Supervised by whom

Regulatory analysis · Switzerland

FATFThe Financial Action Task Force — the inter-governmental body, created by the G7 in 1989, whose Recommendations set the global anti-money-laundering standard. Not a law-maker: its power runs through peer review and its lists.'s standard on virtual assets says that VASPsVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers. must be supervised by "a competent authority (not a SRB)". Switzerland supervises its crypto businesses through self-regulatory organisationsA private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist in Switzerland. — around 200 were SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist.-affiliated as at mid-2024, on the Federal CouncilThe seven-member Swiss executive. It makes ordinances and decides when laws come into force.'s own figure — and is rated Largely Compliant on that Recommendation.

Below: how that was reconciled, what actually differs between the two supervisory channels, and why the question is about to be resolved by a route that never names it.

In summary

• FATF's rule says a crypto supervisor must be a public authority, not a trade body. Switzerland uses private trade bodies. It passed anyway.
• It passed because FATF applied a different test — one written in 2016, about a different word, before the crypto rule existed.
• The two channels are not the same. A firm supervised by an SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. cannot have its profits taken, its executives banned, or a decision published against it. A FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone.-licensed firm can.

One term to fix before it recurs. An SRO is a private association, recognised by FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone., that polices money-laundering rules at firms FINMA does not supervise itself. Membership is compulsory for those firms. There are eleven.

The rule

Interpretive Note to Recommendation 15, paragraph 5, in the material part:

"VASPsVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers. should be supervised or monitored by a competent authorityThe national regulator a member state designates to supervise under an EU regime — the licensing and supervision counterpart. Often shortened to NCA. (not a SRB), which should conduct risk-based supervision or monitoring."

FATFThe Financial Action Task Force — the inter-governmental body, created by the G7 in 1989, whose Recommendations set the global anti-money-laundering standard. Not a law-maker: its power runs through peer review and its lists. restated it plainly in the executive summary of its 2021 virtual-assets guidance: "only competent authorities, and not self-regulatory bodies, can act as VASP supervisory or monitoring bodies."

The exclusion is unqualified. Compare Recommendation 28(b), which governs non-casino designated non-financial businesses and professions and says the opposite: monitoring "may be performed by (a) a supervisor or (b) by an appropriate self-regulatory body (SRB), provided that such a body can ensure that its members comply with their obligations". R.28(b) is permissive as to institutional form and conditions the permission on outcome. INR.15 §5 is prohibitive as to form and conditions nothing.

A sourcing note. That wording was checked against the current consolidated text on 24 August 2026, in The FATF Recommendations, updated June 2026, at the Interpretive Note to Recommendation 15. It is still paragraph 5, and it still reads "(not a SRB)". The February 2025 revision of INR.15 did not disturb either. The sentence as it now stands: "VASPs should be supervised or monitored by a competent authority (not a SRB), which should conduct risk-based supervision or monitoring."

The Swiss position

A financial intermediary in the Swiss parabankingThe Swiss term for financial businesses that are not banks — money changers, money transmitters, crypto firms, trustees. They are supervised by SROs, not by FINMA. sector must affiliate to a FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone.-recognised self-regulatory organisationA private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist in Switzerland.. There are eleven. FINMA generates the list on demand, and the copy taken for this dossier stamps itself 24.08.2026 / 04:31:

AOOS · ARIF · OAD FCT · PolyReg · SRO SLV · SRO SAV/SNV · SRO-SVV · SRO SVIG · SO-FIT · SRO-Treuhand Suisse · VQF

That list is a register: name, seat and contact details, nothing else attached. Two of the eleven are profession-based — the bar and notaries' body, and the fiduciaries' body. The rest are open-membership compliance associations taking in whoever must affiliate.

Whether VASPsVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers. sit in that population is not a matter of inference. FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone.'s Geschäftsbericht 2025 states it directly:

"Die SRO sind gemäss Geldwäschereigesetz für die Überwachung von berufsmässig tätigen Finanzintermediären zuständig – etwa Geldwechsler, Money Transmitters oder andere Zahlungsdienstleister, Virtual Asset Service Providers, Organe bei Sitzgesellschaften, Kredit- und Leasinggeber oder Investmentgesellschaften"

In English: under the Anti-Money Laundering Act the SROs are responsible for supervising financial intermediaries acting on a professional basis — money changers, money transmitters and other payment service providers, virtual asset service providers, officers of domiciliary companies, credit and leasing providers, and investment companies.

And FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone.'s authorisation pages put the corollary in English: Art. 2(3) intermediaries "are supervised by the SROs where they are affiliated, and not by FINMA."

So: FATFThe Financial Action Task Force — the inter-governmental body, created by the G7 in 1989, whose Recommendations set the global anti-money-laundering standard. Not a law-maker: its power runs through peer review and its lists. says not a self-regulatory body. Switzerland uses self-regulatory organisationsA private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist in Switzerland.. And Switzerland is rated Largely Compliant.

How the two were reconciled

The reconciliation happened once, in a single passage, in FATFThe Financial Action Task Force — the inter-governmental body, created by the G7 in 1989, whose Recommendations set the global anti-money-laundering standard. Not a law-maker: its power runs through peer review and its lists.'s 3rd Enhanced Follow-up Report on Switzerland of January 2020 — the first assessment after INR.15 was adopted. It is worth reading in full, because the whole matter turns on it:

"In the 2016 MER, Switzerland was considered to be technically compliant with criterion 26.1, indicating that, in the context of Recommendation 26, Swiss OAR fulfil the FATF definition of 'supervisor', because they have the necessary powers. Therefore, in line with the applicable requirements of Recommendations 26 and 27, VASPs are supervised by financial supervisors which are either the FINMA or the Swiss OAR."

Three features of that reasoning are matters of the text rather than of argument.

The premise is a 2016 finding, made three years before INR.15 existed. Criterion 26.1 asks whether a body is a supervisor. INR.15 §5 asks whether it is an SRB. These are different questions with different definitions, and the second was not available to be asked in 2016.

FATF's own paraphrase drops the parenthesis. Two paragraphs earlier in the same report, summarising the new requirements it was about to assess, FATFThe Financial Action Task Force — the inter-governmental body, created by the G7 in 1989, whose Recommendations set the global anti-money-laundering standard. Not a law-maker: its power runs through peer review and its lists. renders §5 as "requirements for countries to apply adequate risk-based AML/CFT supervision (including sanctions) to VASPs and that such supervision should be conducted by a competent authority". The words "(not a SRB)" are absent. It then reasons to the conclusion that the SROsA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. qualify.

The deficiencies FATF did record are about something else. Switzerland's Largely Compliant rating on the revised R.15 was qualified on three grounds: the occasional-transaction thresholds under the FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. Anti-Money Laundering OrdinanceA rule made by the government or a regulator under a power given by an Act. Binding law, but below the Act. (AMLO-FINMAFINMA's own Anti-Money Laundering Ordinance (SR 955.033.0) — the detailed rules under the GwG. In German, GwV-FINMA., SR 955.033.0), the disproportionality of FINMA's sanctions, and international co-operation. The institutional form of the supervisor is not among them.

The definitions do not settle it either

There is a real question underneath, and FATFThe Financial Action Task Force — the inter-governmental body, created by the G7 in 1989, whose Recommendations set the global anti-money-laundering standard. Not a law-maker: its power runs through peer review and its lists.'s own glossary makes it genuinely arguable rather than obviously wrong.

An SRB is defined as "a body that represents a profession (e.g. lawyers, notaries, other independent legal professionals or accountants), and which is made up of members from the profession, has a role in regulating the persons that are qualified to enter and who practise in the profession, and also performs certain supervisory or monitoring type functions."

The last limb every Swiss SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. plainly satisfies. The first three are the arguable ones. Most Swiss SROs are open-membership AML compliance associations admitting heterogeneous parabankingThe Swiss term for financial businesses that are not banks — money changers, money transmitters, crypto firms, trustees. They are supervised by SROs, not by FINMA. businesses — money changers, money transmitters, VASPsVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers., trustees of domiciliary companies, lessors, investment companies — rather than bodies representing a profession and controlling entry to it. Two of the eleven are profession-based on their face: the SRO of the Swiss Bar Association and Swiss Notaries Association, and SRO-Treuhand Suisse.

Meanwhile Supervisors is defined to include "non-public bodies (which could include certain types of SRBs)", provided they "be empowered by law to exercise the functions they perform, and be supervised by a competent authority in relation to such functions". Swiss SROsA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. satisfy both conditions: Art. 7(3) of the Financial Market Supervision Act of 22 June 2007 (FINMASAThe Financial Market Supervision Act of 2007 (SR 956.1) — the statute that created FINMA and lists what it may do. In German, FINMAG.) lets FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. recognise and enforce self-regulation as a minimum standard, and Arts. 12, 18 and 24 of the Anti-Money Laundering Act of 10 October 1997 (AMLA) give FINMA recognition, withdrawal of recognition and approval of an SRO's regulations.

So the standard contains both a definition that most Swiss SROsA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. arguably escape and a definition that expressly accommodates them — and a prohibition that turns on which applies.

No one has ever put the question. Not FATFThe Financial Action Task Force — the inter-governmental body, created by the G7 in 1989, whose Recommendations set the global anti-money-laundering standard. Not a law-maker: its power runs through peer review and its lists., in the 2016 evaluation, the 2020 follow-up, the 2023 follow-up or the June 2025 Targeted Update. Not the Federal CouncilThe seven-member Swiss executive. It makes ordinances and decides when laws come into force., FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. or the State Secretariat for International Financial Matters, in anything traced. The 2023 follow-up report — Switzerland's most recent FATF assessment — contains no mention of virtual assets, VASPsVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers. or cryptocurrency at all.

What actually differs

Set the institutional argument aside and compare the toolkits.

FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone.'s enforcement instruments against a directly supervised institution sit in Arts. 31–37 FINMASAThe Financial Market Supervision Act of 2007 (SR 956.1) — the statute that created FINMA and lists what it may do. In German, FINMAG.: restoration of compliance and the power to require security; declaratory ruling and substituted performance at the defaulter's cost; an industry banAn order stopping a named individual from holding a senior role at a supervised firm — up to five years under FINMASA Art. 33. on an individual for up to five years; publication of the ruling naming the person; disgorgementTaking back a profit somebody made from breaking the rules. It strips the gain; it is not a fine, so no profit means no payment. of profit, including avoided losses, with an estimation power and a seven-year prescription; appointment of an investigating agent who may act in place of the firm's own organs; withdrawal of the authorisation.

An SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist.'s powers come from its own Reglement, which FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. approves under Art. 18(1)(c) AMLA but does not write. Art. 25(3) AMLA requires the Reglement to provide "angemessene Sanktionen" and to set the conditions for affiliation and exclusion. The statute names no specific sanction other than exclusion.

The Federal Supreme CourtSwitzerland's highest court, in Lausanne. Last stop for an appeal against a FINMA decision. settled the character of SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. sanctions in BGE 143 II 162 (2C_867/2015, 13 December 2016). At E. 2.3 it holds that an SRO discharges a public-law task "ungeachtet der privatrechtlichen Natur ihrer Organisation und des privatrechtlichen Charakters der von ihnen ausgesprochenen Sanktionen" — notwithstanding the private-law nature of its organisation and of the private-law character of the sanctions it pronounces. SRO sanctions are contractual. They are not administrative acts, and they do not travel the administrative-law review channel that governs FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. decisions.

The same judgment draws the sharpest line available between the two channels, and it is worth quoting because it is a court's own vocabulary rather than a commentator's. At E. 3.2.3:

"Die FINMA trifft im Rahmen der geldwäschereirechtlichen Selbstregulierung eine funktionale staatliche Gewährleistungsverantwortung; bei den direkt unterstellten bzw. prudenziell beaufsichtigten Finanzintermediären überdies eine Erfüllungsverantwortung."

In English: within anti-money-laundering self-regulation FINMA bears a functional state responsibility to guarantee — that the system works. For directly subordinated or prudentially supervised intermediaries it bears, in addition, a responsibility for performance.

Two tiers, named by the highest court in the country. FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. answers for whether the SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. system functions. It answers for whether a licensed bank actually complies. That is the difference this whole dossier is about, and it is not a matter of degree.

The judgment carries a second holding that matters for how far the system can be stretched: FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. may force an SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. to amend its rulebook only for "technische Präzisierungen" securing a recognised national or international minimum standard. "Grundlegend neue Pflichten" — fundamentally new duties — require Parliament to amend the Act.

Exclusion approaches the effect of a licence withdrawal, because affiliation is mandatory under Art. 14(1) AMLA and the old direct-subordination alternative has been repealed. But Art. 14(2) gives a firm that still meets the conditions an entitlement to affiliate elsewhere. What follows an exclusion in practice — whether FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. opens proceedings, whether re-affiliation is common — is not established from any primary source located.

And the audit chain

For a directly supervised institution the chain runs firm → state-licensed audit firm → FINMA. The auditor holds a regulatory-audit licence from the Federal Audit Oversight Authority under Art. 9a of the Audit Oversight Act of 16 December 2005 (AOA, SR 221.302). Art. 27 FINMASAThe Financial Market Supervision Act of 2007 (SR 956.1) — the statute that created FINMA and lists what it may do. In German, FINMAG. makes the auditor's escalation duty statutory and owed to FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. — immediately, on serious breaches. Art. 28a(2) lets FINMA require a change of audit firm; Art. 24a lets FINMA install its own auditor at the firm's cost. The Federal CouncilThe seven-member Swiss executive. It makes ordinances and decides when laws come into force. sets the content and form of the audit.

For an SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. member the chain runs firm → SRO-licensed auditor → SRO. Art. 24a(1) AMLA is explicit: "The self-regulatory organisation shall grant the audit firms and lead auditors the necessary licence and supervise their activity." The audit cycle is whatever the Reglement says; the Act prescribes none. FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. approves the Reglement and supervises the SRO, but the licensing of the auditor, the cycle, the content and the escalation route all sit inside a document FINMA did not write.

What is not published

Three negatives, each material, each verified as an absence rather than a search failure.

Nobody publishes how many financial intermediaries are under SRO supervision. FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. maintains a public directory under Art. 18a AMLA, but it is a search interface and gives no total. No figure appears in the 2025 annual report.

The crypto subset is published, but in an unlikely place. Not by FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone., and not in any statistical release. It appears in the regulatory-impact section of the explanatory report accompanying the FinIA consultationThe stage where a draft law or rule is published for comment before it is adopted — the one moment arguments can still shape the text. National systems name it differently; Swiss practice says Vernehmlassung for statutes, Anhörung for regulators' rules. — Erläuternder Bericht zur Änderung des Finanzinstitutsgesetzes, published by the Federal CouncilThe seven-member Swiss executive. It makes ordinances and decides when laws come into force. on 22 October 2025, at Ziff. 5.4.2 (Krypto-Institute), p. 102:

"Mitte 2024 waren rund 200 Virtual Asset Service Provider (VASP) einer Selbstregulierungsorganisation angeschlossen, wobei etwa 115 aktiv waren."

In English: in mid-2024 around 200 virtual asset service providers were affiliated to a self-regulatory organisation, of which about 115 were active.

FINMA has since published the same population, more precisely, and from the other side. Its Annual Report 2024 carries a chart headed "Activities of virtual asset service providers that are affiliated to self-regulatory organisations", giving a total of 203 VASPs, of which 88 inactive — so 115 active, matching the Federal CouncilThe seven-member Swiss executive. It makes ordinances and decides when laws come into force.'s rounded figure exactly — broken down by activity: exchange services fiat-to-crypto and crypto-to-crypto, payment services, custody, ICO services, stablecoinA token designed to track a currency, run by an issuer who can typically freeze balances — e.g. USDT or USDC. issue and other. Two independent publications, two years apart, same number. The figure is as reliable as a Swiss VASPVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers. count gets.

It also means 43% of the supervised crypto population is inactive, which is worth holding on to. Anyone counting Swiss crypto firms by SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. affiliation is counting shelf entries as businesses.

FINMA has said why. In its on-site reviews of eight SROsA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. in 2023 it examined whether they recognise "empty shells" and sales of shell companies among their members, and explained the concern in terms: "VASPs in particular often seek affiliation with an SRO due to the progressive regulation in Switzerland, but then choose not to carry out operational activities or do so outside Switzerland."

Why so many are empty

The inactive share is large enough — nearly half — that it deserves an explanation rather than a footnote. Three published facts supply one, and none of them requires speculation.

First: most of them did not have to affiliate. The Anti-Money Laundering Act catches a parabankingThe Swiss term for financial businesses that are not banks — money changers, money transmitters, crypto firms, trustees. They are supervised by SROs, not by FINMA. intermediary only where it acts berufsmässig — on a professional basis — and Article 7 of the Anti-Money Laundering OrdinanceA rule made by the government or a regulator under a power given by an Act. Binding law, but below the Act. defines that with four numbers. A financial intermediary acts professionally if it earns gross revenue above CHF 50,000 a year; or enters into more than 20 business relationships a year, or maintains at least 20; or has unlimited power of disposalBeing able to move what is in a wallet. Swiss supervisors ask firms to prove their customer has it (German: Verfügungsmacht). over third-party assets exceeding CHF 5 million at any point; or carries out transactions totalling more than CHF 2 million a year.

A company doing none of those things is outside the Act. It has no duty to join an SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist., and no duty to be supervised by anyone. So a dormant affiliated VASP is, in the ordinary case, a volunteer — a member of a supervisory system it was never required to enter.

Second: the thing it gets is a signal, and the government says so. The Federal CouncilThe seven-member Swiss executive. It makes ordinances and decides when laws come into force.'s explanatory report on the FinIA amendment, describing the benefits of the proposed crypto-institution licence, puts it without embarrassment: the authorisation "wirkt als Qualitätssiegel und stärkt das Vertrauen von Kundinnen und Kunden, Investorinnen und Investoren sowie weiteren Marktakteuren" — acts as a seal of quality and strengthens the confidence of clients, investors and other market participants. That is said of the future licence, but it describes exactly what an SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. affiliation already offers at a fraction of the cost: a verifiable entry on a Swiss supervisory register, and the sentence "regulated in Switzerland".

Third: the population it is drawn from is far larger than the register. The same report records 1,681 companies active in the Swiss blockchain ecosystem in May 2025, on a Crypto Valley Venture Capital count. Against that, roughly 200 SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist.-affiliated VASPsVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers. and about 115 active ones. The register was never a map of the sector; it is a map of the firms that needed, or wanted, the badge.

Put the three together and the inactive share stops being an anomaly. An affiliation is cheap, optional for a firm below the thresholds, and worth something in marketing terms whether or not the firm ever trades. The rational move for a company that wants Swiss standing without Swiss operations is to affiliate and stay quiet.

Two consequences follow, and the second is the one that matters for due diligence.

The register overstates the supervised sector. Anyone counting Swiss crypto businesses from SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. membership is counting intentions and shelf entries alongside operating firms.

And a dormant affiliation is an asset that can be sold with the company. FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. did not only ask the SROsA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. about empty shells; it asked about "sales of shell companies by SRO members". An entity with a clean affiliation, a Swiss address and no trading history is precisely what someone wanting an instant Swiss regulatory footprint would buy. The badge travels with the share register. When a counterparty's Swiss credentials look older than its business, that is the question to ask.

FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. is working on the symptom. In 2024 it discussed with the SROsA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. amendments to their member lists "in particular with regard to members who do not engage in any activity subject to the AMLA, so as to avoid misleading information about the actual activity of the members and the scope of their supervision". That is the supervisor trying to stop its own registers from misleading people. Until the lists are cleaned, the reader has to do it.

Three dates sit behind that sentence and are easily run together. The data are as at mid-2024. The document carrying them was published on 22 October 2025. This practice read it on 23 August 2026, in the German original. So the figure is more than two years old at the time of writing, and the Federal CouncilThe seven-member Swiss executive. It makes ordinances and decides when laws come into force. states no methodology, collection basis or underlying source for it. It is the best published figure there is, which is a different thing from a reliable one.

For the wider national picture — all intermediaries with VASPVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers. activity, not the SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist.-affiliated subset — the interdepartmental risk assessment of January 2024 records a rise "von unter zehn im Jahr 2018 auf über 204 per Ende 2022", and that at least 180 of them had filed no report to MROSMoney Laundering Reporting Office Switzerland — the Swiss financial intelligence unit, inside the federal police. It analyses reports and passes them on; it does not investigate or prosecute.. Those data are as at 31 December 2022.

Nobody publishes what SRO supervision produces. Art. 27(2) AMLA requires an SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. to notify FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. immediately of every exclusion, with reasons, and of the opening of any sanction proceedings that could end in exclusion. Art. 27(3) requires an annual report plus "eine Aufstellung über die in der Berichtsperiode ergangenen Sanktionsentscheide" — a schedule of every sanction decision in the period. FINMA therefore receives, every year, a complete account of SRO enforcement. None of it is published in aggregate. The output of the system supervising Switzerland's virtual-asset sector is invisible from outside it.

Dotted-underlined terms carry hover definitions; the full list is in the glossary. For the travel-rule requirement those SROs actually enforce on crypto transfers, see Switzerland's crypto travel rule. For what an SRO affiliation is worth to a counterparty relying on it, see What a Swiss SRO affiliation is actually worth.

For the practitioner

"Regulated in Switzerland" does not identify the supervisor. The first question about any Swiss crypto counterparty is which channel it sits in: FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone.-authorised, or affiliated to one of the eleven SROs. The FINMA directory under Art. 18a AMLA answers it. The two channels carry materially different enforcement exposure, different audit chains and different review routes, and nothing in a firm's own description of itself will tell you which applies.

An unaffiliated intermediary is committing an offence, and it is prosecuted elsewhere. Operating professionally as a financial intermediary without SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. affiliation breaches Art. 14(1) AMLA and is criminal under Art. 44(1) FINMASAThe Financial Market Supervision Act of 2007 (SR 956.1) — the statute that created FINMA and lists what it may do. In German, FINMAG.. It is prosecuted not by FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. but by the Federal Department of Finance, and tried at the Federal Criminal Court. SK.2021.17 (2 December 2021) is the worked example: an ICO issuer transferred tokens into investors' private wallets while affiliated to nothing, and its responsible individual was convicted and sentenced to 120 day-fines of CHF 440, suspended, plus a CHF 13,200 fine and costs. The company joined an SRO afterwards, in May 2019. Absence from the SRO register is therefore not a neutral fact about a counterparty.

A favourable FATF rating is a technical-compliance rating. Switzerland's Largely Compliant on R.15 was reached in 2020 on the reasoning set out above. Effectiveness is measured separately, under Immediate Outcome 3, where Switzerland has stood at Moderate since December 2016 — never re-assessed, because the follow-up process re-rates technical compliance only. Anyone citing Switzerland's ratings should be clear which of the two they mean.

The date matters more than usual here. Switzerland moved to regular monitoring in October 2023. FATFThe Financial Action Task Force — the inter-governmental body, created by the G7 in 1989, whose Recommendations set the global anti-money-laundering standard. Not a law-maker: its power runs through peer review and its lists.'s own assessment calendar gives its fifth-round evaluation an on-site period from June 2027 and plenary discussion in February 2028, against the 2022 Methodology. The Swiss State Secretariat for International Financial Matters says instead that the review falls in 2026–27; the two do not reconcile, and the FATF calendar is the better source for its own timetable. Either way, that evaluation is the first occasion on which the SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist./VASPVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers. question could be put squarely — and by then it may have been overtaken.

The question may be answered by being removed

The amendment to the Federal Act on Financial Institutions of 15 June 2018 (FinIA/FINIG) consulted on between 22 October 2025 and 6 February 2026 would create a crypto-institution licence and, in the same movement, insert payment institutions and crypto institutions into Art. 2(2) AMLA — moving them out of Art. 2(3), and so out of SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. supervision under Art. 12(c) and into FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. supervision under Art. 12(a).

That is the whole mechanism. It is a reclassification of the intermediary, not a reform of the SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. regime.

The Federal CouncilThe seven-member Swiss executive. It makes ordinances and decides when laws come into force. does say plainly what it means for the firms concerned, in the same paragraph as the VASPVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers. figure: "Für die Mehrheit der Unternehmen, die heute bereits dem GwG unterstellte Tätigkeiten mit kryptobasierten Vermögenswerten ausüben und hierfür einer Selbstregulierungsorganisation angeschlossen sind, bedeutet dies einen Wechsel der Aufsicht zur FINMA." For the majority of firms currently SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist.-affiliated for their crypto activity, this means a change of supervisor to FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone.. What it does not say is why the institutional form of the supervisor should change at all.

Two things about it are worth noticing. The transition keeps SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. affiliation as the bridge: draft Art. 74b(2) lets a firm continue trading until FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. decides, "sofern sie einer Selbstregulierungsorganisation nach dem GwG angeschlossen sind und durch diese in Bezug auf die Einhaltung der entsprechenden Pflichten beaufsichtigt werden" — affiliated to an SRO and supervised by it as to compliance. And the explanatory report, which devotes a page of its comparative section to FATFThe Financial Action Task Force — the inter-governmental body, created by the G7 in 1989, whose Recommendations set the global anti-money-laundering standard. Not a law-maker: its power runs through peer review and its lists. Recommendation 15 and asserts at Ziff. 2.4.1 that the proposals "stehen im Einklang mit den Empfehlungen der FATF", never reaches INR.15 §5. Across its 111 pages there is no occurrence of Interpretativnote, of INR.15, or of any rendering of "not a SRB", and no discussion anywhere of who may supervise a VASPVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers.. It reaches the last sentence of §5 — licence withdrawal, restriction, suspension — and stops one clause short of the supervision sentence. INR.15 is not cited as the driver in any public document traced.

So Switzerland may be about to resolve a tension it has never acknowledged, for reasons it has not given, and the resolution would take effect no earlier than 2028 — the year of its next FATFThe Financial Action Task Force — the inter-governmental body, created by the G7 in 1989, whose Recommendations set the global anti-money-laundering standard. Not a law-maker: its power runs through peer review and its lists. plenary.

Key takeaways

• INR.15 §5 requires VASPVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers. supervision by "a competent authority (not a SRB)". R.28(b) permits SRB supervision for non-casino DNFBPs. The exclusion for VASPs is unqualified.
• FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. states in its 2025 annual report that SROsA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. supervise VASPsVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers., and that Art. 2(3) intermediaries are not supervised by FINMA.
• FATFThe Financial Action Task Force — the inter-governmental body, created by the G7 in 1989, whose Recommendations set the global anti-money-laundering standard. Not a law-maker: its power runs through peer review and its lists. reconciled the two in one passage of its 2020 follow-up report, by applying a 2016 finding on the R.26 definition of "supervisor" and paraphrasing INR.15 §5 without the words "(not a SRB)".
• No FATFThe Financial Action Task Force — the inter-governmental body, created by the G7 in 1989, whose Recommendations set the global anti-money-laundering standard. Not a law-maker: its power runs through peer review and its lists. or Swiss document traced has ever asked whether Swiss AMLA SROsA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. are SRBs within INR.15. The 2023 follow-up report does not mention virtual assets at all.
• An SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. has exclusion and contractual sanctions. It has no disgorgementTaking back a profit somebody made from breaking the rules. It strips the gain; it is not a fine, so no profit means no payment., no individual ban, no publication power, no investigating agent, and cannot issue an enforceable ruling.
• Switzerland publishes no count of SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist.-affiliated intermediaries, no crypto subset, and no aggregate of SRO sanctions or exclusions — though FINMAThe Swiss Financial Market Supervisory Authority. It licenses firms, inspects them and can shut them down — but it cannot fine anyone. receives a schedule of every one annually.

Sources

FATF

• Interpretive Note to Recommendation 15 as adopted, 22 February 2019 · The FATF Recommendations, updated June 2026 — held; INR.15 §5 read in the consolidated text 24 August 2026 · FATF Glossary
• Updated Guidance for a Risk-Based Approach to Virtual Assets and VASPs, October 2021 — para 68
• Switzerland: 3rd Enhanced Follow-up Report and Technical Compliance Re-Rating, January 2020
• Switzerland: 4th Enhanced Follow-up Report, October 2023
• FATF country page — Switzerland · Global Assessment Calendar

Swiss law

• AMLA / GwG, SR 955.0 — Arts. 2, 12, 14, 18, 18a, 24, 24a, 25, 27
• FINMASA / FINMAG, SR 956.1 — Arts. 7(3), 24, 24a, 27, 28a, 31–37
• BGE 143 II 162 (Federal Supreme CourtSwitzerland's highest court, in Lausanne. Last stop for an appeal against a FINMA decision., on the legal character of SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist. sanctions)

FINMA

• List of recognised self-regulatory organisations, as at 23 August 2026
• Authorisation — self-regulatory organisations · Supervision — self-regulatory organisations
• Geschäftsbericht 2025 — Aufsichtstätigkeit nach Bereichen

Swiss federal

• Risiko der Geldwäscherei und Terrorismusfinanzierung durch Krypto-Assets, KGGT, January 2024
• Federal Council — FinIA consultation opened 22 October 2025
• Erläuternder Bericht zur Änderung des Finanzinstitutsgesetzes (Vernehmlassungsvorlage), Federal CouncilThe seven-member Swiss executive. It makes ordinances and decides when laws come into force., 22 October 2025, 111 pp — Ziff. 5.4.2 (Krypto-Institute), p. 102, the source of the SROA self-regulatory organisation. A private body, recognised by FINMA, that supervises money-laundering compliance at firms FINMA does not supervise itself. Eleven exist.-affiliated VASPVirtual-asset service provider — an exchange, custodian or similar business handling crypto for customers. figure. Held in the German original; read 23 August 2026 and page reference confirmed 24 August 2026. Data reference date: mid-2024.

Research and analysis, not legal advice · this piece describes the supervisory architecture and does not rate, rank or compare individual self-regulatory organisations · positions stated as at 23 August 2026 · check the SR texts in force.