For an institutional digital-asset business, the difference between a live fiat rail and a frozen account is often measured in hours. Correspondent banking access – the chain of relationships that allows a licensed entity to move client money across borders in fiat currencies – is the operational lifeline that connects a crypto exchange, custodian or token-settlement platform to the traditional financial system. Without it, even a well-licensed business cannot pay out redemptions, settle trades or receive client deposits. The question is never simply whether a banking relationship exists; it is whether that relationship is structurally sound enough to survive regulatory scrutiny on both sides of the correspondent chain.
Institutional clients operating in the digital-asset sector face a specific and well-documented challenge: banks that serve as correspondents – the institutions that clear USD, EUR or GBP on behalf of smaller respondent banks or electronic money institutions (EMIs, regulated entities licensed to issue electronic money and hold client funds) – apply layered due-diligence requirements that go well beyond standard corporate onboarding. A business that cannot demonstrate a clean licensing footprint, an auditable AML program and a coherent cross-border structure will find those relationships closed, often without warning. This page explains the legal and structural basis for correspondent banking access for institutional clients, the process for securing and maintaining it, and the cross-border realities that define the outcome.
Why Correspondent Banking Matters for Digital-Asset Businesses
Correspondent banking is the mechanism by which money moves internationally: a respondent institution – the business's bank, EMI or payment institution – holds a nostro account at a correspondent bank in the destination currency, and the correspondent clears the payment into the local settlement system. For a digital-asset business, this chain is the only practical route to fiat settlement at scale.
The stakes are concrete. A crypto exchange that loses its correspondent banking relationship cannot process fiat withdrawals. A custodian that cannot demonstrate segregated, safeguarded client money cannot maintain regulatory standing. A payments business that relies on a single EMI relationship without a backup rail is one compliance failure away from operational paralysis. In our cross-border practice, we have seen institutional clients lose live fiat rails within days of a correspondent bank triggering a de-risking review – and the recovery process, absent careful preparation, can take months.
The cross-border dimension sharpens the risk. A business licensed in one jurisdiction but serving clients in another creates correspondent-bank exposure at every point in the chain: the respondent institution, the correspondent, and the correspondent's own upstream clearer each apply their own risk appetite to the same underlying business. What satisfies the Bank of Lithuania does not automatically satisfy a New York-clearing correspondent operating under NYDFS supervision. The structure must hold at every link.
The Regulated Basis for Institutional Fiat Access
Correspondent banking access for institutional digital-asset clients rests on a clear regulatory foundation: the business must hold the right licence or registration in the jurisdiction where it operates, and that licence must be legible to the correspondent bank's compliance team.
Under MiCA (the EU's Markets in Crypto-Assets Regulation, supervised by ESMA and national competent authorities), a CASP (Crypto-Asset Service Provider) authorisation carries EU-wide passporting rights and is increasingly the baseline document that EU-based correspondents expect to see. An EMI licensed under the EU's e-money directive holds an equivalent position in the payments chain. Outside the EU, the relevant frameworks vary: the VARA regime in Dubai issues activity-specific licences that a UAE-based correspondent will require before opening an account for a virtual-asset business. In Singapore, the Payment Services Act administered by MAS creates a tiered licensing structure with different account-access implications depending on whether the entity holds a standard payment institution or major payment institution licence. In the UK, the FCA's Money Laundering Regulations registration is the minimum threshold, but it does not itself confer a payment licence – a distinction that trips up a significant number of institutional clients seeking UK fiat rails.
The practical rule is this: the licence held must match the activity conducted, and both must be visible to the correspondent bank in a form it can underwrite. A registration that exists but cannot be explained in the language of a correspondent's compliance template is functionally invisible.
Across the FATF Recommendations – particularly Recommendation 15 on virtual assets and the Travel Rule obligation to pass originator and beneficiary data with transfers – correspondent banks now treat VASP compliance posture as a condition of access, not a courtesy check. A business that cannot demonstrate a functioning Travel Rule program will face rejection at the correspondent level regardless of its primary licence.
What Does a Correspondent Bank Actually Require?
The correspondent bank's onboarding process for an institutional digital-asset respondent is more rigorous than standard corporate due diligence, and the documentation requirements reflect it. Based on our practice advising businesses through this process across multiple jurisdictions, the correspondent's review typically spans six substantive areas.
First, primary licensing and regulatory standing: the correspondent will verify the licence or registration held, its scope, the issuing regulator and whether it is current. Any condition, restriction or enforcement history against the licence is a material disclosure item. Second, the AML/CFT program: the correspondent wants evidence of a functioning, documented program – not a policy template but a live program with a named compliance officer, a risk-appetite statement, and records of suspicious activity reports. Third, the Travel Rule implementation: the correspondent will ask which Travel Rule solution the business uses and how it handles counterparty VASPs in jurisdictions without mandatory Travel Rule obligations. Fourth, beneficial ownership and corporate structure: multi-layer structures, trust ownership and nominee arrangements all require complete disclosure and, typically, ultimate beneficial owner declarations down to the relevant threshold for each jurisdiction. Fifth, source-of-funds and business model clarity: correspondents require a clear narrative of where the money comes from, how trades or transactions are settled, and what the client base looks like. A business serving retail clients globally from an offshore entity will face a harder review than one with a defined institutional client base in a supervised jurisdiction. Sixth, banking history: prior account closures, de-risking events or regulatory actions are disclosed proactively or discovered; concealment ends the relationship.
Missing or incomplete documentation on any of these fronts does not result in a request for clarification in most cases. It results in a decline. The correspondent bank's relationship manager is usually not the decision-maker; the decision sits with a financial-crime compliance team operating under its own risk threshold.
To discuss your current banking structure and identify the gaps before the next correspondent review, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your specific facts – the entity, the user base, the banking jurisdiction and the licence stack – change the analysis in ways that require a scoped review before submission.
Common Structural Mistakes That Cost Institutional Clients Their Banking
Most correspondent banking failures we see are not caused by bad actors. They are caused by structural mismatches that were visible in advance but went unaddressed. The four most common mistakes follow a consistent pattern.
The first is the licence-activity gap: the business holds a registration or licence that does not cover the activities it is actually conducting through the account. An entity registered for crypto exchange services that is also providing custody, lending or settlement services to third-party clients is operating outside its regulatory perimeter. When the correspondent discovers this – and it usually does – the account closes.
The second is the jurisdictional mismatch: the entity holding the bank account is not the entity holding the licence, and the two are connected only by an intra-group service agreement. Some correspondent banks accept this structure; many do not. The threshold question is whether the entity presenting to the bank can demonstrate regulatory standing in its own name.
The third is Travel Rule non-compliance. The Travel Rule (the obligation, derived from FATF Recommendation 16, to pass originator and beneficiary identifying information with virtual-asset transfers above the applicable threshold) is now a live compliance expectation at the correspondent-bank level. A business that cannot point to a deployed Travel Rule solution with documented counterparty VASP screening will be deprioritised or declined by compliance-led correspondents.
The fourth is corporate opacity. A structure involving multiple offshore holding layers, nominee directors or beneficial owners in high-risk jurisdictions will trigger enhanced due diligence requirements that most businesses are not prepared to satisfy at speed. In our experience, clients who rebuild their corporate structure with banking access in mind – before approaching a correspondent – succeed significantly more often than those who attempt to manage the disclosure during the onboarding process.
How Does EMI Onboarding Interact With Correspondent Banking Access?
For many institutional digital-asset businesses, the practical route to fiat rails runs through an EMI rather than a direct bank account. An EMI – an entity licensed to issue electronic money and hold client funds in safeguarded accounts – can provide payment accounts, IBAN issuance, SEPA and SWIFT access, and, in many cases, a direct connection to a card scheme. The EMI's correspondent banking relationship is then the business's fiat access point.
This structure solves one problem and introduces another. The EMI's onboarding process for a VASP or institutional crypto client mirrors the correspondent bank's due diligence requirements, because the EMI faces its own correspondent scrutiny for the underlying transactions. An EMI that onboards a poorly structured crypto business inherits the regulatory exposure. The leading EMIs in the market – those with stable correspondent relationships and meaningful transaction capacity – are selective, and their criteria are as demanding as a tier-two bank's.
The cross-border dimension matters here too. An EU-licensed EMI can provide SEPA access across the EU/EEA under its passporting rights. But if the VASP it is serving operates a platform that serves users in Singapore, the UAE or the US, the EMI's own correspondent banks will apply additional scrutiny to the transaction flow. The licensing coverage of the VASP in those user-facing jurisdictions is therefore the EMI's risk, and it will ask about it. A VASP that cannot demonstrate licensing or at least a clear regulatory analysis for each material user jurisdiction creates a liability for the EMI that the EMI will not accept.
In practice, institutional clients seeking EMI onboarding as a route to fiat rails need to present the same documentation package as they would to a direct correspondent bank, supplemented by a clear jurisdictional analysis of where the business operates and under what regulatory authorisation.
The Cross-Border Reality: Multi-Rail Structures and Jurisdictional Layering
No single fiat rail is adequate for an institutional digital-asset business operating across jurisdictions. The practical standard for a well-structured business is a multi-rail architecture: a primary banking relationship or EMI account for the main operating currency, a secondary relationship for backup settlement, and clear contractual and operational separation between client-money and operating-money accounts.
This architecture requires jurisdictional layering. A business licensed under VARA in Dubai may need a separate EU entity with a MiCA CASP authorisation (or a transitional licence from a national competent authority) to access SEPA rails and serve EU institutional clients under the applicable regime. A business with a MAS-licensed DPT entity in Singapore may need an additional structure to access USD correspondent banking through a US-regulated institution. Each layer adds regulatory obligation, but it also adds resilience and, critically, it signals to correspondents that the business understands the regulatory environment in which it operates.
We regularly advise institutional clients on the design of this multi-entity, multi-licence structure before they commit to a banking approach. The question of where to license, where to hold client money and where to bank is not answered by choosing the lowest-cost option. It is answered by mapping the regulatory expectations of the correspondents the business needs, then working backward to the structure that satisfies all of them.
A micro-matter from our recent practice illustrates the dynamic. An institutional crypto-settlement platform operating out of a single offshore entity had built a payments flow that routed through three EMIs in different EU member states. When MiCA transition requirements tightened, one EMI withdrew service. The platform had no backup rail and no EU-licensed entity of its own. We worked with the client to identify a suitable EU jurisdiction for a CASP authorisation under MiCA, supported the application process, and introduced allied counsel in the relevant member state for the regulatory filing. By the time the remaining EMIs completed their own transition reviews, the client had an independent licence in place and was positioned to approach correspondents in its own right.
If a prior application stalled or a banking relationship was closed without explanation, a scoped structural review can identify the reason and map a route back. Write to OBOLUS at info@oboluslaw.com or message us at t.me/oboluslaw. Clients who have already encountered a de-risking event require a different approach than those preparing for first onboarding, and the two processes should not be confused.
Decision Matrix: Which Structure Fits Which Institutional Profile
Different institutional profiles require different approaches to correspondent banking access. The matrix below describes the most common configurations in qualitative terms; the right structure for a given business depends on its activity, client base and existing licensing footprint.
Profile A – A licensed EU CASP seeking direct correspondent banking. The applicable route is a MiCA-authorised CASP with a directly held bank account at an EU institution with a correspondent relationship for the required settlement currencies. The indicative documentation package is the CASP authorisation, a full AML/CFT program, Travel Rule solution evidence and beneficial ownership disclosures. The primary risk is that MiCA authorisation is necessary but not sufficient: the bank's own risk appetite, transaction profile expectations and sector policy will determine whether the relationship is approved. Timeline to first account is variable and depends on the bank selected; preparation of the documentation package is typically a matter of weeks.
Profile B – A VARA-licensed exchange seeking USD correspondent access. The applicable route involves a UAE-licensed entity presenting to a UAE correspondent with USD-clearing capacity, or an additional US-regulated structure for direct access to the Federal Reserve clearing system. The VARA licence is the UAE anchor; USD clearing requires a relationship with a bank that maintains a US correspondent or a direct Fed account. The Travel Rule implementation must satisfy both UAE and US regulatory expectations. The risk is that US-side scrutiny of virtual-asset businesses remains heightened under FinCEN and NYDFS frameworks, and the timeline to a stable USD-clearing relationship is longer than in most other jurisdictions.
Profile C – A Singapore DPT-licensed business seeking multi-currency fiat rails. The applicable route is a major payment institution licence under MAS's Payment Services Act, which opens access to MAS-regulated payment channel providers and, through them, to correspondent banking for SGD and major foreign currencies. For USD, EUR and GBP, supplementary relationships with banks or EMIs in the relevant currency zones are standard. The risk is that the DPT licence does not automatically confer payment account access; the payment-institution licence level determines the transaction capacity available.
Profile D – An institutional client with no current licence seeking a starting point. The first step is a jurisdictional analysis mapping the activity, the client base and the available licence routes. Banking access follows the licence, not the reverse. Attempting to secure correspondent banking without a clear licensing footprint creates an application that no compliance team can approve. The timeline for this profile begins with the jurisdictional and structural design phase; the banking approach comes after the regulatory position is established.
A Common Assumption About Offshore Licences
A common assumption among institutional clients approaching this area for the first time is that a single offshore licence – in the BVI, Cayman Islands or a similarly light-touch jurisdiction – is adequate to support global operations and global banking access. It is not, and the gap between this assumption and operational reality is one of the most consistent sources of the problems we see.
Offshore registrations under the BVI FSC's VASP Act 2022 or CIMA's Virtual Asset Service Providers Act serve a specific structural purpose: they provide a defined regulatory home for an entity that may hold investments, act as a fund general partner or structure a token issuance. They do not, by themselves, provide access to correspondent banking for client-money flows in EUR, USD or GBP. Correspondents in those currencies operate under the supervision of their own regulators – ESMA and national competent authorities, NYDFS, the FCA – and they require counterparties that demonstrate regulatory standing in jurisdictions those regulators recognise.
The practical implication is that a multi-entity structure is the norm for institutional digital-asset businesses with real scale. The offshore entity serves its structural function; a separately licensed operating entity in a recognised hub carries the client-facing activity and the banking relationship. The two are connected by an intra-group agreement that is itself reviewed and documented as part of the correspondent bank's onboarding. We map this licence stack across the operating, custody and payment layers before any commitment is made, because the cost of redesigning the structure after banking relationships have been established is disproportionate.
What Does Client-Money Safeguarding Require in a Correspondent Banking Context
Client-money safeguarding – the obligation, under most regulated payment and e-money regimes, to hold client funds in segregated accounts that are ring-fenced from the firm's own assets – is a distinct requirement that interacts directly with the correspondent banking structure.
Under the EU's e-money and payment services regimes, and under MiCA for certain asset classes, a licensed entity must hold client money either in a segregated bank account at a credit institution or invest it in certain qualifying liquid assets, with the safeguarded funds insulated from the institution's insolvency. This means the correspondent bank account into which client funds flow must itself be structured to satisfy the safeguarding obligation – typically through a dedicated account with a clear trust or title-transfer designation in the account agreement.
The FSRA within ADGM imposes comparable safeguarding expectations for licensed entities holding client assets. MAS's Payment Services Act has its own float-safeguarding requirements for relevant licence categories. In each case, the structure of the bank account – not just its existence – determines whether the regulatory obligation is met.
The practical implication for institutional clients is that securing a correspondent banking relationship is necessary but insufficient. The account structure, the account agreement, and the client-money segregation arrangements must each be reviewed against the applicable regime's requirements. We regularly see clients who have a bank account but whose account structure does not satisfy their safeguarding obligation – an exposure that becomes acute at the first regulatory examination.
Related at OBOLUS
- Banking, Payments & EMI Onboarding practice overview – the full scope of our banking and payments advisory for digital-asset businesses
- PSP and acquiring agreement advisory for institutional clients – structuring and negotiating payment service provider and acquiring agreements
- Correspondent banking access for established operators – maintaining and defending fiat rails for businesses with an existing track record
FAQ
Why do banks close crypto company accounts?
Banks close crypto company accounts primarily because of de-risking: the compliance cost of maintaining the relationship is assessed as disproportionate to the commercial value. Specific triggers include an incomplete or inadequate AML/CFT program, a licensing gap between the activity conducted and the regulatory status held, failure to implement the Travel Rule, unexplained transaction flows, or a group structure the bank cannot underwrite to its own risk standard. In most cases the decision is made by the bank's financial-crime compliance function, not by the relationship team, and it is rarely reversed once taken. Preparation before onboarding is far more effective than remediation after closure.
How can a VASP onboard with an EMI?
A VASP seeking to onboard with an EMI must satisfy the EMI's own compliance requirements, which mirror those of a correspondent bank because the EMI faces correspondent scrutiny for its underlying clients. The documentation required typically includes the VASP's licence or registration, a full AML/CFT program with a named compliance officer, evidence of a deployed Travel Rule solution, complete beneficial ownership and corporate structure disclosure, and a clear narrative of the business model and client base. EMIs with stable correspondent relationships are selective; VASPs with clean licensing footprints, well-documented compliance programs and a defined institutional client base are consistently better positioned.
What does client-money safeguarding require?
Client-money safeguarding requires a licensed entity to hold client funds in accounts that are legally and operationally segregated from the firm's own assets, so that those funds are protected in the event of the firm's insolvency. The specific requirements vary by regime – MiCA, the EU e-money and payment services frameworks, MAS's Payment Services Act, and the FSRA's regime within ADGM each impose their own conditions – but the common elements are a designated segregated account at a credit institution, a clear trust or title-transfer designation in the account agreement, and regular reconciliation. The structure of the account, not merely its existence, determines whether the obligation is met.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and institutional clients on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the banking, payments and compliance structures that sit around them. Digital assets are the entirety of our practice. We map the licence stack across operating, custody and payment layers before you commit, because restructuring after banking relationships are established carries disproportionate cost. To discuss your situation, contact info@oboluslaw.com.
By Victor Olsen, Regulatory & Compliance Analyst – specialises in cross-border VASP licensing and correspondent banking compliance for institutional digital-asset businesses.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.