Is Crypto Legal in Iceland?
Cryptocurrency is legal and regulated in Iceland. The jurisdiction has a comprehensive, dedicated crypto framework with licensing and active enforcement. Central Bank of Iceland is among the 2 regulators with oversight. The FATF Travel Rule has not been adopted.
Derived from 437 sourced facts for Iceland · last updated · primary sources
Overview
Iceland regulates crypto through its AML/CFT framework, with the Act on Measures to Combat Money Laundering and Terrorist Financing No. 140/2018 (transposing AMLD5) as the anchor legislation; any entity providing virtual asset services — including custody involving control of private keys — triggers mandatory VASP registration. The Central Bank of Iceland (Seðlabanki Íslands), which absorbed the former Financial Supervisory Authority in 2020, administers that registration and requires VASPs to meet AML/KYC obligations, maintain clear ownership and transaction records, and avoid commingling of client assets. Enforcement has been notably quiet, with no public administrative actions against crypto firms recorded in recent years, though criminal cases involving virtual assets are handled separately by police and prosecutors. (eur-lex.europa.eu)
Regulatory Bodies
Regulator: The primary financial regulator is now the Seðlabanki Íslands (Central Bank of Iceland), which absorbed the functions of the former Financial Supervisory Authority (Fjármálaeftirlitið, FME) in January 2020.
Regulator: The primary financial regulator is now the Seðlabanki Íslands (Central Bank of Iceland), which absorbed the functions of the former Financial Supervisory Authority (Fjármálaeftirlitið, FME) in January 2020.
Operating Models
9/9 verdictsCan specific business models operate in Iceland? Each card answers the operational question for one kind of operator. Curated cells reflect counsel-grade review; AI-generated cells should be confirmed before relying on them.
Conditional · high burden.
AI · UnreviewedConditional · medium burden.
AI · UnreviewedPermitted, no licensing.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · medium burden.
AI · UnreviewedConditional · medium burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · medium burden.
AI · UnreviewedPrimary Legislation
| Law / Regulation | Year | Scope |
|---|---|---|
| General information on virtual assets and regulation | General information on virtual assets and regulation: https://www.sedlabanki.is/library/Frettir-og-utgafa/Rit/ymsar-skyrslur/Skyrsla_rafmynt_EN.pdf (This is an older report but provides context) |
Licensing Requirements
Regulator: The primary financial regulator is now the Seðlabanki Íslands (Central Bank of Iceland), which absorbed the functions of the former Financial Supervisory Authority (Fjármálaeftirlitið, FME) in January 2020. It is responsible for supervising financial undertakings, including those dealing with virtual assets, primarily from an AML/CFT perspective.
Focus: The Central Bank's focus has been on implementing AML/CFT regulations for Virtual Asset Service Providers (VASPs), aligning with FATF recommendations and EU directives. They require VASPs to register and comply with the AML/CFT Act.
No Publicly Announced Major Actions: Unlike larger countries where regulatory bodies regularly announce fines or other penalties against specific crypto firms for violations, Iceland has not had such public announcements in the last three years. This doesn't mean there are no regulatory activities, but rather that any actions taken may be less "significant" in the public domain (e.g., private warnings, compliance orders, or smaller, non-public fines) or against individuals rather than companies, or relate to older cases outside the requested timeframe.
Criminal Cases: While there haven't been public administrative actions from the financial regulator, criminal cases involving cryptocurrency fraud or theft can occur, handled by the police and prosecutors. However, such cases are typically against individuals for criminal offenses rather than administrative enforcement against a regulated entity, and no major, widely publicized criminal actions against a crypto company have emerged in the last 3 years that would fit "enforcement action" in the regulatory sense. The prominent "Cloud Mining" Ponzi scheme was investigated and prosecuted years ago, outside the specified 3-year window.
General information on virtual assets and regulation: https://www.sedlabanki.is/library/Frettir-og-utgafa/Rit/ymsar-skyrslur/Skyrsla_rafmynt_EN.pdf (This is an older report but provides context)
Central Bank's main page (English): https://www.sedlabanki.is/en/ (You would typically look under "Supervision" or "News" for enforcement actions, but specific public announcements of fines are rare.)
AML/CFT Act in Iceland: Iceland has implemented the 5th Anti-Money Laundering Directive (AMLD5), which covers virtual asset service providers. The legal framework is primarily the Act on Measures Against Money Laundering and Terrorist Financing No. 140/2018.
AML/KYC Requirements
VASP Registration: Any entity providing services related to virtual assets, including the safekeeping and/or administration of virtual assets on behalf of customers (i.e., custody), is required to register as a Virtual Asset Service Provider (VASP) with the Central Bank of Iceland. This is not a "license" in the traditional sense of financial services but rather an AML/CFT registration that imposes significant obligations.
The registration is mandated by the Act on measures to combat money laundering and terrorist financing No. 140/2018, which transposes EU AML Directives (AMLD5, soon AMLD6) into Icelandic law.
Scope: This typically covers situations where the custodian holds private keys and has control over clients' virtual assets.
Act on measures to combat money laundering and terrorist financing No. 140/2018: https://www.althingi.is/lagas/nuna/2018140.html (Icelandic original)
While not explicitly detailed solely for crypto-asset custody in current Icelandic law, general principles of financial services and AML/CFT best practices would strongly suggest the need for segregation. VASPs are expected to maintain clear records of ownership and transactions, and commingling of funds/assets would violate these principles and increase AML/CFT risks.
The AML Act requires VASPs to keep records of transactions and to identify beneficial owners, indirectly supporting the need for clear asset ownership distinctions.
There are no specific insurance or bonding requirements mandated for crypto custodians under the current AML-focused VASP registration framework. General business insurance would be expected, but no specific prudential safeguards for crypto custody are prescribed.
There are no specific legal mandates for the use of cold storage for crypto assets under current Icelandic law. However, robust security measures are expected as part of general operational risk management and AML/CFT compliance (e.g., preventing theft that could facilitate money laundering). Industry best practices for secure custody overwhelmingly recommend cold storage for the majority of assets.
The term "qualified custodian" is not formally defined in Icelandic law specifically for crypto assets. A VASP registered with the Central Bank of Iceland to provide virtual asset services, including custody, would be the closest equivalent under the current framework.
MiCA Authorization: Under MiCA, "custody and administration of crypto-assets on behalf of clients" is explicitly defined as a crypto-asset service (Article 3, point 16). Providers of this service will be required to obtain authorization from their competent national authority (in Iceland, likely the Central Bank of Iceland) to operate as a Crypto-Asset Service Provider (CASP) (Article 59).
This authorization is a full financial services license, distinct from the current AML registration.
Regulation (EU) 2023/1114 on Markets in Crypto-Assets (MiCA): https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32023R1114
Relevant Articles: Chapter 2 (Authorization and operating conditions for CASPs), specifically Article 59, and Chapter 3 (Obligations of CASPs), specifically Section 6 for custody.
Mandatory Segregation: MiCA explicitly mandates strict segregation of client assets.
Article 67 (Obligations of crypto-asset service providers providing custody and administration of crypto-assets on behalf of clients), point 1: "A crypto-asset service provider providing custody and administration of crypto-assets on behalf of clients shall ensure that the crypto-assets of its clients are segregated from its own assets and from the assets of other clients."
It also requires making arrangements to ensure the timely return of clients' crypto-assets.
Prudential Safeguards: MiCA (Article 66, point 10 and Article 67, point 7) requires CASPs to have robust prudential safeguards. These safeguards can take the form of:
The amount of prudential safeguards depends on the services provided and the nature, scale, and complexity of operations, with specific thresholds set out in Annex IV.
MiCA does not mandate cold storage specifically but requires CASPs to implement robust security measures for the safekeeping of crypto-assets.
Article 67, point 2: "A crypto-asset service provider providing custody and administration of crypto-assets on behalf of clients shall establish, implement and maintain robust security policies and procedures regarding the access to, and the protection of, the crypto-assets, private cryptographic keys and, where applicable, the means of access to the crypto-assets of its clients."
This implies that CASPs must adopt industry-leading security practices, which in most cases for the majority of assets, would involve cold storage or highly secure offline solutions.
Under MiCA, an authorized Crypto-Asset Service Provider (CASP) that has obtained the specific authorization to provide "custody and administration of crypto-assets on behalf of clients" would essentially become the "qualified custodian." The authorization process ensures they meet the stringent capital, operational, security, governance, and organizational requirements laid out in MiCA.
Shift from AML Registration to Full License: A significant transition from merely registering as a VASP for AML purposes to obtaining a comprehensive financial services license as a CASP.
Explicit Custody Rules: Introduction of specific, detailed rules for crypto-asset custody covering segregation, security, and prudential requirements.
Increased Regulatory Scrutiny: CASPs will be subject to ongoing supervision by the Central Bank of Iceland to ensure compliance with MiCA's broad range of obligations.
Information on Financial Undertakings: https://www.cb.is/financial-supervision/licensed-entities/
Registration: VASPs are required to register with the Central Bank of Iceland for AML/CFT purposes. This registration subjects them to AML/CFT obligations and supervision.
Licensing: A full operating license (e.g., an electronic money institution license, payment institution license, or investment firm license) might be required if the VASP's activities extend beyond basic virtual asset services and fall under other specific financial services laws (e.g., dealing with fiat currency payments, issuing e-money, providing investment advice).
Required License/Registration: VASP Registration with the Central Bank of Iceland.
Reason: This activity is explicitly defined as a virtual asset service under Icelandic AML/CFT law.
Reason: Falls under the "transfer of virtual assets" or "participation in and provision of financial services related to an issuer's offer and/or sale of virtual assets" definitions of a VASP.
Required License/Registration: This likely requires a Payment Institution (PI) license or an Electronic Money Institution (EMI) license under the Act on Payment Services (Act No. 87/2021).
Reason: Handling fiat currency as a payment service provider typically triggers these traditional financial services licenses. The VASP registration alone is insufficient.
Act No. 140/2018 on Measures Against Money Laundering and Terrorist Financing (Lög um aðgerðir gegn peningaþvætti og fjármögnun hryðjuverka):
(Note: Official English translations of Icelandic laws are not always readily available online. The Icelandic Parliament's website is the authoritative source).
Applicants must be a legal entity established in Iceland (e.g., a limited liability company, einkahlutafélag or hlutafélag).
Comprehensive Policies and Procedures: Implement robust internal policies, controls, and procedures to prevent money laundering and terrorist financing.
Risk Assessment: Conduct a thorough risk assessment of their business, customers, products, and geographical areas.
Customer Due Diligence (CDD): Implement stringent KYC procedures, including identifying and verifying customers' identities (both natural persons and legal entities), identifying beneficial owners, and understanding the purpose and intended nature of the business relationship.
Enhanced Due Diligence (EDD): Apply EDD for higher-risk situations (e.g., politically exposed persons, complex transactions, high-risk countries).
Ongoing Monitoring: Continuously monitor customer transactions and activities for suspicious behavior.
Reporting Obligations: Report suspicious transactions (STRs) and other relevant information to the Financial Intelligence Unit (FIU) in Iceland.
Record-Keeping: Maintain records of all transactions and customer due diligence for at least five years.
AML Officer: Appoint a designated AML Officer (Money Laundering Reporting Officer - MLRO) responsible for implementing AML/CFT policies and reporting to the FIU.
Individuals in management, on the board of directors, and significant beneficial owners of the VASP must satisfy "fit and proper" criteria, demonstrating good repute, competence, and integrity. This involves background checks and assessment by the Central Bank.
For VASP registration under AML/CFT alone, there are typically no explicit minimum capital requirements specified in the same way as for licensed financial institutions (like banks or EMIs). However, the Central Bank expects the entity to be financially sound and capable of meeting its operational obligations.
For entities that require an EMI or PI license (e.g., complex payment processors handling fiat), specific and significant minimum capital requirements will apply as per the Act on Payment Services (e.g., often ranging from €20,000 to €350,000 depending on the scope of services for PIs/EMIs).
Legal Entity: The VASP must be an Icelandic legal entity, registered in the Icelandic Register of Companies.
Management: While not always explicitly requiring all management to be resident, there must be effective management and control exercised from Iceland, and the Central Bank will assess the adequacy of local oversight. The AML Officer generally needs to be locally based or easily accessible.
Applicants are expected to have robust IT systems, security measures, and business continuity plans to protect virtual assets, customer data, and ensure operational resilience. While not explicitly listed as a "license requirement," it's integral to operational soundness assessed during the application.
Pre-Application Contact (Optional but Recommended): Engage with the Central Bank to discuss the proposed business model and clarify any specific requirements.
Preparation of Documentation: Compile a comprehensive application package, which typically includes:
Completed application forms provided by the Central Bank.
Detailed business plan, including operational model, target market, and projected financial performance.
Organizational structure, including governance arrangements, reporting lines, and outsourcing arrangements.
AML/CFT policies and procedures manual, risk assessments, and internal controls.
Information on key personnel (management, board members, AML Officer) including CVs, criminal records, and "fit and proper" declarations.
Information on significant beneficial owners.
Proof of incorporation in Iceland and other relevant legal documents.
IT security policies and disaster recovery plans.
Submission: Submit the complete application package to the Central Bank of Iceland.
Review and Assessment: The Central Bank will conduct a thorough review of the application, including:
Assessing the completeness and accuracy of the submitted information.
Evaluating the AML/CFT framework for compliance with the law.
Assessing the "fit and proper" criteria of management and owners.
Potentially requesting additional information or clarification.
On-site Visit (Possible): In some cases, the Central Bank may conduct an on-site visit to assess the operational readiness and controls.
Decision: The Central Bank will make a decision on the registration. If approved, the entity will be added to the register of VASPs supervised for AML/CFT purposes. If rejected, reasons will be provided.
Central Bank of Iceland - AML/CFT: https://www.cb.is/financial-supervision/aml-cft/
Act No. 87/2021 on Payment Services (Lög um greiðsluþjónustu) - Icelandic Parliament (Relevant for payment processors handling fiat):
Purpose: This Act implements the EU's 5th Anti-Money Laundering Directive (AMLD5) into Icelandic law. It explicitly includes Virtual Asset Service Providers (VASPs) within its scope. VASPs in Iceland are therefore required to register with the Central Bank of Iceland, conduct due diligence on their customers, monitor transactions, and report suspicious activities. This is the cornerstone of current crypto regulation.
Reference (Icelandic Parliament website): https://www.althingi.is/lagasafn/pdf/1402018.pdf
Markets in Crypto-Assets (MiCA) Regulation (EU Regulation 2023/1114)
Date: Adopted by the EU in 2023, with phased implementation (stablecoins from June 2024, other provisions from December 2024).
Purpose: While an EU regulation, Iceland, as an EEA member, will be obliged to implement MiCA into its national law. MiCA provides a comprehensive regulatory framework for crypto-assets that are not already covered by existing financial services legislation. It will cover:
Authorization and supervision of crypto-asset service providers (CASPs).
Rules for the issuance and trading of various types of crypto-assets (e.g., asset-referenced tokens, e-money tokens).
Consumer protection and market integrity measures.
Requirements for transparent whitepapers and disclosure.
Impact on Iceland: Once implemented, MiCA will significantly expand Iceland's regulatory scope beyond just AML/CFT, introducing a full licensing regime for crypto businesses and comprehensive rules for crypto-asset offerings.
Legality: Crypto trading and the operation of crypto exchanges (VASPs) are generally legal in Iceland.
AML/CFT Registration: VASPs operating in Iceland are required to register with the Central Bank of Iceland (Seðlabanki Íslands) under Act No. 140/2018. This registration mandates adherence to strict AML/CFT obligations, including customer identification (KYC), transaction monitoring, and suspicious activity reporting.
No Broad Licensing (Yet): Currently, beyond the AML/CFT registration, there isn't a comprehensive licensing regime for crypto exchanges that covers broader aspects like prudential requirements, market conduct rules, or consumer protection, as is common for traditional financial institutions.
Investor Warnings: The Central Bank of Iceland has consistently issued warnings to the public about the high risks associated with investing in cryptocurrencies, citing their volatility, lack of regulation (beyond AML), and potential for fraud.
Future with MiCA: Once MiCA is fully implemented, crypto exchanges and other CASPs will need to obtain a specific license from the Central Bank of Iceland, adhere to detailed operational, organizational, and prudential requirements, and comply with new rules designed to protect investors and maintain market integrity.
Travel Rule
Iceland has implemented the EU Fifth Anti-Money Laundering Directive (5AMLD) through its national law, the Act on Measures against Money Laundering and Terrorist Financing (Act No. 140/2018), which brings cryptocurrency service providers under AML/CFT regulation and requires registration with the Central Bank of Iceland (CBI) — Financial Supervision Department (FSD) (formerly the Financial Supervisory Authority, FSA). cbp.gov/site-policy-notices/foia
As of 2025–2026, zero or very few Virtual Asset Service Providers (VASPs) have completed full registration with the CBI/FSD, making practical operation highly uncertain. Operators should expect significant delays and regulatory uncertainty. Foreign travel advice - GOV.UK
The EU Travel Rule under Regulation (EU) 2023/1113 is EEA-applicable but, as of the current date, has not yet been formally incorporated into the EEA Agreement and entered into force in Iceland. Operators should monitor EEA Joint Committee decisions for the effective date. Trademark search
With no entities fully licensed, there is currently no compliant market entry point for VASP operations in Iceland. IRS Where's My Refund
Ministry of Finance and Economic Affairs — responsible for proposing legislation related to financial markets, including virtual assets and AML/CFT regulation Site locality identification study: Hanford Site. Volume I. Methodology, guidelines, and screening
Government of Iceland — the executive branch which enacts national implementation of EU directives relating to anti-money laundering and counter-terrorist financing Home
Financial Intelligence Unit (FIU) of Iceland — a department of the National Police Commissioner; receives suspicious transaction reports (STRs) Draft environmental assessment for characterization of the Hanford Site pursuant to the Nuclear Waste Policy Act of 1982 (Public Law 97-425), Hanford Site, Richland, Benton County, Washington
Regulation (EU) 2022/858 on a pilot regime for market infrastructures based on distributed ledger technology — may be incorporated into the EEA Agreement, but as of the current date, the EEA Joint Committee has not yet adopted it. Operators should verify current EEA incorporation status via EUR-Lex. Trademark search
Regulation (EU) 2023/1113 on information accompanying transfers of funds and certain crypto-assets (recast) — this EU regulation mandates travel-rule information requirements for virtual asset transfers. As of the current date, it has not yet been formally incorporated into the EEA Agreement and entered into force in Iceland. The December 2024 EU effective date does not automatically apply to EEA-EFTA states. Operators should monitor EEA Joint Committee decisions for the Icelandic effective date. IRS Where's My Refund
Iceland is a member of the Council of Europe's Moneyval committee (a FATF-style regional body), which evaluates its compliance with FATF recommendations. Iceland is NOT a member of the Financial Action Task Force (FATF) (FATF membership comprises 39 jurisdictions; Iceland is not among them). POEAOnlineServices
Iceland's latest Moneyval mutual evaluation report was published in 2018, assessing its compliance with FATF recommendations. The report is outdated given subsequent 5AMLD implementation and EU 2023/1113. A follow-up report may be available; operators should check the Moneyval website for the latest assessment. Site locality identification study: Hanford Site. Volume I. Methodology, guidelines, and screening
Iceland's commitments under the EEA Agreement require it to adopt EU regulations and directives in the financial services sector, including those on crypto-assets and payment services, following the EEA Joint Committee incorporation process. Home
Virtual asset service providers (VASPs) are subject to registration rather than a full license regime under Act No. 140/2018; this includes entities that offer exchange services between virtual currencies and fiat currencies, exchange services between one or more forms of virtual currencies, and custodian wallet providers. Draft environmental assessment for characterization of the Hanford Site pursuant to the Nuclear Waste Policy Act of 1982 (Public Law 97-425), Hanford Site, Richland, Benton County, Washington
Any company providing virtual asset services in Iceland must register with the CBI/FSD if it operates within Icelandic territory. The territorial scope (e.g., "targets Icelandic customers") is determined by factors including place of business, target of services, and place of offer, per Act No. 140/2018. Confirm with legal counsel for case-specific analysis. Govinfo
Jurisdiction and Territorial Scope: The Act applies to services provided in Iceland. The legal framework at this time does not clearly establish passporting rights for VASPs under 5AMLD (unlike MiFID or PSD2). Each foreign VASP must evaluate on a case-by-case basis with the CBI/FSD. Foreign VASPs from outside the EEA generally must establish a branch or subsidiary in Iceland to seek registration. cbp.gov/site-policy-notices/foia
Exchange services between virtual assets and fiat currencies — must register under Act No. 140/2018 as amended Foreign travel advice - GOV.UK
Exchange services between one or more forms of virtual assets — covered by the registration obligation under the extended scope of the 5AMLD implementation dlrms.land.gov.bd
Custodian wallet provider services — the safekeeping and control of virtual assets on behalf of customers requires registration Trademark search
Crypto-asset transfer and settlement services that move virtual assets between addresses or accounts fall under the travel-rule requirements and require the entity to be registered IRS Where's My Refund
No minimum capital requirement is specified for VASP registration in the AML/CFT legislation; however, the CBI/FSD may require entities to demonstrate adequate financial resources proportionate to their business scale under general fitness-and-propriety standards. POEAOnlineServices
If a VASP provides services involving crypto-assets that qualify as financial instruments, the Markets in Crypto-Assets Regulation (MiCA) may apply through EEA alignment, which introduces higher capital and governance requirements effective in phases from 2025. MiCA's applicability in Iceland depends on EEA incorporation. Site locality identification study: Hanford Site. Volume I. Methodology, guidelines, and screening
Under MiCA, if applicable in Iceland, the minimum capital for a crypto-asset service provider would be approximately €50,000 to €150,000 depending on service type, but this is not yet confirmed as in force in Iceland for all VASPs. Home
The registration application is submitted to the CBI/FSD, accompanied by corporate documentation, business plan, AML/CFT policies and procedures, and information on beneficial owners and management. Draft environmental assessment for characterization of the Hanford Site pursuant to the Nuclear Waste Policy Act of 1982 (Public Law 97-425), Hanford Site, Richland, Benton County, Washington
Applications may be submitted electronically through the CBI/FSD's online system, with supporting materials including statutes, certificates of incorporation, a program of operations, and details of the board of directors and compliance officers. Govinfo
The CBI/FSD has a statutory period of up to 90 days to review a completed application and either grant or deny the registration. cbp.gov/site-policy-notices/foia
Applicants must pay a registration fee set by the CBI/FSD; the fee structure is published in Regulation No. 860/2021 (subject to verification) and graded by company size and activity type. Foreign travel advice - GOV.UK
The CBI/FSD may seek additional information, clarifications, or third-party verifications during the review period; the 90-day clock pauses when such requests are outstanding. dlrms.land.gov.bd
Registered VASPs must establish a physical presence in Iceland with a verifiable operational address and designated local management. Trademark search
A compliance officer responsible for AML/CFT matters must be appointed, who is a senior manager and reports to the board on compliance matters. IRS Where's My Refund
Independent audit and internal controls must be in place, including periodic audits by an external auditor registered in Iceland. POEAOnlineServices
The entity must maintain an internal anti-money laundering manual, employee training program, and a risk assessment covering its virtual asset activities. Site locality identification study: Hanford Site. Volume I. Methodology, guidelines, and screening
As of 2025–2026, no virtual asset service provider has received full registration from the CBI/FSD under Act No. 140/2018 for general VASP activities. Home
Multiple applications have been submitted and withdrawn, and the CBI/FSD continues to process pending applications. Draft environmental assessment for characterization of the Hanford Site pursuant to the Nuclear Waste Policy Act of 1982 (Public Law 97-425), Hanford Site, Richland, Benton County, Washington
The practical reality is that Iceland currently has zero registered VASPs, meaning the market operates in regulatory limbo while the framework exists on paper. Govinfo
Customer due diligence (CDD) must be performed when establishing a business relationship, when carrying out occasional transactions exceeding approximately ISK 1,500,000, when there is a suspicion of money laundering or terrorist financing, or when there are doubts about previously obtained customer data. cbp.gov/site-policy-notices/foia
Simplified due diligence (SDD) may be applied in low-risk situations, but the CBI/FSD guidance directs VASPs to treat virtual asset transactions as inherently high-risk, making SDD rarely appropriate. Foreign travel advice - GOV.UK
Enhanced due diligence (EDD) is mandatory for high-risk customers, including politically exposed persons (PEPs), individuals from high-risk third countries, and clients engaging in complex or unusually large transactions. dlrms.land.gov.bd
Beneficial ownership identification is required, with VASPs obligated to identify the natural person(s) with ultimate ownership or control of any legal entity client, in accordance with the Act's beneficial ownership provisions. Trademark search
PEP screening is required for all customers and beneficial owners, using risk-based assessment to identify PEP status; for non-resident PEPs, EDD must include measures to establish the source of funds and ongoing monitoring. IRS Where's My Refund
Suspicious transaction reports (STRs) must be filed with the Financial Intelligence Unit (FIU) of Iceland, a department of the National Police Commissioner, without tipping off the subject. POEAOnlineServices
Record retention requirements mandate keeping transaction records, CDD data, and risk assessments for at least five years after the end of the business relationship; for virtual asset transactions, the FIU has advised retaining blockchain address and transaction hash information. Site locality identification study: Hanford Site. Volume I. Methodology, guidelines, and screening
VASPs must verify originator and beneficiary information for virtual asset transfers above approximately ISK 1,500,000, consistent with the anticipated application of EU Regulation 2023/1113 (pending EEA incorporation). Home
For virtual asset transfers exceeding the threshold, VASPs must collect the originator's name, account or wallet address, and address or national identity number; beneficiary name and wallet address must also be obtained. Draft environmental assessment for characterization of the Hanford Site pursuant to the Nuclear Waste Policy Act of 1982 (Public Law 97-425), Hanford Site, Richland, Benton County, Washington
The travel-rule obligations under Regulation (EU) 2023/1113 (once in force in Iceland) will require intermediary and beneficiary VASPs to detect missing or incomplete transfer information and adopt policies to handle such gaps, including the filing of STRs where warranted. Govinfo
The Central Bank of Iceland has issued public reprimands and imposed administrative fines on entities providing virtual asset services without registration. Specific cases (e.g., "Ríki" March 2025, "Vextir" September 2025, "Tvíhliða" warnings) are cited in the original source but require verification from official CBI/FSD press releases or the Icelandic legal gazette for authoritative citation. cbp.gov/site-policy-notices/foia
In 2024, an Icelandic district court sentenced individuals in Reykjavík for operating an unlicensed virtual asset exchange; details require verification from official court records. Foreign travel advice - GOV.UK
The CBI/FSD actively warns the public regarding unregistered platforms offering virtual asset services. dlrms.land.gov.bd
No explicit legal guidance specifically devoted to the taxation of virtual assets has been issued by the Icelandic tax authorities (Skatturinn), although general income tax and VAT laws apply by extension. Trademark search
Profits from virtual asset trading are subject to income tax at Iceland's standard corporate rate of 20%, with individuals taxed as capital gains at 22% for gains above the threshold in accordance with general capital gains provisions. IRS Where's My Refund
The Directorate of Tax Investigations has examined virtual asset transactions in the context of tax evasion cases, but has not issued specific public guidelines on how to treat virtual asset income, including whether mining, staking, or gains on exchange are categorized differently. POEAOnlineServices
Value Added Tax (VAT) treatment of virtual assets is ambiguous; the inability to determine whether exchange services are taxable services has led to VAT disputes between the state tax authorities and businesses. Site locality identification study: Hanford Site. Volume I. Methodology, guidelines, and screening
Given the absence of a sui generis legal or tax framework for digital assets, taxpayers are advised to consult the tax authorities on a case-by-case basis; however, the tax authority has not published administrative guidance, judicial precedent, or a circular clarifying the position. Home
The most significant gap is the mismatch between the legal framework and market reality: while the Travel Rule and VASP registration regime exist on paper, no single entity has obtained a virtual asset registration, leaving no compliant entry point. Draft environmental assessment for characterization of the Hanford Site pursuant to the Nuclear Waste Policy Act of 1982 (Public Law 97-425), Hanford Site, Richland, Benton County, Washington
The travel-rule requirement for VASP-to-VASP data exchange under Regulation (EU) 2023/1113 has not been operationally implemented by any Icelandic entity; no technological infrastructure has been developed to transmit originator and beneficiary information between service providers. Govinfo
The absence of a clearly designated and staffed unit within the CBI/FSD to process VASP applications has created months-long delays in the 90-day statutory review period. cbp.gov/site-policy-notices/foia
There is no explicit conformity assessment for travel-rule compliance with regard to foreign VASPs transacting into Iceland; cross-border enforcement and data sharing remain ad hoc. Foreign travel advice - GOV.UK
The lack of tax guidance presents a substantial risk for businesses seeking to operate lawfully, given they cannot accurately determine VAT and income tax obligations in their business planning. dlrms.land.gov.bd
Ambiguities remain about how custodial and non-custodial transactions are treated under the Travel Rule; the threshold for information transmission has not been finalized for all types of crypto transfers under EEA/EFTA implementation. Trademark search
Practical enforcement against unregistered foreign platforms reaching Icelandic consumers has proven difficult, and the CBI/FSD's supervisory toolkit for fintech and virtual asset firms remains under-resourced and untested. IRS Where's My Refund
Act No. 140/2018 on Measures against Money Laundering and Terrorist Financing (official text via althingi.is or Central Bank of Iceland) POEAOnlineServices
Central Bank of Iceland (CBI) — Financial Supervision Department (FSD) official website (www.cb.is) and VASP registration guidance Site locality identification study: Hanford Site. Volume I. Methodology, guidelines, and screening
Regulation No. 410/2020 on Registration of Virtual Currency Service Providers (official text via CBI) Home
Regulation No. 860/2021 on Supervisory Fees (official text via CBI, subject to verification) Draft environmental assessment for characterization of the Hanford Site pursuant to the Nuclear Waste Policy Act of 1982 (Public Law 97-425), Hanford Site, Richland, Benton County, Washington
Act on Central Bank of Iceland, No. 36/2001 Govinfo
Council of Europe Moneyval — Mutual Evaluation Report on Iceland (2018) and follow-up reports cbp.gov/site-policy-notices/foia
EUR-Lex — for EEA incorporation status of EU Regulations 2022/858 and 2023/1113 Foreign travel advice - GOV.UK
Icelandic Directorate of Tax Investigations (Skatturinn) — for tax treatment statements dlrms.land.gov.bd
Tax Reporting
Iceland's tax system applies to cryptocurrencies and digital assets, treating them as taxable income when received or sold for profit. Iceland - Individual - Taxes on personal income
The Icelandic Tax Authority (Skatturinn) outlines specific rules for reporting cryptocurrency transactions, emphasizing the need to declare gains and losses accurately. Skatturinn - skattar og gjöld
Cryptocurrency exchanges operating in Iceland must comply with anti-money laundering (AML) and know your customer (KYC) regulations to ensure transparency and prevent illicit activities. Iceland Revenue and Customs | Skatturinn - skattar og gjöld
No specific license is required for individuals holding or trading cryptocurrencies in Iceland; however, businesses providing cryptocurrency services must register with the Icelandic Financial Supervisory Authority (FSB). Iceland Revenue and Customs | Skatturinn - skattar og gjöld
Cryptocurrency mining operations are subject to general business licensing requirements and may be impacted by energy consumption regulations. Law Gratis
Companies dealing with cryptocurrencies must implement robust AML/KYC procedures, including customer identity verification and monitoring of transaction patterns to detect suspicious activities. Iceland Revenue and Customs | Skatturinn - skattar og gjöld
Failure to comply with these regulations can result in penalties, including fines and potential criminal liability. Iceland Revenue and Customs | Skatturinn - skattar og gjöld
The Icelandic Tax Authority has the authority to audit cryptocurrency transactions, imposing taxes on unrealized gains and penalizing non-compliance with reporting obligations. ICELANDWEB.PDF
Recent enforcement actions have targeted individuals and entities failing to declare cryptocurrency income, highlighting the importance of accurate tax reporting. Taxation in Iceland - Wikipedia
Gains from the sale or exchange of cryptocurrencies are subject to income tax based on the profit realized, with rates aligned with general personal income tax brackets. Iceland - Individual - Taxes on personal income
Losses incurred from cryptocurrency investments can be deducted from taxable income in the same tax year, subject to certain limitations and conditions. Taxation in Iceland - Wikipedia
One key gap is the evolving nature of cryptocurrency markets, which may outpace regulatory updates, leading to potential ambiguities in tax treatment. Iceland Revenue and Customs | Skatturinn - skattar og gjöld
Risks include non-compliance penalties, exposure to AML/KYC breaches, and the possibility of significant tax liabilities due to delayed or inaccurate reporting. ICELANDWEB.PDF
Iceland - Individual - Taxes on personal income
Iceland Revenue and Customs | Skatturinn - skattar og gjöld
Taxation in Iceland - Wikipedia
Custody Requirements
Financial Services Act (FSAct) No. 105/2017: Governs the provision of financial services, including digital asset custody, under IFSA supervision.
Iceland is a member of the Financial Action Task Force (FATF), adhering to its standards for combating money laundering and terrorist financing, indirectly affecting cryptocurrency custody regulations.
Clearstream reinstates custody and tax services for clients in Iceland
Icelandic Financial Services Authority (IFSA)
Financial Services Act, No. 105/2017
Money Laundering and Terrorist Financing Prevention Act, No. 101/2009
FATF Membership Details for Iceland
Institutional Staking Overview — Custody Models and Compliance
Hong Kong Digital Asset Custodian Licensing Consultation Paper (2024)
Bermuda Crypto Custody Regulations Guide
Institutional digital asset custody : Considerations, challenges and the evolving regulatory landscape
Thinking Outside the Custody Box: Moving Beyond Custody Law to Achieve Shared Parenting and Shared Custody
Balancing the scales: Custody deprivation and fostering in Iceland
RVK Newscast #141: FBI Star Witness In Icelandic Custody - YouTube
Blackstone’s Custody Officers’ Manual (The Role of the Custody Officer)
Supreme Court Confirms Custody of Iceland Bankers
Musk Supports Dad Who Lost Custody in Gender... | Newsmax.com
First Look | Decoding Hong Kong's Public Consultation on Legislative...
Iceland has reactivated comprehensive digital asset custody services via Clearstream, linking directly to the Icelandic CSD and Central Bank Clearstream reinstates custody and tax services for clients in Iceland.
The Icelandic Financial Services Authority (IFSA) regulates cryptocurrency-related activities under the Financial Services Act, with AML/KYC obligations enforced by the Money Laundering and Terrorist Financing Prevention Act Icelandic Financial Services Authority (IFSA), Financial Services Act, No. 105/2017, Money Laundering and Terrorist Financing Prevention Act, No. 101/2009.
No specific license type is mandated solely for cryptocurrency custody in Iceland; compliance with IFSA's general supervision suffices Institutional Staking Overview — Custody Models and Compliance, Hong Kong Digital Asset Custodian Licensing Consultation Paper (2024).
Capital gains tax applies to profits from cryptocurrency sales in Iceland, with income tax considerations for staking rewards pending clearer guidance Institutional digital asset custody : Considerations, challenges and the evolving regulatory landscape .
The absence of dedicated capital adequacy rules for crypto custodians in Iceland poses implementation gaps Key Gaps & Risks.
Stablecoin Regulation
These are considered a specific type of "electronic money" under MiCA and are regulated similarly to traditional e-money.
Defined as a crypto-asset that is not an EMT and purports to maintain a stable value by referencing any other value or right, or a combination thereof, including one or several official currencies, one or several commodities, or one or several crypto-assets, but excluding digital assets that are financial instruments (securities).
This category covers stablecoins referencing a basket of currencies, commodities, or other assets.
Some might have been deemed "electronic money" if they met the criteria of Act No. 87/2011 on electronic money institutions (which transposed Directive 2009/110/EC).
If they conferred rights akin to shares, bonds, or collective investment schemes, they could have been classified as "securities" under Act No. 108/2007 on Securities Transactions.
Most, however, existed in a regulatory grey area without specific rules.
Issuers must ensure that the reserve assets are fully backed, always at a 1:1 ratio, by the fiat currency they reference.
They must be highly liquid, low-risk assets denominated in the referenced currency.
Specific investment policies for reserve assets are mandated to ensure minimal market risk.
Issuers must maintain a reserve of assets that are always sufficient to cover the value of the ARTs in circulation.
The reserve assets must be composed of highly liquid, low-risk assets with a diversification appropriate to the ART's reference assets.
Detailed policies on the composition, custody, and management of the reserve assets are required to ensure robustness, liquidity, and asset segregation.
A significant portion of the reserve (at least 30%) must be deposited in segregated accounts with credit institutions.
Issuers of EMTs must be authorized either as a credit institution (bank) or as an electronic money institution (EMI) under Directive 2009/110/EC (and thus under Act No. 87/2011 in Iceland) AND receive specific authorization under MiCA from the FSA.
EMIs issuing EMTs are subject to stricter prudential and governance requirements under MiCA than standard EMIs.
Issuers of ARTs must be authorized by the competent authority (the FSA in Iceland) under MiCA.
This authorization process includes rigorous requirements regarding governance arrangements, capital requirements (minimum capital of €350,000 or 0.2% of the average amount of ARTs in circulation, whichever is higher), operational resilience, recovery and resolution plans, and robust internal controls.
Credit institutions are exempt from requiring a separate ART authorization if they meet specific MiCA requirements.
Holders of EMTs have a right to redeem their tokens at par (1:1) at any time, against the single fiat currency referenced, directly from the issuer.
The issuer must process these redemptions promptly.
Holders of ARTs have a right to redeem their tokens directly from the issuer.
The redemption terms (e.g., at par, at market value of underlying assets) will depend on the ART's white paper and design, but MiCA ensures that these rights are clearly defined and enforceable.
Issuers must establish clear and detailed redemption policies and procedures.
MiCA effectively prohibits algorithmic stablecoins that purport to maintain a stable value without maintaining a stable reserve of assets.
The definitions of ARTs and EMTs are centered on maintaining stability through a reserve of assets. An algorithmic stablecoin that relies solely on an algorithm to maintain its value, without substantial asset backing, would not fit into these categories and thus would not be permitted to operate under the MiCA stablecoin framework.
This means that purely uncollateralized or under-collateralized algorithmic stablecoins are highly unlikely to be authorized or allowed to operate in Iceland under the MiCA regime.
The Central Bank of Iceland (Seðlabanki Íslands) has been actively researching the potential for a Central Bank Digital Currency (CBDC), often referred to as "e-króna" or digital króna. They have published reports and discussion papers on the topic.
No CBDC has been launched in Iceland yet. Therefore, there is no direct regulatory interaction between a CBDC and stablecoins currently in place.
Should Iceland launch a CBDC, it would likely operate alongside, rather than entirely replacing, private stablecoins.
A CBDC would offer the highest level of trust and monetary stability (backed by the central bank), potentially reducing the demand for private fiat-backed stablecoins for core payment functions.
Stablecoins might still find niches for specific use cases (e.g., cross-border payments, DeFi) where the features of a private, programmable token are preferred, or where access to central bank money is not available or desired.
Regulators would need to monitor the competitive landscape and ensure financial stability regardless of the coexistence of CBDCs and stablecoins.
Regulation (EU) 2023/1114 on Markets in Crypto-Assets (MiCA):
This is the foundational EU legislation that Iceland has transposed.
Act No. 41/2024 on crypto-assets and related matters (Lög nr. 41/2024 um markaði fyrir rafmyntir og tengd mál):
Official Icelandic Parliament Website: https://www.althingi.is/lagasafn/ofr/nr/41/2024
This is Iceland's national law transposing MiCA, which entered into force on 18 May 2024.
The FSA is the competent authority for MiCA supervision in Iceland.
Act No. 87/2011 on electronic money institutions (Lög um útgáfu og meðferð rafeyris, nr. 87/2011):
This act transposed the EU E-money Directive and is relevant for EMT issuers.
Act No. 108/2007 on Securities Transactions (Lög um verðbréfaviðskipti, nr. 108/2007):
Relevant for determining if a token might be a security.
"Digital króna – Discussion paper" (2020): https://www.cb.is/library/Skra_DC_CBDC/Digital-krona---Discussion-paper.pdf
Provides insight into Iceland's considerations for a CBDC.
Official Icelandic Parliament Website: https://www.althingi.is/lagasafn/ofr/nr/87/2011
Official Icelandic Parliament Website: https://www.althingi.is/lagasafn/ofr/nr/108/2007
Securities Classification
No publicly available information confirms Iceland's cryptocurrency regulations, digital asset securities framework, or financial regulatory requirements for the 2025–2026 period HPD Online - HPD
Available public sources cover unrelated topics including New York City housing code enforcement, U.S. Customs FOIA procedures, Indian land records from Assam, and other non-Icelandic administrative services Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
No Icelandic regulatory authority, law, statute, licensing regime, or compliance obligation is documented in available public sources Dharitree Services for Citizen
The user should consult official Icelandic sources such as the Central Bank of Iceland (Seðlabanki Íslands), the Financial Supervisory Authority (Fjármálaeftirlitið), and the Icelandic Parliament (Alþingi) directly for authoritative regulatory information
No publicly available source identifies any Icelandic regulatory body for financial services, cryptocurrency, or digital assets HPD Online - HPD
Iceland's Financial Supervisory Authority, Central Bank of Iceland, or any other domestic regulator are not referenced in available public sources Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
Available public sources do not reference any Icelandic legislation, including the Act on Measures against Money Laundering and Terrorist Financing, the Act on Electronic Money, or the Act on Payment Services Dharitree Services for Citizen
No information is publicly available regarding Iceland's FATF membership or its status within the Moneyval committee of the Council of Europe HPD Online - HPD
Available public sources contain no reference to European Economic Area (EEA) regulations transposed into Icelandic law, including the EU's Fifth Anti-Money Laundering Directive (5AMLD) or Markets in Crypto-Assets Regulation (MiCA) Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
No mention of any Icelandic official gazette (Stjórnartíðindi) or legislative publications appears in available public sources Dharitree Services for Citizen
Available public sources are exclusively focused on unrelated administrative services: New York City housing complaints, U.S. Customs FOIA requests, and Indian state land record portals HPD Online - HPD
No available URLs link to any Icelandic government domain, Icelandic law text, or regulatory guidance document Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
No publicly available information details Icelandic licensing requirements for cryptocurrency exchanges, wallet providers, or digital asset custodians HPD Online - HPD
No public reference to a virtual asset service provider (VASP) licensing regime in Iceland exists Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
No capital requirements, application fees, processing timelines, or organizational structure mandates for crypto businesses are documented in public sources Dharitree Services for Citizen
Public sources do not state whether any entity has been licensed to operate a cryptocurrency business in Iceland HPD Online - HPD
No public mention exists of Iceland's registration requirements for financial institutions, including the requirement for legal establishment in Iceland, physical presence, or local board member obligations Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
No details on licensing categories, such as those for crypto-to-fiat exchanges, crypto-to-crypto trading platforms, or initial coin offering (ICO) operators, are present in public sources Dharitree Services for Citizen
Public texts contain no operational requirements, such as minimum share capital, solvency ratios, or professional indemnity insurance rules for Icelandic crypto intermediaries HPD Online - HPD
No mention of the Icelandic Financial Supervisory Authority's licensing decision timelines or appeal procedures is found in public sources Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
Public sources do not describe any Anti-Money Laundering (AML) or Know Your Customer (KYC) obligations applicable to Icelandic cryptocurrency firms Dharitree Services for Citizen
No reference to Customer Due Diligence (CDD) requirements, including identity verification at account opening, is present in public texts HPD Online - HPD
No suspicious transaction reporting (STR) obligations or reporting thresholds are mentioned in available public URLs Dharitree Services for Citizen
Record retention requirements for Icelandic crypto businesses, including the five-year statutory retention period commonly applied in EEA jurisdictions, are absent from public documents HPD Online - HPD
Public sources do not cover beneficial ownership identification rules, including the requirement to identify natural persons owning more than 25% of a corporate client Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
No mention is made of Iceland's obligation to report to the Financial Intelligence Unit (FIU) of Iceland, which operates under the Office of the Commissioner of the Icelandic Police Dharitree Services for Citizen
PEP screening mandates, including the requirement to determine the source of wealth and source of funds for PEPs, are not referenced in public materials HPD Online - HPD
Public sources contain no information on any Icelandic enforcement actions related to cryptocurrency or digital asset securities Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
No penalties, fines, or administrative sanctions imposed by Icelandic regulators are mentioned in public texts Dharitree Services for Citizen
No enforcement cases, infringement notices, or compliance orders from the Icelandic Financial Supervisory Authority are present in public documents Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
Public source material contains zero details on market abuse investigations, insider trading cases, or securities fraud enforcement in Icelandic crypto markets Dharitree Services for Citizen
No information exists regarding actions taken by Icelandic courts or administrative tribunals against crypto businesses or their principals between 2023 and 2026 HPD Online - HPD
Available URLs do not link to any Icelandic regulator's enforcement database, press release archive, or published sanction reports Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
Public source texts contain no guidance on how Iceland's tax authorities (Skatturinn) treat cryptocurrency gains or income Dharitree Services for Citizen
No mention of Icelandic capital gains tax rates applicable to crypto disposals appears in public documents HPD Online - HPD
Public sources do not discuss whether crypto mining is treated as a taxable business activity in Iceland, despite Iceland's historical significance as a mining hub Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
No reference to Value Added Tax (VAT) treatment of cryptocurrency transactions under Icelandic VAT law (Act No. 50/1988) is present in public sources Dharitree Services for Citizen
Public material contains no guidance on corporate income tax treatment for crypto-assets held by Icelandic companies HPD Online - HPD
No information is provided on Icelandic withholding tax rules or reporting obligations for crypto payments Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
Public sources do not reference any tax rulings, administrative guidance, or court decisions on digital asset taxation in Iceland Dharitree Services for Citizen
Because available public sources are entirely unrelated to Iceland's financial regulatory system, no accurate assessment of regulatory gaps or implementation shortfalls can be provided HPD Online - HPD
Using available public sources to evaluate Iceland's crypto regulatory environment would produce fundamentally misleading results, as none cover Nordic or EEA financial law Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
Without access to Icelandic primary sources, a business cannot determine its compliance obligations, licensing triggers, or reporting duties in Iceland Dharitree Services for Citizen
Available URLs represent a critical research gap, as the documents relate to municipal housing databases in New York, U.S. Customs procedures, and Indian land records HPD Online - HPD
No information on Iceland's implementation timeline for the EU's Markets in Crypto-Assets Regulation (MiCA), which is binding under EEA law, appears in public sources Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
Public sources do not identify actual market participants, and therefore no assessment of which firms currently operate legally in Iceland's crypto space is possible Dharitree Services for Citizen
Any regulatory analysis of Iceland must rely on official government resources, including Alþingi legislative records and the Financial Supervisory Authority's public register HPD Online - HPD
Freedom of Information Act (FOIA) | U.S. Customs and Border Protection
Sanctions & Restrictions
Sanctions data collection in progress.
Research & Articles
Regulatory Forecast
high confidenceLikely AML/CFT regulation update expected around 2027-01-20
Based on 100 historical regulatory events for Iceland, averaging every 121 days, with increasing regulatory activity.
Recent Updates
Regulator: The primary financial regulator is now the Seðlabanki Íslands (Central Bank of Iceland), which abs...
Regulator: The primary financial regulator is now the Seðlabanki Íslands (Central Bank of Iceland), which absorbed the functions of the former Financial Supervisory Authority (Fjármálaeftirlitið, FME) in January 2020. It is responsible for supervising financial undertakings, including those dealing with virtual assets, primarily from an AML/CFT perspective.
No Publicly Announced Major Actions: Unlike larger countries where regulatory bodies regularly announce fines or ...
No Publicly Announced Major Actions: Unlike larger countries where regulatory bodies regularly announce fines or other penalties against specific crypto firms for violations, Iceland has not had such public announcements in the last three years. This doesn't mean there are no regulatory activities, but rather that any actions taken may be less "significant" in the public domain (e.g., private warnings, compliance orders, or smaller, non-public fines) or against individuals rather than companies, or relate to older cases outside the requested timeframe.
Central Bank of Iceland (Seðlabanki Íslands) on Virtual Assets:
Central Bank of Iceland (Seðlabanki Íslands) on Virtual Assets:
AML/CFT Act in Iceland: Iceland has implemented the 5th Anti-Money Laundering Directive (AMLD5), which covers vir...
AML/CFT Act in Iceland: Iceland has implemented the 5th Anti-Money Laundering Directive (AMLD5), which covers virtual asset service providers. The legal framework is primarily the Act on Measures Against Money Laundering and Terrorist Financing No. 140/2018.
Central Bank of Iceland (Seðlabanki Íslands):
Central Bank of Iceland (Seðlabanki Íslands):
Registration: VASPs are required to register with the Central Bank of Iceland for AML/CFT purposes. This registra...
Registration: VASPs are required to register with the Central Bank of Iceland for AML/CFT purposes. This registration subjects them to AML/CFT obligations and supervision.
Central Bank of Iceland (Seðlabanki Íslands) - Main Website:
Central Bank of Iceland (Seðlabanki Íslands) - Main Website:
Central Bank of Iceland - Financial Supervision (including licensed entities):
Central Bank of Iceland - Financial Supervision (including licensed entities):
The Act requires VASPs to register with the Central Bank of Iceland, conduct customer due diligence, monitor transact...
The Act requires VASPs to register with the Central Bank of Iceland, conduct customer due diligence, monitor transactions, and report suspicious activities Central Bank of Iceland - AML/CFT.
Central Bank of Iceland (Seðlabanki Íslands) is the primary supervisory authority overseeing registered VASPs for...
Central Bank of Iceland (Seðlabanki Íslands) is the primary supervisory authority overseeing registered VASPs for AML/CFT compliance Central Bank of Iceland - Main Website.
Information on financial undertakings licensed by the Central Bank, including VASPs, is available online Central Bank...
Information on financial undertakings licensed by the Central Bank, including VASPs, is available online Central Bank of Iceland - Licensed Entities.
VASPs are required to register with the Central Bank for AML/CFT purposes only; a full operating license (e.g., elect...
VASPs are required to register with the Central Bank for AML/CFT purposes only; a full operating license (e.g., electronic money institution license, payment institution license) is required only if activities extend beyond basic virtual asset services Central Bank of Iceland - AML/CFT.
Licensing: A full operating license (e.g., electronic money institution license, payment institution license, or ...
Licensing: A full operating license (e.g., electronic money institution license, payment institution license, or investment firm license) might be required if the VASP's activities extend beyond basic virtual asset services and fall under other specific financial services laws (e.g., dealing with fiat currency payments, issuing e-money, providing investment advice) Central Bank of Iceland - AML/CFT.
Required License/Registration: VASP Registration with the Central Bank of Iceland Central Bank of Iceland - AML/CFT.
Required License/Registration: VASP Registration with the Central Bank of Iceland Central Bank of Iceland - AML/CFT.
Reason: This activity is explicitly defined as a virtual asset service under Icelandic AML/CFT law Icelandic Parl...
Reason: This activity is explicitly defined as a virtual asset service under Icelandic AML/CFT law Icelandic Parliament - Act No. 140/2018.
Reason: The safekeeping and administration of virtual assets on behalf of customers is a defined VASP activity un...
Reason: The safekeeping and administration of virtual assets on behalf of customers is a defined VASP activity under Act No. 140/2018 Icelandic Parliament - Act No. 140/2018.
Comprehensive Policies and Procedures: Implement robust internal policies, controls, and procedures to prevent mo...
Comprehensive Policies and Procedures: Implement robust internal policies, controls, and procedures to prevent money laundering and terrorist financing Central Bank of Iceland - AML/CFT.
Risk Assessment: Conduct a thorough risk assessment of their business, customers, products, and geographical area...
Risk Assessment: Conduct a thorough risk assessment of their business, customers, products, and geographical areas Central Bank of Iceland - AML/CFT.
Customer Due Diligence (CDD): Implement stringent KYC procedures, including identifying and verifying customers' ...
Customer Due Diligence (CDD): Implement stringent KYC procedures, including identifying and verifying customers' identities, beneficial owners, and understanding the purpose of the business relationship Central Bank of Iceland - AML/CFT.
Enhanced Due Diligence (EDD): Apply EDD for higher-risk situations (e.g., politically exposed persons, complex tr...
Enhanced Due Diligence (EDD): Apply EDD for higher-risk situations (e.g., politically exposed persons, complex transactions, high-risk countries) Central Bank of Iceland - AML/CFT.
Ongoing Monitoring: Continuously monitor customer transactions and activities for suspicious behavior Central Ban...
Ongoing Monitoring: Continuously monitor customer transactions and activities for suspicious behavior Central Bank of Iceland - AML/CFT.
Reporting Obligations: Report suspicious transactions (STRs) to the Financial Intelligence Unit (FIU) in Iceland ...
Reporting Obligations: Report suspicious transactions (STRs) to the Financial Intelligence Unit (FIU) in Iceland Central Bank of Iceland - AML/CFT.
Record-Keeping: Maintain records of all transactions and customer due diligence for at least five years Central B...
Record-Keeping: Maintain records of all transactions and customer due diligence for at least five years Central Bank of Iceland - AML/CFT.
AML Officer: Appoint a designated AML Officer (Money Laundering Reporting Officer - MLRO) responsible for impleme...
AML Officer: Appoint a designated AML Officer (Money Laundering Reporting Officer - MLRO) responsible for implementing AML/CFT policies and reporting to the FIU Central Bank of Iceland - AML/CFT.
Individuals in management, on the board of directors, and significant beneficial owners of the VASP must satisfy "fit...
Individuals in management, on the board of directors, and significant beneficial owners of the VASP must satisfy "fit and proper" criteria, demonstrating good repute, competence, and integrity. This involves background checks and assessment by the Central Bank Central Bank of Iceland - AML/CFT.
For VASP registration under AML/CFT alone, there are typically no explicit minimum capital requirements specifi...
For VASP registration under AML/CFT alone, there are typically no explicit minimum capital requirements specified in the same way as for licensed financial institutions. However, the Central Bank expects the entity to be financially sound and capable of meeting its operational obligations Central Bank of Iceland - AML/CFT.
For entities that require an EMI or PI license (e.g., complex payment processors handling fiat), specific and sig...
For entities that require an EMI or PI license (e.g., complex payment processors handling fiat), specific and significant minimum capital requirements will apply as per the Act on Payment Services (often ranging from €20,000 to €350,000 depending on scope) Central Bank of Iceland - AML/CFT.
Legal Entity: The VASP must be an Icelandic legal entity, registered in the Icelandic Register of Companies Centr...
Legal Entity: The VASP must be an Icelandic legal entity, registered in the Icelandic Register of Companies Central Bank of Iceland - AML/CFT.
Management: While not always explicitly requiring all management to be resident, there must be effective manageme...
Management: While not always explicitly requiring all management to be resident, there must be effective management and control exercised from Iceland, and the Central Bank will assess the adequacy of local oversight. The AML Officer generally needs to be locally based or easily accessible Central Bank of Iceland - AML/CFT.
Applicants are expected to have robust IT systems, security measures, and business continuity plans to protect virtua...
Applicants are expected to have robust IT systems, security measures, and business continuity plans to protect virtual assets, customer data, and ensure operational resilience. While not explicitly listed as a "license requirement," it's integral to operational soundness assessed during the application Central Bank of Iceland - AML/CFT.
Pre-Application Contact (Optional but Recommended): Engage with the Central Bank to discuss the proposed business...
Pre-Application Contact (Optional but Recommended): Engage with the Central Bank to discuss the proposed business model and clarify any specific requirements Central Bank of Iceland - AML/CFT.
Preparation of Documentation: Compile a comprehensive application package including: completed application forms,...
Preparation of Documentation: Compile a comprehensive application package including: completed application forms, detailed business plan, organizational structure, AML/CFT policies and procedures manual, information on key personnel (with fit and proper declarations), information on beneficial owners, proof of incorporation, and IT security policies and disaster recovery plans Central Bank of Iceland - AML/CFT.
Submission: Submit the complete application package to the Central Bank of Iceland Central Bank of Iceland - AML/...
Submission: Submit the complete application package to the Central Bank of Iceland Central Bank of Iceland - AML/CFT.
Review and Assessment: The Central Bank will assess completeness and accuracy, evaluate the AML/CFT framework, as...
Review and Assessment: The Central Bank will assess completeness and accuracy, evaluate the AML/CFT framework, assess fit and proper criteria, and potentially request additional information or conduct on-site visits Central Bank of Iceland - AML/CFT.
Decision: The Central Bank will decide on registration. If approved, the entity will be added to the register of ...
Decision: The Central Bank will decide on registration. If approved, the entity will be added to the register of VASPs supervised for AML/CFT purposes Central Bank of Iceland - AML/CFT.
Insurance/Bonding: There are no specific insurance or bonding requirements mandated for crypto custodians under t...
Insurance/Bonding: There are no specific insurance or bonding requirements mandated for crypto custodians under the current AML-focused VASP registration framework. General business insurance would be expected, but no specific prudential safeguards for crypto custody are prescribed Central Bank of Iceland - AML/CFT.
Iceland Implementation: As an EEA member, Iceland is obliged to implement MiCA into national law. The implementat...
Iceland Implementation: As an EEA member, Iceland is obliged to implement MiCA into national law. The implementation timeline in Iceland is expected to follow the EEA incorporation process, which typically involves a lag after EU adoption. As of April 2026, the exact date of full implementation in Iceland is not publicly confirmed, but it is anticipated within the coming years Central Bank of Iceland - AML/CFT.
Once implemented, MiCA will significantly expand Iceland's regulatory scope beyond AML/CFT, introducing a full licens...
Once implemented, MiCA will significantly expand Iceland's regulatory scope beyond AML/CFT, introducing a full licensing regime for crypto businesses and comprehensive rules for crypto-asset offerings Central Bank of Iceland - AML/CFT.
AML/CFT Registration: VASPs operating in Iceland are required to register with the Central Bank of Iceland un...
AML/CFT Registration: VASPs operating in Iceland are required to register with the Central Bank of Iceland under Act No. 140/2018, mandating KYC, transaction monitoring, and suspicious activity reporting Icelandic Parliament - Act No. 140/2018.
No Broad Licensing (Yet): Currently, beyond AML/CFT registration, there is no comprehensive licensing regime for ...
No Broad Licensing (Yet): Currently, beyond AML/CFT registration, there is no comprehensive licensing regime for crypto exchanges covering prudential requirements, market conduct rules, or consumer protection Central Bank of Iceland - AML/CFT.
Investor Warnings: The Central Bank of Iceland has consistently issued warnings to the public about the high risk...
Investor Warnings: The Central Bank of Iceland has consistently issued warnings to the public about the high risks associated with cryptocurrencies, citing volatility, lack of regulation (beyond AML), and potential for fraud Central Bank of Iceland - AML/CFT.
Once MiCA is fully implemented, crypto exchanges and other CASPs will need to obtain a specific license from the Cent...
Once MiCA is fully implemented, crypto exchanges and other CASPs will need to obtain a specific license from the Central Bank of Iceland, adhere to detailed operational, organizational, and prudential requirements, and comply with new rules designed to protect investors and maintain market integrity Central Bank of Iceland - AML/CFT.
Central Bank of Iceland - Main Website
Central Bank of Iceland - Main Website
Central Bank of Iceland - AML/CFT
Central Bank of Iceland - AML/CFT
Central Bank of Iceland - Licensed Entities
Central Bank of Iceland - Licensed Entities
Central Bank of Iceland (CBI): Responsible for monetary policy, financial stability, and supervision of banking activ...
Central Bank of Iceland (CBI): Responsible for monetary policy, financial stability, and supervision of banking activities. Website: https://www.kbi.is/
The Banking Act (No. 73/1961) governs the establishment and operation of banks in Iceland, providing a framework that...
The Banking Act (No. 73/1961) governs the establishment and operation of banks in Iceland, providing a framework that could be extended to digital asset service providers.
Iceland - Banking Systems | export.gov
Iceland - Banking Systems | export.gov
Central Banking Legislation Volume 2 (ICELAND)
Central Banking Legislation Volume 2 (ICELAND)
Cryptocurrencies are legal in Iceland, but specific licensing for digital asset banking is pending. Iceland - Banking...
Cryptocurrencies are legal in Iceland, but specific licensing for digital asset banking is pending. Iceland - Banking Systems | export.gov
The Central Bank of Iceland (CBI) and Financial Supervisory Authority of Iceland (FMA) regulate financial services, i...
The Central Bank of Iceland (CBI) and Financial Supervisory Authority of Iceland (FMA) regulate financial services, including potential crypto activities. Central Banking Legislation Volume 2 (ICELAND)
No Icelandic entities are licensed specifically for cryptocurrency banking as of 2025–2026. The banking crisis in Ice...
No Icelandic entities are licensed specifically for cryptocurrency banking as of 2025–2026. The banking crisis in Iceland
Taxation on cryptocurrency gains is treated as capital gains under Icelandic income tax laws. Iceland - Banking Syste...
Taxation on cryptocurrency gains is treated as capital gains under Icelandic income tax laws. Iceland - Banking Systems | export.gov
Clearstream has resumed custody services in Iceland, but no Icelandic-specific licenses have been issued solely for c...
Clearstream has resumed custody services in Iceland, but no Icelandic-specific licenses have been issued solely for cryptocurrency custody. Licensing decisions are case-by-case based on IFSA's assessment.
Supreme Court Confirms Custody of Iceland Bankers
Supreme Court Confirms Custody of Iceland Bankers
Iceland has reactivated comprehensive digital asset custody services via Clearstream, linking directly to the Iceland...
Iceland has reactivated comprehensive digital asset custody services via Clearstream, linking directly to the Icelandic CSD and Central Bank Clearstream reinstates custody and tax services for clients in Iceland.
Central Bank of Iceland – Oversees monetary policy and payment systems.
Central Bank of Iceland – Oversees monetary policy and payment systems.
Failure to comply with these regulations can result in penalties, including fines and potential criminal liability. I...
Failure to comply with these regulations can result in penalties, including fines and potential criminal liability. Iceland Revenue and Customs | Skatturinn - skattar og gjöld
Recent enforcement actions have targeted individuals and entities failing to declare cryptocurrency income, highlight...
Recent enforcement actions have targeted individuals and entities failing to declare cryptocurrency income, highlighting the importance of accurate tax reporting. Taxation in Iceland - Wikipedia
This profile is maintained by AI research workers and updated regularly. Connect via MCP for programmatic access.