← Regulatory Atlas

MT / Jurisdiction guide

Malta crypto regulation and licensing framework

A jurisdiction-level guide to Malta's MiCA framework, MFSA authorisation, official registers, regulatory process and supervision.

Last verified: 2026-09-07Primary legislation and regulator pages reviewed separately from publication and deployment dates.

Quick summary

Malta applies the EU MiCA framework through a national supervisory structure

Regulation (EU) 2023/1114 (MiCA) supplies the directly applicable EU framework for crypto-asset issuers and service providers. Malta’s Markets in Crypto-Assets Act, Chapter 647 supplements that framework locally and identifies the competent authorities.

The Malta Financial Services Authority (MFSA) is the principal authority for the Malta authorisation and supervision discussed on this page. A Malta company registration, a historic VFA record, and a current MiCA authorisation are different facts and should not be treated as interchangeable.

Current framework

What the framework covers

MiCA covers authorisation and operating conditions for crypto-asset service providers, rules for crypto-asset offers and admission to trading, and specific regimes for asset-referenced and e-money tokens. Under Article 59, a person may not provide crypto-asset services in the EU unless authorised as a CASP or permitted to provide those services as an eligible regulated financial entity under Article 60.

The services attached to a CASP authorisation can include custody and administration, operation of a trading platform, exchange for funds or other crypto-assets, execution, placing, order reception and transmission, advice, portfolio management, and transfer services. The official register—not the brand name—shows the legal entity and authorised service scope.

Relevant authority

MFSA

MFSA handles Malta-facing authorisation and supervision for entities within its Chapter 647 remit. Its crypto-assets portal publishes rules, reporting material, forms and regulatory communications.

Read the MFSA authority reference →

EU coordination

ESMA register

ESMA maintains the EU-level MiCA register using information supplied by national competent authorities. The national MFSA register and ESMA register should be cross-checked because update timing can differ.

Open the ESMA MiCA register →

Authorisation

Who needs authorisation and how the process starts

A Malta-based legal person or other eligible undertaking intending to provide MiCA crypto-asset services normally applies to MFSA as its home-state competent authority. Article 62 identifies the application information; Article 63 governs assessment and the authorisation decision. Certain already-regulated financial entities use the Article 60 notification route for specified services instead of a standard CASP application.

MFSA directs CASP applicants to its authorisations service and LH Portal. Applicants should use the current MFSA form and MiCA Rulebook rather than rely on a checklist copied from a commercial website. Cexvia does not infer approval from an application, company registration, or marketing statement.

Supervision and enforcement

Authorisation is followed by ongoing obligations

MiCA imposes governance, prudential, safeguarding, conduct, complaints, conflicts, outsourcing and record-keeping requirements, with additional rules depending on the services provided. MFSA publishes rules and reporting requirements for the Malta sector and can investigate, direct, restrict, suspend or cancel activity and impose administrative measures within its legal powers.

Enforcement is not theoretical. On 13 July 2026, MFSA published a settlement concerning Everest Network Ltd., a VFA service provider, involving a €40,560 administrative penalty for approval and reporting failures. That notice is a historical supervisory example; it is not a statement about every current MiCA-authorised firm.

Official registers

How to verify a firm

  1. Identify the exact legal entity in the account agreement or product terms.
  2. Search the MFSA Financial Services Register for that legal name.
  3. Check the record’s status and the specific services or permissions; do not rely on the brand alone.
  4. Cross-check the ESMA MiCA register and note its update date.
  5. Review MFSA warnings, enforcement notices and the provider’s current terms before relying on the result.

Related analysis

Research that uses Malta entity records in context

European exchanges under MiCA: funding and custody →Crypto.com and Kraken: entity, MiCA and custody comparison →How to verify an exchange licence and legal entity →

Cexvia verified records

Malta-linked entities in the current research scope

The database records below preserve Cexvia’s existing entity utility. Each record must still be checked against the current official register and the services used.

Entity and licence records

Records in this scope

Always match the licence holder to the legal entity named in the user agreement.

Evidence

Primary sources

These official sources support the regulatory explanation above. Register results can change; verify the legal entity and permitted services at the time of use.

  1. Regulation (EU) 2023/1114 on markets in crypto-assets ↗EUR-Lex / European UnionSource date: 2023-05-31. Checked: 2026-09-07. Supports: EU authorisation framework, CASP services, operating obligations and competent-authority powers.
  2. Markets in Crypto-Assets Act (Chapter 647) ↗Legislation MaltaSource date: 2025-05-16 consolidated publication. Checked: 2026-09-07. Supports: Malta's national MiCA framework and designation of competent authorities.
  3. Crypto-Assets ↗Malta Financial Services AuthoritySource date: Current official page; undated. Checked: 2026-09-07. Supports: MFSA remit for CASPs and crypto-asset issuers under Chapter 647.
  4. Authorisations — Crypto-Asset Service Provider ↗Malta Financial Services AuthoritySource date: Current official page; undated. Checked: 2026-09-07. Supports: CASP application route, forms and submission through the MFSA LH Portal.
  5. Financial Services Register ↗Malta Financial Services AuthoritySource date: Current register; continuously maintained. Checked: 2026-09-07. Supports: Public verification of firms licensed and regulated by the MFSA.
  6. MiCA registers and interim register downloads ↗European Securities and Markets AuthoritySource date: Register update shown by ESMA: 2026-07-16. Checked: 2026-09-07. Supports: EU-level CASP authorisation and non-compliant-entity cross-checks.
  7. MiCA Rulebook ↗Malta Financial Services AuthoritySource date: 2025-03. Checked: 2026-09-07. Supports: MFSA rules for MiCA authorisation, notification, supervision and reporting.
  8. Everest Network Ltd. — regulatory settlement ↗Malta Financial Services AuthoritySource date: 2026-07-13. Checked: 2026-09-07. Supports: Recent example of MFSA supervisory action involving a VFA service provider.