The landscape of cryptoasset regulation across Europe is undergoing a transformative shift, with the European Union's Markets in Crypto-Assets Regulation (MiCA) set to establish a unified legal framework for cryptoassets throughout 2024. As one of the key financial jurisdictions in Southern Europe, Spain is actively aligning its national regulatory approach with MiCA while maintaining its own oversight mechanisms. This article provides a comprehensive overview of how cryptoassets are currently regulated in Spain, covering supervisory authorities, advertising rules, anti-money laundering (AML) obligations, stablecoin treatment, and enforcement actions.
Regulatory Authorities Overseeing Cryptoassets
In Spain, oversight of cryptoassets is divided between two primary regulators based on the nature of the asset or service.
The Spanish Securities Market Commission (Comisión Nacional del Mercado de Valores – CNMV) acts as the main regulatory authority for cryptoassets that qualify as financial instruments or fall under MiCA’s scope—excluding electronic money tokens (EMTs) and asset-reference tokens (ARTs). The CNMV is responsible for authorizing and supervising crypto-asset service providers once MiCA provisions are fully implemented. It also oversees all financial promotions related to cryptoassets, ensuring compliance with transparency and investor protection standards.
👉 Discover how global regulatory shifts are shaping crypto adoption in 2025.
Meanwhile, the Bank of Spain holds jurisdiction over issuers of EMTs and ARTs—categories that include many stablecoins. This division ensures that different types of cryptoassets are regulated according to their economic function and associated risks.
National Laws Governing Cryptoasset Activities
Spain has integrated EU directives into its domestic legal framework while introducing specific national regulations targeting key aspects of crypto activity. These include:
- Rules governing cryptoasset promotions aimed at Spanish investors
- Regulations on the use of distributed ledger technology (DLT) for issuing or transferring financial instruments
- Anti-money laundering (AML) obligations for virtual asset service providers (VASPs)
Notably, on May 29, 2024, the CNMV published a detailed Q&A document offering guidance on DLT-based financial instruments, clarifying compliance expectations for market participants. While no standalone national law exclusively targets cryptoasset issuers or service providers beyond MiCA, existing frameworks ensure robust oversight.
Stablecoin Regulation: A MiCA-Driven Framework
Stablecoins are subject to special scrutiny due to their potential systemic impact. Under MiCA, they are classified into two categories: electronic money tokens (EMTs) and asset-reference tokens (ARTs). Spain does not currently have dedicated national legislation specifically addressing stablecoins. However, certain stablecoins may fall under existing rules related to e-money regulations or promotional requirements if marketed as investment products.
The European Banking Authority (EBA) will designate some stablecoins as “significant” based on thresholds such as transaction volume and user base, triggering stricter supervisory requirements. Spanish issuers must prepare for these enhanced obligations under the forthcoming MiCA implementation.
Rules for Promoting Cryptoassets in Spain
Marketing cryptoassets to Spanish investors is tightly controlled. Any promotional activity—whether direct or implicit—that targets residents must comply with CNMV guidelines. The rules apply broadly to advertisements positioning cryptoassets as investment opportunities.
Exemptions include white papers, corporate branding campaigns, and communications about assets that do not qualify as investments (e.g., most NFTs).
Compliant promotions must be:
- Clear, balanced, and impartial
- Free from misleading statements
- Equipped with standardized risk warnings
- Linked to additional information sources about the asset and its risks
The CNMV employs both ex-post and ex-ante supervision models:
- For general advertising: post-launch reviews with potential corrective actions
- For mass campaigns reaching over 100,000 people: advance notification required at least ten working days before launch
Failure to comply can result in enforcement measures, including public reprimands and fines.
Anti-Money Laundering Compliance for Crypto Services
Virtual asset service providers operating in Spain—regardless of physical presence—must register with the Bank of Spain if they offer:
- Exchange services between fiat and virtual currencies
- Custody solutions involving private key management
These entities are bound by Spain’s AML regime, rooted in the EU’s 5th Money Laundering Directive (5MLD), with additional national provisions. Spain is expanding its AML scope in anticipation of MiCA, preparing to bring more crypto-asset service providers under mandatory registration.
The Executive Service for the Prevention of Money Laundering (SEPBLAC) and the Bank of Spain follow EBA guidelines on AML practices, emphasizing client risk assessment, especially for those engaged in crypto-related activities.
Banking Sector Engagement with Cryptoassets
Spanish banks face no explicit legal barriers preventing them from holding or trading cryptoassets or their derivatives. However, when such assets qualify as financial instruments, they fall under MiFID II regulations. Banks must also adhere to prudential standards, including future requirements derived from the Basel Committee on Banking Supervision (BCBS) framework on crypto exposures—once transposed into EU law.
This means that while direct restrictions are absent, operational engagement will be shaped by capital adequacy, risk management, and regulatory reporting obligations.
Decentralized Finance (DeFi): Regulatory Grey Area
As of now, there are no specific regulations in Spain targeting decentralized finance (DeFi) platforms—provided they operate without centralized control. Regulators acknowledge the challenge of applying traditional frameworks to truly decentralized systems. However, any entity exercising significant influence or control within a DeFi protocol may still be deemed a regulated actor under MiCA or national law.
Enforcement Actions and Legal Precedents
Regulatory enforcement in Spain has already begun. In February 2024, the CNMV issued its first penalties for violations of crypto advertising rules:
- One public reprimand published in the Boletín Oficial del Estado (BOE)
- Four fines totaling €30,000
The penalties stemmed from an entity’s failure to:
- Include mandatory risk disclosures in newspaper ads
- Notify the CNMV in advance of mass advertising campaigns
Factors like the company’s recent incorporation and financial status influenced penalty amounts.
On the criminal side, major cases include:
- An alleged €92 million fraud affecting 32,000 individuals, currently under trial at Spain’s National Court
- Money laundering operations using cryptocurrency ATMs
These cases highlight growing scrutiny of illicit activities involving digital assets.
👉 Stay ahead of regulatory trends impacting crypto markets worldwide.
Frequently Asked Questions (FAQ)
Q: Which regulator handles cryptoasset advertising in Spain?
A: The CNMV supervises all financial promotions involving cryptoassets, requiring clear risk disclosures and prior notification for large-scale campaigns.
Q: Do Spanish banks need special approval to deal in cryptocurrencies?
A: No specific ban exists, but banks must comply with MiFID II if assets are deemed financial instruments and will face prudential rules under future BCBS standards.
Q: Are NFTs regulated under Spanish crypto rules?
A: Most NFTs are excluded from investment promotion rules unless they represent financial instruments or function as asset-referenced tokens.
Q: Must foreign VASPs register in Spain to serve local users?
A: Yes—if they provide exchange or custody services to Spanish residents, they must register with the Bank of Spain regardless of physical presence.
Q: How does MiCA affect current Spanish crypto regulations?
A: MiCA will harmonize rules across the EU; Spain is adapting its framework to align with MiCA’s licensing, transparency, and consumer protection mandates.
Q: What happens if a company runs a non-compliant crypto ad campaign?
A: The CNMV can demand corrections, impose fines, or issue public sanctions—as seen in early 2024 enforcement actions.
👉 Learn how compliant platforms are navigating new global regulations.