← Regulations / Croatia / Operating Models / Crypto debit card

Crypto-funded debit card in Croatia

A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.

Conditional AI-Generated · Unreviewed

Crypto debit card is conditionally permitted in Croatia with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • VASP registration with the Ministry of Finance – Financial Intelligence Office (USPN) under the AML/CTF Act (Zakon o sprječavanju pranja novca i financiranja terorizma) — required for providing virtual asset services including exchange and transfer.
  • Full KYC/CDD procedures required for all cardholders, consistent with AMLD5 transposed into Croatian law.
  • Implement Enhanced Due Diligence (EDD) for high-risk customers or transactions.
  • Appoint an AML Officer as part of internal AML/CTF governance.
  • Establish comprehensive AML/CFT policies and procedures covering customer due diligence, ongoing monitoring, record-keeping.
  • Conduct a robust risk assessment for money laundering and terrorist financing risks.
  • Report suspicious transactions to the Financial Intelligence Office (USPN).
  • From 30 December 2025 (MiCA implementation), CASP licensing will apply with additional prudential and operational requirements, likely supervised by HANFA in coordination with USPN for AML.

Key Restrictions

  • Crypto-to-fiat conversion at point of sale or top-up constitutes a VASP service (exchange between virtual assets and fiat currency), requiring USPN registration under current pre-MiCA regime.
  • If the issuer or payment processor handles only the fiat side (not touching crypto), it falls under PSD2 and requires a payment institution or e-money institution license from HNB.
  • A legal entity incorporated in Croatia with a registered office in Croatia is required.
  • There are no specific national rules for segregation of client crypto assets or insurance/bonding requirements currently; best-practice segregation is expected, and MiCA will impose mandatory custody safeguards from Dec 2025.
  • The 2-year holding period exemption for capital gains tax means that if a customer's crypto is held for less than 2 years before conversion to fiat to fund the card, a taxable event (10% capital gains tax + local surtax) occurs.
  • FIFO method generally applies for calculating acquisition cost of crypto for tax purposes.

Key Risks

  • Regulatory ambiguity under the current pre-MiCA regime — the exact boundary between VASP registration (USPN) and payment/e-money licensing (HNB/PSD2) for crypto debit card programmes is not explicitly defined in Croatian law.
  • Enforcement risk if the operator structures as purely a payment service without acknowledging the VASP component of the crypto-to-fiat conversion.
  • Tax complexity: each crypto-to-fiat top-up may be a taxable event for the cardholder (capital gains), creating reporting and withholding ambiguity for the operator.
  • MiCA transition risk: the regime will fundamentally change from 30 December 2025, requiring a full CASP license from HANFA with capital, governance, and custody requirements not currently mandated.
  • No current cold storage mandates or insurance/bonding requirements — potential consumer protection gap that could attract regulatory scrutiny.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Office for Anti-Money Laundering (Ured za sprječavanje pranja novca – USPN): This is the primary authority responsible for supervising the implementation of AML/CFT measures by obliged entities, including VASPs. They maintain the register of VASPs.

licensing 60% confidence

Current Regime (Pre-MiCA): Croatia operates a registration regime for VASPs, primarily for AML/CFT supervision. This means entities providing virtual asset services must register with the USPN and comply with AML obligations. It is not a full financial services license in the traditional sense, but an AML registration.

licensing 60% confidence

Future Regime (Post-MiCA): From December 30, 2025, MiCA will introduce a harmonized licensing regime across the EU. Entities providing "crypto-asset services" (as defined by MiCA) will require a license from a competent national authority (likely HANFA in Croatia, in coordination with USPN for AML aspects) in one EU member state, which will then allow them to operate across the entire EU ("passporting"). This will replace the national AML registrations for the services covered by MiCA.

licensing 60% confidence

Exchanges (Fiat-to-Crypto and Crypto-to-Crypto):

licensing 60% confidence

Services related to the exchange between virtual assets and fiat currencies.

licensing 60% confidence

If a payment processor directly facilitates transactions in virtual assets on behalf of customers (e.g., receiving crypto from a customer and sending fiat to a merchant, or vice-versa), they would likely fall under the VASP definition of "transferring virtual assets" and require registration.

licensing 60% confidence

If a payment processor only handles fiat currency for a crypto business (e.g., processing credit card payments for a crypto exchange, but not touching the crypto itself), they would generally be regulated under traditional payment services laws (PSD2 framework) and would need a payment institution or e-money institution license/authorization, which is a different regulatory scope. The focus here is on direct virtual asset involvement.

licensing 60% confidence

Generally, a legal entity incorporated in Croatia is required to apply for registration.

licensing 60% confidence

A registered office in Croatia is necessary.

licensing 60% confidence

AML/CFT Policies and Procedures: Comprehensive internal rules and procedures for customer due diligence (CDD), enhanced due diligence (EDD), ongoing monitoring, record-keeping, and reporting suspicious transactions.

licensing 60% confidence

Risk Assessment: A robust risk assessment methodology for identifying and mitigating money laundering and terrorist financing risks associated with the VASP's operations, customers, products, and geographies.

aml 60% confidence

VASPs are required to register with the Ministry of Finance – Financial Intelligence Office (Ured za sprječavanje pranja novca) as part of their AML/CTF obligations.

aml 60% confidence

This registration requires compliance with the Croatian Anti-Money Laundering and Terrorist Financing Act (Zakon o sprječavanju pranja novca i financiranja terorizma), which transposes EU AML Directives (specifically AMLD5).

aml 60% confidence

Implementing robust KYC/CDD (Know Your Customer/Customer Due Diligence) procedures.

aml 60% confidence

Reporting suspicious activities to the Financial Intelligence Office.

aml 60% confidence

Establishing internal AML policies and procedures.

aml 60% confidence

Explicit national rules for the segregation of client crypto assets from the firm's own assets are not specifically detailed within the current AML/CTF framework.

aml 60% confidence

There are no specific national insurance or bonding requirements explicitly mandated for crypto custody providers under the current AML/CTF framework.

aml 60% confidence

There are no explicit national mandates for cold storage of crypto assets. Operational security measures, including the use of cold storage, are generally considered best practices for secure custody but are not yet regulatory requirements.

aml 60% confidence

Entities providing "custody and administration of crypto-assets on behalf of clients" will be categorized as Crypto-Asset Service Providers (CASPs).

tax 60% confidence

Taxable Event: A capital gain arises when you sell or exchange cryptocurrency for fiat currency (e.g., EUR, USD), or exchange one cryptocurrency for another, or use cryptocurrency to purchase goods or services.

tax 60% confidence

The standard capital gains tax rate on financial assets in Croatia is 10%.

tax 60% confidence

Holding Period Exemption:

tax 60% confidence

FIFO Method: For calculating the acquisition cost, the "First-In, First-Out" (FIFO) method is generally applied unless the taxpayer can clearly identify specific batches of crypto purchased (e.g., through unique wallet addresses or transaction IDs).

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a crypto-funded debit card operating in Croatia requires both VASP registration with USPN for the crypto-to-fiat conversion leg and likely a payment institution/e-money license under PSD2 for the fiat card issuance, with a local entity, full AML/KYC obligations, and a significant regime change coming under MiCA from December 2025.

Questions this verdict aims to answer

  • What e-money / payment-institution license is required?
  • How is the crypto-to-fiat conversion regulated?
  • What KYC and AML obligations apply to cardholders?
  • What partner-bank or BIN-sponsor arrangements are required?