Regulatory positioning and license application scope
Gibraltar DLT license is regulated by GFSC (Gibraltar Financial Services Commission)，Core applies to business activities that “use distributed ledger technology to store or transmit value to others”。Typical scenarios include：Virtual asset trading platform、hosting provider、OTC brokerage matching、Payment clearing and settlement middle layer、Institutional-grade wallet infrastructure and more。
For Chinese overseas companies，The value of a DLT license is：Regulated entities can be established、Due diligence with institutional clients、Easily communicate regulated identities and controls to banks and payment institutions，And lay the foundation for subsequent expansion of multi-jurisdictional licenses。If you plan to expand into the Hong Kong market at the same time，Can be understood synchronously Hong Kong VASP License；If targeting US users，Recommended linkage US MSB Digital Currency Authorization Carry out compliance coordination。
Entry thresholds and governance requirements
Need to prove that management has financial、Risk control、Technical and Compliance Practice Capabilities，and continue to perform their duties。
Front desk business、risk compliance、Internal audit responsibilities need to be clearly segregated，Create a testable accountability mechanism。
Cover customer due diligence、Transaction monitoring、Sanctions Screening、Suspicious transaction reporting and record keeping。
System architecture needs to be submitted、Key management、Disaster recovery、Penetration testing and vendor management solutions。
Distinguish between company's own assets and customer assets，Set up clear hosting、Account reconciliation and emergency response rules。
Regulations generally require proof of financial soundness and ability to continue as a going concern commensurate with the size of the business.。
in regulatory communications，The three things that companies are most likely to be asked about are:：1) Is the flow of customer funds penetrable?；2) Whether abnormal transaction identification can be quantified；3) How to protect customer rights when technical failures occur。Therefore, we recommend doing a “simulated inquiry drill” before making a formal submission.，Write governance logic into executable systems，Rather than staying at the template level。
Application process and expected lead time
comb products、client、Funding and technology links，Confirm license boundaries and regulatory classifications。
Establish application entity，Clarify equity、Board of Directors、Actual controller and key outsourcing relationship。
Complete business plan、risk framework、AML/CFT、Information Security and Operations Manual。
Communicate with regulators in advance，Strengthen the evidence chain and resume proof of key positions。
Submit application form、Eligibility Materials、Policy documents and financial forecasts。
Answer regulatory questions by round，Adjust controls or business arrangements as necessary。
Complete the system conditionally、personnel、process、Implementation and rectification of contracts, etc.。
Establish regular reporting、audit、Training and Incident Reporting Mechanism。
Core compliance obligations during the operation period
Getting cards is just the starting point，What supervision really assesses is “Ongoing Compliance Capabilities”。Enterprises need to establish a quarterly/annual review mechanism，Continuously monitor customer risk levels、Transaction profile deviation、Suspicious activity reporting quality、Wallet address risk exposure、Key indicators such as supplier security scores。
If an enterprise plans to form a multi-license matrix，Can be referenced：British FCA license、Lithuania VASP License、Malta Blockchain/MFSA License。If supporting funds are needed,，Can be linked Offshore private banking services and Offshore bank account opening planning。
Establish a fixed window and upgrade mechanism，Ensure timely reporting and recording of major matters。
Risk control parameters、Model thresholds and exception approvals must maintain an audit trail。
KYC、On-chain analysis、Managed technology providers for admission and ongoing oversight。
Balancing privacy、Law enforcement collaboration and evidence retention，Meet multi-jurisdictional collaboration requirements。
Application fee budget and project costs
Gibraltar DLT Provider Current Official Charges
| project | Amount | Official caliber |
|---|---|---|
| Part 7 permission application fee | 45,000 GBP | Application fee for DLT Provider or Virtual Asset Arrangement Provider |
| annual base fee | 12,254 GBP | Fixed base fee |
| Annual Trading Activity Fee | reporting transaction volume 0.1% | Highest 92,700 GBP |
| annual surcharge | 28,183 GBP | Together with the base fee and trading activity fee, it constitutes an annual fee. |
Old version 2,000 Initial appraisal fee in pounds sterling and 10,000 / 20,000 / 30,000 The pound sterling classification table is no longer displayed as a current charge。The scope of business authorization must still be managed according to the actual、trade、exchange、Client assets and cross-border activities are assessed on a case-by-case basis by the GFSC。
Official basis and last verification date：2026August。Gibraltar Financial Services Fees Regulations；GFSC Distributed Ledger Technology Providers。
Gibraltar DLT License FAQs(FAQ)
The competent authority is GFSC。The legal positioning should be judged based on the current "Financial Services Act 2019" and related subsidiary regulations.，Can't just cite earlier 2017 rules。 SeeCurrent financial services law in Gibraltar。
现行法附表2第16部分包括使用DLT为他人储存或传输价值的活动。是否落入许可范围还须检查法定排除、已有权限和具体资金流程。 SeeCurrent financial services law in Gibraltar。
uncertain。仅提供技术与为客户保管或转移价值有区别；应明确谁控制私钥、Execute trade、收取资金并承担对客户的义务。 SeeCurrent financial services law in Gibraltar。
并不相同。现行法另列虚拟资产活动，包括虚拟资产与法币或其他虚拟资产的兑换及安排；混合业务应分别判断权限。 SeeCurrent financial services law in Gibraltar。
cannot be generalized。法律对在已有相应许可业务中使用DLT等情况设有边界，应逐项分析排除条款，而非仅按技术名称决定。 SeeCurrent financial services law in Gibraltar。
截至2026年10月14日所核对的2026年9月3日版收费法规，相关G1申请费为45,000英镑。这是官方申请费，Does not include consultants、audit、系统或资本成本。 See直布罗陀2026年金融服务收费法规。
上述版本列有12,254英镑基础费、按报告交易量0.1%计算的交易活动费及28,183英镑附加费。92,700英镑上限适用于交易活动部分，不能当作总年费上限。 See直布罗陀2026年金融服务收费法规。
人员审批或年度费用属于另一个收费项目，须按个人角色和适用类别核对。不能把公司牌照费用理解为包含所有人员变更和审批成本。 See直布罗陀2026年金融服务收费法规。
no。Application fee、可用资本和持续财务资源是不同项目；应根据业务风险、customer assets、营运预算及退出安排评估，不能以支付规费代替资本准备。 SeeCurrent financial services law in Gibraltar。
本FAQ不采用未经现行文件支持的固定两人门槛。应提交实际治理、Job responsibilities、人员能力和管理安排，按申请活动及GFSC要求落实。 SeeCurrent financial services law in Gibraltar。
应准备身份、Resume、qualifications、conflict of interest、职责和实际投入资料，并说明其与业务风险的匹配程度。director、合规和技术岗位不能仅以名义任职替代履职。
建议说明服务对象、资产种类、transaction process、收入模式、target market、系统依赖、预算和退出路径；许可范围应与实际业务一致。
应记录钱包和私钥控制、Authorize、资产对账、Access rights、异常处理及返还流程。A certain multi-signature or hot and cold wallet configuration cannot be said to be a unified legal solution for all businesses.。
Customer status should be assessed in accordance with applicable law、beneficial owner、Source of funds、sanctions、Transaction monitoring and reporting obligations；On-chain tools are means of control，Cannot replace manual upgrade disposal and governance responsibilities。
cannot。Outsourcer access rights should be clearly defined、服务水平、审计证据、故障恢复及退出安排，持牌机构仍须能够管理其业务和客户风险。
Can't promise like this。直布罗陀权限不自动等于英国加密资产、金融推广或其他金融服务资格，应另行核对英国规则及实际跨境准入条件。
no。应按客户所在地和营销方式检查当地许可、consumer protection、制裁及数据规则，避免把一个法域的授权宣传成全球通行证。
not guaranteed。File integrity、business complexity、系统准备和监管问询均会影响时间，应以主管机构程序和个案沟通安排为准。
先核对适用通知或事前批准要求，再执行变更；保存董事会决议、更新资料及监管往来，不能认为原许可无条件覆盖变更后的业务。 SeeCurrent financial services law in Gibraltar。
应制定有序退出计划，安排客户通知、资产返还、未决投诉、记录保存及监管沟通。停业不等于自动结束持续义务。 SeeCurrent financial services law in Gibraltar。
