A token-issuing business deciding where to hold its digital-asset portfolio faces one of the most consequential structural choices in its lifecycle. Malta offers a regulated, EU-member-state environment with an MFSA (Malta Financial Services Authority) licensing regime that is migrating toward the MiCA (Markets in Crypto-Assets Regulation) standard, a civil-law corporate tradition that accommodates holding-company structures, and a tax system with treaty depth. The legal question is not simply "which jurisdiction is cheapest" – it is whether the structure genuinely holds up under the substance, residency and anti-avoidance rules that regulators and tax authorities now apply as standard.
A crypto holding structure in Malta is a corporate architecture that places one or more entities in Malta to hold digital assets, IP, or operating licences on behalf of a wider group. Done correctly, it aligns cross-border structuring, founder tax residency, and the MiCA compliance layer into a single coherent design. Done incorrectly, it creates phantom substance that a home-country tax authority can pierce on the first look.
This page sets out the regulated basis for a Malta holding structure, the inbound process, the interaction with banking and substance requirements, a common structural mistake, and the decision point at which counsel should be engaged.
What is the regulated basis for a crypto holding structure in Malta?
Malta is an EU member state, and MiCA applies directly as of the full implementation deadline that the MFSA supervises at the national level. Any entity conducting crypto-asset service activities – custody, exchange, advisory, portfolio management – within the MiCA perimeter requires a CASP authorisation (Crypto-Asset Service Provider) under that regime. A pure holding entity that does not itself perform regulated activities may sit outside the CASP perimeter, but the line between passive holding and regulated activity is drawn by conduct, not by label.
Malta's prior VFA framework (Virtual Financial Assets Act) created a domestic licensing tier that the MFSA is now transitioning toward MiCA CASP authorisation. Businesses that held a VFA licence are working through that transition. New applicants design their structure directly against the MiCA standard from the outset.
The passporting dimension matters here. A CASP authorisation granted by the MFSA allows the entity to passport across all EU and EEA member states without additional national authorisations. For a group that intends to serve users across Europe, a Maltese CASP is a single regulatory entry point to the entire single market. That passporting right is why Malta continues to attract inbound structuring work despite the higher compliance expectations that MiCA imposes.
In our practice, the first structural question we address is whether the Maltese entity is the licensed operating company, a holding company above a licensed subsidiary, or an IP-holding entity licensing technology down the chain. Each configuration carries different regulatory, substance and tax consequences. Choosing without mapping those interactions first is the most common avoidable mistake we see.
How does Malta's tax regime interact with a crypto holding structure?
Malta operates a full-imputation corporate tax system with a refund mechanism that, applied correctly, can materially reduce the effective rate at the shareholder level. The mechanics turn on whether the Maltese company distributes dividends from a trading account or an investment account, and whether the shareholder is resident or non-resident. The specifics of those rates are set in the current Malta Income Tax Act and should be confirmed with counsel at the time of structuring – they are not static and the MFSA's view of what constitutes "trading" in digital assets continues to develop.
Token classification matters for tax characterisation. Under the principles that apply both in Malta and under the wider MiCA taxonomy, a token may be classified as a payment token, a utility token, an ART (asset-referenced token) or an EMT (e-money token). That classification determines not only the regulatory regime but also whether gains are treated as capital or income, and whether VAT applies to the issuance or exchange. Malta has generally aligned its VAT treatment of crypto with the EU framework following the CJEU's guidance, but specific transactions – particularly yield-generating positions and staking – remain areas of interpretive uncertainty.
Staking rewards are a recurring source of friction. The question is whether rewards are income at the point of receipt, capital at the point of disposal, or some hybrid depending on the validator role. Malta has not issued definitive public guidance that resolves this cleanly for all scenarios. We advise clients to take a conservative position documented in a written tax analysis, updated whenever the position changes materially.
CTA #1: The tax architecture of a Malta holding structure turns on facts that are specific to your entity type, your token classification and your shareholder profile. Map your options with OBOLUS before committing to a corporate design.
What substance does a Malta holding company actually need?
Real substance in Malta is a non-negotiable condition for the structure to hold, both for tax purposes and for regulatory credibility. Substance, in this context, means genuine decision-making, qualified management, and operational capability located in Malta – not a registered address and a nominee director who approves board minutes by email.
The standard that applies is informed by the EU's anti-avoidance directives and by the OECD's BEPS framework, both of which Malta has implemented. A Maltese holding company that cannot demonstrate local management and control of the digital assets it holds will be vulnerable to a challenge that its effective place of management is elsewhere – typically the jurisdiction where the founders or the active decision-makers are located.
For a CASP-licensed operating entity, the MFSA has its own substance expectations: a physical presence, local senior management, qualified personnel for AML/KYC functions, and governance structures that can be inspected. These are not box-ticking exercises. The MFSA's supervision posture under MiCA is materially more intensive than the prior VFA registration process. Operators who built a Malta presence under the older regime with minimal local staff need to reassess whether that presence continues to meet the current standard.
In a recent structuring matter, a digital-asset fund manager had operated through a Maltese holding entity for several years. When they moved toward a token issuance, we identified that the holding company's governance documentation had not been updated to reflect the actual decision-making process, and that the minutes did not evidence Maltese-based management control. We restructured the board composition, updated the governance framework, and prepared the entity for the MiCA transition before the token project went to market. The group avoided a challenge to the tax position that would have been difficult to defend on the existing documentation.
What does the inbound structuring process look like in practice?
A Malta holding structure for a digital-asset business is typically built in a sequence of five steps, each of which creates a dependency for the next.
The first step is a regulatory perimeter analysis – mapping every activity the group conducts or intends to conduct against the MiCA activity categories. This determines which entities need CASP authorisation, which are exempt, and whether any existing licences (including VFA licences in transition) satisfy the requirement or need to be replaced.
The second step is corporate architecture design – deciding how many entities are needed, where each sits in the chain, which entity holds the IP, which holds the assets, and which is the licensed operating company. The holding structure must be designed against the tax refund mechanism and the substance requirements simultaneously. Designing the corporate layer and then trying to retrofit a tax position is a pattern that consistently produces suboptimal outcomes.
The third step is substance planning – identifying what local presence is required for each entity, what management and governance arrangements will evidence Maltese control, and what timeline and budget is realistic. Substance is not cheap and it is not instant. A realistic Malta build takes a matter of months from initial incorporation to an operating entity with genuine local presence.
The fourth step is banking – the most operationally constraining element of any crypto holding structure. Maltese banks remain cautious about digital-asset businesses. EU-based EMI accounts and international accounts with crypto-friendly institutions are typically part of the solution. Banking should be scoped in parallel with incorporation, not after it.
The fifth step is regulatory application or transition – filing with the MFSA for CASP authorisation where required, or managing the transition from a VFA licence. The MFSA's process under MiCA is document-intensive and requires a business plan, governance framework, AML/KYC policies, a qualified compliance officer, and adequate capital. Timelines vary by the complexity of the application and the MFSA's queue at the time of filing.
CTA #2: If a prior Malta incorporation produced minimal substance and a structure that does not hold under current scrutiny, a second structural review can identify the remediation path. Map your options with OBOLUS before your next regulatory interaction.
How does a Malta structure interact with a founder's personal tax position?
Personal tax residency and corporate structure must be designed together. This is the point that most founders who engage counsel late in the process have already got wrong. A Maltese holding company does not insulate a founder's gains from tax in the founder's country of residence if the founder remains tax resident there and the company's management and control is found to sit with that founder personally.
A common assumption is that relocating personally is enough to change the group's tax position. It is not. The question is whether the relocation is genuine – whether the founder has actually moved their centre of life, broken their prior residency ties, and established the substance that the new jurisdiction requires. Malta's Individual Investor Programme and the Malta Permanent Residence Programme have specific conditions, and a founder who spends the majority of the year in a prior-home jurisdiction while nominally residing in Malta is exposed to a dual-residency challenge.
The interaction between founder residency and the holding structure affects the exit too. If a founder sells shares in a Maltese holding company, the tax treatment of that gain depends on the founder's tax residency at the time of disposal, the applicable double-tax treaty, and whether any exit tax applies in the prior jurisdiction. Pre-exit structuring is a distinct exercise from initial structuring, and the two should be designed with the eventual exit in mind from the outset.
We align founder residency with the holding structure and the exit plan as an integrated exercise. Treating these as separate questions – one for the corporate lawyer, one for the personal tax adviser – is a structural error that creates gaps neither adviser closes.
What does the banking and cross-border payment layer look like?
Banking for a Malta-based crypto holding structure is a cross-border exercise by necessity. Traditional Maltese banks conduct intensive due diligence on digital-asset businesses and the timelines for account opening can be extended. The practical solution for most operators is a combination of: a Maltese bank account for corporate operations where one can be obtained; an EU-licensed e-money institution account for euro-denominated flows; and an account with a crypto-friendly international institution for digital-asset settlement.
The Travel Rule (the obligation to pass originator and beneficiary data with a virtual-asset transfer) applies under the applicable AML provisions to Maltese VASPs and will apply to CASPs under MiCA's AML framework. Banking counterparties increasingly ask for evidence of Travel Rule compliance as part of their own due diligence. A Malta holding structure that cannot demonstrate a functioning Travel Rule process will face banking friction regardless of its regulatory status.
Operators we advise routinely underestimate how much of the inbound process is banking rather than regulatory. A CASP authorisation without a functioning bank account is an incomplete build. We scope the banking strategy in parallel with the legal structuring, not as an afterthought.
What is the decision point – when should counsel be engaged?
The optimal engagement point is before the corporate structure is committed to – ideally at the stage when the business model is confirmed but the legal architecture is still open. At that point, the full range of structural options is available, the tax position can be designed prospectively rather than remediated retrospectively, and the substance plan can be built into the budget and timeline from the start.
The next best engagement point is when an existing structure shows signs of strain: a tax authority challenge, an MFSA enquiry, a banking refusal, a token issuance approaching without a clear regulatory basis, or a founder relocation that was not matched by a structural review. Each of these is a signal that the current architecture does not hold under current scrutiny.
The worst engagement point is after the structure has been challenged, after a tax assessment has been issued, or after a token has been launched on a basis that has not been mapped against MiCA. At that point, options are narrower and the cost of remediation is materially higher than the cost of getting the structure right in the first place.
A rough profile guide, written qualitatively: an early-stage token issuer looking for an EU passporting base should prioritise the MiCA/CASP analysis and the whitepaper obligations; a fund manager structuring a digital-asset AIF should focus on the MFSA's funds regime and the substance test; a DeFi protocol seeking a holding vehicle should map the regulatory perimeter carefully before committing to Malta, since the applicability of CASP authorisation to DeFi activities remains an area of active regulatory development at the ESMA level.
Related at OBOLUS
- Tax and cross-border structuring for digital-asset businesses – our full practice overview for multi-jurisdiction structuring mandates
- Pre-exit tax restructuring for early-stage founders – aligning residency, holding structure and exit mechanics before a liquidity event
- How to prepare a MiCA-compliant whitepaper – the disclosure obligations that accompany a Malta-based token issuance under MiCA
FAQ
Where should a token-issuing entity be domiciled?
Domicile turns on the regulatory regime required, the user base to be served, and the tax position of the founders. A Malta entity offers EU MiCA passporting via a CASP authorisation from the MFSA, which allows the entity to serve users across the EU and EEA from a single authorisation. That benefit must be weighed against the substance costs of a genuine Maltese presence and the banking constraints. No single domicile is optimal for every issuer profile; the decision should follow a cross-border regulatory and tax mapping, not a default assumption.
How are staking rewards taxed?
Staking reward taxation in Malta is not resolved by a single definitive public ruling covering all scenarios. The key variables are whether the entity holding the staked assets is a trading entity or an investment entity, the characterisation of the rewards under the applicable Malta Income Tax Act provisions, and whether any double-tax treaty with the founder's residency jurisdiction applies. A conservative, documented tax analysis – reviewed each time the staking strategy changes – is the appropriate approach until clearer guidance emerges from the Malta tax authority.
Does remote working create tax residency risk?
Yes, in a material way. A director, founder or key employee who works remotely from a jurisdiction other than Malta may create a permanent establishment exposure in that other jurisdiction, or may generate a challenge to the Maltese entity's effective place of management if their decisions are made from abroad. The risk is highest where that individual is the primary decision-maker for the holding entity. Remote working arrangements for senior personnel should be reviewed as part of the substance analysis, not treated as a purely HR matter.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. We align founder residency with the holding structure and exit plan as a single integrated exercise – because personal tax position and corporate architecture decided separately produce gaps that neither adviser closes. Digital assets are the whole of our practice. To discuss your situation, contact info@oboluslaw.com.
By Lydia Brennan, Tax & Structuring Analyst – specialising in cross-border digital-asset holding structures, founder residency alignment and pre-exit tax planning for crypto businesses operating across EU and offshore jurisdictions.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.