← Regulations / Hungary / Operating Models / Crypto debit card

Crypto-funded debit card in Hungary

A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.

Conditional AI-Generated · Unreviewed

Crypto debit card is conditionally permitted in Hungary with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Crypto-funded debit card operators acting as custodial wallet providers or off-ramp facilitators are classified as VASPs under Hungary's transposition of AMLD5/AMLD6 — must register with the MNB for AML/CTF purposes (hu.aml.vasp-registration-under-the-transposition)
  • Full KYC/CDD under Act CXXXVI of 2013 (Pmtv.) — customer due diligence, transaction monitoring, and suspicious activity reporting obligations apply to cardholders (hu.aml.act-cxxxvi-of-2013-on)
  • Under MiCA (effective from 30 Dec 2024), the operator must obtain full CASP authorization from the MNB for 'custody and administration of crypto-assets on behalf of third parties' — this goes far beyond AML registration (hu.aml.authorization-as-a-casp-under)
  • Client crypto-assets and fiat funds must be segregated from the operator's own assets; records must allow immediate segregation (hu.aml.keep-client-crypto-assets-and-funds, hu.aml.maintain-records-and-accounts-that)
  • Operator must return client crypto-assets and funds without undue delay upon request (hu.aml.return-client-crypto-assets-and-funds)
  • No specific statutory insurance/bonding requirements for crypto custodians beyond general business insurance, though prudent safeguards apply (hu.aml.no-specific-explicit-statutory-insurancebonding)

Key Restrictions

  • The crypto-to-fiat conversion at point of sale (off-ramp) likely engages e-money regulation: the fiat leg requires either a credit institution license or an Electronic Money Institution (EMI) authorization under Act CCXXXV of 2013, plus a MiCA authorization for the EMT component if stablecoins are used (hu.stablecoin.issuers-of-emts)
  • The card program must be structured so that the fiat balance side is operated by a licensed EMI or credit institution; pure VASP registration alone is insufficient
  • A partner-bank or BIN-sponsor arrangement is required — the operator needs a sponsoring bank or payment institution to issue physical/virtual cards and access card scheme (e.g. Mastercard, Visa) rails
  • The operator must geofence to ensure it does not serve unlicensed residents or offer services outside EU MiCA framework
  • No specific cold-storage mandate under current law, but industry best practice and MiCA's general security requirements strongly recommend it (hu.aml.no-specific-explicit-mandates-for)

Key Risks

  • MNB has a track record of issuing warnings and prohibiting unlicensed service providers — operating without proper e-money and CASP authorizations carries immediate enforcement risk (hu.enforcement.issuing-warnings-against-unlicensed-service, hu.enforcement.entity-targeted-xifra-lifestyle-also)
  • Regulatory ambiguity around whether the off-ramp conversion at the card processor level constitutes an e-money issuance event, a VASP service, or both — requires careful legal structuring
  • Tax complexity: cardholders generating income from crypto dispositions (e.g. selling crypto to top-up fiat balance) trigger 15% PIT obligations (hu.tax.rate-a-flat-15-personal) and operators face 9% CIT on profits (hu.tax.corporate-income-tax-cit-profits) — reporting obligations may create friction
  • MiCA transitional provisions create uncertainty — entities operating under existing VASP AML registration may need to upgrade to full CASP authorization by the MiCA deadline, with potential gaps
  • No formal statutory segregation protections for client crypto assets under current pre-MiCA law, creating counterparty risk exposure until full CASP authorization is in place (hu.aml.there-are-no-specific-explicit)

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

aml 60% confidence

VASP Registration: Under the transposition of the EU's 5th and 6th Anti-Money Laundering Directives (AMLD5/AMLD6), custodial wallet providers are classified as Virtual Asset Service Providers (VASPs).

aml 60% confidence

Obligation: VASPs, including those offering custodial services, are required to register with, or be licensed by, the Hungarian Financial Supervisory Authority (primarily the Magyar Nemzeti Bank - MNB, the Central Bank of Hungary, which oversees financial market supervision) for AML/CTF purposes.

aml 60% confidence

Act CXXXVI of 2013 on the prevention and combating of money laundering and terrorist financing (Pmtv.) – This is Hungary's primary AML law, amended to include virtual asset service providers.

aml 60% confidence

Purpose of Registration: This registration primarily obliges the entity to comply with AML/CTF requirements, such as customer due diligence (KYC), transaction monitoring, and suspicious activity reporting, rather than specific operational custody rules.

aml 60% confidence

Authorization as a CASP: Under MiCA, any entity providing "custody and administration of crypto-assets on behalf of third parties" will be classified as a Crypto-Asset Service Provider (CASP) and will require prior authorization by a national competent authority (in Hungary, this will be the MNB).

aml 60% confidence

Keep client crypto-assets and funds separate from their own crypto-assets and funds.

aml 60% confidence

Maintain records and accounts that allow for the immediate segregation of client crypto-assets and funds from own assets and from those of other clients.

aml 60% confidence

Return client crypto-assets and funds without undue delay upon their request.

aml 60% confidence

No specific, explicit statutory insurance/bonding requirements for crypto custodians beyond general business insurance that any company would hold.

aml 60% confidence

No specific, explicit mandates for the use of cold storage (offline storage of private keys) under current Hungarian law.

aml 60% confidence

There are no specific, explicit statutory rules under current Hungarian law specifically for the segregation of client crypto assets from the custodian's own assets.

stablecoin 60% confidence

Regulatory Treatment: EMTs are largely regulated as electronic money under MiCA, which builds upon the existing Electronic Money Directive (EMD2) (Directive 2009/110/EC) but with additional specific requirements for crypto-assets.

enforcement 60% confidence

Entity Targeted: Xifra Lifestyle (also known as Xifra Global, Xifra LLC). Violation Type: Unlicensed financial service provision (offering investment services related to cryptocurrency trading without the necessary MNB authorization) and operating a scheme with characteristics of a pyramid scheme. Penalty Amount: The MNB issued a public warning and a cease-and-desist order. While no specific administrative fine amount was publicly disclosed by the MNB in its initial announcement, the action effectively prohibited the entity from operating in Hungary and referred the case to law enforcement for potential criminal proceedings.

tax 20% confidence

Rate: A flat 15% Personal Income Tax (PIT) is applied to the annual positive income derived from virtual asset transactions.

tax 20% confidence

Corporate Income Tax (CIT): Profits derived from virtual asset activities are subject to the standard 9% Corporate Income Tax (CIT).

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a crypto-funded debit card program is permissible in Hungary but requires a dual authorization: (1) CASP authorization under MiCA from the MNB for the crypto custody/off-ramp, and (2) either an EMI license under Act CCXXXV of 2013 or a credit institution license for the fiat e-money/payment side, along with a BIN-sponsor arrangement and full AML/KYC compliance under the Pmtv.

Questions this verdict aims to answer

  • What e-money / payment-institution license is required?
  • How is the crypto-to-fiat conversion regulated?
  • What KYC and AML obligations apply to cardholders?
  • What partner-bank or BIN-sponsor arrangements are required?