Cryptocurrency Regulation in Poland as of August 2026

As of August 2026, Poland enforces a layered regulatory framework combining the EU's Markets in Crypto-Assets Regulation (MiCA), domestic anti-money laundering rules, and selective sectoral laws. Crypto service providers must register with the Polish Financial Supervision Authority (KNF) before offering services to customers; individual holders of cryptocurrency face no special restrictions, but tax obligations and compliance gaps create material uncertainty for business operators.

MiCA Implementation in Poland – Registration and Authorisation Requirements

Poland adopted MiCA into domestic law through amendments to the Financial Supervision Act. The Polish Financial Supervision Authority (KNF) is the competent authority responsible for authorisation, supervision, and enforcement of all crypto asset service providers (CASPs) operating in Poland. Under MiCA Article 59 and domestic transposition, any entity offering services such as cryptocurrency exchange, custodial wallet services, or transfer of crypto-assets must obtain KNF authorisation before launching operations.

The legal forms most commonly used for CASP registration in Poland are a spółka z ograniczoną odpowiedzialnością (sp. z o.o., limited liability company) or a spółka akcyjna (S.A., joint-stock company). For a sp. z o.o., minimum share capital is 5,000 PLN; for an S.A., it is 100,000 PLN. Most small to mid-sized crypto businesses choose the sp. z o.o. structure for its flexibility and lower capitalisation requirement.

Registration with the National Court Register (Krajowy Rejestr Sądowy, KRS) takes approximately 2 to 4 weeks. Submission to KNF for CASP authorisation occurs after company incorporation. KNF's published Service Charter indicates an administrative decision timeframe of 20 working days for complete applications; in practice, most approvals are issued within 4 to 8 weeks, though complex applications involving novel staking or lending mechanisms may extend this window.

Prohibited and Restricted Crypto Activities Under Polish Law

MiCA Article 40 and its Polish domestic implementation prohibit certain crypto activities entirely, regardless of authorisation status. These include offering crypto-assets that lack proper governance or tokenomics disclosure, and services marketed as financial instruments without accompanying prospectus or regulatory approval. Additionally, offering proprietary stablecoins without specific MiCA Article 48 authorisation is prohibited.

Restricted activities require explicit advance approval. These include:

• Operating a crypto exchange (exchange service provider, ESP)
• Providing custodial wallet services (custodian for crypto-assets)
• Offering transfer services (holding and transferring customer crypto-assets)
• Providing staking or lending services (depending on whether the provider holds customer assets)

The distinction between retail and institutional customers matters for disclosure and marketing obligations. MiCA imposes stricter conflict-of-interest and suitability rules for retail customers; institutional customers (those meeting MiFID II criteria) face lighter restrictions.

Anti-Money Laundering and Know-Your-Customer Obligations

The Polish Financial Information Service (ZIF) enforces AML/CFT requirements under the Act on Counteracting Money Laundering and Terrorism Financing (USTAOPML). All CASPs are obliged financial institutions (OFI) and must comply with customer due diligence (CDD), enhanced due diligence (EDD) for high-risk customers, and transaction reporting.

Customer verification must be completed before account opening or the first transaction. For customers exceeding 10,000 EUR in a single transaction or 50,000 EUR cumulatively within 30 days, enhanced due diligence (including source of funds verification) is mandatory. Beneficial ownership verification is required for corporate customers and trusts.

Transaction reporting thresholds are set at 10,000 EUR for suspicious activity (regardless of amount) and 100,000 EUR for large cash or cross-border transfers. Failure to file suspicious activity reports (SAR) with ZIF carries fines up to 5 million PLN for the entity and personal liability for compliance officers. Late or incomplete CDD filings attract administrative penalties of 10,000 to 100,000 PLN per violation.

Tax Treatment of Cryptocurrency Income and Capital Gains

Poland's tax code does not contain a dedicated cryptocurrency section; instead, tax treatment depends on the nature of the activity and the taxpayer's residency. This creates practical ambiguity and makes professional advice essential before launching operations.

For individuals resident in Poland: cryptocurrency trading profits are generally treated as capital gains (taxable at 19% PIT) if the individual is not deemed a professional trader. Frequency, scale, and intent determine professional status. Mining and staking rewards are taxed as ordinary business income (up to 32% PIT depending on tax bracket). No withholding tax applies at source; taxpayers must report gains on their annual PIT-37 or PIT-38 forms.

For business entities (sp. z o.o. or S.A.): all cryptocurrency gains and trading profits are taxed as corporate income at 19% CIT. Mining and staking rewards are deductible expenses to the extent they correspond to electricity, hardware depreciation, and labour costs. Unrealised mark-to-market gains are not taxed; losses may be carried forward up to five years.

VAT implications: the Polish tax authority (KIS) has issued guidance treating crypto-to-crypto exchanges as VAT-exempt (similar to currency exchange), but fiat-to-crypto and crypto-to-fiat transactions may attract VAT depending on whether the operator is deemed a financial services provider. Specific VAT treatment remains contested in case law and depends on your facts.

Critical caveat: tax liability depends ultimately on your residency, the structure and scale of your operations, and the intended customer base. A formal tax opinion from a Polish tax advisor is strongly recommended before structuring your business. No legal form or regulatory authorisation guarantees a particular tax outcome.

Custody, Wallets and Staking Service Provider Rules

Any entity that holds customer cryptocurrency assets—whether in a custodial wallet, exchange escrow account, or staking pool—must obtain KNF authorisation as a custodian for crypto-assets under MiCA Article 16. This is a distinct category from an ESP and carries heightened operational and insurance requirements.

Custodians must segregate customer assets from operational funds and hold them in cold storage or other secure arrangements as defined by KNF guidance. Acceptable custody arrangements include hardware security modules, multi-signature vaults, or qualified third-party custodians (typically licensed banks). Hot wallets are generally not permitted for long-term custody.

MiCA Article 16 and Polish implementing rules require custodians to maintain professional indemnity insurance or equivalent financial guarantees covering at least the value of customer assets held. KNF publishes custody standards requiring insurance with a highly-rated insurer and minimum coverage of 100 percent of average assets under custody.

Staking services are permissible under Polish law if structured as either (1) a delegated staking arrangement in which the customer retains control of the private key, or (2) a custodial staking service in which the provider holds the asset. Type 2 requires full custodian authorisation; Type 1 may fall outside the definition of a custodian if the customer has an unconditional right to withdraw.

Enforcement, Fines and Recent KNF Actions

Since 2024, KNF has issued enforcement orders and imposed significant fines on unauthorised crypto operators and compliance-deficient CASPs. Common violation patterns include: (1) operating a CASP without prior authorisation, (2) inadequate customer identity verification and AML/CFT reporting, (3) failure to segregate or insure customer assets, and (4) misleading marketing of staking or lending products as guaranteed returns. Fines for unauthorised operation range from 500,000 PLN to 10 million PLN depending on scale and duration of the violation.

KNF has also pursued personal liability actions against compliance officers and beneficial owners of non-compliant entities. Deficient custody arrangements and late AML reporting are primary compliance gaps among authorised CASPs. These patterns should inform your compliance roadmap and governance structure.

Practical Compliance Roadmap for Foreign and Domestic Crypto Businesses

Step 1: Legal form and registration (Weeks 1–4). Establish a sp. z o.o. or S.A. with the KRS. A sp. z o.o. requires a notarised articles of association (Umowa Spółki) and registration with the district commercial court. Deposit 5,000 PLN minimum capital into a dedicated bank account in the company's name. Obtain a Polish tax identification number (NIP) from the tax authority.

Step 2: Governance and compliance infrastructure (Weeks 4–8). Appoint a compliance officer (not a director) and establish written AML/CFT policies and procedures. Engage a licensed Polish accountant and tax advisor. Enter into a service provider agreement with a qualified custodian (if you plan to hold customer assets) or implement your own cold storage infrastructure with documented procedures and insurance.

Step 3: KNF authorisation application (Weeks 8–16). Prepare and submit the full CASP authorisation dossier to KNF. Required documents include:

• Completed application form (Form KNF-CASP available on KNF website)
• Articles of association and certificate of incorporation
• Beneficial ownership declaration (declaration of ultimate beneficial owner)
• CVs and criminal background clearance for all board members and compliance officer
• Detailed business plan (services, target customers, risk management, AML procedures)
• Custody agreement or technical specifications for asset storage
• Insurance certificate (for custodian applicants)
• Financial projections and proof of adequate capitalisation

Step 4: KNF review and approval (Weeks 16–24). KNF will issue preliminary findings or a request for supplementary information (typically within 20 working days of a complete application). Address any deficiencies promptly; incomplete responses may reset the timeline. Approval is notified in writing and published in the KNF register of authorised CASPs.

Step 5: Post-authorisation compliance (Ongoing). After approval, submit quarterly AML/CFT reports to ZIF (due 30 days after quarter-end). File annual audited financial statements with KNF (due 4 months after year-end). Notify KNF of any material changes to your business model, key personnel, or custody arrangements within 10 working days. Maintain detailed transaction logs and customer files for at least five years.

Cross-border point: If you operate from another EU member state and serve Polish customers, your home regulator issues authorisation under MiCA, but you must still comply with Polish AML/CFT rules and report suspicious activity to ZIF. A Polish branch registration may also be required with KRS. Consult your home regulator and a Polish AML specialist on the specific obligations for your jurisdiction pairing.

Frequently Asked Questions

What legal form must I choose to operate a crypto exchange in Poland, and what is the minimum share capital requirement?

A limited liability company (sp. z o.o., pronounced "spółka z ograniczoną odpowiedzialnością") is the most practical form. Minimum share capital is 5,000 PLN, deposited into a company bank account before registration. An alternative is a joint-stock company (S.A.), which requires 100,000 PLN minimum capital but is less common for early-stage crypto operators due to higher formality and cost. Both forms require incorporation with the National Court Register (KRS), taking 2 to 4 weeks.

Can I legally offer cryptocurrency staking or lending services to Polish customers without KNF authorisation?

No. If you hold or control the customer's cryptocurrency (custodial staking or lending), you must obtain KNF authorisation as a custodian or CASP beforehand. Non-custodial services in which the customer retains private key control are less regulated, but marketing such services without clear risk warnings exposes you to enforcement risk. In all cases, you remain subject to AML/CFT reporting requirements, which are independent of MiCA authorisation status.

How does Poland tax cryptocurrency mining income differently from trading profits, and do I file under capital gains or business income rules?

For individuals, mining rewards are ordinary income (taxed at marginal PIT rates up to 32%), while trading profits are capital gains (fixed 19% PIT) if the individual is not a professional trader. Determination of professional status depends on frequency, scale, and intent. For businesses, both mining and trading are corporate income (19% CIT), and mining costs (electricity, hardware depreciation) are deductible. Tax residency is critical; non-residents face different withholding and reporting rules. Consult a Polish tax advisor to confirm your personal classification before launching operations.

What documentation must I submit to the Polish Financial Supervision Authority to register as a crypto service provider, and how long does approval typically take?

Submit a completed KNF application form (available on the KNF website), articles of association, beneficial ownership declaration, CVs for board members and compliance officer, a detailed business plan, custody agreement or asset storage specifications, insurance certificate, and financial projections. Complete applications are typically approved within 4 to 8 weeks; the KNF Service Charter specifies a 20-working-day administrative decision window, but supplementary information requests can extend timelines.

If I operate a crypto business from another EU member state but serve Polish customers, am I subject to KNF rules or only my home regulator's rules?

You are subject to both. Your home regulator (in your EU member state of establishment) issues MiCA authorisation. However, you must also comply with Polish AML/CFT obligations, including customer due diligence and suspicious activity reporting to the Polish Financial Information Service (ZIF). KNF may also require a Polish branch registration or equivalent legal presence if you actively market to Polish customers. Consult your home regulator and a Polish AML specialist to confirm the specific registration and reporting requirements for your jurisdiction pair.

Next Steps

If you are ready to launch a crypto business in Poland or expand existing operations to Polish customers, confirm (1) your legal form and incorporation timeline, (2) whether your planned services fall within MiCA scope, and (3) your personal tax residency and business income classification with a Polish corporate tax advisor. These decisions will determine your compliance pathway and cost structure. Once you have clarity on these foundations, engage a Polish compliance and regulatory counsel to guide your KNF authorisation application and AML/CFT setup. Rushing to launch without this groundwork exposes you to enforcement action, fines, and personal liability for officers and beneficial owners.