Buy a licensed company 
VASPs live data and insights 
Learn about crypto safety 
Read the latest research 
Switzerland SRO: How to Join a Self-Regulatory Organization for Crypto
2026 made regulation feel binary in Europe. MiCA on one side, heavy process, heavy capital, long timelines. Switzerland, on the other side, smaller market, tighter AML logic, and a system that still moves at business speed when you do it properly.
The Swiss route that matters for most crypto firms is the SRO model. It gives you regulated status without forcing you into a bank-style FINMA licence. That’s why brokers, OTC desks, payment firms, and a lot of custody-light platforms still choose Switzerland. Banks and serious counterparties recognise the SRO framework, and you avoid the 12-month timelines and multi-million CHF buffers that come with full prudential licensing.
SRO Basics, and Why It’s Not a “License”
People misuse the word “license” in Switzerland. It creates confusion, and it creates bad planning.
A FINMA licence is a prudential licence. This includes banks, securities firms, insurers, and fintech models that take deposits at scale. FINMA cares about systemic risk, liquidity ratios, capital adequacy, and continuous oversight.
Most crypto businesses do not need that. Most crypto businesses operate as financial intermediaries under AMLA (the Anti-Money Laundering Act). That puts you under AML supervision, rather than full prudential supervision.
An SRO is a FINMA-recognised Self-Regulatory Organisation that supervises financial intermediaries for AML/KYC duties. Joining an SRO is the mandatory requirement for firms that professionally facilitate the exchange, transfer, brokerage, or custody of digital assets.
How it works in real life:
- You build and run your own internal controls.
- An accredited external auditor tests them every year.
- The SRO supervises and enforces AMLA based on audits, reporting, and onsite checks.
Switzerland’s value proposition sits here. The rules are strict where they should be strict, monitoring, KYC, documentation, reporting, but the system does not force you into banking-style bureaucracy if you are not taking banking-style risk.
What Changed in 2026
FINMA dropped Guidance 01/2026 on January 12, 2026. This changed the tone for custody. It spells out how FINMA expects crypto custody to protect clients. SRO members and applicants can’t ignore it. Auditors can’t ignore it.
The two main themes:
- segregation and bankruptcy remoteness
- third-party custody and delegation risk
Segregation and “Bankruptcy Remoteness”
Client assets must be separable from the custodian’s estate if the custodian fails. Swiss law already supports segregation concepts (including under Article 37d of the Banking Act), but FINMA pushes for technical and legal clarity. FINMA expects custody infrastructures that make segregation possible immediately.
That usually means one of two architectures:
- individual custody with separate blockchain addresses per client, or
- collective custody where assets sit together on-chain, but your internal ledger is real-time, robust, and can prove ownership and segregation instantly
Omnibus wallets that mix client and corporate funds are the kind of thing that kills an application, or triggers remediation if you’re already live.
Existing firms have a “grandfathering” problem. FINMA’s 2026 posture tolerates non-ideal custody only if the client gives written, informed consent acknowledging higher risk. That client outreach has to be documented. Auditors will ask for it. SROs will ask for it. Missing documentation becomes a compliance failure.
Delegation and Third-Party Custody
A lot of Swiss VASPs delegate custody. FINMA doesn’t ban it. FINMA makes you own the risk. If the sub-custodian sits abroad, Guidance 01/2026 pushes an equivalency logic: the Swiss firm must show the foreign environment provides comparable supervision and bankruptcy protection. That is legal analysis, operational diligence, and documentation.
That is why many Swiss firms pushed custody back into Switzerland’s “safety perimeter” in 2026. Using Swiss-regulated institutions reduces cross-border insolvency uncertainty and makes the story easier for auditors and banks.
Picking Your SRO in 2026
Switzerland has multiple FINMA-recognised SROs. Crypto firms usually end up choosing between VQF and PolyReg. This decision affects pace, scrutiny, and how much the reviewer understands crypto mechanics.
VQF (Zug)
VQF is popular with crypto companies because it grew up around Zug and has seen most crypto models already. Token flows, custody models, DeFi-adjacent activity, algorithmic trading logic, VQF tends to understand what it’s looking at.
VQF usually expects a mature compliance setup. Sloppy frameworks get bounced.
Typical 2026 cost profile:
- admission processing fee around CHF 2,000
- admission audit often CHF 750 to CHF 3,000 depending on complexity
- annual base membership fee around CHF 400
- ongoing annual supervision/admin costs often CHF 2,000 to CHF 4,000
First-year total commonly lands around CHF 4,000 to CHF 6,000, then ongoing costs depend on size and activity.
PolyReg (Zurich)
PolyReg is tech-neutral and supervises a broader range of financial intermediaries. It fits hybrid firms better, payments plus crypto, fiat rails plus exchange activity, or mixed fintech services. PolyReg fees scale with AMLA-relevant personnel.
Typical 2026 numbers for small teams (1-3 people):
- admission fee around CHF 1,600
- annual fee around CHF 1,800
Bigger teams scale up sharply. PolyReg’s CHF 250 hourly audit rate is one of the clearer pricing levers for growing firms.
Company Structure in 2026
You need a Swiss legal entity. In practice it’s GmbH or AG.
GmbH
GmbH is the lean setup:
- minimum share capital CHF 20,000
- 100% paid-in at registration
- shareholder names show in the public register
It’s cost-efficient, but it’s not private.
AG
AG is the institutional setup:
- minimum share capital CHF 100,000
- only 50% needs to be paid-in initially, minimum CHF 50,000
- shareholders can stay private, only directors and signatories are public
- shares transfer easier, VC and M&A is cleaner
- banks often treat AG as more mature, which can matter when opening accounts
This is why many crypto firms that care about banking or institutional perception choose AG, even if they could technically start with GmbH.
Paying Share Capital in BTC or ETH
Switzerland allows in-kind contributions of certain crypto assets, commonly BTC and ETH, as share capital. It’s not a simple “send to wallet and you’re done.”
A typical in-kind process needs:
- a Swiss intermediary that can accept and assess the crypto contribution
- proof of ownership and valuation
- a certified auditor report confirming value
- notary submission based on that report
It’s doable. It often costs more than a cash deposit because audit and notary involvement goes up. Volatility also plays a role. Many teams contribute 20-30% above minimum to avoid falling short during the registration window when prices move.
Substance in 2026
SROs stopped tolerating letterbox setups. Substance is the part that decides approvals, and it’s also the part banks care about.
Swiss Resident Director
At least one board member must be a Swiss resident with sole signatory power.
SROs treat this as a real governance role. Interviews happen. Board minutes get reviewed. They check if the person has actual authority or if they’re just a name on paper.
AML Officer / MLRO
You need an AML Officer (MLRO), Swiss-based, competent, and available. Crypto AML in 2026 requires more than “finance background.” People expect familiarity with blockchain tracing, Travel Rule implementation, wallet risk, typologies, and how crypto flows actually get abused.
Fractional MLRO setups can work for early-stage firms if the person is Swiss-based, qualified, and actually has the time allocated. Cosmetic outsourcing gets caught quickly.
Physical Office
A virtual mailbox does not pass as substance in 2026. SROs can do onsite audits. They expect a dedicated, lockable space where books and records are kept.
A small OTC desk can operate lean. A serious exchange can’t pretend it runs out of one coworking desk. SROs make that judgement based on business size and risk.
SRO Application Process
Typical timing is 8 to 12 weeks after incorporation when everything is prepared properly.
Phase 1: Preparation and Incorporation (Weeks 1-4)
You incorporate the entity, deposit capital into a blocked Swiss capital account, appoint the Swiss director, and build your compliance framework.
Core deliverables here:
- AML/KYC policy that matches the real business model
- business plan that explains flow of funds and asset handling
- appointment of a FINMA-accredited AML auditor for annual audits
Phase 2: Submission and Due Diligence (Weeks 5-8)
The SRO runs checks on UBOs and directors. They assess whether the governance and internal control framework is credible. They look at tooling for monitoring and Travel Rule workflows.
Phase 3: Interview (Weeks 9-12)
SROs test competence through scenarios. The MLRO usually gets most of the pressure.
Typical question styles may include: A client deposits fiat from a high-risk jurisdiction not covered in your policy. What happens next? A client claims wealth from early mining. How do you verify source of wealth? How do you handle Travel Rule-related data and monitoring alerts in practice?
Once approved, you get membership confirmation and the firm appears in FINMA’s public directory as a regulated financial intermediary.
SRO vs. Finma Fintech License
A common mistake is assuming custody automatically means “FINMA licence.” Switzerland doesn’t work like that. Switzerland scales burden based on deposit risk and banking behaviour.
The FINMA fintech licence under Article 1b of the Banking Act is meant for firms that accept public deposits up to CHF 100 million, or run custody structures that trip prudential expectations. The rules stay strict: deposits can’t be reinvested, and no interest can be paid.
FINMA has also floated changes, including categories like “payment instrument institutions” and “crypto-institutions,” aiming to fix what made the fintech licence less attractive historically, long timelines and rigid limits. Consultation runs into early 2026.
You outgrow SRO and enter direct FINMA territory when the business starts behaving like a bank. Deposit thresholds, client count behaviour, reinvestment, interest, and scale are the triggers.
Buying a Ready-Made Swiss SRO Entity
Shelf companies with active SRO membership exist. They’re usually aged entities that already cleared admission checks.
Main and obvious upside is speed. Transfers can happen in 48-72 hours in some cases, and banking relationships sometimes come with the structure, which saves months.
Main downside is price and risk. A clean AG with active SRO membership can sell around €750,000+ in some cases. Smaller GmbH shells can be cheaper.
Change of control review still applies. New UBOs and directors get screened. If the new profile doesn’t meet standards, the SRO can revoke membership. That turns the purchase into an expensive paperweight.
Frequently Asked Questions (FAQ)
Does SRO membership let you passport into the EU?
No. Switzerland is outside the EEA. A Swiss entity cannot MiCA-passport into the EU. EU retail usually requires an EU CASP setup. Reverse solicitation is narrower in 2026 and keeps tightening.
Can you open a Swiss bank account with SRO membership?
Yes, but it’s a chicken-and-egg loop. Banks often want regulatory clarity first. SRO needs operational readiness. Capital deposit accounts solve the early setup stage, then firms move into operational banking once membership is confirmed, typically through crypto-friendly Swiss institutions.
What are ongoing compliance costs?
After initial setup, many firms budget CHF 15,000-25,000 per year as a baseline. SRO fees, annual AML audit, resident director fees, accounting, tax reporting. Volume and custody complexity push it up.
Is SRO membership mandatory for crypto businesses in Switzerland?
Yes, if the firm acts as a financial intermediary under AMLA. Exchanging, brokering, transferring, or custody of crypto on a professional basis requires SRO supervision unless a FINMA licence applies.
Do crypto custody providers need a full FINMA licence?
Not automatically. Custody can fall under SRO supervision if it does not involve public deposit-taking or banking-style risk. Once deposit thresholds or reinvestment behaviour appear, FINMA licensing becomes likely.
How long does it take to join an SRO in practice?
Typically 8-12 weeks after incorporation if documentation, governance, and AML frameworks are complete. Delays usually come from weak custody models or underdeveloped AML controls.
Can a foreign founder own 100% of a Swiss SRO-regulated company?
Yes. Ownership can be fully foreign. Substance requirements still apply, including a Swiss-resident board member and Swiss-based AML function.
Can you pay Swiss share capital in crypto?
Yes, commonly using BTC or ETH as an in-kind contribution. The process requires valuation, auditor confirmation, and notary approval, and often costs more than a cash deposit.
What’s the difference between joining VQF and PolyReg?
VQF is more crypto-specialised and expects mature compliance frameworks. PolyReg suits mixed fintech models and scales fees with staff size. The right choice depends on business complexity and growth plans.
Is buying a ready-made Swiss SRO company safe?
It can save time, but risk remains. Any change of control triggers SRO review. If new owners or governance fail fit-and-proper checks, membership can be revoked despite the purchase.
