Setting Up a Crypto / Web3 Company in Cyprus 2026 — MiCA, the CySEC CASP Regime, 8% Crypto Gains & the VASP-to-CASP Transition

Why Cyprus for crypto and Web3

Cyprus offers an EU/Eurozone home for crypto businesses that want to be regulated rather than offshore. It pairs a harmonised EU framework (MiCA) and a credible national supervisor (CySEC) with a competitive 15% corporate income tax, English-language common-law-aligned administration, and an existing fintech ecosystem built around the island's large regulated-broker community.

For founders, the appeal is regulatory legitimacy plus tax efficiency: a MiCA CASP authorisation passportable across the EU, combined with a flat 8% treatment on crypto gains for 2026 (subject to final regulations). This is general information, not tax or legal advice — confirm the current rules with a regulated adviser.

What is a CASP under MiCA?

MiCA — the EU Markets in Crypto-Assets Regulation — created a single, EU-wide regime for crypto-asset services. Under it, a firm providing crypto-asset services must be authorised as a Crypto-Asset Service Provider (CASP). In Cyprus, CySEC is the competent authority for CASP authorisation and supervision.

CASP services broadly include custody and administration of crypto-assets, operation of a trading platform, exchange of crypto-assets for funds or other crypto-assets, execution and reception/transmission of orders, placing, advice and portfolio management on crypto-assets. The services you intend to offer determine the scope of your authorisation and the obligations that follow.

• MiCA = the EU-wide regulation for crypto-asset markets and services.
• CASP = the authorised entity providing crypto-asset services.
• CySEC is the Cyprus competent authority for CASP authorisation.
• Authorisation scope tracks the specific services offered (custody, exchange, trading platform, etc.).

Can a Cyprus CASP passport across the EU?

Yes — that is the central commercial benefit of MiCA. A CASP authorised in Cyprus can passport its services across the EU/EEA, providing crypto-asset services in other member states either cross-border or through a branch, under home-state supervision by CySEC. One authorisation translates into pan-European market access, mirroring how MiFID II passporting works for investment firms.

The VASP to CASP transition

Before MiCA, Cyprus operated a national register of Crypto-Asset Service Providers commonly referred to as the VASP (Virtual Asset Service Provider) register, supervised by CySEC primarily for AML purposes. MiCA replaces this patchwork of national regimes with a single EU authorisation, so previously registered VASPs need to transition to full MiCA CASP authorisation to keep operating lawfully.

Practically, this means existing Cyprus VASP-registered firms must align with MiCA's authorisation, governance, capital and conduct requirements, and new entrants apply directly for CASP authorisation. Transitional arrangements and deadlines are set by the regulation and national implementation — confirm the exact timetable that applies to your firm with a regulated adviser, as getting the transition wrong can interrupt the ability to operate.

• Old position: national VASP register supervised by CySEC (AML-focused).
• New position: full MiCA CASP authorisation, EU-harmonised and passportable.
• Existing VASPs must transition to CASP to continue operating.
• New entrants apply directly for CASP authorisation under MiCA.

Transition timelines and grandfathering are governed by MiCA and national implementing rules and may change. This is general information, not legal advice — confirm your firm's deadline with a regulated adviser.

How are crypto gains taxed in Cyprus in 2026?

For 2026, Cyprus applies a flat 8% rate to crypto gains (subject to final regulations). This is distinct from the general corporate income tax rate of 15% that applies to a CASP's ordinary trading and service-fee profits, and from the 0% capital gains rate that applies to disposals of securities — crypto-assets are treated under their own regime rather than as securities.

Because the 8% treatment is described as subject to final regulations for 2026, the precise scope, base and qualifying conditions should be checked before you rely on it. Do not assume a single number resolves your whole tax position: a crypto company will usually have a mix of service-fee income (15% CIT) and crypto gains (8%), and the classification of each stream matters.

The 8% crypto-gains treatment is stated as subject to final 2026 regulations. This is general information, not tax advice — confirm scope and conditions with a regulated adviser.

Company structure and substance

The vehicle is a Cyprus limited company that holds the CASP authorisation and runs the business. As with any regulated activity, CySEC expects genuine local substance and a competent team — a CASP cannot be a paper company.

• Cyprus limited company as the authorised CASP entity.
• Cyprus-resident directors and senior management with relevant fitness/probity standing.
• Compliance, risk-management and AML/CFT functions with KYC onboarding.
• Custody, safeguarding and segregation arrangements appropriate to the services offered.
• Local office and operational infrastructure proportionate to the business.
• ICPAC-audited annual financial statements — mandatory for all Cyprus companies.

Indicative authorisation steps

1. 1Define the crypto-asset services to be offered and therefore the CASP scope.
2. 2Incorporate or repurpose the Cyprus company that will hold the authorisation.
3. 3Build the governance, compliance, AML/CFT and capital framework MiCA requires.
4. 4Submit the CASP application to CySEC (business plan, policies, safeguarding arrangements).
5. 5Existing VASPs: run the transition to CASP within the applicable deadline.
6. 6Once authorised, notify passporting into target EEA states and operate under CySEC supervision.

MiCA/CySEC authorisation is materially more involved than a standard formation. Plan timelines and capital with regulated advisers.

Frequently Asked Questions

Share this article

Disclaimer: This article is for informational purposes only and does not constitute legal, tax, or financial advice. Tax laws change frequently. Consult a qualified Cyprus adviser for guidance specific to your situation. The information on this page is general guidance only and does not constitute legal, tax, accounting, immigration or financial advice. Specific advice should be obtained based on the facts of each case.