Key points
- A financial intermediary joins an SRO; it does not apply to FINMA directly
- The SRO assesses a company that can already operate, not a plan
- A Swiss entity, a real AML officer and a written risk analysis come first
- Admission brings annual audit, training and procedure obligations
- Admission is at the SRO's discretion — nobody can guarantee it
Under Swiss anti-money-laundering law a financial intermediary does not apply to FINMA for a licence. It joins a FINMA-recognised self-regulatory organisation, which then supervises it directly. We run that path end to end: eligibility assessment, the Swiss entity and local arrangements, the appointed AML officer, the complete internal policy set, and all correspondence with the SRO through to admission.
Swiss self-regulatory organisation membership is the largest single line of work we handle. This page describes what the route actually involves, including the parts that make it unsuitable for some businesses.
What is a Swiss SRO, and why not FINMA?
Switzerland supervises anti-money-laundering compliance through a two-tier structure. The Swiss Financial Market Supervisory Authority, FINMA, recognises and oversees a set of self-regulatory organisations; those SROs in turn admit and directly supervise financial intermediaries. A firm carrying on financial-intermediary activity in the sense of the Anti-Money Laundering Act must be affiliated with a recognised SRO — it does not file an application with FINMA for a crypto licence, because that is not how the framework is built.
The practical consequence is that your counterparty is the SRO. It reviews the file, asks the questions, decides on admission, and then audits you every year afterwards. The relationship does not end at approval; it starts there.
What must be in place before you submit?
What has to exist before a submission is worth making
- A Swiss entity with a registered office and verifiable local management arrangements
- An appointed anti-money-laundering officer (AMLCO) with appropriate credentials who can genuinely perform the role
- A complete set of AML internal procedures: identification, beneficial-owner determination, risk grading, ongoing monitoring and reporting
- A risk analysis written from your own business rather than adapted from a generic template
- Fit-and-proper and background material for shareholders, directors and key personnel
- A business plan, an account of the source of funds, and the geographic distribution of your intended customers
- Technical evidence that it works: due diligence and transaction monitoring tooling that can actually execute the procedures you have written
This is where most Swiss files fail, and it fails quietly: the application is submitted before the organisation it describes exists. The checklist above is the honest minimum. Two items deserve emphasis.
The AML officer is not a name on a form. The SRO expects an individual with relevant credentials who can genuinely discharge the function, and it will probe whether that person understands your specific business rather than compliance in the abstract. Sourcing and confirming that person is a recruitment task with its own lead time, and we treat it as part of the engagement.
The risk analysis has to be about you. A generic template describing the risks of "virtual asset businesses" tells the reviewer nothing and signals a great deal. It should identify your actual customer geography, your product's specific exposure, the typologies that plausibly apply, and what you do about each. The typologies themselves are not something you have to invent — the FATF publishes the standards and the sector guidance that Swiss requirements are built on, and a risk analysis that engages with them specifically reads very differently from one that does not.
What the SRO is actually assessing
The mental shift that makes this route go well: the SRO is assessing an operational organisation, not a plan. It wants to see a company that could begin taking customers on the day it is admitted — with the entity in place, the person appointed, the procedures written, and tooling that can actually perform the monitoring those procedures describe. Applications framed as "we will build this once we are approved" are read exactly that way.
What we do, stage by stage
We start with eligibility: whether your activity genuinely falls within financial intermediation as Swiss law defines it, and whether this route serves your customer base better than the alternatives. If it does not, we say so — the three-way comparison on Swiss SRO vs MiCA vs El Salvador exists partly to make that conversation faster.
Then the Swiss entity and the local arrangements it needs; then the AML officer; then the full internal policy set, drafted against your operation. We prepare the fit-and-proper material, the business plan and the source-of-funds account, submit, and handle every round of questions from a single consistent position across the file. The full picture is on how we work, and the broader route including what happens after admission is on the Swiss SRO route.
After admission
Membership carries continuing obligations: annual audit against the SRO's requirements, staff training, procedure updates, and revisiting the risk analysis when the business changes. Those are covered on post-licence compliance. Businesses that treat admission as the finish line are the ones that run into difficulty in year two.
Admission is at the SRO's discretion, and no adviser can guarantee it. Regulatory positions shift; the description here reflects the framework as at August 2026. This page is general information rather than legal advice — CryptoLicense is an advisory firm, not a regulator and not a law firm.
