title: Gibraltar Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/gibraltar/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # Gibraltar GI schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 54 sourced findings · 113 sources in the cumulative register 14 Modules baseline.modules[] 54 Findings modules[].findings[] 28 Tier-1 sources run_metadata.t1_source_count Confidence mix (sums to 14 rendered modules; click to filter) ## Jurisdiction brief ###### Latest update · 18 October 2026 #### Lead Signal Gibraltar's Financial Services (Electronic Money) (Amendment) Regulations 2026 (LN.2026/225) came into force on 16 July 2026, materially strengthening the territory's e-money safeguarding regime. The instrument introduces new safeguarding returns under regulation 32A and dividend/capital-distribution restrictions under regulation 29A. GFSC-supervised electronic money institutions must now either segregate relevant funds under safeguarding option 1 or hold insurance or a comparable guarantee under option 2, and must submit periodic safeguarding returns to the GFSC. This mirrors the intent of, but is legally distinct from, the UK's CASS 15 safeguarding regime; a Gibraltar EMI subject to these rules should not assume CASS 15 case law or guidance transfers directly. #### Other Developments **A GFSC approval has extended tokenised-securities trading into Gibraltar's commercial landscape.** Bullish Group received Gibraltar Financial Services Commission approval to offer trading in tokenised securities, reported around late June 2026; the value of the transaction was not publicly disclosed. **A new corporate-structuring vehicle for tokenised fund interests has taken effect.** The Protected Cell Companies (Amendment) Act 2026 creates a regime allowing Experienced Investor Funds structured as protected cell companies to issue cell shares as DLT share tokens, with GFSC prior approval required. #### Cross-Monitor Connections The strengthened e-money safeguarding regime under LN.2026/225 has direct relevance to the consumer-protection question of fund protection on EMI insolvency, though the GFSC-supervised safeguarding mechanism operates independently of the UK's Financial Services Compensation Scheme; non-bank safeguarded funds in Gibraltar are not FSCS-covered. The tokenised-securities and tokenised cell-share developments connect to the crypto monitor's coverage of Gibraltar's DLT/VAA licensing perimeter and to financial-integrity's D8 Commercial Activity tracking of the same underlying commercial events; illicit-finance use of tokenisation infrastructure, if any, would be a financial-integrity finding rather than a conclusion drawn here. #### Outlook The safeguarding-returns and dividend-restriction regime under LN.2026/225 is newly in force and its practical supervisory application, including the GFSC's approach to reviewing safeguarding returns and granting or withholding dividend non-objection, will become clearer as EMIs begin submitting returns under the new framework. On the commercial side, continued GFSC approvals for tokenised-asset trading platforms and further uptake of the Protected Cell Companies tokenised cell-share structure are the items most likely to generate the next material development in Gibraltar's payments and digital-asset commercial landscape. _3 earlier updates not shown here._ ###### Standing brief · as of 24 August 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal Gibraltar's payments market-access position is transitional rather than settled. The Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025 extend UK-Gibraltar passporting arrangements to 31 December 2026, pending the permanent Gibraltar Authorisation Regime, which remains outstanding. This transitional extension is the clearest signal this cycle: Gibraltar-based banks, insurers, investment managers, payment institutions, and e-money institutions continue to access the UK market under a time-limited bridge rather than a settled permanent framework, and the timeline for that bridge to convert into something durable has not moved closer this cycle. This matters because Gibraltar's payments sector, one of the more developed e-money and payment-institution hubs among the UK's Overseas Territories, has built its commercial proposition substantially on guaranteed UK market access. A time-limited bridge, even one extended to the end of 2026, is a materially different risk profile for a payment institution's medium-term licensing and capital-planning decisions than a permanent mutual-access framework would be, and the absence of further progress toward the permanent Gibraltar Authorisation Regime this cycle leaves that planning uncertainty unresolved. #### Other Developments **The Gibraltar Authorisation Regime remains pending.** Trade commentary describes the GAR as a unique, permanent mutual-market-access framework for Gibraltar-based banks, insurers, investment managers, payment service providers, and e-money institutions, a status not available to any other Overseas Territory, Crown Dependency, or third country. It has not yet come into force as a permanent regime; the transitional passporting extension to 31 December 2026 remains the operative mechanism in the meantime. For payment institutions and e-money institutions specifically, the practical question is whether the GAR, once in force, will preserve current activity-level authorisations without requiring a fresh application, or whether firms will need to re-apply under the new regime; this cycle's sourcing does not resolve that question. **The UK-EU Gibraltar Treaty explicitly excludes financial services.** The 2026 Treaty, provisionally applied from 15 July 2026, excludes financial services and other services from its scope except where those services distort trade in goods. UK-Gibraltar financial-services access, including payments market access, is therefore handled entirely separately from the Treaty framework, confirming that the GAR and the transitional passporting arrangements, not the Treaty, are the operative instruments governing market access for payment institutions and e-money institutions. **EEA passporting remains permanently foreclosed.** Gibraltar Financial Services Commission-authorised e-money institutions and payment institutions have been unable to passport into EEA member states since 1 January 2021, following the post-Brexit loss of EEA passport rights. GFSC authorisation remains the sole route to operate as an e-money institution or payment institution in or from Gibraltar; there is no indication this cycle of any change to that structural fact. **Consumer Duty scope expansion signalled but not yet in force.** The Financial Services (Core Principles and Consumer Duty) Regulations 2024, effective 9 May 2024, added retail-client-outcome obligations for GFSC-licensed firms. The GFSC has separately signalled a possible expansion of Consumer Duty scope to cover all retail customers, not solely UK customers, during 2026 to 2027. This is a forward-looking signal rather than an in-force change, and its confidence should be read as assessed rather than confirmed. Firms currently limiting Consumer Duty-equivalent retail protections to UK customers should treat the signalled all-retail-customer expansion as a live planning item rather than a settled requirement; the timeline carries a multi-year uncertainty band. #### Cross-Monitor Connections Gibraltar's AML/CFT and financial-crime module, W11, is supplied by the financial-integrity consumer this cycle and is not re-analysed here; readers tracking Gibraltar's payments AML exposure should refer to that monitor's D7 and D1 findings directly. Similarly, Gibraltar's stablecoin and digital-money module, W2, is supplied by the crypto consumer's stablecoin_regime module; no first-party world-payments finding on stablecoins is made here. The transitional passporting extension and the GAR's continued absence are, however, first-party world-payments findings and should be read as the primary driver of Gibraltar's payments market-access risk profile this cycle. The bank-versus-non-bank distinction that the module spine requires be carried explicitly through W1a, W1b, W3, W4, and W12 is visible in this cycle's findings principally as an absence: no source this cycle differentiates the practical authorisation pathway or timeline for non-bank payment institutions and e-money institutions specifically from that available to banks under the prospective GAR. #### Outlook The permanent Gibraltar Authorisation Regime, expected around the fourth quarter of 2026, is the single development most likely to resolve Gibraltar's transitional market-access posture, superseding the passporting extension that currently runs to 31 December 2026. The GFSC's signalled Consumer Duty scope expansion to all retail customers, expected during 2026 to 2027, is the second item to watch. Readers should also note that the transitional passporting extension itself, though sourced to a Tier 1 UK Financial Conduct Authority publication, describes a UK-side mechanism; confirmation of Gibraltar-side implementing detail was not independently retrieved this cycle. Twelve of the fourteen module domains, including Merchant Acquiring and Risk, an area flagged as structurally under-indexed in prior methodology reviews, carried no sourced finding this cycle and remain silent pending fresh signal. trust tier: ai_unverified ###### Latest update · 6 October 2026 #### Regulatory Status Gibraltars payments regulatory position this cycle is defined by the simultaneous commencement of a substantially tightened safeguarding conduct regime and the continued, unresolved question of post-transitional market access to the UK. The Schedule 4 and 5 amendments to the Financial Services (Payment Services) Regulations 2020 and Financial Services (Electronic Money) Regulations 2020, introduced by Legal Notices 2026/224 and 2026/225 and commenced 16 July 2026, bring detailed diversification, reconciliation, resolution-pack and audit requirements into force for payment institutions and electronic money institutions licensed in Gibraltar. These sit alongside a statutory asset-pool priority and no-set-off protection for safeguarded funds on insolvency, and a GFSC Guidance Note on Safeguarding, announced 20 July 2026, elaborating supervisory expectations against the new statutory baseline. Separately, Gibraltars market-access position remains structurally unresolved: the transitional UK-Gibraltar passporting arrangement runs only to 31 December 2026, the permanent Gibraltar Authorisation Regime was reported in June 2026 as roughly eighteen months from completion, and the UK-EU Agreement in respect of Gibraltar signed 14 July 2026 confirms no EU-side passporting is restored, leaving UK market access as the sole and currently time-limited channel. Complaint-handling timelines under the Payment Services and Electronic Money Regulations, and an FCA-originated acknowledgement-rule extension effective 1 June 2026, apply to Gibraltar-based firms, though whether an operating out-of-court dispute-resolution or ombudsman scheme exists under Financial Services Act 2019 Part 14 remains unconfirmed, with the FCA stating no such scheme currently operates. #### Outlook Two dates anchor the forward view for Gibraltar: 16 July 2026, now passed, marking the live commencement of the new safeguarding regime whose supervisory bite is yet to be observed, and 31 December 2026, the approaching expiry of the transitional UK passporting arrangement against a permanent Gibraltar Authorisation Regime that remains materially distant. How these two tracks, conduct tightening now in force and market access still unresolved, interact over the coming months is the central question for firms licensed in or considering Gibraltar as a payments base. _4 earlier updates not shown here._ ###### Standing brief · as of 24 August 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Gibraltar's payments market access is currently transitional. The Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025 extend UK-Gibraltar passporting to 31 December 2026, pending the permanent Gibraltar Authorisation Regime, described in trade commentary as a unique, permanent mutual-market-access framework for Gibraltar-based banks, insurers, investment managers, payment service providers, and e-money institutions not available to any other Overseas Territory, Crown Dependency, or third country. The 2026 UK-EU Gibraltar Treaty explicitly excludes financial services from its scope, confirming that Gibraltar's payments market access is governed by the GAR and transitional passporting arrangements rather than by the Treaty. EEA passporting has been unavailable to GFSC-authorised e-money institutions and payment institutions since 1 January 2021, leaving GFSC domestic authorisation as the sole route to operate in or from Gibraltar. On the conduct side, the GFSC has signalled a possible expansion of Consumer Duty scope, currently UK-customer-focused under the 2024 Core Principles and Consumer Duty Regulations, to all retail customers during 2026 to 2027, though this is not yet in force. #### Outlook The permanent Gibraltar Authorisation Regime and the possible Consumer Duty scope expansion are the two clearest developments to watch for Gibraltar in the coming cycles; both remain pending rather than settled as of this cycle. 14 of 14 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W1a Licensing, Authorisation & Market Access Confirmed confirmed 2026-06-20 Gibraltar operates its own GFSC-supervised EMI/PI regime; the UK-EU Agreement on Gibraltar (signed 14 Jul 2026) does not restore or create EU financial-services passporting. UK-Gibraltar market access continues via the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025, extended to 31 December 2026. Horizon · 2026-2027 (±multi_year) HMT decision on folding Gibraltar payments/e-money access into FSMA Schedule 2A_proposed · T3_ Horizon · 2026-2027 (±multi_year) HMT decision on folding Gibraltar payments/e-money access into FSMA Schedule 2A_proposed · T3_ Standing sub-brief · as of 24 August 2026 348 words · last cycle 2026-10-06 #### Licensing, Authorisation & Market Access Gibraltar's payments market-access framework is in a transitional state. The Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025 extend UK-Gibraltar passporting arrangements to 31 December 2026, pending the permanent Gibraltar Authorisation Regime, which has not yet come into force. Trade commentary describes the GAR as a unique, permanent mutual-market-access framework for Gibraltar-based banks, insurers, investment managers, payment service providers, and e-money institutions, a status not available to any other Overseas Territory, Crown Dependency, or third country; it remains pending, and the transitional passporting extension is the operative mechanism in the meantime. The 2026 UK-EU Gibraltar Treaty, provisionally applied from 15 July 2026, explicitly excludes financial services and other services from its scope except where those services distort trade in goods. This confirms that UK-Gibraltar financial-services access, including payments market access, is handled entirely separately from the Treaty framework; the GAR and the transitional passporting arrangements, not the Treaty, are the operative instruments governing market access for payment institutions and e-money institutions. Separately, and on the EU/EEA side, Gibraltar Financial Services Commission-authorised e-money institutions and payment institutions have been unable to passport into EEA member states since 1 January 2021, following the post-Brexit loss of EEA passport rights. GFSC authorisation remains the sole route to operate as an e-money institution or payment institution in or from Gibraltar. This structural fact, EEA access permanently foreclosed and UK access transitional pending the GAR, defines Gibraltar's current market-access posture for payment institutions and e-money institutions, though this cycle's sourcing does not differentiate the practical authorisation pathway for non-bank payment institutions and e-money institutions from that available to banks under the prospective GAR. #### Outlook The permanent Gibraltar Authorisation Regime, expected around the fourth quarter of 2026, is the clearest forthcoming development for this module, and would supersede the transitional passporting extension currently running to 31 December 2026. Confirmation of Gibraltar-side implementing detail for the passporting extension itself, and of whether the GAR will preserve existing activity-level authorisations for payment institutions and e-money institutions without a fresh application, are the two open questions most likely to be resolved next. Periodic update · new data 2026-10-06 #### Licensing, Authorisation & Market Access Gibraltars payments market-access architecture remains in a structurally unresolved transitional state. Gibraltar-licensed payment institutions and electronic money institutions currently access the UK market under a transitional arrangement that runs only to 31 December 2026, a fixed and approaching expiry date rather than an open-ended accommodation. The permanent replacement, the Gibraltar Authorisation Regime, was described in a June 2026 ministerial statement as still roughly eighteen months away from being operational, with its progress tied in part to amendments proceeding through the UK Financial Services and Markets Bill currently before Parliament. This creates a visible gap: the transitional window closes at the end of this year, while the permanent regime intended to succeed it is not expected to be in place until well into 2027 or later, leaving open the question of whether a further extension to the transitional arrangement will be required to bridge that gap. The UK-EU Agreement in respect of Gibraltar, signed 14 July 2026 and provisionally applied from the same date, does not alter this picture, and firms should not read it as resolving any part of the market-access question. The Agreement is substantively an AML/CFT non-regression instrument; it confirms no EU-side passporting or market-access right for Gibraltar-licensed payment or e-money firms. Gibraltars market-access position therefore continues to depend entirely on the UK leg of the relationship, specifically the transitional arrangement and its eventual permanent successor, rather than on any EU-side mechanism. This combination, a time-limited UK transitional window, a permanent regime still materially distant, and no EU-side alternative, constitutes the dominant licensing and market-access theme for Gibraltar this cycle. It is a structural, not episodic, condition: no single enforcement action or licence decision drives it, but rather the pace at which UK primary and secondary legislation accommodating a permanent Gibraltar framework progresses, set against a transitional arrangement with a fixed and now relatively near expiry date. #### Outlook The clearest forward marker is 31 December 2026, the expiry date of the current transitional passporting arrangement. Firms licensed in Gibraltar and relying on UK market access should treat the period between now and that date as the operative window for either the permanent Gibraltar Authorisation Regime reaching a sufficiently advanced stage, or a further extension to the transitional arrangement being agreed; absent either development occurring, Gibraltar-licensed firms could face a market-access gap into 2027. Progress of the UK Financial Services and Markets Bill through Parliament is the legislative vehicle most directly tied to how quickly the permanent regime can be finalised, and is accordingly the single most relevant external development to monitor for this module going forward. **3 earlier distinct update(s)** Periodic update · new data 2026-10-04 #### Licensing, Authorisation & Market Access Gibraltar's market-access position for payment and e-money firms serving the UK rests on a temporary arrangement that is approaching its scheduled end. The FSMA (Gibraltar) Order 2001 established a passporting bridge allowing Gibraltar-licensed firms to access the UK market; this bridge was extended by SI 2025/1182 and is now due to expire on 31 December 2026. The intended permanent replacement, the Gibraltar Authorisation Regime (GAR) established under the UK Financial Services Act 2021, has not yet become operational. A ministerial statement from Minister Feetham indicated the regime remained roughly 18 months from introduction as at the time the statement was made, meaning the permanent regime is unlikely to be ready before the temporary bridge expires on its current schedule. The practical effect for Gibraltar-licensed electronic-money institutions and payment institutions currently serving UK customers under the temporary bridge is a forward-looking market-access risk: if neither the GAR becomes operational nor the bridge is further extended before 31 December 2026, these firms face a gap in their ability to continue serving UK customers on the basis they currently rely on. No evidence this cycle indicates whether a further extension is under active consideration or confirmed. #### Outlook The critical date is 31 December 2026. Firms and counterparties should watch for either confirmation of GAR operability or a further extension announcement well ahead of that date; neither was evidenced as having occurred as at this record. Periodic update · new data 2026-09-21 #### Licensing, Authorisation & Market Access Gibraltar's payment and e-money institutions continue to access the UK market through transitional rather than permanent arrangements. The UK-GI transitional passporting arrangements, originally established under SI 2019/589, have been extended to 31 December 2026 via the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025. This is confirmed at high confidence via a T1 Bank of England source. The permanent Gibraltar Authorisation Regime (GAR), which is intended eventually to replace this transitional bridge with a settled bilateral market-access framework, remains not-yet-operational. The practical consequence for both bank and non-bank payment institutions and e-money institutions operating from Gibraltar into the UK is continued reliance on a bridging legal mechanism now extended for a further twelve months, rather than the durable market-access certainty a permanent regime would provide. This affects both bank-affiliated and non-bank PI/EMI structures, as the transitional arrangements apply across both categories. #### Outlook The extension to 31 December 2026 sets the next clear decision point: either the GAR becomes operational before that date, providing a permanent basis, or the transitional arrangements will need extending again. Persistent reliance on transitional rather than permanent arrangements, now stretching across multiple extensions, itself signals unresolved structural uncertainty for GI-domiciled PSPs and EMIs dependent on UK market access. Periodic update · new data 2026-09-14 #### Licensing, Authorisation & Market Access Gibraltar's financial-services market access has bifurcated durably this cycle. The UK-EU Agreement on Gibraltar, signed 14 July 2026 and provisionally applied from 15 July 2026, covers movement of people, customs, indirect taxation, goods, transport, security cooperation and governance but explicitly does not extend to financial-services passporting or other services passporting for Gibraltar-licensed firms. This is a scope carve-out rather than an ambiguous gap: EU market access for Gibraltar-licensed payment institutions and e-money institutions remains closed under this treaty specifically. UK market access continues instead through a separate bilateral instrument, the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025, which extends transitional UK-Gibraltar financial-services market access to 31 December 2026. This is distinct in both legal basis and durability from the EU treaty: it is a time-limited UK domestic regulation rather than an international treaty provision, and it carries a hard expiry date absent further extension. Gibraltar also entered a customs union with the European Union from 10 April 2026, introducing a new Transaction Tax starting at 15 percent and rising to 17 percent. This customs arrangement is goods-only; it does not cover services, so the cross-border supply of payment and e-money services by Gibraltar-licensed EMIs and PIs is unaffected by these customs provisions. Separately and without change this cycle, the Gibraltar Financial Services Commission continues to apply an e-money capital-buffer requirement set at the minimum requirements imposed by the second Electronic Money Directive (2009/110/EC) increased by 20 percent -- a standing bank-vs-non-bank-relevant prudential requirement that sits on top of the EMD2 floor specifically for Gibraltar-licensed e-money institutions, distinguishing their capital treatment from that of bank-based payment providers. #### Outlook The 31 December 2026 expiry of the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025 transitional provisions is the key date to track. Absent a further extension, Gibraltar-licensed EMIs and PIs with UK-facing business would lose their transitional UK market-access basis at that point, while EU access remains separately foreclosed by the July 2026 treaty's explicit scope carve-out -- compounding into a genuine cliff-edge risk for firms dependent on either corridor. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (5)** 1. T3 Valsen Corporate / GFSC eMoney pages — E-money issuance in Gibraltar is regulated under the Financial Services (Banking) Act 1992 framework and specifically the Financial Services (Electronic Money) Regulations 2011/2020; the GFSC authorises and supervises EMIs. 2. T1 GFSC (fsc.gi) Electronic Money Institutions page — Two EMI types exist: authorised and registered; registered EMIs cannot passport. EMIs may appoint agents (registered with GFSC) and distributors (notified to GFSC); neither may issue e-money. 3. T1 GFSC (fsc.gi) Payment Service Provider page — Authorised Credit Institutions or Electronic Money Issuers are not required to apply for a separate payment-service permission, but must ensure they carry payment services under their authorisation and comply with payment-services requirements; applications follow a Staged Application for Authorisation approach. 4. T3 Ramparts (ramparts.gi) GAR & UK Market Access — Under the Gibraltar Authorisation Regime (GAR) UK market access is via notification (not fresh UK authorisation); payment/e-money activities currently rely on separate transitional provisions — PSRs Schedule 7 and EMRs reg 74A — granting sector-specific temporary permission rather than FSMA deemed authorisation, with HMT yet to decide whether to fold them into Schedule 2A. 5. T1 GFSC (fsc.gi) Electronic Money Institutions page — GFSC raises minimum prudential thresholds: under Schedule 2 paras 15-16 of the Electronic Money Regulations, the minimum requirements of EMD2 (2009/110/EC) are directed to be increased by 20%. ### W1b Conduct, Safeguarding & Promotions moved Confirmed confirmed 2026-06-20 Safeguarding is governed by the Financial Services (Electronic Money) Regulations 2020 (Regs 31-32: segregation option 1 / insurance-or-guarantee option 2), with safeguarded funds forming a priority asset pool on an insolvency event. Conduct is governed by the GFSC Consumer Duty (Core Principles and Consumer Duty Regulations 2024, in force 9 May 2024, UK-aligned). Financial promotions are tightened by the Financial Services (Restricted Promotions) Regulations 2025 (in force 1 May 2025) restricting promotion of speculative illiquid securities to retail clients. Movement — CHANGED Amended by LN.2026/225 (in force 16 Jul 2026): new safeguarding returns (reg.32A), dividend restrictions (reg.29A)_Financial Services (Electronic Money) (Amendment) Regulations 2026 commenced, materially amending the safeguarding regime._ Horizon · 2026-2027 (±year) Consumer Duty extension to all retail customers (ministerial appointment)_adopted · T1_ Standing sub-brief · as of 24 August 2026 199 words · last cycle 2026-10-18 #### Conduct, Safeguarding & Financial Promotions Gibraltar's conduct framework for GFSC-licensed firms includes retail-client-outcome obligations under the Financial Services (Core Principles and Consumer Duty) Regulations 2024, effective 9 May 2024. These obligations currently apply within the scope those Regulations established at the time of their effect. The Gibraltar Financial Services Commission has separately signalled a possible expansion of Consumer Duty scope to cover all retail customers, not solely UK customers, during 2026 to 2027. This is a forward-looking signal rather than an in-force change: no enacted instrument implementing the expansion was identified this cycle, and the timeline carries a multi-year uncertainty band. Firms currently limiting Consumer Duty-equivalent retail protections to UK customers, on the basis that the 2024 Regulations' effective scope was UK-customer-focused, should treat the signalled all-retail-customer expansion as a live planning item rather than a settled requirement. No safeguarding-specific development was identified for Gibraltar this cycle. #### Outlook Whether and when the GFSC's signalled Consumer Duty scope expansion is formally enacted is the clearest item to watch for this module. Firms should expect further clarity during 2026 to 2027 per the currently signalled timeline, though the instrument giving it legal effect had not been identified as at this cycle. Periodic update · new data 2026-10-18 #### Conduct, Safeguarding & Financial Promotions Gibraltar's e-money safeguarding regime was materially strengthened by the Financial Services (Electronic Money) (Amendment) Regulations 2026 (LN.2026/225), in force since 16 July 2026. The instrument introduces two specific new obligations. First, regulation 32A requires electronic money institutions to submit safeguarding returns to the GFSC, giving the regulator a periodic reporting mechanism over how relevant funds are protected. Second, regulation 29A restricts an EMI's ability to make a dividend or comparable capital distribution absent GFSC non-objection, giving the regulator a capital-preservation lever over licensed EMIs. GFSC-supervised EMIs continue to have a choice of safeguarding mechanism: option 1, segregation of relevant customer funds, or option 2, insurance or a comparable guarantee arrangement. What has changed is the reporting layer sitting above that choice, via the new safeguarding returns, and the capital-distribution constraint sitting alongside it. The regime's broad shape, intent and mechanism choice, mirrors the UK's CASS 15 e-money safeguarding framework, but Gibraltar's version is a distinct legal instrument under Gibraltar law; an EMI with UK CASS 15 experience should not assume UK regulatory guidance, FCA enforcement precedent, or FSCS-adjacent protections transfer automatically to the Gibraltar regime. Non-bank safeguarded funds in Gibraltar, as in the UK, are not covered by a deposit-guarantee-style compensation scheme in the way bank deposits are. The practical effect for an EMI licensed in Gibraltar is a materially higher compliance burden around safeguarding documentation and capital-distribution governance than existed before 16 July 2026, with the GFSC now positioned to monitor both fund protection and capital adequacy more closely through the new returns regime. #### Outlook How the GFSC exercises its new non-objection power over EMI dividends, and what it expects to see in the new safeguarding returns, will become clearer as the first reporting cycles under LN.2026/225 are completed. EMIs operating in Gibraltar should expect closer ongoing supervisory engagement on safeguarding adequacy than under the prior regime. **3 earlier distinct update(s)** Periodic update · new data 2026-10-06 #### Conduct, Safeguarding & Financial Promotions Gibraltars safeguarding conduct regime for payment institutions and electronic money institutions was substantially overhauled with the commencement, on 16 July 2026, of new Schedules 4 and 5 to the Financial Services (Payment Services) Regulations 2020 and the Financial Services (Electronic Money) Regulations 2020, introduced by Legal Notices 2026/224 and 2026/225 respectively and published in the Gibraltar Gazette, No. 5328, of that date. The changes move Gibraltars safeguarding regime from a comparatively general set of obligations toward a detailed, operationally specific framework covering diversification of safeguarding arrangements, reconciliation methodology, resolution-pack content, and periodic audit. Under the amended Electronic Money Regulations, an institution must periodically review whether it is appropriate to diversify, or further diversify, the third parties with which it deposits, holds, invests, insures or guarantees relevant funds, and must adjust the third parties used and the amounts deposited where it concludes diversification is appropriate, placing an active, recurring diversification-assessment duty on institutions rather than a one-off structuring decision. Institutions using insurance or a guarantee, alone or combined with segregation, that provides unlimited cover are relieved of the internal safeguarding reconciliation requirement but must instead perform a daily calculation of their safeguarding requirement, a substitution of one control (daily calculation) for another (reconciliation) rather than a net reduction in obligation. A new statutory no-recourse, no-combination, no-set-off protection applies to the safeguarding account itself: the account provider has no interest in, recourse or right against money or assets in the safeguarding account for sums owed to it or a third party on another account, and no right to combine the safeguarding account with another account or exercise set-off or counterclaim against the safeguarded money or assets, reinforcing the ring-fenced character of safeguarded funds at the custodial level. A new annual audit obligation, set out in Schedule 5, applies to institutions that have been required to safeguard more than GBP 100,000 of relevant funds at any time for a period of at least 53 weeks; the auditors report must be delivered to the GFSC within four months of the end of the period covered, with a copy provided to the institution at the same time. Where an institution relies on unlimited insurance or guarantee cover and so performs the daily calculation in lieu of reconciliation, paragraph 11(2) specifies that this daily calculation substitutes for the internal reconciliation obligation rather than operating alongside it. A defined resolution-pack obligation requires that certain documents and records, including those identifying funds and assets institutions and insurance or guarantee providers, acknowledgement letters, policies or guarantees, documents identifying relevant individuals, and the most recent internal and external audit reports, be retrievable immediately under paragraph 23(2); separately, an administrator, receiver, trustee, liquidator or analogous officer appointed over the institution must be able to retrieve each required document within 48 hours of appointment, giving the resolution pack direct operational relevance in an insolvency scenario rather than leaving it a purely documentary exercise. On insolvency itself, regulation 34(1)(a) gives electronic money holders claims priority over all other creditors from the asset pool, and regulation 34(1)(b) bars set-off or security rights over the asset pool until those claims are paid in full, save for set-off relating to fees and expenses of operating an account. The GFSC supported these statutory changes with a new Guidance Note on Safeguarding for payment institutions and electronic money institutions, announced 20 July 2026, setting out its expectations on safeguarding of customer funds, safeguarding resolution packs, and safeguarding audit requirements, issued in close proximity to the Schedule 4/5 commencement date. Monthly regulatory reporting timelines for electronic money institutions were also tightened, with institutions now required to submit required returns within 15 business days after the end of each calendar month under new regulation 32A(1), excluding the month in which the institution first became an electronic money institution. #### Outlook With the Schedule 4/5 changes now in force, the near-term focus shifts to how institutions operationalise the new diversification-review, reconciliation-or-daily-calculation, and resolution-pack requirements, and whether the GFSCs supporting Guidance Note, once its full content is available, surfaces supervisory expectations beyond the bare statutory text. The GBP 100,000/53-week audit threshold is likely to be the first point at which a visible population of institutions newly falls within scope of the annual audit obligation, making it a natural marker for assessing how broadly the new Schedule 5 regime bites in practice. Periodic update · new data 2026-10-04 #### Conduct, Safeguarding & Financial Promotions Gibraltar's safeguarding and governance requirements for payment and e-money firms were tightened by LN 2026/225, which amended the 2020 E-Money Regulations' safeguarding and governance provisions. This amendment has been in force since 16 July 2026. The amendment sits within the existing E-Money Regulations framework rather than introducing a wholly new regime, strengthening the governance and asset-safeguarding obligations applicable to licensed e-money issuers and payment institutions operating from Gibraltar. Separately, the FCA's CASS 15 Supplementary Safeguarding Regime took effect in the UK from 7 May 2026 for UK-regulated payment and e-money institutions, including a Gibraltar firm that operates via a UK branch. A Gibraltar-licensed firm accessing the UK market solely through the temporary passporting bridge, rather than through a UK branch, is not itself brought into scope of CASS 15 by that access route alone; the distinction between branch-based and passporting-based UK presence is material to which safeguarding regime applies. #### Outlook Firms should monitor whether further safeguarding amendments follow the July 2026 tightening, and should track their own UK presence structure (branch versus passporting bridge) against the CASS 15 scope boundary as the 31 December 2026 bridge expiry approaches. Periodic update · new data 2026-09-21 #### Conduct, Safeguarding & Financial Promotions A significant UK conduct-side change with direct relevance to Gibraltar market access is set to take effect this cycle. The FCA's Supplementary Safeguarding Regime under CASS 15 takes effect 7 May 2026 for UK-regulated payment institutions and e-money institutions, and specialist commentary describes it as the most significant PI/EMI safeguarding overhaul in a decade. This is assessed Probable, sourced via specialist secondary commentary. The safeguarding mechanism itself operates through segregation requirements for customer funds held by PIs and EMIs. Because continued Gibraltar market access is understood to be conditioned on maintaining equivalent standards to the UK regime, this UK-domestic conduct change carries a direct, if indirect, compliance implication for Gibraltar-domiciled PI/EMI firms: they are expected to meet an equivalent safeguarding bar even though CASS 15 is not itself a Gibraltar instrument. #### Outlook The key point to watch is how the equivalent-standards expectation is formally operationalised for Gibraltar firms — whether through the current transitional passporting arrangement's own conditions, through future GAR conditions once that regime becomes operational, or through some other mechanism. No Gibraltar-specific instrument implementing an equivalent safeguarding standard was located this cycle. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (4)** 1. T1 Gibraltar Laws (gibraltarlaws.gov.gi) — Financial Services (Electronic Money) Regulations 2020 — The Financial Services (Electronic Money) Regulations 2020 require EMIs to keep relevant funds segregated (safeguarding option 1) or covered by insurance/guarantee (safeguarding option 2), set out insolvency-event provisions, and give the GFSC power to exclude assets and sanctioning/administrative-penalty powers. 2. T1 GFSC (fsc.gi) Consumer Duty page / Triay Lawyers — Gibraltar's Consumer Duty is set out in the Financial Services (Core Principles and Consumer Duty) Regulations 2024, effective 9 May 2024, replicating the UK FCA Consumer Duty; it currently applies to firms serving UK retail customers (excluding DLT providers) and is to be extended to all retail customers by ministerial appointment (anticipated 2026-2027). 3. T3 Triay Lawyers / Europa Group — The Financial Services (Restricted Promotions) Regulations 2025 (in force 1 May 2025) tighten promotion of speculative illiquid securities, restricting promotions to general retail clients and removing the 'excluded communications' exemption; promotions limited to high-net-worth / sophisticated investors providing signed declarations. 4. T1 GFSC (fsc.gi) news / Ramparts — GFSC published Guidance Notes on Consumer Duty and the Fair Treatment of Vulnerable Customers (following consultation closing 14 Aug 2024) and conducted a thematic review of Consumer Duty Board Reports released March 2025. ### W2 Stablecoins & Digital Money Probable confirmed 2026-06-20 Gibraltar was the first jurisdiction to regulate DLT, via the Financial Services (Distributed Ledger Technology) Regulations 2020 (subsidiary to the Financial Services Act 2019), built on nine/ten regulatory principles. DLT providers storing or transmitting value for others require GFSC authorisation (FSA 2019 s.139). Gibraltar is outside the EU so MiCA does not formally apply and a Gibraltar authorisation does not confer MiCA passporting, though the GFSC is progressively aligning the DLT framework with MiCA. Stablecoin/reserve and clearing-and-settlement reforms are in train (Digital Clearing & Settlement Framework, May 2025; Virtual Asset Arrangements amendments, Oct 2025). Horizon · 2026-H2 (±half_year) Gibraltar DLT-framework draft legislation (stablecoin reserve/custody, DEX rules)_proposed · T3_ Standing sub-brief · written on or before 4 July 2026 309 words · last cycle 2026-10-04 #### Stablecoins & Digital Money Gibraltar's stablecoin and digital-money position rests on first-mover regulatory infrastructure. Gibraltar was the first jurisdiction to provide a comprehensive DLT/crypto regulatory framework via the DLT Regulations, subsidiary to the Financial Services Act 2019; section 139 of that Act makes DLT-provider activities — storing or transmitting value belonging to others in or from Gibraltar — regulated activities requiring GFSC authorisation. The regime is built on a set of regulatory principles and the GFSC regulates exchanges, custodians and wallet providers. This first-mover status is the jurisdiction's principal competitive differentiator in attracting crypto and stablecoin operators, all of which sit on the non-bank side of the regulated population. The critical market-access constraint is the MiCA gap. Gibraltar is outside the EU, so MiCA does not formally apply within its territory, and a Gibraltar authorisation does not create MiCA passporting rights into the EEA. The GFSC is nonetheless progressively aligning the DLT framework with MiCA standards, and firms serving EU users must independently comply with MiCA. Operators wanting EEA reach must therefore dual-license, and the Gibraltar/MiCA gap directly shapes domicile decisions. Forward reform is concentrated on stablecoin reserve and custody standards. Announced DLT-regime updates include stronger stablecoin regulation through reserve requirements and custody standards, rules for decentralised exchanges and smart contracts with a central operator, and tighter cybersecurity and third-party risk requirements. Draft legislation is expected per Minister Feetham at Consensus Hong Kong in February 2026. These reserve and custody standards directly affect stablecoin-issuer and payments-provider operating models domiciled in Gibraltar. #### Outlook The draft DLT-framework legislation, expected in the second half of 2026 with half-year uncertainty, is the defining forward item. Stablecoin reserve and custody standards will reshape issuer economics, while the persistent Gibraltar-licence-does-not-equal-EEA-passport reality continues to push EEA-facing operators toward dual licensing. The reserve/custody dimension carries a cross-reference to FIM for potential illicit-finance use beyond WPM's instrument-trust scope. Periodic update · new data 2026-10-04 #### Stablecoins & Digital Money Gibraltar's regulatory treatment of stablecoins and digital money has advanced on specific, narrow fronts rather than through a comprehensive framework. Regulation 22 of the Prediction Market Regulations 2026 permits stablecoin settlement within licensed prediction markets. Separately, the PCC Amendment Act 2026 provides a clear statutory pathway for the issuance of tokenised fund shares within a regulated environment, extending Gibraltar's protected-cell-company fund structures into tokenised form. A DLT/VAA dividend non-objection mechanism was also added on 26 March 2026, giving licensed digital-asset providers a formal route to seek regulatory non-objection before dividend distributions. Taken together, these developments show Gibraltar's digital-money framework advancing through targeted, instrument-specific accommodations — a settlement carve-out for one licensed activity, a tokenisation pathway for fund shares, a dividend mechanism for DLT/VAA providers — rather than a single consolidated stablecoin or digital-money statute. Each instrument addresses a distinct use case within Gibraltar's broader digital-asset regulatory architecture. #### Outlook Whether these targeted accommodations are consolidated into a broader stablecoin or digital-money framework, or whether further instrument-specific carve-outs continue to be the pattern, is the item to watch going forward. **1 earlier distinct update(s)** Periodic update · new data 2026-09-14 #### Stablecoins & Digital Money The Prediction Market Regulations 2026 (LN.2026/176), in force from 13 July 2026, expressly permit funding and settlement of prediction-market contracts via digital-asset payments, including stablecoins. This is a usage-side authorisation: it permits stablecoins to be used as a settlement rail for a specific, newly created regulated-activity category, rather than establishing a freestanding stablecoin-issuance, reserve, or redemption regime. No dedicated Gibraltar stablecoin-issuer licensing or reserve-backing statute was evidenced this cycle; the regulation's contribution to the stablecoin landscape is confined to authorising a particular use case for stablecoin settlement within the prediction-market activity class. This development sits on top of Gibraltar's existing DLT regulatory infrastructure administered by the Gibraltar Financial Services Commission, and represents the jurisdiction extending an already-established digital-asset regulatory base into a new product vertical (prediction markets) rather than building new stablecoin-specific rules from first principles. #### Outlook Whether Gibraltar will follow this usage-side authorisation with a dedicated stablecoin-issuance framework, or whether stablecoin settlement will continue to be authorised only on a per-use-case basis as with the prediction-market category, is the item to track going forward. **Sources and findings (4)** 1. T3 Global Legal Insights — Blockchain & Cryptocurrency Laws 2026 (Gibraltar) — Gibraltar became the first jurisdiction to provide a comprehensive regulatory framework for blockchain/crypto with the Financial Services (Distributed Ledger Technology) Regulations, subsidiary legislation to the Financial Services Act 2019; the GFSC regulates DLT firms including exchanges and wallet providers. 2. T3 Ramparts (ramparts.gi) — Gibraltar crypto-asset regulatory regime — FSA 2019 s.139 makes DLT-provider activities (using DLT to store or transmit value belonging to others, in or from Gibraltar) regulated activities requiring GFSC authorisation. 3. T3 Key2Law / Regulated United Europe (rue.ee) — Gibraltar is not in the EU so MiCA does not formally apply within its territory; a Gibraltar authorisation does not create MiCA passporting rights into the EEA, but the GFSC is progressively aligning the DLT framework with MiCA standards and firms serving EU users must comply with MiCA. 4. T3 Key2Law / company.gi DLT licence guide — Pending stablecoin reforms: announced DLT-regime updates include stronger stablecoin regulation (reserve requirements and custody standards), rules for DEX/smart contracts with a central operator, and tighter cybersecurity/third-party risk requirements; draft legislation expected per Minister Feetham (Consensus HK, Feb 2026). ### W3 Operational Resilience & Critical Infra Probable confirmed 2026-06-20 Gibraltar has implemented a UK-equivalent Operational Resilience regime: the GFSC published Operational Resilience, Outsourcing/Third-Party Risk Management and Liquidity Risk Management Guidance Notes in 2024 following industry consultation. Firms identify important business services and set impact tolerances (deadline 13 July 2024), with full compliance expected after 13 July 2026. DORA applies indirectly to firms that are part of EU groups. Gibraltar may set requirements differing from both FCA and PRA given its smaller market. Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open this jurisdiction's page on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/gibraltar/) Horizon · 2026-07 (±quarter) GFSC Operational Resilience full-compliance milestone_in_force_pending · T1_ Standing sub-brief · written on or before 4 July 2026 193 words · last cycle 2026-06-23 #### Operational Resilience & Critical Infrastructure Gibraltar's operational-resilience regime is closely aligned with UK approaches and carries the most imminent compliance deadline in the current spine. The GFSC published Guidance Notes on Operational Resilience, Outsourcing/Third-Party Risk Management and Liquidity Risk Management, with consultation concluding 12 January 2024. The implementation pathway required firms to set impact tolerances by 13 July 2024 and to hold a prioritised plan by 13 July 2026; after 13 July 2026, firms must remain within impact tolerances in severe-but-plausible disruption. This applies to both bank and non-bank GFSC-regulated payments firms. DORA applies indirectly to EU-group firms, layering an additional resilience expectation onto Gibraltar entities within EU groups. The 13 July 2026 full-compliance milestone is the single most imminent regulatory pinch-point for all GFSC-regulated payments firms in the jurisdiction, and the regulatory horizon records it as in-force-pending with quarter-level certainty. #### Outlook With the 13 July 2026 deadline now within the immediate window, the operational-resilience milestone dominates the near-term compliance calendar for every GFSC-regulated firm. After that date, the supervisory expectation shifts from preparation to demonstrated capability to remain within impact tolerances under severe-but-plausible disruption. EU-group firms carry the parallel indirect DORA expectation. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 GFSC (fsc.gi) news — Guidance Notes publication — The GFSC published Guidance Notes on Operational Resilience, Outsourcing/Third-Party Risk Management and Liquidity Risk Management following an industry consultation that concluded 12 January 2024; the outsourcing note complements the Operational Resilience Regulations and Guidance Note, aligned with UK approaches. 2. T3 PwC Gibraltar — Operational Resilience — Firms must have identified important business services and set impact tolerances by 13 July 2024, hold a prioritised plan by 13 July 2026, and after 13 July 2026 have comprehensive strategies to remain within impact tolerances in severe-but-plausible disruption. 3. T3 Isolas (gibraltarlawyers.com) — GFSC Annual Report 2023/24 — The GFSC implemented a UK-equivalent Operational Resilience regime and UK-equivalent Consumer Duty regime as part of legislative amendments enhancing regulatory alignment with the UK (GFSC Annual Report 2023/24). 4. T3 Sicsic Advisory / Grant Thornton Gibraltar — The EU's DORA applies indirectly to Gibraltar-presence firms that are part of EU groups or operate a Brexit solution via an EU subsidiary; the GFSC is likely to have different operational-resilience requirements to both the FCA and PRA given the smaller market. ### W4 Scheme & Network Compliance Probable confirmed 2026-06-20 Gibraltar PSPs/acquirers operate under the international four-party card-scheme rules (Visa/Mastercard), PCI DSS (PCI SSC), and — given Gibraltar's UK-aligned post-Brexit posture and SEPA reachability — interchange/scheme-fee economics broadly tracking the UK/EU model. Gibraltar has no domestic card scheme; compliance flows through scheme rulebooks and PCI DSS rather than a bespoke Gibraltar interchange regulation. Searched: GFSC card-scheme/interchange instruments — no Gibraltar-specific interchange cap instrument identified; scheme/PCI obligations apply via the international schemes. Standing sub-brief · written on or before 4 July 2026 159 words · last cycle 2026-06-23 #### Scheme & Network Compliance Card acquiring in Gibraltar runs on standard four-party scheme economics, with Visa and Mastercard interchange paid acquirer-to-issuer, PCI DSS compliance, and scheme-mandated technical standards. The compliance perimeter for both bank and non-bank acquirers flows through international scheme rulebooks and the PCI SSC rather than a bespoke domestic instrument. Critically, and on confirmed absent-field provenance, no Gibraltar-specific domestic interchange-cap instrument or domestic card scheme was identified — this was searched and found absent, not merely unsearched. Gibraltar acquirers and PSPs therefore inherit scheme-fee economics directly, and the absence of a domestic cap means there is no local interchange relief available. #### Outlook Scheme and network compliance is a stable module. Gibraltar firms will continue to track changes to the international Visa and Mastercard rulebooks and PCI DSS, since these — not any domestic instrument — govern card-acquiring obligations. No domestic interchange or scheme development is in prospect, and the module is carried as monitored rather than active. no periodic updates on record for this sub-brief ** Sources and findings (3)** 1. T1 ECB Occasional Paper No 131 (interchange) / industry (Stored, Justt) — Card acquiring in Gibraltar runs on standard four-party scheme economics: interchange is paid by the acquirer to the issuer per transaction, set by Visa/Mastercard, with acquirers passing scheme fees and interchange to merchants; PCI DSS compliance and scheme-mandated technical standards apply to acquirers/PSPs. 2. T3 Quadrapay (Gibraltar payment gateway) / UCSB PCI glossary — Gibraltar-based merchants/PSPs are served by acquirers requiring PCI DSS compliance and adherence to card-scheme rules; acquirers must be defined as such by a payment brand and are subject to payment-brand rules and merchant-compliance procedures. 3. T3 WorldFirst (SEPA countries list) — Gibraltar is a SEPA-reachable territory, so euro instant/credit-transfer scheme rails (SCT/SCT Inst) and the ISO 20022 message standard are accessible to Gibraltar-domiciled euro accounts. ### W5 Payment Corridor Dynamics Probable confirmed 2026-06-20 Gibraltar's principal payment corridors are euro (via SEPA, in which Gibraltar is reachable) and sterling (UK-aligned, via UK market-access arrangements). Cross-border euro settlement runs through SEPA mechanisms (TARGET2/EURO1) typically accessed indirectly via correspondent/sponsor banks since only regulated credit/PI/EMI entities can participate. Gibraltar's crypto/stablecoin sector adds digital-asset remittance corridors (stablecoin payments providers established locally). Standing sub-brief · written on or before 4 July 2026 139 words · last cycle 2026-06-23 #### Payment Corridor Dynamics Gibraltar is a SEPA-reachable territory, so euro SCT and SCT Inst scheme rails and the ISO 20022 message standard are accessible to Gibraltar-domiciled euro accounts. SEPA settlement runs via TARGET2 (ECB) and EURO1 (EBA CLEARING), with only regulated EMIs, PIs and credit institutions able to participate directly. In practice, smaller Gibraltar PSPs typically access SEPA indirectly via a sponsor or correspondent bank, creating a dependency that shapes corridor economics. Euro and sterling are Gibraltar's principal corridors, with the sterling corridor running through UK-aligned market-access arrangements. #### Outlook The euro corridor's indirect-access structure keeps sponsor-bank dependency central to corridor risk. As a small jurisdiction reliant on intermediated SEPA participation, Gibraltar's corridor stability is bound up with the correspondent-banking access dynamics tracked under W12. No discrete corridor-rule change is in prospect this cycle; the module is carried as established. no periodic updates on record for this sub-brief ** Sources and findings (3)** 1. T3 WorldFirst (SEPA bank transfers) — Gibraltar is part of the SEPA zone (listed among overseas territories included in SEPA), enabling euro credit transfers and direct debits to/from Gibraltar-domiciled euro accounts under the SEPA scheme. 2. T3 Payment Labs / UniCredit GTB — SEPA euro settlement runs via TARGET2 (ECB) and EURO1 (EBA CLEARING); only regulated EMIs, PIs or credit institutions can participate in SEPA, so smaller Gibraltar PSPs typically access via indirect participation or a sponsor/correspondent bank. 3. T3 company.gi Gibraltar Crypto Directory — Gibraltar hosts stablecoin-payments and remittance providers among its DLT-licensed firms (e.g. a Gibraltar-founded stablecoin payment solutions provider also holding a MiCA licence in Europe), adding digital-asset cross-border corridors. ### W6 Industry Structure & Commercial Probable confirmed 2026-06-20 Gibraltar's payments/fintech market is concentrated in EMIs, PSPs and DLT firms, with the DLT regime driving global attention and a maturing pool of licensed firms. The sector spans e-money institutions, virtual-asset exchanges, custodians and stablecoin payments providers. Industry bodies (Gibraltar Electronic Money Association, Gibraltar Bankers Association, Gibraltar Association for New Technologies, GFIA) provide formal policy channels. The market skews toward crypto/DLT and e-money rather than a large domestic bank-acquiring base. Standing sub-brief · written on or before 4 July 2026 178 words · last cycle 2026-06-23 #### Industry Structure & Commercial Gibraltar's payments and fintech market is concentrated in EMIs, PSPs and DLT firms, skewing toward crypto/DLT and e-money rather than a large domestic bank-acquiring base. Market-mapping data lists roughly 87 fintech startups — around 32 funded and around 13 at Series A or later — including Xapo Bank, INX and eToroX, indicating a private-company-heavy structure. This count rests on T4 directory data and is Possible-grade; private-company signal is systematically under-indexed by methodology, so the figures should be treated as indicative rather than precise. Industry bodies such as GEMA, GBA, GANT and GFIA provide formal policy channels. The structural concentration in crypto and e-money rather than bank acquiring is what shapes the jurisdiction's risk and growth profile. #### Outlook The structural skew toward non-bank crypto and e-money operators is a durable feature of the Gibraltar market and underpins both its competitive draw and its de-risking exposure. Higher-tier corroboration of the private-company population would sharpen the picture; until then, the structural read is more reliable than the specific counts. Discrete commercial events are carried separately under W13. no periodic updates on record for this sub-brief ** Sources and findings (3)** 1. T3 Mondaq — Gibraltar FinTech Comparative Guide — The DLT Regulations have increased global attention with a growing pool of licensed firms; established e-money and payment-services firms have moved into fintech, and offerings span virtual-asset custody, exchanges, EMIs, PSPs, MiFID firms and crypto-funds. 2. T3 Mondaq — Gibraltar FinTech Comparative Guide — Industry associations including the Gibraltar Electronic Money Association, Gibraltar Bankers Association, Gibraltar Association of Compliance Officers and Gibraltar Association for New Technologies act as formal channels between policymakers and the private sector. 3. T4 Tracxn — Gibraltar fintech startups — Market-mapping data indicates a sizeable fintech population in Gibraltar (a directory lists roughly 87 fintech startups, ~32 funded with ~13 at Series A+), including names such as Xapo Bank, INX and eToroX, indicating a private-company-heavy structure. ### W7 Legal & Litigation limited signal Probable confirmed 2026-06-20 GFSC enforcement is risk-based, with effective and proportionate use of enforcement powers (including sanctioning/administrative penalties under the EMR 2020) as a stated regulatory objective. No landmark Gibraltar payments-sector litigation or major published GFSC enforcement action against a payments/EMI firm was surfaced for the baseline window; UK safeguarding-insolvency case law (recent UK court judgments on PI/EMI insolvency) is materially relevant given Gibraltar's UK-aligned regime. Searched: GFSC enforcement register / Gibraltar payments penalties 2025-2026 — no Gibraltar-specific payments enforcement action confirmed; note: large 'GFSC' fines in search results were the Guernsey FSC (different regulator), not Gibraltar. Standing sub-brief · as of 10 August 2026 273 words · last cycle 2026-08-08 #### Legal & Litigation The confirmed legal development for Gibraltar this cycle is textual and constitutional rather than contentious: the UK-EU Agreement in respect of Gibraltar, signed 14 July 2026 and provisionally applied from 15 July 2026, is understood to operate expressly 'without prejudice' to Gibraltar's underlying constitutional status, and does not alter or restore financial-services passporting arrangements. This is assessed rather than confirmed at high confidence specifically on the 'without prejudice' framing point, though the non-restoration of passporting itself is a Tier-1-sourced, high-confidence finding from the House of Commons Library. No litigation, dispute, or contentious legal proceeding connected to Gibraltar's payments or financial-services market access has been identified this cycle; the legal development in view is the Treaty's own drafting posture, not a judicial or adversarial process. For payment and financial-services firms operating under Gibraltar licences, the practical legal implication is one of continuity rather than change: the Treaty's careful preservation of Gibraltar's constitutional status alongside its explicit non-restoration of passporting means that firms' existing legal analysis of their market-access position, built around the transitional GAR-bridge framework, does not need to be revisited on account of the Treaty itself. The Treaty closes off, rather than opens, one avenue of legal argument that might otherwise have been available — namely, that the broader UK-EU Gibraltar settlement could be read as restoring some form of financial-services market access by implication. #### Outlook Firms and their counsel should watch for the full Treaty text and any Gibraltar-specific implementing legislation, since the 'without prejudice' framing, while confirmed as a starting characterisation, would benefit from primary-text verification once the complete Treaty documentation is available beyond the current briefing-level sourcing. no periodic updates on record for this sub-brief ** Sources and findings (2)** 1. T1 GFSC (fsc.gi) Enforcement Strategy / EMR 2020 — The GFSC describes itself as a risk-based regulator for which effective and proportionate use of enforcement powers is instrumental to its regulatory objectives; the EMR 2020 provide GFSC sanctioning powers and maximum administrative penalty amounts. 2. T3 Gibson Dunn (FCA safeguarding proposals) — Recent UK court judgments have created legal uncertainty over the framework applying when a payment/e-money firm safeguarding funds enters insolvency — directly relevant to Gibraltar's UK-aligned safeguarding regime and a key legal-infrastructure watch item. ### W8 Merchant Acquiring & Risk Uncertain confirmed 2026-06-20 Merchant acquiring for Gibraltar businesses is served largely by international/offshore acquirers and PSPs operating under card-scheme rules and PCI DSS, with anti-fraud rules engines, chargeback/dispute handling and high-risk-merchant treatment managed at the acquirer/scheme level rather than via a bespoke Gibraltar acquiring statute. Gibraltar's high-risk verticals (notably iGaming) shape acquirer risk appetite. Searched: Gibraltar acquiring regime / GFSC merchant-acquiring rules — no Gibraltar-specific acquiring instrument distinct from PSP authorisation + scheme/PCI rules identified. Standing sub-brief · written on or before 4 July 2026 160 words · last cycle 2026-06-23 #### Merchant Acquiring & Risk Merchant acquiring for Gibraltar businesses is served largely by international and offshore acquirers and PSPs operating under card-scheme rules and PCI DSS. Anti-fraud rules engines, chargeback and dispute handling, and high-risk-merchant treatment — notably for iGaming — are managed at acquirer and scheme level. No Gibraltar-specific acquiring statute distinct from PSP authorisation plus scheme and PCI rules was identified. This detail rests on T4 sources and is Possible-grade; merchant-acquiring operations are a systematically under-indexed area, and the Gibraltar acquiring picture is thin and aggregator-sourced, to be treated as under-confident pending higher-tier corroboration. The iGaming high-risk vertical drives acquirer reserve and payout terms, which is material to merchant economics in the jurisdiction. #### Outlook Merchant acquiring is carried as a dashboard-tier, stable module. The dominant variable is iGaming risk appetite at the acquirer and scheme level rather than any domestic statutory development. Better-tier sourcing would be required before any firmer read on Gibraltar acquiring structure could be offered. no periodic updates on record for this sub-brief ** Sources and findings (2)** 1. T4 Quadrapay (Gibraltar payment gateway) — Gibraltar-based businesses obtain card acceptance via acquirers/PSPs offering merchant accounts and payment gateways with anti-fraud rules engines and customer-monitoring tools to identify and eliminate fraudulent transactions and protect the merchant account. 2. T4 NowG.net (offshore merchant processing) — Offshore acquiring (relevant to Gibraltar's high-risk verticals such as iGaming) operates under scheme rules, interchange and issuer-approval logic with KYC/AML and PCI DSS compliance; settlement involves payout cadence, currency conversion and reserves. ### W9 Product Innovation & Market Development Probable confirmed 2026-06-20 Gibraltar positions itself as an innovation-forward fintech hub. Headline 2025 developments: the Digital Clearing and Settlement Framework (May 2025), developed with the GFSC and Bullish, positioned as the world's first dedicated regime for crypto clearing and settlement of virtual-asset derivatives via regulated CCPs; Virtual Asset Arrangements amendments (October 2025); and the Restricted Promotions Regulations 2025. Draft DLT-framework legislation is expected per Minister Feetham (Consensus HK, Feb 2026). The market also shows neobank/digital-banking and RegTech build-out. Standing sub-brief · as of 10 August 2026 315 words · last cycle 2026-09-14 #### Product Innovation & Market Development Two confirmed product-innovation developments define Gibraltar's payments-adjacent innovation environment this cycle. The Protected Cell Companies (Amendment) Bill 2026 would require prior Gibraltar Financial Services Commission approval before a protected cell authorised as an experienced-investor fund can issue tokenised shares, with investor-eligibility, cybersecurity, custody, and risk-disclosure conditions attached to that approval. This is a non-bank-facing development that extends Gibraltar's distributed-ledger-technology regulatory infrastructure into fund-share issuance specifically — a distinct use case from the jurisdiction's existing DLT exchange and custody licensing gateway, and one that sits within the funds and asset-management space rather than the payments-processing space directly, though it is payments-adjacent in the sense that any tokenised-share settlement infrastructure will likely require payment-rail integration. Separately, the Prediction Market Regulations 2026 (LN.2026/176) came into force on 13 July 2026, requiring operators of the new prediction-market product vertical to meet an AML/CTF and client-money framework equivalent to the Gambling Act 2025 Part 4 standard from their first day of operation. This is a genuinely new product category for Gibraltar rather than a regulatory update to an existing one, and the client-money framework requirement in particular has direct payments-market relevance: prediction-market operators will need client-money segregation and safeguarding arrangements analogous to those required of conventional gambling operators, which in turn shapes the payment-processing and account-structuring services such operators will require from Gibraltar-based or Gibraltar-servicing payment providers. Both developments should be read as incremental extensions of Gibraltar's existing regulatory infrastructure — DLT licensing on one hand, gambling-sector client-money standards on the other — into adjacent product categories, rather than as the creation of wholly new regulatory frameworks. #### Outlook Watch for the Bill's enactment status and any GFSC-published conditions specifying the operational detail of tokenised-share approval, and for the first prediction-market operators' practical experience of meeting the Part 4-equivalent AML/client-money standard, both of which will determine how quickly these innovation vectors translate into measurable payments-market activity. Periodic update · new data 2026-09-14 #### Product Innovation & Market Development The Prediction Market Regulations 2026 (LN.2026/176), which came into force on 13 July 2026, create a new regulated-activity category for prediction markets in Gibraltar and layer a novel stablecoin-settlement payments use case on top of Gibraltar's existing DLT and gambling regulatory infrastructure. This is a product-innovation development in the sense that it opens a distinct commercial product category -- prediction-market contracts settled via digital assets -- that did not previously have dedicated regulatory footing in Gibraltar, rather than being either a purely structural market-analysis theme or a discrete single commercial event of the kind tracked under Commercial Intelligence. The regulatory architecture behind this innovation combines gambling-law authorisation (the Prediction Market Regulations were made under the Gambling Act 2025) with payments-relevant settlement permissions (the stablecoin/digital-asset funding and settlement authorisation), making this a genuinely cross-cutting development for payments-sector readers tracking where regulated product innovation is occurring at the intersection of gambling, DLT and payments regulation. #### Outlook The extent to which this new product category attracts commercial launches -- and whether any specific operator announcements follow, which would then be tracked as discrete Commercial Intelligence events -- is the development to watch in the coming cycle. **Sources and findings (4)** 1. T3 Gibraltar International Magazine (gibraltarfinance.com) / company.gi — The Digital Clearing and Settlement Framework (May 2025), developed with the GFSC and exchange Bullish, is positioned as the world's first dedicated regulatory regime for crypto clearing and settlement, covering risk management, asset safeguarding and settlement finality for virtual-asset derivatives. 2. T3 company.gi DLT licence blog / Triay Lawyers — Recent DLT-related developments include Virtual Asset Arrangements amendments (October 2025) and Restricted Promotions Regulations (May 2025); draft DLT-framework legislation expected 'within the next few months' per Minister Nigel Feetham at Consensus Hong Kong (Feb 2026), likely bringing VASP registrations within the DLT Regs. 3. T3 company.gi / Gibraltar AML Country Update 2026 — Gibraltar has committed to implementing the OECD Crypto-Asset Reporting Framework (CARF), and the Financial Services (Regulated Activities) (Amendment) Regulations 2025 make the provision of virtual asset arrangements a regulated activity under FSA 2019. 4. T4 fintech.gi — Gibraltar is attracting neobank/digital-banking and RegTech activity, with the GFSC continuing to refine its framework to keep pace with technology and the territory positioned as a hub for compliance-technology innovation. ### W10 Consumer Protection & APP Fraud Probable confirmed 2026-06-20 Consumer protection rests on the GFSC Consumer Duty (Core Principles and Consumer Duty Regulations 2024, in force 9 May 2024, UK-aligned, outcomes-based). Crucially, on APP fraud Gibraltar has NO equivalent of the UK's mandatory reimbursement regime: under the Financial Services (Payment Services) Regulations 2020, PSPs must only reimburse 'unauthorised' payments, so APP-fraud victims (who authorise the payment) are not guaranteed reimbursement — a material divergence from the UK PSR mandatory reimbursement regime introduced October 2024. The GFSC issues consumer fraud-awareness alerts. Standing sub-brief · written on or before 4 July 2026 174 words · last cycle 2026-10-06 #### Consumer Protection & APP Fraud Gibraltar's consumer-protection position carries a material divergence from the UK. Under the Financial Services (Payment Services) Regulations 2020, Gibraltar PSPs are only required to reimburse consumers for 'unauthorised' payments. Because authorised push payment (APP) fraud involves the victim authorising the payment, such transactions fall outside the regulations and victims are not guaranteed reimbursement — a material divergence from the UK PSR mandatory reimbursement regime introduced in October 2024. No equivalent mandatory reimbursement regime presently exists in Gibraltar, and the GFSC issues consumer APP-fraud awareness alerts. This divergence materially lowers PSP fraud-liability exposure in Gibraltar relative to the UK, applying to both bank and non-bank firms, and represents a competitive and consumer-protection differential operators should weigh. #### Outlook The APP-fraud reimbursement divergence is a durable structural feature unless and until Gibraltar adopts an equivalent regime, of which there is no current signal. The lower fraud-liability exposure is a competitive consideration for PSP domicile, balanced against the consumer-protection gap relative to the UK. The trajectory is recorded as divergent rather than converging. Periodic update · new data 2026-10-06 #### Consumer Protection & APP Fraud Gibraltars consumer-protection framework for payments complaints operates on statutory timelines distinct from, but connected to, the UK regime. Under the Gibraltar Payment Services Regulations, regulation 75(3) to (5), and the equivalent Electronic Money Regulations provision at regulation 26(2), complaint-handling timelines of 15 and 35 business days apply, giving firms a defined acknowledgement-and-resolution structure for payment-service and e-money complaints respectively. These Gibraltar-specific timelines sit alongside a UK regulatory extension: the FCA Handbook provision DISP 1.1.3R(5) extends the FCAs amended DISP 1.6.1R acknowledgement rule to Gibraltar-based firms that are subject to DISP 1 under GEN 2.3, with that extension taking effect from 1 June 2026. The practical effect is that a Gibraltar-based firm within the relevant scope must now meet an FCA-originated acknowledgement timeline requirement in addition to its own domestic Gibraltar complaint-handling timelines under the Payment Services and Electronic Money Regulations, rather than operating under a single unified standard. A structural gap remains visible in Gibraltars dispute-resolution infrastructure: whether Gibraltar operates a functioning out-of-court dispute-resolution or ombudsman scheme under Part 14 of the Financial Services Act 2019, which commenced on 25 March 2021, is not confirmed by any appointed-ombudsman record or published contact details in the Act as consolidated to 13 August 2026. The FCA, for its part, states that Gibraltar currently has no such scheme. This is a notable absence given the parallel tightening of complaint-handling timelines under the Payment Services and Electronic Money Regulations and the extended FCA acknowledgement rule: a consumer with an unresolved Gibraltar payments complaint may have defined timelines for acknowledgement and initial handling but an unclear path to independent out-of-court resolution if those internal processes do not resolve the matter. This is worth surfacing explicitly as an enablement-relevant absence rather than passing over it: the lack of enforcement or infrastructure in this specific area is itself analytically significant for consumer-protection purposes, independent of whether any complaint volume has actually tested the gap. #### Outlook The open question for this module is whether Gibraltar moves to establish or formally confirm an operating ombudsman or dispute-resolution scheme under Financial Services Act 2019 Part 14, given that the statutory power has existed since March 2021 without apparent operational implementation as far as current records show. Separately, firms subject to both the Gibraltar-specific complaint-handling timelines and the FCAs extended DISP 1.6.1R acknowledgement rule from 1 June 2026 should expect continued attention to how the two timeline regimes interact in practice, particularly where a complaint touches both Gibraltar-domestic and UK-facing elements of a firms business. **Sources and findings (4)** 1. T3 Isolas (gibraltarlawyers.com) — APP Fraud — Under the Financial Services (Payment Services) Regulations 2020, Gibraltar PSPs are only required to reimburse consumers for 'unauthorised' payments; because APP fraud involves the victim voluntarily making the payment, such transactions fall outside the PSR Regulations and victims are not guaranteed reimbursement. 2. T3 Isolas (gibraltarlawyers.com) — APP Fraud — Gibraltar's position contrasts with the UK Mandatory Reimbursement Regime introduced October 2024; no equivalent regime presently exists in Gibraltar, so PSPs are not legally obligated to reimburse APP-fraud victims. 3. T1 GFSC (fsc.gi) Consumer Duty / Triay Lawyers — The Consumer Duty is an outcomes-focused standard of care (Four Outcomes + Cross-Cutting Rules) under the Financial Services (Core Principles and Consumer Duty) Regulations 2024; the GFSC commenced thematic reviews of firms' compliance from Q3 2024. 4. T1 GFSC (fsc.gi) Consumer Alert — The GFSC issues consumer fraud-awareness alerts, including on rising APP fraud where fraudsters impersonate banks or the Royal Gibraltar Police to induce victims to make payments. ### W11 AML/CFT & Financial Crime (Sentinel.gi-fed) [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/gibraltar/#sec-dom-D7) Probable confirmed 2026-06-20 sentinel. Gibraltar's AML/CFT framework for the payments context is anchored in the Proceeds of Crime Act 2015 (POCA), the Terrorism Act 2018 and subsidiary regulations, supervised by the GFSC (for financial firms) with the GFIU as FIU and the OFT for certain DPMS sectors. The crypto Travel Rule is in force via POCA (since 22 March 2021). A 2025 National Risk Assessment was completed; MONEYVAL last evaluated Gibraltar in 2019 (terminating 5th-round follow-up after substantial AML/CFT enhancements, contributing to EU/grey-list removal), with the next MONEYVAL evaluation due 2027. Carried as Sentinel position; no original illicit-finance analysis performed. Horizon · 2027 (±year) Gibraltar next MONEYVAL evaluation (revised FATF standards)_in_force_pending · T1_ Standing sub-brief · written on or before 4 July 2026 211 words · last cycle 2026-06-23 #### AML/CFT & Financial Crime This module is sourced from the Sentinel feed; WPM performs no original illicit-finance analysis, and original AML and sanctions analysis is routed to FIM. Per Sentinel (membercheck.com/aml-cft-legislation-in-gibraltar), Gibraltar's AML/CFT framework is anchored in the Proceeds of Crime Act 2015 (POCA), the Terrorism Act 2018 and subsidiary regulations, supervised by the GFSC for financial firms, with the GFIU as the financial intelligence unit and the OFT covering certain designated non-financial sectors; obliged entities owe customer-due-diligence and risk-based verification duties. Also per Sentinel, the crypto Travel Rule has been in force in Gibraltar via POCA since 22 March 2021, with an 18-month grace period to September 2022. Gibraltar completed its most recent National Risk Assessment in 2025 and is preparing for the next MONEYVAL evaluation in 2027 under revised FATF standards; MONEYVAL terminated its 5th-round follow-up after substantial AML/CFT enhancements, supporting Gibraltar's grey-list removal. The AML supervisory structure underpins correspondent-banking access and the jurisdiction's reputational standing. #### Outlook The next MONEYVAL evaluation in 2027 under revised FATF standards is the defining forward AML item, following the completed 2025 NRA. Grey-list removal and the improving compliance trajectory support correspondent-banking and counterparty acceptance. These threads carry illicit-finance significance flagged to FIM, which holds original analytical responsibility; WPM carries only the Sentinel position. no periodic updates on record for this sub-brief ** Sources and findings (10)** 1. T3 MemberCheck (AML/CFT Gibraltar) / GFSC AML page — sentinel. POCA 2015 designates the GFSC among supervisory bodies; obliged entities owe CDD and risk-based verification duties; the GFIU gathers and disseminates financial-crime intelligence under POCA, the Terrorism Act 2018 and the Drug Trafficking Act 1995. 2. T3 Notabene (Travel Rule Gibraltar) — sentinel. The crypto Travel Rule has been in effect in Gibraltar since 22 March 2021 (entry into force of POCA provisions), with the GFSC monitoring compliance; an 18-month grace period ran to September 2022. 3. T1 HM Government of Gibraltar 2025 NRA / Financial Crime portal — sentinel. Gibraltar completed its most recent National Risk Assessment for AML/CFT/PF in 2025 and is preparing for the next MONEYVAL evaluation in 2027 under revised FATF standards; it was last evaluated by MONEYVAL in 2019. 4. T3 Gibraltar AML Country Update 2026 (Thomson Reuters) — sentinel. Following substantial AML/CFT enhancements, MONEYVAL terminated 5th-round follow-up reporting and the European Commission concluded Gibraltar meets standards, supporting its removal from the grey list; the Sanctions Act 2019 and Terrorism Act 2018 (incl. proliferation-financing offence) form part of the framework. 5. T? FIM (sentinel.gi) per-JID baseline profile — Gibraltar — Gibraltar (British Overseas Territory) runs its own AML/CFT/CPF regime under the Proceeds of Crime Act 2015, Terrorism Act 2018 and Sanctions Act 2019, supervised by the GFSC and GFIU. It was removed from FATF increased monitoring in Feb 2024 and the EU high-risk list in June 2025, but retains structural exposure via its offshore-facing insurance, gaming and DLT/crypto sectors and a historically porous Spain frontier. 6. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: sourcing-thinness 7. T1 FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-001) — Sanctions: OFSI wind-down 8. T1 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-004) — Enforcement: OFSI (HM Treasury) — Maritime Mutual Association Limited (Maritime Mutual Gibraltar) and subsidiaries 9. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: enforcement-absence 10. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: capacity-deficit ### W12 Correspondent Banking, Settlement & Access limited signal Probable confirmed 2026-06-20 Gibraltar PSPs/EMIs access euro settlement indirectly via SEPA (TARGET2/EURO1) and sterling rails through UK-aligned/sponsor arrangements, since direct SEPA participation is limited to regulated credit/PI/EMI entities. As a small jurisdiction historically perceived as higher-risk, Gibraltar firms (and their crypto/iGaming exposure) face de-risking pressure in establishing/maintaining correspondent-banking relationships — a structural access constraint consistent with the global CPMI/BIS de-risking pattern affecting smaller jurisdictions. Searched: Gibraltar central-bank account access — Gibraltar has no central bank; settlement access is intermediated via UK/EU correspondent and sponsor banks. Standing sub-brief · written on or before 4 July 2026 208 words · last cycle 2026-09-21 #### Correspondent Banking, Settlement & Access The analytical spine of this module is the bank versus non-bank access asymmetry. Gibraltar PSPs and EMIs access euro settlement indirectly via SEPA (TARGET2/EURO1) and sterling rails through UK-aligned and sponsor arrangements, since direct SEPA participation is limited to regulated credit, PI and EMI entities. Crucially, Gibraltar has no central bank, so settlement access is intermediated via UK and EU correspondent and sponsor banks — making Gibraltar EMIs and PIs respondents dependent on correspondent and sponsor banks acting as gateway. As a small jurisdiction with crypto and iGaming exposure, Gibraltar firms face de-risking pressure consistent with the global CPMI/BIS pattern affecting smaller jurisdictions, driven by correspondent banks bearing AML/CTF liability for their respondents. The de-risking dynamic and the absence of a central bank make sponsor and correspondent-bank dependency a core operational risk for Gibraltar payments firms. #### Outlook Structural access risk dominates the module. With no domestic central bank and intermediated euro and sterling settlement, the jurisdiction's payments operations remain exposed to correspondent-bank de-risking decisions over which Gibraltar firms have limited control. This exposure is partly offset by grey-list removal and the improving AML trajectory tracked under W11, but the trajectory is recorded as constrained. The correspondent-access dependency carries cross-monitor significance flagged to FIM. Periodic update · new data 2026-09-21 #### Correspondent Banking, Settlement & Access Gibraltar's electronic-money regulatory terminology and passporting mechanics operate on a distinct basis from the UK's own framework. GFSC Administrative Notice 9 defines 'Authorised electronic money institution' by reference to Gibraltar's own Electronic Money Regulations, and describes EEA-agent passporting mechanics distinct from the UK's Electronic Money Regulations 2011. This is assessed Probable, but the finding rests on a single T1 source this cycle, meaning the module's source floor of at least two independent sources was not met — a sourcing gap that should temper confidence in the completeness, if not the accuracy, of this account. The bank-versus-non-bank access asymmetry that defines this module's analytical spine is only partially visible here: Administrative Notice 9 speaks to non-bank PI/EMI definitional and passporting mechanics specifically, and no this-cycle finding addresses whether bank-affiliated correspondent access for Gibraltar institutions operates on comparable or different terms. #### Outlook Closing the source-floor gap for this module is the immediate priority: a second independent source corroborating or qualifying Administrative Notice 9's definitional and passporting terms would materially strengthen this finding. Whether Gibraltar's distinct EEA-agent passporting mechanics create any practical friction for non-bank EMIs relative to bank-affiliated correspondents remains an open question. **Sources and findings (3)** 1. T1 BIS/CPMI — Correspondent banking report — Smaller respondent banks in jurisdictions perceived as too risky are especially affected by reductions in correspondent-banking relationships ('de-risking'), per CPMI/BIS — a structural pressure relevant to Gibraltar's small, crypto-and-gaming-weighted financial centre. 2. T3 Payment Labs / UniCredit GTB — SEPA euro settlement is via TARGET2 (ECB) and EURO1 (EBA CLEARING); since only regulated EMIs/PIs/credit institutions can participate, Gibraltar firms typically access settlement indirectly through a sponsor/correspondent bank acting as gateway. 3. T2 Congress.gov CRS — Correspondent Banking and De-Risking — De-risking is driven by correspondent banks bearing AML/CTF liability and regulatory/reputational risk for respondents, leading large banks to shed relationships with smaller banks in jurisdictions viewed as high-risk — directly constraining access for small-jurisdiction respondents. ### W13 Commercial Intelligence (M&A, Investment & Product) moved limited signal Probable confirmed 2026-06-20 Trailing-12-month (approx. Jun 2025-Jun 2026) commercial/product signals in Gibraltar's payments/DLT space center on public-private framework launches (GFSC + Bullish digital clearing & settlement) and product/regulatory milestones (Virtual Asset Arrangements Oct 2025, Restricted Promotions May 2025) rather than large disclosed M&A. Discrete commercial events captured below; several values undisclosed. Movement — NEW Bullish Group GFSC tokenised-securities approval; PCC Amendment Act 2026 tokenised EIF cell shares_Backfill of previously uncaptured late-surfacing commercial/product events for GI._ Standing sub-brief · as of 8 August 2026 99 words · last cycle 2026-10-18 #### Commercial Intelligence & Fintech 76 operators and providers held a Gibraltar gambling licence as of 29 July 2026, continuing to constitute the demand base for Gibraltar EMI and PSP high-risk payment processing. No new PSP/EMI M&A deal, investment round or product launch was identified for Gibraltar this cycle; this entry records the licensed-operator demand base rather than a discrete commercial event. #### Outlook With no new M&A or funding event identified this cycle, the commercial-intelligence line for Gibraltar remains a watch item tied to the size of the licensed gambling-operator base as the demand driver for EMI/PSP high-risk processing capacity. Periodic update · new data 2026-10-18 #### Commercial Intelligence & Fintech Two discrete commercial developments mark Gibraltar's fintech landscape in this window. Bullish Group received Gibraltar Financial Services Commission approval to offer trading in tokenised securities, an approval reported around late June 2026; the transaction value was not publicly disclosed. This is a licensing-type commercial event extending an existing platform's regulatory footprint in Gibraltar into tokenised-securities trading specifically. Separately, the Protected Cell Companies (Amendment) Act 2026 establishes a product-level legal innovation: Experienced Investor Funds structured as protected cell companies may now issue cell shares in the form of DLT share tokens, subject to GFSC prior approval. This is a structural product development at the level of fund and corporate law, distinct from any single company's commercial transaction, giving the Gibraltar fund-structuring market a bespoke tokenised-share-certificate mechanism. Both developments sit within Gibraltar's broader DLT and virtual-asset commercial ecosystem, and both were identified as backfill items not previously captured in Gibraltar's payments baseline; private-company signals beyond the aggregator data reviewed were not independently resolved this cycle, so the fuller competitive picture around who else is active in Gibraltar's tokenisation space remains incomplete. #### Outlook Further GFSC approvals for tokenised-asset trading platforms, and growing use of the Protected Cell Companies tokenised cell-share structure by fund managers, are the most likely sources of the next material commercial development in this space. Independent verification of private-company funding and transaction data beyond aggregator sources would strengthen confidence in the overall competitive picture. **Sources and findings (3)** 1. T3 Gibraltar International Magazine / company.gi — Gibraltar, the GFSC and exchange Bullish launched the Digital Clearing and Settlement Framework (May 2025) for crypto-derivative clearing/settlement via regulated CCPs — a flagship public-private product/regulatory event. 2. T4 company.gi Gibraltar Crypto Directory — Bullish — which operates from Gibraltar among other licences — is NYSE-listed (BLSH) with a reported ~$5.6B valuation and also owns CoinDesk, indicating significant capital-markets activity tied to a Gibraltar-connected crypto operator. 3. T4 company.gi Gibraltar Crypto Directory — A Gibraltar-founded stablecoin payment solutions provider (one of the earliest DLT-licensed firms, ~55 employees) has expanded by also obtaining a MiCA licence in Europe — a product/market-expansion signal. ** No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for Gibraltar| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 54 finding(s), 113 source(s) in the cumulative register. **Audit trail** Machine check Challenged on 5 Oct 2026: not upheld (9 confirmed against the cited source; 1 contradicted by the cited source; 7 could not be checked). An automated, adversarial test run by a second model; no person has assessed the result. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).