Crypto-funded debit card in Malta
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in Malta with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Crypto debit card operators acting as VASPs/CASPs must register as subject persons under the Prevention of Money Laundering Act (Chapter 373) and PMLFTRs (transposing 5AMLD).
- Full KYC/CDD on all cardholders and customers, including beneficial ownership identification and ongoing transaction monitoring.
- Suspicious Transaction Reports (STRs) to the FIAU (Financial Intelligence Analysis Unit) for any suspicious activity.
- Record-keeping obligations for at least 5 years under PMLFTR requirements.
- Travel Rule compliance for crypto-to-fiat transfers (applicable to CASPs under MiCA Article 30 and transposed Maltese law).
- Registration as a Registered Crypto-Asset Service Provider (RCASP) with the Malta Tax and Customs Administration (MTCA) for tax reporting under forthcoming DAC8 guidelines (transposition expected by late 2025).
Key Restrictions
- Must be incorporated as a Maltese company (local entity required).
- Must obtain a Class 4 VFA Services Licence under the VFAA for the crypto-to-fiat conversion / payment processing element, or a CASP licence under the Markets in Crypto-Assets Act (Cap. 647) implementing MiCA — effectively a dual or combined licensing pathway.
- Likely also requires an Electronic Money Institution (EMI) licence under Maltese e-money law (MiFID/EMD transposed) to issue the card and hold customer fiat balances, meaning dual licensing (VFA/CASP + EMI).
- Pre-licensing consultation with MFSA required — must submit Statement of Intent confirming the operating model.
- Post-licensing conditions include having a local office and meeting governance/operational conditions before MFSA confirms commencement.
- Bill 107 (transposing MiCA Title V on CASPs) is still under deliberation — regulatory framework may shift as it passes.
- Partner-bank or BIN-sponsor arrangement is operationally necessary for card issuance (acquirer/issuer bank), but the specific regulatory requirement for such partnerships arises from the EMI/payment licence rather than crypto regulations per se.
Key Risks
- Regulatory fragmentation: The operating model straddles two frameworks (VFAA/MiCA for crypto and EMD/MiFID for e-money), creating a complex dual-licensing burden with the MFSA.
- Bill 107 is still under deliberation — the specific Maltese CASP licensing regime under MiCA Title V is not yet fully settled, creating transitional uncertainty.
- MiCA is fully enforceable as of 30 Dec 2024 (except Titles III/IV from June 2024), but national implementing legislation may layer on additional requirements — ongoing alignment risk.
- The crypto-to-fiat conversion at point of sale may be treated as a Class 4 VFA service (payment processing / exchange) by MFSA, requiring careful mapping of each function to the correct licence class.
- Tax reporting complexity: Dual RCASP registration and DAC8 compliance (expected by late 2025) adds administrative overhead.
- If the card is marketed to EU residents outside Malta, passporting and cross-border compliance become additional risks under MiCA and PSD2/EMD.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Exchanges (e.g., crypto trading platforms, OTC, brokerage): Class 4 VFA Services Licence covering reception/transmission, execution of orders, and exchange services.
Payment Processors (e.g., VA payment solutions): Class 4 VFA Services Licence for VA-to-fiat or VA transfers.
Pre-licensing Consultation: Submit Statement of Intent; confirm services, get feedback on model.
Company Setup: Incorporate Maltese company; conduct Financial Instrument Test; draft policies/business plan.
Application Submission: File form with MFSA, including Memorandum/Articles, audited statements (if applicable), proof of capital, AML/KYC policies.
Review/Due Diligence: MFSA assesses fit/properness, compliance.
Approval in Principle: Conditional license issued.
Post-Licensing/Pre-Commencement: Meet governance/operational conditions (e.g., local office); commence upon MFSA confirmation.
Virtual Financial Assets Act (VFAA), Chapter 590: https://legislation.mt/eli/cap/590/eng/pdf
VFA Rulebook (Chapter 3 on Service Providers): https://www.mfsa.mt/wp-content/uploads/VFA-Rulebook-issued-in-terms-of-VFAA-27.11.2018.pdf
MFSA Guidelines/MiCA: https://www.mfsa.mt/fintech/virtual-financial-assets/
Demonstration of ability to comply with MiCA and national implementing legislation
Compliance with transparency and disclosure obligations
MiCA (Markets in Crypto-Assets Regulation): Fully enforceable as of December 30, 2024, with Titles III and IV (covering stablecoins) effective from June 30, 2024
Act XIV of 2024: Transposes MiCA Titles III and IV into Maltese law
Markets in Crypto-Assets Act, 2024 (Cap. 647): The national implementing legislation
Virtual Financial Assets Act (VFAA), Chapter 590: https://legislation.mt/eli/cap/590/eng/pdf
Bill 107: Currently under deliberation, aimed at transposing MiCA Title V on Crypto-Asset Service Providers (CASPs)
Malta Financial Services Authority (MFSA): Supervises entities authorized under the Markets in Crypto-Assets Act (Cap. 647), including crypto-asset service providers (CASPs) and issuers offering crypto-assets to the public or seeking trading admission.
Malta Digital Innovation Authority (MDIA): Certifies Distributed Ledger Technology (DLT) platforms and ensures their credibility and governance under the MDIA Act.
Malta Tax and Customs Administration (MTCA): Handles crypto-asset tax reporting, with registration required for Registered Crypto-Asset Service Providers (RCASPs) under forthcoming DAC8 guidelines (transposition expected by late 2025).
Commissioner for Revenue: Issues guidelines on income tax treatment for crypto transactions, interpreting existing rules for DLT assets (guidelines from November 2018).
Markets in Crypto-Assets Act (Chapter 647 of the Laws of Malta): Principal legislation transposing MiCA, effective 2024; governs issuers and CASPs, with MFSA powers for licensing, penalties, and subsidiary rules.
Subsidiary: S.L. 647.01 – Markets in Crypto-Assets Act (Fees) Regulations; L.N. 295 of 2024 – User Guidelines.
Virtual Financial Assets Act (VFAA) – The foundational legislation enacted in 2018 that first regulated cryptocurrency in Malta
Markets in Crypto-Assets Regulation (MiCA) – EU-wide regulation implemented in Malta through Act XIV of 2024, which integrated Titles III and IV concerning Asset-Referenced Tokens (ARTs) and E-Money Tokens (EMTs)
Prevention of Money Laundering Act (Chapter 373, Laws of Malta) and associated PMLFTR regulations, which transpose the EU's 5th AML Directive 2015/849/EU
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — A crypto-funded debit card may operate in Malta subject to dual licensing (Class 4 VFA/CASP licence for the crypto conversion + an EMI/payment licence for card issuance), incorporation as a Maltese company, full AML/KYC obligations under PMLFTR, and pre-licensing consultation with MFSA, with the regime still partially evolving as Bill 107 (MiCA Title V transposition) is under deliberation.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?