GI v13.3.0
content: ai_generated 101 sources retrieved model claude-opus-4-8 · 2026-06-20

Gibraltar

GI schema world-payments-v1 trajectory: not yet assessed

Last updated · 14 modules · 54 sourced findings · 113 sources in the cumulative register

14Modulesbaseline.modules[]
54Findingsmodules[].findings[]
28Tier-1 sourcesrun_metadata.t1_source_count
Confidence mix (sums to 14 rendered modules; click to filter)

Jurisdiction brief

Latest update · 18 October 2026

Lead Signal

Gibraltar's Financial Services (Electronic Money) (Amendment) Regulations 2026 (LN.2026/225) came into force on 16 July 2026, materially strengthening the territory's e-money safeguarding regime. The instrument introduces new safeguarding returns under regulation 32A and dividend/capital-distribution restrictions under regulation 29A. GFSC-supervised electronic money institutions must now either segregate relevant funds under safeguarding option 1 or hold insurance or a comparable guarantee under option 2, and must submit periodic safeguarding returns to the GFSC. This mirrors the intent of, but is legally distinct from, the UK's CASS 15 safeguarding regime; a Gibraltar EMI subject to these rules should not assume CASS 15 case law or guidance transfers directly.

14 of 14 modules
Signal
Density

Selections OR within a group, AND across groups. Press / to search.

#

Gibraltar operates its own GFSC-supervised EMI/PI regime; the UK-EU Agreement on Gibraltar (signed 14 Jul 2026) does not restore or create EU financial-services passporting. UK-Gibraltar market access continues via the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025, extended to 31 December 2026.

Horizon · 2026-2027 (±multi_year)HMT decision on folding Gibraltar payments/e-money access into FSMA Schedule 2Aproposed · T3
Horizon · 2026-2027 (±multi_year)HMT decision on folding Gibraltar payments/e-money access into FSMA Schedule 2Aproposed · T3
Standing sub-brief · as of 24 August 2026348 words · last cycle 2026-10-06

Licensing, Authorisation & Market Access

Gibraltar's payments market-access framework is in a transitional state. The Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025 extend UK-Gibraltar passporting arrangements to 31 December 2026, pending the permanent Gibraltar Authorisation Regime, which has not yet come into force. Trade commentary describes the GAR as a unique, permanent mutual-market-access framework for Gibraltar-based banks, insurers, investment managers, payment service providers, and e-money institutions, a status not available to any other Overseas Territory, Crown Dependency, or third country; it remains pending, and the transitional passporting extension is the operative mechanism in the meantime.

Periodic update · new data 2026-10-06

Licensing, Authorisation & Market Access

Gibraltars payments market-access architecture remains in a structurally unresolved transitional state. Gibraltar-licensed payment institutions and electronic money institutions currently access the UK market under a transitional arrangement that runs only to 31 December 2026, a fixed and approaching expiry date rather than an open-ended accommodation. The permanent replacement, the Gibraltar Authorisation Regime, was described in a June 2026 ministerial statement as still roughly eighteen months away from being operational, with its progress tied in part to amendments proceeding through the UK Financial Services and Markets Bill currently before Parliament. This creates a visible gap: the transitional window closes at the end of this year, while the permanent regime intended to succeed it is not expected to be in place until well into 2027 or later, leaving open the question of whether a further extension to the transitional arrangement will be required to bridge that gap.

The UK-EU Agreement in respect of Gibraltar, signed 14 July 2026 and provisionally applied from the same date, does not alter this picture, and firms should not read it as resolving any part of the market-access question. The Agreement is substantively an AML/CFT non-regression instrument; it confirms no EU-side passporting or market-access right for Gibraltar-licensed payment or e-money firms. Gibraltars market-access position therefore continues to depend entirely on the UK leg of the relationship, specifically the transitional arrangement and its eventual permanent successor, rather than on any EU-side mechanism.

This combination, a time-limited UK transitional window, a permanent regime still materially distant, and no EU-side alternative, constitutes the dominant licensing and market-access theme for Gibraltar this cycle. It is a structural, not episodic, condition: no single enforcement action or licence decision drives it, but rather the pace at which UK primary and secondary legislation accommodating a permanent Gibraltar framework progresses, set against a transitional arrangement with a fixed and now relatively near expiry date.

Outlook

The clearest forward marker is 31 December 2026, the expiry date of the current transitional passporting arrangement. Firms licensed in Gibraltar and relying on UK market access should treat the period between now and that date as the operative window for either the permanent Gibraltar Authorisation Regime reaching a sufficiently advanced stage, or a further extension to the transitional arrangement being agreed; absent either development occurring, Gibraltar-licensed firms could face a market-access gap into 2027. Progress of the UK Financial Services and Markets Bill through Parliament is the legislative vehicle most directly tied to how quickly the permanent regime can be finalised, and is accordingly the single most relevant external development to monitor for this module going forward.

3 earlier distinct update(s)
Periodic update · new data 2026-10-04

Licensing, Authorisation & Market Access

Gibraltar's market-access position for payment and e-money firms serving the UK rests on a temporary arrangement that is approaching its scheduled end. The FSMA (Gibraltar) Order 2001 established a passporting bridge allowing Gibraltar-licensed firms to access the UK market; this bridge was extended by SI 2025/1182 and is now due to expire on 31 December 2026. The intended permanent replacement, the Gibraltar Authorisation Regime (GAR) established under the UK Financial Services Act 2021, has not yet become operational. A ministerial statement from Minister Feetham indicated the regime remained roughly 18 months from introduction as at the time the statement was made, meaning the permanent regime is unlikely to be ready before the temporary bridge expires on its current schedule.

The practical effect for Gibraltar-licensed electronic-money institutions and payment institutions currently serving UK customers under the temporary bridge is a forward-looking market-access risk: if neither the GAR becomes operational nor the bridge is further extended before 31 December 2026, these firms face a gap in their ability to continue serving UK customers on the basis they currently rely on. No evidence this cycle indicates whether a further extension is under active consideration or confirmed.

Outlook

The critical date is 31 December 2026. Firms and counterparties should watch for either confirmation of GAR operability or a further extension announcement well ahead of that date; neither was evidenced as having occurred as at this record.

Periodic update · new data 2026-09-21

Licensing, Authorisation & Market Access

Gibraltar's payment and e-money institutions continue to access the UK market through transitional rather than permanent arrangements. The UK-GI transitional passporting arrangements, originally established under SI 2019/589, have been extended to 31 December 2026 via the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025. This is confirmed at high confidence via a T1 Bank of England source. The permanent Gibraltar Authorisation Regime (GAR), which is intended eventually to replace this transitional bridge with a settled bilateral market-access framework, remains not-yet-operational.

The practical consequence for both bank and non-bank payment institutions and e-money institutions operating from Gibraltar into the UK is continued reliance on a bridging legal mechanism now extended for a further twelve months, rather than the durable market-access certainty a permanent regime would provide. This affects both bank-affiliated and non-bank PI/EMI structures, as the transitional arrangements apply across both categories.

Outlook

The extension to 31 December 2026 sets the next clear decision point: either the GAR becomes operational before that date, providing a permanent basis, or the transitional arrangements will need extending again. Persistent reliance on transitional rather than permanent arrangements, now stretching across multiple extensions, itself signals unresolved structural uncertainty for GI-domiciled PSPs and EMIs dependent on UK market access.

Periodic update · new data 2026-09-14

Licensing, Authorisation & Market Access

Gibraltar's financial-services market access has bifurcated durably this cycle. The UK-EU Agreement on Gibraltar, signed 14 July 2026 and provisionally applied from 15 July 2026, covers movement of people, customs, indirect taxation, goods, transport, security cooperation and governance but explicitly does not extend to financial-services passporting or other services passporting for Gibraltar-licensed firms. This is a scope carve-out rather than an ambiguous gap: EU market access for Gibraltar-licensed payment institutions and e-money institutions remains closed under this treaty specifically.

UK market access continues instead through a separate bilateral instrument, the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025, which extends transitional UK-Gibraltar financial-services market access to 31 December 2026. This is distinct in both legal basis and durability from the EU treaty: it is a time-limited UK domestic regulation rather than an international treaty provision, and it carries a hard expiry date absent further extension.

Gibraltar also entered a customs union with the European Union from 10 April 2026, introducing a new Transaction Tax starting at 15 percent and rising to 17 percent. This customs arrangement is goods-only; it does not cover services, so the cross-border supply of payment and e-money services by Gibraltar-licensed EMIs and PIs is unaffected by these customs provisions. Separately and without change this cycle, the Gibraltar Financial Services Commission continues to apply an e-money capital-buffer requirement set at the minimum requirements imposed by the second Electronic Money Directive (2009/110/EC) increased by 20 percent -- a standing bank-vs-non-bank-relevant prudential requirement that sits on top of the EMD2 floor specifically for Gibraltar-licensed e-money institutions, distinguishing their capital treatment from that of bank-based payment providers.

Outlook

The 31 December 2026 expiry of the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025 transitional provisions is the key date to track. Absent a further extension, Gibraltar-licensed EMIs and PIs with UK-facing business would lose their transitional UK market-access basis at that point, while EU access remains separately foreclosed by the July 2026 treaty's explicit scope carve-out -- compounding into a genuine cliff-edge risk for firms dependent on either corridor.

1 further periodic run re-emitted the standing brief unchanged and is not shown.

Sources and findings (5)
  1. T3Valsen Corporate / GFSC eMoney pages — E-money issuance in Gibraltar is regulated under the Financial Services (Banking) Act 1992 framework and specifically the Financial Services (Electronic Money) Regulations 2011/2020; the GFSC authorises and supervises EMIs.
  2. T1GFSC (fsc.gi) Electronic Money Institutions page — Two EMI types exist: authorised and registered; registered EMIs cannot passport. EMIs may appoint agents (registered with GFSC) and distributors (notified to GFSC); neither may issue e-money.
  3. T1GFSC (fsc.gi) Payment Service Provider page — Authorised Credit Institutions or Electronic Money Issuers are not required to apply for a separate payment-service permission, but must ensure they carry payment services under their authorisation and comply with payment-services requirements; applications follow a Staged Application for Authorisation approach.
  4. T3Ramparts (ramparts.gi) GAR & UK Market Access — Under the Gibraltar Authorisation Regime (GAR) UK market access is via notification (not fresh UK authorisation); payment/e-money activities currently rely on separate transitional provisions — PSRs Schedule 7 and EMRs reg 74A — granting sector-specific temporary permission rather than FSMA deemed authorisation, with HMT yet to decide whether to fold them into Schedule 2A.
  5. T1GFSC (fsc.gi) Electronic Money Institutions page — GFSC raises minimum prudential thresholds: under Schedule 2 paras 15-16 of the Electronic Money Regulations, the minimum requirements of EMD2 (2009/110/EC) are directed to be increased by 20%.

#

Safeguarding is governed by the Financial Services (Electronic Money) Regulations 2020 (Regs 31-32: segregation option 1 / insurance-or-guarantee option 2), with safeguarded funds forming a priority asset pool on an insolvency event. Conduct is governed by the GFSC Consumer Duty (Core Principles and Consumer Duty Regulations 2024, in force 9 May 2024, UK-aligned). Financial promotions are tightened by the Financial Services (Restricted Promotions) Regulations 2025 (in force 1 May 2025) restricting promotion of speculative illiquid securities to retail clients.

Movement — CHANGEDAmended by LN.2026/225 (in force 16 Jul 2026): new safeguarding returns (reg.32A), dividend restrictions (reg.29A)Financial Services (Electronic Money) (Amendment) Regulations 2026 commenced, materially amending the safeguarding regime.
Horizon · 2026-2027 (±year)Consumer Duty extension to all retail customers (ministerial appointment)adopted · T1
Standing sub-brief · as of 24 August 2026199 words · last cycle 2026-10-18

Conduct, Safeguarding & Financial Promotions

Gibraltar's conduct framework for GFSC-licensed firms includes retail-client-outcome obligations under the Financial Services (Core Principles and Consumer Duty) Regulations 2024, effective 9 May 2024. These obligations currently apply within the scope those Regulations established at the time of their effect.

The Gibraltar Financial Services Commission has separately signalled a possible expansion of Consumer Duty scope to cover all retail customers, not solely UK customers, during 2026 to 2027. This is a forward-looking signal rather than an in-force change: no enacted instrument implementing the expansion was identified this cycle, and the timeline carries a multi-year uncertainty band. Firms currently limiting Consumer Duty-equivalent retail protections to UK customers, on the basis that the 2024 Regulations' effective scope was UK-customer-focused, should treat the signalled all-retail-customer expansion as a live planning item rather than a settled requirement.

Periodic update · new data 2026-10-18

Conduct, Safeguarding & Financial Promotions

Gibraltar's e-money safeguarding regime was materially strengthened by the Financial Services (Electronic Money) (Amendment) Regulations 2026 (LN.2026/225), in force since 16 July 2026. The instrument introduces two specific new obligations. First, regulation 32A requires electronic money institutions to submit safeguarding returns to the GFSC, giving the regulator a periodic reporting mechanism over how relevant funds are protected. Second, regulation 29A restricts an EMI's ability to make a dividend or comparable capital distribution absent GFSC non-objection, giving the regulator a capital-preservation lever over licensed EMIs.

GFSC-supervised EMIs continue to have a choice of safeguarding mechanism: option 1, segregation of relevant customer funds, or option 2, insurance or a comparable guarantee arrangement. What has changed is the reporting layer sitting above that choice, via the new safeguarding returns, and the capital-distribution constraint sitting alongside it. The regime's broad shape, intent and mechanism choice, mirrors the UK's CASS 15 e-money safeguarding framework, but Gibraltar's version is a distinct legal instrument under Gibraltar law; an EMI with UK CASS 15 experience should not assume UK regulatory guidance, FCA enforcement precedent, or FSCS-adjacent protections transfer automatically to the Gibraltar regime. Non-bank safeguarded funds in Gibraltar, as in the UK, are not covered by a deposit-guarantee-style compensation scheme in the way bank deposits are.

The practical effect for an EMI licensed in Gibraltar is a materially higher compliance burden around safeguarding documentation and capital-distribution governance than existed before 16 July 2026, with the GFSC now positioned to monitor both fund protection and capital adequacy more closely through the new returns regime.

Outlook

How the GFSC exercises its new non-objection power over EMI dividends, and what it expects to see in the new safeguarding returns, will become clearer as the first reporting cycles under LN.2026/225 are completed. EMIs operating in Gibraltar should expect closer ongoing supervisory engagement on safeguarding adequacy than under the prior regime.

3 earlier distinct update(s)
Periodic update · new data 2026-10-06

Conduct, Safeguarding & Financial Promotions

Gibraltars safeguarding conduct regime for payment institutions and electronic money institutions was substantially overhauled with the commencement, on 16 July 2026, of new Schedules 4 and 5 to the Financial Services (Payment Services) Regulations 2020 and the Financial Services (Electronic Money) Regulations 2020, introduced by Legal Notices 2026/224 and 2026/225 respectively and published in the Gibraltar Gazette, No. 5328, of that date. The changes move Gibraltars safeguarding regime from a comparatively general set of obligations toward a detailed, operationally specific framework covering diversification of safeguarding arrangements, reconciliation methodology, resolution-pack content, and periodic audit.

Under the amended Electronic Money Regulations, an institution must periodically review whether it is appropriate to diversify, or further diversify, the third parties with which it deposits, holds, invests, insures or guarantees relevant funds, and must adjust the third parties used and the amounts deposited where it concludes diversification is appropriate, placing an active, recurring diversification-assessment duty on institutions rather than a one-off structuring decision. Institutions using insurance or a guarantee, alone or combined with segregation, that provides unlimited cover are relieved of the internal safeguarding reconciliation requirement but must instead perform a daily calculation of their safeguarding requirement, a substitution of one control (daily calculation) for another (reconciliation) rather than a net reduction in obligation. A new statutory no-recourse, no-combination, no-set-off protection applies to the safeguarding account itself: the account provider has no interest in, recourse or right against money or assets in the safeguarding account for sums owed to it or a third party on another account, and no right to combine the safeguarding account with another account or exercise set-off or counterclaim against the safeguarded money or assets, reinforcing the ring-fenced character of safeguarded funds at the custodial level.

A new annual audit obligation, set out in Schedule 5, applies to institutions that have been required to safeguard more than GBP 100,000 of relevant funds at any time for a period of at least 53 weeks; the auditors report must be delivered to the GFSC within four months of the end of the period covered, with a copy provided to the institution at the same time. Where an institution relies on unlimited insurance or guarantee cover and so performs the daily calculation in lieu of reconciliation, paragraph 11(2) specifies that this daily calculation substitutes for the internal reconciliation obligation rather than operating alongside it. A defined resolution-pack obligation requires that certain documents and records, including those identifying funds and assets institutions and insurance or guarantee providers, acknowledgement letters, policies or guarantees, documents identifying relevant individuals, and the most recent internal and external audit reports, be retrievable immediately under paragraph 23(2); separately, an administrator, receiver, trustee, liquidator or analogous officer appointed over the institution must be able to retrieve each required document within 48 hours of appointment, giving the resolution pack direct operational relevance in an insolvency scenario rather than leaving it a purely documentary exercise. On insolvency itself, regulation 34(1)(a) gives electronic money holders claims priority over all other creditors from the asset pool, and regulation 34(1)(b) bars set-off or security rights over the asset pool until those claims are paid in full, save for set-off relating to fees and expenses of operating an account.

The GFSC supported these statutory changes with a new Guidance Note on Safeguarding for payment institutions and electronic money institutions, announced 20 July 2026, setting out its expectations on safeguarding of customer funds, safeguarding resolution packs, and safeguarding audit requirements, issued in close proximity to the Schedule 4/5 commencement date. Monthly regulatory reporting timelines for electronic money institutions were also tightened, with institutions now required to submit required returns within 15 business days after the end of each calendar month under new regulation 32A(1), excluding the month in which the institution first became an electronic money institution.

Outlook

With the Schedule 4/5 changes now in force, the near-term focus shifts to how institutions operationalise the new diversification-review, reconciliation-or-daily-calculation, and resolution-pack requirements, and whether the GFSCs supporting Guidance Note, once its full content is available, surfaces supervisory expectations beyond the bare statutory text. The GBP 100,000/53-week audit threshold is likely to be the first point at which a visible population of institutions newly falls within scope of the annual audit obligation, making it a natural marker for assessing how broadly the new Schedule 5 regime bites in practice.

Periodic update · new data 2026-10-04

Conduct, Safeguarding & Financial Promotions

Gibraltar's safeguarding and governance requirements for payment and e-money firms were tightened by LN 2026/225, which amended the 2020 E-Money Regulations' safeguarding and governance provisions. This amendment has been in force since 16 July 2026. The amendment sits within the existing E-Money Regulations framework rather than introducing a wholly new regime, strengthening the governance and asset-safeguarding obligations applicable to licensed e-money issuers and payment institutions operating from Gibraltar.

Separately, the FCA's CASS 15 Supplementary Safeguarding Regime took effect in the UK from 7 May 2026 for UK-regulated payment and e-money institutions, including a Gibraltar firm that operates via a UK branch. A Gibraltar-licensed firm accessing the UK market solely through the temporary passporting bridge, rather than through a UK branch, is not itself brought into scope of CASS 15 by that access route alone; the distinction between branch-based and passporting-based UK presence is material to which safeguarding regime applies.

Outlook

Firms should monitor whether further safeguarding amendments follow the July 2026 tightening, and should track their own UK presence structure (branch versus passporting bridge) against the CASS 15 scope boundary as the 31 December 2026 bridge expiry approaches.

Periodic update · new data 2026-09-21

Conduct, Safeguarding & Financial Promotions

A significant UK conduct-side change with direct relevance to Gibraltar market access is set to take effect this cycle. The FCA's Supplementary Safeguarding Regime under CASS 15 takes effect 7 May 2026 for UK-regulated payment institutions and e-money institutions, and specialist commentary describes it as the most significant PI/EMI safeguarding overhaul in a decade. This is assessed Probable, sourced via specialist secondary commentary.

The safeguarding mechanism itself operates through segregation requirements for customer funds held by PIs and EMIs. Because continued Gibraltar market access is understood to be conditioned on maintaining equivalent standards to the UK regime, this UK-domestic conduct change carries a direct, if indirect, compliance implication for Gibraltar-domiciled PI/EMI firms: they are expected to meet an equivalent safeguarding bar even though CASS 15 is not itself a Gibraltar instrument.

Outlook

The key point to watch is how the equivalent-standards expectation is formally operationalised for Gibraltar firms — whether through the current transitional passporting arrangement's own conditions, through future GAR conditions once that regime becomes operational, or through some other mechanism. No Gibraltar-specific instrument implementing an equivalent safeguarding standard was located this cycle.

1 further periodic run re-emitted the standing brief unchanged and is not shown.

Sources and findings (4)
  1. T1Gibraltar Laws (gibraltarlaws.gov.gi) — Financial Services (Electronic Money) Regulations 2020 — The Financial Services (Electronic Money) Regulations 2020 require EMIs to keep relevant funds segregated (safeguarding option 1) or covered by insurance/guarantee (safeguarding option 2), set out insolvency-event provisions, and give the GFSC power to exclude assets and sanctioning/administrative-penalty powers.
  2. T1GFSC (fsc.gi) Consumer Duty page / Triay Lawyers — Gibraltar's Consumer Duty is set out in the Financial Services (Core Principles and Consumer Duty) Regulations 2024, effective 9 May 2024, replicating the UK FCA Consumer Duty; it currently applies to firms serving UK retail customers (excluding DLT providers) and is to be extended to all retail customers by ministerial appointment (anticipated 2026-2027).
  3. T3Triay Lawyers / Europa Group — The Financial Services (Restricted Promotions) Regulations 2025 (in force 1 May 2025) tighten promotion of speculative illiquid securities, restricting promotions to general retail clients and removing the 'excluded communications' exemption; promotions limited to high-net-worth / sophisticated investors providing signed declarations.
  4. T1GFSC (fsc.gi) news / Ramparts — GFSC published Guidance Notes on Consumer Duty and the Fair Treatment of Vulnerable Customers (following consultation closing 14 Aug 2024) and conducted a thematic review of Consumer Duty Board Reports released March 2025.

#

Gibraltar was the first jurisdiction to regulate DLT, via the Financial Services (Distributed Ledger Technology) Regulations 2020 (subsidiary to the Financial Services Act 2019), built on nine/ten regulatory principles. DLT providers storing or transmitting value for others require GFSC authorisation (FSA 2019 s.139). Gibraltar is outside the EU so MiCA does not formally apply and a Gibraltar authorisation does not confer MiCA passporting, though the GFSC is progressively aligning the DLT framework with MiCA. Stablecoin/reserve and clearing-and-settlement reforms are in train (Digital Clearing & Settlement Framework, May 2025; Virtual Asset Arrangements amendments, Oct 2025).

Horizon · 2026-H2 (±half_year)Gibraltar DLT-framework draft legislation (stablecoin reserve/custody, DEX rules)proposed · T3
Standing sub-brief · written on or before 4 July 2026309 words · last cycle 2026-10-04

Stablecoins & Digital Money

Gibraltar's stablecoin and digital-money position rests on first-mover regulatory infrastructure. Gibraltar was the first jurisdiction to provide a comprehensive DLT/crypto regulatory framework via the DLT Regulations, subsidiary to the Financial Services Act 2019; section 139 of that Act makes DLT-provider activities — storing or transmitting value belonging to others in or from Gibraltar — regulated activities requiring GFSC authorisation. The regime is built on a set of regulatory principles and the GFSC regulates exchanges, custodians and wallet providers. This first-mover status is the jurisdiction's principal competitive differentiator in attracting crypto and stablecoin operators, all of which sit on the non-bank side of the regulated population.

Periodic update · new data 2026-10-04

Stablecoins & Digital Money

Gibraltar's regulatory treatment of stablecoins and digital money has advanced on specific, narrow fronts rather than through a comprehensive framework. Regulation 22 of the Prediction Market Regulations 2026 permits stablecoin settlement within licensed prediction markets. Separately, the PCC Amendment Act 2026 provides a clear statutory pathway for the issuance of tokenised fund shares within a regulated environment, extending Gibraltar's protected-cell-company fund structures into tokenised form. A DLT/VAA dividend non-objection mechanism was also added on 26 March 2026, giving licensed digital-asset providers a formal route to seek regulatory non-objection before dividend distributions.

Taken together, these developments show Gibraltar's digital-money framework advancing through targeted, instrument-specific accommodations — a settlement carve-out for one licensed activity, a tokenisation pathway for fund shares, a dividend mechanism for DLT/VAA providers — rather than a single consolidated stablecoin or digital-money statute. Each instrument addresses a distinct use case within Gibraltar's broader digital-asset regulatory architecture.

Outlook

Whether these targeted accommodations are consolidated into a broader stablecoin or digital-money framework, or whether further instrument-specific carve-outs continue to be the pattern, is the item to watch going forward.

1 earlier distinct update(s)
Periodic update · new data 2026-09-14

Stablecoins & Digital Money

The Prediction Market Regulations 2026 (LN.2026/176), in force from 13 July 2026, expressly permit funding and settlement of prediction-market contracts via digital-asset payments, including stablecoins. This is a usage-side authorisation: it permits stablecoins to be used as a settlement rail for a specific, newly created regulated-activity category, rather than establishing a freestanding stablecoin-issuance, reserve, or redemption regime. No dedicated Gibraltar stablecoin-issuer licensing or reserve-backing statute was evidenced this cycle; the regulation's contribution to the stablecoin landscape is confined to authorising a particular use case for stablecoin settlement within the prediction-market activity class.

This development sits on top of Gibraltar's existing DLT regulatory infrastructure administered by the Gibraltar Financial Services Commission, and represents the jurisdiction extending an already-established digital-asset regulatory base into a new product vertical (prediction markets) rather than building new stablecoin-specific rules from first principles.

Outlook

Whether Gibraltar will follow this usage-side authorisation with a dedicated stablecoin-issuance framework, or whether stablecoin settlement will continue to be authorised only on a per-use-case basis as with the prediction-market category, is the item to track going forward.

Sources and findings (4)
  1. T3Global Legal Insights — Blockchain & Cryptocurrency Laws 2026 (Gibraltar) — Gibraltar became the first jurisdiction to provide a comprehensive regulatory framework for blockchain/crypto with the Financial Services (Distributed Ledger Technology) Regulations, subsidiary legislation to the Financial Services Act 2019; the GFSC regulates DLT firms including exchanges and wallet providers.
  2. T3Ramparts (ramparts.gi) — Gibraltar crypto-asset regulatory regime — FSA 2019 s.139 makes DLT-provider activities (using DLT to store or transmit value belonging to others, in or from Gibraltar) regulated activities requiring GFSC authorisation.
  3. T3Key2Law / Regulated United Europe (rue.ee) — Gibraltar is not in the EU so MiCA does not formally apply within its territory; a Gibraltar authorisation does not create MiCA passporting rights into the EEA, but the GFSC is progressively aligning the DLT framework with MiCA standards and firms serving EU users must comply with MiCA.
  4. T3Key2Law / company.gi DLT licence guide — Pending stablecoin reforms: announced DLT-regime updates include stronger stablecoin regulation (reserve requirements and custody standards), rules for DEX/smart contracts with a central operator, and tighter cybersecurity/third-party risk requirements; draft legislation expected per Minister Feetham (Consensus HK, Feb 2026).

#

Gibraltar has implemented a UK-equivalent Operational Resilience regime: the GFSC published Operational Resilience, Outsourcing/Third-Party Risk Management and Liquidity Risk Management Guidance Notes in 2024 following industry consultation. Firms identify important business services and set impact tolerances (deadline 13 July 2024), with full compliance expected after 13 July 2026. DORA applies indirectly to firms that are part of EU groups. Gibraltar may set requirements differing from both FCA and PRA given its smaller market.

Horizon · 2026-07 (±quarter)GFSC Operational Resilience full-compliance milestonein_force_pending · T1
Standing sub-brief · written on or before 4 July 2026193 words · last cycle 2026-06-23

Operational Resilience & Critical Infrastructure

Gibraltar's operational-resilience regime is closely aligned with UK approaches and carries the most imminent compliance deadline in the current spine. The GFSC published Guidance Notes on Operational Resilience, Outsourcing/Third-Party Risk Management and Liquidity Risk Management, with consultation concluding 12 January 2024. The implementation pathway required firms to set impact tolerances by 13 July 2024 and to hold a prioritised plan by 13 July 2026; after 13 July 2026, firms must remain within impact tolerances in severe-but-plausible disruption. This applies to both bank and non-bank GFSC-regulated payments firms. DORA applies indirectly to EU-group firms, layering an additional resilience expectation onto Gibraltar entities within EU groups.

no periodic updates on record for this sub-brief

Sources and findings (4)
  1. T1GFSC (fsc.gi) news — Guidance Notes publication — The GFSC published Guidance Notes on Operational Resilience, Outsourcing/Third-Party Risk Management and Liquidity Risk Management following an industry consultation that concluded 12 January 2024; the outsourcing note complements the Operational Resilience Regulations and Guidance Note, aligned with UK approaches.
  2. T3PwC Gibraltar — Operational Resilience — Firms must have identified important business services and set impact tolerances by 13 July 2024, hold a prioritised plan by 13 July 2026, and after 13 July 2026 have comprehensive strategies to remain within impact tolerances in severe-but-plausible disruption.
  3. T3Isolas (gibraltarlawyers.com) — GFSC Annual Report 2023/24 — The GFSC implemented a UK-equivalent Operational Resilience regime and UK-equivalent Consumer Duty regime as part of legislative amendments enhancing regulatory alignment with the UK (GFSC Annual Report 2023/24).
  4. T3Sicsic Advisory / Grant Thornton Gibraltar — The EU's DORA applies indirectly to Gibraltar-presence firms that are part of EU groups or operate a Brexit solution via an EU subsidiary; the GFSC is likely to have different operational-resilience requirements to both the FCA and PRA given the smaller market.

#

Gibraltar PSPs/acquirers operate under the international four-party card-scheme rules (Visa/Mastercard), PCI DSS (PCI SSC), and — given Gibraltar's UK-aligned post-Brexit posture and SEPA reachability — interchange/scheme-fee economics broadly tracking the UK/EU model. Gibraltar has no domestic card scheme; compliance flows through scheme rulebooks and PCI DSS rather than a bespoke Gibraltar interchange regulation. Searched: GFSC card-scheme/interchange instruments — no Gibraltar-specific interchange cap instrument identified; scheme/PCI obligations apply via the international schemes.

Standing sub-brief · written on or before 4 July 2026159 words · last cycle 2026-06-23

Scheme & Network Compliance

Card acquiring in Gibraltar runs on standard four-party scheme economics, with Visa and Mastercard interchange paid acquirer-to-issuer, PCI DSS compliance, and scheme-mandated technical standards. The compliance perimeter for both bank and non-bank acquirers flows through international scheme rulebooks and the PCI SSC rather than a bespoke domestic instrument. Critically, and on confirmed absent-field provenance, no Gibraltar-specific domestic interchange-cap instrument or domestic card scheme was identified — this was searched and found absent, not merely unsearched. Gibraltar acquirers and PSPs therefore inherit scheme-fee economics directly, and the absence of a domestic cap means there is no local interchange relief available.

no periodic updates on record for this sub-brief

Sources and findings (3)
  1. T1ECB Occasional Paper No 131 (interchange) / industry (Stored, Justt) — Card acquiring in Gibraltar runs on standard four-party scheme economics: interchange is paid by the acquirer to the issuer per transaction, set by Visa/Mastercard, with acquirers passing scheme fees and interchange to merchants; PCI DSS compliance and scheme-mandated technical standards apply to acquirers/PSPs.
  2. T3Quadrapay (Gibraltar payment gateway) / UCSB PCI glossary — Gibraltar-based merchants/PSPs are served by acquirers requiring PCI DSS compliance and adherence to card-scheme rules; acquirers must be defined as such by a payment brand and are subject to payment-brand rules and merchant-compliance procedures.
  3. T3WorldFirst (SEPA countries list) — Gibraltar is a SEPA-reachable territory, so euro instant/credit-transfer scheme rails (SCT/SCT Inst) and the ISO 20022 message standard are accessible to Gibraltar-domiciled euro accounts.

#

Gibraltar's principal payment corridors are euro (via SEPA, in which Gibraltar is reachable) and sterling (UK-aligned, via UK market-access arrangements). Cross-border euro settlement runs through SEPA mechanisms (TARGET2/EURO1) typically accessed indirectly via correspondent/sponsor banks since only regulated credit/PI/EMI entities can participate. Gibraltar's crypto/stablecoin sector adds digital-asset remittance corridors (stablecoin payments providers established locally).

Standing sub-brief · written on or before 4 July 2026139 words · last cycle 2026-06-23

Payment Corridor Dynamics

Gibraltar is a SEPA-reachable territory, so euro SCT and SCT Inst scheme rails and the ISO 20022 message standard are accessible to Gibraltar-domiciled euro accounts. SEPA settlement runs via TARGET2 (ECB) and EURO1 (EBA CLEARING), with only regulated EMIs, PIs and credit institutions able to participate directly. In practice, smaller Gibraltar PSPs typically access SEPA indirectly via a sponsor or correspondent bank, creating a dependency that shapes corridor economics. Euro and sterling are Gibraltar's principal corridors, with the sterling corridor running through UK-aligned market-access arrangements.

no periodic updates on record for this sub-brief

Sources and findings (3)
  1. T3WorldFirst (SEPA bank transfers) — Gibraltar is part of the SEPA zone (listed among overseas territories included in SEPA), enabling euro credit transfers and direct debits to/from Gibraltar-domiciled euro accounts under the SEPA scheme.
  2. T3Payment Labs / UniCredit GTB — SEPA euro settlement runs via TARGET2 (ECB) and EURO1 (EBA CLEARING); only regulated EMIs, PIs or credit institutions can participate in SEPA, so smaller Gibraltar PSPs typically access via indirect participation or a sponsor/correspondent bank.
  3. T3company.gi Gibraltar Crypto Directory — Gibraltar hosts stablecoin-payments and remittance providers among its DLT-licensed firms (e.g. a Gibraltar-founded stablecoin payment solutions provider also holding a MiCA licence in Europe), adding digital-asset cross-border corridors.

#

Gibraltar's payments/fintech market is concentrated in EMIs, PSPs and DLT firms, with the DLT regime driving global attention and a maturing pool of licensed firms. The sector spans e-money institutions, virtual-asset exchanges, custodians and stablecoin payments providers. Industry bodies (Gibraltar Electronic Money Association, Gibraltar Bankers Association, Gibraltar Association for New Technologies, GFIA) provide formal policy channels. The market skews toward crypto/DLT and e-money rather than a large domestic bank-acquiring base.

Standing sub-brief · written on or before 4 July 2026178 words · last cycle 2026-06-23

Industry Structure & Commercial

Gibraltar's payments and fintech market is concentrated in EMIs, PSPs and DLT firms, skewing toward crypto/DLT and e-money rather than a large domestic bank-acquiring base. Market-mapping data lists roughly 87 fintech startups — around 32 funded and around 13 at Series A or later — including Xapo Bank, INX and eToroX, indicating a private-company-heavy structure. This count rests on T4 directory data and is Possible-grade; private-company signal is systematically under-indexed by methodology, so the figures should be treated as indicative rather than precise. Industry bodies such as GEMA, GBA, GANT and GFIA provide formal policy channels. The structural concentration in crypto and e-money rather than bank acquiring is what shapes the jurisdiction's risk and growth profile.

no periodic updates on record for this sub-brief

Sources and findings (3)
  1. T3Mondaq — Gibraltar FinTech Comparative Guide — The DLT Regulations have increased global attention with a growing pool of licensed firms; established e-money and payment-services firms have moved into fintech, and offerings span virtual-asset custody, exchanges, EMIs, PSPs, MiFID firms and crypto-funds.
  2. T3Mondaq — Gibraltar FinTech Comparative Guide — Industry associations including the Gibraltar Electronic Money Association, Gibraltar Bankers Association, Gibraltar Association of Compliance Officers and Gibraltar Association for New Technologies act as formal channels between policymakers and the private sector.
  3. T4Tracxn — Gibraltar fintech startups — Market-mapping data indicates a sizeable fintech population in Gibraltar (a directory lists roughly 87 fintech startups, ~32 funded with ~13 at Series A+), including names such as Xapo Bank, INX and eToroX, indicating a private-company-heavy structure.

GFSC enforcement is risk-based, with effective and proportionate use of enforcement powers (including sanctioning/administrative penalties under the EMR 2020) as a stated regulatory objective. No landmark Gibraltar payments-sector litigation or major published GFSC enforcement action against a payments/EMI firm was surfaced for the baseline window; UK safeguarding-insolvency case law (recent UK court judgments on PI/EMI insolvency) is materially relevant given Gibraltar's UK-aligned regime. Searched: GFSC enforcement register / Gibraltar payments penalties 2025-2026 — no Gibraltar-specific payments enforcement action confirmed; note: large 'GFSC' fines in search results were the Guernsey FSC (different regulator), not Gibraltar.

Standing sub-brief · as of 10 August 2026273 words · last cycle 2026-08-08

Legal & Litigation

The confirmed legal development for Gibraltar this cycle is textual and constitutional rather than contentious: the UK-EU Agreement in respect of Gibraltar, signed 14 July 2026 and provisionally applied from 15 July 2026, is understood to operate expressly 'without prejudice' to Gibraltar's underlying constitutional status, and does not alter or restore financial-services passporting arrangements. This is assessed rather than confirmed at high confidence specifically on the 'without prejudice' framing point, though the non-restoration of passporting itself is a Tier-1-sourced, high-confidence finding from the House of Commons Library. No litigation, dispute, or contentious legal proceeding connected to Gibraltar's payments or financial-services market access has been identified this cycle; the legal development in view is the Treaty's own drafting posture, not a judicial or adversarial process.

no periodic updates on record for this sub-brief

Sources and findings (2)
  1. T1GFSC (fsc.gi) Enforcement Strategy / EMR 2020 — The GFSC describes itself as a risk-based regulator for which effective and proportionate use of enforcement powers is instrumental to its regulatory objectives; the EMR 2020 provide GFSC sanctioning powers and maximum administrative penalty amounts.
  2. T3Gibson Dunn (FCA safeguarding proposals) — Recent UK court judgments have created legal uncertainty over the framework applying when a payment/e-money firm safeguarding funds enters insolvency — directly relevant to Gibraltar's UK-aligned safeguarding regime and a key legal-infrastructure watch item.

#

Merchant acquiring for Gibraltar businesses is served largely by international/offshore acquirers and PSPs operating under card-scheme rules and PCI DSS, with anti-fraud rules engines, chargeback/dispute handling and high-risk-merchant treatment managed at the acquirer/scheme level rather than via a bespoke Gibraltar acquiring statute. Gibraltar's high-risk verticals (notably iGaming) shape acquirer risk appetite. Searched: Gibraltar acquiring regime / GFSC merchant-acquiring rules — no Gibraltar-specific acquiring instrument distinct from PSP authorisation + scheme/PCI rules identified.

Standing sub-brief · written on or before 4 July 2026160 words · last cycle 2026-06-23

Merchant Acquiring & Risk

Merchant acquiring for Gibraltar businesses is served largely by international and offshore acquirers and PSPs operating under card-scheme rules and PCI DSS. Anti-fraud rules engines, chargeback and dispute handling, and high-risk-merchant treatment — notably for iGaming — are managed at acquirer and scheme level. No Gibraltar-specific acquiring statute distinct from PSP authorisation plus scheme and PCI rules was identified. This detail rests on T4 sources and is Possible-grade; merchant-acquiring operations are a systematically under-indexed area, and the Gibraltar acquiring picture is thin and aggregator-sourced, to be treated as under-confident pending higher-tier corroboration. The iGaming high-risk vertical drives acquirer reserve and payout terms, which is material to merchant economics in the jurisdiction.

no periodic updates on record for this sub-brief

Sources and findings (2)
  1. T4Quadrapay (Gibraltar payment gateway) — Gibraltar-based businesses obtain card acceptance via acquirers/PSPs offering merchant accounts and payment gateways with anti-fraud rules engines and customer-monitoring tools to identify and eliminate fraudulent transactions and protect the merchant account.
  2. T4NowG.net (offshore merchant processing) — Offshore acquiring (relevant to Gibraltar's high-risk verticals such as iGaming) operates under scheme rules, interchange and issuer-approval logic with KYC/AML and PCI DSS compliance; settlement involves payout cadence, currency conversion and reserves.

#

Gibraltar positions itself as an innovation-forward fintech hub. Headline 2025 developments: the Digital Clearing and Settlement Framework (May 2025), developed with the GFSC and Bullish, positioned as the world's first dedicated regime for crypto clearing and settlement of virtual-asset derivatives via regulated CCPs; Virtual Asset Arrangements amendments (October 2025); and the Restricted Promotions Regulations 2025. Draft DLT-framework legislation is expected per Minister Feetham (Consensus HK, Feb 2026). The market also shows neobank/digital-banking and RegTech build-out.

Standing sub-brief · as of 10 August 2026315 words · last cycle 2026-09-14

Product Innovation & Market Development

Two confirmed product-innovation developments define Gibraltar's payments-adjacent innovation environment this cycle. The Protected Cell Companies (Amendment) Bill 2026 would require prior Gibraltar Financial Services Commission approval before a protected cell authorised as an experienced-investor fund can issue tokenised shares, with investor-eligibility, cybersecurity, custody, and risk-disclosure conditions attached to that approval. This is a non-bank-facing development that extends Gibraltar's distributed-ledger-technology regulatory infrastructure into fund-share issuance specifically — a distinct use case from the jurisdiction's existing DLT exchange and custody licensing gateway, and one that sits within the funds and asset-management space rather than the payments-processing space directly, though it is payments-adjacent in the sense that any tokenised-share settlement infrastructure will likely require payment-rail integration.

Periodic update · new data 2026-09-14

Product Innovation & Market Development

The Prediction Market Regulations 2026 (LN.2026/176), which came into force on 13 July 2026, create a new regulated-activity category for prediction markets in Gibraltar and layer a novel stablecoin-settlement payments use case on top of Gibraltar's existing DLT and gambling regulatory infrastructure. This is a product-innovation development in the sense that it opens a distinct commercial product category -- prediction-market contracts settled via digital assets -- that did not previously have dedicated regulatory footing in Gibraltar, rather than being either a purely structural market-analysis theme or a discrete single commercial event of the kind tracked under Commercial Intelligence.

The regulatory architecture behind this innovation combines gambling-law authorisation (the Prediction Market Regulations were made under the Gambling Act 2025) with payments-relevant settlement permissions (the stablecoin/digital-asset funding and settlement authorisation), making this a genuinely cross-cutting development for payments-sector readers tracking where regulated product innovation is occurring at the intersection of gambling, DLT and payments regulation.

Outlook

The extent to which this new product category attracts commercial launches -- and whether any specific operator announcements follow, which would then be tracked as discrete Commercial Intelligence events -- is the development to watch in the coming cycle.

Sources and findings (4)
  1. T3Gibraltar International Magazine (gibraltarfinance.com) / company.gi — The Digital Clearing and Settlement Framework (May 2025), developed with the GFSC and exchange Bullish, is positioned as the world's first dedicated regulatory regime for crypto clearing and settlement, covering risk management, asset safeguarding and settlement finality for virtual-asset derivatives.
  2. T3company.gi DLT licence blog / Triay Lawyers — Recent DLT-related developments include Virtual Asset Arrangements amendments (October 2025) and Restricted Promotions Regulations (May 2025); draft DLT-framework legislation expected 'within the next few months' per Minister Nigel Feetham at Consensus Hong Kong (Feb 2026), likely bringing VASP registrations within the DLT Regs.
  3. T3company.gi / Gibraltar AML Country Update 2026 — Gibraltar has committed to implementing the OECD Crypto-Asset Reporting Framework (CARF), and the Financial Services (Regulated Activities) (Amendment) Regulations 2025 make the provision of virtual asset arrangements a regulated activity under FSA 2019.
  4. T4fintech.gi — Gibraltar is attracting neobank/digital-banking and RegTech activity, with the GFSC continuing to refine its framework to keep pace with technology and the territory positioned as a hub for compliance-technology innovation.

#

Consumer protection rests on the GFSC Consumer Duty (Core Principles and Consumer Duty Regulations 2024, in force 9 May 2024, UK-aligned, outcomes-based). Crucially, on APP fraud Gibraltar has NO equivalent of the UK's mandatory reimbursement regime: under the Financial Services (Payment Services) Regulations 2020, PSPs must only reimburse 'unauthorised' payments, so APP-fraud victims (who authorise the payment) are not guaranteed reimbursement — a material divergence from the UK PSR mandatory reimbursement regime introduced October 2024. The GFSC issues consumer fraud-awareness alerts.

Standing sub-brief · written on or before 4 July 2026174 words · last cycle 2026-10-06

Consumer Protection & APP Fraud

Gibraltar's consumer-protection position carries a material divergence from the UK. Under the Financial Services (Payment Services) Regulations 2020, Gibraltar PSPs are only required to reimburse consumers for 'unauthorised' payments. Because authorised push payment (APP) fraud involves the victim authorising the payment, such transactions fall outside the regulations and victims are not guaranteed reimbursement — a material divergence from the UK PSR mandatory reimbursement regime introduced in October 2024. No equivalent mandatory reimbursement regime presently exists in Gibraltar, and the GFSC issues consumer APP-fraud awareness alerts. This divergence materially lowers PSP fraud-liability exposure in Gibraltar relative to the UK, applying to both bank and non-bank firms, and represents a competitive and consumer-protection differential operators should weigh.

Periodic update · new data 2026-10-06

Consumer Protection & APP Fraud

Gibraltars consumer-protection framework for payments complaints operates on statutory timelines distinct from, but connected to, the UK regime. Under the Gibraltar Payment Services Regulations, regulation 75(3) to (5), and the equivalent Electronic Money Regulations provision at regulation 26(2), complaint-handling timelines of 15 and 35 business days apply, giving firms a defined acknowledgement-and-resolution structure for payment-service and e-money complaints respectively. These Gibraltar-specific timelines sit alongside a UK regulatory extension: the FCA Handbook provision DISP 1.1.3R(5) extends the FCAs amended DISP 1.6.1R acknowledgement rule to Gibraltar-based firms that are subject to DISP 1 under GEN 2.3, with that extension taking effect from 1 June 2026. The practical effect is that a Gibraltar-based firm within the relevant scope must now meet an FCA-originated acknowledgement timeline requirement in addition to its own domestic Gibraltar complaint-handling timelines under the Payment Services and Electronic Money Regulations, rather than operating under a single unified standard.

A structural gap remains visible in Gibraltars dispute-resolution infrastructure: whether Gibraltar operates a functioning out-of-court dispute-resolution or ombudsman scheme under Part 14 of the Financial Services Act 2019, which commenced on 25 March 2021, is not confirmed by any appointed-ombudsman record or published contact details in the Act as consolidated to 13 August 2026. The FCA, for its part, states that Gibraltar currently has no such scheme. This is a notable absence given the parallel tightening of complaint-handling timelines under the Payment Services and Electronic Money Regulations and the extended FCA acknowledgement rule: a consumer with an unresolved Gibraltar payments complaint may have defined timelines for acknowledgement and initial handling but an unclear path to independent out-of-court resolution if those internal processes do not resolve the matter. This is worth surfacing explicitly as an enablement-relevant absence rather than passing over it: the lack of enforcement or infrastructure in this specific area is itself analytically significant for consumer-protection purposes, independent of whether any complaint volume has actually tested the gap.

Outlook

The open question for this module is whether Gibraltar moves to establish or formally confirm an operating ombudsman or dispute-resolution scheme under Financial Services Act 2019 Part 14, given that the statutory power has existed since March 2021 without apparent operational implementation as far as current records show. Separately, firms subject to both the Gibraltar-specific complaint-handling timelines and the FCAs extended DISP 1.6.1R acknowledgement rule from 1 June 2026 should expect continued attention to how the two timeline regimes interact in practice, particularly where a complaint touches both Gibraltar-domestic and UK-facing elements of a firms business.

Sources and findings (4)
  1. T3Isolas (gibraltarlawyers.com) — APP Fraud — Under the Financial Services (Payment Services) Regulations 2020, Gibraltar PSPs are only required to reimburse consumers for 'unauthorised' payments; because APP fraud involves the victim voluntarily making the payment, such transactions fall outside the PSR Regulations and victims are not guaranteed reimbursement.
  2. T3Isolas (gibraltarlawyers.com) — APP Fraud — Gibraltar's position contrasts with the UK Mandatory Reimbursement Regime introduced October 2024; no equivalent regime presently exists in Gibraltar, so PSPs are not legally obligated to reimburse APP-fraud victims.
  3. T1GFSC (fsc.gi) Consumer Duty / Triay Lawyers — The Consumer Duty is an outcomes-focused standard of care (Four Outcomes + Cross-Cutting Rules) under the Financial Services (Core Principles and Consumer Duty) Regulations 2024; the GFSC commenced thematic reviews of firms' compliance from Q3 2024.
  4. T1GFSC (fsc.gi) Consumer Alert — The GFSC issues consumer fraud-awareness alerts, including on rising APP fraud where fraudsters impersonate banks or the Royal Gibraltar Police to induce victims to make payments.

#

sentinel. Gibraltar's AML/CFT framework for the payments context is anchored in the Proceeds of Crime Act 2015 (POCA), the Terrorism Act 2018 and subsidiary regulations, supervised by the GFSC (for financial firms) with the GFIU as FIU and the OFT for certain DPMS sectors. The crypto Travel Rule is in force via POCA (since 22 March 2021). A 2025 National Risk Assessment was completed; MONEYVAL last evaluated Gibraltar in 2019 (terminating 5th-round follow-up after substantial AML/CFT enhancements, contributing to EU/grey-list removal), with the next MONEYVAL evaluation due 2027. Carried as Sentinel position; no original illicit-finance analysis performed.

Horizon · 2027 (±year)Gibraltar next MONEYVAL evaluation (revised FATF standards)in_force_pending · T1
Standing sub-brief · written on or before 4 July 2026211 words · last cycle 2026-06-23

AML/CFT & Financial Crime

This module is sourced from the Sentinel feed; WPM performs no original illicit-finance analysis, and original AML and sanctions analysis is routed to FIM. Per Sentinel (membercheck.com/aml-cft-legislation-in-gibraltar), Gibraltar's AML/CFT framework is anchored in the Proceeds of Crime Act 2015 (POCA), the Terrorism Act 2018 and subsidiary regulations, supervised by the GFSC for financial firms, with the GFIU as the financial intelligence unit and the OFT covering certain designated non-financial sectors; obliged entities owe customer-due-diligence and risk-based verification duties.

no periodic updates on record for this sub-brief

Sources and findings (10)
  1. T3MemberCheck (AML/CFT Gibraltar) / GFSC AML page — sentinel. POCA 2015 designates the GFSC among supervisory bodies; obliged entities owe CDD and risk-based verification duties; the GFIU gathers and disseminates financial-crime intelligence under POCA, the Terrorism Act 2018 and the Drug Trafficking Act 1995.
  2. T3Notabene (Travel Rule Gibraltar) — sentinel. The crypto Travel Rule has been in effect in Gibraltar since 22 March 2021 (entry into force of POCA provisions), with the GFSC monitoring compliance; an 18-month grace period ran to September 2022.
  3. T1HM Government of Gibraltar 2025 NRA / Financial Crime portal — sentinel. Gibraltar completed its most recent National Risk Assessment for AML/CFT/PF in 2025 and is preparing for the next MONEYVAL evaluation in 2027 under revised FATF standards; it was last evaluated by MONEYVAL in 2019.
  4. T3Gibraltar AML Country Update 2026 (Thomson Reuters) — sentinel. Following substantial AML/CFT enhancements, MONEYVAL terminated 5th-round follow-up reporting and the European Commission concluded Gibraltar meets standards, supporting its removal from the grey list; the Sanctions Act 2019 and Terrorism Act 2018 (incl. proliferation-financing offence) form part of the framework.
  5. T?FIM (sentinel.gi) per-JID baseline profile — Gibraltar — Gibraltar (British Overseas Territory) runs its own AML/CFT/CPF regime under the Proceeds of Crime Act 2015, Terrorism Act 2018 and Sanctions Act 2019, supervised by the GFSC and GFIU. It was removed from FATF increased monitoring in Feb 2024 and the EU high-risk list in June 2025, but retains structural exposure via its offshore-facing insurance, gaming and DLT/crypto sectors and a historically porous Spain frontier.
  6. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: sourcing-thinness
  7. T1FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-001) — Sanctions: OFSI wind-down
  8. T1FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-004) — Enforcement: OFSI (HM Treasury) — Maritime Mutual Association Limited (Maritime Mutual Gibraltar) and subsidiaries
  9. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: enforcement-absence
  10. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: capacity-deficit

#

Gibraltar PSPs/EMIs access euro settlement indirectly via SEPA (TARGET2/EURO1) and sterling rails through UK-aligned/sponsor arrangements, since direct SEPA participation is limited to regulated credit/PI/EMI entities. As a small jurisdiction historically perceived as higher-risk, Gibraltar firms (and their crypto/iGaming exposure) face de-risking pressure in establishing/maintaining correspondent-banking relationships — a structural access constraint consistent with the global CPMI/BIS de-risking pattern affecting smaller jurisdictions. Searched: Gibraltar central-bank account access — Gibraltar has no central bank; settlement access is intermediated via UK/EU correspondent and sponsor banks.

Standing sub-brief · written on or before 4 July 2026208 words · last cycle 2026-09-21

Correspondent Banking, Settlement & Access

The analytical spine of this module is the bank versus non-bank access asymmetry. Gibraltar PSPs and EMIs access euro settlement indirectly via SEPA (TARGET2/EURO1) and sterling rails through UK-aligned and sponsor arrangements, since direct SEPA participation is limited to regulated credit, PI and EMI entities. Crucially, Gibraltar has no central bank, so settlement access is intermediated via UK and EU correspondent and sponsor banks — making Gibraltar EMIs and PIs respondents dependent on correspondent and sponsor banks acting as gateway. As a small jurisdiction with crypto and iGaming exposure, Gibraltar firms face de-risking pressure consistent with the global CPMI/BIS pattern affecting smaller jurisdictions, driven by correspondent banks bearing AML/CTF liability for their respondents. The de-risking dynamic and the absence of a central bank make sponsor and correspondent-bank dependency a core operational risk for Gibraltar payments firms.

Periodic update · new data 2026-09-21

Correspondent Banking, Settlement & Access

Gibraltar's electronic-money regulatory terminology and passporting mechanics operate on a distinct basis from the UK's own framework. GFSC Administrative Notice 9 defines 'Authorised electronic money institution' by reference to Gibraltar's own Electronic Money Regulations, and describes EEA-agent passporting mechanics distinct from the UK's Electronic Money Regulations 2011. This is assessed Probable, but the finding rests on a single T1 source this cycle, meaning the module's source floor of at least two independent sources was not met — a sourcing gap that should temper confidence in the completeness, if not the accuracy, of this account.

The bank-versus-non-bank access asymmetry that defines this module's analytical spine is only partially visible here: Administrative Notice 9 speaks to non-bank PI/EMI definitional and passporting mechanics specifically, and no this-cycle finding addresses whether bank-affiliated correspondent access for Gibraltar institutions operates on comparable or different terms.

Outlook

Closing the source-floor gap for this module is the immediate priority: a second independent source corroborating or qualifying Administrative Notice 9's definitional and passporting terms would materially strengthen this finding. Whether Gibraltar's distinct EEA-agent passporting mechanics create any practical friction for non-bank EMIs relative to bank-affiliated correspondents remains an open question.

Sources and findings (3)
  1. T1BIS/CPMI — Correspondent banking report — Smaller respondent banks in jurisdictions perceived as too risky are especially affected by reductions in correspondent-banking relationships ('de-risking'), per CPMI/BIS — a structural pressure relevant to Gibraltar's small, crypto-and-gaming-weighted financial centre.
  2. T3Payment Labs / UniCredit GTB — SEPA euro settlement is via TARGET2 (ECB) and EURO1 (EBA CLEARING); since only regulated EMIs/PIs/credit institutions can participate, Gibraltar firms typically access settlement indirectly through a sponsor/correspondent bank acting as gateway.
  3. T2Congress.gov CRS — Correspondent Banking and De-Risking — De-risking is driven by correspondent banks bearing AML/CTF liability and regulatory/reputational risk for respondents, leading large banks to shed relationships with smaller banks in jurisdictions viewed as high-risk — directly constraining access for small-jurisdiction respondents.

#

Trailing-12-month (approx. Jun 2025-Jun 2026) commercial/product signals in Gibraltar's payments/DLT space center on public-private framework launches (GFSC + Bullish digital clearing & settlement) and product/regulatory milestones (Virtual Asset Arrangements Oct 2025, Restricted Promotions May 2025) rather than large disclosed M&A. Discrete commercial events captured below; several values undisclosed.

Movement — NEWBullish Group GFSC tokenised-securities approval; PCC Amendment Act 2026 tokenised EIF cell sharesBackfill of previously uncaptured late-surfacing commercial/product events for GI.
Standing sub-brief · as of 8 August 202699 words · last cycle 2026-10-18

Commercial Intelligence & Fintech

76 operators and providers held a Gibraltar gambling licence as of 29 July 2026, continuing to constitute the demand base for Gibraltar EMI and PSP high-risk payment processing. No new PSP/EMI M&A deal, investment round or product launch was identified for Gibraltar this cycle; this entry records the licensed-operator demand base rather than a discrete commercial event.

Periodic update · new data 2026-10-18

Commercial Intelligence & Fintech

Two discrete commercial developments mark Gibraltar's fintech landscape in this window. Bullish Group received Gibraltar Financial Services Commission approval to offer trading in tokenised securities, an approval reported around late June 2026; the transaction value was not publicly disclosed. This is a licensing-type commercial event extending an existing platform's regulatory footprint in Gibraltar into tokenised-securities trading specifically.

Separately, the Protected Cell Companies (Amendment) Act 2026 establishes a product-level legal innovation: Experienced Investor Funds structured as protected cell companies may now issue cell shares in the form of DLT share tokens, subject to GFSC prior approval. This is a structural product development at the level of fund and corporate law, distinct from any single company's commercial transaction, giving the Gibraltar fund-structuring market a bespoke tokenised-share-certificate mechanism.

Both developments sit within Gibraltar's broader DLT and virtual-asset commercial ecosystem, and both were identified as backfill items not previously captured in Gibraltar's payments baseline; private-company signals beyond the aggregator data reviewed were not independently resolved this cycle, so the fuller competitive picture around who else is active in Gibraltar's tokenisation space remains incomplete.

Outlook

Further GFSC approvals for tokenised-asset trading platforms, and growing use of the Protected Cell Companies tokenised cell-share structure by fund managers, are the most likely sources of the next material commercial development in this space. Independent verification of private-company funding and transaction data beyond aggregator sources would strengthen confidence in the overall competitive picture.

Sources and findings (3)
  1. T3Gibraltar International Magazine / company.gi — Gibraltar, the GFSC and exchange Bullish launched the Digital Clearing and Settlement Framework (May 2025) for crypto-derivative clearing/settlement via regulated CCPs — a flagship public-private product/regulatory event.
  2. T4company.gi Gibraltar Crypto Directory — Bullish — which operates from Gibraltar among other licences — is NYSE-listed (BLSH) with a reported ~$5.6B valuation and also owns CoinDesk, indicating significant capital-markets activity tied to a Gibraltar-connected crypto operator.
  3. T4company.gi Gibraltar Crypto Directory — A Gibraltar-founded stablecoin payment solutions provider (one of the earliest DLT-licensed firms, ~55 employees) has expanded by also obtaining a MiCA licence in Europe — a product/market-expansion signal.
No modules match.

Filters combine as OR inside a group and AND across groups.

Editorial metadata

Provenance only. Nothing below gates publication or affects the render.

Editorial metadata for Gibraltar
FieldValue
trust.lawyer_review.statusnever_reviewed
trust.lawyer_review.reviewerno reviewer on record
trust.content_sourceai_generated

Provenance and declared absence

Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; per-module RAG traffic light; derived_scores = {}.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band.

Orphan deltas: 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

Envelope: baseline resolved at jurisdiction_json.baseline; 14 module(s), 54 finding(s), 113 source(s) in the cumulative register.

Audit trail

Machine checkChallenged on 5 Oct 2026: not upheld (9 confirmed against the cited source; 1 contradicted by the cited source; 7 could not be checked). An automated, adversarial test run by a second model; no person has assessed the result.

Think something on this page is wrong? Report an error.