Gibraltar

Licensing, Authorisation & Market Access

Gibraltars payments market-access architecture remains in a structurally unresolved transitional state. Gibraltar-licensed payment institutions and electronic money institutions currently access the UK market under a transitional arrangement that runs only to 31 December 2026, a fixed and approaching expiry date rather than an open-ended accommodation. The permanent replacement, the Gibraltar Authorisation Regime, was described in a June 2026 ministerial statement as still roughly eighteen months away from being operational, with its progress tied in part to amendments proceeding through the UK Financial Services and Markets Bill currently before Parliament. This creates a visible gap: the transitional window closes at the end of this year, while the permanent regime intended to succeed it is not expected to be in place until well into 2027 or later, leaving open the question of whether a further extension to the transitional arrangement will be required to bridge that gap.

The UK-EU Agreement in respect of Gibraltar, signed 14 July 2026 and provisionally applied from the same date, does not alter this picture, and firms should not read it as resolving any part of the market-access question. The Agreement is substantively an AML/CFT non-regression instrument; it confirms no EU-side passporting or market-access right for Gibraltar-licensed payment or e-money firms. Gibraltars market-access position therefore continues to depend entirely on the UK leg of the relationship, specifically the transitional arrangement and its eventual permanent successor, rather than on any EU-side mechanism.

This combination, a time-limited UK transitional window, a permanent regime still materially distant, and no EU-side alternative, constitutes the dominant licensing and market-access theme for Gibraltar this cycle. It is a structural, not episodic, condition: no single enforcement action or licence decision drives it, but rather the pace at which UK primary and secondary legislation accommodating a permanent Gibraltar framework progresses, set against a transitional arrangement with a fixed and now relatively near expiry date.

Outlook

The clearest forward marker is 31 December 2026, the expiry date of the current transitional passporting arrangement. Firms licensed in Gibraltar and relying on UK market access should treat the period between now and that date as the operative window for either the permanent Gibraltar Authorisation Regime reaching a sufficiently advanced stage, or a further extension to the transitional arrangement being agreed; absent either development occurring, Gibraltar-licensed firms could face a market-access gap into 2027. Progress of the UK Financial Services and Markets Bill through Parliament is the legislative vehicle most directly tied to how quickly the permanent regime can be finalised, and is accordingly the single most relevant external development to monitor for this module going forward.

Licensing, Authorisation & Market Access

Gibraltar's market-access position for payment and e-money firms serving the UK rests on a temporary arrangement that is approaching its scheduled end. The FSMA (Gibraltar) Order 2001 established a passporting bridge allowing Gibraltar-licensed firms to access the UK market; this bridge was extended by SI 2025/1182 and is now due to expire on 31 December 2026. The intended permanent replacement, the Gibraltar Authorisation Regime (GAR) established under the UK Financial Services Act 2021, has not yet become operational. A ministerial statement from Minister Feetham indicated the regime remained roughly 18 months from introduction as at the time the statement was made, meaning the permanent regime is unlikely to be ready before the temporary bridge expires on its current schedule.

The practical effect for Gibraltar-licensed electronic-money institutions and payment institutions currently serving UK customers under the temporary bridge is a forward-looking market-access risk: if neither the GAR becomes operational nor the bridge is further extended before 31 December 2026, these firms face a gap in their ability to continue serving UK customers on the basis they currently rely on. No evidence this cycle indicates whether a further extension is under active consideration or confirmed.

Outlook

The critical date is 31 December 2026. Firms and counterparties should watch for either confirmation of GAR operability or a further extension announcement well ahead of that date; neither was evidenced as having occurred as at this record.

Licensing, Authorisation & Market Access

Gibraltar's payment and e-money institutions continue to access the UK market through transitional rather than permanent arrangements. The UK-GI transitional passporting arrangements, originally established under SI 2019/589, have been extended to 31 December 2026 via the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025. This is confirmed at high confidence via a T1 Bank of England source. The permanent Gibraltar Authorisation Regime (GAR), which is intended eventually to replace this transitional bridge with a settled bilateral market-access framework, remains not-yet-operational.

The practical consequence for both bank and non-bank payment institutions and e-money institutions operating from Gibraltar into the UK is continued reliance on a bridging legal mechanism now extended for a further twelve months, rather than the durable market-access certainty a permanent regime would provide. This affects both bank-affiliated and non-bank PI/EMI structures, as the transitional arrangements apply across both categories.

Outlook

The extension to 31 December 2026 sets the next clear decision point: either the GAR becomes operational before that date, providing a permanent basis, or the transitional arrangements will need extending again. Persistent reliance on transitional rather than permanent arrangements, now stretching across multiple extensions, itself signals unresolved structural uncertainty for GI-domiciled PSPs and EMIs dependent on UK market access.

Licensing, Authorisation & Market Access

Gibraltar's financial-services market access has bifurcated durably this cycle. The UK-EU Agreement on Gibraltar, signed 14 July 2026 and provisionally applied from 15 July 2026, covers movement of people, customs, indirect taxation, goods, transport, security cooperation and governance but explicitly does not extend to financial-services passporting or other services passporting for Gibraltar-licensed firms. This is a scope carve-out rather than an ambiguous gap: EU market access for Gibraltar-licensed payment institutions and e-money institutions remains closed under this treaty specifically.

UK market access continues instead through a separate bilateral instrument, the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025, which extends transitional UK-Gibraltar financial-services market access to 31 December 2026. This is distinct in both legal basis and durability from the EU treaty: it is a time-limited UK domestic regulation rather than an international treaty provision, and it carries a hard expiry date absent further extension.

Gibraltar also entered a customs union with the European Union from 10 April 2026, introducing a new Transaction Tax starting at 15 percent and rising to 17 percent. This customs arrangement is goods-only; it does not cover services, so the cross-border supply of payment and e-money services by Gibraltar-licensed EMIs and PIs is unaffected by these customs provisions. Separately and without change this cycle, the Gibraltar Financial Services Commission continues to apply an e-money capital-buffer requirement set at the minimum requirements imposed by the second Electronic Money Directive (2009/110/EC) increased by 20 percent -- a standing bank-vs-non-bank-relevant prudential requirement that sits on top of the EMD2 floor specifically for Gibraltar-licensed e-money institutions, distinguishing their capital treatment from that of bank-based payment providers.

Outlook

The 31 December 2026 expiry of the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025 transitional provisions is the key date to track. Absent a further extension, Gibraltar-licensed EMIs and PIs with UK-facing business would lose their transitional UK market-access basis at that point, while EU access remains separately foreclosed by the July 2026 treaty's explicit scope carve-out -- compounding into a genuine cliff-edge risk for firms dependent on either corridor.

Licensing, Authorisation & Market Access

Gibraltar's payments market-access framework is in a transitional state. The Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025 extend UK-Gibraltar passporting arrangements to 31 December 2026, pending the permanent Gibraltar Authorisation Regime, which has not yet come into force. Trade commentary describes the GAR as a unique, permanent mutual-market-access framework for Gibraltar-based banks, insurers, investment managers, payment service providers, and e-money institutions, a status not available to any other Overseas Territory, Crown Dependency, or third country; it remains pending, and the transitional passporting extension is the operative mechanism in the meantime.

The 2026 UK-EU Gibraltar Treaty, provisionally applied from 15 July 2026, explicitly excludes financial services and other services from its scope except where those services distort trade in goods. This confirms that UK-Gibraltar financial-services access, including payments market access, is handled entirely separately from the Treaty framework; the GAR and the transitional passporting arrangements, not the Treaty, are the operative instruments governing market access for payment institutions and e-money institutions.

Separately, and on the EU/EEA side, Gibraltar Financial Services Commission-authorised e-money institutions and payment institutions have been unable to passport into EEA member states since 1 January 2021, following the post-Brexit loss of EEA passport rights. GFSC authorisation remains the sole route to operate as an e-money institution or payment institution in or from Gibraltar. This structural fact, EEA access permanently foreclosed and UK access transitional pending the GAR, defines Gibraltar's current market-access posture for payment institutions and e-money institutions, though this cycle's sourcing does not differentiate the practical authorisation pathway for non-bank payment institutions and e-money institutions from that available to banks under the prospective GAR.

Outlook

The permanent Gibraltar Authorisation Regime, expected around the fourth quarter of 2026, is the clearest forthcoming development for this module, and would supersede the transitional passporting extension currently running to 31 December 2026. Confirmation of Gibraltar-side implementing detail for the passporting extension itself, and of whether the GAR will preserve existing activity-level authorisations for payment institutions and e-money institutions without a fresh application, are the two open questions most likely to be resolved next.

Conduct, Safeguarding & Financial Promotions

Gibraltars safeguarding conduct regime for payment institutions and electronic money institutions was substantially overhauled with the commencement, on 16 July 2026, of new Schedules 4 and 5 to the Financial Services (Payment Services) Regulations 2020 and the Financial Services (Electronic Money) Regulations 2020, introduced by Legal Notices 2026/224 and 2026/225 respectively and published in the Gibraltar Gazette, No. 5328, of that date. The changes move Gibraltars safeguarding regime from a comparatively general set of obligations toward a detailed, operationally specific framework covering diversification of safeguarding arrangements, reconciliation methodology, resolution-pack content, and periodic audit.

Under the amended Electronic Money Regulations, an institution must periodically review whether it is appropriate to diversify, or further diversify, the third parties with which it deposits, holds, invests, insures or guarantees relevant funds, and must adjust the third parties used and the amounts deposited where it concludes diversification is appropriate, placing an active, recurring diversification-assessment duty on institutions rather than a one-off structuring decision. Institutions using insurance or a guarantee, alone or combined with segregation, that provides unlimited cover are relieved of the internal safeguarding reconciliation requirement but must instead perform a daily calculation of their safeguarding requirement, a substitution of one control (daily calculation) for another (reconciliation) rather than a net reduction in obligation. A new statutory no-recourse, no-combination, no-set-off protection applies to the safeguarding account itself: the account provider has no interest in, recourse or right against money or assets in the safeguarding account for sums owed to it or a third party on another account, and no right to combine the safeguarding account with another account or exercise set-off or counterclaim against the safeguarded money or assets, reinforcing the ring-fenced character of safeguarded funds at the custodial level.

A new annual audit obligation, set out in Schedule 5, applies to institutions that have been required to safeguard more than GBP 100,000 of relevant funds at any time for a period of at least 53 weeks; the auditors report must be delivered to the GFSC within four months of the end of the period covered, with a copy provided to the institution at the same time. Where an institution relies on unlimited insurance or guarantee cover and so performs the daily calculation in lieu of reconciliation, paragraph 11(2) specifies that this daily calculation substitutes for the internal reconciliation obligation rather than operating alongside it. A defined resolution-pack obligation requires that certain documents and records, including those identifying funds and assets institutions and insurance or guarantee providers, acknowledgement letters, policies or guarantees, documents identifying relevant individuals, and the most recent internal and external audit reports, be retrievable immediately under paragraph 23(2); separately, an administrator, receiver, trustee, liquidator or analogous officer appointed over the institution must be able to retrieve each required document within 48 hours of appointment, giving the resolution pack direct operational relevance in an insolvency scenario rather than leaving it a purely documentary exercise. On insolvency itself, regulation 34(1)(a) gives electronic money holders claims priority over all other creditors from the asset pool, and regulation 34(1)(b) bars set-off or security rights over the asset pool until those claims are paid in full, save for set-off relating to fees and expenses of operating an account.

The GFSC supported these statutory changes with a new Guidance Note on Safeguarding for payment institutions and electronic money institutions, announced 20 July 2026, setting out its expectations on safeguarding of customer funds, safeguarding resolution packs, and safeguarding audit requirements, issued in close proximity to the Schedule 4/5 commencement date. Monthly regulatory reporting timelines for electronic money institutions were also tightened, with institutions now required to submit required returns within 15 business days after the end of each calendar month under new regulation 32A(1), excluding the month in which the institution first became an electronic money institution.

Outlook

With the Schedule 4/5 changes now in force, the near-term focus shifts to how institutions operationalise the new diversification-review, reconciliation-or-daily-calculation, and resolution-pack requirements, and whether the GFSCs supporting Guidance Note, once its full content is available, surfaces supervisory expectations beyond the bare statutory text. The GBP 100,000/53-week audit threshold is likely to be the first point at which a visible population of institutions newly falls within scope of the annual audit obligation, making it a natural marker for assessing how broadly the new Schedule 5 regime bites in practice.

Conduct, Safeguarding & Financial Promotions

Gibraltar's safeguarding and governance requirements for payment and e-money firms were tightened by LN 2026/225, which amended the 2020 E-Money Regulations' safeguarding and governance provisions. This amendment has been in force since 16 July 2026. The amendment sits within the existing E-Money Regulations framework rather than introducing a wholly new regime, strengthening the governance and asset-safeguarding obligations applicable to licensed e-money issuers and payment institutions operating from Gibraltar.

Separately, the FCA's CASS 15 Supplementary Safeguarding Regime took effect in the UK from 7 May 2026 for UK-regulated payment and e-money institutions, including a Gibraltar firm that operates via a UK branch. A Gibraltar-licensed firm accessing the UK market solely through the temporary passporting bridge, rather than through a UK branch, is not itself brought into scope of CASS 15 by that access route alone; the distinction between branch-based and passporting-based UK presence is material to which safeguarding regime applies.

Outlook

Firms should monitor whether further safeguarding amendments follow the July 2026 tightening, and should track their own UK presence structure (branch versus passporting bridge) against the CASS 15 scope boundary as the 31 December 2026 bridge expiry approaches.

Conduct, Safeguarding & Financial Promotions

A significant UK conduct-side change with direct relevance to Gibraltar market access is set to take effect this cycle. The FCA's Supplementary Safeguarding Regime under CASS 15 takes effect 7 May 2026 for UK-regulated payment institutions and e-money institutions, and specialist commentary describes it as the most significant PI/EMI safeguarding overhaul in a decade. This is assessed Probable, sourced via specialist secondary commentary.

The safeguarding mechanism itself operates through segregation requirements for customer funds held by PIs and EMIs. Because continued Gibraltar market access is understood to be conditioned on maintaining equivalent standards to the UK regime, this UK-domestic conduct change carries a direct, if indirect, compliance implication for Gibraltar-domiciled PI/EMI firms: they are expected to meet an equivalent safeguarding bar even though CASS 15 is not itself a Gibraltar instrument.

Outlook

The key point to watch is how the equivalent-standards expectation is formally operationalised for Gibraltar firms — whether through the current transitional passporting arrangement's own conditions, through future GAR conditions once that regime becomes operational, or through some other mechanism. No Gibraltar-specific instrument implementing an equivalent safeguarding standard was located this cycle.

Conduct, Safeguarding & Financial Promotions

Gibraltar's conduct framework for GFSC-licensed firms includes retail-client-outcome obligations under the Financial Services (Core Principles and Consumer Duty) Regulations 2024, effective 9 May 2024. These obligations currently apply within the scope those Regulations established at the time of their effect.

The Gibraltar Financial Services Commission has separately signalled a possible expansion of Consumer Duty scope to cover all retail customers, not solely UK customers, during 2026 to 2027. This is a forward-looking signal rather than an in-force change: no enacted instrument implementing the expansion was identified this cycle, and the timeline carries a multi-year uncertainty band. Firms currently limiting Consumer Duty-equivalent retail protections to UK customers, on the basis that the 2024 Regulations' effective scope was UK-customer-focused, should treat the signalled all-retail-customer expansion as a live planning item rather than a settled requirement.

No safeguarding-specific development was identified for Gibraltar this cycle.

Outlook

Whether and when the GFSC's signalled Consumer Duty scope expansion is formally enacted is the clearest item to watch for this module. Firms should expect further clarity during 2026 to 2027 per the currently signalled timeline, though the instrument giving it legal effect had not been identified as at this cycle.

Stablecoins & Digital Money

Gibraltar's regulatory treatment of stablecoins and digital money has advanced on specific, narrow fronts rather than through a comprehensive framework. Regulation 22 of the Prediction Market Regulations 2026 permits stablecoin settlement within licensed prediction markets. Separately, the PCC Amendment Act 2026 provides a clear statutory pathway for the issuance of tokenised fund shares within a regulated environment, extending Gibraltar's protected-cell-company fund structures into tokenised form. A DLT/VAA dividend non-objection mechanism was also added on 26 March 2026, giving licensed digital-asset providers a formal route to seek regulatory non-objection before dividend distributions.

Taken together, these developments show Gibraltar's digital-money framework advancing through targeted, instrument-specific accommodations — a settlement carve-out for one licensed activity, a tokenisation pathway for fund shares, a dividend mechanism for DLT/VAA providers — rather than a single consolidated stablecoin or digital-money statute. Each instrument addresses a distinct use case within Gibraltar's broader digital-asset regulatory architecture.

Outlook

Whether these targeted accommodations are consolidated into a broader stablecoin or digital-money framework, or whether further instrument-specific carve-outs continue to be the pattern, is the item to watch going forward.

Stablecoins & Digital Money

The Prediction Market Regulations 2026 (LN.2026/176), in force from 13 July 2026, expressly permit funding and settlement of prediction-market contracts via digital-asset payments, including stablecoins. This is a usage-side authorisation: it permits stablecoins to be used as a settlement rail for a specific, newly created regulated-activity category, rather than establishing a freestanding stablecoin-issuance, reserve, or redemption regime. No dedicated Gibraltar stablecoin-issuer licensing or reserve-backing statute was evidenced this cycle; the regulation's contribution to the stablecoin landscape is confined to authorising a particular use case for stablecoin settlement within the prediction-market activity class.

This development sits on top of Gibraltar's existing DLT regulatory infrastructure administered by the Gibraltar Financial Services Commission, and represents the jurisdiction extending an already-established digital-asset regulatory base into a new product vertical (prediction markets) rather than building new stablecoin-specific rules from first principles.

Outlook

Whether Gibraltar will follow this usage-side authorisation with a dedicated stablecoin-issuance framework, or whether stablecoin settlement will continue to be authorised only on a per-use-case basis as with the prediction-market category, is the item to track going forward.

Two commercial developments mark Gibraltar's fintech landscape in this window. First, Bullish Group announced in a late-June 2026 press release (issuer-reported; pending primary GFSC register/instrument confirmation) that it received GFSC approval to offer trading in tokenised securities. Second, the Protected Cell Companies (Amendment) Act 2026 enabled Experienced Investor Funds to issue tokenised cell shares.