the company does and for whom. Investment services to clients, crypto asset services to others, accepting bets and issuing or handling electronic money each sit under a licensing regime. Selling your own software, services or goods is not by itself a licensable activity.
Services
Expedited incorporation with every mandatory registration, and the Registrar and government fees included in one fee.
Holding structures using the participation exemption and Cyprus treaty network.
Transfer of an existing foreign company into Cyprus without breaking legal continuity.
Management and control, governance and the evidence file that supports tax residency.
Bring the facts you have. We will map the structural options, what each one requires, and the point at which the trade-offs actually bite.
