Bitcoin & Cryptocurrency Regulation in Portugal

• Legal: Legal to own and trade, not legal tender; MiCA applies
• Tax: Gains under 365 days taxed near 28%, over one year broadly exempt; staking taxed
• Buying: Via EU-authorised CASPs, often passported in, funded by SEPA, after KYC

Portugal spent years with a reputation as one of Europe's most crypto-friendly countries, helped by a tax regime that left most individual gains untouched and by an active startup scene. That picture has matured. The European Union's Markets in Crypto-Assets Regulation (MiCA) is now in force across the bloc, and Portugal transposed it into national law at the end of 2025. The country has moved from a light-touch, anti-money-laundering-only approach toward a comprehensive licensing and supervision framework run jointly by the central bank and the securities regulator.

This page explains where things stand for 2026: whether Bitcoin and crypto are legal in Portugal, who regulates the sector, the key laws and frameworks, how exchanges are licensed, how crypto is taxed, the anti-money-laundering rules, what buying and using crypto looks like in practice, mining, recent developments, consumer risks, and how to verify everything against official sources. For broader context see our crypto regulation guide and our crypto taxes overview.

This is general information current as of 2026 and is not legal, tax, or financial advice. Crypto rules and tax treatment change frequently and depend on your personal circumstances. Always confirm the current position with the Banco de Portugal, the CMVM, or the Autoridade Tributaria before acting.

Yes. Owning, buying, selling, holding, and transferring Bitcoin and other crypto-assets is legal for individuals and businesses in Portugal. There is no ban, and the country has long been viewed as one of the friendlier jurisdictions in Europe for crypto users and startups.

Crypto is not legal tender in Portugal. The euro is the only official currency, so no merchant is obliged to accept Bitcoin, although some choose to. What has changed is that the activity is no longer lightly regulated: as an EU member state, Portugal applies MiCA, the EU-wide framework that governs how crypto-assets are issued and how the firms that provide crypto services operate. Holding and using crypto remains legal, but the companies that serve you must increasingly be authorised and supervised.

Portugal uses a "twin peaks" model that splits supervision between two national competent authorities:

• Banco de Portugal (BdP), the central bank and prudential authority. It supervises asset-referenced tokens and e-money tokens (the MiCA categories that include most stablecoins), authorises crypto-asset service providers (CASPs), and oversees prudential requirements, governance, outsourcing, and the orderly wind-down of providers.
• CMVM (Comissao do Mercado de Valores Mobiliarios), the securities market commission. It supervises the public offering and admission to trading of crypto-assets other than stablecoins, market-abuse rules, and the conduct-of-business and investor-protection obligations that CASPs owe their clients.

Any entity wishing to provide crypto-asset services in Portugal must apply for authorisation from the Banco de Portugal, which notifies the CMVM whenever an application is submitted. The two authorities are required to cooperate. You can verify each authority's remit on the official Banco de Portugal site and the official CMVM site (linked in the official-sources section below).

Portugal's crypto rulebook now sits largely within the EU framework, complemented by national implementing legislation:

• MiCA, Regulation (EU) 2023/1114, the directly applicable EU regulation governing crypto-asset markets, issuers, and service providers.
• The Transfer of Funds Regulation, Regulation (EU) 2023/1113, often called the "travel rule," which extends anti-money-laundering tracing requirements to crypto transfers.
• Law No. 69/2025 (dated 1 December 2025, published 22 December 2025), the national law that implements MiCA in Portugal and assigns competence to the Banco de Portugal and the CMVM.
• Law No. 70/2025 (also late 2025), which gives national effect to the travel rule and revises Portugal's anti-money-laundering law.
• Law No. 83/2017 (of 18 August, as amended), Portugal's long-standing anti-money-laundering and counter-terrorist-financing law, under which crypto firms were originally registered and which continues to apply.

Because exact provisions and effective dates can be technical, providers and investors should read the original texts and confirm details with the regulators rather than relying on summaries.

Before MiCA, firms offering crypto services in Portugal had to register with the Banco de Portugal for anti-money-laundering purposes under Law No. 83/2017. Under MiCA, that registration is being replaced by a full CASP authorisation, which carries broader prudential, governance, and conduct requirements.

A key transitional rule applies. Entities that were already registered with the Banco de Portugal as of 30 December 2024 and had genuinely started and duly notified their activity may continue operating under the older regime until 1 July 2026, or until their MiCA authorisation is granted or refused, whichever comes first. Reporting also describes a related filing window: firms on the register had to lodge a CASP authorisation application during the period that ran from 30 December 2024 to 30 December 2025, and those that did not file by the end of that window lost the right to keep operating without a granted authorisation. After the transitional window closes, a firm without MiCA authorisation must stop providing services. Reporting in late 2025 indicated that around ten VASPs were supervised by the Banco de Portugal and that none had yet completed MiCA authorisation, so the picture is still evolving.

A major practical feature of MiCA is the EU "passport": a CASP authorised in one member state can offer services across the bloc. As a result, many platforms serving Portuguese users are authorised elsewhere in the EU rather than in Portugal. Always check a provider's stated authorisation status and home regulator. See also our country regulation hub for how other EU states apply the same framework.

Portugal overhauled its crypto tax regime in 2023, and the core rules remain in place for 2026. The points below describe the general treatment for individual tax residents, but outcomes are highly fact-specific. Do not rely on these figures: verify your situation with the Autoridade Tributaria or a Portuguese tax adviser.

• Holding period matters. Gains on crypto-assets held for less than 365 days are generally treated as taxable capital gains. Gains on assets held for more than one year are, broadly, exempt from personal capital-gains tax, subject to exceptions (for example, assets that qualify as securities, or income linked to non-cooperative jurisdictions).
• Short-term gains are commonly taxed at a flat capital-gains rate widely cited at 28%, with an option in some cases to aggregate the income at progressive rates instead. Income from a tax haven can face a higher rate (commonly cited at 35%).
• Crypto-to-crypto swaps are generally not treated as a taxable event at the moment of the trade; the original acquisition cost carries over and tax is typically deferred until you convert to fiat or spend the asset.
• Staking rewards and similar passive income are generally treated as investment income (category E capital income) and taxed at a flat rate widely cited at 28%, regardless of holding period. Mining, validation, and token issuance carried out as a professional or business activity are instead generally treated as category B business or professional income and may be taxed at progressive rates.
• Reporting still applies. Tax-free does not mean no reporting. Residents must declare relevant crypto activity in the annual IRS return (Modelo 3), even when long-term gains are exempt. Reporting cited for 2026 uses Anexo G, Quadro 18A for disposals of assets held under 365 days (taxed at 28%), Anexo G1 for long-term disposals that are exempt, and Anexo E for staking and similar capital income. The filing window generally runs from 1 April to 30 June of the following year.

The old "crypto is tax-free in Portugal" shorthand is outdated and was always an oversimplification. Treatment now depends on holding period, the type of activity, and your residency status. See our crypto taxes guide for general background, and confirm specifics with the tax authority.

Anti-money-laundering and counter-terrorist-financing rules are central to how crypto is regulated in Portugal. Under Law No. 83/2017 (as amended) and now the MiCA-era framework, crypto-asset service providers must comply with obligations that include risk management, transaction monitoring, customer identification (Know Your Customer, or KYC), customer due diligence, record-keeping, and the appointment of a money-laundering reporting officer.

With Law No. 70/2025, Portugal gave national effect to the EU travel rule (Regulation (EU) 2023/1113). In practice this means regulated providers must collect, transmit, screen, and retain information about the originator and the beneficiary of crypto transfers, aligning the regime with EU standards and FATF recommendations. For you as a user, expect identity verification when opening an account and additional information requirements when sending or receiving crypto through regulated platforms. Anonymous large-scale activity through regulated venues is not realistic.

Residents of Portugal can buy crypto through major EU-authorised exchanges, broker apps, and peer-to-peer platforms. Under MiCA, providers operating in or into Portugal must be authorised as CASPs or, during the transition, hold valid prior registration while moving toward a licence. Many platforms serving Portuguese users are authorised elsewhere in the EU and passport their licence into Portugal.

What to expect when opening an account and transacting:

• Identity verification (KYC). You will provide government ID and usually proof of address.
• Funding. Euro deposits via SEPA bank transfer, debit or credit card, and instant-payment methods are common. Bank transfers are typically cheaper than cards.
• Travel rule. When you send or receive crypto through regulated providers, sender and recipient information may be collected and shared.
• Self-custody. Holding your own keys remains legal and is common for longer-term holders, but it shifts full responsibility for security onto you.
• Spending crypto. Using crypto to pay for goods or services can have tax and invoicing consequences, especially if it forms part of a business activity. Keep clear records of dates, amounts, and cost basis.

Favour providers that clearly state their EU authorisation status, charge transparent fees, and offer strong account security such as two-factor authentication.

Bitcoin mining is legal in Portugal, and there is no dedicated ban on proof-of-work mining. There is also no special carve-out that makes mining unusually cheap or easy; the main constraints are economic and regulatory rather than prohibitive:

• Electricity cost and supply. Mining profitability is driven by power prices. Portugal has a growing share of renewable generation, which can be attractive, but retail and industrial electricity costs and grid-connection rules must be assessed carefully for any sizeable operation.
• Tax treatment. Income from mining is generally treated as business or professional activity rather than tax-exempt capital gains, which can mean registration and progressive taxation. Confirm the current treatment with a tax professional.
• Energy and environmental policy. EU and national climate goals increasingly shape energy-intensive activities, so large operations should expect scrutiny of energy use and evolving sustainability-related reporting expectations.

Small-scale or hobby mining is feasible, but anyone planning commercial-scale operations should model power costs, secure proper business registration, and seek legal and tax advice before committing capital.

The defining development is the arrival of the MiCA era in Portugal. After a period of legal uncertainty in early 2025, when the Banco de Portugal noted that no competent authority had yet been formally designated to process MiCA authorisations, Portugal enacted Law No. 69/2025 (implementing MiCA) and Law No. 70/2025 (implementing the travel rule and revising the anti-money-laundering law) at the end of 2025.

These laws confirmed the twin-peaks split between the Banco de Portugal and the CMVM, opened the path for CASP authorisation applications, and set a transitional deadline of 1 July 2026 for previously registered firms to obtain a MiCA licence or cease activity.

A separate change affects tax transparency. The EU's DAC8 directive, which brings crypto-asset reporting into the EU's automatic exchange-of-information system and implements the OECD Crypto-Asset Reporting Framework, takes effect across the bloc from 1 January 2026. Member states were required to transpose it into national law by 31 December 2025, and Portugal was among several that missed that deadline, so its national transposition arrived later in 2026. In practice, crypto-asset service providers must collect and report data on EU-resident users' transactions from 1 January 2026, with the first exchanges between tax authorities generally expected by 30 September 2027. For Portuguese residents this means the Autoridade Tributaria is set to receive more information about crypto activity, including activity on platforms based elsewhere.

Through 2026, expect the regulators to publish further guidance, process the first authorisations, and clarify operational details. Because the framework is still settling, monitor the official Banco de Portugal and CMVM pages for the latest position.

MiCA strengthens consumer protection by requiring authorised providers to meet disclosure, governance, conduct-of-business, complaints-handling, conflict-of-interest, and client-asset-safekeeping standards, supervised in Portugal by the CMVM for conduct and the Banco de Portugal for prudential matters. That said, regulation reduces but does not remove risk.

The main risks for crypto users in Portugal are common to the asset class:

• Price volatility. Crypto-assets can lose substantial value quickly, and this page makes no price predictions.
• Platform failure. An exchange or custodian can fail; assets held on a platform are not protected like bank deposits.
• Scams and phishing. Be sceptical of guaranteed or outsized returns and never share private keys or recovery phrases.
• Irreversible transactions. Crypto transfers generally cannot be undone, so verify addresses carefully.
• Self-custody risk. If you hold your own keys and lose them, the funds are gone.

Practical safeguards: use authorised providers, only commit money you can afford to lose, diversify, keep good records for tax, and consider independent professional advice. If you have a complaint about a regulated provider, the supervising authority's website explains the available channels.

Because crypto rules and tax treatment in Portugal are still settling under MiCA, always check the primary sources before acting. The most authoritative references are:

• Banco de Portugal for the registration and authorisation of crypto-asset and virtual-asset service providers, prudential rules, and stablecoin supervision.
• CMVM (Comissao do Mercado de Valores Mobiliarios) for market conduct, investor protection, non-stablecoin issuance, and market-abuse rules.
• EUR-Lex: MiCA Regulation (EU) 2023/1114 for the full text of the EU crypto-asset framework that applies in Portugal.
• Autoridade Tributaria (Portal das Financas) for crypto taxation, the IRS return, and filing deadlines.

For general background you can also read our crypto regulation guide. Remember that this page is general information current as of 2026 and is not legal advice; verify your specific situation with the named official regulators or a qualified Portuguese professional.

Yes. Buying, holding, selling, and transferring crypto is legal for individuals and businesses. Crypto is not legal tender, so the euro remains the only official currency, and the firms that provide crypto services must be authorised and supervised under the EU's MiCA framework, which Portugal transposed through Law No. 69/2025.

Two authorities under a twin-peaks model. The Banco de Portugal handles prudential supervision, stablecoin issuance, and the authorisation of crypto-asset service providers, while the CMVM oversees market conduct, investor protection, and the public offering of crypto-assets other than stablecoins. Anti-money-laundering rules apply throughout. You can verify each role on the official Banco de Portugal and CMVM websites.

In general, gains on crypto held for less than 365 days are taxable (commonly cited at a flat 28% capital-gains rate), while gains on assets held for more than one year are broadly exempt for individuals, subject to exceptions. Crypto-to-crypto swaps are generally not taxed at the time of the trade, and mining or staking income can be taxed as business or professional income. You must still report relevant activity in the annual IRS (Modelo 3) return. Tax depends on your circumstances, so confirm with the Autoridade Tributaria or a tax professional before filing.

Yes. Under MiCA, providers must hold a crypto-asset service provider (CASP) authorisation, which in Portugal is granted by the Banco de Portugal with CMVM involvement. Firms previously registered for anti-money-laundering purposes may continue operating during a transitional period that ends on 1 July 2026, or until their MiCA authorisation is granted or refused, whichever comes first. A CASP authorised elsewhere in the EU can passport its licence into Portugal.

Regulated providers must verify customer identity (KYC), perform due diligence, monitor transactions, keep records, and appoint a money-laundering reporting officer, under Law No. 83/2017 as amended. Portugal also applies the EU travel rule via Law No. 70/2025, so providers must collect and transmit information about the sender and recipient of crypto transfers. Expect identity checks when you open an account and when you move crypto through regulated platforms.

Generally yes. Staking rewards and similar passive returns are typically treated as investment income (category E capital income) and taxed at a flat rate widely cited at 28%, regardless of how long you hold the asset, so the 365-day exemption that applies to capital gains on disposals does not apply to this income. Mining or validation run as a professional or business activity is instead generally treated as category B business income and may be taxed at progressive rates. Confirm your situation with the Autoridade Tributaria or a tax professional.

Reporting cited for 2026 uses Anexo G, Quadro 18A for disposals of crypto held for less than 365 days (taxed at 28%), Anexo G1 for disposals of assets held for more than a year that are broadly exempt, and Anexo E for staking and similar capital income. You must declare relevant activity in the annual IRS (Modelo 3) return even when long-term gains are exempt, generally between 1 April and 30 June of the following year. Rules are detailed and change, so confirm the current forms and codes with the Autoridade Tributaria.

Increasingly yes. The EU's DAC8 directive brings crypto-asset reporting into the EU's automatic exchange-of-information system and applies from 1 January 2026. Crypto-asset service providers must collect and report data on EU-resident users' transactions, with the first cross-border exchanges between tax authorities generally expected by 30 September 2027, so the Autoridade Tributaria is set to receive more information about crypto activity, including activity on platforms based elsewhere in the EU. Accurate record-keeping and reporting matter more as a result.

Check the primary sources directly: the Banco de Portugal site for provider authorisation and prudential rules, the CMVM site for market conduct and investor protection, EUR-Lex for the full text of MiCA Regulation (EU) 2023/1114, and the Autoridade Tributaria (Portal das Financas) for taxation. This page is general information current as of 2026 and is not legal advice; confirm your specific situation with these regulators or a qualified Portuguese professional.

Last updated: 2026-06-30.

• Crypto regulation in Andorra
• Crypto regulation in Cyprus
• Crypto regulation in Greece
• Crypto regulation in Italy
• Crypto regulation in Malta
• Crypto regulation in United States
• Crypto Taxes Explained
• How to Buy & Sell Crypto