Crypto-funded debit card in Slovakia
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in Slovakia with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Customer due diligence (CDD) under Act No. 297/2008 Coll. (AML Act) — identify and verify identity (natural persons: full name, DOB, address, nationality, ID document; legal entities: company name, registered address, registration number, directors/management).
- Ultimate Beneficial Owner (UBO) identification — identify natural persons holding 25%+ shares/voting rights or otherwise exercising control.
- Ongoing transaction monitoring — continuously scrutinize transactions throughout the business relationship to ensure consistency with customer profile and risk.
- Source of Funds (SoF) and Source of Wealth (SoW) measures required for high-risk relationships or transactions.
- Suspicious Activity Reporting (SAR) — must report any transaction, attempted transaction, or activity where funds are suspected to be proceeds of crime or linked to terrorist financing, submitted promptly (immediately) once suspicion arises.
- PEP screening — customers who are or have been entrusted with prominent public functions, their family members or close associates must be flagged.
- Enhanced due diligence for high-risk jurisdictions (FATF-listed or EU-listed), complex or unusually large transactions, non-face-to-face business relationships, and new/developing technologies including virtual assets.
- VASPs (including custodian wallet providers and virtual currency exchange services) are 'obliged entities' under the AML Act and must implement internal risk management systems.
- Under MiCA (from December 30, 2024), CASP authorization will be required for custody and administration of crypto-assets, with additional organizational, operational, and prudential requirements including strict segregation of client assets via a client agreement specifying duties and ownership rights.
Key Restrictions
- A crypto debit card program involves both a payment/emoney component (requiring either an e-money institution license under Directive 2009/110/EC, or a partnership with a licensed EMI/bank) and a crypto custody/exchange component (currently AML registration as an obliged entity; from Dec 30, 2024, mandatory CASP authorization by NBS under MiCA).
- Crypto-to-fiat conversion at point of sale or top-up is a regulated virtual currency exchange service under the AML Act (Act No. 297/2008 Coll.) and must be conducted by an obliged entity registered with the FIU.
- From Dec 30, 2024, any entity providing custody and administration of crypto-assets must be authorized as a CASP by NBS under MiCA Title V, with passporting rights across the EU.
- Issuance of e-money tokens (EMTs) to fund card balances falls under MiCA Titles III/IV — only authorized credit institutions or e-money institutions under Directive 2009/110/EC may issue EMTs; a de minimis exemption exists for average outstanding amounts ≤ €5,000,000 over 12 months.
- MiCA strict segregation mandate for custody: CASPs must enter into a client agreement specifying duties and client ownership rights, and hold client crypto-assets separately from their own.
- No current Slovak law explicitly defines a 'qualified custodian' for crypto; no cold-storage mandate or insurance/bonding requirements exist under current law, but MiCA will impose prudential and safeguarding requirements.
Key Risks
- Regulatory fragmentation: crypto debit cards sit at the intersection of payments (e-money licensing), crypto custody/exchange (AML/CASP), and potentially investment services — each with different supervisors (NBS for financial services, FIU for AML).
- MiCA transitional uncertainty: between now and Dec 30, 2024, the licensing framework is thin (AML registration only); from Dec 30, 2024, full CASP authorization is mandatory — operators may need to re-authorize mid-operation.
- NBS has issued multiple public warnings about unlicensed crypto and financial services (e.g., Sept 2023 warning on services without NBS authorization, May 2022 general crypto risk warning), indicating active enforcement attention.
- Criminal enforcement by NAKA (National Criminal Agency) has resulted in asset seizures of ~€15 million in crypto-related financial crime cases, demonstrating real enforcement risk for non-compliant operators.
- Tax complexity: crypto-to-fiat conversion events trigger taxable events (subject to 19%/25% income tax), and cardholder tax reporting burdens may create friction; the €2,400 annual exemption applies only to assets held >1 year.
- Partner-bank/BIN-sponsor dependency: the model likely requires a licensed EMI or bank partner for issuing the card and handling fiat settlement — such partnerships add compliance and contractual risk.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Registration, not a dedicated license: Currently, there isn't a specific "crypto custody license" in the traditional financial sense. However, entities providing services related to virtual assets, including custodian wallet providers, are considered "obliged entities" under Slovak AML law.
AML Obligations: This means they must comply with AML/CFT requirements, such as customer due diligence (CDD), transaction monitoring, suspicious activity reporting (SARs), and implementing internal risk management systems.
National Legislation: These obligations stem from Act No. 297/2008 Coll. on measures against the legalization of proceeds of crime and the financing of terrorism (Zákon č. 297/2008 Z. z. o ochrane pred legalizáciou príjmov z trestnej činnosti a o ochrane pred financovaním terorizmu). This Act has been amended multiple times to transpose the 4th, 5th, and 6th EU AML Directives.
Competent Authorities: For AML purposes, the Financial Intelligence Unit (FIU) within the Ministry of Interior is key, but the National Bank of Slovakia (Národná banka Slovenska - NBS) supervises financial institutions, which could include certain crypto-related activities if deemed financial services.
Mandatory Authorization: Under MiCA (Title V), any entity providing "custody and administration of crypto-assets on behalf of clients" (Article 68) will be considered a Crypto-Asset Service Provider (CASP) and will need to be authorized by the national competent authority. In Slovakia, this will most likely be the National Bank of Slovakia (NBS).
Application Process: CASPs will need to apply for authorization, demonstrating compliance with various organizational, operational, and prudential requirements.
Strict Segregation Mandate: MiCA explicitly requires CASPs providing custody services to:
"Enter into a client agreement to specify their duties and responsibilities, and to ensure that clients’ rights are clearly established, including those relating to the ownership of the crypto-assets." (Article 68(2)(b))
None specific to crypto custody: There are no national insurance or bonding mandates specifically for crypto custody providers under current Slovak law.
Not explicitly defined for crypto: The concept of a "qualified custodian" as a specifically regulated entity for crypto assets does not exist under current Slovak law. Entities performing custody are primarily defined by their AML obligations.
All other titles, including those related to CASPs and custody, will apply from December 30, 2024.
Act No. 297/2008 Coll. on Protection Against Legalisation of Proceeds of Crime and Against Financing of Terrorism (AML Act): This is the primary legislation in Slovakia governing AML/CFT. It has been amended multiple times, most notably by Act No. 397/2019 Coll., which transposed the 5AMLD and extended its scope to virtual assets and VASPs.
Virtual currency exchange services: Providers exchanging virtual currencies for fiat currencies, or vice versa, or between one or more forms of virtual assets.
Custodian wallet providers: Entities that provide services to safeguard private cryptographic keys on behalf of their customers, to hold, store, and transfer virtual assets.
Identification of the Customer and Verification of Identity:
Identification of the Ultimate Beneficial Owner (UBO):
Understanding the Purpose and Nature of the Business Relationship/Transaction:
Continuously scrutinize transactions throughout the course of the business relationship to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile.
Politically Exposed Persons (PEPs): Customers who are or have been entrusted with prominent public functions, their family members, or close associates.
High-risk jurisdictions: Customers or transactions involving countries identified as having strategic AML/CFT deficiencies by FATF or the European Commission.
Complex or unusually large transactions: Or transactions with an unusual pattern, without an apparent economic or lawful purpose.
Non-face-to-face business relationships: Where there is no physical meeting with the customer.
Source of Funds (SoF) and Source of Wealth (SoW): VASPs must take reasonable measures to establish the source of funds and wealth involved in high-risk relationships or transactions.
Obligation to Report: Any transaction, attempted transaction, or activity where the VASP suspects or has reasonable grounds to suspect that funds are proceeds of criminal activity or are linked to terrorist financing.
Timing: Reports must be submitted promptly, usually immediately, once a suspicion arises.
Titles III (asset-referenced tokens) and IV (e-money tokens) and certain related provisions entered into force on 30 June 2024.
The remaining provisions (including those for other crypto-assets and crypto-asset service providers) will apply from 30 December 2024.
Definition (MiCA Article 3(1)(4)): "a type of crypto-asset that purports to maintain a stable value by referencing the value of one official currency."
Only authorized credit institutions or e-money institutions (EMI) authorized under the E-money Directive (2009/110/EC) can issue EMTs.
De Minimis Exemption: There is a limited exemption for EMTs where the average outstanding amount does not exceed €5,000,000 over a 12-month period, but a white paper is still required.
Regulator Name: National Bank of Slovakia (Národná banka Slovenska - NBS).
September 2023: Warning about financial services without NBS authorization.
May 2022: General warning regarding cryptocurrency risks.
Regulator Name: National Criminal Agency (NAKA) – specifically the National Unit for Combating Financial Crime.
Seizure of assets: During the operation, authorities seized financial assets, movable property, and real estate worth approximately €15 million. This includes accounts, cryptocurrencies, and other assets believed to be proceeds of crime.
Taxable Event: The taxable event typically occurs when virtual assets are:
Exchanged for fiat currency (EUR).
Exemption Threshold for Small Sales (Effective Jan 1, 2024):
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a crypto-funded debit card program can operate in Slovakia, but requires: (1) current AML registration as an obliged entity under Act No. 297/2008 Coll.; (2) either an e-money institution license or partnership with a licensed EMI/bank for the card/fiat side; (3) MiCA CASP authorization from NBS by Dec 30, 2024 for the custody/exchange components; and (4) compliance with Slovakia's comprehensive KYC/AML obligations including CDD, UBO identification, transaction monitoring, and SAR reporting to the FIU.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?