Portugal

The regime's practical bite, however, diverges sharply from its formal completeness. As of mid-2026, Portugal's entry in ESMA's interim MiCA register showed zero authorised CASPs, against 57 in Germany and 26 each in France and the Netherlands. This finding rests on a single T4 news source (The Block), corroborated by two further T4 outlets (Incrypted, Cointelegraph) reporting the same cross-EU register figures; absent a directly cited T1/T2 primary source, the crypto guardrail Confidence Floor caps this claim at Probable rather than Confirmed, and that downgrade has been applied and carried through composition unchanged.

Compounding the authorisation gap, MiCA's Article 143(3) transitional (grandfathering) provision — which had permitted pre-existing Portuguese virtual-asset service providers to continue operating pending authorisation or its refusal — formally closed on 1 July 2026, per ESMA's 23 June 2026 public statement. Any legacy entity that has not by now secured MiCA authorisation is required to have wound down crypto-asset services in Portugal. Given the mid-2026 zero-authorisation count, this creates a live supervisory and market-access uncertainty: it is not established from current sourcing whether any legacy entities continued operating past the deadline, nor what enforcement posture CMVM or Banco de Portugal has taken toward them. That question remains open in the gaps register rather than resolved here.

Outlook

The immediate forward marker is enforcement follow-through: whether CMVM and Banco de Portugal move visibly against any unauthorised legacy operators now that the transitional window has closed, and whether Portugal's authorisation count moves off zero as pending applications (if any) clear. The current record also flags, but does not resolve, whether Portugal's Banco de Portugal/CMVM dual-authority model should eventually be treated as a JID-split candidate analogous to the Netherlands' DNB/AFM structure — a pipeline-wiring question for a later cycle, not a judgment this composition makes. Confidence on the authorisation-throughput figure should be expected to firm toward Confirmed only once a T1/T2 primary citation to the live ESMA register is obtained.

At the classification boundary, two categories sit outside MiCA's authorisation perimeter. Non-fungible crypto-assets are excluded from MiCA's scope unless issued as part of a large series or collection, per ESMA's guidelines on the qualification of crypto-assets as financial instruments — a T2 source, so this exclusion is held at Probable rather than Confirmed confidence. Security tokens meeting the MiFID II financial-instrument definition are excluded from MiCA entirely and continue to be regulated under Portugal's existing securities-law framework under CMVM supervision. Residual "other" crypto-assets, which capture most utility tokens, fall under MiCA Title II's white-paper publication and issuer-conduct obligations rather than full prudential authorisation — a lighter-touch tier than the ART/EMT track.

Outlook

The classification framework itself is stable and unlikely to move independently of a MiCA amendment at EU level; the more consequential open question is how Portuguese supervisory practice (CMVM in particular) will treat borderline cases — large NFT collections approaching the "series" threshold, or tokens with hybrid security/utility characteristics — as enforcement activity picks up. No Portugal-specific guidance on these boundary questions has been identified this cycle.

The reserve-adequacy and redemption-right claims are sourced respectively from the MiCA regulation text directly and from a EUR-Lex summary of the regulation, and are held at Probable rather than Confirmed confidence pending closer verification against the primary regulatory technical standards governing reserve composition and redemption mechanics in practice.

Outlook

This module is structurally the most settled of Portugal's crypto framework: the rules are EU-wide, directly applicable, and have no material national discretion built in. The forward-looking question is less about rule content and more about supervisory capacity — whether Banco de Portugal's reserve-adequacy and redemption-right oversight in practice keeps pace as any ART/EMT issuance volume in Portugal grows, a question this cycle's evidence base does not yet address.

Outlook

These obligations are binding EU law with clear enforcement teeth in Portugal via CMVM, and are unlikely to weaken; the open question is practical compliance monitoring — whether CMVM has begun active supervision of white-paper quality and custody-segregation practice among the CASPs now operating (or seeking to operate) in Portugal, which the zero-authorisation finding in the licensing module suggests may still be a very small population.

A separate, older claim — that cryptocurrency trading and crypto-denominated remuneration are exempt from VAT under a Portuguese tax-authority ruling — traces to a 2019-vintage T4 source that has not been independently reaffirmed post-MiCA. This claim is accordingly held at Uncertain confidence with is_binding set to false and no regulatory_stage asserted, pending direct verification against current Autoridade Tributária guidance; the gap is logged in the gaps register.

On firmer ground: from 1 January 2026, EU crypto-asset service providers operating in Portugal, including domestic CASPs, must report client transaction data under Council Directive (EU) 2023/2226 (DAC8) for cross-border automatic tax-information exchange. This obligation is Confirmed and directly sourced to the EUR-Lex directive text, a T1 source.

Outlook

The DAC8 reporting obligation is now live and stable; the material open question is the capital-gains and VAT sourcing gap. Until a primary Código do IRS citation and a reaffirmed Autoridade Tributária VAT position are obtained, the module's overall traffic-light amber rating reflects genuine sourcing thinness rather than regime instability — a distinction this composition preserves rather than resolves.

This cycle's research also produced a negative finding: no Portugal-specific outbound retail crypto-asset transfer restriction beyond the EU-wide AML/travel-rule and sanctions requirements was identified. This is recorded as a negative finding rather than a confirmed absence of regulation — it reflects the limits of this research pass rather than an exhaustive clearance, and is held at Uncertain confidence with no regulatory_stage asserted, consistent with its status as an evidentiary gap rather than a settled legal fact.

Outlook

This module's substantive content is stable and EU-wide in origin, so material change here is more likely to come from Brussels (amendments to the Transfer of Funds Regulation or the sanctions regulation) than from Lisbon. The standing item for a future cycle is closing the negative-finding gap on outbound retail transfers with affirmative confirmation rather than absence-of-evidence.