Home › Crypto Regulation › Cyprus

Quick answer — Cyprus, 2026

• Legal: Legal to own and trade, not legal tender, CASPs licensed under MiCA
• Tax: Flat 8 percent tax on disposal gains from 2026, mining taxed separately
• Buying: Via MiCA-authorised or EU exchanges after KYC, euro SEPA on-ramps

Cyprus is an EU and eurozone member, so its rules for cryptocurrency are shaped first by EU law and then by national supervision. Owning and trading Bitcoin and other crypto-assets is legal, and as of 2026 the sector is governed by the EU's Markets in Crypto-Assets Regulation (MiCA), enforced locally by the Cyprus Securities and Exchange Commission (CySEC). Cyprus has also moved its crypto businesses off the older national registration regime and onto the MiCA authorisation framework, with a hard transition deadline in mid-2026, and it introduced a dedicated crypto tax provision that took effect on 1 January 2026.

This guide explains where Bitcoin and other cryptocurrencies stand legally in Cyprus, who regulates the sector, how crypto is taxed, and the practical rules around licensing, buying, mining and consumer protection. It is written for residents, expats and visitors who want an accurate, plain-language picture. Crypto law in Cyprus is evolving quickly, so every figure and rule below should be confirmed against the official sources named at the end before you rely on it. For broader background see our guide to crypto regulation and our overview of crypto taxes.

This article is general information as of 2026 and is not legal, tax or financial advice. Verify the current position with CySEC, the Central Bank of Cyprus and the Cyprus Tax Department, and consult a qualified Cyprus-licensed professional before acting.

Next: How crypto is taxed · Sending crypto safely
Nearby: Spain · Andorra · Gibraltar · Greece
All countries: browse the 205 country guides

On this page: Legal status · Who regulates it · Taxes · How to buy · Mining

Yes. Buying, holding, selling and using Bitcoin and other cryptocurrencies is legal in Cyprus. There is no law banning private individuals from owning or trading crypto-assets, and Cyprus has not attempted to prohibit cryptocurrencies.

It is important to separate legal from legal tender. Crypto is legal to use, but it is not official money. The euro is the only legal tender in Cyprus, and no merchant is obliged to accept Bitcoin. Some businesses accept crypto voluntarily, but that is a commercial choice, not a right. The Central Bank of Cyprus has repeatedly stressed that virtual currencies are not legal tender and carry no state guarantee.

The activity that is regulated is the provision of crypto services to others, such as running an exchange, custody wallet or brokerage. Those businesses must be authorised. Personal use sits outside that licensing net, although it still carries tax and anti-money-laundering obligations when you interact with regulated providers.

The Cyprus Securities and Exchange Commission (CySEC) is the competent authority for crypto-asset services in Cyprus. It is both the MiCA authorisation authority for Crypto-Asset Service Providers (CASPs) and the anti-money-laundering and counter-terrorist-financing supervisor for crypto activity carried out in or from Cyprus. CySEC maintains the register of authorised firms and supervises their conduct.

The Central Bank of Cyprus (CBC) is the monetary authority. It does not license retail crypto exchanges, but it issues public warnings about crypto risks, oversees payment and banking matters, and has a role in matters touching on stablecoins and monetary stability under the EU framework.

At EU level, the European Securities and Markets Authority (ESMA) and the European Banking Authority develop the technical standards that sit under MiCA. The single most reliable thing a consumer can do is to check a provider's status directly on the official CySEC register rather than relying on the firm's own marketing. See CySEC and the Central Bank of Cyprus.

Cyprus regulation now operates on two layers: the EU rulebook and national supervision.

The EU's Markets in Crypto-Assets Regulation, Regulation (EU) 2023/1114 (MiCA), applies directly across all member states, including Cyprus. It creates a single authorisation regime for CASPs such as exchanges, custodians and brokers, sets specific rules for issuers of asset-referenced tokens and e-money tokens (stablecoins), and imposes disclosure requirements for token offerings. A firm authorised under MiCA in one EU state can passport its services across the bloc. You can read about it on the ESMA MiCA page.

Before MiCA, crypto businesses registered under Cyprus's national regime. That regime was built on the Prevention and Suppression of Money Laundering Activities Law, Law 188(I)/2007, as amended (notably by Law 13(I)/2021, transposing the EU's 5th Anti-Money-Laundering Directive, and Law 98(I)/2023). Under that law CySEC issued a CASP registration directive in 2021. This national registration framework is being phased out in favour of MiCA authorisation during 2026.

Any business providing crypto-asset services in or from Cyprus must be authorised. The framework is now MiCA, replacing the older national CASP registration.

CySEC confirmed that crypto firms that were operating under Cyprus's national rules had to apply for MiCA authorisation by 27 February 2026. The transitional window is reported to cover providers that were already registered with CySEC before 30 December 2024. Firms that applied in time may continue providing services under the prior national regime only until their application is decided, or until the transitional regime ends on 1 July 2026, whichever comes first. Providers that did not apply must submit a wind-down plan, because providing crypto-asset services from a Cyprus base will not be permitted after the transitional period.

This is the single most important regulatory development for anyone using a Cyprus-based platform in 2026. Confirm that any provider you use has applied for or obtained MiCA authorisation, and verify it on the CySEC register rather than taking the firm's word for it.

MiCA authorisation requires fit-and-proper management, minimum capital and own-funds requirements scaled to the services offered, and robust governance, custody and AML controls. The detailed thresholds are set in MiCA and CySEC's implementing rules, so prospective applicants should take Cyprus-licensed legal advice.

For most of the past decade Cyprus had no specific crypto tax legislation. Gains were assessed under general income-tax principles, and because Cyprus does not levy capital-gains tax on most non-property assets (capital-gains tax is generally confined to gains from immovable property located in Cyprus), the treatment of crypto was often ambiguous.

This changed with the 2026 tax reform. Multiple professional and legal summaries report that Cyprus inserted a dedicated crypto provision into the Income Tax Law (commonly cited as Article 20E), introducing a flat 8% tax on profits from the disposal of crypto-assets, effective 1 January 2026, applying to both individuals and companies subject to Cyprus income tax. Reported summaries state the measure was approved by Parliament on 22 December 2025 and published in the Official Gazette on 31 December 2025, and that the law ties the definition of crypto-asset to the EU MiCA framework so tax and regulation use the same concepts. Reported features include: disposal covers selling crypto for fiat, crypto-to-crypto exchanges, using crypto to pay for goods or services, and gifts or transfers without consideration; taxable profit is generally proceeds minus acquisition cost and directly related expenses; the 8% gains are reported as ring-fenced from the progressive income-tax base; and crypto obtained through mining is excluded from the 8% regime and taxed under general income-tax rules.

The reform also sets a strict loss rule. According to those summaries, a loss from disposing of crypto-assets can be set off only against gains from other crypto-asset disposals of the same taxpayer, and only within the same tax year. Crypto losses cannot be carried forward to later years and cannot be used to reduce salary, business or other non-crypto income. In practice this means a trader who wants to net a loss against a gain has to realise both in the same calendar year.

Because the precise statutory text, definitions and any reliefs can be interpreted differently and may be refined, The rate, scope and effective date are settled. What could not be found in public records is a dedicated Cyprus Tax Department circular interpreting Article 20E, so edge cases such as staking rewards, DeFi positions and NFTs are worth putting to a Cyprus tax adviser. The rate is 8 per cent, the legal basis is Article 20E of the Income Tax Law, and it applies from 1 January 2026, so the 2026 tax year is the first one affected and the first returns using it are filed in 2027. Regardless of the headline rate, you must keep detailed records of every acquisition and disposal (dates, euro values, fees and counterparties) and self-assess and declare crypto income. See our general crypto tax guide for context.

Anti-money-laundering (AML) and Know-Your-Customer (KYC) obligations are central to crypto in Cyprus and apply at the level of regulated providers, not individual holders.

• CASPs are obliged entities. Authorised and registered crypto firms must perform customer due diligence, verify identity, monitor transactions, and report suspicious activity to the authorities. CySEC supervises this under the national AML law (Law 188(I)/2007 as amended) and under MiCA.
• Identity checks are mandatory. Expect to provide government ID and often proof of address before you can trade, withdraw, or use a crypto ATM above modest limits. Anonymous high-value accounts are not permitted at regulated venues.
• The travel rule applies. The EU's transfer-of-funds rules require that sender and recipient information accompanies many crypto transfers between regulated providers, mirroring the standards for traditional wires.

These obligations are now a permanent feature of using regulated crypto services in Cyprus and across the EU.

Residents can buy crypto through international exchanges that serve EU customers and through providers authorised to operate in Cyprus. Practical points to keep in mind:

• Use authorised providers. Favour platforms that are MiCA-authorised or that applied within the transition window. This gives clearer consumer protections and lower counterparty risk. Verify status with CySEC.
• Expect KYC. Identity verification is required before you can trade or withdraw at regulated venues.
• Funding is straightforward. Cyprus is in the eurozone and the SEPA area, so euro bank transfers and cards are the usual on-ramps. There are no general capital or foreign-exchange controls today (the emergency controls imposed during the 2013 banking crisis were fully lifted in 2015).
• Banks vary. Some Cypriot banks are cautious about crypto-related transfers and may query or delay them. Using a well-known regulated exchange and being able to explain your source of funds reduces friction.
• Bitcoin ATMs. A small number of Bitcoin ATMs have operated in cities such as Nicosia, Limassol and Paphos. They allow cash purchases (and sometimes sales) but charge high fees and apply KYC above modest thresholds. Availability changes, so check a live locator first.

For larger amounts a regulated exchange is almost always cheaper and safer than an ATM, and you should never keep more on an exchange than you need for active trading.

Bitcoin mining is not prohibited in Cyprus, but it is not a natural fit for the island. The dominant constraint is electricity: Cyprus has historically had some of the highest power prices in the EU, and proof-of-work mining is extremely energy-intensive. A hot Mediterranean climate adds cooling costs, so large-scale mining is rarely competitive against operations in regions with cheap or renewable power.

On the regulatory side, mining itself is not licensed in the way that running an exchange is. For tax, reported summaries of the 2026 reform indicate that crypto obtained through mining is excluded from the flat 8% disposal regime and is instead taxed under general income-tax rules, so mining rewards are taxable. Those summaries put the general rates at 15% corporate income tax for companies and progressive personal rates up to 35% for individuals, rather than the flat 8% that applies to ordinary disposals. Anyone mining commercially should also consider business registration, electricity-tariff terms and EU energy-efficiency expectations, and should confirm the tax treatment with the Cyprus Tax Department.

Two developments dominate the current picture:

• MiCA transition. CySEC set 27 February 2026 as the deadline for existing crypto firms to apply for MiCA authorisation, with the national transitional regime ending on 1 July 2026. After that point, only firms holding a CySEC-issued MiCA authorisation may provide crypto-asset services from Cyprus. That point has now passed. CySEC stated that any continuation of activities beyond 1 July 2026 is conditional on obtaining the relevant MiCA authorisation, and firms that did not apply by 27 February 2026 were required to submit a wind-down plan.
• Dedicated crypto tax. Cyprus introduced a flat 8% tax on profits from disposing of crypto-assets, reported as approved by Parliament on 22 December 2025, published in the Official Gazette on 31 December 2025, and effective from 1 January 2026. It is the first time crypto has had its own provision in the Income Tax Law. Crypto losses are reported as usable only against crypto gains in the same year with no carry-forward, and mining income is reported as taxed separately under general rules (about 15% for companies and up to 35% for individuals).

The Central Bank of Cyprus has also continued to issue investor-caution statements. In a notice dated 7 February 2025 it urged caution on crypto-asset investments, pointing to extreme volatility, speculation, fraud and the lack of regulatory protection, and it reiterated that Cypriot financial institutions do not invest in cryptocurrencies. Separately, in October 2025 CySEC relayed an EU-level alert to consumers about the risks of crypto-assets and the weak safeguards around them. The overall direction of travel is toward more structure: clearer authorisation, clearer tax, and clearer obligations, alongside ongoing official warnings about risk.

Key risks. Crypto is a high-volatility, high-risk asset class that can lose value rapidly. It is not covered by deposit-guarantee or investor-compensation schemes the way bank deposits are. Common dangers include scams, fake exchanges and impersonation fraud, loss of funds through mismanaged private keys, and regulatory or tax change. Because Cyprus's crypto rules are mid-transition in 2026, a provider you use today could be required to wind down if it fails to obtain MiCA authorisation.

What protection exists. MiCA brings conduct, disclosure, custody and governance standards that improve provider accountability, and CySEC supervises authorised firms. The Central Bank of Cyprus has publicly urged caution on crypto investments, noting the risk of substantial losses and fraud and the lack of guarantees for unregulated activity. Practical protection is largely in your hands: use clearly authorised firms, treat any allocation as money you can afford to lose, diversify, avoid leverage and any scheme promising guaranteed returns, and secure your own keys for anything beyond small active-trading amounts.

Because crypto rules in Cyprus are changing quickly, verify the current position with the primary authorities rather than relying on summaries (including this one):

• Regulator and provider register: Cyprus Securities and Exchange Commission (CySEC), including its CASP register. Check that any platform you use is authorised before depositing funds.
• Monetary authority and risk warnings: Central Bank of Cyprus.
• EU framework: the ESMA MiCA page for the EU-wide rulebook.
• Tax: the Cyprus Tax Department for the current treatment of crypto gains, mining and reporting.

For more general background, see our crypto regulation guide and our country regulation hub. This article is general information as of 2026 and is not legal, tax or financial advice; always confirm with the named official regulators and a qualified Cyprus-licensed professional before acting.

Facts reviewed: 3 August 2026. Page updated: 12 August 2026.

More countries in the region

• Crypto regulation in Portugal
• Crypto regulation in San Marino
• Crypto regulation in Italy
• Crypto regulation in Malta
• Browse all 205 country guides

Practical guides

• How crypto is taxed
• Setting up a hardware wallet
• Why exchange custody is risky