Gibraltar

Overview

Gibraltar was the first jurisdiction in the world to enact a bespoke regulatory framework for distributed ledger technology businesses, issuing its inaugural DLT Provider licences in January 2018 under the Financial Services (Distributed Ledger Technology Providers) Regulations. This first-mover advantage, combined with a 10% corporate tax rate, an English common law legal system, and a location at the strategic entrance to the Mediterranean, has made Gibraltar one of the most internationally recognised jurisdictions for crypto exchanges, blockchain infrastructure businesses, and tokenised finance.

The jurisdiction's commercial base is small but highly focused: approximately 35,000 residents, a concentrated professional services sector oriented around financial services and gaming, and a regulatory environment administered by the Gibraltar Financial Services Commission (GFSC) that is principles-based and commercially engaged.

DLT Regulatory Framework

The Financial Services (Distributed Ledger Technology Providers) Regulations came into force on 1 January 2018, creating the world's first purpose-built licensing regime for businesses using distributed ledger technology to store or transmit value belonging to others. The regime captures:

• Crypto exchanges (spot and derivatives)
• Custodians and digital asset storage providers
• Payment processors using blockchain infrastructure
• Token issuers (where the token constitutes value storage or transmission)
• Blockchain infrastructure businesses that hold client assets or transmit value

The licensing regime is principles-based: there is no exhaustive rulebook. Instead, the GFSC assesses applicants against nine core regulatory principles:

1. Conduct of business with honesty and integrity
2. Paying due regard to the interests and needs of each and all customers
3. Maintaining adequate financial and non-financial resources
4. Managing and controlling business effectively with proper infrastructure
5. Having effective AML/CFT procedures
6. Safeguarding and properly administering assets and money entrusted by customers
7. Ensuring systems are secure, reliable, and protected against cyber threats
8. Being resilient to cyberattacks and having plans for business continuity and recovery
9. Promoting and enhancing the integrity of the financial system of Gibraltar

Applications are assessed holistically against these principles. The GFSC holds pre-application meetings with prospective licensees and has developed substantial expertise in evaluating crypto business models across the spectrum of exchange operations, custody, and DeFi-adjacent activities.

Key Facts

Corporate Tax	10%
Capital Gains Tax	0%
Inheritance Tax	0%
Wealth Tax	0%
Crypto Regulator	Gibraltar Financial Services Commission (GFSC)
DLT Framework	Financial Services (DLT Providers) Regulations 2018
Legal System	English common law (Privy Council appeal)
Gaming Regulator	Gibraltar Regulatory Authority (GRA)
Currency	Gibraltar Pound (at par with GBP); GBP widely accepted
Population	~35,000
Territory	British Overseas Territory

Corporate Tax Regime

Gibraltar's 10% corporate tax rate applies to profits accruing in or deriving from Gibraltar. The territorial nature of the tax is the critical feature: income arising from activities conducted entirely outside Gibraltar — from transactions between non-Gibraltar parties, from services rendered to non-Gibraltar clients — is generally excluded from the taxable base.

Operationally, this means a DLT-licensed company that maintains its GFSC licence and local presence in Gibraltar, but whose revenue derives substantially from an international client base, will typically have a modest Gibraltar tax base. Detailed tax analysis of the specific business model is required, as the treatment of different income streams (trading fees, staking revenue, custody fees, protocol income) varies.

No capital gains tax, inheritance tax, or wealth tax applies to Gibraltar residents or Gibraltar-resident companies. For individuals who establish residency in Gibraltar under the Category 2 or High Executive Possessing Specialist Skills (HEPSS) regimes, the personal tax position is highly favourable.

Individual Residency — Category 2 and HEPSS

Category 2 residency allows approved foreign nationals to cap their annual Gibraltar income tax liability at approximately GBP 37,000–52,000 (subject to minimum qualifying conditions), regardless of their actual income level. This makes Gibraltar highly attractive for entrepreneurs, investors, and executives with high incomes.

HEPSS (High Executive Possessing Specialist Skills) is available to senior executives of Gibraltar-based businesses earning more than GBP 160,000 per year, with a tax liability capped at the normal rate on a defined income ceiling.

Online Gaming

Gibraltar has been a centre of online gaming for over two decades. The Gibraltar Regulatory Authority (GRA) issues B2C and B2B gaming licences that are accepted by major payment processors and platform partners globally. Several of the world's largest online sports betting and casino operators are headquartered in Gibraltar, including companies that are publicly listed on major stock exchanges.

The convergence of crypto and gaming — blockchain-based gaming, NFT-linked reward systems, play-to-earn ecosystems — makes Gibraltar particularly relevant for businesses operating at the intersection of these two sectors.

Substance Requirements

The GFSC requires DLT licensees to maintain genuine physical presence in Gibraltar:

• At least one director resident in Gibraltar (fit and proper assessment required)
• A registered office in Gibraltar
• Key senior personnel in Gibraltar with responsibility for compliance, operations, or risk management
• Adequate financial resources — minimum capital requirements vary by DLT activity and risk profile

This substance requirement is genuine but proportionate. A well-staffed Gibraltar office of 3–8 professionals, with appropriate compliance and management infrastructure, typically satisfies the GFSC's requirements for mid-size exchange and custody businesses.

Post-Brexit Positioning

Gibraltar is a British Overseas Territory and voted to remain in the EU (96% in favour) in the 2016 referendum. Following Brexit, Gibraltar's relationship with the EU financial regulatory framework changed materially — it no longer benefits from MiFID II passporting into EU member states. EU market access for Gibraltar-licensed businesses now requires separate structuring, typically through an EU-licensed subsidiary (Malta, Cyprus, and Luxembourg are most commonly used).

However, for businesses whose primary markets are outside the EU — particularly the UK, Asia, and the Americas — Gibraltar's post-Brexit positioning is less significant, and the DLT regime remains fully operational and internationally recognised.

Costs and Timelines

Item	Detail
DLT Licence application fee	GBP 2,000 (initial); GBP 1,000 (annual)
DLT Licence processing time	4–9 months (GFSC assessment)
Company formation	GBP 500–1,200
Incorporation timeline	2–5 business days
Annual corporate tax rate	10%
Annual corporate maintenance	GBP 2,000–6,000
Category 2 Residency annual tax cap	~GBP 37,000–52,000

HPT's Assessment

Gibraltar occupies a distinct and defensible niche: it is the most credible, English-law jurisdiction with a purpose-built crypto regulatory framework outside of Singapore and the UAE, and it retains the advantage of being the only such jurisdiction within or adjacent to the European regulatory ecosystem with a direct British legal heritage.

For crypto exchanges, custodians, and blockchain infrastructure businesses that want a regulated licence, an English common law system, and a 10% corporate tax rate — without the cost and complexity of setting up in Singapore or the UAE — Gibraltar deserves serious consideration. HPT has established relationships with Gibraltar-based legal and compliance professionals who work directly with the GFSC on DLT licence applications.