FINMA Authorisation in Switzerland Do You Need It for Your Crypto Business?

Introduction Quick answer and who this guide is for

If you operate or plan to operate a crypto exchange, custody platform, token issuance vehicle or any other digital-asset service from Switzerland, the question of FINMA authorisation in Switzerland is not optional. The Swiss Financial Market Supervisory Authority (FINMA) determines whether your activity triggers a licensing obligation under existing financial-market legislation, and conducting regulated activity without the correct authorisation is a criminal offence.

This guide consolidates every practical step a crypto business needs to evaluate, apply for and obtain the appropriate FINMA authorisation. It reflects the latest supervisory expectations, including FINMA Guidance 01/2026 on custody risks for crypto-based assets (published 12 January 2026), which has materially raised the bar for segregation controls, insurance considerations and operational resilience for firms that hold client crypto assets. It also integrates the ongoing implementation of Switzerland’s DLT Act framework, which introduced ledger-based securities and DLT trading facilities into Swiss law.

At-a-glance summary: do you need FINMA authorisation?

The short decision flow is straightforward:

1. Do you accept public deposits, provide custody of third-party crypto assets, operate an exchange or trading venue, manage assets on behalf of clients, or issue tokens that qualify as securities? → You almost certainly need a FINMA licence.
2. Do you only provide software, advisory services or purely technical infrastructure with no control over client assets? → You may fall outside the licensing perimeter, but you must still assess AML obligations and consider SRO affiliation.

Who should read this

This guide is designed for founders, C-suite executives, in-house legal counsel and compliance officers at:

• Crypto exchanges and trading platforms whether centralised or decentralised in their front-end model, if they match orders or hold client funds from Switzerland.
• Crypto custodians and wallet providers including those offering staking, safekeeping or omnibus custody solutions.
• Token issuers and DLT-share projects entities tokenising equity, debt, fund units or other financial instruments under Swiss Code of Obligations Art. 973d.
• Stablecoin issuers and payment-token projects which face specific deposit-taking and AML triggers.
• FinTech start-ups and neobanks exploring the FinTech licence (Art. 1b Banking Act) as a lighter-touch on-ramp.
• International groups planning a Swiss subsidiary or branch and needing to understand FINMA’s expectations for local governance and substance.

Executive decision matrix

The table below maps the most common crypto business models to their likely FINMA authorisation category. Use it as a first orientation detailed analysis follows in later sections.

Process How to obtain FINMA authorisation for crypto activities in Switzerland

Obtaining FINMA crypto authorisation is a rigorous, document-intensive process that rewards thorough preparation. FINMA publishes detailed application guidance for FinTech licence applicants, and similar requirements scaled upward apply to banking and securities firm authorisations. The steps below reflect a practitioner’s process map applicable across licence categories.

Step 1 Pre-assessment and business model mapping

Before engaging with FINMA, conduct an internal pre-assessment that identifies every regulated activity within the business. This means cataloguing whether the platform accepts deposits, holds third-party crypto, matches buy/sell orders, provides discretionary management, issues tokens, or offers staking or lending.

Use FINMA’s crypto-asset factsheet to run a preliminary token qualification: is the token a payment token, utility token, asset token, or a hybrid? The qualification drives the entire downstream licensing analysis.

Deliverable: Business Model Memorandum (BMM) and initial token legal memorandum.

Step 2 Regulatory qualification and licence selection

Based on the BMM, determine the applicable licence category. The principal options are:

• FinTech licence (Art. 1b Banking Act) for firms accepting public deposits up to CHF 100 million without investing or paying interest.
• Banking licence for full deposit-taking, lending, or interest-bearing accounts.
• Securities firm / asset manager (FinIA) for brokerage, discretionary portfolio management or fund management.
• DLT trading facility (FinMIA) for multilateral trading and settlement of ledger-based securities.
• AMLA / SRO affiliation only for activities that do not trigger prudential licensing but fall within the Anti-Money Laundering Act’s scope.

Deliverable: Recommended licence memorandum with regulatory mapping.

Step 3 Governance, capital and prudential framework

FINMA expects a Swiss-incorporated legal entity (AG or GmbH) with qualified local management. The board of directors or senior management must include individuals resident in Switzerland with relevant financial-market experience. Capital requirements vary by licence: the FinTech licence requires a minimum capital of CHF 300,000, while a banking licence typically requires at least CHF 10 million, subject to risk-weighted adjustments. Liquidity planning, recovery planning and for larger institutions resolution planning must be addressed in the application dossier.

Deliverable: Governance charter, capitalisation plan and liquidity framework.

Step 4 AML and KYC

Every FINMA-authorised entity must comply with the Swiss Anti-Money Laundering Act (AMLA). The key decision is whether to affiliate with a self-regulatory organisation (SRO) or to submit to direct FINMA AML supervision. Banks and securities firms are directly supervised; FinTech licensees and AMLA financial intermediaries typically join an SRO.

The Travel Rule applies to crypto transfers: institutions must transmit originator and beneficiary information for transactions above the applicable threshold. Transaction monitoring, enhanced due diligence for high-risk relationships and suspicious-activity reporting to the Money Laundering Reporting Office (MROS) are mandatory.

Deliverable: AML/KYC framework, SRO selection analysis and Travel Rule implementation plan.

Step 5 Custody and segregation controls

FINMA’s Guidance 01/2026 has become the benchmark for any firm offering custody or safekeeping of crypto-based assets. The guidance requires:

• Legal segregation client assets must be identifiable and separable from the firm’s own assets, even in insolvency.
• Technical segregation use of segregated wallets, multi-signature schemes and robust key-management processes.
• Insurance or equivalent guarantees consideration of insurance coverage for loss events, including cyber theft and operational failures.
• Ongoing risk assessments regular independent reviews of custody infrastructure, including penetration testing and disaster-recovery simulations.

Deliverable: Custody risk assessment, custodian audit checklist and segregation architecture documentation.

Step 6 Operational controls

FINMA expects applicants to demonstrate mature IT security, outsourcing governance, incident-response procedures, and business-continuity planning. Outsourcing of critical functions such as cloud hosting of private keys or reliance on third-party node infrastructure must comply with FINMA’s circular requirements, including contractual audit rights and data-protection safeguards. Applicants should prepare an IT security concept, an outsourcing register and a tested incident-response playbook.

Step 7 Prepare FINMA application package and submission

The formal application dossier typically includes:

• Completed FINMA application form with cover letter.
• Business plan (three-year financial projections, target markets, product descriptions).
• Organisational chart and CVs of board members and senior management (fit-and-proper documentation).
• Governance documentation articles of association, internal regulations, compliance charter.
• AML framework policies, procedures, SRO affiliation confirmation or direct-supervision application.
• Custody and IT documentation as outlined in Steps 5 and 6.
• Capital and liquidity evidence audited opening balance sheet, capital commitment letters.
• Audit firm confirmation engagement letter from a FINMA-recognised audit firm.

Deliverable: Complete application packet with cross-referenced checklist. A FINMA application checklist template mapping each document to the relevant regulatory requirement can significantly reduce deficiency queries.

Step 8 Supervision intake, remediation requests and go-live conditions

After submission, FINMA conducts a preliminary review and will almost invariably issue one or more rounds of supplementary questions. Common post-submission requests include additional detail on custody segregation architecture, clarification of token-qualification conclusions, or enhanced AML scenarios. Once all conditions are satisfied, FINMA issues the authorisation, often subject to specific go-live conditions such as a confirmation audit within 12 months.

Comparison table Licence types and when they apply

The following table summarises the principal FINMA authorisation categories relevant to crypto businesses in Switzerland. It draws on FINMA’s published guidance and the statutory framework under the Banking Act, FinIA, FinMIA and the DLT Act amendments.

Industry observers note that the DLT trading facility licence while powerful in scope because it combines trading and post-trade services remains the most complex and time-intensive to obtain, given FINMA’s scrutiny of settlement finality and participant-access rules.

Key requirements and eligibility

Capital and prudential expectations

Capital adequacy is the first quantitative hurdle. A FinTech licence requires minimum paid-up capital of CHF 300,000, which must be maintained at all times. The FinTech licensee must also hold at least 3 % of accepted deposits as capital. By contrast, banking licence applicants face a minimum capital requirement of CHF 10 million, with ongoing risk-weighted capital ratios aligned to Basel standards.

For DLT trading facilities and securities firms, capital is calibrated on a risk basis, reflecting the nature and volume of activities. FINMA may impose additional capital buffers for operational risk, particularly where custody of crypto assets creates concentrated loss exposure. Applicants should budget for at least 20–30 % headroom above minimum capital to absorb first-year operating losses and unexpected compliance costs.

AML obligations SRO versus direct FINMA supervision

The AMLA framework applies to all crypto businesses that qualify as financial intermediaries. FINMA’s Guidance 02/2019 clarified that crypto-to-crypto and crypto-to-fiat transactions trigger AML obligations. Key elements include:

• Customer identification and verification (KYC) identity verification at onboarding, with enhanced due diligence for high-risk jurisdictions, politically exposed persons and complex structures.
• Travel Rule compliance originator and beneficiary data must accompany crypto transfers; FINMA expects compliance with FATF standards, which Switzerland implements through AMLA and its ordinances.
• Transaction monitoring automated and risk-based monitoring for unusual patterns; suspicious-activity reporting to MROS within the statutory timeframe.
• SRO affiliation FinTech licensees and non-prudentially-supervised intermediaries must join an SRO recognised by FINMA. Banks, securities firms and DLT trading facilities are directly supervised by FINMA for AML purposes.

Custody, segregation and operational requirements per FINMA 01/2026

The FINMA Guidance 01/2026 on custody risks is now the central reference for any crypto custodian subject to FINMA authorisation in Switzerland. Its key expectations include:

• Segregation at all levels legal, technical and operational segregation so that client assets are identifiable, individually attributable and recoverable in the firm’s insolvency.
• Key management controls multi-signature and hardware security module (HSM) protocols, access control matrices and key-ceremony documentation.
• Third-party custody due diligence where sub-custodians are used, the supervised entity retains responsibility and must conduct initial and ongoing due diligence on the sub-custodian’s controls.
• Insurance and loss coverage FINMA expects firms to assess whether insurance or guarantee arrangements are appropriate for the volume and nature of assets held. While insurance is not strictly mandatory, its absence must be justified and disclosed to clients.
• Incident management documented escalation and communication protocols for custody-related incidents, including private-key compromise, smart-contract exploits and blockchain forks.

Timelines, fees and practical expectations

Realistic timelines depend heavily on the licence category and the quality of the application dossier. As a general framework:

• Pre-filing preparation: 2–4 months (business model mapping, governance setup, AML and custody documentation).
• FINMA formal review FinTech licence: 3–6 months from complete submission to authorisation decision.
• FINMA formal review banking licence: 6–12 months, often longer for novel business models.
• FINMA formal review DLT trading facility: 9–18 months, given the complexity of settlement, participant access and systemic-risk analysis.
• Post-submission information requests: FINMA typically issues at least one round of supplementary questions within 4–8 weeks of submission; response quality directly affects the overall timeline.

FINMA charges administrative fees on a cost-recovery basis. Published fee schedules are available on the FINMA website. External costs legal advisers, compliance consultants, audit firms, IT security assessments vary significantly by scope, but applicants should budget CHF 150,000–500,000 for a FinTech licence application and CHF 500,000–2,000,000+ for a banking or DLT trading facility licence, depending on complexity.

Factors that commonly lengthen the process include novel or hybrid business models that do not fit neatly into existing categories, gaps in AML documentation, unresolved token-qualification issues and insufficient local governance substance.

Common pitfalls and how to avoid them

Based on publicly available FINMA communications and anonymised industry experience, the most frequent causes of delays or adverse outcomes include:

• Weak custody segregation architecture omnibus wallets without individual client attribution, or reliance on sub-custodians without adequate due diligence.
• Insufficient AML program generic policies that do not address crypto-specific risks (e.g., mixing services, privacy coins, unhosted wallets).
• Unclear token qualification memorandum failure to apply FINMA’s payment/utility/asset token framework rigorously, leading to regulatory uncertainty about the licence trigger.
• Lack of local governance board members or senior management without Swiss residence or relevant financial-market expertise.
• Inadequate capital and liquidity planning underestimating first-year operating losses or failing to maintain required capital ratios on an ongoing basis.

Quick remediation checklist:

1. Commission an independent custody-architecture review against FINMA 01/2026 criteria before filing.
2. Engage a Swiss AML specialist to stress-test policies against crypto-specific scenarios.
3. Prepare a detailed token legal memorandum with FINMA’s factsheet classification applied.
4. Appoint at least two Swiss-resident board members with documented financial-market experience.
5. Build a 24-month capital and liquidity model with stress scenarios and contingency buffers.

Case studies and practical illustrations

The following composite examples based on publicly available information and anonymised industry patterns illustrate how FINMA authorisation requirements play out in practice:

• Case A Exchange upgrade: A Swiss crypto exchange initially obtained a FinTech licence to accept customer deposits below the CHF 100 million threshold. As trading volumes grew and the platform introduced fiat lending products, the exchange triggered full banking-licence requirements and undertook a supervised upgrade process. The transition took approximately 14 months, largely due to the need to implement Basel-aligned capital adequacy calculations and enhanced recovery planning.
• Case B Custodian delay: A custody-focused start-up submitted a well-prepared application but faced a four-month delay when FINMA’s supplementary questions revealed inadequate segregation documentation. The firm’s omnibus wallet structure did not demonstrate individual client attributability as required by FINMA 01/2026. After engaging external IT auditors and re-architecting its wallet infrastructure, the firm received authorisation with a condition to complete a confirmation audit within six months of go-live.
• Case C DLT shares issuer: A real-estate tokenisation project used CO Art. 973d to issue ledger-based shares. Because the shares were offered only to qualified investors and no secondary trading venue was operated by the issuer, the project itself did not require a DLT trading facility licence but the token qualified as an asset token, triggering prospectus obligations and AML requirements through SRO affiliation.

These examples underscore the importance of early regulatory mapping: the cost and complexity of retrofitting compliance far exceed the investment in a thorough pre-assessment.

Downloadable FINMA application checklist

Global Law Experts has prepared a downloadable FINMA application checklist designed to streamline the preparation process. The checklist includes:

• Required documents register every document FINMA expects, mapped to the relevant statutory provision or guidance (Banking Act, FinIA, FinMIA, AMLA).
• Governance matrix template board composition, fit-and-proper requirements, Swiss-residence expectations and reporting lines.
• AML module checklist KYC thresholds, Travel Rule implementation steps, SRO affiliation process and transaction-monitoring requirements.
• Custody risk template segregation architecture, key-management controls, sub-custodian due diligence and insurance assessment, mapped directly to FINMA 01/2026.
• Timeline template milestone tracker from pre-filing through FINMA decision, with estimated durations by licence category.

The checklist is available as a downloadable PDF FINMA application checklist and is regularly updated to reflect new FINMA communications and regulatory developments.

Appendix Resources and next steps

The following primary sources underpin this guide and should be consulted directly when preparing a FINMA authorisation application:

Sources

• FINMA Guidance 01/2026 Risks associated with the custody of crypto-based assets (12 January 2026)
• FINMA FinTech licence (authorisation) page
• FINMA Fact sheet: Crypto-based assets
• Swiss Federal Council / SIF DLT Act implementation
• Fedlex Swiss Code of Obligations (including Art. 973d on ledger-based securities)
• FINMA Guidance 02/2019 AML obligations and crypto assets