VAT on crypto services is one of the most fragmented areas of digital-asset taxation — and the cost of getting it wrong accrues silently, quarter by quarter. A regulated exchange operating across the European Union under MiCA (the Markets in Crypto-Assets Regulation), a custodian licensed in the UAE under the VARA (Virtual Assets Regulatory Authority) regime, and a token issuer domiciled in Malta under the MFSA (Malta Financial Services Authority) framework each face materially different VAT treatment for services that look, commercially, almost identical. The question is not whether VAT applies. The question is which supply of what service, made to whom, triggers output tax — and whether the input tax on the regulated entity's costs is recoverable at all.
This page sets out the operative legal analysis: the VAT classification of common crypto services, the cross-border supply rules that govern where tax falls, the interaction with regulated-entity status, and the structural decisions that determine long-run VAT efficiency. We address the practical process a regulated entity should run, the mistakes that generate retrospective liability, and the decision logic that connects holding structure to VAT position.
Why VAT treatment of crypto services is not settled — even for regulated entities
Regulated status under a licensing regime does not, by itself, resolve VAT classification. The exemptions that protect traditional financial services from VAT — transacting in money, intermediating credit, dealing in securities — were not designed with digital assets in mind. Whether a given crypto service falls within an equivalent exemption depends on how each jurisdiction's VAT authority characterises the underlying supply. Under MiCA and within the EU, there is no single binding VAT directive that maps cleanly onto every CASP activity — national competent authorities apply existing VAT law by analogy, and those analogies differ.
The Court of Justice of the EU established in the Hedqvist decision that the exchange of fiat currency for bitcoin constitutes a transaction in currency for VAT purposes, and is therefore exempt. That principle is now well-settled for exchange services involving widely-used cryptocurrencies. What it does not cover is the management of a crypto fund, the provision of staking infrastructure as a service, the issuance of a security token, the supply of custody technology, or the brokerage of a DeFi yield strategy. Each of those carries a distinct VAT analysis. Regulators and tax authorities are progressively narrowing the analogy, but the analysis is still done service by service, jurisdiction by jurisdiction.
In our practice, we consistently see regulated entities that have correctly obtained their licence but never stress-tested the VAT treatment of their actual revenue lines. The licence sets the perimeter of permitted activity. VAT determines the net margin on that activity.
To map your VAT exposure across the regulated services your entity provides, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts — the entity, the user base, the banking — change the analysis. Map your options.
Which crypto services are typically VAT-exempt — and which are not?
The VAT classification of a crypto service turns on the economic substance of the supply, not the label the provider attaches to it. Three broad categories emerge across the major licensing jurisdictions: services that are generally exempt, services that are generally taxable, and services where classification is genuinely contested.
Generally exempt. Crypto-to-fiat and crypto-to-crypto exchange services — where the entity acts as principal — are treated in most EU member states as transactions in currency following the Hedqvist principle. The MFSA and the Bank of Lithuania apply this approach for MiCA-transitioning entities. Payment processing and transfer services, where the regulated entity is moving value rather than supplying a commercial product, are similarly positioned toward exemption in the majority of leading hubs.
Generally taxable at the standard rate. Technology platform fees charged for access to a trading interface — particularly where the service is described as software-as-a-service rather than intermediation — are taxable supplies in most VAT regimes. Custody administration fees, where the custody is characterised as safekeeping and technology provision rather than regulated financial custody, may attract VAT. Marketing and promotional services supplied to third-party token projects are standard-rated supplies in virtually every regime.
Contested territory. Staking-as-a-service raises the deepest classification dispute. Where a regulated entity pools client assets and distributes staking rewards, the question is whether the service is an intermediation of a financial return — exempt — or the provision of computing infrastructure on commission — taxable. National authorities have answered this differently. The FSRA in Abu Dhabi, FINMA in Switzerland, and the FCA in the UK have each issued guidance or informal positions that diverge from one another on this point. The VARA regime in Dubai does not yet provide a definitive VAT position; operators must rely on the UAE Federal Tax Authority's analysis.
Token issuance itself presents a further layer. An initial token offering may constitute a supply for VAT purposes or may be outside the scope entirely, depending on whether the token confers rights to future services, functions as a currency, or is classified as a security. Under MiCA, the three token regimes — asset-referenced tokens (ARTs), e-money tokens (EMTs), and other crypto-assets — each attract distinct regulatory treatment; the VAT analysis tracks but does not perfectly mirror that taxonomy.
How cross-border supply rules shift the VAT burden for regulated entities
A regulated entity serving clients across multiple jurisdictions must determine not just whether its services are exempt, but where each supply is made for VAT purposes — and which party accounts for any tax due. These are separate questions. Getting the place-of-supply wrong generates retrospective registration obligations in jurisdictions where the entity has no establishment and may have no banking relationship.
Within the EU, the place-of-supply rules under the VAT Directive apply to CASP services as they do to other financial services. B2B supplies of financial intermediation are generally made at the customer's place of business; B2C supplies follow a complex set of rules that turn on the nature of the service and the customer's location. A Malta-based entity providing exchange services to retail customers across the EU must track its customer base by member state and assess whether any country-specific thresholds or registration obligations apply.
Outside the EU, the position varies sharply by hub. Singapore's Goods and Services Tax regime exempts certain financial services but taxes others; the MAS Payment Services Act licence does not automatically exempt all fees from GST. The AIFC regime in Kazakhstan operates within a common-law environment but the VAT position is governed by Kazakhstani national tax law, not AFSA rules. BVI and Cayman Islands entities typically operate outside a VAT regime entirely — but that freedom disappears the moment the entity begins supplying services into a VAT territory, particularly the EU.
In our cross-border practice, we have seen entities establish holding structures in low-VAT hubs without mapping which service contracts would be re-sourced into VAT jurisdictions by the place-of-supply rules. The holding-structure decision and the VAT supply-chain design must be made together.
What is the input tax recovery position for a regulated entity?
Input tax recovery — the ability to reclaim VAT on costs incurred in making supplies — is, for many crypto businesses, worth more than any output tax liability they carry. A regulated exchange or custodian incurs substantial VAT-bearing costs: technology infrastructure, compliance software, professional services, data feeds, office costs. Whether those costs are recoverable depends on whether the entity's outputs are exempt, taxable, or a mix of both.
Exempt suppliers cannot generally recover input tax on costs attributable to exempt supplies. This creates a structural challenge: a crypto exchange that is entirely VAT-exempt on its revenue base bears irrecoverable VAT on every invoice from its technology and compliance stack. The economic cost of this position compounds at scale. For an entity operating at a multi-million-dollar annual cost base, the irrecoverable VAT is a material margin drag.
Partial exemption — the mechanism that allows a business making both exempt and taxable supplies to recover input tax on the taxable portion — is the key tool for regulated entities with mixed revenue lines. A CASP that earns exempt exchange fees but taxable SaaS-platform fees, or taxable marketing services to third parties, can structure a partial exemption method that maximises recovery on the attributable costs. ESMA and national tax authorities do not prescribe the method; the regulated entity must propose and agree a method with its local VAT authority. In our experience, this is one of the most consistently overlooked structuring opportunities in the regulated crypto sector.
The cross-border dimension adds complexity. An entity with operations in multiple jurisdictions will have a separate input tax position in each VAT regime it is registered in. Costs incurred centrally — particularly at the holding-company level — may be allocable to operating subsidiaries, with varying recovery outcomes depending on the intercompany arrangements and the characterisation of the intragroup supply.
What are the most common VAT mistakes made by regulated crypto entities?
VAT mistakes in the regulated crypto sector tend to cluster around four failure modes: misclassification of the supply, late registration, structural misalignment, and the assumption that regulatory compliance implies tax compliance.
Misclassification is the most frequent. An entity that characterises its staking-as-a-service revenue as exempt — relying on the exchange-service analogy — without a specific position from the relevant tax authority accumulates output tax exposure that may be assessed retrospectively, with interest and penalties, years after the revenue was earned.
Late registration typically follows from a failure to track the place-of-supply rules. A non-EU entity that begins making digital services to EU retail customers triggers registration obligations in the relevant member states, or under the OSS (One-Stop-Shop) regime, once activity exceeds defined thresholds. Those thresholds are quantity-based, not activity-based; a token sale to retail buyers in Germany, France and Spain may trigger registrations simultaneously.
Structural misalignment arises when the holding structure — designed for corporate tax efficiency or capital repatriation — creates unintended VAT consequences. An IP holding company in a low-tax jurisdiction that charges royalties to the operating entity in an EU member state may find those royalties are a taxable supply, creating an output-tax obligation for the recipient under the reverse-charge mechanism. This is a frequent discovery when the holding structure is reviewed for the first time post-setup.
The fourth failure mode — assuming that regulatory compliance implies tax compliance — is perhaps the most expensive. Holding a VARA licence, a MiCA CASP authorisation, or an MAS DPT service licence is a condition of operating the business. It tells the tax authority nothing about how the entity's supplies should be classified.
Decision matrix: VAT structure by regulated-entity profile
The right VAT structure for a regulated crypto entity depends on three variables: the nature of the revenue lines, the geographic spread of the customer base, and the location of the group's cost base. The following profiles represent the principal configurations we advise on.
Profile A — EU-licensed CASP with retail customer base. An entity authorised under MiCA in a member state with passporting across the EU/EEA, earning primarily from exchange and brokerage fees. The core exchange revenue is likely exempt following the Hedqvist principle. The primary risk is the treatment of secondary revenue lines — platform fees, premium services, API access — which may be standard-rated. The action item is a partial exemption method that accurately attributes input tax to taxable versus exempt activities. Timeline for agreeing the method with the NCA: typically a matter of months, depending on the member state. Key risk: over-claiming input tax on costs attributable to exempt supplies.
Profile B — VARA-licensed entity in Dubai with global institutional clients. The UAE does not impose a VAT regime equivalent to the EU's, but the Federal Tax Authority does apply VAT to certain financial services. An entity making cross-border supplies to EU or UK counterparties must assess whether those supplies create registration obligations abroad under the reverse-charge or digital-services rules. The action item is a supply-chain map of each B2B service line, with place-of-supply analysis for each counterparty jurisdiction. Timeline: depends on the number of counterparty jurisdictions. Key risk: undetected registration obligations in the EU member states of major counterparties.
Profile C — Offshore holding structure (BVI/Cayman) with operating subsidiaries in VAT jurisdictions. The holding entity is outside any VAT regime. The operating subsidiaries are registered for VAT in their respective jurisdictions. The key issue is the intercompany service charge — management fees, IP licences, treasury services — flowing from the offshore holding entity into the VAT-registered subsidiaries. Those inbound charges may trigger reverse-charge obligations, reducing the net benefit of the offshore structure. The action item is a review of intercompany pricing and its VAT treatment in each operating jurisdiction. Key risk: unclaimed reverse-charge obligations accumulating across multiple subsidiaries.
Profile D — Token issuer with both retail and institutional token purchasers. The VAT treatment of the token issuance depends on the token's classification: currency-equivalent tokens follow the Hedqvist exemption; utility tokens may be advance payments for a future taxable supply, triggering VAT at issuance; security tokens may be outside the scope of VAT entirely. The action item is a VAT classification opinion obtained before the token launch. Timeline: typically several weeks, depending on the complexity of the token mechanics. Key risk: issuing a utility token without accounting for VAT on the proceeds.
If your entity's VAT profile doesn't map cleanly onto any of the above, that is itself diagnostic information. Write to info@oboluslaw.com or message us via t.me/oboluslaw for a scoped assessment. Map your options.
In practice: a recent VAT restructuring matter
In a recent matter, a token-issuing entity operating across the EU and the Gulf held a MiCA-transitioning licence in one member state and a VARA licence in Dubai. The group had been treating all its revenue as VAT-exempt on the basis of the exchange-service analogy. When we reviewed the structure, we identified three distinct revenue lines that were not exchange services: a SaaS-platform fee charged to third-party projects, a staking-as-a-service offering to institutional clients, and a white-label compliance tool licensed to other VASPs. The cumulative output-tax exposure on those lines was material. We worked with allied counsel in the relevant EU jurisdiction to prepare and submit a partial exemption method proposal and a VAT reclassification disclosure. The entity avoided retrospective assessment and secured a prospective recovery method for its technology cost base. The engagement was concluded within a single financial quarter.
A common assumption: "Our structure is already tax-efficient — VAT is a smaller issue"
A common assumption among regulated crypto entities is that once the corporate income-tax structure is optimised — the holding entity is offshore, the IP is in a favourable jurisdiction, the operating margins are managed through intercompany pricing — VAT is a second-order concern. This is the most expensive assumption in digital-asset taxation.
Corporate income tax is paid on profit. VAT is paid on gross revenue — and on costs — regardless of profitability. An entity operating at breakeven on its income-tax position may still carry a seven-figure annual VAT liability if its supply classification is wrong. More importantly, VAT exposure compounds from the date the liability arose, not the date it was discovered. A three-year retrospective VAT assessment, with interest, can represent a structurally destabilising liability for an entity that believed its tax position was clean.
Personal tax residency and corporate structure are decided together or not at all. The same principle applies to VAT: the holding structure, the operating entity's domicile, and the VAT supply chain must be designed as a system, not as separate decisions. Relocating the founder personally — or even relocating the corporate headquarters — does not change the VAT treatment of the services the operating entity is already supplying to its customer base.
Self-assessment: is your VAT position fit for a regulated entity?
The following checkpoints identify the most common gaps in the VAT position of a regulated crypto entity. If any of these items is unresolved, the gap should be addressed before the next regulatory review or audit cycle.
- Has each of your revenue lines been individually classified as exempt, taxable, or outside the scope of VAT — in every jurisdiction where you have customers?
- Does your entity have a formally agreed partial exemption method with the relevant VAT authority, if you make both exempt and taxable supplies?
- Have you mapped the place-of-supply position for your B2B and B2C supplies separately, and assessed whether you have VAT registration obligations in jurisdictions where you have no establishment?
- Have the intercompany charges within your group structure — management fees, IP licences, intragroup loans — been reviewed for their VAT treatment in each jurisdiction where a subsidiary is registered?
- Is your token issuance — if applicable — covered by a written VAT classification opinion obtained before launch?
- Has your staking-as-a-service or yield-distribution activity been specifically reviewed against the VAT guidance of the relevant tax authority, rather than assumed to be exempt by analogy?
If more than two of these questions have an uncertain answer, the exposure is likely material and the review is overdue.
Related at OBOLUS
- Tax and cross-border structuring for digital-asset businesses – the full practice overview covering holding structures, IP location and cross-border tax design.
- Staking and rewards taxation in the British Virgin Islands – jurisdiction-specific analysis of how BVI treats staking income and token rewards.
- KYC and onboarding framework in Mauritius – the compliance obligations for entities licensed under the VAITOS Act and their interaction with group tax structures.
FAQ
Where should a token-issuing entity be domiciled?
Domicile for a token-issuing entity is determined by the intersection of regulatory access, VAT treatment of the issuance, corporate income-tax treatment of token proceeds, and the founder's personal tax residency plan. There is no universally optimal domicile. Malta, Switzerland, Singapore, the BVI and the Cayman Islands each offer distinct regulatory and tax profiles. The right answer turns on the token's classification, the target investor base, and the long-term holding structure. A VAT opinion on the issuance should be obtained before the entity is incorporated and the token mechanics are finalised.
How are staking rewards taxed?
The taxation of staking rewards varies by jurisdiction and by whether the rewards are received by the entity as principal or distributed to clients as a service. In most major tax jurisdictions, staking rewards received as income are subject to corporate income tax at the point of receipt or crystallisation. The VAT treatment — whether the staking service is exempt intermediation or a taxable technology supply — is a separate question and is currently contested in several EU member states. For an entity providing staking-as-a-service to clients, both the income-tax and VAT positions require individual analysis.
Does remote working create tax residency risk?
Yes, and the risk is commonly underestimated. If key management decisions are made by individuals working remotely in a jurisdiction where the entity is not registered, there is a risk that the entity is treated as tax-resident in that jurisdiction — or as having a permanent establishment there — under the domestic rules of that country. This applies equally to directors of holding companies and to founders with management control. The personal tax residency of key individuals and the governance structure of the holding entity must be aligned as part of the group tax design, not addressed after the structure is already in place.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance architecture that surrounds those activities. Digital assets are the whole of our practice. We align founder residency, holding structure and exit plan as a single integrated design — not as separate conversations. To discuss your VAT position or group tax structure, contact info@oboluslaw.com.
By Lydia Brennan, Tax & Structuring Analyst — specialising in cross-border VAT design, holding structures and token-issuance tax analysis for regulated digital-asset entities.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.