Gibraltar: Small Jurisdiction, Specific Uses

Who a Gibraltar company is built for

Founders who land here usually need one of three outcomes. The first is a corporate shell under a GFSC application for payments, e-money, investment business, insurance mediation, or DLT provider work. The second is an operating company for remote gaming or related B2B supply, where the Licensing Authority owns the permission and the GFSC still matters for AML and, where relevant, value-transfer technology. The third is a UK-nexus financial business that wants Gibraltar authorisation plus continued access to UK customers under post-Brexit transitional arrangements, pending the permanent Gibraltar Authorisation Regime. Licensing and company formation for fintech and high-risk models treats the Gibraltar Ltd as one layer in that roadmap, not as a licence substitute.

The formation fails when the plan is a cheap EU-style holdco with treaty shopping and no people. Gibraltar is outside the European Union and does not hand you Freedom of Establishment across the EEA. Banks, counterparties, and tax administrations will ask where management sits, what income is accrued in and derived from Gibraltar, and why the Rock rather than an EU vehicle if your customers sit on the Continent. If you cannot answer those questions before you instruct a company manager, redesign the jurisdiction choice.

What Companies House Gibraltar actually registers

Gibraltar company formation for a private company limited by shares runs through Companies House Gibraltar under the Companies Act 2014. The government’s companies page sets the sequence: clear an acceptable name with the Registrar, then present an application to register, a memorandum of association, and articles of association. The Act also contemplates companies limited by guarantee and unlimited companies; most commercial founders use a private company limited by shares. Model memoranda and articles sit under the Companies (Model Memoranda And Articles) Regulations 2014; many packs use the model articles and amend only where the shareholder agreement demands it.

Practice around the FINC pack follows the Act’s section 9 registration route and the forms published by Companies House. Confirm the live form set on companieshouse.gi before you print or upload; agents still circulate outdated Form 1 / Form 2 labels from older practice. You need a registered office address in Gibraltar. The certificate of incorporation starts the compliance clock: UBO filing, annual returns, accounts where required, and any licence pre-application each run on their own timetable.

Government incorporation attracts a registration line and stamp duty on presentation. Urgency routes exist for accelerated incorporation. Confirm every tariff on the live Companies House fee schedule and the Companies Act fees regulations before you pay. Agent and licensed company-manager retainers sit outside those government lines. Only persons licensed to provide company registration and company management by way of business may offer those services commercially in Gibraltar.

Officers, registered office, and licensed company managers

Officer design decides whether the company can file cleanly and whether a later GFSC or gaming application looks credible. The Companies Act 2014 sets duties and liabilities for directors. Non-resident directors are allowed, but tax residence, banking KYC, and regulator mind-and-management tests still ask where decisions are made. Many packs appoint a local secretary or outsource statutory administration to a GFSC-licensed company manager. That is operational convenience, not proof of substance for a regulated permission. Founders who treat nominee paperwork as a substitute for people who can explain the business to a supervisor usually discover the gap when Stage 1 controller forms arrive. Build the officer map against the licence story you intend to tell.

Registered office and statutory address

Every Gibraltar company must maintain a registered office in Gibraltar. The address appears on the public company record and receives official correspondence. Non-resident founders almost always take a registered-office facility from a licensed company manager. That facility satisfies the Companies Act address rule; it does not equal trading premises or a GFSC-ready operational footprint. Banks and regulators distinguish a statutory address from a place where people actually run the business.

Company manager permission versus self-administration

Providing formation, management, administration, director or secretary services, nominee shareholding, or registered-office facilities by way of business is a regulated activity under the Financial Services Act 2019. The GFSC’s Company Manager permission page lists those activities. Confirm a provider on the GFSC public register before you instruct them. Managing your own company does not require a Company Manager permission; buying those services from someone else does require them to hold one.

Directors, secretary, and governance records

Directors carry fiduciary and statutory duties under the Act. If you appoint a secretary, that officer usually owns statutory registers, minutes, and filing logistics; if you do not, directors absorb those tasks. Keep identity strings identical across Companies House, the UBO Register, bank KYC, and any GFSC controller forms. Mismatched passport names create weeks of delay on licence packs that would otherwise be ready.

UBO register and the post-incorporation clocks

Incorporation without beneficial-ownership filing is incomplete compliance. The Register of Ultimate Beneficial Owners, Nominators and Appointors Regulations 2017 (RUBOR) require Gibraltar legal persons to obtain, hold, and report accurate ultimate beneficial owner information. Submission guidance frames first filing within thirty days of incorporation, with changes reported on a matching thirty-day cadence. Confirm the live windows on uboregister.egov.gi and GFSC notices before you diary them. Complex ownership chains through multiple holding companies still need tracing to natural persons who meet the beneficial-owner tests; nominee labels without underlying identity will not survive an obliged-entity check. Align passport names and residential addresses with the Companies House officer file on day one so the UBO portal and bank KYC do not diverge a week later.

Transition of the register to the GFSC

As of the September 2026 check, the UBO Register is moving under GFSC responsibility. Legal entities must submit current information through the new GFSC UBO Register under RUBOR. During the transition, the older public display may lag live filings; the public notice on the UBO portal targets resolution of that display catch-up on 1 October 2026. File on the system the Registrar directs you to use. Do not treat a stale public extract as proof that your private filing is current.

Annual returns, accounts, and tax filings

Companies House expects accounts and other returns on a largely annual rhythm. Tax administration under the Income Tax Act 2010 sits alongside company law: ordinary residence of companies turns on management and control, and corporate tax attaches to income accrued in and derived from Gibraltar at the live statutory rate category. Global minimum tax legislation from December 2024 adds group-level top-up categories for in-scope multinationals. Accounting and tax sequencing should lock residence facts before you assume Gibraltar Ltd equals low tax.

Obliged entities that spot discrepancies on the UBO Register must report them under Regulation 26A within thirty days of discovery. Treat UBO hygiene as part of compliance and risk work, not as a one-time formation checkbox.

The year-one cost stack by fee category

Founders asking what Gibraltar company registration costs need a map of line items, not a mill headline. Publishable guidance stays at categories and points to official schedules for amounts. Confirm every government figure on the live Companies House fee materials and every supervisory figure on the GFSC fees page before you instruct payment. The stack below separates government registry lines from licensed provider retainers and from supervisory application categories that only appear once a permission is in scope. Mixing those buckets is how quotes look cheap at incorporation and then double when the authorisations pack starts. Read each category against your actual model before you compare Gibraltar to an EU formation quote that never included a licence.

Companies House incorporation and urgency lines

The statutory registration line and stamp duty on presentation are the government costs of creating the company. Urgency or same-day columns exist for founders who need a certificate inside a compressed closing. Change of name, re-domiciliation, and certain public-company or prospectus filings are separate schedule rows. None of these lines include KYC packs, notarisation, apostilles, or courier.

Licensed company-manager and registered-office retainers

Annual or monthly retainers cover the statutory address, mail handling, and usually secretary or filing support. Director or nominee services, if you buy them, are additional categories. Provider capital requirements on the Company Manager permission page constrain the firm that serves you; they are not a minimum share capital rule for your operating company.

GFSC application and annual supervisory lines

If the business needs a permission, add application fees by fee block and, after authorisation, annual base fees plus activity or income-linked components under the GFSC’s published methodology. The fees page and the Annual Regulatory fees schedule for the live financial year are the sources of truth. Multi-permission applications aggregate. Banking, e-money, investment Class 2, and DLT routes also consume professional fees for business plans and policies under the staged approach.

Audit, substance, and banking preparation

Accounts preparation, independent accountant reports or audits where thresholds require them, local directors’ time, office space, and bank or PSP onboarding packs sit outside Companies House. For regulated models they often dwarf the incorporation lines.

When the GFSC perimeter attaches

A Gibraltar Ltd that will carry on regulated financial activities needs a Part 7 permission under the Financial Services Act 2019 before it markets those services. Formation alone does not authorise payments, e-money, investment business, insurance mediation, banking, or DLT provider activity. The GFSC’s Staged Application for Authorisation Approach splits initial applications into sequential stages, with a mobilisation stage available for banking, e-money, certain investment firms, and DLT. Sector clocks differ: the Commission describes maximum windows that are longer for banking, insurance, e-money, Class C payment firms, investment Class 2, and DLT than for other sectors. Confirm the live staged-process page on fsc.gi before you promise investors a go-live date.

Pre-application and Stage 1 realities

Pre-application engagement lets the authorisations team test whether your model is in scope and which permission schedule applies. Stage 1 typically centres on business model, capital, and key individuals: application forms, controller packs, source-of-wealth evidence, and the first slice of a comprehensive business plan. The GFSC will not wave through thin narratives that describe a licence without people, systems, or funding. Controllers and senior managers face fitness assessments that dig into prior regulatory history.

Mind and management for regulated firms

The staged-approach materials state that the GFSC will not approve a permission unless mind-and-management criteria are met. Expect scrutiny of where the board sits, which functions are in Gibraltar, and how outsourcing is controlled. A Companies House certificate with a registered-office plaque does not satisfy those criteria. Build the operating model first; file the company as the vehicle that will hold the permission, not as a souvenir.

DLT provider route as a worked example

Firms that use distributed ledger technology to store or transmit value belonging to others fall under Gibraltar’s DLT provider framework, administered by the GFSC since 2018 under the Financial Services Act architecture. Pre-application with the DLT team tests scope. The staged process applies, with principles covering resources, governance, client-asset protection, systems security, and financial-crime controls. A Gibraltar DLT authorisation is not a MiCA CASP passport into the EEA. Groups that need EU crypto distribution still plan a separate EU path; Medici’s live MiCA overview covers that Union perimeter without confusing it with Gibraltar’s domestic DLT permission.

Gaming heritage and the separate licensing track

Remote gaming built much of Gibraltar’s modern financial services ecosystem: payment flows, AML practice, and a deep bench of local advisors. That heritage does not mean every Gibraltar Ltd is a gaming company, and it does not put gaming permissions under the GFSC. Remote gambling licences are granted by Gibraltar’s Licensing Authority under gambling legislation, with supervision by the Gambling Commissioner. A B2C casino, betting operator, or B2B supplier needs that track in its own right.

Where crypto deposits, custody, or token mechanics appear, GFSC DLT or other financial permissions can attach in parallel. Two regulators can therefore sit on one operating model. Medici’s product focus is fintech, payments, and digital assets rather than gaming vertical sales; if gaming is your core product, instruct specialist Gibraltar gaming counsel and treat company formation as the shared corporate layer underneath both regimes.

UK nexus after Brexit: what still works

Post-Brexit, Gibraltar lost EU financial-services passporting. What remains distinctive is access between Gibraltar and the United Kingdom. Temporary transitional arrangements under the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2019 keep specified categories of Gibraltar-based firms able to provide financial services in the UK, and facilitate reciprocal UK-firm access into Gibraltar. Those Parts have been extended repeatedly. The Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025 (S.I. 2025/1182) substitute “2026” for “2025” in the expiry provision, extending the transitional window by twelve months. Confirm the live instrument on legislation.gov.uk before you rely on any date written into a board paper.

Transitional access versus the permanent GAR

The Financial Services Act 2021 creates the statutory architecture for a permanent Gibraltar Authorisation Regime (GAR). Parts of that architecture have been commenced for rule-making and definitional work; the full operational switch from annual transitional extensions to the permanent regime was still incomplete at the September 2026 check. Until GAR fully replaces the temporary rules, planning assumptions must track the statutory expiry date and any further extension instruments. Do not market permanent UK passport from Gibraltar as if GAR were already live in full.

Who the UK nexus fits

The UK nexus fits payments, e-money, insurance, and investment models whose customers sit primarily in the United Kingdom, and whose senior team can satisfy GFSC substance in Gibraltar. It fails founders who wanted EU single-market reach and assumed Gibraltar still delivered it. For a simple UK contracting brand without Gibraltar regulation, a UK company formation path may be the shorter tool; that analysis belongs to UK Companies House practice, not to stretching a Gibraltar Ltd into a mailbox for London sales.

Tax posture categories founders confuse with formation

Incorporation on the Rock does not, by itself, set a global tax rate. Under the Income Tax Act 2010, a company is ordinarily resident in Gibraltar if its management and control is in Gibraltar, or if management and control is exercised outside Gibraltar by persons who are themselves ordinarily resident in Gibraltar. English case-law ideas of central management and control still drive the analysis: highest-level direction, not day-to-day admin.

Gibraltar taxes companies on income accrued in and derived from Gibraltar. Practitioner summaries place the standard corporate rate in the fifteen percent category from 1 July 2024, with higher categories for defined utility and dominance cases. Confirm the live rate with the Income Tax Office before modelling. Double tax arrangements are limited compared with large EU treaty networks; the UK–Gibraltar arrangement matters for UK-facing groups, but it is not a substitute for a broad EU holding-company treaty map. Passive holdco shopping that needs EU Parent-Subsidiary style outcomes usually belongs in an EU member state.

Parallel fit profiles for common Gibraltar jobs

Use the same criteria under each profile in the same order: primary job of the entity, licence track, substance expectation, banking posture, fits when, fails when. Confirm live rules on Companies House, GFSC, and where relevant the Licensing Authority before you commit capital. The profiles below are decision filters, not a ranking of jurisdictions. If two profiles seem to overlap, map revenue and customer geography first; the licence track usually falls out of that map rather than the other way around. Skip any profile that does not match the money flows you actually run this year in live customer production.

GFSC-facing payments, e-money, or investment firm

Primary job: hold a Part 7 permission and contract with UK or other permitted customers from Gibraltar. Licence track: GFSC staged authorisation, with pre-application and capital evidence. Substance expectation: mind and management in Gibraltar to the Commission’s published criteria; local key functions sized to the model. Banking posture: bank and PSP onboarding after or in parallel with regulatory narrative, not before policies exist. Fits when the product is regulated financial services and the team will live the Gibraltar footprint. Fails when founders want a certificate first and a licence story later with remote rubber-stamp directors.

Remote gaming operator or B2B supplier

Primary job: hold a Gibraltar gaming permission and operate remote gambling or supply. Licence track: Licensing Authority grant; Gambling Commissioner supervision; GFSC only where financial or DLT activities attach. Substance expectation: Gibraltar nexus and systems standards under the gaming framework, plus AML that satisfies both gaming and financial-crime supervisors. Banking posture: high scrutiny of payment rails and player-fund safeguarding. Fits when gaming is the commercial core and local specialist counsel runs the licence. Fails when the real plan is an EU casino market entry that needs member-state licences you hoped Gibraltar would replace.

UK-nexus fintech using transitional access

Primary job: Gibraltar authorisation plus lawful UK customer access under the transitional instruments, and later GAR when operational. Licence track: GFSC permission in a category covered by the UK–Gibraltar arrangements; monitoring of S.I. expiry and GAR commencement. Substance expectation: same GFSC mind-and-management bar, with UK expansion treated as a material change where GFSC consent rules require it. Banking posture: UK and Gibraltar banking relationships that match the access story. Fits when UK distribution dominates and EU passporting is not required. Fails when the pitch deck still claims EU access via Gibraltar after Brexit.

Generic EU holding or IP box shopper

Primary job: hold shares or IP for EU operating companies with minimal Gibraltar activity. Licence track: none, which is the tell. Substance expectation: usually none in the plan, which conflicts with residence and bank narratives. Banking posture: weak. Fits when almost never for this mandate. Fails when the founder needs EU treaty outcomes, Parent-Subsidiary relief patterns, or Freedom of Establishment optics; pick an EU vehicle instead and keep Gibraltar for the regulated or UK-nexus cases above.

When Gibraltar company formation fails

Gibraltar fails as a generic EU holdco jurisdiction. It is outside the Union. It does not restore EEA financial passporting. Its treaty network and holding incentives are not why sophisticated EU groups chose Cyprus, Ireland, Luxembourg, or the Netherlands for shareholding stacks. If your decision tree starts with EU holding company comparison, Gibraltar should fall out early unless a GFSC, gaming, or UK-nexus reason pulls it back in.

It also fails as a no-substance tax wrapper. Management and control, accrued-in-and-derived-from sourcing, UBO transparency, and GFSC mind-and-management standards all punish empty boards. A three-day incorporation on an urgency tariff does not compress a multi-month staged licence process. Founders who buy the certificate to show progress while the operating model is still elsewhere often spend the next year explaining the gap to supervisors and banks.

Banking, AML, and substance in practice

Correspondent banks and local institutions treat Gibraltar companies through an AML lens shaped by gaming and fintech history: source of funds, source of wealth, controller transparency, and coherent activity descriptions. Expect enhanced due diligence for crypto, payments, and gaming-adjacent models. Compliance and risk packs should exist before the first bank meeting. A Companies House extract alone will not carry an onboarding file.

Substance is evidence, not slogans. Board minutes that record decisions taken in Gibraltar, arrangements for key functions, office access that matches the GFSC narrative, and outsourcing registers that show retained control are the artefacts reviewers ask for. If those artefacts cannot be produced, delay formation until they can. The registry is fast relative to authorisation; authorisation sets the real critical path.

Confirm live Companies House fees, GFSC fee blocks, UBO portal instructions, and the UK transitional expiry date before you file or market a go-live.

FAQ

Is Gibraltar still in the EU for company and financial services purposes?

No. Gibraltar is a British Overseas Territory outside the European Union. EU financial-services passporting ended with Brexit. Company law and GFSC permissions are domestic. UK market access for specified Gibraltar firms continues under UK transitional regulations pending full operation of the Gibraltar Authorisation Regime. Confirm the live statutory expiry on legislation.gov.uk before you rely on a date.

Do I need a GFSC licence to form a Gibraltar company?

No. Companies House incorporation under the Companies Act 2014 creates the legal person. A GFSC permission is required only if you will carry on regulated financial activities by way of business. Forming a company and obtaining a permission are sequential projects. Many founders complete incorporation with a licensed company manager while the staged authorisation pack is still in pre-application.

How long does Gibraltar company registration take at Companies House?

The government’s companies page describes normal incorporation in about three working days, with urgency routes on the fee schedule when documents are correct. Name clearance, KYC for the company manager, and UBO setup usually dominate the calendar more than the Registrar’s processing of a clean pack.

Can a Gibraltar company passport crypto services into the EU under MiCA?

A Gibraltar DLT provider authorisation does not create MiCA CASP passporting into the EEA. Gibraltar sits outside the Union, so MiCA does not apply as domestic law there. Groups that need EU distribution plan a separate EU authorisation. Use Gibraltar for its own perimeter and UK nexus where that fits; do not treat the DLT permission as an EU ticket.

What is the difference between the GFSC and the Gambling Commissioner?

The GFSC authorises and supervises financial services under the Financial Services Act 2019, including DLT providers and company managers. Remote gambling licences are granted by the Licensing Authority and supervised by the Gambling Commissioner under gambling legislation. One operating company may need both tracks if it combines wagering with regulated value transfer. Check each perimeter separately before you file.

Does a Gibraltar registered office count as tax residence or GFSC substance?

No. A registered office satisfies the Companies Act address rule. Tax ordinary residence turns on management and control under the Income Tax Act 2010. GFSC permissions require mind and management that meet the Commission’s criteria. An address facility from a company manager is necessary for most non-residents and insufficient alone for residence or licence substance.

What happens to UK access if the transitional regulations expire?

If Parts 2 and 3 of the 2019 Gibraltar financial-services regulations expire without the permanent GAR in force for your activity, the legal basis for specified Gibraltar firms to serve UK customers (and for reciprocal UK access) falls away for those temporary arrangements. S.I. 2025/1182 currently pushes the expiry year to 2026. Track further instruments and GAR commencement; do not assume perpetual rollover without reading the next SI.

Who must file on Gibraltar’s UBO Register?

Gibraltar-incorporated legal persons must collect, hold, and report ultimate beneficial ownership information under RUBOR. First filing guidance uses a thirty-day post-incorporation window; changes follow a matching cadence. The register is transitioning to GFSC operation, with public display catch-up targeted for 1 October 2026. Confirm the live portal when you incorporate.

‍

Source

• HM Government of Gibraltar — Companies House: Companies
• Companies House Gibraltar
• Gibraltar Companies Act 2014
• Gibraltar Income Tax Act 2010
• Gibraltar Register of Ultimate Beneficial Owners
• Gibraltar Financial Services Commission (GFSC)
• GFSC — Staged Application for Authorisation Process
• GFSC — Distributed Ledger Technology Providers
• GFSC — Trust and Company Service Providers
• GFSC — Fees
• UK SI 2025/1182 — The Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025
• UK SI 2019/589 — The Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2019
• PwC Worldwide Tax Summaries — Gibraltar: Taxes on Corporate Income
• PwC Worldwide Tax Summaries — Gibraltar: Corporate Residence
• Medici Expert — Licensing and Company Formation
• Medici Expert — Compliance and Risk
• Medici Expert — Accounting and Tax
• Medici Expert — The End of the Regulatory Patchwork: What MiCA Means for Every Company Eyeing the European Market

‍

‍