Crypto Regulation by Country Statistics 2026: Legal Status, Tax and Licensing

Cryptocurrency is legal in 45 of the 75 countries studied, partially banned in 20, and generally banned in 10, according to Atlantic Council data from its cryptocurrency regulation tracker. In twelve G20 countries, representing over 57% of the world’s GDP, cryptocurrencies are fully legal, and regulation is under consideration in all G20 countries.

Crypto regulation by country now turns on three practical questions rather than one. Which licence a firm needs, what tax applies to a disposal, and whether anti-money-laundering rules reach the activity at all. The Financial Action Task Force reported that 73% of respondents to its 2025 survey, 85 of 117 jurisdictions, have passed legislation implementing the Travel Rule. The distance between those two counts, permission on one side and working supervision on the other, is the more useful lens for comparing national regimes.

Key Takeaways

• Permission splits three ways. Cryptocurrency is legal in 45 of 75 countries, partially banned in 20 and generally banned in 10, and adoption rates are weakly correlated with regulatory restrictiveness.
• Legislation is not supervision. 85 of 117 jurisdictions have passed legislation implementing the Travel Rule, yet only 47 of 99 jurisdictions more advanced in regulating VASPs require certain DeFi arrangements to be licensed or registered as a VASP.
• In twelve G20 countries, representing over 57% of the world’s GDP, cryptocurrencies are fully legal.
• The MiCA transitional period ended on 1 July 2026, and ESMA expects unauthorised providers to immediately stop onboarding new EU clients.
• UK firms can apply for FCA authorisation between 30 September 2026 and 28 February 2027.
• MAS has set the bar high for licensing and will generally not issue a licence to digital token service providers serving only customers outside Singapore, a scope that applies from 30 June 2025.
• Hong Kong’s published licence dates for virtual asset trading platforms run from 15 December 2020 to 18 May 2026.

Editor’s Choice

• 75 countries make up the study set of the cryptocurrency regulation tracker compiled by the Atlantic Council.
• 130 countries, plus some regional organizations that have issued laws or policies on the subject, feature in the global legal survey run by the Law Library of Congress.
• 117 jurisdictions were counted in the 2025 Travel Rule survey conducted by FATF.
• India applies a flat rate of 30% plus surcharge and cess to income from the transfer of virtual digital assets.
• Ireland’s rate of capital gains tax is 33% for most gains.
• Higher and additional rate taxpayers pay 24% on their gains from 6 April 2026 in the United Kingdom.
• The new mandatory regime for UK crypto firms comes into force on 25 October 2027.

Crypto Regulation by Country: The Global Legal Status Scoreboard

• Among the 75 countries studied, cryptocurrency is legal in 45, partially banned in 20, and generally banned in 10, per Atlantic Council tracker data.
• Regulation is under consideration in all G20 countries, and in twelve of them, representing over 57% of the world’s GDP, cryptocurrencies are fully legal.
• The tracker reports that cryptocurrency adoption rates are weakly correlated with regulatory restrictiveness, and that even for countries with partial or general bans in place, adoption rates remain high.
• Stablecoins are moving to the center of global crypto regulation, with 12 G20 economies addressing them through existing or proposed legislation, and the US, Canada, Japan, the EU and the UK advancing dedicated rules.
• The Law Library of Congress survey covers 130 countries as well as some regional organizations that have issued laws or policies on the subject.
• That survey’s 2014 predecessor covered forty foreign jurisdictions and the European Union, an expansion the authors attribute to cryptocurrencies becoming ubiquitous over the following four years.

Three global trackers disagree on scope because they answer different questions. The Law Library of Congress catalogues whether a legal position exists at all. The Atlantic Council sorts countries into permission tiers, while FATF measures whether AML obligations have made it into law.

Source: ESMA, FCA, MAS, SFC, Japan FSA, SEC Nigeria and Income Tax Department of India registers and statements, September 2026

About This Data

The figures here are compiled from 18 captured sources: 17 primary regulator, government, or institutional publications, plus one institutional tracker. Publication dates run from the Law Library of Congress global survey of 2018 to Japan’s FSA register entry of 21 August 2026. Only official registers, statutes, regulator statements and institutional research qualified for inclusion. Figures are reviewed on a rolling basis and updated when the underlying registers or reports publish new editions.

Don't chase the news. Let us curate it.

You get one weekly briefing with only the stories that matter. If the market is quiet, we skip it.

Email address

Get the Weekly Briefing - it's free!

✅ Join readers from Visa, Mastercard, Vanguard, and the FDIC.

How Many Countries Regulate Crypto and How Mature Those Regimes Are

• The legal tier accounts for 45 of the 75 tracked countries, against 20 partial bans and 10 general bans.
• The Markets in Crypto-Assets Regulation institutes uniform EU market rules for crypto-assets and covers crypto-assets that are not currently regulated by existing financial services legislation.
• Singapore regulates digital token service providers under the Financial Services and Markets Act 2022.
• India computes income from the transfer of virtual digital assets without any deduction except for the cost of acquisition and taxes it at a flat rate of 30% plus surcharge and cess.
• Nigeria’s Securities and Exchange Commission holds that virtual crypto assets are securities unless proven otherwise, placing the burden of proof on the issuer or sponsor.

Counting permissions only gets a reader halfway. The regimes behind those counts differ in what they require of a firm. We sort them into four maturity tiers, drawn from the primary instruments rather than from secondary summaries.

Source: ESMA, MAS, FCA, Income Tax Department of India and SEC Nigeria, 2026

That weak correlation is worth setting against the crypto adoption rates by country picture. There, the ranking of leading markets is driven by usage rather than by permission.

Recent Developments

• 23 June 2026: Per ESMA, unauthorised crypto-asset service providers must wind down activities after the end of the MiCA transitional period on 1 July 2026.
• 30 June 2026: The FCA set out rules requiring all crypto firms to meet financial resilience requirements, including capital and stress testing, alongside new market integrity rules covering insider trading and market manipulation.
• 1 July 2026: ESMA told unauthorised providers to immediately stop onboarding new EU clients, refrain from opening new client relationships or accounts, and cease marketing activities and solicitation.
• 8 July 2026: ESMA launched a Common Supervisory Action on the digital operational resilience of crypto-asset service providers, focused on custody, running from the second half of 2026 to the first half of 2027.
• 21 August 2026: Japan’s Kanto Finance Bureau entered Laser Digital Japan on the FSA’s register of crypto-asset exchange service providers under registration number 00032.

FATF Travel Rule Implementation by Jurisdiction

• For the 2025 survey, 73% of respondents, 85 of 117 jurisdictions excluding those that prohibit or plan to prohibit VASPs explicitly, have passed legislation implementing the Travel Rule.
• Around half of jurisdictions more advanced in regulating VASPs, 48% or 47 of 99, are requiring certain DeFi arrangements to be licensed or registered as a VASP.
• FATF attributes that shortfall to the continuing difficulty of identifying individuals or entities exercising control or influence over DeFi arrangements.
• Since 2024, the use of stablecoins by illicit actors, including DPRK actors and terrorist financiers, has risen, with most on-chain illicit activity now involving stablecoins.

By the numbers: FATF’s 2025 survey puts Travel Rule legislation in 85 of 117 jurisdictions, while only 47 of the 99 jurisdictions more advanced in regulating VASPs extend registration to DeFi arrangements. Legislating an AML obligation and supervising the venues it applies to are running on visibly different timetables.

That is the gap worth naming. A country can sit in the legal tier of every tracker and still leave much on-chain activity outside its supervisory perimeter. Permission counts alone make a poor basis for comparing jurisdictions. The cryptocurrency anti-money-laundering statistics track how that perimeter has moved as national AML rules caught up with the standard.

EU MiCA Regulation and CASP Authorisation

• The Markets in Crypto-Assets Regulation entered into force in June 2023 and institutes uniform EU market rules for crypto-assets not currently regulated by existing financial services legislation.
• Key provisions for issuers and traders of crypto-assets, including asset-referenced tokens and e-money tokens, cover transparency, disclosure, authorisation and supervision of transactions.
• ESMA developed the Level 2 and Level 3 measures with the EBA, EIOPA and the ECB, publishing draft technical standards sequentially in three packages.
• As of ESMA’s statement of 23 June 2026, other entities, including significant providers then servicing EU clients under national regimes, may not be authorised by the 1 July 2026 deadline.
• National competent authorities will run ESMA’s custody resilience review on a risk-based sample of authorised CASPs, covering key and storage management, transaction controls, incident detection and smart contract risks.

The register entries below list three Austrian-authorised providers and the member states where their authorisations were notified.

Source: ESMA register of crypto-asset service providers authorised under MiCA, 2025 entries

Bitpanda’s authorisation covers custody and administration of crypto-assets on behalf of clients, exchange of crypto-assets for funds, execution of orders, and transfer services, notified across a list of member states spanning Austria to Slovakia. Wallet and custody providers face their own MiCA workstream, tracked separately in the MiCA compliance requirements for wallet providers data.

United Kingdom: The FCA Cryptoasset Authorisation Regime

• Legislation in February 2026 brought cryptoassets into the FCA’s remit, one of the most significant expansions of the regulator’s oversight in years.
• Crypto firms including trading platforms, intermediaries, custodians, stablecoin issuers and firms arranging staking must obtain FCA authorisation to operate in the UK.
• Firms can apply for authorisation between 30 September 2026 and 28 February 2027, ahead of a mandatory regime that comes into force on 25 October 2027.
• Until the new rules take effect in October 2027, the FCA’s oversight of crypto remains limited to financial promotions and anti-money-laundering controls.
• The new framework sets out specific rules for stablecoins, a type of cryptoasset designed to maintain a stable value, typically by being linked to a currency such as the pound.

This is a significant moment for crypto regulation in the UK. That assessment came from David Geale, executive director of payments and digital finance at the FCA, alongside the caveat that we can’t regulate away risk.

Worth noting: The UK’s timetable leaves a working gap of more than a year. Firms can lodge applications from 30 September 2026, but until the rules take effect in October 2027 the FCA’s crypto oversight covers only financial promotions and anti-money-laundering controls. Registration is not yet authorisation.

Singapore MAS Digital Token Service Provider Licensing

• From 30 June 2025, digital token service providers offering services solely to customers outside Singapore, in relation to digital payment tokens and tokens of capital market products, need to be licensed.
• MAS stated that it has set the bar high for licensing and will generally not issue a licence for that category of provider.
• MAS attributed the position to higher money laundering risks in such business models and to its inability to effectively supervise firms whose substantive regulated activity sits outside Singapore.
• Without a licence, those digital token service providers have to cease their regulated activities.
• MAS issued its response to feedback on the consultation paper covering the regulatory approach, regulations, notices and guidelines for DTSPs on 30 May 2025.

Singapore’s position separates two things most jurisdictions bundle together. Incorporating locally is not the same as earning the right to serve customers from there. That distinction is drawn differently across the crypto exchange licensing requirements worldwide.

Hong Kong SFC Virtual Asset Trading Platform Licensing

• The SFC publishes lists showing the regulatory status of virtual asset trading platforms operating in Hong Kong or actively marketing their services to Hong Kong investors.
• In the SFC list as captured, the earliest licence date shown is OSL Exchange at 15 December 2020, and the latest is Bixin.com at 18 May 2026.
• The SFC’s separate applicant list names platforms whose licence applications have yet to be approved, including Crypto.com from 9 February 2024 and Bybit from 6 June 2025.

Source: SFC list of licensed virtual asset trading platforms, September 2026

Applicants sit on a separate published list, which the SFC maintains so investors can check a platform’s claimed status. Several well-known venues have been waiting there for more than a year.

Source: SFC list of virtual asset trading platform applicants, September 2026

Japan FSA Crypto-Asset Exchange Registration

• Japan registers crypto-asset exchange service providers under the Payment Services Act, with the Financial Services Agency and Local Financial Bureau confirming only that the listed crypto-assets fall under the statutory definition.
• In the FSA register extract as captured, registration numbers run to Kanto Finance Bureau No.00032, held by Laser Digital Japan from 2026/8/21, with the earliest Kinki entry shown, Zaif, dating to 2017/9/29.
• Japan’s Financial Services Agency warns that crypto-assets are not legal tender whose value is guaranteed by the government, such as the Japanese Yen or the US Dollar, and that prices may plummet.

Source: Japan Financial Services Agency list of registered crypto-asset exchange service providers, September 2026

The takeaway: Both the SFC and Japan’s Financial Services Agency publish named registers giving each licensed operator and the date its licence took effect. Either regime is checkable entity by entity, in a way a tracker’s status label is not. Register entries, not summaries, are where the licensing detail here comes from.

Crypto Tax Treatment by Country

• India taxes income from the transfer of virtual digital assets at a flat 30% plus surcharge and cess, computed without any deduction except for the cost of acquisition.
• Ireland’s rate of capital gains tax is 33% for most gains, with a personal exemption of 1,270 euro each year for individuals.
• UK higher and additional rate taxpayers pay 24% on gains from 6 April 2026, while basic rate taxpayers pay 18% on the portion of gains falling within the basic Income Tax band.
• HMRC treats a disposal of cryptoasset tokens as a chargeable event, covering selling them, exchanging them for a different cryptoasset, using them to pay for goods or services, and giving them away.
• For US tax purposes, digital assets are considered property, not currency, and the definition covers any digital representation of value recorded on a cryptographically secured distributed ledger or similar technology.

Those rates are not strictly comparable, and reading them as a like-for-like ranking is a common error. Ireland and the UK apply a capital gains charge to a disposal. India taxes income from a transfer at a flat statutory rate, with almost no deductions available.

Source: Income Tax Department of India, Revenue Commissioners of Ireland, HM Government and IRS, 2026

A wider set of national positions, including jurisdictions that publish no crypto-specific rate at all, sits in the global cryptocurrency taxation policies data.

India’s Virtual Digital Asset Tax Regime

• Income from the transfer of virtual digital assets is taxed at a flat rate of 30% plus surcharge and cess.
• The computation allows no deduction except for the cost of acquisition.
• Section 2(47A) defines a virtual digital asset to include information, code, number or token generated through cryptographic means, a notified non-fungible token, and any crypto-asset that is a digital representation of value relying on a cryptographically secured distributed ledger.
• The definition expressly excludes Indian currency, central bank digital currency, foreign currency, physical NFTs, gift cards or vouchers, and reward points or loyalty cards.

Key finding: India’s statutory definition carves central bank digital currency out of the virtual digital asset regime entirely. Central bank digital currency is expressly excluded from the Section 2(47A) definition, so it falls outside the flat 30% charge the code applies to virtual digital asset transfers. Tax code, not licensing law, does the classifying work.

That carve-out matters well beyond India. The same boundary between a sovereign digital currency and a private crypto-asset runs through the CBDC regulations data.

United States Federal Treatment of Digital Assets

• The IRS treats digital assets as property, not currency, for US federal tax purposes.
• That definition covers any digital representation of value recorded on a cryptographically secured distributed ledger or similar technology, drawn from the Infrastructure Investment and Jobs Act.
• Stablecoins are moving to the center of global crypto regulation, with 12 G20 economies addressing them through existing or proposed legislation, and the US, Canada, Japan, the EU and the UK advancing dedicated rules.

Convertible virtual currencies such as Bitcoin, stablecoins, and non-fungible tokens all sit inside the digital-asset definition, and filers must answer yes or no to a digital assets question on their federal income tax returns. Federal tax classification is settled in a way that market-structure oversight is not. Enforcement volumes and the split of authority between the two federal markets regulators sit in the SEC and CFTC crypto regulation data.

Nigeria: Digital Assets as Securities by Default

• The Commission’s stated position is that virtual crypto assets are securities unless proven otherwise.
• The burden of proving that crypto assets proposed to be offered are not securities sits with the issuer or sponsor, who must satisfy it through an initial assessment filing.
• All digital asset token offerings, initial coin offerings, and other blockchain-based offers within Nigeria, by Nigerian issuers, or by foreign issuers targeting Nigerian investors are subject to the Commission’s regulation.
• The Commission grounded that jurisdiction in Section 13 of the Investment and Securities Act, 2007, which made it the apex regulator of the Nigerian capital market.

Nigeria illustrates a route that avoids writing a new crypto statute altogether. Applying existing securities law by default moves the classification cost from the regulator to the issuer. Compare that with the EU’s purpose-built authorisation regime.

El Salvador: What Bitcoin Legal Tender Delivered

• In June 2021, President Bukele announced his intention to make El Salvador the first country to adopt Bitcoin as legal tender, and Congress shortly afterwards approved legislation granting that status.
• More than one year after implementation, the IMF found that adoption of Bitcoin as official currency with legal tender status had not led to visible improvements in financial inclusion.

Despite the large use of public funds for subsidizing Bitcoin transaction costs, acceptance and use by individuals and firms remained minimal. The IMF assessed that the project involves sizeable risks, including fiscal contingencies, consumer protection and governance issues.

The staff analysis found no evidence of any beneficial use case of Bitcoin for the unbanked population. Legal tender status sits at the opposite end of the spectrum from a ban, and neither position determines usage on its own.

Crypto Bans and Restricted Jurisdictions

• Ten of the 75 tracked countries impose a general ban on cryptocurrency, and a further 20 impose partial bans.
• Even for countries with partial or general bans in place, adoption rates remain high, which the tracker reads as evidence that bans are generally ineffective.
• The Law Library of Congress survey covers 130 countries as well as some regional organizations that have issued laws or policies on the subject.
• FATF’s 2025 survey records that 85 of 117 jurisdictions, excluding those that prohibit or plan to prohibit VASPs explicitly, have passed legislation implementing the Travel Rule.

Readers asking which countries have banned cryptocurrency should note where the tier counts come from. They are the Atlantic Council’s own categorisation, and the per-country roster it publishes moves as national positions change. Jurisdiction-level detail for China sits in the China crypto regulation data rather than here.

The more consequential number in this section is the exclusion in the FATF survey. Prohibition jurisdictions are not counted as AML laggards because they are not counted at all. The headline implementation percentage therefore describes only the countries that chose to permit and supervise.

Conclusion

Cryptocurrency is legal in 45 of the 75 countries studied, partially banned in 20 and generally banned in 10, and in twelve G20 countries representing over 57% of the world’s GDP cryptocurrencies are fully legal. The regimes behind those counts have separated into recognisable shapes. The EU and Singapore run comprehensive authorisation, the UK registers before it authorises, India classifies through the tax code first, and Nigeria applies securities law by default.

What remains is a supervisory distance rather than a legislative one. Compliance teams, policy researchers and anyone mapping venue risk will get more from that gap than from any permission tier. Travel Rule legislation is in place in 85 of 117 jurisdictions, while only 47 of 99 of those more advanced in regulating VASPs require certain DeFi arrangements to be licensed or registered. The MiCA transitional period ended on 1 July 2026, and the new UK regime comes into force on 25 October 2027.