Malta Financial Services Authority (MFSA)

Overview

The Malta Financial Services Authority (MFSA) is Malta's integrated regulator for all financial services. Established on 23 July 2002 by the Malta Financial Services Authority Act (Chapter 330 of the Laws of Malta), the MFSA consolidated supervisory functions previously carried out by the Central Bank of Malta, the Malta Stock Exchange, and the Malta Financial Services Centre. It succeeded the Malta International Business Authority (MIBA, 1988–1994) and the Malta Financial Services Centre (MFSC, 1994–2002).

Leadership

Chief Executive Officer: Kenneth Farrugia (2024)

Strategic Position

Malta has established itself as a leading iGaming and cryptocurrency licensing hub in Europe. The MFSA administers one of the earliest and most developed frameworks for virtual financial assets (VFAs) and crypto licensing globally.

2024 Performance Highlights

• Supervisory interactions increased 33% year-on-year

• 134 enforcement actions taken in 2024

• EUR 926,485 in penalties issued

• Over 24,600 training hours delivered through the Financial Supervisors Academy

Basic Identity

Classification

Inclusion Justification

What This Entity Oversees

The MFSA oversees credit institutions operating in Malta, including:

• Commercial banks

• Savings banks

• Non-bank credit institutions

• Mortgage credit institutions

Capital Requirements and Prudential Standards

• Implementation of Basel III/CRD IV/CRR framework

• Own funds requirements for credit institutions

• Liquidity and leverage ratio standards

• Large exposure limits

The MFSA supervises:

• Collective investment schemes (CIS)

• Investment services providers (ISPs)

• Stock Exchange operations

• Capital markets infrastructure

• Alternative Trading Systems (ATS)

Market Conduct

• Insider dealing and market manipulation enforcement

• Prospectus approval and disclosure

• Continuous disclosure requirements

• Listing and delisting procedures

Insurance and Pension Funds

Insurance Supervision

• Non-life and life insurance undertakings

• Reinsurance companies

• Insurance intermediaries

• Solvency II framework implementation

Pension Funds

• Occupational pension fund supervision

• Personal pension plan authorization

• Retirement benefits regulation

Fund Management

The MFSA regulates:

• Collective Investment Scheme (CIS) managers

• Fund administrators

• Custodians and depositaries

• Alternative investment fund managers

Capital requirements:

• CIS manager minimum capital: EUR 125,000

• Specialized fund managers: EUR 500,000+

The MFSA enforces AML/CFT obligations across all sectors:

Regulatory Framework

• Transposition of FATF Recommendations

• 5th and 6th EU Anti-Money Laundering Directives (AMLD5/AMLD6)

• Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD)

• Know Your Customer (KYC) standards

• Beneficial ownership verification

Compliance Requirements

• Suspicious Activity Reporting (SAR) to Financial Intelligence Unit (FIU)

• Transaction monitoring systems

• Risk-based approach to compliance

• Training and awareness programs

• Audit and compliance testing

VFA-Specific AML Controls

• Enhanced identity verification for crypto transactions

• Blockchain transaction traceability

• Sanctions screening integration

• Politically Exposed Persons (PEP) checks

Regulatory Powers

The MFSA has established a comprehensive enforcement framework with powers to:

• Issue administrative penalties (fines, capital surcharges)

• Issue supervisory directions and orders

• Revoke or suspend licenses

• Impose business conduct restrictions

• Order restitution to consumers

2024 Enforcement Actions

• 134 enforcement cases in 2024

• EUR 926,485 in total penalties issued

• Range of violations: unauthorized activities, capital breaches, AML violations, operational failures

Regulatory Role and Function

Legal Foundation

MFSA Act 2002

The Malta Financial Services Authority Act (Chapter 330) establishes the MFSA as a public authority with independent legal personality. The Act provides the regulatory framework for:

• Single integrated regulator model for financial services

• Regulatory authority over banking, securities, insurance, and investment services

• Consumer protection mandate

• Financial market integrity and stability

The 2002 establishment consolidated previously fragmented regulatory oversight into one cohesive institutional framework.

Licensing and Authorization Relevance

VFA Act 2018

Malta pioneered comprehensive crypto regulation through the Virtual Financial Assets Act 2018, which established the first EU-wide framework for digital asset activities.

VFA Service Provider Classes

The MFSA has established four VFA licensing classes based on business scale and nature:

Class 1 - Basic Crypto Services

• Minimum capital: EUR 50,000

• Simplified compliance requirements

• Typical licensing timeline: 3–4 months

• Lower AML/KYC complexity

Class 2 - Mid-Level Providers

• Minimum capital: EUR 125,000

• Robust IT infrastructure requirements

• Enhanced AML/CFT controls

• Order execution and client fund handling

Class 3 - Advanced Services

• Minimum capital: EUR 250,000

• Complex operation requirements

• Multiple service lines permitted

• Enhanced governance standards

Class 4 - Highest Authorization Tier

• Minimum capital: EUR 730,000 + enhanced reserves

• Multi-service providers (exchanges, trading platforms)

• Client fund holding and management

• Continuous external audit requirements

• Complex operational oversight

Fitness and Properness Requirements

VFA applicants must satisfy three core criteria:

1. Integrity: Clean record, good character, no adverse regulatory history

2. Competence: Appropriate skills, knowledge, and experience in crypto/blockchain

3. Solvency: Financial stability, adequate capital, sustainable business model

Application Process

• MFSA evaluates financial stability and capital origin

• Quality of internal controls and governance assessment

• Key personnel qualification screening

• Technological infrastructure security verification

• Genuine Malta-based management requirement

• Full AML/KYC/CFT compliance verification

Payments and Money Movement Relevance

The MFSA regulates payment institutions and electronic money institutions under the Payment Services Directive (PSD2) framework:

• Payment service providers (PSPs)

• Electronic money institutions (EMIs)

• Money transfer operators

• Payment initiation services

• Account information services

Authorization Requirements

• Minimum capital for PIs: EUR 125,000

• Minimum capital for EMIs: EUR 350,000

• Safeguarding requirements

• Operational and security standards

• Customer due diligence

Payment Systems Governed or Overseen

The Malta Financial Services Authority (MFSA) has oversight responsibilities across multiple financial sectors in Malta, including payment services:

The entity regulates payment service providers, e-money issuers, and related financial intermediaries within its integrated supervisory mandate.

Relationship to Other Regulators

EU and EEA Coordination

• Full participation in European Banking Authority (EBA) coordination

• European Securities and Markets Authority (ESMA) alignment

• European Insurance and Occupational Pensions Authority (EIOPA) cooperation

• Financial Action Task Force (FATF) compliance

• EU Digital Finance Platform participation

Bilateral Cooperation

• MOU agreements with other EU/EEA regulators

• Crypto asset intelligence sharing

• Cross-border supervisory coordination

• Information exchange frameworks

Geography and Jurisdiction Notes

Important Departments and Divisions

Key Public Resources

Malta Financial Services Authority

• Address: Triq il-Knisja, Valletta VLT 1623, Malta

• Telephone: +356 2144 7600

• Email: [email protected] (general inquiries)

• Website: https://www.mfsa.mt/

• Regulatory Inquiries: [email protected]

• VFA Licensing Portal: https://www.mfsa.mt/our-work/virtual-financial-assets/

Notes on Naming and Language