Portugal Brings Crypto Under the EU's MiCA Rulebook From July 1, Splitting Supervision Between the Bank of Portugal and the CMVM
From 1 July, Portugal finally applies the EU's MiCA regulation to crypto. The Bank of Portugal handles authorisation and prudential oversight while the CMVM polices conduct, with fines reaching €5 million. A grandfathering window has closed, leaving only a handful of licensed operators.
From today, Portugal's crypto sector stops operating in a legal grey zone. As of 1 July 2026, the country formally applies the European Union's Markets in Crypto-Assets Regulation (MiCA), the bloc-wide rulebook that had been on the statute books since 2023 but that Portugal had yet to switch on domestically. The change hands supervision of the industry to two of the country's most powerful financial watchdogs and exposes non-compliant firms to fines of up to €5 million.
The new framework carves the job in two. The Banco de Portugal (Bank of Portugal) takes charge of prudential supervision and of authorising crypto-asset service providers — the exchanges, custodians and brokers that want to operate legally in the country. The Comissão do Mercado de Valores Mobiliários (Securities Market Commission), or CMVM, assumes conduct supervision, policing how those firms treat their customers and behave in the market. The two regulators must jointly publish and regularly update a public list of authorised operators and the specific services each is cleared to provide.
A transition window that has now closed
Firms already registered with the Bank of Portugal at the end of December 2024 were allowed to keep trading under a grandfathering arrangement — but only until today, or until their application for full MiCA authorisation was either granted or refused. That grace period has now expired. Any operator still without a decision faces a hard question about whether it can lawfully continue serving Portuguese clients.
The catch is that very few entities have actually cleared the bar. Portugal enters the MiCA era with only a handful of authorised providers, a thin roster that reflects both the demanding capital and governance requirements of the regime and the slow pace of applications. For a country that spent the late 2010s building a reputation as one of Europe's most welcoming jurisdictions for crypto investors — helped for years by the absence of a personal capital-gains tax on digital assets — it is a striking narrowing of the field.
Fines with real teeth
The penalties are calibrated to concentrate minds. Serious breaches can draw fines of between €25,000 and €5 million for companies, and between €4,000 and €5 million for individuals. In cases of market abuse, regulators can push the ceiling higher still — up to 15% of the offending firm's annual turnover. The rules also tighten anti-money-laundering obligations, reflecting Brussels' long-standing worry that lightly policed crypto venues can be a channel for illicit funds.
What it means for residents
For the thousands of foreign residents and digital nomads who hold crypto in Portugal, the practical message is one of consolidation rather than crackdown. Trading and holding remain legal; what changes is that the platforms serving them must now be properly licensed and supervised, with clearer disclosure and complaint routes. In the short term, some smaller or offshore services may quietly withdraw from the Portuguese market rather than shoulder the compliance load — a reminder that the era of frictionless, unregulated crypto in Portugal is firmly over.
