A token issuer or exchange operator establishing a French presence quickly discovers that registration with the Autorité des marchés financiers (AMF) is only the first gate. The deeper question – the one that determines whether the licence holds, whether the bank account opens, and whether the tax treatment follows – is whether the entity has genuine economic substance in France. With VASP supervision tightening across the leading EU hubs and the transition from the PSAN (Prestataire de Services sur Actifs Numériques) regime to full MiCA-aligned CASP authorisation under way, substance is no longer a box-ticking exercise. It is the structural foundation of a viable French digital-asset business.
This page explains what economic substance means for a licensed VASP in France, what the AMF and French tax authorities expect, how the cross-border stack interacts, and where operators most commonly miscalculate. We have structured this as a decision document, not a general survey.
The French VASP Regime: PSAN and the MiCA Transition
France built one of the first structured VASP regimes in continental Europe, and the AMF remains the competent authority for both the legacy PSAN framework and the incoming CASP authorisation under MiCA. The PSAN regime introduced two tracks: a mandatory registration (covering a defined set of core digital-asset services) and an optional authorisation (for operators seeking a higher-trust signal to banks and institutional counterparties). MiCA now overlays this with a passportable CASP licence that, once granted by the AMF, allows the operator to passport services across the EU and EEA without separate national authorisations.
That passporting right is the reason France is attracting inbound digital-asset businesses from outside the EU. A CASP authorisation issued by the AMF under MiCA confers EU-wide passporting rights, making France a credible hub choice for operators whose primary markets are across the eurozone. But passporting assumes that the authorising regulator – here, the AMF – is satisfied that the entity it is authorising is genuinely directed and managed from France. That is where substance enters the equation, and where many inbound operators underestimate the commitment required.
In our licensing practice, we regularly advise operators who arrive with a shell company registered in Paris and a registered-office address, expecting that to satisfy the AMF's residency expectations. It does not. The AMF, consistent with ESMA's supervisory convergence guidance on MiCA, expects the applicant to demonstrate that key decisions are taken in France, that qualified personnel are physically present, and that operational controls are exercised from the French entity – not delegated wholesale to a parent in a third country.
To discuss your France licensing strategy before you commit to a structure, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts – the entity, the user base, the banking – change the analysis. Map your options
What Does Economic Substance Mean for a PSAN/CASP in France?
Economic substance, in the French regulatory context, is the aggregate of physical presence, qualified human resources, governance control and operational decision-making that allows the AMF to confirm that the applicant is a real business – not a conduit or a letterbox. The concept draws on both the AMF's own supervisory expectations and the broader EU standards that inform MiCA's authorisation criteria, including ESMA's convergence work on governance, fit-and-proper requirements and outsourcing limits.
In practice, substance for a French VASP/CASP means four things operating together. First, a registered office that is a genuine place of business – not a shared-desk address or a fiduciary provider's mail room. Second, senior management and control functions located in France: at minimum a chief executive or managing director who is physically present and whose primary decision-making authority is exercised from the French entity. Third, compliance and AML/CFT functions staffed by personnel who are qualified, reachable by the AMF, and accountable under French law. Fourth, an IT and operational infrastructure that supports the licensed activities within the jurisdiction, even if some infrastructure is shared with a group.
The question of outsourcing is particularly sensitive. MiCA permits CASPs to outsource operational functions, but it requires that the licence-holder retain control, that the AMF can supervise the outsourced activity, and that outsourcing does not become a mechanism to relocate substance without relocating the licence. We have seen enforcement-adjacent situations where an AMF-registered entity outsourced its entire risk, compliance and technology stack to a parent company in a non-EU country; the regulator's response was to treat the French entity as hollow and to require urgent remediation before renewal.
How Does the AMF Assess Substance During the Application?
The AMF's substance assessment is woven through the authorisation review rather than isolated in a single checklist. The regulator examines governance documents, business plans, staffing plans, outsourcing agreements and IT architecture simultaneously – and expects consistency across all of them.
Key scrutiny points include: the governance map (who sits on the board, where they are domiciled, whether they meet the AMF's fit-and-proper standards under the applicable PSAN/CASP provisions); the organisational chart and the staffing plan for the France entity (headcount, roles, physical location); the compliance programme (AML/CFT procedures, Travel Rule implementation, and the name and qualifications of the compliance officer); the outsourcing register (every outsourced function must be documented, with a rationale and a control mechanism); and the internal audit and reporting lines (does the French entity have genuine oversight of the activities carried on under the French licence, or does control sit elsewhere?).
The AMF expects the applicant's governance map and staffing plan to be functional on day one of authorisation, not aspirational. This is a meaningful distinction from some offshore regimes where post-licensing build-out is accepted. In France, the substance must exist before the licence is issued, or be credibly committed to with a defined implementation timeline that the AMF can verify.
Timeline for authorisation under the PSAN/CASP regime varies by complexity, and the [VERIFY] placeholder is noted – we describe this qualitatively: applicants with complete, well-prepared dossiers typically work through the AMF's review in a matter of months, while incomplete or complex applications can extend significantly. Operators should plan for a substantive back-and-forth with the AMF during the review period.
Cross-Border Tax and the Substance Interaction
For a business sitting between a French operating entity and a parent or sister company in another jurisdiction, the substance question does not end with the AMF. French corporate tax residency turns on effective management – where strategic and commercial decisions are actually made – and the French tax authority (the Direction générale des finances publiques, DGFiP) takes a similarly fact-specific view. An entity that is AMF-registered but whose board decisions are driven by officers sitting in Dubai or Singapore risks being treated, for French corporate tax purposes, as resident outside France – or, in a transfer-pricing context, as a party whose intra-group transactions do not reflect arm's-length pricing.
The interaction with group structures is a recurring theme in our cross-border practice. A common pattern is a French CASP that is a subsidiary of a holding company in Luxembourg or the Netherlands, with IP and treasury functions held in the parent. Substance must be mapped across the whole stack: the French entity must be able to demonstrate that it bears real commercial risk and has real operational function – otherwise the AMF authorisation may be structurally inconsistent with the group's tax position, creating exposure on both fronts simultaneously.
VAT and the digital-services treatment of crypto activities is a separate layer. French VAT authorities follow EU principles on the VAT treatment of exchange services, but the characterisation of fee income – transaction fees, spread income, custody fees – requires careful analysis at the structuring stage. Again, substance affects this: a French entity that is the contracting party for client relationships must have the operational capacity to support that contractual role.
If your cross-border structure mixes a French CASP with group entities in other jurisdictions, write to us at info@oboluslaw.com for a structured review. If a prior application stalled or an account was closed, a second read can surface the structural reason and the route back. Map your options
Banking and the Substance Gatekeeping Effect
French banking access for crypto businesses is materially affected by the substance profile of the applicant. French credit institutions have been cautious about the sector, and those that do offer accounts to VASPs/CASPs consistently apply a risk-based due diligence process that mirrors – and in some respects exceeds – the AMF's own substance expectations.
A bank opening a business account for a French CASP will typically require sight of the AMF registration or authorisation document, the beneficial ownership structure, the compliance programme (including AML policy and Travel Rule procedures), the identity and location of the compliance officer, and the entity's governance documentation. Where the bank's due diligence reveals that the entity is thinly staffed, that its compliance function is outsourced to a non-French group entity, or that its management is based outside France, the account application is likely to stall or be declined.
This creates a practical sequencing issue. Substance must be demonstrated to the AMF to obtain the licence; it must then be demonstrated to a bank to open the account; and the account is needed before the business can operate. Operators who try to build substance incrementally – planning to staff up and formalise governance after banking is secured – find that neither the regulator nor the bank will accept the sequence. We advise clients to treat substance as the first structural decision, not the last.
The Travel Rule (the obligation to pass originator and beneficiary data with a virtual asset transfer) is an additional compliance layer that French banks and fintech partners increasingly require VASPs to evidence before onboarding. Under FATF Recommendation 15 and the EU's Transfer of Funds Regulation, Travel Rule compliance is a baseline expectation for CASPs operating under the French/MiCA regime, and the entity's Travel Rule implementation must be documented and operationally live.
Who Needs Full French Substance vs. a Passported Presence?
Not every operator targeting French users needs to establish a French entity with full substance. The correct analysis depends on the business model, the services offered, and the regulatory classification of those services.
An EU-based CASP authorised in another member state – say, Ireland or Lithuania – may passport into France under MiCA without requiring a French authorisation, provided the activities passported are within the scope of the CASP licence and the passporting notification to the AMF is correctly filed. In that scenario, the substance sits in the home-member-state entity, not in France. The French AMF receives the notification and may communicate with the home-state regulator, but the French entity is not required.
The decision matrix here turns on three factors. First, the market-entry strategy: is France a primary market or a secondary one? An operator for whom France represents the majority of EU revenue has a strong argument to license directly in France rather than rely on passporting from a smaller jurisdiction, because the AMF may scrutinise the structure and refer concerns to the home-state regulator if it considers the passporting entity lacks substance relative to the French activity. Second, the service scope: certain services – particularly those requiring a French operational presence for consumer-protection reasons – may be harder to deliver adequately via a passported structure. Third, the banking and commercial relationship requirement: French institutional counterparties and large clients frequently prefer to contract with a locally authorised entity. Direct authorisation in France, with substance to match, removes that friction.
Profile A – an exchange with France as its primary EU market and institutional clients – points toward direct CASP authorisation in France, full substance, and a local bank relationship. Profile B – a global exchange for whom France is one of several EU markets and which already holds a CASP licence in Ireland – points toward passporting, with a Paris office that meets a minimum operational threshold rather than full substance. The timeline and cost differential between these profiles is material, and the decision should be made before entity formation rather than after.
Micro-Matter: Substance Gap Identified Pre-Authorisation
In a recent licensing engagement, a payments technology company based outside the EU sought AMF registration for a French subsidiary it had incorporated some months earlier. The subsidiary had a Paris address, a single local director (who was also a director of the parent), and an AML policy that had been drafted by the group compliance team and translated into French. The technical infrastructure was hosted entirely in the parent's cloud environment, with no French-entity oversight role. When we reviewed the dossier before submission, it was clear the AMF would identify the structure as insufficiently substantive: the director lacked the time and operational visibility to exercise genuine management control, the AML policy made no reference to the AMF's specific PSAN supervisory guidance, and the outsourcing of IT to the parent was undocumented. We advised the client to delay submission, appoint a dedicated country head with a full-time mandate, revise the compliance programme, and document the IT outsourcing arrangement with a formal agreement and control mechanism. The revised application was filed in the subsequent quarter and moved through the AMF's review without a substantive objection on the substance point.
Common Mistakes Operators Make on French Substance
A common assumption is that France is simply a registration jurisdiction – that once the AMF form is filed and the fee is paid, the entity is compliant and operational. That assumption is wrong, and it is costly when it collides with the AMF's supervisory reality.
The most frequent mistake is the shared-director structure: appointing a director who sits on the boards of multiple group entities across multiple jurisdictions and cannot plausibly exercise genuine management control of the French business. The AMF is increasingly alive to this, and fit-and-proper review is not a formality. The second mistake is treating the compliance programme as a group document with a French translation – the AMF expects a compliance programme that reflects the French regulatory regime, names the French compliance officer, and maps to the AMF's own AML/CFT supervisory guidance, not to a generic group policy. The third mistake is mischaracterising the outsourcing: operators who describe a wholly outsourced operation as "in-house supported by group resources" invite a scrutiny they cannot survive.
A related misconception is that an offshore licence – say, a BVI VASP registration or a Cayman digital-asset licence – provides a sufficient basis to serve French users. It does not. French residents accessing a digital-asset service are within the AMF's supervisory perimeter, and operating a service directed at the French market without the requisite AMF registration or CASP authorisation carries enforcement risk under the applicable PSAN provisions. The offshore licence may be valuable for other parts of the global stack, but it does not substitute for French authorisation where French users are being served.
FAQ
How long does a crypto licence take to obtain?
Under the AMF's PSAN and MiCA-aligned CASP authorisation process, the timeline depends heavily on the completeness of the application dossier and the complexity of the business model. Well-prepared applications with clean governance structures and complete compliance documentation typically progress through the AMF's review in a matter of months. Complex group structures, multi-service applications or incomplete submissions extend that period. We advise clients to treat the pre-submission preparation phase as the critical path: dossiers submitted with substance gaps invite requests for information that add weeks or months to the process.
Which jurisdiction is best for licensing my crypto business?
There is no universal answer. The right jurisdiction turns on where your users are, what services you offer, what your banking requirements are and where your tax and ownership structure sits. For operators targeting the EU, France offers direct AMF authorisation with MiCA passporting rights – valuable if France is a primary market. Ireland and Lithuania offer similar EU passporting from a different base. For businesses outside the EU, structures involving the UAE (VARA or ADGM), Singapore (MAS) or Cayman/BVI may serve different parts of the stack. We map the licence, banking and tax stack together before advising on jurisdiction selection.
Do I need a separate custody licence?
Under both the PSAN framework and the incoming MiCA-aligned CASP regime in France, custody of digital assets on behalf of clients is a regulated activity requiring specific authorisation. An exchange licence does not automatically cover custody. If your business model involves holding client assets – whether as a primary service or as an ancillary function of an exchange or lending product – you will need to confirm that the French entity is authorised for custody, that it meets the applicable safeguarding and segregation requirements, and that its governance and capital position satisfy the AMF's expectations for that activity category.
Related at OBOLUS
- Licensing and registration for digital-asset businesses – our practice overview for the full licence stack, from jurisdiction selection to authorisation.
- Economic substance for licensed VASPs in Ireland – how the Irish Central Bank applies substance requirements to MiCA CASP applicants.
- MiCA whitepaper review in Guernsey – whitepaper obligations and how Guernsey's regime interacts with MiCA-aligned distribution.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We structure licensing, banking and tax as one mandate rather than three disconnected workstreams – mapping the full licence stack across operating, custody and payment layers before you commit. To discuss your situation, contact info@oboluslaw.com.
By Aisha Tan, Licensing & Jurisdictions Analyst – specialising in EU and cross-border VASP/CASP authorisation, including AMF/PSAN applications and MiCA transition strategies for inbound operators.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.