Law & regulation

Crypto regulation in Ireland: MiCA, the Central Bank and who does what

A plain guide to the rules behind every Irish crypto purchase: which body supervises what, which dates mattered, and what the rules do and do not protect.

Status check, 5 Oct 2026: CEX.IO says it is not onboarding new EU/EEA customers while its MiCA application is under review in Spain, so confirm availability for Irish residents first. Crypto is high-risk and you can lose all the money you put in. Read our status notes.

Founded 2013PCI DSS Level 1 certificate (Mar 2026)UK FCA-registered · US FinCEN MSB
An Irish flag waving
On this page
  1. Who is who
  2. The timeline that matters
  3. How a firm becomes authorised
  4. Travel Rule, custody and conduct
  5. Advertising rules
  6. Stablecoins, brokers and OTC
  7. Enforcement: the Coinbase fine
  8. What is coming next
  9. What the rules do not do

Crypto in Ireland is regulated mainly through the EU's Markets in Crypto-Assets Regulation, known as MiCA, with the Central Bank of Ireland (CBI) as the national competent authority. MiCA has applied to crypto-asset service providers since 30 December 2024. It regulates the businesses that sell, hold and transfer crypto for you, not the coins, and it does not create a compensation scheme.

This page is the mechanics: who is who, which dates mattered, and what the rules mean in practice. If you want the quick yes-or-no, read is crypto legal in Ireland first. Everything here was checked against primary sources, including S.I. 607/2024 and ESMA's June 2026 statement, on 5 October 2026, and anything we could only confirm second-hand is labelled.

Who is who

Several bodies get mentioned in the same breath, and they do different jobs. The fastest way to stop confusing them is to see the roles side by side.

BodyWhat it does for crypto
Central Bank of IrelandDesignated MiCA competent authority (S.I. 607/2024). Authorises and supervises Irish crypto-asset service providers. Also the supervisor for AML and the Travel Rule on crypto transfers.
ESMAEU-level body. Publishes the interim MiCA register of authorised providers and issues EU-wide statements, such as the June 2026 one on transitional periods.
Department of FinancePolicy and legislation. The Minister for Finance made the Irish regulations that give MiCA effect.
Department of Justice, AML Compliance UnitSupervises other designated sectors (for example high-value goods dealers). It is not the supervisor of crypto firms.
FIU IrelandSits within the Garda National Economic Crime Bureau. Receives suspicious transaction reports from firms.
RevenueTax, not conduct. Sets out how crypto is taxed and receives DAC8 reports from providers.

One caution on the table: the AMLCU description comes from the department's own materials as summarised in search results, because gov.ie blocked our automated checks. The point that the CBI, not the AMLCU, supervises crypto-asset service providers comes from the Irish statutory instrument itself.

The timeline that matters

VASP registration with the CBI begins, an anti-money-laundering regime only.

MiCA rules for stablecoin issuers (asset-referenced and e-money tokens) apply.

S.I. 607/2024 comes into operation, designating the CBI as the competent authority.

MiCA applies to crypto-asset service providers. The Travel Rule starts for crypto transfers.

The old Irish VASP registration provisions are repealed, with a saver for firms already registered.

Ireland's 12-month transition ends (the S.I. says 30 December, the CBI page says 29 December).

EU-wide maximum transition ends. Unauthorised firms must wind down, stop onboarding and stop marketing.

The VASP point is worth a sentence. Registration as a "virtual asset service provider" was never a licence or a seal of approval. The CBI says it gives no indication of how a MiCA assessment will turn out, and the register did not convert automatically into MiCA authorisation. If a firm still advertises "CBI-registered VASP", ask which regime it means.

How a firm becomes authorised

The CBI process has four stages: initial engagement, a Key Facts Document, a formal application with a completeness check of 25 working days, and an assessment of 40 working days for complete applications, with limited room for suspension. Since 2 April 2026 applications go through the Central Bank Portal. Some firms already regulated elsewhere, such as banks and investment firms, can instead notify the CBI before offering crypto services under MiCA Article 60.

Firms authorised in another EU country can serve Ireland by passporting: the home authority notifies the host countries, and the firm may start from receipt of that notice or the fifteenth calendar day. That is why Coinbase (Luxembourg), Bitpanda (Austria), Crypto.com (Malta) and Revolut's crypto entity (Cyprus) appear on the register while Kraken's entities carry an Irish home state. As of the register file modified on 30 September 2026, there were 12 Irish-home entries among 364 entries EU-wide, which our page on crypto firms authorised in Ireland lists and explains. Appearing on the register with Ireland listed as a service country does not prove a firm is actively onboarding Irish customers, so check its own terms.

Travel Rule, custody and conduct

Travel Rule. Regulation (EU) 2023/1113 has applied to crypto transfers since 30 December 2024. Providers must obtain, hold and pass on information about who sends and receives, and spot transfers where it is missing. Irish enforcement sits in S.I. 310/2025, which creates offences for breaches and names the CBI as competent authority. You will notice it as extra questions when moving crypto to a wallet you control. We have not verified the exact thresholds for self-hosted wallets from the primary text, so we do not quote them.

Custody. MiCA Article 75 requires a written client agreement, a custody policy, a record of each client's holdings, and regular statements. Client assets must be segregated from the firm's own, so the firm's creditors have no claim on them in an insolvency, and liability for losses caused by the firm is capped at market value at the time of loss. That helps, but it is not a guarantee.

Conduct. Article 66 requires providers to give information that is fair, clear and not misleading, to identify marketing as marketing, to warn clients of the risks, and to publish their pricing and cost policy prominently. The CBI's Consumer Protection Code also applies to providers, subject to MiCA overlaps. Check how a provider presents its fees against our notes on crypto exchange fees in Ireland.

Advertising rules

MiCA Article 7 requires marketing communications for offers of most crypto-assets to be identifiable, fair, clear and not misleading, and to carry a prescribed statement that no competent authority has reviewed or approved them. Article 66 then covers providers' own promotion. Article 59(5) bars a non-authorised business from using a name or marketing that suggests it is a provider.

The Advertising Standards Authority code is worth a mention because people assume it fills gaps. Its section 13 on financial services says the CBI has primary and statutory responsibility for financial services advertising, and requires prominent warnings that values can go down as well as up. We found no crypto-specific rule in the code text, and could not verify whether crypto-specific ASA guidance exists in 2026. The CBI warns that some crypto products are advertised in confusing or deliberately misleading ways, including by social media influencers.

Stablecoins, brokers and OTC

Stablecoins. MiCA separates e-money tokens (tied to one official currency such as the euro) from asset-referenced tokens (tied to baskets or other assets). An e-money token can only be offered by an authorised credit institution or e-money institution, must be redeemable at any time at par, and redemption must not carry a fee. We have not independently researched which stablecoins each Irish-facing platform lists, so check before assuming a token is available.

Brokers and OTC desks. There is no "broker" licence. A firm falls under service categories: exchange of crypto for funds or for other crypto, execution of orders, reception and transmission of orders, custody and so on. A desk dealing as principal is, in our reading, typically an exchange service. That is interpretation, not CBI wording. See our guide to crypto OTC in Ireland for how this shows up in practice.

Third-country firms. A firm outside the EU can serve you only on your exclusive initiative, and soliciting or advertising to people in the EU defeats that exemption whatever the contract says.

Enforcement: the Coinbase fine

In November 2025 the CBI fined Coinbase Europe Limited €21,464,734, after a 30% settlement discount from €30,663,906, for failures in monitoring transactions for money-laundering and terrorist-financing purposes between April 2021 and March 2025. It also reported 2,708 late suspicious transaction reports. This was an AML finding. It is not a statement that customers lost money, and Coinbase's current MiCA authorisation is a Luxembourg one. Read the context on our Coinbase in Ireland page.

What is coming next

Digital euro. The ECB says a first issuance could come during 2029, assuming EU legislation is adopted in the course of 2026, with a pilot being prepared for 2027. The European Parliament confirmed its position to open negotiations on 9 July 2026. As of 5 October 2026 we found no adopted regulation, so treat 2029 as conditional.

AMLR. The EU Anti-Money Laundering Regulation (2024/1624) is due to apply from 10 July 2027, with crypto-asset service providers brought squarely into scope. We only have secondary sources for the article-level detail, including a cash payment cap of €10,000, and we do not claim it affects cash-to-crypto sales. Treat anything more specific as unverified until confirmed on EUR-Lex.

Tax reporting. DAC8 obliges providers to collect user tax details from 1 January 2026, with first returns due to Revenue on 31 May 2027. See CARF and DAC8 reporting and our crypto tax guide.

What the rules do not do

MiCA does not remove the risk from crypto, and it does not protect you from price falls, from your own mistakes or from impersonation fraud. The CBI is clear that crypto sits outside the Deposit Guarantee Scheme and the Investor Compensation Scheme. Treat authorisation as a minimum filter for choosing a provider, then read the risks yourself. Scams ride on top of the regulation, and our guide to crypto scams in Ireland shows how fraudsters use the vocabulary of regulation to look legitimate.

This is a general explanation, not legal advice.

Sources and further reading

  1. Central Bank of Ireland – Markets in Crypto-Assets Regulation (MiCAR)
  2. S.I. No. 607/2024 – European Union (Markets in Crypto-Assets) Regulations 2024
  3. S.I. No. 310/2025 – Information Accompanying Transfers of Funds Regulations 2025
  4. ESMA – Public statement on the end of MiCA transitional periods (23 June 2026)
  5. ESMA – MiCA Article 66, acting honestly, fairly and professionally
  6. Central Bank of Ireland – Enforcement action against Coinbase Europe Limited
  7. ECB – Digital euro

Facts last checked 5 October 2026Published 5 October 2026How we research

Risk warning. Crypto-assets are volatile and you can lose all the money you put in. They are not covered by the Irish Deposit Guarantee Scheme. This page is general information, not financial or tax advice.

Quick answers

Questions people ask

Who regulates crypto in Ireland?

The Central Bank of Ireland is the national competent authority for MiCA under S.I. No. 607/2024, and it supervises crypto-asset service providers for anti-money-laundering purposes. ESMA keeps the EU-wide interim register. The Department of Finance handles policy and legislation. The Department of Justice's AML Compliance Unit supervises other sectors, not crypto firms.

Does MiCA protect my crypto if an exchange collapses?

Only partly. MiCA requires providers to keep client assets segregated from their own and to hold a custody policy, so creditors should not reach customer assets. But there is no deposit guarantee or investor compensation scheme for crypto, and the Central Bank says so directly.

What is the Travel Rule for crypto?

It is the EU Transfer of Funds Regulation (2023/1113), which has applied to crypto transfers since 30 December 2024. Providers must collect and pass on information about the sender and recipient, and detect missing details. In practice, expect questions about transfers to and from your own wallet.

Can an unauthorised crypto firm advertise to people in Ireland?

Not lawfully. A non-authorised business must not present itself as a crypto-asset service provider, and ESMA's June 2026 statement says unauthorised firms should stop marketing to EU clients. Third-country firms can serve you only on your own exclusive initiative, and advertising defeats that exemption.

Is there a crypto broker licence in Ireland?

No separate one. Brokers fall under MiCA service categories such as exchange of crypto for funds, execution of orders, or reception and transmission of orders. Which category applies depends on what the firm actually does, and you can see the codes on the ESMA register.

When will the digital euro launch?

Not yet decided. The [ECB says](https://www.ecb.europa.eu/euro/digital_euro/html/index.en.html) a first issuance could come during 2029, assuming the necessary EU legislation is adopted in 2026. The European Parliament voted on 9 July 2026 to open negotiations, so the law was not adopted when we checked on 5 October 2026.

What fine did the Central Bank give Coinbase?

The Central Bank fined Coinbase Europe Limited €21,464,734, announced on 6 November 2025, for failures in monitoring transactions for money-laundering purposes between April 2021 and March 2025. That was an anti-money-laundering penalty, not a finding about customer funds.

Compare before you commit Open an account →