How to Legally Buy and Sell Crypto in the EU (and Sweden) in 2026: A Step-by-Step Guide for Adults

Last updated 2026-10-10 · 18 min read

Disclosure: if you buy through some links on this page we may earn a commission at no extra cost to you. We never let that change what we recommend. Never share your seed phrase with anyone, including us.

You may have heard that crypto is "almost banned" in Europe, or that Sweden has made it illegal for ordinary people. Neither is true. Buying, holding and selling crypto is legal for adults across the EU, including Sweden. What 2026 has brought is stricter rules for the companies you trade with, more identity checks and automatic tax reporting. This guide walks you through every step: choosing a licensed platform, verification, paying in, moving coins to your own wallet, keeping records and declaring tax in Sweden.

Fact check: did Sweden ban crypto trading?

Short answer: no. There is no Swedish or EU law that prohibits an adult from buying, holding or selling crypto. The Swedish Tax Agency (Skatteverket) publishes a detailed guide on how private individuals should declare crypto sales and swaps, and Sweden's financial regulator, Finansinspektionen (FI), lists the companies that are allowed to sell crypto to Swedish consumers. Here is what actually happened, and what probably fuels the "ban" story:

So the accurate summary is: crypto is legal for individuals in Sweden, but the platforms are now tightly regulated, some well-known local firms lost the right to operate, and tax reporting is automatic. If you read a claim that Sweden "banned crypto", ask for the law number. We could not find one, and the official sources below describe regulation and tax, not prohibition.

The EU rules in 60 seconds

• MiCA, Regulation (EU) 2023/1114 (Markets in Crypto-Assets). Its rules for crypto-asset service providers (CASPs) have applied since 30 December 2024. Firms that exchange, hold or transfer crypto for clients need an authorisation from a national regulator. Once authorised in one EU country, a firm can "passport" its services to others. Countries could allow existing firms a transition period, but under Article 143 it ended no later than 1 July 2026. In Sweden it ran until 30 June 2026 for firms that had applied in time.
• Transfer of Funds Regulation, (EU) 2023/1113 (the "travel rule"), in force since 30 December 2024. Crypto transfers between providers must carry the sender's and recipient's details, and transfers above EUR 1,000 to or from your own wallet trigger an ownership check.
• DAC8, Directive (EU) 2023/2226, applies from 1 January 2026. Providers report users' crypto transactions to tax authorities, which exchange the data across the EU.
• AMLR, Regulation (EU) 2024/1624, the new EU anti-money-laundering rulebook, applies generally from 10 July 2027. Among other things it prohibits CASPs from keeping anonymous crypto accounts, including accounts using anonymity-enhancing coins.
• Tax stays national. The EU does not set crypto tax rates. Everything in the tax section below is Swedish; other countries have their own rules.

Step 1: Check that you are eligible

• Age 18+. MiCA itself has no age clause, but platforms typically set 18 as the minimum in their terms, and Swedish minors generally cannot take on financial commitments on their own. If you are under 18, wait.
• Valid photo ID: passport or national ID card. Many Swedish services also require BankID for login and verification.
• Proof of address if the platform asks (a recent bill or bank statement).
• Tax residence and tax identification number. Because of DAC8, providers must obtain a self-certification of your tax residence. In Sweden that is your personnummer.
• A bank account in your own name. Payments from other people's accounts are routinely rejected.

Step 2: Choose a MiCA-authorised provider and verify it yourself

This is the single most important step. Don't rely on ads, influencers or "licensed in the EU" badges on the website. Check the register yourself:

1. Find the legal entity. Open the platform's terms of service and note the exact company name (for example "XYZ Europe GmbH", not just "XYZ"). Big brands often run several companies, and only some may be authorised.
2. Search ESMA's interim MiCA register. On ESMA's MiCA page, download the "Crypto-asset service providers" file (a CSV you can open in Excel or Google Sheets). For each firm it shows the authorising regulator, home country, legal name, website, authorisation date, which services it may provide, and the countries it has passported to. Check that the website matches the one you are using, that your country is listed and that there is no end date. ESMA says it publishes the file weekly, so very recent changes may not be in it yet.
3. In Sweden, also search FI. Use FI's company register (företagsregistret) and FI's warning list (varningslistan) of firms operating without permission.
4. Check the blacklist too. ESMA's register includes a "Non-compliant entities" file listing firms that regulators have flagged for providing crypto services without authorisation.
5. Check stablecoin availability. In January 2025 ESMA told providers to stop offering trading in stablecoins (asset-referenced and e-money tokens) whose issuers are not authorised under MiCA. Some popular stablecoins may therefore be unavailable or sell-only on EU platforms.

Step 3: Open an account and complete identity verification (KYC)

Every authorised provider must know who you are under anti-money-laundering rules. Expect roughly this sequence:

1. Sign up with your email and a unique, strong password, and turn on two-factor authentication immediately (an authenticator app or security key, not SMS if you can avoid it).
2. Verify your identity: photograph your ID and do a selfie or liveness check, or log in with BankID on Swedish services.
3. Confirm your address, citizenship and tax residence.
4. Answer the customer due diligence questions: occupation, purpose of the account, expected amounts and frequency, and source of funds (salary, savings, sale of property and so on). Answer honestly. Inconsistent answers are the most common reason accounts get frozen later.
5. Read the risk warnings and the fee schedule before you deposit.

Be ready for follow-up questions or document requests if you deposit large amounts. That is normal compliance, not an accusation.

Step 4: Fund your account

• SEPA bank transfer (EUR): usually the cheapest way across the euro area. Use the exact reference the platform gives you.
• Swedish kronor: Swedish platforms accept SEK bank transfers, and some accept Swish. Safello, for example, offers Swish as a direct payment method. Not every foreign platform supports SEK, so check whether you'll pay a currency conversion fee.
• Card payments: fast but usually more expensive.
• Always pay from an account in your own name. Never let someone else pay for you or "lend" you their account, and never accept money from strangers to "buy crypto for them". That is a classic money-mule scheme and can make you part of money laundering.

Step 5: When your bank asks where the money comes from

Banks in Sweden must follow the anti-money-laundering act (penningtvättslagen, 2017:630) and monitor customers' transactions. A transfer to or from a crypto platform, especially a large or unusual one, may lead your bank to ask what it is for and where the money came from. Some banks block payments to certain platforms. How to handle it:

• Answer truthfully and simply: "I am buying bitcoin on [authorised platform], from my savings/salary."
• Keep evidence ready: payslips, savings history, sale contracts, and for money coming back, the platform's transaction history and your K4 tax filings.
• Use authorised platforms that pay out to your own named account. Money arriving from unknown foreign entities raises far more questions.
• Never split payments into small amounts to stay "under the radar". Deliberately structuring transactions is itself a red flag for banks.

Step 6: Buy (and sell) safely

1. Start small. Make a first purchase you could afford to lose while you learn the interface.
2. Understand the price you pay. "Instant buy" buttons often include a spread on top of the stated fee. Compare it with the platform's order book or limit-order option, if it has one.
3. Download every confirmation. You'll need the date, amount, price in SEK and fees for tax.
4. Selling: sell to SEK or EUR on the platform and withdraw to your own bank account. Each sale is a taxable event in Sweden (see below).

Step 7: Withdraw to self-custody and the travel rule

Holding coins on a platform means trusting that company. Many people move long-term holdings to a hardware wallet. Under the Transfer of Funds Regulation, this is what to expect:

• Travel rule data. Transfers between two providers carry the sender's and recipient's names and addresses. If you send to a friend on another exchange, you may be asked for their name and which platform they use.
• Self-hosted wallets over EUR 1,000. For a transfer of more than EUR 1,000 to or from a self-hosted address, the provider must assess whether you own or control it. Platforms usually ask you to sign a message with the wallet, make a small test transaction ("satoshi test"), or confirm the address in a declaration.
• Whitelisting and holds. Many platforms let you, or require you to, pre-approve withdrawal addresses, sometimes with a 24-hour waiting period. That protects you if your account is hijacked.

Do it in this order: set up and back up the hardware wallet, verify the receive address on the device screen, register the address on the platform, complete the ownership check, send a small test, then the rest. Our exchange-to-hardware-wallet guide walks through each click, and our seed phrase storage guide and backup testing guide cover the backup.

Step 8: Keep complete records

Skatteverket doesn't want documents attached to your return, but you must be able to show your cost basis and sale prices if asked. Its list of useful records:

• Bank statements showing what you paid in kronor or euros for the crypto you sold.
• The full transaction history (deposits, withdrawals, swaps, buys, sells) from every platform you used.
• For trades straight from your own wallet: the transaction history with the addresses you used.
• Proof that the account or wallet is yours, for example a screenshot showing it is your account.
• The platform's terms of use, which can decide how a deposit (for example into a lending product) is taxed.

Export your history at least once a year and store it offline. Platforms can close or leave a market, as several did when the MiCA transition ended, and your data may become hard to retrieve.

Step 9: Crypto tax in Sweden, step by step

For private individuals, Skatteverket treats crypto as an "other asset" (annan tillgång), not as a currency. Gains are taxed as capital income.

What is taxable and what isn't

Staking rewards on ether are taxed as capital income when you can dispose of them, reported at item 7.2 of the tax return. Crypto received as salary is employment income.

The rates

• Gains: taxed in full at 30 percent.
• Losses: deductible at 70 percent. Gains and losses are not fully offset against each other, so you report them separately.
• Lost keys or a hacked platform: according to Skatteverket, this does not by itself give you a right to a loss deduction.

Calculating your gain with the average cost method (genomsnittsmetoden)

If you bought the same coin on several occasions, you must use the average cost method. The standard rule (schablonmetoden) is not allowed for crypto. Each coin type (BTC, ETH and so on) is calculated separately, and all purchases count, across every exchange, DEX and wallet you use.

1. Add up everything you paid for a coin (in SEK) and divide by the number of coins. That is your average cost per coin.
2. When you sell, multiply the coins sold by the average cost. That gives your cost basis (omkostnadsbelopp).
3. Gain or loss = sale price minus cost basis, in SEK.
4. After a sale the average cost of the remaining coins stays the same. A new purchase creates a new average.

For a small number of trades, Skatteverket offers a calculation tool (Beräkningshjälp för omkostnadsbelopp) and helper form SKV 2198. If you have hundreds of trades, crypto tax software that supports the Swedish average method can import platform exports, but check its output against your records.

Reporting in K4, section D

1. Log in to the e-service Inkomstdeklaration 1 with BankID and open K4: Övriga värdepapper, andra tillgångar (… kryptovalutor).
2. For each coin, enter the name (for example "Bitcoin"), the quantity sold (up to eight decimals), the total sale price and the total cost basis for your profitable trades.
3. Make a second entry for the same coin with the totals for your loss-making trades. You don't have to list every trade, only total gains and total losses per coin.
4. The e-service calculates the result and automatically reduces losses to 70 percent.
5. Submit the return. You'll see what you owe or get back in your final tax statement (slutskattebesked).

Deadlines

You declare sales from a calendar year in the income tax return filed the following spring. For income year 2025 the deadline was 2 May 2026. For income year 2026 it will again be in early May 2027. Check the exact date on Skatteverket's site, because we don't want to guess it. Platforms' DAC8 reports (KU94) for 2026 are due to Skatteverket by 1 April 2027, so mismatches between what you declare and what platforms report are likely to be noticed.

If you missed declaring earlier years, you can ask Skatteverket to correct (ompröva) a previous year's assessment using that year's form. Doing it yourself before they ask is generally better than waiting.

Common pitfalls and scams

• Unlicensed platforms. Offshore exchanges that accept EU customers without MiCA authorisation give you no EU protection. Since 1 July 2026 they should not be serving you at all. Always check the register.
• Investment fraud via social media. Citing FI's 2025 consumer protection report, the Swedish government stated that criminal proceeds from investment fraud in 2024 exceeded 1.7 billion kronor. Fake ads with celebrities, "trading coaches" on WhatsApp or Telegram, and romance contacts who suggest a "platform" are the usual entry points.
• Fake regulator or tax messages. Emails or SMS "from FI" or "from Skatteverket" asking you to log in, pay a fee or verify a wallet are phishing. Go to the official sites yourself.
• Recovery scams. After a loss, "lawyers" or "recovery agents" promise to get your crypto back for an upfront fee. They are a second scam.
• Forgetting swaps. Many people think only cashing out to SEK is taxable. In Sweden every crypto-to-crypto swap counts as a disposal.
• Losing your records when a platform shuts down. Export early and regularly.
• Sending to the wrong network or address. Always send a test amount first.

Checklist

• ☐ 18 or older, with valid ID (and BankID in Sweden)
• ☐ Platform's legal entity found in ESMA's MiCA register (or FI's register), with your country listed and no end date
• ☐ Platform not on FI's warning list or ESMA's non-compliant list
• ☐ Strong unique password and app-based 2FA enabled
• ☐ KYC and source-of-funds questions answered honestly
• ☐ Funding from a bank account in your own name (SEPA, bank transfer, Swish or card)
• ☐ Small first purchase and confirmation saved
• ☐ Hardware wallet set up, seed phrase backed up offline and tested
• ☐ Withdrawal address whitelisted, ownership verified, test transaction sent
• ☐ Full transaction history exported and stored offline every year
• ☐ Gains and losses per coin calculated with genomsnittsmetoden
• ☐ K4 section D filed with your tax return by the deadline

Frequently asked questions

Has Sweden banned crypto trading for individuals?

No. No Swedish or EU law bans adults from buying, holding or selling crypto. Skatteverket publishes detailed instructions for declaring crypto gains, which only makes sense because trading is legal. What changed is the rules for companies: since 1 July 2026 only firms authorised under MiCA may offer crypto services in Sweden, and since 1 March 2026 running financial activity without the required Finansinspektionen authorisation is a crime. Both target providers, not users.

How old do I have to be to buy crypto in the EU?

MiCA does not set an age limit itself. In practice platforms require you to be at least 18 in their terms, and under Swedish law a person under 18 generally cannot enter binding financial commitments on their own. Expect to be refused if you are under 18.

How do I know if a crypto exchange is legal in the EU?

Look up the exact company (the legal entity in the platform's terms, not just the brand) in ESMA's interim MiCA register of crypto-asset service providers, and check which EU countries it may serve. In Sweden you can also search Finansinspektionen's company register and check FI's warning list. A well-known brand does not automatically mean the entity serving you is authorised.

Do I pay tax on crypto I have not sold?

No. In Sweden you do not declare value increases or decreases on crypto you still hold. Tax is triggered when you dispose of it: selling for money, swapping for another crypto, paying for goods or services with it, or lending it out on certain platforms.

Is swapping one crypto for another taxable in Sweden?

Yes. Skatteverket treats a swap as a sale of the old coin and a purchase of the new one. The sale price is the value in Swedish kronor of the crypto you receive, and that same amount becomes the cost basis of the new coin.

Why does my exchange want proof that I own my hardware wallet?

Under the EU Transfer of Funds Regulation (the 'travel rule'), for a transfer of more than EUR 1,000 to or from a self-hosted address, the crypto-asset service provider must assess whether that address is owned or controlled by you. Platforms usually ask you to sign a message with the wallet or send a small test transaction.

Can I deduct crypto that was stolen or lost?

Generally no. Skatteverket says that losing your private key, or losing access to crypto because a trading platform was hacked, does not automatically entitle you to a loss deduction. Real losses on disposals are deductible at 70 percent.

Will Skatteverket know about my crypto?

Increasingly, yes. Under the EU's DAC8 rules, which apply from 1 January 2026, crypto service providers must collect tax-residence information and report users' transactions. In Sweden the report (KU94) for calendar year 2026 is due to Skatteverket by 1 April 2027, and EU tax authorities exchange the data with each other.

Is my crypto protected if the platform goes bankrupt?

MiCA requires authorised providers that hold client crypto to keep it segregated and safeguard clients' ownership rights, including in insolvency. But crypto is not a bank deposit, so the Swedish deposit guarantee (insättningsgarantin) does not cover it. Finansinspektionen stresses that an authorisation does not mean you cannot lose money.

Sources

• Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA): eur-lex.europa.eu
• Regulation (EU) 2023/1113 on information accompanying transfers of funds and certain crypto-assets (travel rule): eur-lex.europa.eu and EUR-Lex summary
• Council Directive (EU) 2023/2226 (DAC8): eur-lex.europa.eu; European Commission DAC8 page: taxation-customs.ec.europa.eu
• Regulation (EU) 2024/1624 (AMLR): eur-lex.europa.eu
• ESMA, Markets in Crypto-Assets Regulation and interim MiCA register (CASP and non-compliant entity files, transitional measures): esma.europa.eu
• ESMA statement on non-MiCA-compliant ARTs and EMTs (17 January 2025): esma.europa.eu
• Finansinspektionen, "Kryptobolag utan tillstånd ska avveckla sin verksamhet i EU" (1 July 2026): fi.se
• Finansinspektionen, Mica-förordningen (Swedish transition period): fi.se
• Finansinspektionen, "Ny lag om straffansvar för olovlig finansiell verksamhet" (17 February 2026): fi.se
• Finansinspektionen, company register and warning list: företagsregistret · varningslistan
• Finansinspektionen, 2021 opinion piece on banning energy-intensive mining: fi.se
• Lag (2024:1159) med kompletterande bestämmelser till EU:s förordning om marknader för kryptotillgångar: riksdagen.se
• Lag (2026:56) om straff för olovlig finansiell verksamhet: riksdagen.se; prop. 2025/26:42 (investment fraud figure): regeringen.se
• Riksdagen, betänkande 2025/26:SkU4 on crypto-asset reporting (DAC8/CARF, from 1 January 2026): riksdagen.se
• Regeringen, slopad energiskattenedsättning för datorhallar: regeringen.se
• Skatteverket, Kryptovalutor (private individuals: K4 section D, 30% / 70%, genomsnittsmetoden, records, staking, lost keys): skatteverket.se
• Skatteverket, Kontrolluppgift om kryptotillgångar (KU94, due 1 April): skatteverket.se
• Company statements (not regulator sources): Safello help centre on Swish: help.safello.com; Goobit press release on its appeal: mfn.se

This article is general information, not legal, tax or investment advice. Mentioning a company is not a recommendation. Always check its current authorisation in the official registers.