Bitcoin & Cryptocurrency Regulation in Cyprus

Yes. Buying, holding, selling and using Bitcoin and other cryptocurrencies is legal in Cyprus. There is no law banning private individuals from owning or trading crypto-assets, and Cyprus has not attempted to prohibit cryptocurrencies.

It is important to separate legal from legal tender. Crypto is legal to use, but it is not official money. The euro is the only legal tender in Cyprus, and no merchant is obliged to accept Bitcoin. Some businesses accept crypto voluntarily, but that is a commercial choice, not a right. The Central Bank of Cyprus has repeatedly stressed that virtual currencies are not legal tender and carry no state guarantee.

The activity that is regulated is the provision of crypto services to others, such as running an exchange, custody wallet or brokerage. Those businesses must be authorised. Personal use sits outside that licensing net, although it still carries tax and anti-money-laundering obligations when you interact with regulated providers.

The Cyprus Securities and Exchange Commission (CySEC) is the competent authority for crypto-asset services in Cyprus. It is both the MiCA authorisation authority for Crypto-Asset Service Providers (CASPs) and the anti-money-laundering and counter-terrorist-financing supervisor for crypto activity carried out in or from Cyprus. CySEC maintains the register of authorised firms and supervises their conduct.

The Central Bank of Cyprus (CBC) is the monetary authority. It does not license retail crypto exchanges, but it issues public warnings about crypto risks, oversees payment and banking matters, and has a role in matters touching on stablecoins and monetary stability under the EU framework.

At EU level, the European Securities and Markets Authority (ESMA) and the European Banking Authority develop the technical standards that sit under MiCA. The single most reliable thing a consumer can do is to check a provider's status directly on the official CySEC register rather than relying on the firm's own marketing. See CySEC and the Central Bank of Cyprus.

Cyprus regulation now operates on two layers: the EU rulebook and national supervision.

MiCA: the EU framework

The EU's Markets in Crypto-Assets Regulation, Regulation (EU) 2023/1114 (MiCA), applies directly across all member states, including Cyprus. It creates a single authorisation regime for CASPs such as exchanges, custodians and brokers, sets specific rules for issuers of asset-referenced tokens and e-money tokens (stablecoins), and imposes disclosure requirements for token offerings. A firm authorised under MiCA in one EU state can passport its services across the bloc. You can read about it on the ESMA MiCA page.

National AML law

Before MiCA, crypto businesses registered under Cyprus's national regime. That regime was built on the Prevention and Suppression of Money Laundering Activities Law, Law 188(I)/2007, as amended (notably by Law 13(I)/2021, transposing the EU's 5th Anti-Money-Laundering Directive, and Law 98(I)/2023). Under that law CySEC issued a CASP registration directive in 2021. This national registration framework is being phased out in favour of MiCA authorisation during 2026.

Any business providing crypto-asset services in or from Cyprus must be authorised. The framework is now MiCA, replacing the older national CASP registration.

The 2026 transition deadline

CySEC confirmed that crypto firms that were operating under Cyprus's national rules had to apply for MiCA authorisation by 27 February 2026. Firms that applied in time may continue providing services under the prior national regime only until their application is decided, or until the transitional regime ends on 1 July 2026, whichever comes first. Providers that did not apply must submit a wind-down plan, because providing crypto-asset services from a Cyprus base will not be permitted after the transitional period.

This is the single most important regulatory development for anyone using a Cyprus-based platform in 2026. Confirm that any provider you use has applied for or obtained MiCA authorisation, and verify it on the CySEC register rather than taking the firm's word for it.

What authorisation involves

MiCA authorisation requires fit-and-proper management, minimum capital and own-funds requirements scaled to the services offered, and robust governance, custody and AML controls. The detailed thresholds are set in MiCA and CySEC's implementing rules, so prospective applicants should take Cyprus-licensed legal advice.

For most of the past decade Cyprus had no specific crypto tax legislation. Gains were assessed under general income-tax principles, and because Cyprus does not levy capital-gains tax on most non-property assets (capital-gains tax is generally confined to gains from immovable property located in Cyprus), the treatment of crypto was often ambiguous.

This changed with the 2026 tax reform. Multiple professional and legal summaries report that Cyprus inserted a dedicated crypto provision into the Income Tax Law (commonly cited as Article 20E), introducing a flat 8% tax on profits from the disposal of crypto-assets, effective 1 January 2026, applying to both individuals and companies subject to Cyprus income tax. Reported features include: disposal covers selling crypto for fiat, crypto-to-crypto exchanges, using crypto to pay for goods or services, and gifts or transfers without consideration; taxable profit is generally proceeds minus acquisition cost and directly related expenses; the 8% gains are reported as ring-fenced from the progressive income-tax base; and crypto obtained through mining is excluded from the 8% regime and taxed under general income-tax rules.

Because the precise statutory text, definitions and any reliefs can be interpreted differently and may be refined, this guide does not present these details as beyond question. Confirm the current rules and the exact rate, scope and effective date with the Cyprus Tax Department before filing. Regardless of the headline rate, you must keep detailed records of every acquisition and disposal (dates, euro values, fees and counterparties) and self-assess and declare crypto income. See our general crypto tax guide for context.

Anti-money-laundering (AML) and Know-Your-Customer (KYC) obligations are central to crypto in Cyprus and apply at the level of regulated providers, not individual holders.

• CASPs are obliged entities. Authorised and registered crypto firms must perform customer due diligence, verify identity, monitor transactions, and report suspicious activity to the authorities. CySEC supervises this under the national AML law (Law 188(I)/2007 as amended) and under MiCA.
• Identity checks are mandatory. Expect to provide government ID and often proof of address before you can trade, withdraw, or use a crypto ATM above modest limits. Anonymous high-value accounts are not permitted at regulated venues.
• The travel rule applies. The EU's transfer-of-funds rules require that sender and recipient information accompanies many crypto transfers between regulated providers, mirroring the standards for traditional wires.

These obligations are now a permanent feature of using regulated crypto services in Cyprus and across the EU.

Residents can buy crypto through international exchanges that serve EU customers and through providers authorised to operate in Cyprus. Practical points to keep in mind:

• Use authorised providers. Favour platforms that are MiCA-authorised or that applied within the transition window. This gives clearer consumer protections and lower counterparty risk. Verify status with CySEC.
• Expect KYC. Identity verification is required before you can trade or withdraw at regulated venues.
• Funding is straightforward. Cyprus is in the eurozone and the SEPA area, so euro bank transfers and cards are the usual on-ramps. There are no general capital or foreign-exchange controls today (the emergency controls imposed during the 2013 banking crisis were fully lifted in 2015).
• Banks vary. Some Cypriot banks are cautious about crypto-related transfers and may query or delay them. Using a well-known regulated exchange and being able to explain your source of funds reduces friction.
• Bitcoin ATMs. A small number of Bitcoin ATMs have operated in cities such as Nicosia, Limassol and Paphos. They allow cash purchases (and sometimes sales) but charge high fees and apply KYC above modest thresholds. Availability changes, so check a live locator first.

For larger amounts a regulated exchange is almost always cheaper and safer than an ATM, and you should never keep more on an exchange than you need for active trading.

Bitcoin mining is not prohibited in Cyprus, but it is not a natural fit for the island. The dominant constraint is electricity: Cyprus has historically had some of the highest power prices in the EU, and proof-of-work mining is extremely energy-intensive. A hot Mediterranean climate adds cooling costs, so large-scale mining is rarely competitive against operations in regions with cheap or renewable power.

On the regulatory side, mining itself is not licensed in the way that running an exchange is. For tax, reported summaries of the 2026 reform indicate that crypto obtained through mining is excluded from the flat 8% disposal regime and is instead taxed under general income-tax rules, so mining rewards are taxable. Anyone mining commercially should also consider business registration, electricity-tariff terms and EU energy-efficiency expectations, and should confirm the tax treatment with the Cyprus Tax Department.

Two developments dominate the current picture:

• MiCA transition. CySEC set 27 February 2026 as the deadline for existing crypto firms to apply for MiCA authorisation, with the national transitional regime ending on 1 July 2026. After that point, only firms holding a CySEC-issued MiCA authorisation may provide crypto-asset services from Cyprus.
• Dedicated crypto tax. Cyprus introduced a flat 8% tax on profits from disposing of crypto-assets, reported as effective from 1 January 2026, the first time crypto has had its own provision in the Income Tax Law. Mining income is reported as taxed separately under general rules.

The Central Bank of Cyprus has also continued to issue investor-caution statements, including warnings in early 2025 highlighting volatility, fraud and the absence of investor protection for unregulated crypto activity. The overall direction of travel is toward more structure: clearer authorisation, clearer tax, and clearer obligations, alongside ongoing official warnings about risk.

Key risks. Crypto is a high-volatility, high-risk asset class that can lose value rapidly. It is not covered by deposit-guarantee or investor-compensation schemes the way bank deposits are. Common dangers include scams, fake exchanges and impersonation fraud, loss of funds through mismanaged private keys, and regulatory or tax change. Because Cyprus's crypto rules are mid-transition in 2026, a provider you use today could be required to wind down if it fails to obtain MiCA authorisation.

What protection exists. MiCA brings conduct, disclosure, custody and governance standards that improve provider accountability, and CySEC supervises authorised firms. The Central Bank of Cyprus has publicly urged caution on crypto investments, noting the risk of substantial losses and fraud and the lack of guarantees for unregulated activity. Practical protection is largely in your hands: use clearly authorised firms, treat any allocation as money you can afford to lose, diversify, avoid leverage and any scheme promising guaranteed returns, and secure your own keys for anything beyond small active-trading amounts.

Because crypto rules in Cyprus are changing quickly, verify the current position with the primary authorities rather than relying on summaries (including this one):

• Regulator and provider register: Cyprus Securities and Exchange Commission (CySEC), including its crypto-asset service providers page. Check that any platform you use is authorised before depositing funds.
• Monetary authority and risk warnings: Central Bank of Cyprus.
• EU framework: the ESMA MiCA page for the EU-wide rulebook.
• Tax: the Cyprus Tax Department for the current treatment of crypto gains, mining and reporting.

For more general background, see our crypto regulation guide and our country regulation hub. This article is general information as of 2026 and is not legal, tax or financial advice; always confirm with the named official regulators and a qualified Cyprus-licensed professional before acting.

Is cryptocurrency legal in Cyprus?

Who regulates crypto in Cyprus?

How is crypto taxed in Cyprus in 2026?

What is the MiCA deadline for crypto firms in Cyprus?

Do I need to do identity verification (KYC) to use crypto in Cyprus?

Is my crypto protected if a Cyprus exchange fails?