Crypto & Blockchain Company Setup & Structuring in Portugal

Portugal has become one of the most accessible European jurisdictions for crypto and blockchain businesses. The country combines EU membership, a functioning VASP (Virtual Asset Service Provider) registration regime, a competitive tax environment for qualifying founders and a relatively straightforward corporate formation process. Founders who structure correctly from the outset can operate across the EU single market, hold digital assets in a compliant entity and access Portuguese banking - a combination that remains difficult to achieve in many competing jurisdictions. This article covers the full lifecycle: choosing the right corporate vehicle, completing VASP registration with Banco de Portugal, managing tax exposure, avoiding the most common structuring mistakes and understanding when Portugal is the right choice and when it is not.

---

Portugal transposed the EU';s Fifth Anti-Money Laundering Directive (5AMLD) into national law through Lei n.º 83/2017 (the Anti-Money Laundering and Counter-Terrorist Financing Law), which brought virtual asset service providers within the scope of AML/CFT obligations for the first time. The transposition of the Sixth Anti-Money Laundering Directive (6AMLD) further tightened criminal liability provisions applicable to legal persons, including crypto entities.

The Markets in Crypto-Assets Regulation (MiCA), which entered into full application across all EU member states including Portugal, is now the primary regulatory instrument for crypto-asset service providers (CASPs). MiCA replaced the national VASP registration regime for most categories of crypto-asset services, but the transition is phased and the Banco de Portugal (the Bank of Portugal, Portugal';s central bank and primary financial regulator) remains the competent authority for authorisation and supervision of CASPs operating from Portuguese territory.

Under MiCA, Article 59 et seq. govern the authorisation of CASPs. A Portuguese-incorporated entity seeking to provide crypto-asset services - including exchange, custody, portfolio management or advice - must obtain a CASP authorisation from Banco de Portugal before commencing operations. The authorisation is passportable across all EU member states, which is one of Portugal';s principal structural advantages for founders targeting the European market.

The Código das Sociedades Comerciais (Commercial Companies Code), specifically Articles 1 to 7 and 197 to 270, governs the formation and operation of the two most commonly used corporate vehicles: the Sociedade por Quotas (Lda., a private limited liability company) and the Sociedade Anónima (S.A., a public limited company). The choice between these two forms has direct implications for governance, minimum capital, shareholder disclosure and the ability to raise institutional capital.

The Autoridade Tributária e Aduaneira (Tax and Customs Authority, AT) administers corporate and personal income tax, and its treatment of crypto assets has evolved significantly. The Orçamento do Estado para 2023 (State Budget Law for 2023) introduced specific provisions on the taxation of crypto assets under the Código do Imposto sobre o Rendimento das Pessoas Singulares (Personal Income Tax Code, CIRS) and the Código do Imposto sobre o Rendimento das Pessoas Coletivas (Corporate Income Tax Code, CIRC), establishing holding periods, classification rules and applicable rates that directly affect how a Portuguese crypto entity is structured and how its founders are remunerated.

---

The Lda. (Sociedade por Quotas) is the default choice for most early-stage crypto and blockchain founders. It requires a minimum share capital of EUR 1 (though in practice EUR 5,000 to EUR 50,000 is standard for credibility with banks and regulators), can be formed with a single shareholder, and imposes no obligation to publish annual accounts in the same manner as an S.A. The Lda. is governed by a gerência (management board) rather than a board of directors, which simplifies day-to-day decision-making.

The S.A. (Sociedade Anónima) becomes relevant when the business anticipates institutional investment, a token issuance that qualifies as a transferable security, or a future listing. It requires minimum share capital of EUR 50,000, a supervisory board or fiscal council, and annual accounts filed with the Registo Comercial (Commercial Registry). The S.A. structure is also required for certain categories of regulated financial activity under Portuguese law.

A third option, less commonly used but worth noting for blockchain-native projects, is the Sociedade Unipessoal por Quotas (single-member Lda.), which allows a sole founder to hold 100% of the entity without a second shareholder. This is useful for founders who want to maintain full control before bringing in co-founders or investors.

In practice, it is important to consider that Banco de Portugal and the European Banking Authority (EBA) guidelines on CASP governance require meaningful substance in the jurisdiction of authorisation. A shell Lda. with no local staff, no local management and no genuine decision-making in Portugal will not satisfy the substance requirements under MiCA Article 62, which mandates that at least one director be resident in the EU and that the entity have effective management in the member state of authorisation.

A common mistake made by international founders is to incorporate a Portuguese Lda. as a pure holding or licensing vehicle while keeping all operations, staff and management abroad. Banco de Portugal has consistently required evidence of genuine local presence - including a registered office that is not merely a virtual address, at least one locally based director or senior manager, and documented internal controls and AML/CFT procedures. Founders who overlook this risk having their CASP application rejected or, if already registered, facing supervisory action.

To receive a checklist for corporate vehicle selection and substance requirements for crypto and blockchain companies in Portugal, send a request to info@vlolawfirm.com

---

Before MiCA';s full application, Portugal operated a VASP registration regime administered by Banco de Portugal under Lei n.º 83/2017. Entities providing exchange services between virtual assets and fiat currencies, or custodial wallet services, were required to register before commencing activity. That registration regime has now been superseded by the MiCA CASP authorisation framework, but entities that registered under the old regime benefit from a transitional period during which they may continue to operate while their full MiCA authorisation application is processed.

The MiCA authorisation process under Articles 59 to 76 of the Regulation involves submission of a detailed application to Banco de Portugal covering: a programme of operations describing the crypto-asset services to be provided; a business plan with financial projections; governance arrangements including the identity and qualifications of all directors and senior managers; AML/CFT policies and procedures; IT security and cybersecurity arrangements; a description of safeguarding arrangements for client assets; and evidence of minimum own funds (which vary by service category, ranging from EUR 50,000 for basic exchange services to EUR 150,000 for custody and administration).

Banco de Portugal has a statutory period of 25 working days to assess whether an application is complete, and a further 40 working days to make a substantive decision once the application is deemed complete. In practice, the process frequently takes longer due to requests for additional information, particularly regarding AML/CFT procedures and IT security documentation. Founders should budget for a realistic timeline of four to eight months from initial submission to authorisation.

The cost of the authorisation process is material. Banco de Portugal charges application fees, the level of which depends on the category of services applied for. Legal and compliance advisory fees for preparing a MiCA-compliant application typically start from the low tens of thousands of EUR, depending on the complexity of the business model and the number of service categories applied for. Founders who attempt to prepare applications without specialist legal and compliance support consistently produce incomplete or non-compliant documentation, resulting in rejection or prolonged back-and-forth with the regulator.

Three practical scenarios illustrate the range of situations:

• A two-person team building a non-custodial DeFi protocol with no fiat on/off ramp and no custody of client assets may fall outside the scope of MiCA';s CASP authorisation requirement entirely, depending on the degree of decentralisation. Legal analysis of the specific protocol architecture is essential before drawing this conclusion.
• A startup offering crypto-to-fiat exchange and custodial wallets to retail clients across the EU must obtain full CASP authorisation from Banco de Portugal before passporting services into other member states. The minimum own funds requirement and governance obligations are non-negotiable.
• An institutional blockchain infrastructure provider offering B2B services - such as node operation, smart contract auditing or tokenisation technology - may not require CASP authorisation but will still need to address AML/CFT obligations if its services touch payment flows or asset transfers.

A non-obvious risk is that MiCA';s scope continues to be interpreted by the European Securities and Markets Authority (ESMA) and the EBA through binding technical standards and Q&A guidance. A business model that appears outside MiCA';s scope today may be captured by subsequent regulatory clarification. Building in a compliance review mechanism from the outset is therefore a structural necessity, not an optional extra.

---

Portugal';s tax treatment of crypto assets is now codified, following years of informal guidance and uncertainty. The key provisions are contained in Articles 10 and 72 of the CIRS (Personal Income Tax Code) and Articles 3 and 20 of the CIRC (Corporate Income Tax Code), as amended by the State Budget Law for 2023.

At the corporate level, a Portuguese-resident company is subject to IRC (Imposto sobre o Rendimento das Pessoas Coletivas, corporate income tax) at a standard rate of 21% on taxable profit, with a municipal surcharge (derrama municipal) of up to 1.5% and a state surcharge (derrama estadual) applicable to profits above EUR 1.5 million. Crypto-asset gains realised by a Portuguese company are treated as ordinary business income and taxed accordingly. There is no separate capital gains regime for companies holding crypto assets - gains are included in taxable profit in the year of realisation.

The participation exemption regime under Article 51 of the CIRC allows a Portuguese holding company to receive dividends and capital gains from qualifying subsidiaries free of IRC, provided the holding company owns at least 10% of the subsidiary for a minimum of 12 months. This is relevant for founders structuring a Portuguese holding company above an operating subsidiary in another jurisdiction, or for founders using Portugal as a hub for a multi-jurisdictional blockchain group.

At the personal level, the tax treatment of crypto assets for individual founders and investors depends on the nature of the income and the holding period. Under the 2023 reforms, gains from the disposal of crypto assets held for less than 365 days are taxable as capital gains at a flat rate of 28% (or at progressive rates if the individual elects to aggregate). Gains from crypto assets held for more than 365 days are exempt from personal income tax for individuals - a provision that makes Portugal genuinely attractive for long-term holders and founders who receive token allocations.

Mining and staking income is treated as self-employment income (categoria B) or, if conducted through a company, as ordinary business income. The classification of income from liquidity provision, yield farming and other DeFi activities remains an area of interpretive uncertainty, and the AT has not issued comprehensive guidance covering all DeFi use cases.

The Non-Habitual Resident (NHR) regime, governed by Article 16 of the CIRS, historically offered qualifying individuals a flat 20% rate on Portuguese-source income and exemptions on most foreign-source income for a 10-year period. The NHR regime was reformed with effect from 2024, replaced by the IFICI regime (Incentivo Fiscal à Investigação Científica e Inovação), which targets specific professional categories including technology and innovation roles. Founders and senior technical staff relocating to Portugal to work in a crypto or blockchain company may qualify for IFICI benefits, but the eligibility criteria are more prescriptive than the original NHR regime and require careful assessment.

Many underappreciate the interaction between corporate tax planning and substance requirements. A Portuguese company that exists primarily to benefit from the participation exemption or the IFICI regime, without genuine economic activity in Portugal, risks being challenged by the AT under the general anti-avoidance rule (CGAA, Cláusula Geral Anti-Abuso) contained in Article 38 of the Lei Geral Tributária (General Tax Law). The AT has increased its scrutiny of holding structures and IP holding arrangements in recent years.

To receive a checklist for tax structuring of crypto and blockchain companies in Portugal, including IFICI eligibility and corporate tax optimisation, send a request to info@vlolawfirm.com

---

Access to banking is the single most common operational bottleneck for crypto and blockchain companies in Portugal. Portuguese banks - including Caixa Geral de Depósitos, Millennium BCP and Novo Banco - have historically been cautious about onboarding crypto businesses, citing AML/CFT risk and reputational concerns. The position has improved since the introduction of the VASP registration regime and, more recently, MiCA authorisation, because a regulated entity presents a more manageable compliance profile than an unregistered one.

In practice, a Portuguese-incorporated crypto company with a valid CASP authorisation from Banco de Portugal has a materially better chance of opening a corporate bank account than an unregistered entity. However, even authorised entities should expect a thorough onboarding process, including detailed KYB (Know Your Business) documentation, source of funds declarations, business model explanations and ongoing transaction monitoring obligations imposed by the bank.

The practical steps for banking onboarding typically involve:

• Providing certified copies of incorporation documents, shareholder register and beneficial ownership declarations filed with the Registo Central do Beneficiário Efetivo (Central Beneficial Ownership Register, RCBE).
• Submitting the CASP authorisation decision from Banco de Portugal.
• Providing AML/CFT policies, compliance officer appointment documentation and a description of the customer due diligence procedures applied to the company';s own clients.
• Demonstrating the source of the initial capital and the expected transaction flows.

Fintech-oriented payment institutions and electronic money institutions (EMIs) licensed in other EU member states and passporting into Portugal represent an alternative to traditional banking for operational accounts, though they are not a substitute for a full banking relationship for all purposes.

A common mistake is to underestimate the time required for banking onboarding. Even with a CASP authorisation in hand, the process can take two to four months. Founders who plan to launch operations immediately after receiving regulatory authorisation frequently encounter delays because banking was not initiated in parallel with the regulatory process.

The RCBE (Registo Central do Beneficiário Efetivo) registration is mandatory for all Portuguese companies under Lei n.º 89/2017, Article 19. Failure to maintain accurate and current beneficial ownership information carries administrative penalties and can result in the suspension of certain corporate acts. For crypto companies, where ownership structures can be complex and involve token-based governance, maintaining RCBE compliance requires active management.

---

A Portuguese crypto or blockchain company rarely operates in isolation. Most founders structure a group from the outset, with Portugal serving as the EU-regulated operating entity and other jurisdictions providing complementary functions - such as a foundation in Switzerland or Liechtenstein for token governance, a BVI or Cayman entity for early-stage fundraising, or a Singapore entity for Asia-Pacific operations.

The interaction between the Portuguese entity and offshore components of the group requires careful legal and tax analysis. Transfer pricing rules under Article 63 of the CIRC apply to transactions between related parties, and the AT requires that intra-group transactions be conducted at arm';s length. IP licensing arrangements, management fee structures and intercompany loans must all be documented and priced consistently with the OECD Transfer Pricing Guidelines, which Portugal follows.

Token issuance is a structurally complex area. Under MiCA, tokens are classified as asset-referenced tokens (ARTs), e-money tokens (EMTs) or other crypto-assets (utility tokens and similar). ARTs and EMTs require specific authorisation and are subject to more stringent requirements than other crypto-assets. A Portuguese company issuing a utility token that does not qualify as an ART or EMT may do so without a separate token-specific authorisation, but must still comply with MiCA';s white paper requirements under Articles 4 to 15 and notify Banco de Portugal before publication.

Tokens that qualify as transferable securities under the Markets in Financial Instruments Directive (MiFID II) fall outside MiCA';s scope and are instead regulated under the Código dos Valores Mobiliários (Securities Code, CVM) and supervised by the Comissão do Mercado de Valores Mobiliários (CMVM, the Portuguese Securities Market Commission). A security token offering (STO) from a Portuguese entity therefore requires a prospectus or an applicable exemption under the Prospectus Regulation, and CMVM approval or notification. The CMVM and Banco de Portugal have a memorandum of understanding governing coordination on crypto-asset matters, but the boundary between their respective jurisdictions remains an area requiring case-by-case legal analysis.

Three scenarios illustrate the structuring choices:

• A founder raising EUR 2 million through a utility token sale to non-US investors, using a Portuguese Lda. as the issuing entity, must prepare a MiCA-compliant white paper, notify Banco de Portugal, and ensure the token does not qualify as a financial instrument under MiFID II. Legal fees for this process typically start from the mid-tens of thousands of EUR.
• A DeFi protocol with a governance token that grants voting rights and a share of protocol revenues is likely to be classified as a financial instrument in Portugal, requiring CMVM involvement and a prospectus or exemption analysis. Founders who proceed without this analysis risk enforcement action.
• A blockchain infrastructure company providing B2B tokenisation services to real estate funds may need to coordinate between Banco de Portugal (for any CASP elements), CMVM (for any securities elements) and the AT (for tax treatment of tokenised asset income).

The risk of inaction is concrete: operating a crypto-asset service without MiCA authorisation in Portugal exposes the entity and its directors to administrative fines under MiCA Article 111, which provides for fines of up to EUR 700,000 for legal persons (or higher amounts where the infringement generated a calculable financial benefit). Directors can face personal liability. The longer an unauthorised operation continues, the greater the cumulative exposure.

We can help build a strategy for structuring your crypto or blockchain group in Portugal, including regulatory sequencing, tax planning and banking access. Contact info@vlolawfirm.com

---

What is the biggest practical risk for a crypto company setting up in Portugal without local legal advice?

The most significant risk is regulatory non-compliance from day one. Many founders assume that incorporating a Portuguese company and opening a website is sufficient to begin offering crypto-asset services. Under MiCA, providing crypto-asset services without prior CASP authorisation from Banco de Portugal is a regulatory infringement that can result in substantial fines and, in serious cases, criminal liability for directors. A secondary risk is banking failure: without proper structuring and documentation, even an authorised entity may be unable to open a corporate bank account, rendering the entire setup commercially non-functional. Early legal advice prevents both categories of problem.

How long does the full setup process take, and what does it cost at a general level?

Incorporating a Portuguese Lda. through the Empresa na Hora (Company on the Spot) service can be completed in one to two business days. However, the full setup - including CASP authorisation from Banco de Portugal, banking onboarding, AML/CFT framework implementation and tax registration - realistically takes six to twelve months. Legal, compliance and advisory fees for the complete process typically start from the low tens of thousands of EUR for a straightforward single-service CASP, and can reach the mid-hundreds of thousands for complex multi-service authorisations with token issuance components. Founders who underbudget for the regulatory process consistently encounter delays and cost overruns.

When should a founder choose Portugal over another EU jurisdiction for a crypto or blockchain company?

Portugal is a strong choice when the founder wants EU regulatory passporting, a competitive personal tax environment for relocating founders and staff, a relatively accessible CASP authorisation process compared to more complex jurisdictions, and a jurisdiction with a positive track record for crypto businesses. It is less suitable when the business model requires a banking licence or payment institution licence as the primary regulated activity (Ireland or Luxembourg may be preferable), when the primary market is a specific large EU member state with a preference for local regulation, or when the founder has no intention of establishing genuine substance in Portugal. The decision should be driven by the specific business model, target markets and founder circumstances, not by general reputation alone.

---

Portugal offers a credible, EU-compliant foundation for crypto and blockchain companies that are prepared to invest in genuine substance, regulatory authorisation and professional legal structuring. The combination of MiCA passporting, a codified crypto tax regime and an accessible corporate formation process makes it one of the more practical choices in Europe. The risks - regulatory non-compliance, banking failure and tax challenge - are real but manageable with the right preparation.

To receive a checklist for the complete crypto and blockchain company setup and structuring process in Portugal, including regulatory, tax and banking steps, send a request to info@vlolawfirm.com

Our law firm VLO Law Firms has experience supporting clients in Portugal on crypto, blockchain and digital asset regulatory and structuring matters. We can assist with CASP authorisation applications, corporate formation, tax structuring, token issuance analysis and banking access strategy. To receive a consultation, contact: info@vlolawfirm.com