High-risk merchant accounts

High-risk payment gateway and merchant accounts in Cyprus

OpenGate is a payment gateway for businesses in Cyprus in high-risk sectors: 22 of the 27 sectors we cover are open to apply, from CySEC-licensed forex and CFD brokers and MiCA crypto providers to licensed sports betting, supplements, adult platforms and subscription billing. Cyprus treats every CBD product as a medicine, permits no online pharmacy and bans distance purchases of firearms. An underwriter answers within 1 business day.

At a glance

Cyprus

Sectors open
22 of 27
Currency
Charge in EUR or other currencies, settle in EUR or yours
First answer
Within 1 business day
Go-live
As little as two weeks with a complete file
VisaMastercardAmerican ExpressApple PayGoogle PayPayPalSEPA Direct Debit

Sectors

Which Cypriot businesses we onboard

For a company established in Cyprus or selling online to consumers there, checked against the texts in force on October 28, 2026. Cyprus licenses investment firms and crypto providers that can passport across the EU, allows only sports betting online, treats every CBD product as a medicine, does not permit online sales of medicines and bans distance purchases of firearms. Every file is underwritten: open means open to apply, not approved in advance.

Open to apply

11

The sector's general rules apply.

  • Social Casino & SweepstakesFree-to-play is outside the Betting Law; paid coin packs are reviewed case by case

    A social casino that players use for free, with no purchase and no prize, falls outside Cyprus's Betting Law. The law defines a game of chance as one decided at least partly by luck and played for money or anything of economic value, whether or not the player can win, so paid coin packs and paid sweepstakes entries risk being treated as online casino games.

    The Betting Law of 2019, L.37(I)/2019, definitions (National Betting Authority, PDF)(opens in a new tab)Sector page

  • Nutraceuticals & SupplementsNotify each supplement to the Ministry of Health; a license if not sold elsewhere

    A supplement lawfully sold in another EU state may be distributed in Cyprus once the business responsible, established in Cyprus, notifies it to the Medical and Public Health Services, free, with a Greek label. Products not sold elsewhere in the EU, or with vitamins and minerals outside the regulations' annexes, need a distribution license, at €50 per product, valid five years.

    Business in Cyprus: food supplements distribution(opens in a new tab)Sector page

  • Coaching & Info Products14-day withdrawal; an online withdrawal function required since June 19, 2026

    No sector license applies, only Cyprus's Consumer Protection Law. Buyers have 14 days to withdraw from a distance contract, and digital content supplied at once loses that right only with the buyer's prior express consent and acknowledgment. Since June 19, 2026 an online sale must offer a function labeled "click here to withdraw", a "confirm withdrawal" step and an acknowledgment on a durable medium.

    Consumer Protection (Amendment) Law 2026, L.30(I)/2026 (PDF, Greek)(opens in a new tab)Sector page

  • Tech Support & IT ServicesGeneral consumer law applies; misleading and aggressive sales practices are prohibited

    No sector license applies. Cyprus's Consumer Protection Law of 2021 gathers in one statute the 14-day right to withdraw from distance contracts, the online withdrawal function required since June 19, 2026, and the ban on misleading and aggressive commercial practices, with a list of practices unfair in all circumstances. The Consumer Protection Service can fine up to 5% of turnover.

    Consumer Protection Law of 2021, L.112(I)/2021 (CyLaw, Greek)(opens in a new tab)Sector page

  • MLM & Direct SellingProduct-based network selling is lawful; pyramid schemes are banned in all circumstances

    Cyprus's Consumer Protection Law lists among practices unfair in all circumstances the creation, operation or promotion of a pyramid scheme in which consumers expect to profit more from bringing in other consumers than from selling or using products. A network that pays distributors on genuine product sales to end customers stays lawful under general consumer law.

    Consumer Protection Law of 2021, L.112(I)/2021, Annex I (PDF, Greek)(opens in a new tab)Sector page

  • Adult & Creator PlatformsLawful for adults; obscenity law applies and the EU expects real age verification

    No Cypriot ban on selling adult content to adults online was found. The Publication of Obscene Matters Law of 1963 makes it an offense, punishable by up to two years in prison, to publish material tending to deprave and corrupt those likely to see it. In March 2026 the European Commission preliminarily found four large adult platforms in breach of the Digital Services Act for lacking real age verification.

    Publication of Obscene Matters Law of 1963 (CyLaw, Greek)(opens in a new tab)Sector page

  • Online DatingNo dating-specific law; consumer and platform rules apply

    No Cypriot law specific to dating services was found. Paid memberships follow the Consumer Protection Law of 2021: price and billing information before the order, 14 days to withdraw, and since June 19, 2026 an online withdrawal function with a confirmation step. Platforms hosting user profiles also follow the EU Digital Services Act.

    Consumer Protection Law of 2021, L.112(I)/2021 (CyLaw, Greek)(opens in a new tab)Sector page

  • Timeshare & Vacation ClubsFourteen days to withdraw, no advance payment; contract in the consumer's own language

    Cyprus's Timeshare Law of 2011 gives buyers of timeshares, long-term holiday products and resale or exchange services 14 calendar days to withdraw without giving reasons, and bars the trader from accepting any advance payment, guarantee, reservation of money or acknowledgment of debt before that period ends. The contract is drawn up in the language of the consumer's member state.

    Timeshare and long-term holiday products law of 2011, 34(I)/2011 (CyLaw, Greek)(opens in a new tab)Sector page

  • Ticket Resale & EventsNo Cypriot resale price cap found; EU law bans reselling bot-bought tickets

    No Cypriot law capping the resale price of event tickets was found. EU consumer law, which Cyprus applies, treats reselling tickets to consumers that the trader bought with automated tools to get around purchase limits as unfair in all circumstances, and leisure services booked for a specific date carry no 14-day withdrawal right.

    Consumer Protection (Amendment) Law 2022, L.166(I)/2022, Annex I (PDF, Greek)(opens in a new tab)Sector page

  • Dropshipping & Cross-Border€3 duty per item category on non-EU parcels since July; €2 fee from November

    Low-value parcels imported into Cyprus from outside the EU lost their duty exemption on July 1, 2026 and now pay a temporary €3 customs duty per item category, and a €2 Union handling fee applies from November 1, 2026. Responsibility for duties and product compliance sits with the platforms, sellers and carriers involved, and VAT follows the EU One Stop Shop rules.

    European Commission: EU customs reform(opens in a new tab)Sector page

  • Subscription & ContinuityClear pricing before the order; online withdrawal button required since June 19, 2026

    No sector license applies. Subscriptions sold online in Cyprus follow the Consumer Protection Law of 2021: pre-contract information on the total price, 14 days to withdraw, and since June 19, 2026 a withdrawal function labeled "click here to withdraw", available throughout the withdrawal period, with a confirmation step and an acknowledgment of receipt on a durable medium.

    Consumer Protection (Amendment) Law 2026, L.30(I)/2026 (PDF, Greek)(opens in a new tab)Sector page

Open with your license

11

Send the license or registration your sector needs.

  • Casino & SportsbookClass B NBA license for online sports betting; online casino games are banned

    Online betting on sports with players in Cyprus needs a Class B license from the National Betting Authority, offered through a .com.cy website; 13 operators hold one. The Betting Law of 2019 makes offering online casino games such as roulette, poker and slots a felony, as it does betting exchanges and spread bets. Players must be 18, credit is banned and internet providers block unlicensed sites.

    The Betting Law of 2019, L.37(I)/2019 (National Betting Authority, PDF)(opens in a new tab)Sector page

  • Fantasy Sports & Skill GamesNo NBA ruling on fantasy; each paid format is reviewed against the Betting Law

    Cyprus licenses only fixed-odds bets on real sporting events, through Class B bookmakers, and bans online games of chance decided even partly by luck. No National Betting Authority ruling covers fantasy contests, so each paid format is reviewed case by case, with the operator's counsel, against those two rules. Free contests and games of pure skill fall outside the Betting Law.

    The Betting Law of 2019, L.37(I)/2019 (National Betting Authority, PDF)(opens in a new tab)Sector page

  • Forex & CFDCySEC investment firm license, passportable across the EU; retail leverage 30:1 to 2:1

    Dealing CFDs or rolling forex for retail clients needs MiFID authorization, as a Cyprus Investment Firm licensed by CySEC or an EU firm passporting in, and a CySEC license can itself be passported across the EEA. Since September 2019 CySEC has applied the ESMA measures permanently: leverage from 30:1 on major currencies to 2:1 on crypto, a 50% margin close-out, negative balance protection and no trading incentives.

    CySEC: national measures restricting the sale of CFDs (September 2019, PDF)(opens in a new tab)Sector page

  • Crypto & Web3MiCA authorization from CySEC or an EU passport; the transition ended July 1, 2026

    Crypto-asset services in or from Cyprus need authorization as a crypto-asset service provider under MiCA, granted by CySEC and passportable across the EU, or a passport from another member state. Providers registered under Cyprus's national rules could continue until July 1, 2026; since then CySEC says crypto services are permitted only in accordance with MiCA.

    CySEC: crypto-asset services only under MiCA (July 2026, PDF)(opens in a new tab)Sector page

  • Credit Repair & Debt ServicesNo credit repair license found; servicing bought loans needs a Central Bank license

    No Cypriot license for credit repair or debt settlement as such was found. Managing and enforcing loans on behalf of a buyer of bank credit requires a credit servicer license from the Central Bank of Cyprus, and a credit purchaser that services its own loans must hold one too. Lending to consumers needs a bank or other authorization.

    Central Bank of Cyprus: credit servicers and credit purchasers(opens in a new tab)Sector page

  • Telehealth & WellnessDoctors treating patients in Cyprus must be on the Cyprus Medical Register

    To practice as a doctor in Cyprus, one must be registered in the Cyprus Medical Register by the Cyprus Medical Council. Doctors established in another EU state may provide temporary services after a written declaration to the Council with proof of insurance and their home license, and knowledge of Greek is required to practice. No Cypriot telemedicine rulebook was found.

    Business in Cyprus: doctor(opens in a new tab)Sector page

  • E-Liquids & VapesImporters and distributors register with Health Services; cross-border distance sales banned

    Every business that imports or distributes e-cigarettes in Cyprus registers with the Head of Health Services, and supplying them to anyone under 18 is an offense. The Smoking Control Regulations prohibit cross-border distance sales of e-cigarettes and refill containers to consumers in Cyprus, so only a seller established in Cyprus can sell to Cypriot consumers online.

    Health Protection (Smoking Control) Regulations of 2017, Regulations 20 and 22 (PDF, Greek)(opens in a new tab)Sector page

  • Travel & Tour OperatorsDeputy Ministry of Tourism license and guarantee; packages need insolvency protection

    A tourist and travel agency in Cyprus needs a license from the Deputy Ministry of Tourism, backed by a guarantee. Under the Package Travel Law of 2017, an organizer established in Cyprus must guarantee the refund of all payments travelers made, and repatriation where transport is included, through insurance or another approved arrangement; organizers outside the EU that target Cyprus must do the same.

    Organized Travel and Linked Travel Arrangements Law of 2017, 186(I)/2017 (CyLaw, Greek)(opens in a new tab)Sector page

  • Auto Transport & ExportRoad haulage for hire needs a Road Transport Department operator license

    Carrying vehicles or other goods by road for hire or reward from Cyprus needs a road haulage operator license from the Road Transport Department, with a police good-repute certificate, a certificate of professional competence obtained by written examination, and minimum capital or reserves for each vehicle. A dealer simply selling vehicles abroad needs no sector license.

    Business in Cyprus: road haulier(opens in a new tab)Sector page

  • Alcohol & Age-Restricted RetailA municipal liquor license is required to sell alcohol; the minimum age is 18

    Selling, offering for sale or holding alcoholic drinks for sale in Cyprus requires a retailer's or dealer's license for intoxicating liquors, issued by the municipality where the premises are, or otherwise by the District Officer. The age limit for the sale, supply, distribution and consumption of alcoholic beverages is 18, so age checks at order and delivery carry the compliance.

    Business in Cyprus: alcoholic drinks trade(opens in a new tab)Sector page

  • Tobacco & NicotineRegister with Health Services; cross-border distance sales banned; snus banned

    Every business that imports or distributes tobacco, novel tobacco products or nicotine pouches in Cyprus registers with the Head of Health Services; supply to anyone under 18 is an offense, and tobacco for oral use such as snus is banned. Cross-border distance sales of tobacco products to consumers in Cyprus are prohibited, so only a seller established in Cyprus can sell them online.

    Health Protection (Smoking Control) Regulations of 2017, Regulations 19 and 20 (PDF, Greek)(opens in a new tab)Sector page

Not processable

Unlawful to sell to customers in this market.

  • CBD & HempCyprus classifies every CBD product as a medicine; selling without authorization is prohibited

    Cyprus's Medicines Council decided on June 1, 2022 to keep classifying products containing cannabidiol as medicinal products, so CBD products may be sold only with a marketing authorization, and any wholesale or retail sale without the required licenses is prohibited. Industrial hemp itself remains lawful within the THC limit set by law, and THC above it is a controlled drug.

    Pharmaceutical Services, Ministry of Health: products containing cannabidiol (Greek)(opens in a new tab)Sector page

  • KratomNot on Cyprus's drug schedules, but an unauthorized novel food in the EU

    Mitragynine and Mitragyna speciosa do not appear in the consolidated schedules of Cyprus's Narcotic Drugs and Psychotropic Substances Law, which the Council of Ministers can extend by decree. Sold as a tea, powder or capsule, kratom is treated in the EU as a novel food that needs authorization before sale, and none has been granted, so no lawful route to Cypriot consumers exists.

    RASFF Window: unauthorized novel food (Mitragyna speciosa), notification 2022.6775(opens in a new tab)Sector page

  • Online PharmacyNo registered online pharmacies; Cyprus does not permit selling medicines online

    The Pharmaceutical Services state that Cyprus has no registered online pharmacies and does not permit the online sale of medicines, because regulations under the Pharmacy and Poisons Law require medicines to be supplied personally by a pharmacist. The law sets conditions for online sales, but no pharmacy holds such a registration, and buyers may only take medicines authorized in Cyprus.

    Pharmaceutical Services, Ministry of Health: online pharmacies(opens in a new tab)Sector page

  • Peptides & LongevityPeptides sold for their effect on the body are medicines needing authorization

    Under Cyprus's law on medicinal products for human use, no medicinal product may be placed on the market without a marketing authorization, and a substance used to restore, correct or modify physiological functions through a pharmacological or metabolic action is a medicinal product. Research peptides and unlicensed GLP-1 copies sold for injection or for their effects therefore have no lawful route to Cypriot consumers.

    Medicinal Products for Human Use Law of 2001, 70(I)/2001 (CyLaw, Greek)(opens in a new tab)Sector page

  • Firearms & AccessoriesDistance purchase of firearms, parts and ammunition banned except by licensed dealers

    Under Cyprus's Firearms and Non-Firearms Law, trading firearms and non-firearm weapons requires a dealer license issued by the Chief of Police. The law prohibits buying firearms, non-firearm and collector weapons, their essential parts and ammunition at a distance, except by dealers, so online sales of these items to consumers have no lawful route. Accessories that are not weapons or parts are not caught.

    Firearms and Non-Firearms Law of 2004, 113(I)/2004 (CyLaw, Greek)(opens in a new tab)Sector page

Some products cannot be processed even inside sectors we accept: online casino games, betting exchanges and spread bets, binary options for retail clients, crypto services without MiCA authorization, and tobacco or vapes shipped to Cyprus from abroad.

Payment methods

How your customers pay a Cypriot merchant

We switch these methods on for a merchant in Cyprus one by one, within each brand's rules for your sector and, for investment firms, CySEC's client money rules. Your written offer names the ones agreed.

  • VisaMastercardAmerican ExpressApple PayGoogle PayPayPal

    Cards and wallets

    Visa, Mastercard, American Express, Apple Pay, Google Pay, PayPal

    Visa, Mastercard and American Express, with Apple Pay, Google Pay and PayPal. Cards carry three quarters of non-cash payments in Cyprus by number, and no payment method may be surcharged.

  • SEPA Direct DebitBank transfersTrustly

    SEPA, transfer and Trustly

    SEPA Direct Debit, Bank transfers, Trustly

    SEPA direct debit, bank transfer and Trustly. Cypriot banks send and receive SEPA instant transfers, with the payee's name checked against the IBAN.

  • paysafecardSkrillNETELLERMuchBetter

    Vouchers and e-wallets

    paysafecard, Skrill, NETELLER, MuchBetter

    Prepaid paysafecard vouchers and Skrill, NETELLER and MuchBetter wallets, which many trading and betting customers already use, within each brand's rules for your sector.

See all payment methods

The process

From your file to your first payout

  1. Send your file

    Your Registrar certificates, beneficial owner entry, TIN and VAT number, your CySEC or other license, the list of payment providers on your website if you are an investment firm, and recent processing statements.

  2. An underwriter answers

    Within 1 business day you learn the route, the documents still missing, or that the file cannot be placed.

  3. Your written offer

    Rates, reserve, payout schedule and settlement currency, set down in writing before any commitment.

  4. Go live

    Integration, test payments, then live traffic under monitoring: as little as two weeks with a complete file.

The file

The file of a Cypriot company

  • Your certificates of incorporation, registered office, directors and secretary, and shareholders from the Registrar of Companies
  • Your memorandum and articles of association
  • Your beneficial owner entry at the Registrar, up to date and confirmed in the latest annual window
  • Your Tax Identification Number and, if registered, your VAT number
  • Your CySEC, Central Bank or other license, and for an investment firm the list of payment providers on your website
  • Three to six months of processing statements, if you have them
  • The license your sector needs, where the list above names one

Local rules

Six Cypriot rules behind most account decisions

Cyprus writes detailed rules for the money investment firms collect through payment providers, bans every payment surcharge and keeps a beneficial owner register that acquirers must check. Each sector above and each topic below opens on the full rule and its source.

In detail

Cypriot rules in detail

The regulators, cards and SEPA, the payment rules for investment firms and crypto providers, consumer law, tax, disputes, the company file, and the mistakes that cost Cypriot accounts. Open a topic for the rule, its dates and its sources.

Who regulates high-risk sales in Cyprus

Cyprus applies EU payment, consumer and data law as a euro-area member state, and is home to more of the investment firms serving retail clients across EU borders than any other member state: 76 of 216 in 2025, according to ESMA, licensed by CySEC and passported across the Union. The Europe page covers the rules shared across the EU.

Regulator What it covers What it asks of a merchant
Central Bank of Cyprus (opens in a new tab) Banks, payment and e-money institutions, credit servicers, the interchange rules Nothing direct for most merchants; your acquirer must be licensed or passported
CySEC Investment firms, crypto-asset providers under MiCA, anti-money laundering for both A license for a forex, CFD or crypto business, and its client money and marketing rules
National Betting Authority Betting licenses under the Betting Law of 2019 A Class B license for online sports betting
MOKAS (opens in a new tab) The financial intelligence unit Suspicious transaction reports from obliged entities
Consumer Protection Service (opens in a new tab) The Consumer Protection Law of 2021 Honest sales, the withdrawal right and function, no unfair terms
Commissioner for Personal Data Protection (opens in a new tab) The GDPR and Law 125(I)/2018 A lawful basis for every processing
Tax Department VAT, income tax and the TIN A TIN, then VAT registration when required
Registrar of Companies (opens in a new tab) Companies and the register of beneficial owners Filings on time and an accurate beneficial owner entry

Cards, SEPA and authentication

Cards carried 75% of non-cash payments by number in Cyprus in the first half of 2025, the second highest share in the euro area, against 57% for the euro area as a whole, and the average online payment with a Cypriot card was €125. Since September 2021 a Ministry of Finance decree has made card acceptance compulsory for businesses in retail trade and services. JCC Payment Systems, a major Cypriot card processor, provides acquiring, clearing and settlement of card transactions.

EU caps hold consumer card interchange at 0.2% for debit and 0.3% for credit. Strong customer authentication has applied since September 14, 2019, and for online card payments the Central Bank allowed a migration period that ended on December 31, 2020. Cyprus went further than the EU minimum on fees: a merchant may not charge for the use of any payment instrument. The 3-D Secure guide covers the authentication flows that hold up.

Cypriot banks had to receive SEPA instant transfers by January 9, 2025 and send them, with verification of the payee’s name, by October 9, 2025; payment and e-money institutions have until April 9, 2027. Domestic SEPA direct debits can clear through the Central Bank’s CY-SDD system, running since 2014.

The payment rules of investment firms and crypto providers

CySEC Circular C458 governs how investment firms collect client money through payment providers. A firm may hold merchant accounts with payment and e-money institutions, but only for its own use, never for connected or third persons, and only with providers licensed in the EU or an equivalent jurisdiction. Client money moves to segregated client accounts immediately after settlement, the provider’s rolling reserve is covered from the firm’s own funds, and the firm lists its payment providers and their supervisors on its website.

CySEC’s ESMA-based CFD measures have been permanent since September 27, 2019: leverage from 30:1 on major currency pairs down to 2:1 on crypto, a margin close-out at 50%, negative balance protection and no cash or other inducements. Binary options have been banned for retail clients since July 2019. For clients in another member state with its own measures, CySEC applies that state’s version.

The MiCA transitional period ended on July 1, 2026, and CySEC’s Circular C790 reminded firms that customers moving from unauthorized crypto providers should be assessed one by one, not de-risked wholesale because of the provider they come from. Crypto providers already offering e-money token services that count as payment services had to apply to the Central Bank for authorization by February 20, 2026, unless they made arrangements with an eligible payment provider.

Consumer law: withdrawal, fees and fines

The Consumer Protection Law of 2021 brought Cyprus’s consumer rights, unfair practices and unfair terms rules into one statute. Buyers have 14 days to withdraw from a distance contract, 12 more months if the trader omitted the withdrawal information, and refunds are due within 14 days by the same means of payment. Since June 19, 2026, an online contract needs a function labeled “click here to withdraw”, available throughout the withdrawal period, a “confirm withdrawal” step and an acknowledgment on a durable medium. The Consumer Protection Service can fine a trader up to 5% of the previous year’s turnover, or up to €3 million where turnover is unknown.

Tax

The standard VAT rate is 19%, with reduced rates of 9%, 5% and 3% and a zero rate for exports. A business established in Cyprus registers for VAT once its taxable supplies exceed €15,600 over 12 months, after first obtaining a Tax Identification Number, and every tax registration goes through the TAX FOR ALL portal. Since January 1, 2026, the corporate income tax rate is 15%, up from 12.5%.

Refunds and disputes

Chargebacks follow the card schemes’ rules. Under Cyprus’s payment services law, a payer has 13 months to report an unauthorized or incorrect payment, bears at most €50 of losses on a lost or stolen instrument, and has eight weeks to claim a refund of a direct debit. The Financial Ombudsman hears consumers and small companies against banks, payment institutions and investment firms, for disputes up to €250,000 and a €20 fee; awards up to €20,000 bind both sides. CySEC does not settle individual disputes. Every chargeback still counts toward your chargeback ratio.

The company file

The Registrar of Companies issues certificates of incorporation, registered office, directors and secretary, shareholders and good standing, most of them through its e-filing system. A private company files its annual return, form HE32I, only online; late filing costs €50 plus €1 a day up to €150, and persistent non-filing can lead to strike-off. A new company files its beneficial owners within 90 days of incorporation, changes within 45 days, and confirms them every year between October 1 and December 31; fines reach €5,000, and acquirers must report discrepancies to the Registrar.

Mistakes that cost Cypriot merchants their accounts

  1. Adding a fee for any payment method. Cyprus bans every surcharge, and consumer law caps any fee at cost.
  2. Letting an investment firm’s merchant account clear payments for an introducer or a group company. CySEC reserves it for the firm alone, and acquirers read third-party flows as a laundering flag.
  3. Leaving client money with the provider, or not covering the rolling reserve. Client funds move to segregated accounts right after settlement.
  4. Offering bonuses or leverage above the CySEC ladder to retail CFD clients. Both have been banned since September 2019.
  5. Crypto services on an old national registration. The MiCA transition ended on July 1, 2026.
  6. A stale beneficial owner entry. Changes are due within 45 days, and the annual confirmation runs to December 31.
  7. No “click here to withdraw” function on a consumer shop. It has been required since June 19, 2026.
  8. Selling binary options to retail clients. They are banned in and from Cyprus.

Most of these are fixed before go-live. A business model that needs one of them to work is declined, whatever its volume.

FAQ

Payment gateway Cyprus FAQ

How do I get a payment gateway in Cyprus for a high-risk business?

Send your Registrar certificates, beneficial owner entry, TIN and VAT number and the license your sector needs, with recent processing statements if you have them. An underwriter answers within 1 business day with a route, the documents still missing or a no, and go-live can follow two weeks later with a complete file.

Which Cypriot businesses are considered high risk?

Acquirers treat a business as high risk when its sector draws more disputes, fraud or regulation than average. In Cyprus that usually means forex and CFD brokers, crypto providers, sports betting, supplements, adult platforms and subscription billing, while CBD products are medicines, online pharmacies are not permitted and firearms cannot be bought at a distance. The list above gives the Cypriot position of each of the 27 sectors we cover.

Can a CySEC-licensed broker collect client deposits through a payment gateway?

Yes, within CySEC's rules. The merchant account must be used only by the investment firm itself, client money moves to segregated client accounts right after settlement, the provider's rolling reserve is covered from the firm's own funds, and the firm lists its payment providers on its website.

How much does a high-risk merchant account cost in Cyprus?

Pricing follows the card schemes' interchange and fees, your sector and your history: the acquirer's margin and the reserve depend on your chargeback record and delivery model. Consumer card interchange is capped at 0.2% for debit and 0.3% for credit. Pricing shows the indicative ranges, and your written offer lists every fee before you sign.

Can I add a fee for paying by card in Cyprus?

No. Cyprus bans surcharges on every payment method, not only on consumer cards, and consumer law caps any charge for a means of payment at its cost. Build the cost of acceptance into your prices.

Can I process online casino payments for players in Cyprus?

No. The Betting Law makes offering online casino games in Cyprus a felony, and allows only online sports betting through Class B licensees on .com.cy websites. The iGaming guide covers what acquirers check for gaming.

Can I charge in euros and be paid in US dollars?

Yes. Your customers pay in EUR or other supported currencies, and you settle in EUR, USD or the currency agreed in your offer. The payout schedule and any conversion fee are set out in the offer before you sign.

My Stripe or PayPal account was closed. Can I apply?

Yes. Mainstream processors leave many high-risk sectors by policy, and a closure says little about your file on its own. Attach the closure notice to your application; the account closure guide explains what to do about funds still held.

Cyprus

Open your Cypriot gate.

Send your file with the license your sector needs. An underwriter reads it within 1 business day and comes back with a route, the documents still missing, or a plain no.

Free to apply. A human answer within 1 business day.

Facts checked on · 24 sources

This page describes the rules as we read them on that date. It is not legal advice: confirm them with counsel for your business and your products.

  1. Central Bank of Cyprus: licensing of payment and e-money institutions(opens in a new tab)
  2. Central Bank of Cyprus: Interchange Fee Regulation(opens in a new tab)
  3. Central Bank of Cyprus: strong customer authentication from 14 September 2019(opens in a new tab)
  4. Central Bank of Cyprus: application of the Instant Payments Regulation(opens in a new tab)
  5. Central Bank of Cyprus: retail payment systems(opens in a new tab)
  6. Central Bank of Cyprus: payment statistics, first half of 2025 (PDF)(opens in a new tab)
  7. CySEC Circular C790: risks after the end of the MiCA transitional period (July 2026, PDF)(opens in a new tab)
  8. CySEC Circular C756: dual licensing of crypto-asset service providers under PSD2 (February 2026, PDF)(opens in a new tab)
  9. CySEC Policy Statement PS-03-2019 on binary options (PDF)(opens in a new tab)
  10. CySEC: complaints regarding investment firms(opens in a new tab)
  11. Law Office of the Republic: MOKAS responsibilities(opens in a new tab)
  12. Consumer Protection Service(opens in a new tab)
  13. Office of the Commissioner for Personal Data Protection(opens in a new tab)
  14. Tax Department: VAT rates (Greek)(opens in a new tab)
  15. Business in Cyprus: registering for income tax and VAT(opens in a new tab)
  16. Tax Department: tax reform 2026(opens in a new tab)
  17. Tax Department: tax reform 2026, income tax presentation (PDF, Greek)(opens in a new tab)
  18. Central Bank of Cyprus: implementation period for SCA on online card payments (December 2019)(opens in a new tab)
  19. ESMA: report on cross-border investment activities (October 2026, PDF)(opens in a new tab)
  20. Registrar of Companies: certified copies and certificates(opens in a new tab)
  21. Registrar of Companies: late filing of annual returns(opens in a new tab)
  22. Registrar of Companies: failure to comply and discrepancy reports(opens in a new tab)
  23. Financial Ombudsman: complaints service(opens in a new tab)
  24. National Betting Authority: Class B register(opens in a new tab)