RESEARCH: Portugal Cryptocurrency and Digital Asset Travel-Rule Regulatory Requirements

Executive Summary

Yes, cryptocurrency is legal in Portugal as of 2025-2026. The Banco de Portugal (BdP) and the Comissão do Mercado de Valores Mobiliários (CMVM) jointly regulate crypto-assets, with BdP supervising stablecoins issuance and CASPs authorization, while CMVM oversees non-stablecoin issuances and market abuse. Licensing is mandatory for entities providing crypto-asset services under Law No. 69/2025 and Law No. 70/2025 implementing MiCA and the Travel Rule. No specific monetary thresholds for licensing are detailed, but self-hosted wallets over EUR 1,000 require proof of ownership. As of now, no explicit list of licensed CASPs is publicly available, indicating a practical reality where entities must navigate ongoing compliance while awaiting full authorisation by July 2026.

Regulatory Framework

• Regulatory Bodies:
  • Banco de Portugal (BdP): National bank responsible for supervising stablecoin issuance and authorising CASPs. Website: https://www.bportugal.gov.pt/
  • Comissão do Mercado de Valores Mobiliários (CMVM): Oversees non-stablecoin crypto asset issuance and market abuse. Website: https://www.cmvm.pt/
• Primary Laws:
  • Law No. 69/2025 & Law No. 70/2025 (December 22, 2025): Implement Regulation (EU) 2023/1114 (MiCA) and Regulation (EU) 2023/1113 (TFR). Source: https://www.21analytics.co/blog/portugal-travel-rule-what-casps-need-to-know/
  • Law No. 83/2017: Aligns with EU standards for crypto-assets and AML/CFT. Source: https://gfdl.legal/portugal-travel-rule-implementation/
• International Standing:
  • FATF Recommendations: Portugal aligns with FATF Travel Rule requirements, including data sharing and verification obligations for VASPs. Source: https://sumsub.com/blog/what-is-the-fatf-travel-rule/
  • EU Status: Portugal is a member of the European Union, thus compliant with MiCA and FATF standards. Source: https://eur-lex.europa.eu/

Licensing Requirements

• Entities Requiring License: All CASPs providing crypto-asset services must obtain prior authorisation from BdP; CMVM provides opinion on completeness, focusing on internal policies and MiCA compliance. Source: https://www.21analytics.co/blog/portugal-travel-rule-what-casps-need-to-know/
• Capital Requirements: Specific monetary thresholds not explicitly stated; however, for self-hosted wallets over EUR 1,000, proof of ownership is required. Source: https://www.21analytics.co/blog/portugal-travel-rule-what-casps-need-to-know/
• Application Process: Submission to BdP, followed by CMVM’s opinion within 10-15 business days; transitional arrangements allow existing CASPs to operate until full MiCA authorisation by July 2026. Source: https://gfdl.legal/portugal-travel-rule-implementation/
• Timeline & Structural Requirements: No specific timeline beyond the July 2026 deadline for existing CASPs; structural requirements include compliance with MiCA and TFR standards. Source: https://www.21analytics.co/blog/portugal-travel-rule-what-casps-need-to-know/
• Licensed Entities: No publicly listed entities; compliance hinges on awaiting full authorisation by BdP and CMVM. Source: https://gfdl.legal/portugal-travel-rule-implementation/

AML/KYC Requirements

• CDD & EDD: Originator CASPs must collect full, accurate information on both originators and beneficiaries; beneficiary CASPs verify via independent sources aligned with EU AML rules. Source: https://www.21analytics.co/blog/portugal-travel-rule-what-casps-need-to-know/
• STR Reporting: Suspicious transfers must be reported to the Financial Intelligence Unit (FIU) if missing or incomplete Travel Rule information is identified. Source: https://www.21analytics.co/blog/portugal-travel-rule-what-casps-need-to-know/
• Record Retention: Records must be retained as per national legislation, aligning with EU standards for crypto-asset transfers. Source: https://gfdl.legal/portugal-travel-rule-implementation/
• Beneficial Ownership & PEP Screening: Required verification through KYC/KYB processes, ensuring alignment with FATF recommendations. Source: https://sumsub.com/blog/what-is-the-fatf-travel-rule/

Enforcement Actions

• Penalties & Fines: Non-compliance with Travel Rule and AML/CFT regulations can result in administrative fines and potential criminal liability under Portuguese law. Source: https://www.bportugal.gov.pt/enforcement
• Arrests & Cases: No specific enforcement cases cited; however, regulatory bodies may issue warnings or impose sanctions for violations. Source: https://www.bportugal.gov.pt/enforcement

Tax Treatment

No explicit tax guidance on virtual assets is issued by Portuguese authorities as of 2025-2026. The absence of specific taxation suggests a gap in regulatory clarity regarding crypto gains, income tax, capital gains, or VAT implications for digital asset transactions.

Key Gaps & Risks

• Regulatory Gaps: Lack of publicly available licensed CASP lists and unclear tax treatment pose operational risks.
• Implementation Gaps: Transitional arrangements may delay full compliance until July 2026, affecting market participants' readiness.
• Practical Reality vs Paper Law: Self-hosted wallet requirements over EUR 1,000 introduce additional verification burdens not fully detailed in licensing frameworks.

Sources

• Travel Rule Portugal Discussed (2026) | 21 Analytics
• Portugal – Travel Rule implementation - GFDL Advogados
• EUR-Lex - Official Journal of the European Union
• Crypto Travel Rule Explained: FATF Requirements for VASPs