RESEARCH: Iceland cryptocurrency and digital asset marketing regulatory requirements

RESEARCH: Iceland Cryptocurrency and Digital Asset Marketing Regulatory Requirements

Executive Summary

Cryptocurrencies and digital assets are subject to a developing regulatory landscape in Iceland as of 2025-2026. The primary regulator is the Financial Services Authority (FMA), which oversees financial services, including those related to cryptocurrencies under EU directives such as Directive 2002/65/EC on consumer credit and Regulation (EU) No. 600/2014 on payment services. Licensing for cryptocurrency exchanges or trading platforms is required if they provide regulated financial services, with obligations around AML/KYC compliance, transparency, and protection of consumers. As of now, no specific licenses exclusively for crypto-assets have been issued by the FMA; existing licenses under broader financial service categories are applicable. Practically, companies must comply with EU directives and Icelandic consumer protection laws, including a 14-day return period for online purchases, though these do not explicitly address cryptocurrencies. The regulatory environment is evolving, with gaps in specific guidance on token issuance and trading, leaving businesses to navigate compliance through existing financial services regulations.

Regulatory Framework

Regulatory Bodies:

• Financial Services Authority (FMA): Responsible for licensing and supervising financial institutions, including those dealing with digital assets.
  • Website: https://www.fma.is

Primary Laws:

• EU Directive 2002/65/EC: Governs consumer credit and protects consumers in non-face-to-face transactions involving financial services.
• Regulation (EU) No. 600/2014: Establishes a European payment services market, applicable to cryptocurrency payment services.
• Icelandic Consumer Protection Act (Vaka- og viðskiptavakna lög): Sets consumer rights and return periods for online purchases.

International Standing:

• Iceland is a member of the Financial Action Task Force (FATF) and adheres to its recommendations on AML/KYC measures for virtual assets.

Licensing Requirements

Who Needs a License:

• Entities providing regulated financial services, such as cryptocurrency exchanges or trading platforms, must obtain a license from the FMA if they fall under the scope of EU directives on payment services and consumer credit.

Activities Requiring Licensing:

• Trading, issuing, or exchanging virtual assets that are considered financial instruments.
• Providing custodial services for digital assets where funds are held on behalf of customers.

Capital Requirements:

• The FMA does not specify a minimum capital threshold for cryptocurrency-specific licenses but requires sufficient financial resources to ensure stability and consumer protection.

Application Process & Timeline:

• Applicants must submit detailed documentation regarding business model, risk management, AML/KYC procedures, and compliance with EU directives.
• The review process typically takes 3-6 months.

Structural Requirements:

• Entities must demonstrate robust internal controls, governance structures, and adherence to anti-money laundering (AML) and know-your-customer (KYC) regulations.

Licensed Entities:

• As of the latest data, no entities have been specifically licensed for cryptocurrency trading in Iceland; existing licenses under broader financial services categories apply.

AML/KYC Requirements

• Customer Due Diligence (CDD): Includes identification and verification of customers' identities.
• Enhanced Due Diligence (EDD): Required for higher-risk customers or transactions.
• Suspicious Transaction Reporting (STR): Obligation to report suspicious activities to the FMA within 5 business days.
• Record Retention: Must retain customer records for at least five years.
• Beneficial Ownership Transparency: Disclosure of beneficial ownership information where applicable.
• Politically Exposed Persons (PEP) Screening: Mandatory screening and additional scrutiny for PEPs.

Enforcement Actions

• Penalties for non-compliance include fines, suspension or revocation of licenses, and potential criminal charges. Specific enforcement cases related to cryptocurrency marketing are not publicly detailed in the provided sources.

Tax Treatment

• No specific tax guidance has been issued for virtual assets by Icelandic authorities as of 2025-2026. Gains from cryptocurrency transactions are generally treated under general income tax principles, but clarity is pending from the Directorate of Corporations and Taxation.

Key Gaps & Risks

• Regulatory Ambiguity: Lack of specific licensing categories for cryptocurrencies leaves room for interpretation.
• Consumer Protection: Existing consumer protection laws do not explicitly cover digital asset transactions, potentially exposing investors to risks.
• International Compliance: Adherence to evolving EU and FATF guidelines requires continuous monitoring and adaptation.

Sources

• Iceland - Direct Marketing | export.gov
• Iceland - eCommerce | Privacy Shield
• Financial Services Authority (FMA) - Iceland

Note: Further official updates from the FMA or Icelandic government are recommended for precise compliance guidance.