Correspondent banking access defines whether a regulated digital-asset business can move client money in fiat at all. For a VASP (virtual asset service provider), an EMI (electronic money institution) or a licensed exchange, losing correspondent access – or never gaining it – is an operational death sentence. The licensing question and the banking question are not two problems. They are one problem, and the order in which you solve them matters. This page explains the regulated basis for correspondent relationships, the structural factors that determine access or denial, and the steps a regulated entity can take to establish durable fiat rails.
What Correspondent Banking Means for Digital-Asset Businesses
Correspondent banking is the arrangement by which one bank – the respondent – accesses the payment infrastructure of another bank in a foreign currency or market. For digital-asset businesses, correspondent relationships are how a licensed entity routes USD wire transfers, SEPA payments, SWIFT settlements and multi-currency client accounts. Without a correspondent, a regulated entity may hold a valid licence and still be unable to receive or send fiat on behalf of clients.
The challenge is structural, not incidental. Major US and European correspondent banks apply a tiered de-risking calculus that treats digital-asset counterparties as a category of elevated exposure. The exposure is not theoretical. Regulators including FinCEN, the FCA and ESMA have all made clear that correspondent institutions share in the compliance obligations of the respondent. A correspondent that cannot independently assess the respondent's AML controls faces potential enforcement exposure of its own.
In our cross-border practice, we regularly advise licensed operators who completed a licensing process in a recognised hub – whether under the VARA regime in Dubai, MiCA via a European CASP authorisation, or the MAS Payment Services Act in Singapore – and then discovered that their licence alone did not open banking. The bank's credit and compliance committee applied a separate, internal standard.
That standard is not arbitrary. It is driven by the correspondent bank's own regulator, its KYC obligations and, critically, its assessment of how the respondent's client base will be treated under the Travel Rule (the obligation to pass originator and beneficiary data with each virtual-asset transfer). A licensed entity that cannot demonstrate Travel Rule compliance in practice – not just in its policy document – will not pass the correspondent's onboarding review.
Why Do Licensed VASPs Lose or Fail to Gain Banking?
The most common reason is a mismatch between the licence the entity holds and the risk profile the bank actually sees. A CASP licence under MiCA, a VASP registration under the BVI FSC or a payment institution authorisation under the FCA each demonstrates regulatory standing in its own regime. None of them, individually, tells a prospective correspondent bank how the entity manages sanctions screening, who its beneficial owners are, how it treats retail versus institutional clients, or whether it has a functioning transaction-monitoring programme.
Banks that have withdrawn from the digital-asset sector in recent years have generally cited one of four triggers. First, inadequate AML documentation at the point of onboarding. Second, a client base perceived as high risk without compensating controls. Third, a corporate structure that obscures beneficial ownership across multiple jurisdictions. Fourth, a lack of segregation between the entity's own funds and client money – a concern that moves a pure banking relationship into the territory of regulated custody.
A fifth trigger – less visible but increasingly significant – is what we describe as licence-jurisdiction mismatch. An entity licensed in a jurisdiction with a credible regime but banking through a correspondent in an unrelated market will face heightened scrutiny at the point of the correspondent's own group compliance review. The geography of the licence, the geography of the banking and the geography of the customer base are assessed together, not in isolation.
Operating without the right structure risks not just account closure but the loss of fiat rails at a moment when client funds are in transit. We have seen operators face exactly that scenario – active client withdrawals processing when the correspondent terminated the relationship. The reputational and operational consequences of that outcome are severe.
To discuss how your current licence and banking structure maps against correspondent expectations, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts – the entity, the user base, the banking – change the analysis. Map your options.
The Regulated Basis: MiCA, VARA, MAS and Correspondent Expectations
Correspondents do not apply a single global standard. They apply their own group policy, calibrated to the regimes their home regulator accepts as equivalent or near-equivalent. Understanding which licences carry weight with which correspondent pools is a prerequisite to building a banking strategy.
Under MiCA, a fully authorised CASP in an EU member state benefits from passporting across the EEA. That passporting right is recognised by EU-headquartered correspondents, and it meaningfully changes the onboarding conversation. However, an entity that registered under a transitional national regime and has not yet completed CASP authorisation occupies a legally ambiguous position – some correspondents will accept it, others will not, pending the authorisation outcome.
Under the VARA regime in Dubai, a licensed entity sits within mainland Dubai's regulatory perimeter. VARA-licensed entities benefit from a credible, sophisticated regime, but their correspondent relationships typically run through UAE-based banks or through international banks with a material Gulf presence. Access to USD clearing via New York correspondent banks adds a layer: US correspondents apply their own Bank Secrecy Act and OFAC-driven review, which is independent of VARA standing.
Under the MAS Payment Services Act in Singapore, a licensed Digital Payment Token service provider operates under one of the most widely recognised digital-asset regimes in Asia. MAS licensees generally have better access to Singapore-based banking than unlicensed operators, but the major international banks maintain group-level policies that may restrict digital-asset business regardless of local licence status.
The practical consequence: a well-designed banking strategy for a regulated entity identifies two or three correspondent pools – typically an EU-based relationship, a US-clearing-capable relationship and a regional relationship matched to the entity's primary customer base – and sequences the onboarding applications to build from the most accessible to the most restrictive.
How Does the Correspondent Banking Application Process Work?
The application process for correspondent banking access involves far more documentation than most operators anticipate, and the substance of that documentation – not the licence itself – is what determines the outcome. The process typically unfolds in four phases.
In the first phase, the prospective respondent assembles a compliance dossier. This includes the constitutional documents of the entity, the full UBO (ultimate beneficial owner) structure certified to the correspondent's standard, the AML/KYC policy, the sanctions screening procedures, the Travel Rule implementation evidence and the most recent independent audit or review of those controls. For a licensed entity, the licensing documentation anchors the dossier, but it does not replace it.
In the second phase, the correspondent's correspondent banking or financial-institution onboarding team reviews the dossier against its internal risk appetite. This review is not merely documentary. Most major correspondents will request a call with senior compliance officers, and some will require an on-site or virtual meeting with the entity's chief compliance officer or money-laundering reporting officer. The quality of those conversations – the demonstrable depth of the team's compliance culture – is often determinative.
In the third phase, the correspondent's credit committee and, where applicable, its group compliance function, apply final approval. This phase can introduce delays of weeks to months. Entities that have not anticipated the correspondent's internal committee cycle often experience stalls at this stage that are attributed to documentation gaps when the real cause is committee scheduling.
In the fourth phase, the terms of the correspondent relationship are negotiated. Transaction limits, monitoring frequency, periodic attestation requirements and the circumstances under which the correspondent may terminate without notice are all live negotiating points. These terms are not standard. They vary significantly by correspondent, by the entity's risk classification and by the strength of the AML dossier presented.
In our practice, we work with clients to build and sequence the compliance dossier before the first application is submitted. A dossier prepared for the most demanding expected correspondent typically meets the threshold for less restrictive ones. The reverse approach – submitting to an accessible correspondent first and iterating upward – creates a document trail that more demanding correspondents may request and review.
Common Structural Mistakes That Close Banking Doors
A recurring mistake is licensing an operating entity in one jurisdiction, holding client money in a second, and banking through a third, without a documented rationale for each choice that a compliance officer can follow. Correspondents reviewing that structure will identify the gaps even if the arrangement is technically lawful under each applicable regime.
A second mistake is conflating EMI onboarding with correspondent banking access. An EMI provides a regulated payment account and may offer IBAN issuance, SEPA and SWIFT access. It is not the same as a direct correspondent relationship. EMI access is faster to establish and useful for operational accounts, but most EMIs themselves rely on a correspondent bank for their clearing. If the EMI's correspondent relationship breaks, the entity's fiat access breaks with it. Diversification across at least two EMI or banking channels is standard risk management for a mature operator.
A third mistake is underestimating the weight placed on the AML governance structure. A licensed entity with a nominal compliance officer who does not hold decision-making authority, or whose compliance programme consists of a purchased policy document that has never been operationally tested, will not pass a sophisticated correspondent's review. Correspondents are looking for evidence that the compliance function is alive – transaction escalations, documented board-level risk reporting, evidence that suspicious activity reports have been filed where required.
A fourth mistake, specific to cross-border operations, is failing to account for the US nexus. An entity that accepts USD or serves US-connected customers, regardless of where it is licensed, will eventually face a correspondent review that applies US standards. The Bank Secrecy Act and OFAC sanction screening requirements apply to any bank that touches the US financial system. An entity that has not mapped its exposure to those obligations before seeking a USD clearing relationship will face avoidable delays or refusals.
Decision Matrix: Which Banking Structure Fits Which Operator Profile?
The right banking architecture depends on the entity's regulatory status, the currencies and markets it serves and the scale of its operations. What follows is a qualitative mapping across three operator profiles.
A newly licensed CASP under MiCA, operating primarily in euros with a predominantly EU retail and institutional client base, is best positioned to begin with an EU-regulated EMI that specialises in digital-asset business. That relationship delivers SEPA access and a functional operational account while the entity builds the compliance dossier necessary for a direct banking relationship with a major correspondent. The timeline for the EMI onboarding is typically shorter than direct banking. The risk is concentration – the entity should plan for a second EMI or banking channel before it becomes operationally dependent on the first.
A VARA-licensed exchange in Dubai serving a GCC and international client base requires a different stack. UAE-based banking is the natural starting point, and VARA licensing meaningfully supports that onboarding. For USD and EUR clearing, the entity will need correspondent access through a bank with a material Gulf presence and US/EU correspondent relationships. The AML documentation standards that apply are layered: UAE Central Bank standards, VARA's own rulebook requirements and, for USD clearing, US correspondent standards.
A MAS-licensed DPT provider in Singapore serving institutional clients across Asia typically requires SGD, USD and potentially HKD access. Singapore-headquartered banks are the natural primary relationship, but the same de-risking dynamic applies. The entity's institutional client profile – and the robustness of its KYC on those clients – is the primary variable. An entity whose clients are themselves regulated financial institutions will have a materially easier banking journey than one whose client base includes high-volume retail.
To map the licence, banking and tax stack for your structure, write to OBOLUS at info@oboluslaw.com. If a prior application stalled or an account was closed, a second read can surface the structural reason and the route back. Map your options.
The Cross-Border Reality: EMI, Fiat Rails and the Travel Rule
Every cross-border digital-asset business lives at the intersection of its licence regime, its banking relationships and its fiat rails (the underlying banking infrastructure that moves national-currency funds to and from the entity's accounts). These three elements interact in ways that affect each other's stability.
The Travel Rule, derived from FATF Recommendation 15 and implemented in varying form across the EU under MiCA, in Singapore under the MAS Payment Services Act and in the UAE under VARA requirements, obliges VASPs to collect and transmit originator and beneficiary information when transferring virtual assets above applicable thresholds. Those thresholds vary by jurisdiction and are subject to legislative update – consult current legislation for the applicable figure in each market.
What matters for correspondent banking is this: a correspondent reviewing a VASP's AML programme will assess Travel Rule compliance as a live operational question, not a policy commitment. The correspondent wants to know which Travel Rule solution the entity uses, how it handles unhosted wallet transfers, and how it deals with counterparty VASPs that are not yet Travel Rule compliant. A VASP that cannot answer those questions in operational terms – not just in its policy document – will not pass the correspondent's compliance review.
The cross-border complexity compounds when the entity's client base includes users in multiple Travel Rule jurisdictions. An entity licensed in the EU under MiCA, banking through an EU correspondent, but serving clients in Singapore, the UAE and the United States must manage Travel Rule obligations under at least three separate regimes simultaneously. The compliance infrastructure necessary to do that credibly is material. It is also the infrastructure the correspondent bank will assess.
In a recent matter, a licensed payments entity approached us after its primary banking relationship was terminated without the notice period specified in the account agreement. The entity held a valid CASP authorisation. The termination letter cited AML documentation concerns. On review, the core issue was that the entity's Travel Rule compliance programme covered EU-outbound transfers but had no documented process for transfers originating from non-compliant counterparty VASPs. We assisted the entity in restructuring its compliance documentation, identified a replacement EMI relationship and initiated the process for a direct banking application with a correspondent whose risk appetite was calibrated to the entity's client profile. The entity restored fiat access within a period of weeks rather than the months the principal banking relationship had required originally.
Self-Assessment Checklist Before You Apply
Before submitting a correspondent banking or EMI onboarding application, a regulated entity should be able to answer the following questions clearly and with documented evidence.
First: Is the entity's UBO structure fully documented, with certified identification materials for every beneficial owner above the applicable threshold? Partial documentation at this stage is a common cause of early rejection.
Second: Does the entity hold a current, independent review or audit of its AML/KYC programme? A self-certified policy document is not equivalent. A correspondent will assess whether the controls have been tested against the entity's actual transaction flows.
Third: Is the Travel Rule compliance programme operational and documented, covering both outbound transfers and inbound transfers from counterparty VASPs? Does the entity have a documented escalation process for transfers from non-compliant counterparties?
Fourth: Does the entity have a documented client money safeguarding structure? For an EMI, this means compliance with the applicable regime's safeguarding obligations – segregation of client funds, appropriate account designation and the reconciliation obligations that flow from them. For a VASP that is not itself an EMI, it means the entity must understand which regulated entity holds client fiat and on what terms.
Fifth: Can the entity demonstrate that its compliance function is independent, properly resourced and reports at board level? A nominal compliance officer who cannot evidence decision-making authority is a flag in any correspondent review.
Sixth: Has the entity mapped its US-nexus exposure? Any entity that touches USD, serves US-connected persons or routes payments through US correspondent channels needs to assess its obligations under US AML and sanctions law, regardless of where it is licensed.
An entity that can answer all six questions affirmatively, with documentation, is in a materially stronger position than one that cannot – regardless of the strength of its licence.
Related at OBOLUS
- Banking, Payments and EMI Onboarding for Digital-Asset Businesses – the OBOLUS practice overview for licensed entities seeking fiat access
- EMI Onboarding for VASPs in Liechtenstein – jurisdiction-specific guide to EEA-regulated EMI access from Liechtenstein
- Correspondent Banking Access for Established Operators – the parallel service page for entities with existing banking relationships seeking to expand or diversify
FAQ
Why do banks close crypto company accounts?
Banks close digital-asset company accounts primarily for one of four reasons: inadequate AML documentation at onboarding, a perceived high-risk client base without compensating controls, opaque beneficial ownership structures, or a failure to demonstrate operational Travel Rule compliance. A valid licence reduces but does not eliminate de-risking risk. The correspondent bank applies its own compliance standards independently of the entity's licensing regime. Entities that invest in audited AML programmes, clear UBO documentation and demonstrable Travel Rule operations experience materially fewer closures.
How can a VASP onboard with an EMI?
A VASP seeking EMI onboarding must present its regulatory licence, full UBO documentation, an audited or independently reviewed AML/KYC programme and evidence of Travel Rule compliance. EMIs that serve digital-asset businesses will also assess the VASP's client profile and transaction volumes. The onboarding timeline is typically shorter than direct correspondent banking but requires the same substantive compliance documentation. Selecting an EMI whose risk appetite is calibrated to digital-asset business – rather than a general-purpose payment institution – reduces the likelihood of mid-process rejection.
What does client-money safeguarding require?
Client-money safeguarding requires that funds held on behalf of clients are segregated from the entity's own funds, held in designated accounts with a regulated credit institution or, where the applicable regime permits, in qualifying liquid assets. The specific requirements vary by jurisdiction and licence category – under MiCA and in most EU member states, the safeguarding obligations for EMIs are detailed and operationally demanding. An entity must maintain accurate records of client balances, reconcile them at prescribed intervals and ensure that the safeguarding arrangement survives the entity's own insolvency. Failure to meet these obligations is a direct regulatory enforcement risk.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. We structure licensing, banking and tax as one mandate rather than three disconnected workstreams – mapping the licence stack across operating, custody and payment layers before you commit. Digital assets are the whole of our practice. To discuss your situation, contact info@oboluslaw.com.
By Victor Olsen, Regulatory & Compliance Analyst – specialising in correspondent banking access, AML programme structuring and the regulatory basis for fiat-rail onboarding across licensed digital-asset businesses.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.