Malta -- Custody Regulations Regulatory Overview

Malta's cryptocurrency/digital asset custody regulations primarily stem from the pre-MiCA Virtual Financial Assets Act (VFAA) of 2018 and its rules, administered by the Malta Financial Services Authority (MFSA), but are transitioning to the EU's Markets in Crypto-Assets Regulation (MiCA) via Act XIV of 2024 and the Markets in Crypto-Assets Act (Cap. 647), requiring Crypto-Asset Service Providers (CASPs) to obtain authorization for custody services.[1][4][5][6][8]

Custodial License Requirements

CASPs providing custody and administration of crypto-assets (including safeguarding and administering crypto-assets on behalf of clients) must obtain MFSA authorization under MiCA Article 75, replacing prior VFA licenses; pre-MiCA, VFAA-licensed custodians (e.g., for virtual asset services like wallets) were regulated via the VFA Rulebook.[1][4][5][6][8] The MFSA oversees licensing for VFA agents, including custodians, with a registration process for whitepapers and compliance with administrative procedures.[4][5][7]

Segregation of Client Assets Rules

VFAA rules mandate asset segregation and custody, requiring client assets to be held separately from the custodian's own assets; MiCA reinforces this for staking-as-a-service and custody, ensuring protections like liability for losses and client consent for activities impacting accessibility.[1][4]

Insurance/Bonding Requirements

Search results do not specify explicit insurance or bonding mandates for crypto custodians under VFAA or MiCA in Malta; general financial services rules under MFSA may apply indirectly, but no direct references were found.[1-8]

Cold Storage Mandates

No explicit mandates for cold storage (offline storage) of client assets appear in the provided sources for Malta's VFAA or MiCA transposition.[1-8]

Qualified Custodian Definitions

Qualified custodians are not explicitly defined in sources; however, VFAA and MiCA regulate "custodians" as VFA/CASP service providers authorized by MFSA to safeguard and administer virtual financial assets/crypto-assets, akin to wallet providers or brokers handling client assets.[4][5][6]

Pending Custody Legislation

No specific pending custody bills are noted; Malta completed MiCA transposition for stablecoins (ARTs/EMTs) via Act XIV of 2024, with full CASP rollout (including custody) under MiCA ongoing—existing VFA holders must transition to CASP licenses; minor VFA Rules alignments with MiCA occurred by 2023.[1][6][8] VFAA remains primary for non-MiCA assets until full EU harmonization.[5][7]

Key laws include:

• Virtual Financial Assets Act (VFAA), 2018: Core pre-MiCA framework (https://legislation.mt/eli/cap/647/eng – note: linked to Markets in Crypto-Assets Act).[4][5][8]
• Virtual Financial Assets Regulations and VFA Rulebook: Detail custody/segregation (MFSA-issued).[4][5][7]
• Markets in Crypto-Assets Act (Cap. 647): MiCA implementation (https://legislation.mt/eli/cap/647/eng).[1][8]
• Act XIV of 2024: Stablecoin titles (ARTs/EMTs).[1]

MFSA site for VFA framework: https://www.mfsa.mt/our-work/virtual-financial-assets/.[7] For latest, consult MFSA directly as MiCA evolves.[1][6]