Cyprus Securities and Exchange Commission (CySEC)

Overview

The Cyprus Securities and Exchange Commission (CySEC) is the independent regulatory and supervisory authority for the Republic of Cyprus's capital markets, investment firms, insurance distribution, and crypto-asset service providers. Established in 2001 as an independent authority, CySEC has evolved into one of Europe's primary financial regulators and is a major hub for investment firm licensing, particularly Cyprus Investment Firms (CIFs) engaged in forex and contract-for-difference (CFD) services.

Current Chairman: Dr. George Theocharides (appointed 2020; continuing in 2026)

Current Vice-Chairman: Panikkos Vakkou

Headquarter Location: 19 Diagorou Street, Nicosia CY-1097, Cyprus

Strategic Position in EU Financial Services

CySEC has become a dominant regulator in the EU's forex and derivatives markets, particularly through its licensing of Cyprus Investment Firms (CIFs). The jurisdiction has attracted significant forex, CFD, and crypto-related financial services companies due to:

• A streamlined licensing framework for CIFs
• Competitive fee structures and regulatory flexibility
• EU passporting rights under MiFID II
• Significant experience in high-volume retail derivatives trading oversight

Basic Identity

Classification

Inclusion Justification

What This Entity Oversees

Regulatory Framework

CySEC exercises comprehensive regulation and supervision of Cyprus's securities markets and investment services:

Regulated Markets and MTFs:

• Cyprus Stock Exchange (CSE): Regulated market for equities, bonds, and other securities
• Alternative Trading Systems (ATS) and Multilateral Trading Facilities (MTFs): Secondary trading venues
• Organized Trading Facilities (OTFs): Platforms for algorithmic and structured product trading

Supervisory Functions:

• Licensing and approval of regulated markets and trading venues
• Market surveillance and real-time transaction monitoring
• Listing requirements and continuous disclosure obligations
• Insider trading and market manipulation prevention
• Price transparency and post-trade transparency requirements

Enforcement Actions:

• Administrative sanctions and fines
• Trading suspensions and delisting
• Criminal referrals for serious market abuse

Market Infrastructure Oversight

CySEC supervises all aspects of Cyprus securities market infrastructure:

• Trading: Order handling, execution, and best execution standards (MiFID II)
• Clearing and Settlement: Central counterparty (CCP) requirements and settlement finality
• Custody and Safekeeping: Investor asset protection and segregation requirements
• Reporting: Transaction reporting, trade reporting, and regulatory reporting obligations

Fund Management and AIFMD Supervision

Alternative Investment Fund Managers (AIFM)

CySEC licenses and supervises Alternative Investment Fund Managers under the AIFMD framework:

Regulated Fund Types:

• Hedge funds (leveraged trading strategies)
• Private equity funds
• Real estate funds
• Infrastructure funds
• Commodity funds

Supervisory Requirements:

• Capital and liquidity requirements
• Risk management and valuation procedures
• Depository oversight and delegation
• Leverage monitoring and restrictions
• Fee transparency and investor reporting

Crypto-Asset Service Provider Regulation (MiCA)

MiCA Authorization Framework

Effective 1 December 2024, CySEC became the competent authority for authorizing and regulating Crypto-Asset Service Providers (CASPs) under the Markets in Crypto-Assets Regulation (EU 2023/1114):

Covered CASP Activities:

• Custody and administration of crypto assets
• Operation of trading platforms for crypto assets
• Execution of orders for crypto assets
• Placement of crypto assets
• Portfolio management involving crypto assets
• Investment advice on crypto assets

Authorization Requirements:

• Detailed business plan and crypto asset service specifications
• Governance and organizational structure
• Capital requirements (EUR 750,000 minimum or risk-based requirements)
• Robust IT systems and cybersecurity standards
• AML/CFT and sanctions compliance framework
• Custody and asset segregation procedures
• Professional competence and fit and proper requirements

CASP Supervisory Functions

Ongoing Supervision:

• Annual compliance certifications and audits
• Capital adequacy and liquidity monitoring
• Operational resilience and cybersecurity assessments
• Stablecoin and systemic asset monitoring
• Consumer protection and complaint handling
• Blockchain and distributed ledger technology oversight

Enforcement Actions:

• Administrative penalties and fines (up to EUR 5 million or 10% of annual revenue)
• License conditions and restrictions
• License suspension and revocation
• Criminal referrals for fraud and regulatory evasion

Stablecoin and Systemic Crypto-Asset Regulation

CySEC has enhanced supervisory measures for stablecoins and systemic crypto-assets:

• Reserve Requirements: Backing of stablecoin issuance with liquid reserves
• Redemption Guarantees: Investor protections and rights of stablecoin holders
• Significant Stablecoin Monitoring: Enhanced scrutiny for systemic stability risks
• Interoperability and Technical Standards: DLT and blockchain protocol oversight

Fund Management

UCITS and Undertakings for Collective Investment

CySEC licenses and supervises Undertakings for Collective Investment in Transferable Securities (UCITS):

Fund Types:

• Open-ended mutual funds
• Closed-ended investment companies
• Money market funds
• Target-date and index funds

Supervisory Functions:

• Fund authorization and ongoing compliance
• Portfolio management and valuation procedures
• Depositary oversight and delegation
• Investor disclosure and prospectus approval
• Fee and cost transparency

Insurance Distribution

Insurance Distribution Directive (IDD)

CySEC exercises oversight of insurance distribution channels under the Insurance Distribution Directive (EU 2016/97):

Regulated Entities:

• Insurance brokers
• Insurance agents
• Banks and investment firms distributing insurance products

Supervisory Requirements:

• Authorization and ongoing compliance
• Conflicts of interest management
• Product governance and suitability assessments
• Consumer information and transparency
• Complaint handling procedures

CySEC AML/CFT Authority

CySEC is the primary competent authority for AML/CFT supervision of investment firms and crypto-asset service providers:

Supervised Entities:

• Cyprus Investment Firms (all types)
• Alternative Investment Fund Managers (AIFMs)
• Crypto-Asset Service Providers (CASPs)
• Fund managers and investment advisors
• Insurance brokers and distributors

AML/CFT Supervisory Functions:

• Customer due diligence (CDD) and enhanced due diligence (EDD) verification
• Beneficial ownership and ultimate beneficial owner (UBO) identification
• Politically exposed persons (PEPs) screening and risk assessment
• Transaction monitoring and suspicious activity investigation
• Sanctions screening and compliance (OFAC, EU, UN lists)
• Record-keeping and documentation compliance
• Beneficial ownership registry access and verification
• Cryptocurrency transaction analysis and reporting

AML/CFT Legal Framework

Primary Legislation:

• Law on Prevention and Suppression of Money Laundering and Terrorist Financing (201(I)/2007, amended)
• 6th AML Directive (6AMLD – EU 2018/843) implementation measures
• EU Sanctions Regulation (EC 833/2014 and successors)
• FATF Recommendations (40 recommendations and 9 special recommendations)

Institutional Coordination:

• FIU: Financial Intelligence Unit (FIU-Cyprus) – receives and analyzes suspicious activity reports (SARs)
• Primary Supervisor: CySEC for investment firms, CASPs, and fund managers
• Secondary Supervisors: Central Bank of Cyprus (banking), Insurance Commissioner (insurance)
• Law Enforcement: Cyprus Police, Customs Service, Serious Fraud Office

Enforcement Provisions:

• Administrative penalties and fines (up to EUR 500,000 or 10% of annual revenue)
• License suspension and revocation
• Criminal liability for responsible individuals
• Asset confiscation and proceeds recovery

Regulatory Powers

Administrative Enforcement

CySEC exercises comprehensive enforcement authority over supervised entities:

Enforcement Instruments:

• Cease-and-Desist Orders: Immediate prohibition of non-compliant activities
• Financial Penalties: Fines up to EUR 5 million or 10% of annual revenue for grave violations
• License Conditions: Special supervisory regimes, enhanced monitoring, restricted activities
• License Suspension: Temporary cessation of all regulated activities
• License Revocation: Permanent withdrawal of authorization
• Publication of Enforcement Actions: Naming and shaming for serious violations

Recent Supervisory Priorities (2024–2026):

• Retail client protection in derivatives trading
• Crypto-asset service provider MiCA compliance
• AML/CFT compliance verification, especially for crypto-related activities
• Operational resilience and cybersecurity standards
• Environmental, Social, and Governance (ESG) disclosure requirements

Criminal Enforcement

CySEC cooperates with law enforcement authorities for criminal investigation of:

• Securities fraud and market manipulation
• Money laundering and terrorist financing
• Unauthorized investment services
• Cryptocurrency fraud and Ponzi schemes

Regulatory Role and Function

Executive Leadership

Chairman: Dr. George Theocharides (appointed 2020; continuing in 2026)

Vice-Chairman: Panikkos Vakkou

Board Composition:

• Chairman and Vice-Chairman (full-time employment)
• Five non-executive Board members
• Appointed by the Council of Ministers for renewable five-year terms

Executive Management:

• Chief Executive Officer (CySEC Internal Structure)
• Deputy CEOs for major functions (Markets Supervision, Investment Firms, Fund Management, Crypto/Fintech)
• General Counsel and Compliance Officer

Major Departments and Functions

• Investment Firms Supervision Department: CIF authorization, licensing, and ongoing supervision
• Markets Supervision Department: Trading venue oversight, market surveillance, listing regulation
• Fund Management Department: UCITS and AIFMD licensing and supervision
• Crypto-Asset Services Department: CASP authorization and MiCA compliance oversight
• AML/CFT Supervision Unit: Anti-money laundering and terrorist financing monitoring
• Enforcement and Legal Affairs Department: Administrative penalties, investigations, legal enforcement
• International Relations Office: ESMA coordination, bilateral regulatory relationships
• Insurance Distribution Department: IDD compliance oversight

Legal Foundation

The Cyprus Securities and Exchange Commission operates under the following primary legislative framework:

CySEC Establishment and Governance

• Law on the Establishment of the Cyprus Securities and Exchange Commission (105/1995, amended)
• Law on Investment Services and Activities and Regulated Markets (144(I)/2017) – transposing MiFID II/MiFIR
• Law on Alternative Investment Fund Managers (83(I)/2013) – transposing AIFMD

Securities and Capital Markets Regulation

• Public Companies Law (Cap. 113) – governance and disclosure
• Law on Market Abuse Regulation (EU 596/2014)
• Law on Prospectuses and Continuous Disclosure Obligations
• Transparency Directive implementation

Crypto-Asset Service Provider Regulation

• Law implementing Markets in Crypto-Assets Regulation (MiCA – EU 2023/1114)
• Crypto-Asset Service Provider authorization and supervision framework
• Operational from 1 December 2024

AML/CFT Framework

• Law on Prevention and Suppression of Money Laundering and Terrorist Financing (201(I)/2007, amended)
• 6th AML Directive (6AMLD – EU 2018/843) implementation
• EU Sanctions Regulation (EC 833/2014 and successors)

Licensing and Authorization Relevance

CIF Business Model and Regulation

Cyprus Investment Firms are regulated entities licensed to provide investment services and activities to clients on a professional basis, either within Cyprus or across EU/EEA borders via passporting:

Investment Services and Activities Covered:

• Reception and transmission of client orders (execution)
• Brokerage services for contracts for difference (CFDs)
• Forex (foreign exchange) contract dealing
• Options and derivatives trading
• Portfolio management
• Investment advisory services

Client Categories:

• Retail clients (consumer protection)
• Professional clients (elevated risk acknowledgment)
• Eligible counterparties (market participants)

CIF Authorization and Ongoing Requirements

Authorization Process:

• Application submission with detailed business plan, governance, compliance framework
• CySEC assessment of fit and proper criteria for management
• Capital adequacy verification (minimum EUR 730,000 or higher based on activities)
• Compliance and risk management arrangements
• Client asset segregation and protection mechanisms

Ongoing Supervisory Requirements:

• Annual compliance certifications and audits
• Capital adequacy monitoring and quarterly reporting
• Client fund safeguarding inspections
• Conduct of business compliance (ESMA guidelines)
• AML/CFT compliance verification
• Conflicts of interest management
• Complaint handling and investor compensation scheme participation

Regulatory Enforcement and Sanctions

CySEC maintains strict enforcement for CIF violations:

Enforcement Actions:

• Administrative penalties and fines (up to €5 million or 10% of annual revenue)
• Cease-and-desist orders for unauthorized business
• License suspension and conditional authorization
• License revocation for grave violations
• Criminal referrals for fraud and systematic misconduct

CIF Market Dynamics (2026 Context)

The CIF sector has experienced significant consolidation and regulatory scrutiny following:

• ESMA Guidelines on Leverage Limits (2022–2024): Binary options and CFD leverage restrictions (1:10 for minor currencies)
• Retail Client Protection Enhancements: Mandatory warnings about retail derivative losses
• Crypto-Related CIF Services: Enhanced AML/CFT requirements for crypto-linked derivatives

By April 2026, CySEC continues to supervise approximately 200+ active CIF licenses, with a substantial portion engaged in forex and CFD trading.

Payments and Money Movement Relevance

The Cyprus Securities and Exchange Commission (CySEC) oversees securities settlement and post-trade infrastructure in Cyprus:

Payment Systems Governed or Overseen

The Cyprus Securities and Exchange Commission (CySEC) oversees securities settlement infrastructure in Cyprus:

[Specific system names require verification from official sources]

Relationship to Other Regulators

ESMA Coordination

CySEC operates as a regulatory authority within the European Securities and Markets Authority (ESMA) framework:

ESMA Coordination Functions:

• Compliance with ESMA technical standards and guidelines
• Participation in ESMA peer review exercises
• Cross-border supervision coordination with other EU regulators
• Regulatory reporting and data submission
• Cooperation in enforcement actions and market surveillance

IOSCO Membership

CySEC is a member of the International Organization of Securities Commissions (IOSCO):

• Participation in global standard-setting for capital markets
• Coordination on cross-border enforcement
• Sharing of market surveillance information
• Mutual recognition and regulatory cooperation agreements

Bilateral Regulatory Relationships

CySEC maintains cooperative relationships with:

• Central Bank of Cyprus (ECB/SSM for banking supervision coordination)
• Hellenic Capital Market Commission (Greece)
• Financial Conduct Authority (FCA) (United Kingdom)
• Securities and Exchange Commission (SEC) (United States)
• Financial Stability Board (FSB) – macroprudential coordination

EU Regulatory Integration

MiFID II/MiFIR:

• EU passporting and freedom to provide services
• Supervisory colleges for significant CIFs and AIFMs
• Cross-border transaction reporting and market surveillance

MiCA Integration:

• ECB coordination on crypto-asset systemic risk
• ESMA coordination on stablecoin and digital asset standards
• Regulatory sandboxes for emerging fintech innovations

Geography and Jurisdiction Notes

Important Departments and Divisions

Key Public Resources

Cyprus Securities and Exchange Commission (CySEC) – Headquarters

• Address: 19 Diagorou Street, Nicosia CY-1097, Cyprus
• Telephone: +357 22 88 1000
• Fax: +357 22 88 1010
• Website: https://www.cysec.gov.cy/
• Email (General): [email protected]

Office of the Chairman

• Contact: Chairman Dr. George Theocharides
• Telephone: +357 22 88 1001
• Email: [email protected]

Investment Firms Supervision Department

• Focus: CIF authorization, licensing, and oversight
• Email: [email protected]
• Telephone: +357 22 88 1100

Crypto-Asset Services Department

• Focus: CASP authorization and MiCA compliance
• Email: [email protected]
• Telephone: +357 22 88 1200

AML/CFT Supervision Unit

• Focus: Anti-money laundering and terrorist financing compliance
• Email: [email protected]
• Telephone: +357 22 88 1300

Markets Supervision Department

• Focus: Trading venue oversight and market surveillance
• Email: [email protected]
• Telephone: +357 22 88 1400

Enforcement Department

• Focus: Administrative penalties and enforcement actions
• Email: [email protected]
• Telephone: +357 22 88 1500

Notes on Naming and Language