Crypto Regulation in Israel: 2026 Update

Crypto regulation in Israel is undergoing a significant transition. The Israel Securities Authority (ISA) and the Bank of Israel are actively reshaping the legal framework for digital assets, moving from a patchwork of guidance letters toward a structured licensing regime. Businesses operating in the Israeli crypto market now face concrete registration requirements, expanding AML obligations, and a tax treatment that has been clarified through binding rulings. This guide covers the current regulatory landscape, the key authorities involved, licensing and compliance requirements, tax obligations, and what the ongoing legislative process means for your operations.

Israel does not yet have a single comprehensive crypto law, but the regulatory framework is built from several overlapping instruments. The primary source of authority over crypto assets that qualify as securities is the Securities Law of 1968, as interpreted and applied by the ISA. The ISA has issued a series of position papers and staff guidance clarifying when a token constitutes a security and therefore falls under the full securities regime, including prospectus requirements, trading platform licensing, and ongoing disclosure obligations.

For anti-money laundering purposes, the Prohibition on Money Laundering Law of 2000 and its accompanying regulations apply directly to virtual asset service providers (VASPs). The Financial Intelligence and Prohibitions Authority (FIPA) oversees AML compliance, and the relevant regulations were amended to bring crypto exchanges, wallet providers, and certain other intermediaries within the scope of mandatory reporting and customer due diligence requirements.

The Bank of Israel plays a separate but important role. It has issued guidance on the provision of banking services to crypto businesses, a matter that has historically been a significant practical obstacle for Israeli crypto companies. The Capital Market, Insurance and Savings Authority (CMISA) has jurisdiction over certain investment products linked to digital assets, particularly where pension funds or insurance companies are involved.

A non-obvious requirement is that a business may fall under multiple regulators simultaneously. An exchange that offers both security tokens and utility tokens, for example, must navigate ISA requirements for the former while also satisfying FIPA';s AML obligations across its entire operation.

The most consequential recent development in crypto regulation in Israel is the formal VASP registration regime. Under amendments to the AML regulations, any entity providing virtual asset services in or from Israel must register with FIPA before commencing operations. The registration process involves submitting detailed information about the business structure, beneficial ownership, internal compliance policies, and the technical systems used to monitor transactions.

The categories of activity that trigger registration obligations are broadly defined. They include:

• Exchange between virtual assets and fiat currencies
• Exchange between one or more forms of virtual assets
• Transfer of virtual assets on behalf of customers
• Safekeeping or administration of virtual assets or instruments enabling control over them
• Participation in and provision of financial services related to token issuances

A common mistake made by foreign founders entering the Israeli market is assuming that operating through a foreign entity with Israeli customers does not trigger local registration. In practice, FIPA takes a broad view of nexus, and any systematic provision of services to Israeli residents is likely to require registration regardless of where the entity is incorporated.

The registration process typically takes several weeks to several months, depending on the complexity of the business and the completeness of the initial application. Businesses that were already operating before the registration requirement came into force were given a transitional period to apply, but that window has now closed for most categories.

For activities that involve security tokens, a separate licence from the ISA is required. The ISA has established a regulatory sandbox - the Financial Technology Innovation Hub - through which businesses can test regulated activities under a temporary exemption while working toward full authorisation. This pathway is particularly relevant for platforms that offer tokenised securities or operate secondary markets for digital assets that the ISA classifies as securities.

If you are assessing whether your business model requires VASP registration, ISA licensing, or both, contact info@vlolawfirm.com. We can help structure the setup correctly the first time.

AML and KYC compliance is the most operationally demanding aspect of running a regulated crypto business in Israel. The Prohibition on Money Laundering (Service Providers in Virtual Assets) Regulations impose a layered set of obligations that mirror, and in some respects exceed, the standards applied to traditional financial institutions.

Customer due diligence must be performed before onboarding any customer. For individual customers, this means verifying identity through government-issued documents and confirming the source of funds for transactions above defined thresholds. For corporate customers, the obligation extends to identifying beneficial owners and understanding the corporate structure. Enhanced due diligence applies to politically exposed persons, customers from high-risk jurisdictions, and transactions that display unusual patterns.

Transaction monitoring is mandatory and must be automated for businesses above a certain volume. Suspicious transaction reports must be filed with FIPA within defined timeframes. The Travel Rule - requiring the transmission of originator and beneficiary information alongside virtual asset transfers - applies to transfers above the applicable threshold and must be implemented through a compliant technical solution.

Record-keeping obligations require that customer identification records and transaction data be retained for at least seven years. Compliance programmes must be documented, tested regularly, and overseen by a designated compliance officer who meets FIPA';s fit-and-proper criteria.

Many underestimate the cost and complexity of building a compliant AML programme from scratch. In practice, founders should consider engaging a local compliance consultant or law firm during the registration phase rather than retrofitting systems after the business is operational. FIPA has the authority to impose administrative sanctions, suspend registration, and refer cases for criminal prosecution where serious or repeated violations are found.

The Israel Tax Authority (ITA) has taken a clear position on the taxation of crypto assets. Digital assets are treated as property, not as currency, for tax purposes. This classification has significant practical consequences for individuals and businesses alike.

For individuals, gains from the disposal of crypto assets - whether by sale, exchange, or use to purchase goods and services - are subject to capital gains tax. The applicable rate depends on the individual';s overall tax position, but the standard rate for capital gains on assets of this type is in the range applied to financial assets generally. Losses can be offset against gains from other assets in the same category.

For businesses, crypto assets held as inventory are subject to income tax on trading profits, while assets held as investments are subject to capital gains treatment on disposal. Mining income is treated as business income and taxed accordingly. The ITA has issued binding rulings clarifying these positions, and while the rulings are fact-specific, they provide a reliable framework for structuring operations.

A practical scenario: an Israeli startup that raises funds through a token sale must consider whether the proceeds constitute taxable income at the point of receipt or only upon the occurrence of a later event, such as the delivery of a product or service. The ITA';s approach to this question depends on the economic substance of the arrangement, and advance rulings are available for businesses that want certainty before proceeding.

A second scenario: a foreign company with no Israeli establishment that sells crypto assets to Israeli customers generally does not have an Israeli tax liability on those transactions, but the position changes if the company has employees, servers, or other indicators of a permanent establishment in Israel.

VAT treatment is also relevant. The ITA has ruled that crypto-to-crypto exchanges are generally outside the scope of VAT, but the provision of services for consideration in crypto is subject to VAT in the same way as services paid in fiat currency.

Israel is not a member of the European Union and is therefore not directly subject to the Markets in Crypto-Assets Regulation (MiCA). However, MiCA is shaping Israeli regulatory thinking in several important ways. The ISA and FIPA have both indicated that they are monitoring MiCA';s implementation closely and that Israeli standards will be developed with reference to it.

For businesses that operate in both Israel and EU member states, MiCA compliance does not substitute for Israeli registration, and Israeli registration does not provide passporting rights into the EU. Each jurisdiction requires separate authorisation. A common mistake is assuming that a MiCA-compliant structure automatically satisfies Israeli requirements, or vice versa.

Israel is a member of the Financial Action Task Force (FATF) and has committed to implementing FATF';s Recommendation 15 on virtual assets. The VASP registration regime and the Travel Rule implementation are direct outputs of this commitment. FATF';s mutual evaluation process creates ongoing pressure on Israeli regulators to maintain and strengthen the framework.

The ISA has also engaged with the International Organization of Securities Commissions (IOSCO) on crypto asset regulation, and Israeli positions on the classification of tokens as securities are broadly consistent with the principles developed at the international level.

For businesses considering Israel as a base for regional operations, the regulatory environment is more structured than in many comparable jurisdictions, but it is also more demanding. The combination of ISA oversight for security tokens, FIPA oversight for AML, and ITA oversight for tax means that a multi-regulator compliance programme is the baseline requirement.

The Israeli legislative process for a comprehensive digital assets law has been underway for several years. The proposed framework would consolidate oversight, clarify the boundary between security tokens and non-security tokens, and establish a tiered licensing system that distinguishes between different categories of VASP activity by risk level.

The proposed legislation is expected to address several gaps in the current framework. These include the regulatory treatment of decentralised finance (DeFi) protocols, the status of non-fungible tokens (NFTs) under securities law, and the conditions under which stablecoin issuers must hold reserves and obtain authorisation.

In practice, founders should consider that the legislative timeline in Israel has historically been subject to delay, and businesses should not plan their compliance programmes around anticipated future rules. The current framework - VASP registration with FIPA, ISA licensing for security token activities, and ITA tax obligations - is the operative baseline and will remain so until new legislation is enacted and comes into force.

The Bank of Israel has separately been exploring a central bank digital currency (CBDC) project, referred to as the Digital Shekel. This initiative is at a research and consultation stage and does not yet impose obligations on private sector participants, but it signals the direction of official thinking on digital payments infrastructure.

Businesses that are planning to launch or expand in Israel should engage with the regulatory process proactively. FIPA and the ISA both have consultation mechanisms, and early engagement with regulators can reduce the risk of a compliance gap being identified after launch.

To discuss how the current and upcoming regulatory framework applies to your specific business model, contact info@vlolawfirm.com. We can assist with documents, filings, and regulatory strategy.

Does a foreign crypto company need to register in Israel if it serves Israeli customers?

The short answer is yes, in most cases. FIPA takes a broad approach to determining whether a business is providing virtual asset services in Israel. If a company systematically markets to or serves Israeli residents - through a Hebrew-language interface, Israeli payment methods, or targeted advertising - it is likely to be treated as operating in Israel for regulatory purposes. The fact that the company is incorporated abroad and has no physical presence in Israel does not, by itself, create an exemption. Foreign companies that discover this requirement after the fact face the risk of operating in breach of the registration obligation, which can result in administrative sanctions and reputational consequences. The prudent approach is to obtain a legal assessment of nexus before launching services to Israeli customers.

How long does VASP registration in Israel take, and what does it cost?

The timeline for VASP registration with FIPA varies depending on the complexity of the business and the quality of the initial application. A straightforward application from a well-structured business with a clear compliance programme can be processed in a matter of weeks. More complex applications, or those that require FIPA to request additional information, can take several months. The state fees associated with registration are modest, but the professional costs of preparing a compliant application - including legal advice, compliance programme documentation, and fit-and-proper assessments for key personnel - typically run into the low to mid thousands of EUR equivalent. Businesses should also budget for ongoing compliance costs, including the salary or retainer of a designated compliance officer and the cost of transaction monitoring systems.

How are crypto assets taxed in Israel for a business that holds them as treasury assets?

A business that holds crypto assets as part of its treasury - rather than as inventory for trading - will generally be subject to capital gains tax on any gain realised when those assets are disposed of. The gain is calculated as the difference between the acquisition cost and the disposal proceeds, converted to Israeli shekels at the relevant exchange rates. If the business is an Israeli resident company, the gain is subject to corporate income tax at the standard rate. Mark-to-market accounting is not required for tax purposes; the tax event arises on disposal. Businesses that hold significant crypto treasury positions should consider the tax implications of rebalancing, converting to fiat, or using crypto to pay suppliers, as each of these events constitutes a disposal for tax purposes. Advance rulings from the ITA are available and can provide certainty for businesses with unusual or complex treasury arrangements.

Crypto regulation in Israel is more developed and more demanding than many international founders expect. The combination of VASP registration with FIPA, potential ISA licensing for security token activities, comprehensive AML obligations, and a clear tax framework creates a multi-layered compliance environment. The legislative process points toward further consolidation and clarification, but the current framework is the operative reality for businesses entering or operating in the Israeli market.

VLO Law Firms advises international clients on crypto regulation in Israel. We can assist with VASP registration, ISA licensing assessments, AML programme development, tax structuring, and regulatory strategy. To request a consultation, contact: info@vlolawfirm.com