Switzerland operates one of the most technically precise digital-asset regimes in the world. A business that enters without clearing the applicable FINMA (Swiss Financial Market Supervisory Authority) requirements faces more than a regulatory notice – it faces enforced exit, frozen correspondent banking and the loss of the institutional counterparties that make a Swiss presence worth having. The question is not whether to engage the regime. The question is which licence route applies to your specific activity profile.
VASP licensing in Switzerland turns on FINMA's token taxonomy and activity classification, not on how a business describes itself. Under the applicable Swiss regulatory regime, a digital-asset business may require a fintech licence, a banking licence, or affiliation with an approved self-regulatory organisation under the Anti-Money Laundering Act – or a combination of all three, depending on the services offered and the assets handled. This page maps each route, the cross-border interactions that shape the choice, and the structural decisions an inbound operator must make before filing.
The Swiss Regulatory Regime for Digital Asset Businesses
Switzerland's approach is activity-based and asset-class-sensitive. FINMA does not maintain a single "crypto licence" – it applies existing financial-law categories to digital-asset activities through a published token taxonomy: payment tokens, utility tokens and asset tokens each attract different regulatory consequences. A business offering exchange, custody or issuance services must identify which category its tokens fall into, then map that category to the relevant licensing obligation.
The three primary licence routes are: the fintech licence (introduced as a third banking-law category for businesses that accept public deposits up to a defined threshold but do not invest or pay interest on them); the full banking licence (required where deposits exceed the fintech threshold or where credit is extended); and SRO affiliation under the Anti-Money Laundering Act, which is mandatory for any financial intermediary that is not already supervised by FINMA directly.
A business operating purely as a token issuer, without accepting deposits or acting as financial intermediary, may fall outside the licence perimeter – but it still faces prospectus obligations, AML obligations and potentially securities law if the token confers asset-like rights. In our practice, the classification step is the one where operators most frequently misjudge their position.
The cross-border dimension matters from the outset. FINMA applies its regime based on where a service is actively marketed and where counterparties are located, not solely where the entity is incorporated. A Cayman or BVI vehicle marketing to Swiss institutional clients is within scope. An inbound operator should assume Swiss law applies unless it can demonstrate genuine passporting from a recognised equivalent regime.
How FINMA's Token Taxonomy Determines Your Licensing Path
The classification of your token or service is the foundational step in Swiss regulatory authorisation. FINMA's published guidance establishes three categories: payment tokens (used solely as a means of payment or value transfer, with no further rights); utility tokens (providing access to a specific application or service); and asset tokens (representing claims on underlying assets, participations or future income – treated analogously to securities or derivatives).
Payment token activities – particularly exchange and custody – typically require SRO affiliation and may require the fintech licence. Asset token issuance or dealing triggers securities law in addition to the AML/CFT baseline. Utility tokens occupy a narrower carve-out, but that carve-out is assessed on substance: a token marketed with profit expectations or featuring secondary-market liquidity will often be re-characterised as an asset token regardless of the label applied.
In practice, most digital-asset businesses handle more than one token type. An exchange platform clears payment tokens, lists asset tokens and may custody both. The appropriate licensing stack – fintech licence plus SRO affiliation plus potentially a securities dealer authorisation – is therefore a function of the full service matrix, not a single product line.
Operators we advise regularly underestimate the securities dimension. If a listed token confers any economic right or profit participation, dealing in that token as principal or agent may constitute securities dealing under Swiss law. FINMA has consistently applied this analysis to what operators characterise as utility tokens.
Who Needs a Licence: The Regulatory Perimeter in Practice
Any business conducting a financial intermediary activity in or from Switzerland on a professional basis is subject to FINMA supervision or SRO affiliation under the applicable AML regime. The key activities that trigger the perimeter include: accepting, holding or transferring funds or digital assets on behalf of third parties; operating an exchange or OTC desk for digital assets; issuing tokens that constitute securities or instruments creating debt; and providing custody of digital assets for clients.
The "professional basis" threshold is a qualitative test. A business with more than a small number of active counterparties, generating fee income from the activity, is on the professional side of the line. FINMA has shown limited tolerance for structures that argue otherwise.
Foreign entities serving Swiss counterparties need to evaluate their position carefully. Providing digital-asset services to Swiss-based clients without either a Swiss presence or a recognised equivalent authorisation exposes the foreign entity to FINMA's cross-border enforcement reach. Switzerland is not a jurisdiction where regulatory risk can be managed at distance through a foreign entity alone.
CTA – Early Stage: If your business is evaluating whether Swiss activities trigger a licensing obligation, the analysis begins with the token type and the client base. Map your options with our licensing desk before you structure the entity or open the bank account. The process above describes the standard path. Your facts – the entity, the user base, the banking – change the analysis.
The SRO Route: AML Affiliation as the Baseline Obligation
For most digital-asset businesses entering Switzerland, SRO affiliation – membership of an approved self-regulatory organisation under the Anti-Money Laundering Act – is the first obligation that crystallises and the one that is most frequently delayed.
An SRO acts as the primary AML/CFT supervisor for financial intermediaries that are not subject to direct FINMA prudential supervision. Affiliation requires a fit-and-proper assessment of beneficial owners and key personnel, an AML compliance programme meeting Swiss standards, and ongoing reporting obligations. The SRO reviews the business model, the transaction types and the onboarding procedures before granting membership.
SRO affiliation is not a lighter version of a FINMA licence. It carries real obligations and real enforcement consequences. An intermediary found to be operating without affiliation – or found to have misrepresented its activity to an SRO – faces criminal exposure under Swiss law, not just regulatory sanction.
The Travel Rule (the obligation to pass originator and beneficiary data with a virtual-asset transfer) applies to Swiss VASPs under the applicable AML framework. Swiss implementation of the FATF Recommendation 15 standard is mature and enforced. Operators must build Travel Rule compliance into their technical infrastructure before going live, not after. In our cross-border practice, Travel Rule implementation is consistently the item that delays go-live most, because it requires bilateral capability with counterparty exchanges that may be in different regulatory regimes.
The Fintech Licence: When It Applies and What It Costs Operationally
The fintech licence is the route for digital-asset businesses that accept client funds or assets up to the applicable statutory threshold but do not lend or invest those funds. It sits between full banking authorisation and the SRO-only track. The licence is granted by FINMA and carries ongoing capital, liquidity and governance obligations, as well as direct FINMA supervision.
The operational requirements are significant. The applicant must demonstrate adequate minimum capital, a governance structure with clearly responsible senior management, a business continuity plan, and AML/CFT systems that meet FINMA's expectations. External auditors authorised by FINMA are required. The licensing process involves submitting a detailed application, a business plan, a legal opinion on the classification of activities, and extensive documentation on the organisational structure.
Timelines for FINMA authorisation vary by complexity and completeness of the file. An application that is complete and internally consistent will move faster than one requiring multiple rounds of supplementary questions. Operators we advise are typically directed to plan for a process measured in months, not weeks – the exact duration depends on FINMA's queue, the completeness of the submission and whether novel questions of classification arise.
For a business considering the fintech licence, the cost-benefit question turns on throughput. If client asset volumes stay below the applicable threshold, the fintech licence is sufficient. If the business model anticipates exceeding that threshold, the full banking licence becomes the operative question – and the capital and governance requirements increase materially.
Cross-Border Banking and Tax: The Practical Constraints
Switzerland's licensing regime operates in a specific banking environment. Swiss correspondent banks servicing digital-asset businesses apply stringent onboarding standards that go beyond the regulatory minimum. A FINMA-licensed entity or SRO-affiliated intermediary is in a better position to open a Swiss bank account than an unlicensed one – but authorisation alone does not guarantee a banking relationship.
Banks in Switzerland apply their own AML/risk policies, which may be more conservative than FINMA's baseline. Businesses in high-volume retail exchange, privacy-coin dealing or anonymous wallet service historically face the most resistance. Structuring the banking relationship early – including engaging allied counsel with relationships in the relevant jurisdiction – is a practical priority, not a post-licensing afterthought.
On the tax side, Switzerland treats digital assets differently across cantonal and federal levels. The Federal Tax Administration has issued guidance on the VAT treatment of token transactions, on the wealth tax treatment of crypto holdings for individuals, and on the corporate income tax treatment of token issuance proceeds. That guidance does not resolve every question. In our cross-border practice, we see the most acute structuring questions arise when a foreign-incorporated holding entity receives token issuance proceeds, then routes services through a Swiss operating entity. The transfer-pricing and permanent-establishment analysis requires careful advance work.
For businesses already licensed in the EU under MiCA (the Markets in Crypto-Assets Regulation), Switzerland does not offer automatic recognition. Switzerland is not an EU member. A MiCA-authorised CASP serving Swiss institutional clients must separately evaluate FINMA's cross-border services rules. The answer is fact-specific – it turns on how the service is delivered and who solicits whom.
Decision Matrix: Which Route Fits Your Operator Profile
Choosing the right licensing route in Switzerland requires a clear view of the business's activity profile, its client base and its anticipated asset volumes. Three broad operator profiles emerge in our practice.
Profile A – The exchange or OTC desk: A business clearing digital-asset transactions for institutional or sophisticated retail clients primarily needs SRO affiliation as its baseline, with an assessment of whether the volume and asset types push it into fintech-licence territory. The cross-border question – whether the client base is Swiss-resident or Swiss-solicited – determines whether a domestic presence is required or whether a foreign entity with appropriate safeguards is defensible. Indicative process: SRO affiliation first (a matter of months), then fintech licence application running in parallel if throughput warrants it. Key risk: misclassification of asset tokens as payment tokens, creating an unlicensed securities dealing exposure.
Profile B – The token issuer: An issuer of asset tokens that carry economic rights needs a legal opinion on whether those tokens constitute securities under Swiss law. If they do, the issuer must comply with prospectus or exemption requirements, and any dealing by the issuer in those tokens on secondary markets triggers further licensing considerations. The SRO affiliation obligation still applies to the AML dimension. Key risk: a token launched without a FINMA no-action comfort or a clean legal opinion faces retroactive reclassification.
Profile C – The custodian: A business holding digital assets for third parties faces both the fintech licence question (if it also accepts cash) and the AML/SRO obligation. Custody is a regulated activity. A custodian that holds assets for Swiss clients, even from a foreign entity, is within scope of FINMA's reach. The banking interaction is acute: a custodian needs a fiat settlement rail, and Swiss banks are selective. Key risk: holding client assets without the applicable authorisation is the fact pattern that historically draws FINMA's fastest enforcement response.
A Cross-Border Licensing Matter in Practice
In a recent licensing matter, a crypto custody and exchange operator based in an EU jurisdiction sought to extend its services to Swiss institutional clients. The operator assumed its existing EU regulatory authorisation provided sufficient cover. It did not. We conducted a full perimeter analysis, identified that the proposed Swiss-client solicitation triggered FINMA's cross-border services rules, and structured a phased approach: SRO affiliation first, then a fintech licence application supported by a revised governance framework. The operator was able to onboard Swiss clients within the licensing window without triggering enforcement action, and its banking relationships in both jurisdictions were preserved through the transition.
CTA – Mid-Stage: If a prior application stalled or an account was closed, a second read can surface the structural reason and the route back. Map your options with our licensing desk. We regularly advise operators who have already invested in a structure that needs adjustment rather than replacement.
Common Mistakes in Swiss VASP Licensing
The most consistent error we see is the assumption that Switzerland's reputation for financial innovation means its regulatory requirements are light. They are not. FINMA is a sophisticated, internationally active regulator that takes a substance-over-form approach. The following mistakes appear repeatedly.
Delaying SRO affiliation. Businesses that begin taking client assets before affiliating with an SRO are operating as unregistered financial intermediaries. Swiss law treats that as a criminal matter, not a civil one.
Misreading the token taxonomy. A token that generates returns, carries economic rights or functions as a debt instrument is an asset token under FINMA's framework, regardless of the marketing label. The classification needs a formal legal opinion, not a self-assessment by the business team.
Assuming MiCA equivalence. Switzerland is not in the EU. A MiCA CASP passport stops at the Swiss border. Swiss clients require Swiss-law compliance in addition.
Leaving banking to last. In our practice, the banking relationship is typically the longest lead-time item in a Swiss structure. Beginning the banking conversation after the licence application is filed adds months to the go-live timeline.
Underestimating Travel Rule infrastructure. The Travel Rule applies at a threshold that must be confirmed against current Swiss implementation. Building the technical bilateral capability with counterparty VASPs takes time and requires counterparty cooperation that cannot be assumed.
Addressing the Offshore Licence Myth
A common assumption among inbound operators is that a single offshore licence – BVI, Cayman or similar – is enough to serve clients globally, including in Switzerland. That assumption is incorrect and carries material risk in the Swiss context.
FINMA asserts jurisdiction based on where the service is actively provided and where counterparties are located. An offshore entity marketing digital-asset services to Swiss-based institutions, or holding Swiss-resident client assets, is within FINMA's perimeter. The offshore licence provides no protection in that analysis. FINMA has taken action against foreign entities operating without the applicable Swiss authorisation, including public warnings and orders to cease activity directed at Swiss clients.
The correct structure for a business with Swiss ambitions is to resolve the Swiss licensing position first, then build the offshore holding or fund structure around a compliant Swiss-facing operating entity. Reversing that order – offshore first, Swiss later – creates a period of unlicensed activity that cannot easily be remediated.
In our cross-border practice, we map the licence, banking and tax stack as a single integrated mandate. The Swiss operating question, the EU MiCA question and the offshore holding question interact. Treating them as separate workstreams is where complexity becomes exposure.
Related at OBOLUS
- Licensing and Registration for Digital Asset Businesses – end-to-end licensing mandates across 70+ jurisdictions, from scoping to authorisation
- Digital Asset Custody Authorisation in Singapore – how the MAS licensing regime applies to custody service providers in Singapore
- Fund Domicile Selection from a Cross-Border Perspective – matching fund structure to jurisdiction for tax, banking and regulatory efficiency
FAQ
How long does a crypto licence take to obtain?
Timelines vary by jurisdiction and licence type. In Switzerland, SRO affiliation typically takes a number of months from submission of a complete application. A FINMA fintech licence adds further time, depending on the complexity of the business model and the completeness of the file. In our practice, operators should plan for a process measured in months rather than weeks, and should not begin regulated activities before authorisation is in place.
Which jurisdiction is best for licensing my crypto business?
There is no universal answer. The optimal jurisdiction depends on where your clients are, what assets you handle, what banking you need, and what your tax structure looks like. Switzerland offers strong institutional credibility and a developed regulatory framework, but it is not the lightest-touch option. For EU market access, a MiCA CASP authorisation in an EU member state is the primary route. For Asia-Pacific, Singapore under the Payment Services Act or Hong Kong under the VASP regime are the leading choices. We assess these as a combined stack, not individually.
Do I need a separate custody licence?
In Switzerland, custody of digital assets for third parties is a regulated activity. Depending on the volume and nature of assets held, it may require SRO affiliation, a fintech licence, or both. A business that also accepts fiat from clients in connection with custody services must assess whether the fintech licence threshold is crossed. The custody question should be resolved at the outset of licensing planning, not after the exchange or trading licence has been addressed.
OBOLUS is an independent digital-asset law boutique acting exclusively for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions – including Switzerland, the EU, Singapore and Hong Kong – on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance structures that support them. Digital assets are the whole of our practice. We map the licence, banking and tax stack as one mandate rather than three disconnected workstreams, so the structure holds from day one. To discuss your Swiss licensing position or your broader regulatory strategy, contact info@oboluslaw.com or reach us at t.me/oboluslaw.
By Aisha Tan, Licensing & Jurisdictions Analyst – specialising in multi-jurisdictional VASP authorisation, regulatory perimeter analysis and inbound market-entry structuring for digital-asset businesses.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.