← Regulations / Greece / Operating Models / Crypto debit card

Crypto-funded debit card in Greece

A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.

Conditional AI-Generated · Unreviewed

Crypto debit card is conditionally permitted in Greece with a local entity, subject to AML obligations and medium licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
Medium
Last updated
2026-07-13

AML Obligations

  • VASP registration with HCMC required (Law 4557/2018, Art. 40-45) as the card program involves exchange between virtual assets and fiat (crypto-to-fiat conversion at top-up or POS) — this qualifies as 'exchange between virtual assets and fiat currencies' under gr.licensing.exchanges-providers-engaged-in-the.
  • Full CDD on each cardholder: obtain and verify full name, date of birth, nationality, permanent address, and unique ID number using reliable source documents (gr.aml.identification-and-verification-of-the).
  • Beneficial ownership identification for any legal-person cardholders or program participants (gr.aml.legal-entities-obtain-and-verify).
  • Ongoing transaction monitoring to detect suspicious activity, with reporting obligations to the Hellenic Financial Intelligence Unit (FIU) (gr.licensing.monitor-transactions-for-suspicious-activities).
  • Enhanced Due Diligence (EDD) for PEPs, high-risk third countries, non-face-to-face relationships (which applies to card onboarding), and unusually large/complex transactions (gr.aml.enhanced-due-diligence-edd-required).
  • Sanctions screening against EU/UN sanctions lists (gr.aml.screen-customers-against-sanction-lists).
  • Appointment of an AML Compliance Officer (and Deputy if required) (gr.licensing.appoint-an-aml-compliance-officer).
  • Regular staff AML/CFT training (gr.licensing.regular-staff-training-on-amlcft).
  • Travel Rule compliance under Law 4991/2022 — information accompanying transfers of funds and crypto-assets (gr.aml.law-49912022-government-gazette-a).
  • Record-keeping: CDD documents for at least 5 years after business relationship ends; transaction records sufficient to reconstruct individual transactions (gr.aml.cdd-information-copies-of-the, gr.aml.transaction-records-all-relevant-records).

Key Restrictions

  • The VASP must be incorporated in Greece and have its management and operational base within the country to comply with Greek AML/CFT laws and HCMC supervision (gr.licensing.while-not-explicitly-always-requiring).
  • The card program requires a separate e-money license or a partnership with an EU-authorized e-money institution / payment institution to issue the card and hold fiat balances, as crypto debit cards involve e-money issuance — Greece's VASP registration alone does not cover e-money or payment services.
  • The crypto-to-fiat conversion component requires the HCMC-registered VASP to handle the exchange leg; the fiat side likely needs a separate payment-services license or partner-bank/BIN-sponsor arrangement.
  • No specific initial capital requirement is mandated for VASP registration, but the HCMC will assess financial soundness as part of the registration process (gr.licensing.the-national-aml-regime-does).
  • Fit & proper requirements apply to management, key personnel, and significant shareholders (gr.licensing.fit-proper-requirements).

Key Risks

  • Regulatory ambiguity: VASP registration under Law 4557/2018 is an AML registration regime, not a full financial-services license — the HCMC does not authorize the provision of payment or e-money services that a crypto debit card inherently involves.
  • The Greek tax authority (AADE) has clarified that virtual assets are not e-money for tax purposes (Circular E. 2063/2023), creating a potential gap between the tax treatment and the regulatory classification needed for card issuance.
  • Enforcement precedent exists for crypto-related fraud schemes targeting Greek residents (gr.enforcement.entity-targeted-a-large-international, gr.enforcement.entity-targeted-individuals-involved-in) — regulatory scrutiny of any crypto payment product is likely high.
  • DAC8 reporting obligations are expected to apply to Greek VASPs, adding compliance overhead for transaction reporting to tax authorities.
  • Partnership dependency: The operator depends on finding both a BIN sponsor (e.g., Mastercard/Visa issuer bank) and an e-money institution willing to partner with a Greek-registered VASP, which may be challenging given the nascent regulatory framework.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Law 4557/2018 (as amended), which transposed the EU's 5th Anti-Money Laundering Directive (AMLD5) and 6th Anti-Money Laundering Directive (AMLD6) into national law. This law defines "providers of services of virtual assets" and mandates their registration.

licensing 60% confidence

HCMC Decision No. 2/902/10.03.2021 (and subsequent amendments), which provides further details on the registration process and ongoing obligations.

licensing 60% confidence

Exchanges: Providers engaged in the exchange between virtual assets and fiat currencies, or between one or more virtual assets.

licensing 60% confidence

Custody Providers: Providers that offer custodian wallet services, holding, storing, and transferring virtual assets or private cryptographic keys on behalf of customers.

licensing 60% confidence

Establish and implement robust AML/CFT policies, procedures, and internal controls in line with national and EU requirements.

licensing 60% confidence

Conduct customer due diligence (CDD) and enhanced due diligence (EDD) where necessary.

licensing 60% confidence

Monitor transactions for suspicious activities and report them to the Hellenic Financial Intelligence Unit (FIU).

licensing 60% confidence

Appoint an AML Compliance Officer and potentially a Deputy AML Compliance Officer.

licensing 60% confidence

Regular staff training on AML/CFT.

licensing 60% confidence

While not explicitly always requiring a physical office, the VASP must be incorporated in Greece and have its management and operational base within the country to effectively comply with Greek AML/CFT laws and HCMC supervision.

licensing 60% confidence

The national AML regime does not impose specific initial capital requirements as stringent as a licensing regime. However, VASPs are expected to have adequate financial resources to operate responsibly and comply with their obligations. The HCMC will assess the financial soundness as part of the registration.

licensing 60% confidence

Hellenic Capital Market Commission (HCMC) - Virtual Assets Page:

aml 40% confidence

Law 4557/2018 (Government Gazette A' 139/30.07.2018): This is the primary Greek AML/CFT law, transposing the Fourth AML Directive (EU 2015/849). It established the general framework for obliged entities.

aml 40% confidence

Law 4734/2020 (Government Gazette A' 199/08.10.2020): This crucial law amended Law 4557/2018 to transpose the Fifth AML Directive (5AMLD) into Greek law. It explicitly expanded the scope of obliged entities to include:

aml 40% confidence

Law 4816/2021 (Government Gazette A' 118/09.07.2021): This law further amended Law 4557/2018, primarily to transpose aspects of the Sixth Anti-Money Laundering Directive (6AMLD) concerning the criminalization of money laundering offenses.

aml 40% confidence

Law 4991/2022 (Government Gazette A' 214/11.11.2022): This law made further amendments to Law 4557/2018, primarily to incorporate the changes from the EU Regulation on information accompanying transfers of funds and certain crypto-assets (Travel Rule).

aml 40% confidence

Identification and Verification of the Customer:

aml 40% confidence

Legal Entities: Obtain and verify the entity's name, legal form, address of registered office, company registration number, and the names of the directors. Crucially, they must identify and verify the Beneficial Owner(s) (BOs) – any natural person who ultimately owns or controls more than 25% of the entity, directly or indirectly, or exercises control through other means.

aml 40% confidence

Enhanced Due Diligence (EDD): Required for higher-risk situations, such as:

aml 40% confidence

Screen customers against sanction lists (e.g., EU, UN).

aml 40% confidence

CDD Information: Copies of the documents and data obtained through the CDD process (e.g., identification documents, beneficial ownership information).

aml 40% confidence

Transaction Records: All relevant records relating to domestic and international transactions, sufficient to reconstruct individual transactions. This includes dates, amounts, types of virtual assets, sender, and recipient information.

tax 95% confidence

AADE Circular E. 2063/2023: This is the most significant official document from the Greek tax authorities regarding the tax treatment of virtual assets. It defines virtual assets and clarifies that they are not securities, foreign currency, or electronic money for tax purposes, thus determining which existing tax provisions (or lack thereof) apply.

tax 60% confidence

Exchange of Cryptocurrencies for Fiat Currency (and vice versa): Services consisting of the exchange of traditional currencies for units of the "bitcoin" virtual currency (and vice versa) are exempt from VAT. This applies to the transaction fees charged by crypto exchanges for these services.

enforcement 70% confidence

Entity Targeted: A large international organized crime group operating "boiler rooms" (call centers) that defrauded investors across Europe, including Greece, using fake cryptocurrency investments. Violation Type: Investment fraud, aggravated fraud, money laundering, participation in a criminal organization. Outcome: Multiple arrests (at least 15 in Greece, others internationally), dismantling of call centers, freezing of assets. Criminal proceedings are ongoing.

enforcement 70% confidence

Entity Targeted: Individuals involved in a fraudulent scheme that lured victims into investing in fake cryptocurrency platforms. Violation Type: Fraud, money laundering, establishment/participation in a criminal organization. Outcome: Arrests, ongoing investigations and criminal proceedings.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a crypto-funded debit card program can operate in Greece, but requires: (1) HCMC VASP registration for the crypto-to-fiat exchange component, (2) a separate e-money license or a partnership with an EU-licensed e-money/payment institution for card issuance and fiat balance holding, and (3) a BIN-sponsor arrangement, all while complying with Greek AML/CFT obligations under Law 4557/2018 as amended.

Questions this verdict aims to answer

  • What e-money / payment-institution license is required?
  • How is the crypto-to-fiat conversion regulated?
  • What KYC and AML obligations apply to cardholders?
  • What partner-bank or BIN-sponsor arrangements are required?