Banking Law and Virtual Economy Banking Frameworks in Spain — Detailed Explanation with Case Laws

1. Introduction

A virtual economy banking framework concerns the legal rules governing banking and payment activities connected with digitally created economic environments. These can include online platforms, gaming economies, virtual worlds, digital marketplaces, tokenized ecosystems, crypto-assets, electronic money and other systems in which users acquire, hold, transfer or exchange digitally represented value.

Spain does not have one statute called the “Virtual Economy Banking Act.” Instead, the framework is built from several layers of Spanish and European Union law.

The principal areas are:

• traditional banking and credit-institution regulation;
• payment-services and electronic-money law;
• the EU Markets in Crypto-Assets Regulation (MiCA);
• anti-money-laundering and counter-terrorist-financing rules;
• consumer protection;
• operational resilience under DORA;
• data protection and cybersecurity;
• investment-services regulation where virtual assets qualify as financial instruments.

The decisive legal question is normally not whether an activity takes place in a “virtual world,” but what economic and legal function the digital asset or service actually performs.

2. Traditional Spanish Banking Law Still Applies

Spanish banking activity is principally supervised by the Banco de España, while the CNMV (Comisión Nacional del Mercado de Valores) has major responsibilities concerning securities, investment services and crypto-asset markets.

The basic Spanish banking framework includes Law 10/2014 on the organisation, supervision and solvency of credit institutions.

A virtual-economy company cannot simply call itself a technology platform if, in substance, it conducts regulated banking activities.

For example, imagine a Spanish virtual-world operator that:

1. accepts euros from users;
2. maintains customer balances;
3. allows users to transfer balances to other users;
4. converts balances back into euros; and
5. offers credit.

Several regulatory regimes may become relevant.

The platform's legal classification therefore depends upon its actual functions rather than its marketing terminology.

3. Virtual Currency Is Not Automatically Bank Money

An important distinction exists between:

bank deposits, electronic money, crypto-assets, financial instruments, and purely closed-loop virtual items.

Suppose a game awards 500 “gold coins” that can only be used to purchase cosmetic items inside that game and cannot be redeemed or transferred outside it.

That arrangement may present considerably lower financial-regulatory risk.

By contrast, suppose those coins can be:

purchased for euros → transferred between users → traded externally → converted back into euros.

The system begins to resemble a payment or financial ecosystem.

Its regulatory treatment may consequently change substantially.

4. Electronic Money

Spain's electronic-money framework remains highly important to virtual economies.

Electronic money broadly involves electronically stored monetary value representing a claim against the issuer, issued upon receipt of funds and accepted by persons other than the issuer.

Spain implemented the EU electronic-money regime principally through Law 21/2011 on electronic money.

Therefore, a virtual-world currency can potentially raise electronic-money questions where users purchase digital monetary value with conventional currency and that value is accepted within a sufficiently broad payment network.

Calling the asset a “token,” “coin” or “virtual credit” does not itself determine the legal classification.

5. Payment Services

Spain's payment-services framework derives substantially from PSD2 and Spanish implementing legislation, particularly Royal Decree-Law 19/2018 on payment services and other urgent financial measures.

A virtual-economy operator may enter payment-services regulation if it provides activities such as payment-account services, money remittance, payment initiation or execution of payment transactions.

Authorization and supervision become important where the platform moves actual customer funds rather than merely maintaining internal game points.

Special rules can apply to:

• transaction authorization;
• authentication;
• unauthorized transactions;
• safeguarding of customer funds;
• information requirements;
• security;
• operational incidents;
• customer reimbursement.

Consequently, a virtual platform performing payment functions can acquire obligations similar to conventional payment businesses.

6. MiCA and Spain's Virtual Economy

The Markets in Crypto-Assets Regulation — Regulation (EU) 2023/1114 (MiCA) fundamentally changed the European framework.

Because MiCA is an EU regulation, it applies directly within Spain.

It establishes rules for several categories of crypto-assets and for crypto-asset service providers (CASPs).

Virtual-economy businesses must therefore determine whether their digital assets fall within MiCA.

Important categories include:

Asset-referenced tokens (ARTs): tokens seeking to maintain stable value by reference to other values, rights, currencies or combinations of assets.

Electronic-money tokens (EMTs): crypto-assets seeking to maintain stable value by reference to one official currency.

Other crypto-assets: a residual MiCA category potentially covering many utility-type tokens.

This classification has major consequences for authorization, disclosure, governance and customer protection.

7. Stablecoins in Virtual Economies

Consider a Spanish virtual world introducing EuroWorld Token, where:

1 token = €1.

Users can purchase tokens, send them to other users and use them to purchase digital goods.

If the token satisfies MiCA's definition of an e-money token, strict rules apply.

The issuer cannot avoid those requirements simply by describing the system as entertainment or a metaverse currency.

This illustrates the broader European principle of substance over labels.

8. Crypto-Asset Service Providers

Virtual-economy operators may also become CASPs.

MiCA regulates services including, depending upon their precise characteristics:

• custody and administration of crypto-assets;
• operation of crypto-asset trading platforms;
• exchange of crypto-assets for funds;
• exchange of crypto-assets for other crypto-assets;
• execution of orders;
• reception and transmission of orders;
• placement;
• transfer services;
• portfolio management;
• advice concerning crypto-assets.

A Spanish virtual-world company offering these functions may therefore require MiCA authorization unless an applicable legal arrangement or exemption applies.

9. Banks Providing Virtual-Economy Services

Traditional Spanish banks can also participate in virtual economies.

A bank might provide:

• custody infrastructure;
• tokenized payment solutions;
• settlement services;
• fiat-to-crypto conversion;
• banking accounts for virtual-platform operators;
• tokenized deposits;
• financing for digital businesses.

However, regulated banks remain subject to prudential, governance, AML, outsourcing and operational-risk requirements.

Moving a financial service into a blockchain or virtual environment does not remove ordinary banking obligations.

10. AML and Virtual Economies

Spain's principal AML legislation is Law 10/2010 on the prevention of money laundering and terrorist financing.

Virtual economies can create particular AML risks because value can potentially move quickly between users, wallets, platforms and jurisdictions.

Regulated businesses may therefore need appropriate systems for:

customer identification → customer due diligence → beneficial ownership checks → transaction monitoring → suspicious-activity controls → record keeping.

Enhanced scrutiny can be necessary where customer behaviour creates higher risks.

11. Gaming Economies and AML

A gaming environment can potentially become a financial crime channel where virtual assets are freely transferable or convertible.

For example:

A person buys large quantities of virtual currency, transfers them through multiple accounts, acquires digital assets and subsequently sells those assets for conventional currency.

The transactions may have originated inside a game, but the economic effect can resemble movement of financial value.

Banks dealing with such businesses therefore need risk-sensitive monitoring rather than assuming that every gaming transaction is harmless.

12. NFTs

Non-fungible tokens create more complicated classification questions.

MiCA does not simply regulate every NFT in exactly the same way. Crypto-assets that are genuinely unique and non-fungible can fall outside parts of MiCA's ordinary scope.

However, describing something as an “NFT” is insufficient.

A large standardized collection, fractionalized interests or assets that are economically interchangeable may require a different legal assessment.

Virtual-economy businesses should therefore examine the economic substance and characteristics of the token, not merely its technical label.

13. Financial Instruments and MiFID

Some digital assets may fall outside MiCA because they qualify as financial instruments.

If a token economically represents shares, bonds or another regulated investment instrument, EU securities legislation, including the MiFID II framework, may become relevant.

Spain's securities-market framework must therefore be considered alongside MiCA.

A useful distinction is:

crypto-asset → potentially MiCA

but

tokenized financial instrument → potentially securities/MiFID regime.

Tokenization does not remove the underlying legal character of an investment.

14. Consumer Protection

Virtual-economy financial services are also affected by Spanish and EU consumer law.

Businesses should provide clear information concerning matters such as:

• price;
• redemption rights;
• fees;
• exchange mechanisms;
• risks;
• withdrawal restrictions;
• custody arrangements;
• contractual termination.

Terms allowing a platform to confiscate customer value arbitrarily or change important financial conditions without adequate justification may face scrutiny under unfair-contract-term rules.

Spanish consumer law therefore operates alongside financial regulation.

15. DORA and Operational Resilience

The Digital Operational Resilience Act — Regulation (EU) 2022/2554 (DORA) is another major part of the modern framework.

DORA applies to covered financial entities and establishes requirements concerning ICT risk, incident management, resilience testing, information sharing and third-party technology risk.

This is particularly relevant where banks rely on:

• cloud providers;
• blockchain infrastructure;
• digital-wallet systems;
• external custody providers;
• APIs;
• technology vendors.

A Spanish bank cannot simply outsource a virtual-economy service and assume that responsibility for technology risk disappears.

16. GDPR and Virtual Banking

Virtual economies can generate extensive personal data.

A financial platform might process identity information, wallet addresses, payment histories, transaction patterns and device information.

The GDPR and Spanish data-protection legislation therefore apply where their jurisdictional requirements are satisfied.

Banks and financial platforms must have appropriate legal grounds for processing personal information and must comply with transparency, security and data-subject-right requirements.

Financial regulation and privacy regulation consequently operate simultaneously.

17. Case Law

Because “virtual economy banking” is an emerging composite field, there are relatively few Spanish Supreme Court decisions dealing with the entire concept directly. The strongest legal analysis therefore combines Spanish banking jurisprudence with CJEU decisions concerning digital money, payments, crypto-assets and consumer financial services.

Case 1 — CJEU, Skatteverket v David Hedqvist, C-264/14, 22 October 2015

This landmark case concerned transactions exchanging traditional currency for Bitcoin.

The CJEU treated Bitcoin as a contractual means of payment for purposes of the VAT issue before it and held that the relevant exchange transactions fell within the VAT exemption considered by the Court.

Importance

The judgment demonstrated that decentralized virtual currencies can have legally recognizable monetary and exchange functions even though they are not conventional sovereign currency.

For Spanish virtual-economy banking, this reinforces the need to examine the economic function of digital value.

18. Case 2 — CJEU, Bundesverband der Verbraucherzentralen v Deutsche Bank, C-602/19

European payment-services jurisprudence is important when virtual-economy products interact with regulated payment infrastructure.

The broader lesson is that businesses cannot determine the application of payment regulation simply through contractual labels. Statutory definitions and the actual characteristics of the financial service matter.

This principle is directly relevant to platforms combining wallets, payment accounts and virtual currencies.

19. Case 3 — CJEU, ING-DiBa Direktbank Austria, C-191/17, 4 October 2018

The case concerned the interpretation of a “payment account” under EU payment-services law.

The Court focused on whether the account allowed users to execute ordinary payment transactions.

Virtual-economy significance

A digital account is not regulated merely because it displays a monetary balance. Its functionality is critical.

A virtual wallet allowing extensive payments and transfers can therefore require a different legal assessment from a simple internal accounting balance.

20. Case 4 — CJEU, DenizBank AG v Verein für Konsumenteninformation, C-287/19, 11 November 2020

This important payment-services case examined contactless payment functionality and questions surrounding personalized security credentials and payment instruments.

The judgment illustrates how EU payment law allocates responsibility and consumer protection within technology-driven payment systems.

Significance

Virtual banking systems involving digital wallets, cards, mobile authentication or similar payment mechanisms cannot assume that innovative technology exists outside established payment-law protections.

21. Case 5 — CJEU, Wind Tre SpA and Vodafone Italia SpA, Joined Cases C-54/17 and C-55/17, 13 September 2018

The dispute concerned SIM cards containing pre-installed and pre-activated services capable of generating charges without consumers being adequately informed.

The Court treated the practices as potentially constituting aggressive commercial practices.

Significance

The principle matters to virtual economies where users can purchase digital credits, activate financial features or incur charges through interfaces.

Digital design does not eliminate consumer-consent requirements.

22. Case 6 — CJEU, Banco Español de Crédito SA v Joaquín Calderón Camino, C-618/10, 14 June 2012

This Spanish reference became a landmark EU consumer-banking judgment.

The Court emphasized effective judicial control of unfair terms in consumer contracts.

Virtual-economy significance

Virtual banks and financial platforms remain subject to mandatory consumer protection. Moving contractual relationships from paper agreements to app-based or virtual interfaces does not weaken those protections.

23. Case 7 — CJEU, Aziz v Caixa d'Estalvis de Catalunya, C-415/11, 14 March 2013

This famous Spanish mortgage case established important principles concerning effective consumer protection against unfair contractual terms.

Although unrelated to crypto-assets specifically, its institutional significance is substantial.

A Spanish virtual-economy financial provider cannot use digital contractual architecture to deprive consumers of rights guaranteed by EU law.

24. Case 8 — CJEU, Gutiérrez Naranjo and Others, Joined Cases C-154/15, C-307/15 and C-308/15, 21 December 2016

The CJEU addressed the consequences of unfair mortgage floor clauses in Spain.

It required effective restitution rather than allowing consumer rights to be substantially curtailed through national limitations inconsistent with EU law.

Relevance

The case demonstrates the potential financial consequences of systemic unfair contractual practices.

For a virtual-economy platform serving thousands or millions of users, a defective standardized contractual term could therefore generate large-scale liability.

25. Practical Example

Suppose a Spanish company creates VirtualCity, an online economy.

Users deposit euros and receive VC Tokens.

They can:

buy tokens → store them in wallets → transfer them to other users → purchase virtual property → trade tokens → convert them back into euros.

The company also provides token custody.

The legal analysis would proceed in stages.

First, regulators would determine the nature of the token. If it qualifies as a crypto-asset, MiCA must be considered.

Second, if the token maintains its value by reference to the euro, the rules governing e-money tokens become particularly important.

Third, providing custody, exchange or transfer services can bring the operator within the CASP framework.

Fourth, payment-services and electronic-money legislation must be considered according to the structure of the system.

Fifth, AML obligations can require customer identification and transaction monitoring.

Sixth, GDPR applies to relevant processing of customer information.

Finally, consumer law regulates contractual transparency and potentially unfair terms.

Thus, calling VirtualCity a “game” would not by itself determine its regulatory status.

26. Closed-Loop Versus Open Virtual Economies

This distinction is particularly useful.

Closed-loop system

A customer buys game credits that:

cannot be transferred + cannot be redeemed for euros + cannot generally circulate outside the game.

Financial regulation may be more limited, although consumer and other laws remain relevant.

Open virtual economy

Digital value can:

be purchased + transferred + traded + exchanged + redeemed.

The closer the system becomes to an actual monetary ecosystem, the greater the possibility that payment, e-money, crypto-asset, AML and financial-services regulation will apply.

27. Supervisory Structure in Spain

Several authorities can therefore become relevant.

Banco de España supervises important areas of banking, credit institutions and payment-related activities.

CNMV is central to securities markets, investment services and important aspects of Spain's MiCA supervisory architecture.

European institutions are also increasingly significant, including the European Banking Authority (EBA) and European Securities and Markets Authority (ESMA).

The relevant supervisor ultimately depends upon the financial activity and asset classification.

28. Core Legal Principle

The most important rule for understanding virtual-economy banking in Spain can be expressed simply:

Technology does not determine regulation; economic function does.

A “coin” may be an internal game item, crypto-asset, e-money token or potentially part of a securities arrangement.

A “wallet” might merely record game points, or it could provide regulated custody or payment functionality.

A “virtual marketplace” might simply sell digital goods, or it could perform activities resembling an exchange.

The regulatory analysis therefore begins with the actual rights, obligations and economic functions created by the system.

Conclusion

Spain's virtual-economy banking framework is best understood as a multi-layered Spanish-EU regulatory system, rather than a separate body of “metaverse banking law.”

Its principal components include Law 10/2014 on credit institutions, Law 21/2011 on electronic money, Royal Decree-Law 19/2018 on payment services, Law 10/2010 on AML, MiCA, DORA, GDPR, securities legislation and Spanish/EU consumer law.

Cases such as Hedqvist*, ING-DiBa, DenizBank, Banco Español de Crédito, Aziz and *Gutiérrez Naranjo demonstrate recurring principles particularly relevant to the virtual economy: functional classification of digital value, strong payment-system protections, technological neutrality, contractual transparency and effective consumer protection.

Accordingly, when a virtual economy begins to perform the economic functions of money, payments, custody, exchange, investment or banking, Spanish and EU financial regulation can apply regardless of whether the service is presented as a game, metaverse, digital marketplace or other technological platform.