Crypto holding structure in Gibraltar: Legal Counsel for Crypto Firms
A crypto holding structure in Gibraltar positions a digital-asset business inside a common-law, English-speaking jurisdiction that has maintained a dedicated regulatory regime for distributed ledger technology businesses since 2018 – making it one of the earliest jurisdictions globally to regulate the sector at the activity level. For founders weighing where to domicile a token-issuing entity, a treasury holding vehicle or a group intermediate holding company, Gibraltar offers a combination of corporate flexibility, an established regulatory basis under the Gibraltar Financial Services Commission (GFSC), and a tax environment that requires careful alignment between personal residency, corporate substance and the group's actual commercial footprint.
The critical point for any inbound operator is this: personal relocation and corporate registration are not the same analysis, and conflating them is the most common structuring error we see. The structure works when personal tax residency, corporate substance and the group's operational flow are designed together. Approached as three separate decisions, each creates risk for the others. This page maps the regime, the process and the decision points a general counsel or CFO should work through before committing to Gibraltar as the apex of a cross-border crypto group.
What the Gibraltar regulatory regime actually covers
Gibraltar's DLT provider framework – supervised by the GFSC (Gibraltar Financial Services Commission) under the Distributed Ledger Technology Providers Act – is an activity-based licensing regime that captures businesses using DLT to store or transmit value belonging to others. It is not a blanket "crypto licence": it applies to the specific activity, and a holding company that holds digital assets on its own account as a treasury function, without storing or transmitting value for third parties, typically does not fall within its perimeter. That distinction is material for structuring.
Where a Gibraltar entity does conduct a regulated DLT activity – operating an exchange, custody service or transfer facility – it must obtain a GFSC DLT provider licence. The GFSC is a small regulator with a reputation for directness: it engages with applicants early, conducts substantive fitness-and-propriety reviews of principals, and expects a genuine presence, not a post-box. Operators we advise on Gibraltar structures are consistently told the same thing: the GFSC's supervisory expectations have risen sharply as the jurisdiction matures and seeks to defend its reputation post-FTX and post-MiCA. Licensing timelines vary by complexity and the completeness of the application file, but applicants should budget several months from submission to authorisation.
The EU's MiCA regulation does not apply directly to Gibraltar – Gibraltar is not an EU member state and, post-Brexit, is not part of the EU single market. A Gibraltar-licensed entity therefore cannot passport into the EU under MiCA. For groups serving EU retail users, this creates a structural decision point: Gibraltar as a holding and treasury apex, with a separate MiCA-authorised operating entity for EU-facing activity, or an alternative primary jurisdiction. In our cross-border practice, we regularly structure exactly that two-entity model, and the choice of the EU operating jurisdiction – Lithuania and Malta are frequent candidates given their CASP authorisation processes – depends on the group's user geography, banking relationships and appetite for ongoing compliance cost.
Contact OBOLUS to map the regulatory perimeter for your structure before you commit to a jurisdiction. The process above describes the standard analysis, but your entity type, user base and activity mix change the conclusion.What substance requirements apply to a Gibraltar holding company?
A Gibraltar holding company without regulated activity has relatively low statutory requirements on its face – registered office, a company secretary, annual filings – but tax-driven substance expectations have changed the practical picture significantly since Gibraltar introduced economic substance rules aligned with OECD and EU standards. For a holding entity that earns passive income (dividends, interest, royalties or gains from crypto assets), the substance framework requires that the entity is directed and managed in Gibraltar, that key management decisions are made there, and that adequate physical presence is maintained.
What "adequate" means in practice is a recurring question. For a pure holding company receiving dividends upstreamed from an operating subsidiary, a board that meets in Gibraltar, with at least some directors ordinarily resident there, generally satisfies the basic test. For a treasury entity actively managing a crypto portfolio, the bar is higher: the entity needs people in Gibraltar who actually make the investment and management decisions, not merely ratify decisions made elsewhere. In a recent structuring matter, a token fund operator came to us after establishing a Gibraltar vehicle with all genuine management activity remaining in the founder's home country; we redesigned the board composition, introduced a Gibraltar-based fund manager and restructured the flow of investment decisions, allowing the entity to satisfy the substance test on a forward-looking basis.
The practical implication for founders is that Gibraltar holding structures work best when the founders are themselves willing to be genuinely present – through personal relocation or through hiring locally – rather than treating the Gibraltar entity as a remote vehicle. The two analyses are inseparable. As Gibraltar's tax authority has become more attentive to substance, the risk of a structure that looks right on paper but fails on management-and-control has grown.
How does Gibraltar's tax environment interact with a crypto holding structure?
Gibraltar operates a territorial tax system, meaning that only income accruing in or deriving from Gibraltar is subject to corporate income tax. For a crypto holding company, this is frequently cited as the primary attraction: gains on crypto assets held for treasury purposes, dividends received from non-Gibraltar subsidiaries, and income arising outside Gibraltar are generally not within the scope of Gibraltar corporate tax – provided the activities generating that income genuinely occur outside Gibraltar. The word "genuinely" carries significant weight.
Gibraltar does not impose capital gains tax, inheritance tax or wealth tax. There is no withholding tax on dividends paid out of a Gibraltar company. These features make the jurisdiction attractive as the apex of a group where value is created in operating entities and extracted upward through dividends to a Gibraltar holdco, with the founder holding shares personally from a Gibraltar (or other zero-tax) personal residence.
For staking rewards and protocol-level income, the tax analysis in Gibraltar – as in most jurisdictions – turns on whether the activity constitutes a trade or a passive holding. Gibraltar's tax authority has not issued comprehensive published guidance specific to staking, and the analysis tracks the general territorial principles: if the activity constitutes a trade conducted in Gibraltar, it is taxable; if the rewards accrue from a passive position managed outside Gibraltar, a different analysis applies. This is precisely the type of fact-specific question we work through with clients before the structure is locked.
One cross-border layer is frequently overlooked: VAT. Gibraltar operates its own sales tax regime (GST) rather than EU VAT, and its treatment of digital asset services diverges from the EU VAT framework post-Brexit. For groups with EU customers, understanding the GST/VAT boundary – and ensuring the operating entity, not the Gibraltar holdco, bears the customer-facing supply – is essential to avoid an unintended taxable presence argument.
Why personal tax residency and corporate structure must be decided together
The most common error in Gibraltar crypto structuring is treating personal relocation as sufficient to shift the group's tax position. It is not. A founder who moves to Gibraltar personally but retains management and control of a non-Gibraltar operating company from there may have created a Gibraltar tax residency for that company – an outcome that typically produces the opposite of the intended planning.
Conversely, a founder who establishes a Gibraltar holdco but continues to live and make business decisions from a high-tax jurisdiction creates a real risk that the holdco is treated as tax-resident in that jurisdiction under its controlled-foreign-company or management-and-control rules. Both scenarios arise from the same conceptual failure: treating personal tax residency and corporate structure as independent decisions. In our practice, we insist on addressing them simultaneously.
The decision sequence we work through with founders typically runs as follows. First, where does the founder intend to be genuinely resident – not nominally, but substantively, with the days and the life pattern to demonstrate it? Second, what jurisdictions does that personal residence interact with through prior tax treaties or exit-tax obligations? Third, can the corporate structure – holdco jurisdiction, operating entity jurisdiction, IP-holding entity if any – be designed around that genuinely reachable personal position? Fourth, what does the exit look like: does a Gibraltar holdco structure create a simpler or more complex disposal event at the point the founder sells shares or the business is acquired?
These are not purely Gibraltarian questions. For a founder holding shares in a Gibraltar company but previously tax-resident in a jurisdiction with exit-tax rules, the moment of departure from that prior jurisdiction may crystallise a deemed disposal event. We regularly advise founders at this precise pre-move juncture, and the pre-move legal work is often the highest-value engagement in the whole structuring process.
If a prior structure was built without aligning residency and corporate substance, a second read can surface the exposure and the route to remediation. Write to us at info@oboluslaw.com to open that review.How does Gibraltar banking and crypto treasury actually work in practice?
Banking for crypto businesses in Gibraltar has improved as the jurisdiction's DLT framework has matured and a small number of licensed institutions have developed crypto-friendly correspondent banking relationships. That said, the practical reality for a new Gibraltar holding entity is that banking will require more lead time and more documentation than the company formation itself. Operators building a Gibraltar structure should budget for a banking onboarding process that runs in parallel with, not sequentially after, the corporate setup.
For treasury-holding entities that hold digital assets directly rather than through a custodian, the key operational questions are: where are the private keys held and under whose control, what custody arrangement governs the holding, and how is that custody documented for the entity's accounts? Gibraltar's accounting standards require that crypto assets on the balance sheet are disclosed and valued; the method of valuation and the audit trail matter increasingly as institutional counterparties and regulators scrutinise the balance sheets of holding vehicles.
A practical note on stablecoins in treasury: USDT and USDC – the two dominant stablecoins – carry issuer-level freeze authority, meaning that Tether and Circle can immobilise balances on a court order or at law-enforcement direction. A Gibraltar holding entity that maintains material stablecoin reserves should understand this counter-party risk and consider whether the treasury policy addresses it. In our cross-border practice, we see this point overlooked surprisingly often in structures built with speed rather than rigour.
What is the inbound process and timeline for building a Gibraltar crypto structure?
The process for establishing a Gibraltar crypto holding structure follows a predictable sequence, though the timeline depends heavily on the complexity of the group, the founders' personal residency positions and whether a GFSC licence is required for any entity in the structure.
The first stage is the scoping analysis: identifying which entities in the proposed group require a GFSC DLT provider licence (if any), whether substance requirements are satisfied or need to be built, and what the personal residency position of each founder is and will be. This is the design-phase work, and compressing it creates downstream problems. We have seen structures built in days that took months to unwind.
The second stage is the corporate implementation: incorporating the Gibraltar company, appointing directors, establishing the registered office and secretarial function, and drafting the governance documents – articles of association, shareholder agreement, board protocols and, where applicable, investment or treasury policy documents. The Gibraltar Companies Act is a familiar common-law framework; incorporation itself is a matter of days.
The third stage, running in parallel, is the banking and custody setup. As noted, banking onboarding is typically the longest-elapsed-time element. Initiating bank account applications before the company formation is complete, rather than waiting, shortens the overall timeline.
If a GFSC DLT licence is required, the fourth stage – licence application and GFSC engagement – runs on its own track. Pre-application engagement with the GFSC is standard practice and is strongly recommended; the GFSC's feedback at that stage shapes the application and reduces the risk of material queries later. The overall licensed-entity timeline, from first engagement to licence grant, is best described as months rather than weeks, and depends substantially on the completeness and quality of the application.
A self-assessment checklist for founders considering Gibraltar:
- Is each founder's personal residency position clearly established – and documented – in the target jurisdiction?
- Does the proposed corporate substance satisfy Gibraltar's economic substance requirements for the specific holding activity?
- Has the group mapped which entities conduct regulated DLT activity under the GFSC perimeter, and which do not?
- Is the banking strategy planned in parallel with corporate formation, not sequentially?
- Has the exit event been modelled – what does a sale of Gibraltar holdco shares look like from a tax perspective in the founder's personal residence jurisdiction?
- For groups with EU users: is the MiCA passporting question addressed through a separate EU-authorised entity?
Which operator profile suits a Gibraltar structure?
Not every crypto business is well served by Gibraltar as its primary holding jurisdiction. The structure works best for a defined set of operator profiles, and recognising which profile fits – and which does not – is the honest starting point.
Profile A – the founder-relocator with a DLT business: a founder who is willing and able to genuinely relocate to Gibraltar personally, whose business involves DLT activity that can be licensed under the GFSC framework, and who wants a common-law, English-language jurisdiction close to European banking. Gibraltar as the apex holding and operating jurisdiction is a natural fit. The timeline is driven by the GFSC licensing process. The key risk is substance: the GFSC and the tax authority will look at whether the management-and-control genuinely sits in Gibraltar.
Profile B – the multi-entity group with a passive treasury apex: a group with operating entities in one or more other jurisdictions (an EU CASP entity, a Singapore DPT licensee, a BVI fund vehicle) that needs a clean, low-friction apex holdco to sit above them for investor and exit purposes. Gibraltar as the passive holdco – with no regulated activity, holding only shares and receiving dividends – can work well, provided the substance and management-and-control requirements are met. The key risk is misalignment with personal residency: if the founder operates from a high-tax jurisdiction and makes decisions about the Gibraltar holdco from there, the structure is vulnerable.
Profile C – the EU-facing exchange operator: a business whose primary user base is EU retail or professional customers. Gibraltar is not the right primary jurisdiction, because a Gibraltar licence does not passport under MiCA. The better structure here places the EU-facing operating entity in a MiCA-authorised jurisdiction (a Lithuanian or Maltese CASP, for instance), with Gibraltar potentially as a holding or treasury layer above, not the regulated operating entity. We design this layered structure regularly, and the allocation of IP, revenue and employment between the entities determines most of the tax outcome.
Profile D – the token issuer: an entity issuing a token to a broad market. Gibraltar has historically been friendly to token issuances; the GFSC issued guidance on ICOs in 2017, making it one of the earliest regulators globally to address the question. However, a token issuer serving EU investors or listed on EU-accessible platforms must contend with MiCA's whitepaper and authorisation requirements, even if the issuing entity is outside the EU. In our practice, we regularly advise token-issuing entities on the structural interaction between Gibraltar incorporation and MiCA compliance obligations, particularly around the ART and EMT categories.
What are the most common mistakes in Gibraltar crypto structuring?
A common assumption among founders approaching Gibraltar is that the jurisdiction's territorial tax system means minimal ongoing compliance work. That assumption is incorrect. The economic substance rules, the GFSC's supervisory expectations for licensed entities, and the interaction with the personal residency positions of founders and key personnel all create a compliance burden that must be budgeted for and managed actively.
The second common error is treating the personal move to Gibraltar as the end of the story. Founders with prior tax residency in a jurisdiction with exit-tax rules, controlled-foreign-company rules or worldwide-income taxation face obligations that arise from the moment of departure – and sometimes, particularly where share rights crystallise at that moment, the pre-move planning is the most material work in the whole engagement.
The third error is building the structure without modelling the exit. A Gibraltar holdco that is efficient as a holding vehicle during the operational phase may create complexity at exit if the acquirer is domiciled in a jurisdiction whose tax treaty network does not include Gibraltar, or if the founders have by then moved personal residence to a third country. Exit modelling should be part of the initial design conversation, not an afterthought.
We have also seen operators rely on allied counsel in the relevant jurisdiction for corporate formation while overlooking the cross-border tax and substance analysis. Gibraltar corporate lawyers can form the company quickly; the value-creation work is in the design phase that precedes formation, not the formation itself.
Related at OBOLUS
- Tax and cross-border structuring for digital-asset businesses – structuring practice across 70+ jurisdictions for crypto groups and founders.
- VAT treatment of crypto services in Canada – how indirect tax applies to digital-asset services in a common-law jurisdiction.
- Redemption and liquidity terms – practical lessons for boards – governance lessons on liquidity and redemption terms for digital-asset funds and issuers.
FAQ
Where should a token-issuing entity be domiciled?
There is no universal answer. Gibraltar has a relatively permissive history toward token issuances and is a common-law jurisdiction with a dedicated DLT regulatory framework. However, if the token will be marketed to EU investors or made available on EU-accessible platforms, MiCA compliance obligations attach regardless of the issuer's domicile. A Gibraltar entity issuing into EU markets will need to assess MiCA whitepaper and, in some cases, authorisation requirements. A dual-entity structure – Gibraltar holdco, EU-authorised operating or issuing entity – is a frequent solution. The correct domicile depends on the token's legal classification, the investor base and the distribution method.
How are staking rewards taxed?
Gibraltar operates a territorial tax system, so the key question is whether staking rewards arise from an activity conducted in Gibraltar and whether that activity constitutes a trade. Gibraltar's tax authority has not issued comprehensive published guidance specifically addressing staking rewards. In our practice, the analysis tracks the general territorial principles and the characterisation of the staking activity – active trade versus passive protocol participation. The personal tax treatment for a founder receiving staking rewards in their own name is a separate question and turns on the laws of their personal residence jurisdiction, not Gibraltar's corporate rules.
Does remote working create tax residency risk?
Yes – this is a live risk that is frequently underestimated. If a founder or director who is nominally resident in Gibraltar actually makes management decisions for a Gibraltar company while physically present in another country for an extended period, that country may assert that the company is managed and controlled there – creating a tax residency claim in the other jurisdiction. The risk is particularly acute for founders with prior ties to high-tax jurisdictions or those who travel extensively. Documenting where key decisions are made, and by whom, is not merely a compliance formality; it is the evidential foundation of the structure's territorial tax position.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the entirety of our practice – we act only for businesses, and we align founder residency with the holding structure and the exit plan as a single integrated engagement. To discuss your situation, contact info@oboluslaw.com.
By Lydia Brennan, Tax & Structuring Analyst – specialist in cross-border digital-asset holding structures, founder residency planning and the interaction between corporate substance and personal tax position for crypto-native groups.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.