Crypto-funded debit card in Poland
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in Poland with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- VASP registration with GIIF (Ministry of Finance) under Polish AML Act (ustawa z dnia 1 marca 2018 r.)
- Customer Due Diligence (CDD): identify and verify clients, beneficial owners, understand purpose of business relationship
- Ongoing monitoring of client relationships and transactions for suspicious activity
- Transaction monitoring — implement systems to detect unusual patterns or thresholds
- Reporting suspicious transactions and activities to GIIF
- Record-keeping: maintain CDD and transaction records for at least 5 years
- Appoint a designated AML Officer / Compliance Officer
- Implement internal AML/CTF procedures including a business-specific risk assessment
- Provide regular AML/CTF training to relevant employees
- Screen clients and beneficial owners against sanctions lists
- Under MiCA (from 30 Dec 2024): CASPs will need KNF authorization with minimum capital (€50k–€150k), segregation of client crypto-assets and funds, sound IT/security protocols, and business continuity planning
Key Restrictions
- Must be registered as a VASP with GIIF (Minister of Finance) under the Polish AML Act before commencing operations
- Operator must be a Polish legal entity (e.g., sp. z o.o. or S.A.) or a natural person conducting business activity in Poland
- At least one management board member must reside in Poland or hold Polish citizenship
- Management and beneficial owners must meet fit & proper criteria — no criminal record for intentional financial crimes
- Proof of knowledge and experience in virtual currencies required for registration
- Crypto-to-fiat conversion at point of sale constitutes a virtual currency exchange service — requires VASP registration
- Card issuance and fiat balance holding likely requires a separate e-money institution license or partnership with a licensed e-money/payment institution under Polish/EEA law
- Under current law, no specific minimum capital for VASP registration, but MiCA (effective 30 Dec 2024) will impose €50k–€150k capital requirements depending on services
- MiCA will shift supervisory authority from GIIF to KNF (Polish Financial Supervision Authority) from end-2024
Key Risks
- Dual regulatory layer: VASP registration (GIIF/AML Act) plus e-money/payment services licensing (KNF) — gaps in either create enforcement exposure
- Transition risk: MiCA implementation from Dec 2024 will introduce significant new capital, segregation, and prudential requirements — current registrants may need to re-authorize
- No explicit segregation rules for client crypto-assets under current Polish AML Act — creates ambiguity on custodial arrangements for card-funded wallets
- Partner-bank / BIN-sponsor dependency: debit card programs typically require an issuer bank with BIN sponsorship, adding third-party regulatory risk
- Crypto tax treatment (19% flat rate on net gains) creates reporting complexity for cardholders transacting frequently; cost-basis tracking across multiple top-ups and spend events is operationally burdensome
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Poland's pre-MiCA regime is the register of virtual-currency activity under Arts 129m–129z of the AML Act of 1 March 2018, kept for the Minister of Finance by the Director of IAS Katowice (not GIIF); it has accepted no new entries since 30 December 2024, and since 1 July 2026 an entry confers no right to provide crypto-asset services.
Under Art 2(1) pkt 12 of the AML Act of 1 March 2018 (Dz.U. 2025 poz. 644), obliged institutions include businesses providing exchange between virtual currencies and means of payment, exchange between virtual currencies, and intermediation in either exchange.
Virtual-currency activity under the AML Act of 1 March 2018 may be carried on by a natural person, a legal person or an organisational unit without legal personality (Art 129n(1)); a Polish company is not required, although the register has accepted no new entries since 30 December 2024.
At least one individual from the management board of the Polish legal entity must have their residence in Poland or possess a Polish citizenship.
Evidence fact pl.licensing.fit-proper-criteria-managementowners not found (may have been renamed).
Under Art 2(1) pkt 12 of Poland's AML Act of 1 March 2018 (consolidated Dz.U. 2025 poz. 644), businesses providing virtual-currency exchange, intermediation or account-keeping (custody) services are obliged institutions, and Art 129m makes that activity conditional on entry in the register of virtual-currency activity; the register has accepted no new entries since 30 December 2024.
Under Art 129n(1) of Poland's AML Act (consolidated Dz.U. 2025 poz. 644), virtual-currency activity may be carried on by a natural person, a legal person or an organisational unit without legal personality.
Art 129n of Poland's AML Act (consolidated Dz.U. 2025 poz. 644) bars from virtual-currency activity anyone finally convicted of listed offences (incl. offences against property, economic trading and money circulation, or intentional fiscal offences); the clean-record rule extends to partners, management-board members, persons directing the activity and beneficial owners.
Under Art 129o of Poland's AML Act (consolidated Dz.U. 2025 poz. 644), natural persons carrying on virtual-currency activity must have knowledge or experience in it, deemed met by completing a training course on its legal or practical aspects or by at least one year of documented work in that activity.
The competent organ for Poland's register of virtual-currency activity is the minister responsible for public finance (AML Act Art 129p), who by ordinance of 25 October 2021 (Dz.U. 2021 poz. 1964) designated the Director of the Revenue Administration Regional Office (IAS) in Katowice to keep the register.
AML Officer: Appoint a designated individual responsible for AML/CTF compliance (AML Officer or Compliance Officer).
Internal AML/CTF Procedures: Develop and implement robust internal anti-money laundering and counter-terrorist financing procedures, including a risk assessment specific to the business and its clients.
Customer Due Diligence (CDD): Implement procedures for identifying and verifying the identity of clients, including beneficial owners, and understanding the purpose and nature of business relationships. This involves collecting identity documents, verifying data, and screening against sanctions lists.
Ongoing Monitoring: Conduct ongoing monitoring of client relationships and transactions to detect suspicious activities.
Transaction Monitoring: Implement systems to monitor transactions for unusual patterns or thresholds.
Reporting: Report suspicious transactions and activities to GIIF.
Record-keeping: Maintain records of client identification data and transactions for at least 5 years.
Training: Provide regular AML/CTF training for relevant employees.
The AML Act of 1 March 2018 sets no minimum capital requirement for entry in the virtual-currency register: Arts 129n–129o require only a clean criminal record and knowledge or experience; the register has accepted no new entries since 30 December 2024.
Future MiCA Impact: MiCA will introduce capital requirements for Crypto-Asset Service Providers (CASPs), ranging from €50,000 to €150,000 depending on the type of services provided.
Requirement: MiCA explicitly mandates the segregation of client crypto-assets and funds. Article 67 specifies that CASPs providing custody services must:
The KNF was to be Poland's MiCA competent authority under the Act on the crypto-asset market, but that act was vetoed three times (1 Dec 2025, 12 Feb 2026, 11 Jun 2026) and as of 14 October 2026 no Polish authority is designated for crypto-asset service providers; the KNF is competent only for e-money-token issuers (KNF communiqué updated 23 Jun 2026).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a crypto-funded debit card program in Poland requires VASP registration with GIIF (under the AML Act) for the crypto-to-fiat conversion service, and likely an e-money institution license or partnership with a licensed payment institution for issuing the card and holding fiat balances, with MiCA adding KNF authorization and capital requirements from December 2024.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?