CryptaCount
EN
EnglishENDeutschDEEspañolESFrançaisFRItalianoIT日本語JA한국어KONederlandsNLPolskiPLPortuguêsPT
Log in Start Free

Revolut Secures Gibraltar DLT Licence for Global Crypto Push

CryptaCount Editorial · · 9 min read
AML / KYC / LICENSING Revolut Secures Gibraltar DLT Licencefor Global Crypto Push

Revolut has added a third regulatory pillar to its crypto operations. On 19 October 2026 the company confirmed it had received a Distributed Ledger Technology provider licence from the Gibraltar Financial Services Commission (GFSC) for a newly formed entity called Revolut Global Digital Assets Limited. For accounting firms, auditors, and CFOs that work with clients holding Revolut crypto relationships, this is not a headline to file away: it signals a structural change in how Revolut organises its licensed entities, and that has direct consequences for counterparty classification, AML due diligence, and the way transactions are recorded in any crypto accounting software or crypto bookkeeping software your practice relies on.

Revolut Secures Gibraltar DLT Licence for Global Crypto Push

What the GFSC DLT Licence Actually Is

Gibraltar introduced its Distributed Ledger Technology regulatory framework in 2018, making it one of the earliest jurisdictions to create a bespoke licensing regime for firms using blockchain-based systems to store or transmit value belonging to others. The GFSC issues DLT provider licences to firms that meet nine regulatory principles covering areas including customer asset protection, AML and counter-terrorist financing obligations, financial crime prevention, cyber security, and operational resilience.

The nine-principle framework and what it demands

A GFSC DLT licence is not a light-touch registration. Licensed entities must demonstrate adequate financial resources, maintain custody and segregation standards for client assets, and submit to ongoing GFSC supervision. From a counterparty risk perspective, a GFSC-licensed entity carries a materially different risk profile than an unregulated offshore vehicle, though it is also distinct from a MiCA-authorised crypto-asset service provider or a UK Financial Conduct Authority registered cryptoasset business. Accounting teams should note that distinction carefully when updating client risk assessments.

Why Gibraltar specifically

Gibraltar is a British Overseas Territory and retains close ties to UK financial regulatory culture, but it is outside the UK's own regulatory perimeter and outside the EU single market. That independence is precisely what makes it useful as a launchpad: a GFSC-licensed entity can serve markets that neither Revolut's UK entity (authorised by the FCA) nor its EU entity (operating under MiCA) is designed to reach. Revolut has not yet disclosed which specific markets Revolut Global Digital Assets Limited will serve; it said details on target regions and rollouts will be communicated in due course.

Revolut's Three-Entity Regulatory Structure

Before this announcement, Revolut's crypto services rested on two regulated pillars. Revolut Ltd handles crypto for UK customers under FCA authorisation. Revolut Digital Assets Europe Ltd serves the European Economic Area under the EU's Markets in Crypto-Assets Regulation. The Gibraltar entity is now the third leg of that structure, and understanding which leg applies to a given client relationship is essential for accurate classification.

Mapping the entities to regulatory regimes

Each entity sits under a distinct legal and supervisory framework. The UK entity is subject to FCA cryptoasset registration and AML rules derived from the Money Laundering Regulations 2017. The EU entity operates under MiCA, which imposes its own capital requirements, disclosure obligations, and travel rule implementation standards. The Gibraltar entity will be supervised by the GFSC under the DLT framework. These three regimes overlap in some areas but diverge in others, particularly around the treatment of customer asset safeguarding, the scope of permitted services, and the information that must be collected and retained under AML law.

Implications for counterparty due diligence

Any firm conducting an institutional relationship with Revolut, or auditing a client that does, needs to identify which entity is the contractual counterparty. The regulatory protections, complaint mechanisms, compensation schemes, and supervisory contacts differ across the three. Relying on a due diligence file that simply says "Revolut" without specifying the entity is no longer adequate. Firms should request confirmation of the contracting entity from Revolut and update their KYC and counterparty risk files accordingly.

Context: Revolut's Broader 2026 Expansion

The Gibraltar licence is one move in a sequence of regulatory and product developments Revolut has executed this year. In March 2026, British regulators lifted restrictions on Revolut's banking licence, a significant step for a firm that had operated under conditions since its initial authorisation. In September, the company received approval from the US Office of the Comptroller of the Currency as it pursued a US banking charter, a move that would, if completed, give it a regulated footing in the world's largest financial market. Separately, Revolut began rolling out EURR, its euro-pegged stablecoin, to customers in Denmark, Poland, and Portugal in August, with broader EEA availability planned before year end.

What the stablecoin rollout adds to the picture

The EURR rollout is relevant here because it sits squarely within the MiCA framework and is therefore governed by the EU entity, not the new Gibraltar vehicle. Accounting teams working with clients who hold EURR need to apply e-money token accounting treatment under MiCA and should be aware of what the EBA's designation of USDC as a significant e-money token means for EU compliance teams, given that the regulatory treatment of e-money tokens under MiCA is increasingly being stress-tested by regulators. The Gibraltar entity, by contrast, is positioned for markets outside the UK and EEA. Until Revolut specifies those markets, the accounting treatment of transactions routed through the new entity will depend on the jurisdictional rules of wherever it ultimately operates.

Accounting and Reporting Implications for Firms

The creation of a new regulated entity by a major platform is not only a compliance story. It has direct accounting consequences, and firms that use digital asset accounting software or crypto bookkeeping software to manage client books need to think through several practical questions now, before Revolut announces the new entity's target markets.

Entity-level transaction classification

When a client holds crypto assets through a regulated custodian, the accounting treatment depends partly on how that custodian is structured and regulated. Under IFRS, the question of whether a client's crypto holdings are recognised on their balance sheet or the custodian's balance sheet turns on control and the terms of the custody arrangement. A new entity with its own licence, its own custody obligations under GFSC rules, and potentially its own terms and conditions may require a fresh assessment of the control analysis. Firms should not assume that the treatment applied to holdings via the UK or EU entity will carry over automatically to the Gibraltar entity.

AML and travel rule considerations

Each of Revolut's three entities will have its own travel rule obligations, which differ across the UK, EU, and Gibraltar regimes. When a client transfers crypto assets to or from the Gibraltar entity, the firm needs to know whether that transfer triggers travel rule data collection under the applicable rules of that jurisdiction. Gibraltar has implemented FATF-aligned AML standards, but the precise implementation differs from the EU's Transfer of Funds Regulation as extended to crypto under MiCA. Firms should consult the GFSC's published AML guidance to confirm the current requirements before processing or auditing cross-entity transfers. The broader trend of supervisors using increasingly sophisticated tools to enforce these standards is covered in our piece on how AI is reshaping crypto AML supervision across the FCA, VARA, and HKMA.

Audit trail and documentation requirements

For auditors, a new regulated entity at a major platform introduces documentation questions. When gathering evidence about a client's crypto holdings, auditors will need to obtain confirmation letters, statements, or API-based proofs of balance from the correct Revolut entity. Conflating entities in an audit file creates a risk of misstatement, particularly if the entities are ultimately consolidated in Revolut's own group accounts but separated for regulatory reporting purposes. Build the entity distinction into your audit programme now, while the Gibraltar entity is new and its operational scope is still being defined.

Practical Steps for Accounting and Compliance Teams

There is a short window before Revolut announces the markets its Gibraltar entity will serve. Use it to prepare rather than react.

What to do before the rollout details arrive

First, audit your current client list for any existing Revolut relationships and document which entity each client currently contracts with. Second, update your counterparty due diligence template to include a mandatory field for Revolut entity name and GFSC or FCA/MiCA reference number. Third, check whether your digital asset accounting software allows transaction records to be tagged at the entity level within the same platform group, since this is a gap in many tools that were built when most platforms had a single regulated entity. Fourth, review your AML risk assessment methodology to ensure a new GFSC-licensed entity can be correctly scored: it should rank as regulated, but the risk weighting may differ from a MiCA or FCA-authorised entity depending on your firm's methodology. Fifth, brief clients who actively use Revolut for treasury or payments that they may receive communications from a new entity and should not treat those communications as unsolicited or suspicious without first verifying the source.

Frequently Asked Questions

Is the Gibraltar GFSC DLT licence equivalent to FCA registration or MiCA authorisation?

No. Each licence is issued under a different legal framework and carries different obligations. The GFSC DLT framework predates MiCA and was developed independently. While all three regimes are broadly FATF-aligned on AML, they differ on capital requirements, custody standards, permitted services, and supervisory reporting. For compliance and due diligence purposes, treat the Gibraltar entity as a distinct regulated counterparty, not a substitute for FCA or MiCA authorisation.

Which of Revolut's entities will serve UK and EU clients going forward?

Based on information available at the time of publication, Revolut has stated that UK clients continue to be served by Revolut Ltd and EEA clients by Revolut Digital Assets Europe Ltd under MiCA. The new Gibraltar entity, Revolut Global Digital Assets Limited, is described as supporting international operations. Revolut has not yet announced which specific markets it will cover.

Does this change how we account for a client's Revolut crypto holdings under IFRS?

It may do. The accounting treatment for crypto assets held through a regulated custodian depends on the terms of the custody arrangement and the legal protections afforded under the applicable regulatory regime. If a client migrates to the Gibraltar entity or opens a new relationship with it, firms should re-examine the control analysis and segregation terms before confirming the accounting treatment. Do not assume continuity from the existing UK or EU entity relationship.

Does the new entity affect the travel rule requirements for client transfers?

Yes, potentially. Travel rule obligations apply at the entity and jurisdictional level. Transfers involving the Gibraltar entity will be subject to GFSC-supervised AML rules, which may differ from the EU's Transfer of Funds Regulation or UK's equivalent. Until Revolut publishes the terms and operational scope of the new entity, firms should flag any transfers involving it for additional review and consult the GFSC's AML guidance directly.

What should we tell clients who ask about the new entity?

Advise clients that the creation of a new regulated subsidiary is a normal part of a global financial platform's expansion strategy and does not, on its own, indicate any change to their existing protections. However, if they are offered or migrated to services provided by the Gibraltar entity, they should review the new terms carefully and share any updated service agreements with their accountant or tax adviser so the correct accounting and tax treatment can be applied from day one.

Source: The Block

UKEUGLOBALGeneralAdoptedAML/KYC & Licensing

Related articles

AML/KYC & Licensing
Revolut Wins Gibraltar DLT License for Global Crypto Push
AML/KYC & Licensing
FATF's PPP Report: Crypto AML Gaps Firms Must Close Now
AML/KYC & Licensing
Four Financial Centres Racing to Lead on Crypto Regulation
AML/KYC & Licensing
Crypto's Institutional Moment: What TradFi's Move Means for AML and Accounting Teams