FINMA Crypto Guidelines: Key Regulatory Guidance for Digital Asset Markets

The Swiss Financial Market Supervisory Authority has published a body of regulatory guidance that collectively defines how digital asset businesses operate in Switzerland. Understanding these guidelines — their content, their intent, and their practical implications — is essential for any entity operating in or considering entry to the Swiss digital asset market.

FINMA’s Regulatory Philosophy

FINMA approaches digital asset regulation through the lens of technology neutrality and substance over form. The regulator evaluates digital asset activities based on their economic function rather than their technological implementation. A digital asset that functions as a security is regulated as a security, regardless of whether it exists on a blockchain or a traditional registry.

This approach provides predictability for market participants — the rules are not arbitrary but flow logically from established regulatory principles. It also means that truly novel structures may require individual assessment, as FINMA does not issue blanket approvals for broad categories of activity.

Token Classification Framework

FINMA’s ICO guidelines, first published in 2018 and subsequently refined, established a three-category token classification framework that remains the foundation of Swiss digital asset regulation:

Payment Tokens

Payment tokens (including Bitcoin and Ether) are designed primarily as a means of payment or value transfer. They carry no claims against an issuer and derive their value from market demand rather than underlying assets or income rights.

Regulatory treatment: Payment tokens are not classified as securities but are subject to anti-money laundering (AML) regulations when used in the context of financial intermediation. Businesses facilitating payment token transactions must comply with the Anti-Money Laundering Act and affiliate with an SRO or obtain a FINMA licence.

Utility Tokens

Utility tokens provide access to a digital application or service. They function as digital access rights rather than financial instruments. A token that provides access to a decentralised storage network, for example, would be classified as a utility token.

Regulatory treatment: Pure utility tokens that are solely functional and immediately usable are generally not subject to securities regulation. However, tokens with investment characteristics — including pre-functional tokens sold with an expectation of value appreciation — may be reclassified as securities.

Asset Tokens

Asset tokens represent claims against an issuer, similar to traditional securities. This category includes tokens representing equity, debt, profit participation rights, and other financial instruments. Tokenised shares, bonds, and fund units fall within this classification.

Regulatory treatment: Asset tokens are subject to securities regulation, including prospectus requirements, securities dealer licensing, and trading venue regulation. The DLT Act created the legal framework for ledger-based securities, enabling the issuance and transfer of asset tokens under Swiss law.

Hybrid Tokens

FINMA acknowledges that many tokens exhibit characteristics of more than one category. A token that functions both as a means of payment and as a right to services would be assessed against each applicable category, with the most restrictive regulatory treatment applying.

Anti-Money Laundering Guidance

Scope of Application

FINMA has clarified that AML obligations apply to any financial intermediary dealing with digital assets, including:

• Exchange services (fiat-to-crypto and crypto-to-crypto)
• Custodial wallet providers
• Token issuers in certain circumstances
• Payment processors handling digital asset transactions

Customer Due Diligence

Digital asset businesses must perform customer due diligence (CDD) equivalent to that required of traditional financial intermediaries. Specific guidance addresses:

Wallet verification — FINMA requires businesses to verify that customers control the external wallet addresses they provide. This can be accomplished through cryptographic signature challenges or small-value test transactions.

Beneficial ownership — Standard beneficial ownership identification requirements apply, with particular attention to complex corporate structures common in the crypto industry.

Enhanced due diligence — Higher-risk situations — including large transactions, unusual patterns, and customers from high-risk jurisdictions — trigger enhanced due diligence requirements.

Transaction Monitoring

Businesses must implement transaction monitoring systems capable of detecting suspicious activity patterns. FINMA expects these systems to incorporate blockchain analytics, identifying transactions linked to known illicit addresses, darknet markets, mixing services, and sanctioned entities.

Travel Rule

FINMA has implemented the FATF’s travel rule for digital asset transfers, requiring the exchange of originator and beneficiary information for transfers exceeding CHF 1,000. This implementation aligns with international standards whilst reflecting Swiss-specific thresholds and procedural requirements.

Stablecoin Guidance

FINMA has provided specific guidance on stablecoins, classifying them based on their economic structure:

• Stablecoins backed by fiat currency deposits may constitute deposit-taking, requiring a banking licence
• Stablecoins backed by commodity reserves may be classified as derivatives or collective investment schemes
• Algorithmic stablecoins are assessed based on their specific mechanism and may face multiple regulatory requirements

The key regulatory determinant is whether the stablecoin creates a claim against the issuer and, if so, what the nature of that claim is.

DeFi Regulatory Position

FINMA has addressed decentralised finance through a pragmatic lens, acknowledging that truly decentralised protocols may not have a responsible entity to regulate. However, FINMA has identified several principles:

• Where a protocol has identifiable operators or governance token holders who exercise control, those entities may face regulatory obligations
• DeFi front-ends and interfaces operated by identifiable entities are subject to applicable regulation
• The label of decentralisation does not override the substance of the economic activity
• Financial intermediation through DeFi protocols triggers AML obligations for identifiable intermediaries

Staking and Yield Services

FINMA has addressed the regulatory treatment of staking services within the existing framework:

• Pure validation staking, where the customer retains ownership of staked assets, does not typically constitute deposit-taking
• Staking services where the provider commingles or uses customer assets may constitute deposit-taking, requiring a banking licence
• Yield-bearing products that guarantee returns or pool customer assets are likely subject to banking or collective investment scheme regulation

NFT Regulatory Position

FINMA’s approach to NFTs focuses on the economic function rather than the technical format:

• NFTs representing unique digital art or collectibles without financial characteristics are generally not subject to financial market regulation
• NFTs that represent fractionalised investments, provide income rights, or function as financial instruments are subject to the applicable regulatory framework
• NFT trading platforms may trigger financial intermediary obligations depending on the types of NFTs traded

Supervisory Practice

FINMA’s Enforcement Approach

FINMA enforces compliance through a graduated approach:

1. Guidance and dialogue — Informal engagement with regulated entities to clarify expectations
2. Supervisory correspondence — Formal letters requiring corrective action
3. Supervisory measures — Conditions on licences, restrictions on activities, or requirements for additional reporting
4. Enforcement proceedings — Formal enforcement actions including fines, licence revocation, and industry bans

No-Action Letters

Unlike some jurisdictions, FINMA does not issue formal no-action letters. However, pre-application discussions and informal guidance provide a practical mechanism for businesses to assess their regulatory position before committing to a course of action.

Regulatory Sandbox

Switzerland does not maintain a formal regulatory sandbox for digital asset businesses. Instead, the fintech licence provides a proportionate entry point for innovative businesses, while the broader licensing framework accommodates growth and expansion into fully regulated activities.

Key FINMA Publications

Guidance Documents

FINMA has published several key guidance documents relevant to digital asset businesses:

• FINMA Guidance 02/2019 — Payments on the blockchain (covering stablecoins and payment tokens)
• FINMA ICO Guidelines — Token classification and regulatory treatment
• FINMA Guidance on staking — Regulatory treatment of staking services
• Various circulars — Operational risk, outsourcing, AML, and other topics applicable to digital asset businesses

Supervisory Priorities

FINMA publishes annual risk monitors that identify supervisory priorities. Digital assets have featured prominently in recent publications, with particular focus on:

• Money laundering risks in the crypto sector
• Operational resilience of digital asset infrastructure
• Client asset protection in the event of service provider failure
• Market integrity in digital asset trading

Practical Implications for Businesses

Compliance Programme Design

Swiss digital asset businesses should design compliance programmes that reflect FINMA’s expectations:

• Risk-based approach — Compliance resources should be allocated based on a documented risk assessment
• Board oversight — The board of directors must maintain oversight of compliance activities
• Compliance function — A dedicated compliance function with adequate resources and authority
• Training — Regular training for all staff on compliance obligations
• Documentation — Comprehensive documentation of compliance procedures, decisions, and monitoring activities

Regulatory Engagement

Proactive engagement with FINMA is both expected and rewarded. Businesses that maintain open communication with their FINMA relationship managers, report issues promptly, and participate constructively in supervisory processes are more likely to receive favourable regulatory treatment.

Industry Self-Regulation

FINMA encourages industry self-regulation as a complement to direct supervision. Participation in self-regulatory organisations, industry associations, and standard-setting bodies demonstrates commitment to regulatory compliance and contributes to the overall maturity of the Swiss digital asset ecosystem.

Outlook

FINMA’s regulatory framework for digital assets continues to evolve. Key areas of focus include:

• Alignment with the EU’s MiCA regulation to maintain cross-border market access
• Refinement of DeFi regulatory approaches as the sector matures
• Enhanced requirements for operational resilience and cyber security
• Evolution of AML standards in response to emerging money laundering typologies
• Integration of sustainability considerations into digital asset regulation

For businesses operating in the Swiss digital asset market, staying current with FINMA guidance is not merely a compliance obligation — it is a strategic necessity. The regulatory framework shapes market structure, competitive dynamics, and the overall attractiveness of Switzerland as a digital asset hub.

Donovan Vanderbilt is a contributing editor at ZUG TRADING, a digital asset trading and exchanges intelligence publication by The Vanderbilt Portfolio AG, Zurich. His analysis covers institutional market structure, OTC liquidity, and regulatory developments across Swiss and global digital asset markets.