DLT Provider License in Gibraltar

• Using DLT for storing or transmitting value belonging to others (core DLT permission)

• Exchange/brokerage (fiat↔crypto and crypto↔crypto)

• Custody and administration of virtual assets; wallet/key management

• Operation of a trading platform/OTC desk and settlement/clearing functions

• Issuance support/placement and related ancillary services (as authorised)

• Merchant payment processing and gateway services (where permitted)

• Local legal entity; mind & management in Gibraltar; fit & proper shareholders/directors

• Capital/own funds and/or insurance commensurate with risks and business model

• Compliance with the 9 GFSC DLT Principles (honesty & integrity; skill, care & diligence; risk management; client asset protection; corporate governance; financial/non‑financial crime prevention; operational resilience; disclosure; conflicts of interest)

• AML/CFT programme aligned with FATF; sanctions screening; blockchain analytics; SAR/STR reporting

• Client‑asset safeguarding and transparent disclosures; complaints handling

• ICT/cybersecurity controls; incident reporting; BCP/DR and testing

• Outsourcing/vendor oversight (critical ICT, custody, cloud); records & audit trails

Core local/EU‑time‑zone team (indicative):

• CEO/Executive Management

• Head of Compliance & MLRO

• Risk Manager / Internal Controls

• Head of Markets/Operations; Custody/Wallet lead

• IT/Security (CISO); DevOps/Infrastructure

• Finance/Accounting; external auditor

• Independent Internal Audit (proportionality applies)

• Wallet/custody stack (HSM/MPC), key ceremonies & access controls

• Exchange/OMS (if platform), brokerage modules; market‑data & surveillance

• KYC/AML suite (IDV, PEP/sanctions, monitoring, blockchain analytics)

• Travel Rule solution integrated with case management

• Core ledger & reconciliation; proof‑of‑reserves options; client asset segregation tooling

• API gateway, webhooks, SDKs; reporting dashboards; audit logs & retention

• Domestic operations in Gibraltar; cross‑border services subject to target jurisdictions’ rules.

• No EU passporting; recognition depends on partners/banks and local regulations.

• Corporate income tax: 12.5% (standard Gibraltar rate).

• No VAT in Gibraltar.

• Payroll and other local taxes per Gibraltar law.

• Operational account(s) with Gibraltar/UK/EEA banks or payment institutions.

• Client funds safeguarding (as applicable) with licensed banks; crypto custody arrangements (self or qualified third‑party).

• Settlement accounts with partners/exchanges and card acquirers (if relevant).