Crypto Regulations Worldwide: A 2026 Guide by Region and Topic

Crypto regulation is the set of laws, licensing regimes, supervisory actions and tax rules that governments apply to digital assets and the businesses that handle them. There is no single rulebook. Each country decides how to classify tokens, which agency supervises them and what obligations apply to exchanges, wallet providers, issuers and users.

Most regimes tackle the same handful of concerns:

• Money laundering and sanctions. Platforms that exchange or transfer crypto are often treated like financial institutions and must identify customers and monitor transactions.
• Investor protection. Rules on disclosures, marketing, custody of customer assets and conflicts of interest.
• Market integrity. Prohibitions on manipulation, insider dealing and misleading claims.
• Financial stability. Special attention to stablecoins and to links between crypto firms and banks.
• Tax. How gains, income and transfers are measured and reported.
• Consumer and data rules. Advertising standards, privacy law and, for gambling products, licensing and age limits.

Why do approaches differ so much? Legal traditions, financial-sector priorities and attitudes toward innovation all vary. Some jurisdictions apply existing securities, commodities and payments law to crypto. Others write bespoke laws. A few restrict or prohibit activity outright.

For readers, the practical point is that three questions matter more than any ranking of countries. What is the asset legally classified as? Who is the regulated party you deal with? And where are you resident for tax and consumer-protection purposes? The sections below follow the main regions and themes, starting with the international standards that shape national laws.

No global body can pass binding crypto law, but several set standards that countries copy. Knowing them explains why national rules look similar.

FATF. The Financial Action Task Force sets anti-money-laundering standards. Its Recommendation 15 extends those standards to virtual assets and virtual asset service providers (VASPs). Since 2019 it has included the Travel Rule, which expects VASPs to collect and pass on originator and beneficiary information for transfers above a threshold. Countries are assessed on how well they implement this, and many have written the Travel Rule into law.

Financial Stability Board (FSB). The FSB coordinates G20 financial regulators. It has issued recommendations on regulating crypto-asset activities and global stablecoin arrangements, aimed at consistent oversight across borders.

IOSCO. The securities regulators' organisation has published recommendations on crypto trading platforms, custody, conflicts of interest and market abuse.

Basel Committee. It sets prudential standards for how banks treat crypto exposures, which affects how willing banks are to hold or service crypto assets.

OECD. The Crypto-Asset Reporting Framework (CARF) is a tax-transparency standard under which platforms collect and report user data so that tax authorities can exchange it. Participating jurisdictions are phasing it in, with the EU implementing similar rules through its DAC8 directive.

These standards are not laws on their own. The date and detail of adoption differ by country, which is why a platform can be fully compliant in one market and unavailable in another. When you read about a country's regime, look for how it implements the Travel Rule, how it defines a service provider and whether it has signed up to CARF-style reporting.

The United States has no single crypto statute covering everything. Instead, several agencies apply their own laws, and policy has shifted noticeably in recent years, so always check current developments.

Who regulates what

Body	Typical focus
SEC	Crypto assets that are securities, offerings, exchanges and brokers dealing in them
CFTC	Commodity derivatives and fraud or manipulation in commodity markets, which has included some crypto
FinCEN (Treasury)	Anti-money-laundering rules for money services businesses, including many crypto firms
OFAC	Sanctions compliance, including on blockchain addresses
IRS	Tax treatment of digital assets, which are treated as property
Banking regulators	Bank involvement with crypto and stablecoins
State regulators	Money transmitter licences and some state-specific crypto licences

The central long-running question has been which tokens are securities, usually assessed under the Howey test from case law. Court decisions and agency enforcement priorities have changed how that plays out in practice.

Stablecoins now have a federal framework: the GENIUS Act, signed in July 2025, set rules for payment stablecoin issuers, including reserve backing and oversight. Broader market-structure legislation, which would divide authority between the SEC and CFTC, has been debated in Congress. Its status changes quickly, so check a current legislative tracker before relying on any summary.

For users, the practical consequences are state-level licensing differences, tax reporting by US-based platforms, and the fact that some products are limited to or excluded from US customers. Law firm policy trackers and the agencies' own websites are the best places to follow changes.

European Union. The Markets in Crypto-Assets Regulation (MiCA) is the EU's main framework. Its rules for asset-referenced tokens and e-money tokens (stablecoins) began applying in mid-2024, and the full regime for crypto-asset service providers began at the end of 2024. It covers authorisation of exchanges, custodians and other providers, white-paper requirements for issuers, governance and consumer-protection rules, and market-abuse provisions. A provider authorised in one member state can passport its services across the bloc. Transitional periods let some existing firms continue under national rules for a limited time, so check the date that applies in each country.

Alongside MiCA, the EU's Transfer of Funds Regulation applies the Travel Rule to crypto transfers, and the DAC8 directive extends tax reporting to crypto-asset service providers from 2026. MiCA does not neatly cover fully decentralised services without an identifiable operator, and NFTs are largely outside its scope unless they are part of a series that behaves like fungible assets.

United Kingdom. The UK sits outside MiCA. Crypto businesses must register with the Financial Conduct Authority for anti-money-laundering supervision, and a financial promotions regime has applied to crypto marketing since late 2023. The government has been developing a broader regime for cryptoassets, including stablecoins, under existing financial services law. Check the FCA's register to confirm whether a firm is authorised or registered, because registration for AML purposes is not the same as being approved for investor protection.

Other European countries, such as Switzerland, have their own financial-market laws and licensing for crypto businesses.

Asia-Pacific contains some of the most detailed licensing regimes and some of the strictest restrictions.

• Singapore. The Monetary Authority of Singapore licenses digital payment token services under the Payment Services Act, with rules on AML, customer asset segregation and limits on marketing to the public. It has also tightened requirements on retail access and on firms serving only overseas customers.
• Hong Kong. A licensing regime exists for virtual asset trading platforms supervised by the Securities and Futures Commission. A stablecoin ordinance took effect in 2025, creating a licensing system for fiat-referenced stablecoin issuers.
• Japan. Crypto exchanges must register with the Financial Services Agency under the Payment Services Act, and the country has strict custody and listing practices. Discussion continues about moving crypto closer to securities-style law and revising tax treatment.
• South Korea. Exchanges must follow real-name banking and AML rules, and the Virtual Asset User Protection Act, in force from mid-2024, adds protections around custody and market abuse.
• India. There is no comprehensive crypto law. Gains are taxed at a flat rate and transfers attract tax deducted at source, while the broader legal position remains under discussion.
• Australia. Crypto exchanges register with AUSTRAC for AML purposes, and the government has been developing a licensing framework for platforms and custody providers.
• Mainland China. Financial institutions and payment firms may not provide crypto services, and trading and mining have been prohibited since 2021, although the position of individual holding is more nuanced.

Because details change often, treat this as a map of approach rather than a current rulebook, and check each regulator's website.

United Arab Emirates. The UAE has built a reputation as a licensing hub. Dubai has a dedicated regulator, the Virtual Assets Regulatory Authority (VARA), which issues licences by activity such as exchange, custody and advisory. Abu Dhabi's financial free zone, ADGM, has its own framework. Federal bodies also play a role, and rules differ by emirate and free zone.

Bahrain and other Gulf states. Some have central-bank-led licensing for crypto-asset services, while others are more cautious.

Africa. Approaches are mixed. Some countries have developed licensing regimes, while others have restricted banks from dealing with crypto or have banned it. Several nations have introduced or proposed crypto laws recently. Adoption is high in some markets, so regulators are paying attention to consumer protection and capital-flow concerns.

Latin America.

• Brazil has passed a framework for virtual-asset service providers, with the central bank setting detailed rules.
• Argentina allows crypto investment, though crypto is not legal tender, and has a registry for service providers.
• El Salvador made bitcoin legal tender in 2021 but agreed with the IMF in 2025 to make acceptance voluntary for businesses and to scale back state involvement.
• Other countries have applied existing tax and AML law while debating bespoke rules.

Legal tender status is rarer than people think. In most places crypto is treated as an asset, a commodity or property rather than currency, and you must still pay tax and follow AML rules when using it. If a country is described as having adopted crypto, find out exactly what that means: a payments rule, a tax regime, a licensing system or something symbolic.

Some countries restrict crypto far more than the regions above. Restrictions fall into a few types:

• Outright bans on trading and financial services. Several countries prohibit exchanges or bar banks and payment firms from serving crypto customers.
• Mining bans. Some governments have restricted or prohibited mining, often citing energy use or power-grid strain.
• Limits on individuals only. In some places holding is not illegal, but using crypto for payments, advertising it or promoting it is.
• Capital controls. Where authorities limit moving money abroad, they may also restrict crypto transfers.

A country's stance can change quickly. Some governments that once banned or restricted crypto have later introduced licensing, and others have moved in the opposite direction. Older country lists, including those published several years ago, may now be inaccurate, so treat them as history.

It also matters whether a restriction targets users or businesses. A ban on regulated firms does not necessarily make personal ownership a crime, but it can make it harder to use banks and local exchanges, and may leave you without consumer protection.

If you live in or travel to a country with restrictions, do not assume that using offshore platforms makes your activity legal or protects you. Legal exposure depends on your residence, and sanctions and geo-restrictions apply regardless of the technology. Check government and regulator websites or take qualified local advice. This guide does not recommend any method of bypassing restrictions.

Two themes cut across almost every jurisdiction: stablecoins and tax.

Stablecoins. Regulators treat fiat-backed stablecoins as payment instruments with potential systemic risk. Typical requirements include full reserve backing in high-quality liquid assets, redemption rights at par, regular disclosure or audits, and licensing of the issuer. The EU's MiCA, Hong Kong's ordinance, Singapore's framework and the US GENIUS Act all follow this pattern in different ways. Algorithmic or unbacked designs face far more scrutiny. When you hold a stablecoin, check who issues it, where reserves are held and in which jurisdictions it is authorised.

Tax. Most tax authorities treat crypto as property or an asset class, which creates taxable events such as selling for fiat, swapping one token for another and spending crypto on goods. Many also tax income from mining, staking, airdrops and employment paid in tokens. Rates, holding-period rules and loss treatment vary, and a few countries have low or zero rates for private investors in some circumstances.

Reporting is growing quickly. Platforms in participating countries are expected to collect user tax-residency details and report them under OECD CARF and the EU's DAC8, so assume your exchange activity can be visible to tax authorities.

Good record-keeping basics

1. Export transaction histories from every exchange and wallet.
2. Record the date, amount, counterparty address and value in your local currency for each event.
3. Note fees, bridge transfers and swaps, as they may count as disposals.
4. Consult a qualified tax adviser in your country for anything unusual.

Decentralised finance, DAOs and SocialFi apps raise a particular problem: there may be no single company to license. Regulators are responding in several ways.

• Looking through to control. If a team, foundation or small group can upgrade contracts, control fees, hold admin keys or direct the treasury, regulators may treat them as the responsible party.
• Regulating the interface. Websites, apps and wallet providers that connect users to protocols may fall under licensing, AML and marketing rules.
• Treating tokens by function. Governance tokens, utility tokens and tokens promising profit are analysed on their features, not their label.
• Targeting specific risks. Sanctions on certain smart contracts and addresses, and enforcement against fraud, have affected how protocols and front ends operate.
• Legal wrappers for DAOs. Some jurisdictions recognise DAOs through special legal structures, while others may treat members as partners in a general partnership with unlimited liability.

SocialFi products add data-protection and advertising questions on top of financial rules. A product like Tomo, a social crypto wallet offered through Telegram, an app, a browser extension and a developer SDK, shows the range of issues. A wallet may be self-custodial, in which case licensing obligations can differ from a custodial service, but features such as swaps, fiat on-ramps or in-app rewards can bring in third-party providers that have their own KYC and regional restrictions. Read the terms to see who provides each feature, where the operator is based and which countries are excluded.

The broad takeaway is that calling something decentralised does not settle its legal status. Check how it is actually operated.

Crypto casinos sit at the intersection of two regulated fields. In most countries, gambling law applies regardless of whether players pay in fiat or crypto. That usually means the operator needs a gambling licence from a recognised authority, must verify that players are of legal age and identity, and must apply AML controls.

Points to understand:

• Age limits. The minimum is 18 in many places and 21 in others. Gambling is for adults only.
• Local legality. Online gambling is legal and licensed in some countries, restricted to state monopolies in others and prohibited elsewhere. Check the law where you live, including at state or regional level.
• Licensing. A licence from a gambling authority is not a guarantee of fair treatment, since regulators differ in standards, dispute processes and enforcement. Look at which authority licensed the operator and what it requires.
• KYC and source-of-funds checks. Licensed operators commonly ask for identity documents, especially for withdrawals. These checks are legal requirements, not optional extras.
• Restricted territories. Operators list countries they do not serve. Do not use tools to hide your location or bypass geo-blocks, age checks or KYC. Doing so can breach the terms, lead to confiscated funds and may be illegal.
• Tax. Winnings may be taxable depending on the country, and crypto price movements may create a separate tax event.

Gambling can cause harm. Set deposit limits, use self-exclusion tools where available and seek help from a local support service if gambling stops being fun.

Because rules change often, build a repeatable check rather than relying on a single article. A short routine covers most cases.

1. Confirm your own status. Work out your tax residence and where you are physically located when you use a service. Both can matter.
2. Identify the legal entity. Find the company behind the service, its country of incorporation and its licence number, then verify the licence on the regulator's own public register.
3. Read the restricted-countries list. If your country is excluded, do not use the service.
4. Check custody. Is it custodial or self-custodial? If custodial, ask what happens to your assets if the company fails and whether they are segregated.
5. Look at the compliance requirements. Expect KYC, Travel Rule data and possibly source-of-funds questions. Treat refusal to apply any checks as a warning sign.
6. Understand the tax treatment. Keep complete records and speak to a qualified adviser for complex activity such as DeFi, staking or token launches.
7. Follow primary sources. Regulator websites, central banks, finance ministries and reputable legal trackers are better than social media summaries. Check the date on anything you read.
8. Be careful with marketing. Promotions that guarantee returns or pressure you to act quickly are often unlawful in regulated markets.

Nothing in this guide is legal or tax advice. Rules differ by country and change over time, so verify the current position with the relevant authority or a qualified professional before you act.