Is Crypto Legal in Portugal?
Cryptocurrency is legal and regulated in Portugal. The jurisdiction has a comprehensive, dedicated crypto framework with licensing and active enforcement, and an active legislative process underway. Bank of Portugal is among the 3 regulators with oversight. Primary legislation: Law No. 58/2019.
Derived from 97 sourced facts for Portugal · last updated · primary sources
Overview
Portugal requires Virtual Asset Service Providers (VASPs) and Crypto-Asset Service Providers (CASPs) to obtain authorization from the Bank of Portugal (Banco de Portugal) before operating, regulated under the MiCA (Markets in Crypto-Assets) framework and EU Directive 5AMLD.
Regulatory Bodies
Banco de Portugal (BdP, Bank of Portugal): Registers virtual asset service providers (VASPs) and supervises AML/CFT compliance; handles MiCA authorization applications for crypto-asset service providers (CASPs) starting July 2026.
Comissão do Mercado de Valores Mobiliários (CMVM, Portuguese Securities Market Commission): Determines if crypto-assets qualify as financial instruments; shares MiCA supervision with BdP.
Autoridade Tributária e Aduaneira (AT, Portuguese Tax and Customs Authority): Enforces crypto taxation, including reporting requirements.
Operating Models
9/9 verdictsCan specific business models operate in Portugal? Each card answers the operational question for one kind of operator. Curated cells reflect counsel-grade review; AI-generated cells should be confirmed before relying on them.
Conditional · medium burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · low burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · medium burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedPrimary Legislation
| Law / Regulation | Year | Scope |
|---|---|---|
| Law No. 58/2019 | 2019 | GDPR Implementation Law (Law No. 58/2019): Full applicability with CNPD overseeing compliance. 1. |
| Decree-Law 125/2025 | 2025 | NIS2 Directive Transposition (Decree-Law 125/2025): Expands cybersecurity obligations for public and private entities, including those in crypto sectors. |
| Portugal Data Protection & Privacy Regulation Monitor | GDPRI | Portugal Data Protection & Privacy Regulation Monitor | GDPRI |
Licensing Requirements
No verified facts yet. 7 unverified fact(s) in explorer
AML/KYC Requirements
The framework was adopted via Law No. 70/2025 (and companion Law No. 69/2025 for MiCA implementation) in December 2025, ensuring national execution of the TFR.
Specific effective date is not stated in available sources; it applies alongside MiCA transitional rules, with CASPs needing full authorization by July 1, 2026.
For transactions involving self-hosted wallets, CASPs must request proof of ownership/control for amounts of EUR 1,000 or more (per TFR Chapter III, Section 1, Article 1(5)).
No general de minimis threshold is explicitly detailed for all transfers beyond this; it aligns with FATF's recommended EUR 1,000 limit, though countries vary implementation.
Applies to Crypto-Asset Service Providers (CASPs), formally integrated into Portugal's AML regime.
Banco de Portugal (BdP) supervises compliance for CASPs and payment service providers; registered CASPs can operate under MiCA transitional rules until July 1, 2026.
CASPs must collect, retain, and share Travel Rule data (e.g., originator/beneficiary details for unique transfer identification) for transparency in transfers.
Enhanced measures for self-hosted wallets when a regulated entity is involved: data collection/retention by originating CASP, plus verification for ≥EUR 1,000.
Requirements include data verification, recordkeeping, security measures, and alignment with TFR for AML/CFT (e.g., immediate/secure sharing).
No specific protocols (e.g., interoperability solutions) mandated beyond TFR; challenges like GDPR and tech fragmentation noted globally.
Travel Rule
Banco de Portugal (BdP): National bank responsible for supervising stablecoin issuance and authorising CASPs. Website: https://www.bportugal.gov.pt/
Comissão do Mercado de Valores Mobiliários (CMVM): Oversees non-stablecoin crypto asset issuance and market abuse. Website: https://www.cmvm.pt/
Law No. 69/2025 & Law No. 70/2025 (December 22, 2025): Implement Regulation (EU) 2023/1114 (MiCA) and Regulation (EU) 2023/1113 (TFR). Source: https://www.21analytics.co/blog/portugal-travel-rule-what-casps-need-to-know/
Law No. 83/2017: Aligns with EU standards for crypto-assets and AML/CFT. Source: https://gfdl.legal/portugal-travel-rule-implementation/
FATF Recommendations: Portugal aligns with FATF Travel Rule requirements, including data sharing and verification obligations for VASPs. Source: https://sumsub.com/blog/what-is-the-fatf-travel-rule/
EU Status: Portugal is a member of the European Union, thus compliant with MiCA and FATF standards. Source: https://eur-lex.europa.eu/
Entities Requiring License: All CASPs providing crypto-asset services must obtain prior authorisation from BdP; CMVM provides opinion on completeness, focusing on internal policies and MiCA compliance. Source: https://www.21analytics.co/blog/portugal-travel-rule-what-casps-need-to-know/
Capital Requirements: Specific monetary thresholds not explicitly stated; however, for self-hosted wallets over EUR 1,000, proof of ownership is required. Source: https://www.21analytics.co/blog/portugal-travel-rule-what-casps-need-to-know/
Application Process: Submission to BdP, followed by CMVM’s opinion within 10-15 business days; transitional arrangements allow existing CASPs to operate until full MiCA authorisation by July 2026. Source: https://gfdl.legal/portugal-travel-rule-implementation/
Timeline & Structural Requirements: No specific timeline beyond the July 2026 deadline for existing CASPs; structural requirements include compliance with MiCA and TFR standards. Source: https://www.21analytics.co/blog/portugal-travel-rule-what-casps-need-to-know/
Licensed Entities: No publicly listed entities; compliance hinges on awaiting full authorisation by BdP and CMVM. Source: https://gfdl.legal/portugal-travel-rule-implementation/
CDD & EDD: Originator CASPs must collect full, accurate information on both originators and beneficiaries; beneficiary CASPs verify via independent sources aligned with EU AML rules. Source: https://www.21analytics.co/blog/portugal-travel-rule-what-casps-need-to-know/
STR Reporting: Suspicious transfers must be reported to the Financial Intelligence Unit (FIU) if missing or incomplete Travel Rule information is identified. Source: https://www.21analytics.co/blog/portugal-travel-rule-what-casps-need-to-know/
Record Retention: Records must be retained as per national legislation, aligning with EU standards for crypto-asset transfers. Source: https://gfdl.legal/portugal-travel-rule-implementation/
Beneficial Ownership & PEP Screening: Required verification through KYC/KYB processes, ensuring alignment with FATF recommendations. Source: https://sumsub.com/blog/what-is-the-fatf-travel-rule/
Penalties & Fines: Non-compliance with Travel Rule and AML/CFT regulations can result in administrative fines and potential criminal liability under Portuguese law. Source: https://www.bportugal.gov.pt/enforcement
Arrests & Cases: No specific enforcement cases cited; however, regulatory bodies may issue warnings or impose sanctions for violations. Source: https://www.bportugal.gov.pt/enforcement
Travel Rule Portugal Discussed (2026) | 21 Analytics
Portugal – Travel Rule implementation - GFDL Advogados
EUR-Lex - Official Journal of the European Union
Crypto Travel Rule Explained: FATF Requirements for VASPs
Tax Reporting
Short-term (<365 days): Taxed at a flat 28%; if total annual income exceeds €83,696, taxpayers may need to aggregate into progressive IRS rates (up to 53%).
Long-term (>365 days): Generally tax-exempt, unless the asset is classified as a security or involves a blacklisted jurisdiction counterparty.
Staking, lending, mining, airdrops (Category E - Capital Income): Flat 28% rate on earnings, treated as passive investment income; mining may qualify as business income under progressive rates (14.5%-53%) plus social security.
Professional trading or business activity: Taxed as business/professional income at progressive IRS rates (up to 53%).
Crypto holdings and gains must be declared annually in the IRS tax return (Modelo 3), mandatory since February 2024 law.
Residents report worldwide income; non-residents taxed at 25% on Portuguese-sourced crypto income.
NHR regime for digital nomads offers 20% flat on Portuguese income, exemptions on foreign earnings.
2023 Orçamento do Estado: Introduced crypto taxation rules (https://cointracking.info/crypto-taxes-pt).
February 2024 Bill: Mandates crypto declaration in IRS (https://imin-portugal.com/blog/portugal-crypto-taxes/).
Personal Income Tax (IRS) Code, Categories E/G: Governs rates/exemptions (e.g., Art. on movable assets; https://taxsummaries.pwc.com/portugal/individual/other-issues).
Custody Requirements
Custody regulation data collection in progress.
Stablecoin Regulation
Bison Bank issues Portugal's first stablecoin
Blockchain & Cryptocurrency Laws 2026 | Portugal
Portugal's Income Tax Law – Article 23
Securities Classification
Portuguese Securities Market Commission (CMVM): Responsible for securities regulation.
Banco de Portugal: Oversees banking and monetary policy.
Autoridade de Supervisão de Seguros e Fundos de Pensões (ASF): Manages insurance and pension funds.
Law on the Organization of the Securities Market (Decreto-Lei n.º 89/2002, 29 de maio): Governs securities market activities.
Regulation (EU) No 809/2007: Implements MiFID II provisions in Portugal concerning investment services and markets.
Portugal Financial Services Supervision Overview
EUR-Lex - Official Journal of the European Union
Regulatory and Supervisory Authorities | International Social Security Association (ISSA)
CMVM’s Regulatory Framework for Digital Assets
International Organization of Securities Commissions (IOSCO) Membership List
Portugal’s Legal Framework for Pension Funds and Insurance Supervision
Oxford Handbook of International Financial Regulation
Portugal’s Securities and Banking Update 2023
Is crypto legal here? Yes, but without specific CMVM licensing.
Who regulates? Primarily CMVM for securities; Banco de Portugal and ASF for broader financial services.
Can you get a license? Not yet specifically for crypto assets as of 2025, pending regulatory development.
Has anyone been licensed? No specific licenses issued for digital asset securities by CMVM up to late 2024.
Practical reality: Crypto activities operate under broad financial regulations with evolving compliance expectations.
Sanctions & Restrictions
Sanctions data collection in progress.
Enforcement Actions
No verified facts yet. 5 unverified fact(s) in explorer
Research & Articles
Regulatory Forecast
high confidenceLikely enforcement action expected around 2026-10-28
Based on 40 historical regulatory events for Portugal, averaging every 35 days, with increasing regulatory activity.
Recent Updates
Specific effective date is not stated in available sources; it applies alongside MiCA transitional rules, with CASPs ...
Specific effective date is not stated in available sources; it applies alongside MiCA transitional rules, with CASPs needing full authorization by July 1, 2026.
Banco de Portugal (BdP) supervises compliance for CASPs and payment service providers; registered CASPs can opera...
Banco de Portugal (BdP) supervises compliance for CASPs and payment service providers; registered CASPs can operate under MiCA transitional rules until July 1, 2026.
Specific penalties not detailed in sources; supervision by Banco de Portugal implies enforcement under revised Law No...
Specific penalties not detailed in sources; supervision by Banco de Portugal implies enforcement under revised Law No. 83/2017 and AML regime, with potential for administrative sanctions typical in EU frameworks.
Banco de Portugal: Oversees banking and monetary policy.
Banco de Portugal: Oversees banking and monetary policy.
CMVM’s Regulatory Framework for Digital Assets
CMVM’s Regulatory Framework for Digital Assets
Portugal’s Securities and Banking Update 2023
Portugal’s Securities and Banking Update 2023
Who regulates? Primarily CMVM for securities; Banco de Portugal and ASF for broader financial services.
Who regulates? Primarily CMVM for securities; Banco de Portugal and ASF for broader financial services.
Has anyone been licensed? No specific licenses issued for digital asset securities by CMVM up to late 2024.
Has anyone been licensed? No specific licenses issued for digital asset securities by CMVM up to late 2024.
Penalties & Fines: Non-compliance with Travel Rule and AML/CFT regulations can result in administrative fines and pot...
Penalties & Fines: Non-compliance with Travel Rule and AML/CFT regulations can result in administrative fines and potential criminal liability under Portuguese law. Source: https://www.bportugal.gov.pt/enforcement
This profile is maintained by AI research workers and updated regularly. Connect via MCP for programmatic access.