← Malta regulatory framework

Authority reference

Malta Financial Services Authority (MFSA): crypto-asset role

An authority-level reference to MFSA's statutory mandate, crypto-asset responsibilities, registers, verification process and enforcement powers.

Last verified: 2026-09-07Institutional, register, authorisation and enforcement sources reviewed.

Authority overview

MFSA is Malta’s single financial-services regulator

MFSA is an autonomous public institution established under the Malta Financial Services Authority Act, Chapter 330. Its remit spans Malta’s financial-services sector, and its official institutional account states that it has regulated virtual financial assets since 2018.

For crypto-assets today, MFSA supervises entities within the Markets in Crypto-Assets Act, Chapter 647 framework, including CASPs and relevant crypto-asset issuers. The separate Malta jurisdiction guide explains how this role fits into the broader Malta and EU framework.

Statutory role

Authorisation, supervision and market integrity

MFSA’s functions include regulating and supervising financial services, protecting consumers, supporting market integrity and financial stability, monitoring conduct, investigating harmful practices, and advising the Maltese government on financial-services policy. It operates within the EU supervisory framework and coordinates with European and national bodies.

In crypto-assets, MFSA administers Malta’s national authorisation and supervisory work under MiCA and Chapter 647. ESMA maintains the EU register, but national competent authorities grant or notify the underlying permissions and report changes.

Activities and firms

What can fall within MFSA’s crypto remit

MFSA’s official crypto-assets portal identifies CASPs and crypto-asset issuers as regulated populations under Chapter 647. CASP permissions are service-specific. They can cover custody, trading-platform operation, exchange, execution, placing, reception and transmission of orders, advice, portfolio management, and transfers.

Asset-referenced token and e-money token regimes have additional issuer requirements and may involve the roles assigned by MiCA to national authorities, EBA and other existing financial-services supervisors. Users should verify the exact permission rather than treating “MFSA regulated” as a single universal licence.

Authorisation route

CASP applications

MFSA’s authorisations page supplies the current CASP form and directs submissions through the LH Portal. The MiCA Rulebook connects the application process to MFSA’s Authorisation Process Service Charter.

Licence types

Permission follows services

A CASP authorisation specifies the crypto-asset services permitted. Eligible financial entities using MiCA Article 60 follow a notification route for the services allowed by that article; this should not be described as an unrestricted CASP licence.

Verification workflow

How to verify an MFSA-regulated firm

  1. Copy the legal entity name from the product’s current customer agreement.
  2. Search the MFSA Financial Services Register, which is the public record of firms licensed and regulated by MFSA.
  3. Match legal name, status and permitted services. A brand match alone is insufficient.
  4. Cross-check the ESMA MiCA register for EU authorisation information and its latest published update.
  5. Review MFSA warnings, sanctions and provider terms for restrictions or later changes.

Supervision and enforcement

MFSA can investigate and impose measures

MFSA describes a combination of off-site supervision and on-site visits. Its published powers include requiring information, appointing inspectors, issuing directives, publishing warnings, restricting operations, suspending or cancelling a licence, and imposing administrative penalties where the governing law permits.

A recent relevant example is MFSA’s 13 July 2026 settlement notice for Everest Network Ltd. The authority reported approval and regulatory-reporting failures and imposed a €40,560 administrative penalty. This example shows the authority’s supervisory role; it does not establish the present status of any other firm.

Related analysis

MFSA records in Cexvia research

Linked Cexvia records

Entities associated with MFSA in the current scope

These records preserve the existing database view. They are research pointers, not a substitute for a live MFSA or ESMA register check.

Entity and licence records

Records in this scope

Always match the licence holder to the legal entity named in the user agreement.

Evidence

Primary sources

These official sources support the regulatory explanation above. Register results can change; verify the legal entity and permitted services at the time of use.

  1. Malta Financial Services Authority Act (Chapter 330)Legislation MaltaSource date: 2024-02-09 consolidated publication. Checked: 2026-09-07. Supports: MFSA's statutory basis, functions and powers.
  2. About the MFSAMalta Financial Services AuthoritySource date: Current official page; undated. Checked: 2026-09-07. Supports: MFSA institutional role, supervisory approach and enforcement powers.
  3. Crypto-AssetsMalta Financial Services AuthoritySource date: Current official page; undated. Checked: 2026-09-07. Supports: MFSA remit for CASPs and crypto-asset issuers under Chapter 647.
  4. Authorisations — Crypto-Asset Service ProviderMalta Financial Services AuthoritySource date: Current official page; undated. Checked: 2026-09-07. Supports: CASP application route, forms and submission through the MFSA LH Portal.
  5. Financial Services RegisterMalta Financial Services AuthoritySource date: Current register; continuously maintained. Checked: 2026-09-07. Supports: Public verification of firms licensed and regulated by the MFSA.
  6. MiCA RulebookMalta Financial Services AuthoritySource date: 2025-03. Checked: 2026-09-07. Supports: MFSA rules for MiCA authorisation, notification, supervision and reporting.
  7. MiCA registers and interim register downloadsEuropean Securities and Markets AuthoritySource date: Register update shown by ESMA: 2026-07-16. Checked: 2026-09-07. Supports: EU-level CASP authorisation and non-compliant-entity cross-checks.
  8. Everest Network Ltd. — regulatory settlementMalta Financial Services AuthoritySource date: 2026-07-13. Checked: 2026-09-07. Supports: Recent example of MFSA supervisory action involving a VFA service provider.