cryptolicit

Is XTB Limited regulated in the EU?

XTB Limited. Crypto-asset service provider (CASP) with home Member State 🇨🇾 Cyprus.

Authorised under MiCA

XTB Limited is listed in the ESMA register as an authorised crypto-asset service provider. The licence was granted by Cyprus Securities and Exchange Commission (CySEC) on 15 December 2025 and covers 3 of 10 MiCA services in 29 EEA countries.

XTB Limited among the EU's authorised providers

XTB Limited was the 7th of 24 crypto-asset service providers currently authorised in Cyprus, and one of 365 across the EEA, licensed 11 months after MiCA became applicable. With 3 authorised services it is at the register average of 3.3; 162 providers hold a broader one. It has notified 29 of 30 EEA countries; 58 providers have notified all of them. CySEC supervises 24 authorised providers in total.

What the authorisation covers

XTB Limited is authorised for 3 of the ten crypto-asset services defined in Article 3(1)(16) of MiCA. It is not authorised for operating a trading platform, exchange for funds, exchange for other crypto-assets, placing of crypto-assets, advice on crypto-assets, portfolio management, transfer services — if it offers those, that activity is outside this licence.

  • a Custody and administration 29 countries Holding clients' crypto-assets or the private keys to them, and keeping them safe. This is what a wallet service or an exchange that keeps your coins does.
  • e Execution of orders 29 countries Concluding purchases or sales of crypto-assets on the client's behalf, including on a third-party trading platform.
  • g Reception and transmission of orders 29 countries Taking a client's order to buy or sell and passing it on to another provider that executes it — a broker that does not execute itself.

Not authorised: b. Operating a trading platform · c. Exchange for funds · d. Exchange for other crypto-assets · f. Placing of crypto-assets · h. Advice on crypto-assets · i. Portfolio management · j. Transfer services.

Where it may operate

Through the MiCA passport, XTB Limited has notified 29 countries: Austria, Belgium, Bulgaria, Cyprus, Czechia, Germany, Denmark, Estonia, Spain, Finland, France, Croatia, Hungary, Ireland, Iceland, Italy, Liechtenstein, Lithuania, Luxembourg, Latvia, Malta, Netherlands, Norway, Poland, Portugal, Romania, Sweden, Slovenia, Slovakia. It has not notified the other 1 EEA states (Greece), so a client there is outside the scope of the notification.

Highlighted: countries notified for at least one service. Outlined: home Member State. Passporting is per service; see the list on the left for each service's count.

Identification

Legal name
XTB Limited
LEI
259400HM2TR4U3LF5D43 · GLEIF record
Competent authority
Cyprus Securities and Exchange Commission (CySEC) (Cyprus)
Registered address
Pikioni, 10 HIGHSIGHT RENTALS LTD, 3075, Limassol
Declared website
xtb.com
Authorised on
15 December 2025
Register entry updated
13 March 2026
Only the declared domains are covered. Fraudsters routinely copy the name of an authorised provider and operate from a look-alike domain. If the website you are on is not one of the addresses above, the authorisation does not apply to it — check the exact domain.

Questions people ask

Is XTB Limited regulated in the EU?

Yes. XTB Limited (XTB Limited) holds a MiCA authorisation as a crypto-asset service provider, granted by Cyprus Securities and Exchange Commission (CySEC) on 15 December 2025. It appears in the ESMA register of authorised CASPs.

Which crypto services is XTB Limited authorised for?

3 of the ten MiCA services: custody and administration, execution of orders, reception and transmission of orders.

In which countries can XTB Limited offer crypto services?

29 EEA countries: Austria, Belgium, Bulgaria, Cyprus, Czechia, Germany, Denmark, Estonia, Spain, Finland, France, Croatia, Hungary, Ireland, Iceland, Italy, Liechtenstein, Lithuania, Luxembourg, Latvia, Malta, Netherlands, Norway, Poland, Portugal, Romania, Sweden, Slovenia, Slovakia.

Who supervises XTB Limited?

Cyprus Securities and Exchange Commission (CySEC), the competent authority in Cyprus, which is the provider's home Member State under MiCA.

Other providers authorised in Cyprus

All providers from Cyprus →

Source: ESMA interim MiCA register (CASPS.csv), as reported by Cyprus Securities and Exchange Commission (CySEC). This page reflects the register as of our last sync; it is not a statement by the regulator. Methodology.