Monaco's Crypto Bill 1131: What's Next

A four-year-old law is about to be replaced

On 6 August 2026, the Prince's Government tabled Bill No. 1131 with the Conseil National. It would regulate the activities of crypto-asset service providers in Monaco — and it is designed to replace Law No. 1.528 of 7 July 2022 entirely, not amend it.

This matters now precisely because it has not happened yet. The bill is at the start of its parliamentary review. Nothing has changed legally today, and the practical detail will arrive later through implementing texts. That gap is the useful part: firms that read the direction of travel now will be positioned when the rules land, rather than scrambling afterwards.

Why Monaco is rewriting rules it only wrote in 2022

The Government's own framing is that the 2022 framework has become obsolete relative to how European regulation has developed since. Two external reference points are named explicitly: the EU's Markets in Crypto-Assets Regulation (MiCA), and the standards of the Financial Action Task Force (FATF).

Here is the distinction that trips people up. Monaco is not an EU member state, and MiCA does not apply in the Principality by operation of law. What is happening is deliberate convergence: Monaco choosing to build a domestic regime that reads as credible alongside the European one, while remaining Monegasque law administered by Monegasque authorities. An EU or French authorisation is not a passport into Monaco, and it will not become one under this bill.

For anyone in the Principality's financial ecosystem, the takeaway is that Monaco is competing on the quality of its supervision rather than on regulatory lightness. That is a strategic signal about the kind of firms the Principality wants to attract.

A narrower list of what you are allowed to do

The most consequential design choice in the bill is selectivity. Rather than defining crypto activity broadly and licensing whoever applies, the Government has chosen to spell out precisely which crypto-asset services may be carried out in Monaco.

Read that as a filter. A service that falls outside the enumerated list does not become lightly regulated — it becomes unavailable. Any firm whose model sits at the edges of the current framework should be asking, well before adoption, whether its specific activity appears in the new list at all.

Alongside this, the bill introduces professional obligations across three areas: governance, prudential rules, and standards of conduct. These are the familiar building blocks of supervised financial activity — who is accountable internally, what capital and risk safeguards you hold, and how you are expected to behave toward clients. They are considerably more demanding than an informal operating setup.

Three authorities, one authorisation

Under the bill, a crypto-asset service provider needs prior authorisation from the Commission de Contrôle des Activités Financières (CCAF). That application is examined with input from two further bodies: the Autorité Monégasque de Sécurité Financière (AMSF) and the Agence Monégasque de Sécurité Numérique (AMSN).

The involvement of the digital security agency is the detail worth pausing on. It means the assessment is not purely financial. Technical and cybersecurity posture — how you hold keys, secure infrastructure, handle incidents — becomes part of whether you are authorised to operate at all, not a matter you resolve privately after the licence is granted. Firms in this space should treat security architecture and its documentation as a licensing input.

The CCAF's supervisory mandate expands accordingly, both to enforce the new framework and to prevent illicit practices under it.

What existing licence holders should assume

The published material does not set out transition arrangements for firms authorised under Law 1.528, and the bill still has to pass. We are not going to guess at grandfathering provisions that have not been published — that is exactly the kind of question to put to Monegasque legal counsel, who can read the tabled text in full and advise on your specific authorisation.

What is reasonable to plan for: a framework that is more demanding than the one you were licensed under, with implementing texts arriving after adoption. Assume documentation you can produce on request, not documentation you assemble when asked.

If crypto is adjacent to your business, not central to it

Most Monaco businesses are not crypto-asset service providers. Several are close enough to be affected anyway.

If you accept digital assets as payment, work with wealth-management or family-office clients, or run marketing that references crypto services, the vocabulary you use publicly is about to sit against a sharper legal backdrop. Website copy that implies a regulated status you do not hold is a risk in any supervised sector, and a tightening regime makes loose claims more visible, not less. This is worth a review pass on service pages, footers, and disclosures — the same discipline that a serious private wealth website already applies.

Compliance content also has a translation dimension. Regulatory language does not survive casual translation, and a multilingual website that states one thing in English and something subtly different in French is a genuine exposure rather than a cosmetic flaw.

Finally, note that this sits alongside Monaco's data protection regime under Law No. 1.565 of 3 December 2024, supervised by the APDP. Crypto firms handle identity and transaction data at scale, so data protection compliance is a parallel obligation, not a subset of financial supervision.

What to do between now and adoption

Track the bill through the Conseil National rather than waiting for a press release about the final law. Map your actual activities against the services the bill enumerates. Get your governance, capital, and security documentation into a state where it can be handed over, and take Monegasque legal advice on anything touching your authorisation status. Nothing here is a substitute for that advice — regulatory positions in Monaco are specific, and this bill is still moving.

If your digital presence needs to reflect a regulated reality accurately — clear service descriptions, defensible claims, consistent multilingual compliance copy — get in touch.