On-shore VASP in Portugal
Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.
On-shore VASP is conditionally permitted in Portugal with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Full compliance with Law No. 83/2017 (Anti-Money Laundering Law) and FATF standards is mandatory
- KYC procedures: identify and verify client identity, understand business relationships, document beneficial ownership in a Central Register
- Ongoing transaction monitoring and regular reporting to Unidade de Informação Financeira (UIF)
- Internal compliance programs including risk assessments, internal policies, and staff training
- Compliance with restrictive measures approved by the UN or EU
- Travel Rule compliance under TFR (Law No. 69/2025 and Law No. 70/2025): collect, retain, and share originator/beneficiary data for unique transfer identification
- For self-hosted wallet transactions ≥ EUR 1,000, CASPs must request proof of ownership/control (per TFR Chapter III, Section 1, Article 1(5))
- Enhanced due diligence measures for self-hosted wallets
- Data verification, recordkeeping, security measures, and alignment with TFR for AML/CFT
- Annual IRS declaration of crypto assets (mandatory since February 2024 law)
- Tax reporting: short-term gains (<365 days) taxed at 28% flat (or progressive rates up to 53%); long-term gains (>365 days) tax-exempt but must still be reported
- Passive income (staking, lending, airdrops, DeFi yields) taxed at 28% flat regardless of holding period
- Professional trading/mining/business-scale activities taxed as business income at progressive rates 14.5%-53%
Key Restrictions
- Must be locally incorporated as a VASP and registered with Banco de Portugal (BdP) for AML supervision
- By July 1, 2026, must transition from VASP registration to full MiCA authorization as a CASP under BdP supervision
- Short-term crypto gains (<365 days) subject to 28% tax; long-term gains (>365 days) tax-exempt (unless involving securities or blacklisted jurisdictions)
- Crypto-to-crypto swaps are non-taxable — gains deferred until fiat conversion
- 35% tax rate applies for assets from blacklisted jurisdictions; no exemption if crypto treated as a security
- Professional/mining operations taxed as business income at progressive rates up to 53% with social security obligations
Key Risks
- MiCA transition deadline (July 1, 2026): VASPs not fully authorized by this date may lose operating capacity
- Tax authority (AT) enforcement risk on unreported crypto gains — mandatory annual declaration since 2024
- Regulatory ambiguity on classification of certain crypto-assets as financial instruments by CMVM
- GDPR and TFR data-sharing challenges for Travel Rule compliance
- Enforcement precedent exists: Eurojoint operations targeting crypto fraud (>€100M schemes) show active cross-border enforcement
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Exchange of cryptocurrency for fiat currency and vice versa
Custodial services (storage of crypto-assets and encrypted keys)
Execution of orders on behalf of clients
Crypto-asset advisory and portfolio management services
Reception and transmission of orders
ICO/IEO and stablecoin issuance and maintenance
Full compliance with Law No. 83/2017 (Anti-Money Laundering Law) and FATF standards is mandatory
KYC procedures: Identify and verify client identity, understand the nature of business relationships, and document beneficial ownership information in a Central Register
Ongoing transaction monitoring and regular reporting to Unidade de Informação Financeira (UIF)
Internal compliance programs including risk assessments, internal policies, and staff training
Compliance with restrictive measures approved by the UN or EU
Banco de Portugal (BdP, Bank of Portugal): Registers virtual asset service providers (VASPs) and supervises AML/CFT compliance; handles MiCA authorization applications for crypto-asset service providers (CASPs) starting July 2026.
Comissão do Mercado de Valores Mobiliários (CMVM, Portuguese Securities Market Commission): Determines if crypto-assets qualify as financial instruments; shares MiCA supervision with BdP.
Autoridade Tributária e Aduaneira (AT, Portuguese Tax and Customs Authority): Enforces crypto taxation, including reporting requirements.
Law No. 69/2025 (December 2025): Incorporates MiCA and Transfer of Funds Regulation (TFR) into national law; treats CASPs as financial entities under AML rules; effective July 2026.
Law No. 70/2025 (January 2026): Further implements TFR alongside MiCA.
Portuguese AML Law: Governs VASP registration; VASPs registered by December 30, 2024, can operate under transitional MiCA rules until June 30, 2026.
February 2024 bill: Mandates annual IRS declaration of crypto assets.
CASPs must collect, retain, and share Travel Rule data (e.g., originator/beneficiary details for unique transfer identification) for transparency in transfers.
Enhanced measures for self-hosted wallets when a regulated entity is involved: data collection/retention by originating CASP, plus verification for ≥EUR 1,000.
For transactions involving self-hosted wallets, CASPs must request proof of ownership/control for amounts of EUR 1,000 or more (per TFR Chapter III, Section 1, Article 1(5)).
Requirements include data verification, recordkeeping, security measures, and alignment with TFR for AML/CFT (e.g., immediate/secure sharing).
Short-term (<365 days): 28% flat rate; aggregation possible for progressive IRS brackets (14.5%-53% for 2026), mandatory if total income exceeds top bracket.
Long-term (>365 days): Exempt from tax, but transactions must still be reported.
Crypto-to-crypto swaps are non-taxable, deferring gains until fiat conversion.
Exceptions: 35% rate for blacklisted jurisdiction assets; no exemption if treated as securities.
Covers passive income like staking rewards, lending yields, airdrops, or DeFi yields: taxed at 28% flat rate regardless of holding period (aggregation option to progressive rates up to 53%).
Professional trading, mining, or business-scale activities taxed as business income (Category B) at progressive rates 14.5%-53%.
Crypto holdings and gains must be declared annually in the IRS tax return (Modelo 3), mandatory since February 2024 law.
February 2024 Bill: Mandates crypto declaration in IRS (https://imin-portugal.com/blog/portugal-crypto-taxes/).
September 2025: Eurojust coordinated an operation halting a cryptocurrency investment fraud exceeding 100 million euros across Europe, resulting in five arrests including the alleged main perpetrator.
May 2024: A coordinated operation uncovered a cryptocurrency scam using "rip deals" methods, leading to suspect arrests in France, with investigations involving Portugal, Germany, Italy, and Romania.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — an on-shore VASP in Portugal must be locally incorporated, register with Banco de Portugal for AML supervision, and by July 1, 2026 transition to full MiCA authorization as a CASP, while complying with Law No. 83/2017 AML obligations, TFR Travel Rule requirements, and Portugal's 28% tax on short-term crypto gains.
Questions this verdict aims to answer
- What license(s) are required to operate locally?
- What capital, governance, and reporting obligations apply?
- What is the application process and timeline?