← Regulations / Spain / Operating Models / Self-custodial wallet

Self-custodial wallet / non-custodial software in Spain

Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.

Permitted AI-Generated · Unreviewed

Self-custodial wallet is permitted in Spain with no licensing burden.

Verdict Details

Permitted
yes
Local entity required
No
Licensing burden
None
Last updated
2026-07-13

Key Restrictions

  • The publisher must never hold, control, or have access to user private keys or funds — any custody function would trigger CASP licensing under MiCA.
  • If the software is marketed or advertised in Spain, CNMV advertising rules (Circular 1/2022) apply, requiring mandatory risk warnings and clear disclosure in crypto marketing campaigns.
  • If the software includes integrated fiat on-ramp/off-ramp or exchange services, those functions may require separate CASP authorization.

Key Risks

  • Regulatory ambiguity: While pure non-custodial wallet software may not be a VASP/CASP under MiCA, if the publisher exercises any control over private keys (e.g., recovery services, cloud backup), it could be reclassified as providing custody.
  • Advertising enforcement: The CNMV has actively fined entities for inadequate crypto-advertising disclosures (see Binance Spain fine), so any marketing activity in Spain carries compliance risk.
  • Worldcoin/Tools for Humanity enforcement shows data protection (GDPR) risks for software handling biometric or personal data in Spain — Spanish DPA is active.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 20% confidence

MiCA Regulation (EU) (2023) — CASP authorization, comprehensive crypto regulation

licensing 20% confidence

CUSTODY: CASP authorization — custody is a licensed MiCA activity

aml 60% confidence

Directive (EU) 2018/843 (5th AMLD): Crucially, this directive extended the scope of AML/CFT rules to include virtual asset service providers (VASPs), specifically:

[secondary] sepblac.es — En [secondary] bde.es — En
aml 60% confidence

Custodian wallet providers.

[secondary] sepblac.es — En [secondary] bde.es — En
enforcement 50% confidence

Entity Targeted: Binance (specifically, Binance Spain S.L.). Violation Type: Non-compliance with the CNMV's Circular 1/2022 on advertising of crypto-assets. The alleged violations included insufficient disclosure of risks, lack of clarity, and inadequate warnings in advertising campaigns. Outcome: Fine imposed and publicly announced. This marked a significant enforcement of Spain's relatively new crypto advertising rules.

[secondary] cnmv.es — VerDoc.axd [secondary] elpais.com — La Cnmv Multa Con 31 Millones A Binance Por Incumplir La Normativa De Publicidad De Criptoactivos [secondary] aepd.es — La Aepd Impone Una Medida Cautelar Para Prohibir A Worldcoin El Tratamiento De Datos Personales En Espana
licensing 80% confidence

CNMV — Securities market, crypto advertising regulation (mandatory risk warnings)

[primary] CNMV

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
high

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Yes — publishing non-custodial wallet software does not trigger VASP/CASP classification or AML obligations under Spanish/EU law, provided the publisher never holds, controls, or has access to user private keys or funds; however, CNMV advertising rules apply to crypto-related marketing in Spain.

Questions this verdict aims to answer

  • Does software publishing trigger VASP / MSB classification?
  • Do AML obligations attach when no custody exists?
  • What disclosure or consumer-protection rules apply?