Asking whether cryptocurrency is legal in a country sounds simple, but the answer is rarely a single yes or no. A jurisdiction may allow individuals to own Bitcoin while restricting its use for payments. It may license exchanges but prohibit a particular derivative, require approval for promotions, regulate stablecoin issuers separately, or impose reporting rules on transfers. A platform can also be legal in one country and unauthorised to solicit customers in another.
Quick answer: verify the exact activity, asset, provider and date through the national regulator, legislation database and tax authority. A global map or exchange blog is a starting point, not legal confirmation.
What the old global statistic actually meant
The original version of this page reported a 2023 CoinGecko study that classified more than half of the countries it reviewed as having legalised cryptocurrency. That figure is a historical snapshot based on the study’s definitions. It should not be converted into a 2026 legal claim by merely changing the year.
International reviews show why a fixed percentage ages badly. In October 2026, the Financial Stability Board’s implementation review found progress but also significant gaps and inconsistencies across national crypto and stablecoin frameworks. Countries continue to introduce, revise and enforce different rules. The practical task is therefore not counting “legal” countries; it is determining what is permitted for a particular user and service now.
Crypto legality has several layers
Owning and transferring an asset
A country may permit personal ownership and peer-to-peer transfers without recognising crypto as legal tender. Legal tender status concerns what must be accepted for debts; it is not the same question as whether a person may hold a digital asset.
Operating an exchange or custody business
Service providers may need authorisation, registration or both. Requirements can cover capital, governance, safeguarding, complaints, cybersecurity, anti-money-laundering controls and reporting. The label used for the provider also varies: CASP, VASP, digital payment token service, money service business or another local term.
Marketing and selling to the public
Financial-promotion rules can apply even when users are allowed to own the asset. A foreign website may be accessible but prohibited from targeting local consumers. Influencers and affiliates can also have disclosure or approval obligations.
Payments, mining and decentralised applications
Payment use may trigger separate currency, payments or merchant rules. Mining can be affected by licensing, electricity, environmental or import restrictions. Decentralised finance can involve securities, lending, derivatives, collective investment, sanctions and software questions that a basic exchange licence does not answer.
Tax and reporting
Legal ownership does not mean tax-free ownership. Sales, swaps, payments, staking rewards, mining income and transfers can produce different reporting consequences. Provider reporting regimes may give authorities more information, but users still need their own records.
A reliable verification method
- Define the activity. Write down whether you want to buy, sell, hold, transfer, accept payment, mine, stake, lend, issue a token or operate a service.
- Identify the jurisdiction. Residence, physical location, customer location and the provider’s establishment can all matter. Citizenship alone may not answer the question.
- Find the competent authority. Start with the official financial regulator, central bank, securities authority, payments supervisor or government legislation portal.
- Check the exact legal entity. Match the company name, licence number, authorised services and official domain—not just a brand or app name.
- Read warning lists. Regulators often publish unauthorised firms, cloned entities and restricted domains.
- Confirm effective dates. A law may be adopted but not yet in force, or a transition may have ended.
- Check tax and sanctions rules separately. Financial authorisation does not settle tax, reporting or cross-border restrictions.
- Save evidence. Keep the register entry, terms, fee schedule and date checked before transferring funds.
European Union: use the MiCA registers
The EU Markets in Crypto-Assets Regulation created a common authorisation framework for many crypto-asset services. ESMA publishes an interim MiCA register covering authorised crypto-asset service providers, certain issuers and white papers, as well as non-compliant entities reported by authorities. The data comes from national competent authorities and is updated regularly.
A white paper appearing in the register is not an official endorsement; ESMA explicitly states that white papers listed there have not been reviewed or approved by a competent authority. Verify the provider’s authorised services and any national information. MiCA transitional arrangements could not extend beyond 1 July 2026, so an old claim that a firm is merely “grandfathered” needs current confirmation after that date.
United Kingdom: registration and promotion are different
The UK framework continues to evolve. The Financial Conduct Authority’s cryptoasset portal explains the current anti-money-laundering registration and financial-promotion rules and publishes the timetable for the planned broader regime. As of July 2026, the FCA expected that new regime to start on 25 October 2027, subject to the final process.
Check the FCA register and warning list, but also inspect what the registration covers. Registration under money-laundering rules is not identical to full prudential regulation of every product, and it does not insure a customer against market losses.
Singapore and Canada: examples of official directories
Singapore’s Monetary Authority provides a Financial Institutions Directory that can be filtered for digital payment token services. The directory identifies the legal institution and licence status. Users should match the domain and service rather than trusting a screenshot of a licence.
The Government of Canada’s crypto-assets consumer page directs users to securities-registration searches and authorised-platform lists. It also warns that ordinary business registration is not the same as registration with a securities regulator and that crypto assets generally are not covered by deposit insurance.
United States: one registration is not complete approval
US oversight can involve federal and state authorities depending on the service and asset. A money transmitter may register with FinCEN for Bank Secrecy Act purposes and still need state licences or other permissions. FinCEN has specifically warned that MSB registration does not confer approval or legitimacy. A fraudulent site can misuse a genuine registration record or register an entity and then make false claims.
For a US-facing platform, check the legal entity across relevant state and federal databases, review regulator warnings, and determine whether the offered product is spot crypto, a security, a derivative, lending, custody or something else. No single database answers every question.
Red flags in “licensed worldwide” claims
- A logo for a regulator without a link to a searchable official entry.
- A company number presented as a financial-services licence.
- A licence belonging to a similarly named but unrelated entity.
- An MSB filing described as government approval.
- An app-store listing or bank transfer option presented as proof of authorisation.
- A licence that covers payments but not trading, custody or investments.
- A claim that “crypto is legal here” without naming the activity or effective date.
- Pressure to deposit before independent verification.
What regulation can and cannot protect
Authorisation can create governance, conduct, safeguarding, record-keeping and complaint obligations. It can give supervisors enforcement tools and make the responsible legal entity easier to identify. Those are meaningful protections.
Regulation does not guarantee that a token will retain value, that a smart contract cannot fail, or that every stolen asset will be recovered. Deposit insurance may not cover crypto holdings, and client-asset treatment in insolvency depends on the jurisdiction and contract. Read the custody terms and ask whether the provider may lend, pledge or pool assets.
A concise country-check checklist
- Is personal ownership allowed?
- Can the asset be used for payments?
- Is the provider authorised for the exact service?
- Are promotions to local consumers permitted?
- What custody and insolvency protections apply?
- Are transfers, staking or lending restricted?
- What tax and reporting records are required?
- Is the regulator warning about the entity or domain?
Bottom line
There is no durable global percentage that tells an individual whether a crypto activity is legal. The answer depends on the country, date, asset, service and user. Treat the 2023 “more than half of countries” statistic as history, not 2026 legal advice. Define the activity, verify the provider in official registers, read warning lists and check tax rules separately. If the amount or business activity is material, obtain advice from a qualified professional in the relevant jurisdiction before acting.