Remote VASP serving residents in Malta
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in Malta with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Registration/licensing with MFSA as a CASP under the Markets in Crypto-Assets Act (Cap. 647) implementing MiCA
- AML/KYC policies required as part of the licensing application (Prevention of Money Laundering Act, Chapter 373)
- Ongoing AML obligations under the PMLFTR regulations transposing EU 5th AML Directive
- Submission of audited financial statements and proof of capital as part of fit/properness assessment
- DAC8 tax reporting obligations via Malta Tax and Customs Administration (MTCA) for Registered Crypto-Asset Service Providers (expected by late 2025)
- Compliance with VFA Rulebook Chapter 3 obligations on service providers
Key Restrictions
- Foreign-incorporated entity cannot serve Maltese residents cross-border — must incorporate a Maltese company as per licensing process
- Must have a local office in Malta (post-licensing/pre-commencement condition)
- Must meet governance/operational conditions and receive MFSA confirmation before commencing operations
- Must comply with MiCA (fully enforceable as of December 30, 2024) and national implementing legislation (Cap. 647)
- Pre-licensing consultation with MFSA required — submit Statement of Intent for feedback on business model
- Bill 107 (transposing MiCA Title V on CASPs) currently under deliberation — regulatory landscape still evolving
Key Risks
- Unlicensed cross-border servicing of Maltese residents carries material enforcement risk — MFSA requires licensing under Cap. 647/MiCA, and no carveout exists for foreign-incorporated remote operators
- Regulatory uncertainty due to Bill 107 still under deliberation (MiCA Title V transposition) — final CASP licensing framework may shift
- Potential for dual regulation under VFAA (Chapter 590) and Markets in Crypto-Assets Act (Cap. 647) depending on nature of services
- Tax registration requirements under DAC8 (expected late 2025 transposition) add compliance complexity for operators servicing residents
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Exchanges (e.g., crypto trading platforms, OTC, brokerage): Class 4 VFA Services Licence covering reception/transmission, execution of orders, and exchange services.
Custody Providers (e.g., safekeeping VA, crypto wallets): Class 4 VFA Services Licence, emphasizing client asset segregation and security.
Payment Processors (e.g., VA payment solutions): Class 4 VFA Services Licence for VA-to-fiat or VA transfers.
Pre-licensing Consultation: Submit Statement of Intent; confirm services, get feedback on model.
Company Setup: Incorporate Maltese company; conduct Financial Instrument Test; draft policies/business plan.
Application Submission: File form with MFSA, including Memorandum/Articles, audited statements (if applicable), proof of capital, AML/KYC policies.
Approval in Principle: Conditional license issued.
Post-Licensing/Pre-Commencement: Meet governance/operational conditions (e.g., local office); commence upon MFSA confirmation.
Virtual Financial Assets Act (VFAA), Chapter 590: https://legislation.mt/eli/cap/590/eng/pdf
VFA Rulebook (Chapter 3 on Service Providers): https://www.mfsa.mt/wp-content/uploads/VFA-Rulebook-issued-in-terms-of-VFAA-27.11.2018.pdf
MiCA (Markets in Crypto-Assets Regulation): Fully enforceable as of December 30, 2024, with Titles III and IV (covering stablecoins) effective from June 30, 2024
Act XIV of 2024: Transposes MiCA Titles III and IV into Maltese law
Markets in Crypto-Assets Act, 2024 (Cap. 647): The national implementing legislation
Bill 107: Currently under deliberation, aimed at transposing MiCA Title V on Crypto-Asset Service Providers (CASPs)
Malta Financial Services Authority (MFSA): Supervises entities authorized under the Markets in Crypto-Assets Act (Cap. 647), including crypto-asset service providers (CASPs) and issuers offering crypto-assets to the public or seeking trading admission.
Prevention of Money Laundering Act (Chapter 373, Laws of Malta) and associated PMLFTR regulations, which transpose the EU's 5th AML Directive 2015/849/EU
Virtual Financial Assets Act (VFAA) – The foundational legislation enacted in 2018 that first regulated cryptocurrency in Malta
Markets in Crypto-Assets Regulation (MiCA) – EU-wide regulation implemented in Malta through Act XIV of 2024, which integrated Titles III and IV concerning Asset-Referenced Tokens (ARTs) and E-Money Tokens (EMTs)
Markets in Crypto-Assets Act (Cap. 647): MiCA implementation (https://legislation.mt/eli/cap/647/eng).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a remote VASP cannot serve Maltese residents from abroad without a license; the operator must incorporate a Maltese company, obtain a Class 4 VFA Services Licence / CASP authorization under MiCA/Cap. 647 through a multi-stage MFSA process, maintain a local office, and comply with full AML obligations.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?