Switzerland FINMA DLT Act: Compliance Path for Crypto Businesses

Switzerland's Federal Act on the Adaptation of Federal Law to Developments in Distributed Ledger Technology — the DLT Act — entered into force in stages, with the final provisions on DLT trading facilities becoming fully effective on 1 August 2021 under the amended Financial Market Infrastructure Act (FinMIA). FINMA has since issued multiple guidance circulars and, as of early 2026, is actively reviewing a second wave of DLT trading facility license applications following its first full authorization granted to SDX Trading AG. If your business touches Swiss-domiciled token issuance, secondary trading, or custody, the clock on full compliance has been running for years — and FINMA's supervisory intensity is rising.

TL;DR

• The DLT Act created a new license category — the DLT trading facility — sitting between a multilateral trading facility and a full exchange, with lighter capital requirements but strict participant rules.
• FINMA classifies crypto tokens as payment tokens, utility tokens, or asset tokens; each triggers different regulatory obligations under FinMIA, FinSA, AMLA, and the Banking Act.
• Crypto businesses operating in Switzerland without the correct authorization face criminal referral under Article 44 FINMASA, not just administrative sanction.
• AML/KYC obligations under the Anti-Money Laundering Act (AMLA) apply to virtually all crypto intermediaries, routed through FINMA-supervised SROs.
• 2026 brings heightened scrutiny on staking-as-a-service, tokenized securities settlement, and cross-border DeFi access points — all areas FINMA has signaled as enforcement priorities.

---

What This Regulation Actually Requires

The DLT Trading Facility License

Article 73a FinMIA defines the DLT trading facility as a platform that simultaneously admits professional traders and non-professional participants (retail) to trade DLT securities. That dual-access model is the key structural difference from a standard MTF, which is restricted to professionals.

To obtain a DLT trading facility license, an applicant must demonstrate:

• Minimum capital: CHF 5 million (compared to CHF 10 million for a full exchange).
• Organizational requirements: Adequate risk management, internal controls, and a board with at least two independent members.
• Participant rules: Clear admission criteria distinguishing professional from non-professional participants, with appropriate investor protection measures for the latter.
• Settlement finality: The platform must ensure legal certainty of settlement, which under Swiss law now includes DLT-based settlement through the amended Article 973d of the Code of Obligations (uncertificated register securities).

FINMA's authorization process typically runs 12–18 months. SDX Trading AG's authorization, granted in September 2021, set the benchmark: FINMA expects detailed technical documentation of the DLT infrastructure, a comprehensive rulebook, and evidence of operational resilience testing.

Token Classification and Its Regulatory Consequences

FINMA's 2018 ICO Guidelines remain the foundational classification framework, updated by subsequent practice. The three-category taxonomy carries real legal weight:

Payment tokens (e.g., Bitcoin, Ether used purely as means of payment): Not securities. AMLA obligations apply if you're operating as a financial intermediary. No FinSA prospectus requirement.

Utility tokens: If the token grants access to a service already operational at issuance, generally not a security. If the service is future-facing or the token has investment characteristics, FINMA may reclassify as a hybrid.

Asset tokens (tokenized equity, debt, derivatives): Treated as securities under FinMIA. Issuance triggers FinSA prospectus obligations. Secondary trading requires either an exchange, MTF, or DLT trading facility license. Custody triggers Banking Act deposit-taking analysis.

Hybrid tokens — the practical reality for most DeFi governance tokens and yield-bearing instruments — get analyzed on a substance-over-form basis. FINMA has consistently rejected label-based arguments.

AML/KYC Obligations Under AMLA

Any entity qualifying as a financial intermediary under Article 2 AMLA must either affiliate with a FINMA-recognized self-regulatory organization (SRO) or obtain direct FINMA supervision. For crypto businesses, the relevant SROs include VQF and PolyReg.

The AMLA obligations that catch most crypto operators off guard:

• Travel Rule: Switzerland implemented FATF Recommendation 16 via the revised AMLA and FINMA Circular 2016/7. Since January 2023, virtual asset service providers must transmit originator and beneficiary information for transfers above CHF 1,000. Transfers to unhosted wallets require enhanced due diligence.
• Beneficial ownership: Identification of the beneficial owner is mandatory for transactions above CHF 15,000 or any ongoing business relationship.
• Transaction monitoring: Risk-based, but FINMA expects documented typology libraries and automated screening for sanctioned addresses.

Banking Act Exposure for Custody and Staking

This is where many crypto businesses stumble. Accepting crypto assets from clients and holding them in omnibus wallets can constitute deposit-taking under Article 1 of the Banking Act if the assets are held in a way that creates a repayment obligation. FINMA's 2019 guidance on fintech licenses (the "sandbox" and the FinTech license under Article 1b Banking Act) provides limited relief:

• Sandbox: Accept public deposits up to CHF 1 million, no interest, no investment activity. No license required, but FINMA notification is expected.
• FinTech license: Accept deposits up to CHF 100 million. Capital requirement of 3% of accepted deposits, minimum CHF 300,000. No lending permitted.

Staking-as-a-service, where a platform pools client assets and distributes staking rewards, has drawn FINMA attention. If the platform guarantees returns or exercises discretion over the staked assets, the Banking Act deposit analysis applies. No formal circular yet, but FINMA's enforcement correspondence in 2024–2025 has made the agency's position clear to several Zug-based operators.

---

What This Means for Your Company

The practical impact depends on your business model, but three scenarios cover most Crypto Valley operators:

Token issuers: If you're issuing asset tokens or hybrid tokens to Swiss residents, you need a FinSA-compliant prospectus (or a valid exemption), a licensed distributor, and a KID (Key Information Document) for retail distribution. The FinSA prospectus approval process runs through a review body — SIX Exchange Regulation is the primary approved body for securities prospectuses.

Trading platforms and DEX front-ends: Operating a platform that facilitates secondary trading of asset tokens to Swiss users without a DLT trading facility, MTF, or exchange license is unauthorized activity under Article 26 FinMIA. The "mere technology" argument has limited traction with FINMA when the platform controls order matching or holds client assets.

Custodians and wallet providers: Banking Act exposure is real. Segregated custody structures, where client assets are held in individually identified wallets and the custodian has no discretion over them, reduce but don't eliminate regulatory risk. FINMA's 2023 guidance on crypto custody clarified that bankruptcy-remote segregation is a prerequisite for avoiding deposit classification.

---

How to Operationalize

Concrete steps, in rough priority order:

1. Conduct a token classification analysis before any public offering or secondary market activity. Document the analysis in a legal memorandum. FINMA accepts pre-submission inquiries (Voranfragen) — use them.

2. Map every business activity to a license category: DLT trading facility, MTF, exchange, FinTech license, banking license, or SRO affiliation. Gaps between your current status and required authorizations are your immediate risk surface.

3. Affiliate with an SRO or apply for direct FINMA supervision if you're a financial intermediary under AMLA. VQF and PolyReg both have crypto-specific onboarding tracks. Budget 3–6 months for SRO admission.

4. Implement Travel Rule compliance using a FATF-compliant VASP-to-VASP messaging protocol (e.g., TRP, OpenVASP, or a commercial solution). Document your unhosted wallet policy and enhanced due diligence procedures.

5. Restructure custody arrangements if you're holding client assets in omnibus wallets. Move to individually segregated wallets or a qualified custodian structure. Update client agreements to reflect the custody model.

6. Draft or update your AML program: Risk assessment, customer due diligence procedures, transaction monitoring rules, SAR filing procedures (to MROS — Money Laundering Reporting Office Switzerland), and staff training records.

7. Prepare for FINMA's DLT trading facility application if secondary trading of asset tokens is core to your model. Engage Swiss financial regulatory counsel early. The rulebook and technical documentation alone typically require 6–9 months of preparation.

8. Register with FINMA's FinTech sandbox if you're in early-stage deposit-taking below CHF 1 million. This buys time but is not a permanent solution.

---

Common Mistakes and How to Avoid Them

Mistake 1: Relying on the "utility token" label without substance analysis. FINMA looks at economic reality. A token that pays holders a share of platform revenue is an asset token regardless of what the whitepaper calls it. Get the classification right before launch, not after.

Mistake 2: Assuming a Zug domicile creates a regulatory safe harbor. Switzerland's favorable DLT law applies to Swiss-domiciled entities, but FINMA's jurisdiction extends to any activity that has effects in Switzerland. A Cayman-domiciled entity actively marketing to Swiss retail investors is within FINMA's reach under Article 3 FINMASA.

Mistake 3: Treating SRO affiliation as a substitute for a trading license. SRO membership covers AML obligations. It does not authorize you to operate a trading platform or issue securities. These are separate regulatory tracks.

Mistake 4: Ignoring the Travel Rule for sub-threshold transactions in aggregate. FINMA's examiners look at transaction patterns. Structuring transfers to stay below CHF 1,000 per transaction is a red flag, not a compliance strategy.

Mistake 5: Failing to notify FINMA of material changes post-authorization. Once licensed, any material change to your business model, technology infrastructure, or ownership structure requires prior FINMA notification or approval under Article 10 FinMIA. Several operators have received enforcement letters for undisclosed pivots to staking or lending products.

---

FAQ

Q: Does the DLT Act apply to decentralized protocols with no Swiss legal entity?

A: FINMA applies a substance-over-form analysis. If a protocol has Swiss-based developers who control upgrades, a Swiss foundation holding treasury assets, or active marketing to Swiss users, FINMA will assert jurisdiction. Pure, immutable protocols with no identifiable operator are a different analysis — but most "DeFi" projects don't meet that standard.

Q: Can a foreign VASP passport into Switzerland under the DLT Act?

A: No. Switzerland is not an EU member state and has no mutual recognition arrangement with the EU's MiCA framework. Foreign VASPs serving Swiss clients must either obtain Swiss authorization or affiliate with a Swiss SRO, depending on the activity. FINMA has issued cease-and-desist orders to EU-licensed entities operating in Switzerland without Swiss authorization.

Q: What's the timeline for a DLT trading facility license application?

A: FINMA's published guidance suggests 12–18 months from submission of a complete application. In practice, pre-submission dialogue (Voranfragen) adds 3–6 months but significantly improves application quality. Budget total elapsed time of 18–24 months from initial engagement to authorization.

Q: Are NFTs subject to the DLT Act?

A: It depends on the NFT's characteristics. A purely collectible NFT with no financial rights is unlikely to be an asset token. An NFT representing fractional ownership of real estate or revenue rights is almost certainly an asset token subject to FinSA and FinMIA. FINMA has not issued specific NFT guidance, but its token classification framework applies by analogy.

Q: What are the penalties for operating without authorization?

A: Article 44 FINMASA provides for criminal penalties of up to CHF 500,000 for unauthorized activity. FINMA can also issue public warnings, order disgorgement, appoint an investigative auditor at the firm's expense, and refer matters to the Swiss Federal Department of Finance for criminal prosecution. Reputational consequences in a market as relationship-driven as Crypto Valley are often more damaging than the formal penalties.

---

Sources

• Swiss Federal Act on the Adaptation of Federal Law to Developments in Distributed Ledger Technology (DLT Act), AS 2021 33 (Federal Chancellery, Switzerland)
• FINMA, Guidelines for enquiries regarding the regulatory framework for initial coin offerings (ICOs), 16 February 2018
• Financial Market Infrastructure Act (FinMIA), SR 958.1, as amended 2021 (Swiss Federal Council)
• Anti-Money Laundering Act (AMLA), SR 955.0, as amended; FINMA Circular 2016/7 on Video and Online Identification

---

Disclaimer

This article is produced by BizLegal-AI Intelligence Desk for general informational purposes only. It does not constitute legal advice and does not create an attorney-client or adviser-client relationship. Regulatory requirements change frequently; readers should verify current rules with qualified Swiss financial regulatory counsel before taking any action. BizLegal-AI makes no representations as to the completeness or accuracy of this content with respect to any specific factual situation.