Switzerland Crypto License: VASP, SRO and FINMA Guide (2026)

Disclosure and method

This guide is published by Swiss AMF AG on a company-operated website that offers a Swiss SRO-supervised fintech company for sale. We have a commercial interest in the acquisition route described in the final sections. This is general information, not legal advice, and it is not an independent assessment.

We reviewed public FINMA pages, and the Anti-Money Laundering Act on Fedlex on 11 October 2026. Every rule summarised below links to its official source. We do not quote application timelines, fees or approval rates, because these depend on the case and the authority or SRO involved. Rules change; confirm the current position with Swiss counsel and the relevant SRO before relying on any statement.

1. Switzerland regulates activities, not “crypto”

People search for a “Switzerland crypto license” because many other jurisdictions issue a dedicated VASP or crypto-asset service provider permit. Switzerland's approach is different. FINMA describes its application of financial market law as principle-based and technology-neutral (FINMA: stable coin guidelines (11 September 2019)). A token business is therefore classified by the same questions applied to any financial business: does it accept deposits, hold assets for others, transfer value on behalf of clients, deal in securities or manage assets?

The answers lead to different regimes. FINMA's overview of FINMA: types of authorisation lists banks, securities firms, FinTech institutions, portfolio managers, fund managers and others, each with its own requirements. Separately, the Fedlex: Anti-Money Laundering Act (AMLA, SR 955.0) imposes due diligence duties on financial intermediaries, including many businesses that need no prudential licence at all. In practice, most crypto service providers start by establishing whether they are financial intermediaries under the AMLA and, if so, whether anything they do also requires a FINMA licence.

“VASP” is the international term, used by the Financial Action Task Force (FATF), for a virtual asset service provider. It is a useful description of activities such as exchange, transfer and safekeeping of virtual assets, but it is not a Swiss licence category. When a seller or adviser describes a company as a “Swiss licensed VASP”, ask which exact legal status sits behind the phrase.

2. SRO anti-money laundering membership

FINMA states that, under the AMLA, financial intermediaries and advisors must become members of a self-regulatory organisation under civil law to prevent money laundering and terrorist financing (FINMA: self-regulatory organisations (SROs)). Its FinTech page puts it plainly: if the business is subject to the AMLA, it must become a member of an SRO (FINMA: FinTech financial services providers). FINMA recognises and supervises the SROs; the SROs in turn supervise their members.

For a crypto business, SRO membership typically means a documented AML framework: identifying clients and beneficial owners, establishing the purpose of business relationships, risk classification, transaction monitoring, record keeping and reporting suspicions to the Money Laundering Reporting Office Switzerland (MROS). The SRO sets its own regulations within the AMLA framework and audits members for compliance. Members carry these duties continuously, not only at admission.

What SRO membership does not do matters just as much. It is not a banking licence, not a FinTech licence and not a FINMA portfolio-manager licence. It does not permit accepting public deposits beyond the exemptions in banking law, and it does not by itself grant access to card schemes, payment systems or bank accounts. Banks and payment partners make their own onboarding decisions about SRO members.

3. When a FinTech or banking licence comes in

FINMA's FinTech page contains a practical “Do I need a banking or FinTech licence?” summary (FINMA: FinTech financial services providers). According to it, a banking licence is required if a business accepts deposits from more than twenty clients, client assets are paid into its accounts, or acceptance of client assets features in its advertising, unless an exemption applies. FINMA lists examples where no banking licence is needed, including accepting crypto-based assets that are stored on individual blockchain addresses for each client.

The same page states that a FinTech licence is required if a business accepts client deposits up to a maximum of CHF 100 million or takes collective custody of crypto-based assets, provided the deposits are not invested and no interest is paid on them. Lending deposits out, paying interest or exceeding the threshold moves the business towards full banking regulation, described on FINMA's FINMA: banks and securities firms page.

Stablecoins illustrate the activity-based logic. FINMA's 2019 supplement to its ICO guidelines explains that it assesses so-called stable coins under existing supervisory law according to their economic function and the rights attached, which can bring banking, collective investment or other rules into play (FINMA: stable coin guidelines (11 September 2019)). Issuing a token is therefore a separate question from exchanging or holding someone else's tokens. FINMA publishes further interpretive material in its FINMA: guidance documents series.

4. Activity decision table

The table summarises typical starting points from the official sources. It is a screening aid for questions to put to counsel, not a classification of any particular business.

Typical regulatory starting points by activity
Activity	Typical starting point	Question to resolve
Crypto–fiat exchange or brokerage for clients	Financial intermediary under the AMLA; SRO membership (FINMA: self-regulatory organisations (SROs))	Are client funds or tokens held in a way that counts as deposits or collective custody?
Custody on individual client addresses	Listed by FINMA as not requiring a banking licence; AML duties may apply (FINMA: FinTech financial services providers)	Is the segregation real at address level, and who controls the keys?
Collective (pooled) crypto custody	FinTech licence route per FINMA (FINMA: FinTech financial services providers)	Are assets invested or interest paid, which would point towards banking rules?
Accepting client fiat deposits	Banking licence unless an exemption applies; FinTech licence up to CHF 100 million without investment or interest (FINMA: FinTech financial services providers)	How many clients, what amounts, and how is the activity advertised?
Issuing a stablecoin or token	Assessed by economic function under existing law (FINMA: stable coin guidelines (11 September 2019))	What rights does the holder have, and how is the token backed and redeemed?
Pure software provision with no client assets	Often outside financial intermediation, case by case	Does the provider ever control, transfer or hold client value?

Simplified screening order based on FINMA's public summaries; exemptions and other licence types are not shown.

5. Ongoing obligations for crypto intermediaries

Status is maintained, not acquired once. In 2019 FINMA set out how it applies anti-money laundering rules to blockchain service providers and stated that blockchain business models cannot be allowed to circumvent the existing framework (FINMA: guidance on money laundering on the blockchain (26 August 2019)). Following FATF guidance, information about the client and the beneficiary must be transmitted with token transfers, as with bank transfers, with an exception for transfers from and to unregulated wallets.

A Swiss crypto intermediary should therefore expect to demonstrate, on an ongoing basis: client and beneficial-owner identification, risk-based monitoring of token and fiat flows, controls over transfers to and from self-hosted wallets, documentation retention, staff training, a responsible AML officer and timely suspicious-activity reporting. SRO audits test these controls. Weaknesses found in an audit can lead to measures by the SRO, up to exclusion, which in turn affects the company's ability to operate.

Commercial dependencies sit alongside legal ones. Bank accounts, IBAN programmes, card issuing and custody technology all come from partners with their own risk appetite. Partners usually require evidence of regulatory status, AML procedures and ownership, and they may review the relationship after a change of control.

6. Applying versus buying an existing company

A founder can incorporate a new Swiss company, build the AML framework and apply for SRO membership, or acquire an existing company that already holds it. An acquisition can provide an established legal entity, existing membership and operating history. It does not transfer a licence that the company does not hold, and it does not make a new business model compliant automatically.

Expect the following after a share purchase. The SRO must be informed of the change in ownership and of new persons in management, who must meet its fit-and-proper standards. The AML framework must be reviewed against the new owner's planned activities. If the plan involves deposits, pooled custody, stablecoin issuance or other regulated activity, a FinTech, banking or other authorisation question arises regardless of the company's history. Partner contracts may contain change-of-control provisions.

Our own offer is one example of this route: a Zurich company with active SRO AMLA membership, offered together with a fintech platform licence. It is a nonbank. Read the acquisition overview for its terms, and the neobank technology stack guide or the crypto-neobank platform comparison for the technology side of the decision.

7. Buyer checklist for a Swiss crypto company

Name the status precisely. Obtain the SRO membership confirmation and identify the SRO. Check FINMA's FINMA: authorised institutions, individuals and products list to confirm whether any FINMA licence exists.
Read the latest SRO audit. Request the most recent AML audit report, findings and remediation evidence.
Map the actual activities. Compare what the company does, and what you plan to do, with the activity table above. Flag deposits, pooled custody and token issuance.
Review the AML framework. Check client identification, risk classification, transfer-information procedures for token transfers and MROS reporting records.
Confirm people requirements. Identify who will serve as directors and AML officer after closing and whether they meet the SRO's requirements.
Plan the notifications. Agree how and when the SRO and partners will be told about the ownership change.
Check corporate records. Verify the commercial register entry, capital, articles, liabilities and tax position.
Test partner access. Ask banks, custodians and card partners whether existing relationships survive a change of control.
Get independent advice. Have Swiss counsel confirm the regulatory analysis for your specific business plan before signing.

Questions and answers

Is there a single Switzerland crypto license?

No. Switzerland regulates activities, not a crypto label. Depending on what a business does, it may need membership of an anti-money laundering self-regulatory organisation, a FINMA FinTech licence, a banking licence or another FINMA authorisation. Some activities need none of these. A legal assessment of the actual business model decides which applies.

What is SRO membership for a Swiss VASP?

Under the Anti-Money Laundering Act, financial intermediaries that are not directly supervised by FINMA must join a self-regulatory organisation recognised by FINMA. The SRO supervises compliance with anti-money laundering due diligence duties. It is not a banking, FinTech or portfolio-manager licence and does not authorise taking public deposits.

When does a crypto business need a FINMA FinTech licence?

FINMA states that a FinTech licence is required if a business accepts client deposits up to a maximum of CHF 100 million or takes collective custody of crypto-based assets, provided the deposits are not invested and no interest is paid. Above those limits, or with lending or interest, a banking licence may be required.

Does storing client crypto on individual addresses require a banking licence?

FINMA lists accepting crypto-based assets stored on individual blockchain addresses for each client among the cases that do not require a banking licence. Anti-money laundering duties and SRO membership may still apply. Collective custody is treated differently and can trigger the FinTech licence route.

Does the travel rule apply to Swiss crypto transfers?

FINMA's 2019 guidance applies the requirement that information about the client and beneficiary is transmitted with token transfers, consistent with FATF guidance, with an exception for transfers from and to unregulated wallets where other measures apply. Confirm current requirements with your SRO and counsel before launch.

Is buying a company with SRO membership faster than applying?

It can avoid building a new entity and an initial membership application, but it does not remove obligations. The SRO must be notified of ownership and management changes, fit-and-proper and due diligence rules continue, and a changed business model may need a new regulatory assessment or a different authorisation.

How can I verify a Swiss crypto company's regulatory status?

Ask for the SRO membership confirmation and the latest audit report, then check the SRO's member search and FINMA's public list of authorised institutions. A company listed as an SRO member is not listed by FINMA as a bank unless it actually holds a banking licence. Compare the documents with the activities the company really performs.

Official source notes

Reviewed on 11 October 2026. FINMA and Fedlex sources support the description of Swiss regimes and thresholds. We did not verify any individual company's status in this article. Official pages can change; consult the current versions.

Switzerland Crypto License: VASP, SRO and FINMA Routes Explained (2026)