Digital Payments & Fintech · Gibraltar
Fintech & digital payments rules in Gibraltar (2026)
Gibraltar shaded by its digital payments & fintech status
Gibraltar operates a clear licensing regime for payment institutions and electronic money institutions under the Financial Services Act 2019 and its 2020 subsidiary regulations, administered by the GFSC. These rules transpose the EU PSD2/EMD2 model (including open-banking concepts such as AIS and PIS) into Gibraltar domestic law following Brexit, and Gibraltar additionally pioneered a bespoke Distributed Ledger Technology (DLT) licensing framework for crypto and value-transmission firms.
Key points
The GFSC authorises and supervises payment and e-money firms under the Financial Services Act 2019, which consolidated Gibraltar's financial services legislation into a single statute with activity-based 'permissions'.
Payment service providers are authorised/registered under the Financial Services (Payment Services) Regulations 2020, which implement the PSD2-style payment-services regime as Gibraltar domestic law.
EMIs are licensed under the Financial Services (Electronic Money) Regulations 2020; a Part 7 permission to an electronic money institution also extends to providing payment services. E-money issuers must safeguard customer funds received in exchange for e-money.
Because Gibraltar transposed the PSD2 framework, account information service providers (AISPs) and payment initiation service providers (PISPs) can be registered/authorised, enabling third-party access to payment accounts with customer consent.
Gibraltar was an early mover with the Financial Services (Distributed Ledger Technology) Regulations (in force from January 2018, now under the FSA 2019), requiring firms that use DLT to store or transmit value on behalf of others to hold a GFSC DLT licence under ten core principles.
Gibraltar is outside the EU and EEA, so EU passporting no longer applies; firms rely on Gibraltar's domestic authorisations and on the UK–Gibraltar financial services framework rather than EU single-market access.
Timeline - major decisions & events
Gibraltar amended the Financial Services Act 2019 (new paras 139A/139B, Part 16 Sch 2) so that exchanging virtual assets for fiat or other virtual assets now requires Part 7 GFSC permission, moving VASPs from mere AML registration to full prudential licensing.
GFSC ↗The Government and GFSC unveiled what they describe as the world's first regulatory framework for clearing and settling crypto derivatives, addressing settlement finality, counterparty risk and custody to bolster market integrity.
HM Government of Gibraltar ↗Following a Government/GFSC Market Integrity Working Group convened in January 2021, a tenth core regulatory principle was added requiring DLT providers to maintain or enhance market integrity and guard against price/market manipulation.
HM Government of Gibraltar ↗The Proceeds of Crime Act 2015 (Transfer of Virtual Assets) Regulations 2021 imposed originator/beneficiary information-sharing on VASPs for transfers of EUR 1,000 or more, with full compliance mandatory after an 18-month grace period (by 22 Sept 2022).
Gibraltar Laws (Official Gazette) ↗After consultation begun in 2019, the GFSC updated its DLT Providers guidance to better distinguish virtual assets from higher-risk virtual-asset-denominated instruments and tighten onboarding/risk tests for digital asset exchanges.
HM Government of Gibraltar ↗The Legislative Reform Programme consolidated ~90 financial services instruments (including DLT, e-money and payment services rules) into a single Financial Services Act 2019 plus 41 sets of regulations, creating the unified licensing architecture used today.
HM Government of Gibraltar ↗Gibraltar transposed the EU Second Payment Services Directive, introducing licensing/authorisation for payment institutions and the new payment-initiation and account-information service providers, with strengthened security and consumer protection.
GFSC ↗The Financial Services (Distributed Ledger Technology Providers) Regulations 2017 took effect on 1 Jan 2018, making Gibraltar one of the first jurisdictions to require firms storing or transmitting value via DLT to obtain a GFSC licence under nine (later ten) core principles.
GFSC ↗Gibraltar's Financial Services (Electronic Money) Regulations 2011 (later re-enacted as the 2020 Regulations) created the GFSC authorisation regime for electronic money institutions, a foundational pillar of the jurisdiction's payments licensing.
GFSC ↗Gibraltar - other topics
Last verified 5/23/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →