Crypto & Fintech Licensing in Switzerland: VASP, SRO & DLT

Swiss crypto and fintech licensing: VASP registration, SRO membership, DLT trading facilities, ICO rules and fintech sandbox. Requirements and costs.

Switzerland has positioned itself as one of the most structured jurisdictions for crypto and fintech regulation. The framework is built on existing financial market legislation — primarily the Banking Act (BankG), the Financial Institutions Act (FinIA), and the Anti-Money Laundering Act (AMLA) — supplemented by the DLT Act of 2021, which introduced blockchain-specific provisions. Whether you need SRO membership, a FINMA fintech licence, or a full DLT trading facility licence depends on your specific business model. This guide maps each business activity to the correct regulatory requirement.

For a direct assessment of your licensing needs, contact Morgan Hartley Consulting.


Swiss Crypto Regulatory Framework

Switzerland does not have a single “crypto licence.” Instead, the regulatory framework applies existing financial market laws to crypto activities based on what the business actually does — not what technology it uses. FINMA’s principle: “same activity, same risks, same rules.”

The key regulatory instruments are:

  • AMLA (Anti-Money Laundering Act): applies to all financial intermediaries, including crypto businesses
  • BankG (Banking Act): applies to deposit-taking and lending
  • FinIA (Financial Institutions Act): applies to asset management and securities firms
  • FinSA (Financial Services Act): applies to client advisory and financial instrument distribution
  • CISA (Collective Investment Schemes Act): applies to crypto funds
  • DLT Act: introduces DLT securities and the DLT trading facility licence category

FINMA guidelines and the 2018 ICO guidelines provide additional classification and supervisory detail.


VASP Registration

VASP registration (Virtual Asset Service Provider) is the international standard established by the Financial Action Task Force (FATF). In Switzerland, the VASP obligation is fulfilled through SRO membership.

Activities requiring VASP/SRO registration:

  • Crypto-to-fiat and fiat-to-crypto exchange
  • Crypto-to-crypto exchange
  • Crypto custody (custodial wallets)
  • Crypto brokerage
  • Token transfer services

The threshold is low: any business that facilitates the transfer, exchange, or custody of virtual assets for clients must register. Operating without registration exposes the business to criminal penalties under AMLA.


SRO Membership for Crypto Businesses

SRO membership is the primary regulatory step for most Swiss crypto businesses. Self-regulatory organisations (SROs) are private bodies recognised by FINMA to supervise financial intermediaries for AML compliance.

Active SROs accepting crypto businesses:

  • VQF (Verein zur Qualitaetssicherung von Finanzdienstleistungen)
  • SO-FIT (Organisme de surveillance pour les intermédiaires financiers)
  • OSFIN (Organisme de surveillance en matière de lutte contre le blanchiment)

SRO membership requirements:

  • Swiss legal entity (AG or GmbH)
  • Registered office in Switzerland
  • Documented AML/CFT framework (customer identification, transaction monitoring, suspicious activity reporting)
  • Qualified compliance officer
  • Risk assessment specific to crypto activities
  • Business continuity plan

SRO membership provides the AML compliance framework. It does not authorise deposit-taking, lending, or securities activities — those require separate FINMA licences.


Crypto Exchange Licensing

Crypto exchange licensing depends on the exchange model:

Brokerage model (matching buyers and sellers without holding client funds): SRO membership is sufficient. The broker acts as a financial intermediary under AMLA.

Exchange with client accounts (holding client fiat or crypto): if the exchange holds client deposits, this may constitute deposit-taking under BankG. Deposits up to CHF 100 million aggregate may qualify for the fintech licence. Above CHF 100 million, a full banking licence is required.

Centralised exchange with order book: likely requires a securities firm licence under FinIA or a DLT trading facility licence, depending on the instruments traded.

Decentralised exchange (DEX): if a Swiss entity operates or controls the DEX, FINMA may apply financial market law based on the entity’s actual role. Pure open-source protocol development without operational control is generally outside FINMA’s jurisdiction.


DLT Trading Facility Licence

The DLT trading facility is a licence category introduced by the DLT Act. It authorises the operation of a multilateral trading platform for DLT securities — tokenised assets recorded on a distributed ledger.

Key features:

  • Authorises trading, clearing, and settlement of DLT securities on a single platform
  • Can admit retail participants (unlike traditional exchanges)
  • Allows listing of tokenised equity, debt, and other financial instruments
  • Subject to banking-level capital and governance requirements

Requirements:

  • Swiss legal entity
  • Minimum capital determined by FINMA (typically CHF 5 million+)
  • Board and management with financial market experience
  • Full IT security and cybersecurity framework
  • AML/CFT compliance
  • Market surveillance and abuse detection systems
  • Recovery and resolution planning

The DLT trading facility licence is one of the most demanding categories. To date, only a handful of entities have obtained it. Pre-application consultation with FINMA is essential.


ICO and Token Issuance Rules

ICO and token issuance in Switzerland follows FINMA’s token classification framework:

Payment tokens (cryptocurrencies): trigger AMLA obligations. Issuers and intermediaries need SRO membership. No securities law obligations unless the token has investment features.

Utility tokens: provide access to a digital application or service. If the token is functional at the time of issuance and has no investment component, it may fall outside securities regulation. Pre-functional utility tokens with an investment component are treated as asset tokens.

Asset tokens (security tokens): represent ownership, debt, or revenue participation rights. Treated as securities under FinSA. Issuers must prepare a prospectus, comply with FinSA distribution rules, and may need a securities firm licence for distribution.

Hybrid tokens: tokens with characteristics of multiple categories are assessed against the strictest applicable rules.

Best practice: obtain a FINMA no-action letter or ruling before any public token issuance. FINMA’s FinTech desk processes these requests within 4 to 8 weeks.


Fintech Licence and Sandbox

The fintech licence (Art. 1b BankG) is a lighter-touch banking authorisation for companies that:

  • Accept public deposits up to CHF 100 million in total
  • Do not invest or pay interest on those deposits
  • Inform depositors that deposits are not covered by deposit insurance

Requirements:

  • Swiss AG or GmbH
  • Minimum capital: CHF 300,000 (5% of deposits up to CHF 100 million)
  • Organisational requirements lighter than a full banking licence
  • AML compliance (SRO membership or FINMA direct supervision)

The sandbox exemption allows companies to accept up to CHF 1 million in public deposits without any licence, provided depositors are informed of the lack of deposit protection. This is useful for early-stage fintech startups testing business models.


AML Compliance for Crypto

All crypto businesses operating in or from Switzerland must comply with the Anti-Money Laundering Act (AMLA):

  • Customer identification (KYC): for all ongoing relationships and transactions above CHF 1,000
  • Beneficial owner identification: for all accounts and wallets
  • Transaction monitoring: automated systems to detect suspicious patterns
  • Suspicious activity reporting: to MROS (Money Laundering Reporting Office Switzerland)
  • Record retention: 10 years for all transaction and identification records
  • Travel rule compliance: originator and beneficiary information must accompany crypto transfers above CHF 1,000
  • Risk-based approach: enhanced due diligence for high-risk clients, jurisdictions, and transaction types

Non-compliance with AML obligations exposes the business to SRO sanctions, FINMA enforcement, and criminal prosecution.


Which Licence Do You Need?

Business activityRequired authorisation
Crypto brokerage (no custody)SRO membership
Crypto exchange (with client accounts)SRO + fintech licence or banking licence
Crypto custodySRO membership
Token issuance (utility)Possibly none (FINMA ruling recommended)
Token issuance (security/asset)FinSA prospectus + potentially securities firm licence
DeFi protocol developmentGenerally unregulated (if no intermediary role)
Crypto asset managementFinIA licence + SRO membership
DLT trading platformDLT trading facility licence
Crypto fundCISA licence
Stablecoin issuanceBanking licence (deposit-taking)

When in doubt, request a FINMA classification. Operating under the wrong or no authorisation carries severe penalties.


Costs and Timeline

AuthorisationTimelineFirst-year cost (all-in)
SRO membership2-4 monthsCHF 20,000-95,000
Fintech licence3-6 monthsCHF 100,000-250,000
Securities firm licence9-15 monthsCHF 200,000-500,000
DLT trading facility12-18 monthsCHF 500,000-1,500,000
Banking licence12-18 monthsCHF 500,000-1,500,000+

Costs include legal fees, compliance setup, FINMA application fees, and initial operational expenses. Minimum capital requirements are in addition to these figures.


How Morgan Hartley Consulting Can Help

Crypto regulation in Switzerland is principles-based, which means the correct licence depends on the specific facts of your business model. Morgan Hartley Consulting provides:

Request a free initial assessment to determine which authorisation your business needs.

Back to Licensing overview.

FAQ

It depends on your activity. Pure crypto custody, brokerage, and exchange services without accepting public deposits require SRO membership for AML compliance. If you accept deposits exceeding CHF 100 million, operate a trading platform, or provide asset management, you need a FINMA licence. Many crypto businesses start with SRO membership and upgrade to a FINMA licence as they scale.
VASP registration is the international term for the obligation to register as a virtual asset service provider. In Switzerland, this obligation is fulfilled through SRO membership — joining a self-regulatory organisation recognised by FINMA for AML supervision. SRO membership is the Swiss mechanism for VASP compliance.
Possibly. FINMA classifies tokens into payment tokens, utility tokens, and asset tokens. Pure utility tokens with no investment function may not trigger securities law obligations. Payment tokens trigger AML obligations (SRO membership). Asset tokens are treated as securities and require a prospectus and compliance with FinSA. Always obtain a FINMA no-action letter before launching.
The DLT Act (in force since 1 August 2021) introduced DLT securities (uncertificated register securities on blockchain), the DLT trading facility licence (a new FINMA licence category), and provisions for segregating crypto assets in bankruptcy. It provides legal certainty for tokenised assets and decentralised trading platforms.
Application fees: CHF 5,000 to 15,000 depending on the SRO. Annual membership fees: CHF 5,000 to 30,000 depending on company size and transaction volume. Initial AML framework setup: CHF 10,000 to 50,000 (legal and compliance costs). Total first-year cost: CHF 20,000 to 95,000.
No. Any crypto business targeting Swiss clients or operating from Switzerland must have a Swiss legal entity (AG or GmbH) with registered office in Switzerland. Foreign exchanges listing Swiss tokens or targeting Swiss users may also trigger Swiss regulatory requirements. FINMA has taken enforcement action against foreign entities operating without authorisation.
Full AMLA compliance: customer identification (KYC) for transactions above CHF 1,000 (or CHF 0 for ongoing relationships), transaction monitoring, suspicious activity reporting to MROS, record retention for 10 years, and risk-based due diligence. The travel rule applies to crypto transfers — originator and beneficiary information must be transmitted.
Staking services may constitute deposit-taking if the provider pools client assets and bears the risk of loss. DeFi lending protocols where a Swiss entity acts as intermediary may trigger banking licence requirements. Pure protocol development without intermediary functions is generally unregulated. Each case requires individual assessment.
The DLT trading facility licence application takes 9 to 18 months from filing to approval. Pre-application preparation adds 3 to 6 months. FINMA reviews the application against banking-level standards, including capital adequacy, governance, IT security, and AML compliance. This is one of the most demanding licence categories.
FINMA can issue public warnings, freeze accounts, appoint an investigator, liquidate the company, and refer the matter for criminal prosecution. Unlicensed financial intermediation is a criminal offence. FINMA regularly publishes its warning list of unlicensed operators and maintains an enforcement division specifically for fintech and crypto.