FINMA Regulation Overview for Startups in Switzerland: Licences, Sandbox and FinTech Rules

Switzerland's financial market regulator, FINMA (Eidgenössische Finanzmarktaufsicht), supervises banks, securities firms, insurance companies, fund managers, and financial intermediaries under a tiered framework of licence categories. For a fintech startup or early-stage financial services company, understanding where its activity sits within that framework — and whether an exemption applies — is the first legal question that must be answered. Get it wrong and you risk operating without authorisation, which is a criminal offence under Swiss law. Get it right and Switzerland offers one of the most startup-friendly regulatory environments in Europe, with a genuine sandbox, a simplified FinTech licence, and a proactive fintech desk that will engage with your business model before you launch.

This guide covers the full FINMA regulatory framework as it applies to startups and fintech companies: the principal licence categories under Swiss financial market law, the sandbox and FinTech licence exemptions, the DLT/crypto authorisation pathway, the SRO membership route, and the practical question of timelines and costs. It is written from the perspective of Goldblum & Partner AG (Baarerstrasse 25, 6300 Zug), which has advised Swiss and international financial services companies on FINMA matters since 2007.

What Is FINMA and Who Does It Supervise?

FINMA — the Swiss Financial Market Supervisory Authority — is the independent federal supervisory authority for Switzerland's financial markets. It was established on 1 January 2009, replacing three predecessor bodies: the Swiss Federal Banking Commission (EBK), the Federal Office of Private Insurance (BPV), and the Anti-Money Laundering Control Authority (Kontrollstelle GwG). FINMA operates under the Financial Market Supervision Act (FINMASA/FINMAG) and is structured as an independent public-law institution with its own legal personality, reporting to the Federal Council.

FINMA's supervisory perimeter covers all entities that require authorisation under Swiss financial market law. These fall into six principal categories:

• ●Banks — supervised under the Banking Act (Bankengesetz, BankG), including universal banks, private banks, and FinTech licence holders
• ●Securities firms — supervised under the Financial Institutions Act (FINIG) and the Financial Services Act (FIDLEG), including securities dealers, investment advisers, and portfolio managers
• ●Collective investment schemes — supervised under the Collective Investment Schemes Act (KAG/CISA), including Swiss funds and their managers
• ●Insurance companies — supervised under the Insurance Supervision Act (VAG), including direct insurers and reinsurers
• ●Financial market infrastructures — supervised under the Financial Market Infrastructure Act (FinfraG), including exchanges, central counterparties, and DLT trading facilities
• ●Financial intermediaries supervised via SROs — not directly supervised by FINMA, but required to affiliate with a FINMA-recognised Self-Regulatory Organisation (SRO) for AML compliance under the Anti-Money Laundering Act (AMLA/GwG)

Any entity that carries out activities subject to FINMA supervision without the required authorisation commits a criminal offence under Swiss law. FINMA publishes a warning list of unauthorised entities and can issue public warnings, seize assets, and refer cases to the Federal Department of Finance for criminal prosecution.

The Principal FINMA Licence Categories

Each FINMA licence category has a distinct legal basis, minimum capital requirement, organisational standard, and supervisory intensity. The table below summarises the main categories relevant to fintech and financial services startups.

Capital figures are indicative minimum requirements and do not include additional capital buffers, operational reserves, or costs of the application process. All licensed entities must maintain a Swiss registered office. FINMA does not licence shell structures — the management and key functions must be genuinely present in Switzerland.

FINMA Sandbox: Test Without a Licence

The FINMA regulatory sandbox is the starting point for most fintech startups that involve any form of deposit-taking or payment handling. Introduced on 1 August 2017 as part of Switzerland's early fintech regulatory initiative, the sandbox provides a genuine no-licence zone for proof-of-concept and early market testing.

Under the sandbox exemption (Art. 6(2) of the Banking Act Ordinance, BankO), a company may accept public deposits of up to CHF 1 million in total without holding a banking licence or FinTech licence. The exemption is not time-limited and requires no application to FINMA — it is self-executing, provided the conditions are met at all times.

The sandbox conditions are strict and non-negotiable:

• ●CHF 1 million ceiling: Total public deposits held at any time must not exceed CHF 1 million. The cap is on the aggregate balance held, not the number of depositors or individual amounts.
• ●No interest rate differential business: The company may not on-lend the deposits, invest them, or pay interest on them. The funds must be held in a segregated manner and returned on demand. Any form of yield transformation triggers the banking licence requirement.
• ●Mandatory disclosure: Each depositor must be explicitly informed — before making any deposit — that the business is not supervised by FINMA and that the funds are not covered by the Swiss deposit guarantee (esisuisse). This disclosure must be clear, prominent, and documented.
• ●Breach notification: If deposits exceed CHF 1 million, the company must notify FINMA within 10 days and apply for a FinTech licence or banking licence within 30 days. Operating beyond the threshold without authorisation is an enforcement event.

The sandbox does not exempt a company from the Anti-Money Laundering Act. Any company operating in the sandbox that qualifies as a financial intermediary under AMLA must still affiliate with a FINMA-recognised SRO. In practice, most sandbox-stage fintech startups affiliate with an SRO as a first step while they develop their product and user base toward the FinTech licence threshold.

FINMA FinTech Licence (Art. 1b BankG)

The FINMA FinTech licence was introduced on 1 January 2019 as a purpose-built, simplified authorisation pathway for technology-enabled financial services companies that need to hold more than CHF 1 million in public funds but do not need the full deposit-taking and lending capacity of a bank. It sits between the sandbox and a full banking licence in terms of requirements and supervisory intensity.

The key parameters of the FinTech licence under Art. 1b BankG are:

• ●Maximum deposits: Up to CHF 100 million in public deposits or crypto-based assets. Exceeding this threshold requires a full banking licence.
• ●No interest, no investment: As with the sandbox, the deposits may not be invested and no interest may be paid. The business model must be based on fees, not the interest rate spread.
• ●Minimum capital: Paid-up capital of at least CHF 300,000 (or such higher amount as FINMA may require based on the risk profile).
• ●Swiss registered office: The entity must be incorporated and have its registered office and central management in Switzerland.
• ●Fit and proper: Management and qualified shareholders (10% or more of capital or voting rights) must satisfy FINMA's propriety (Gewähr) requirements — good reputation, no criminal convictions for financial offences, no prior enforcement actions.
• ●Organisation: Adequate internal controls, risk management, AML compliance function, and IT security. The requirements are calibrated to the size and risk profile of the applicant, but are lighter than for a full bank.

As of 2025, four institutions held a FinTech licence in Switzerland. The limited take-up reflects both the niche nature of the product (a deposit-holding intermediary that cannot lend) and the regulatory burden relative to the SRO route, which covers a wider range of business models with less capital commitment. The Federal Council's consultation, opened on 22 October 2025, proposed abolishing the FinTech licence and replacing it with two new categories under a revised Financial Institutions Act (FinIA) — a payment instrument institution licence and a crypto-institution licence — removing the CHF 100 million cap and requiring the segregation of client funds. The consultation closed on 6 February 2026 and, as of 2026, the reform had not yet entered into force.

For startups that fit the FinTech licence model — holding customer funds for payment or settlement purposes without lending — the licence provides Swiss-law certainty and the FINMA seal of quality that facilitates banking relationships and institutional partnerships. See the dedicated guide to the FINMA FinTech licence for the full application requirements and process.

Securities Dealer and Investment Services Regulation (FINIG / FIDLEG)

The Financial Institutions Act (Finanzinstitutsgesetz, FINIG) and the Financial Services Act (Finanzdienstleistungsgesetz, FIDLEG), both in force since 1 January 2020, modernised the regulatory framework for securities and investment services in Switzerland. Together they replaced the former concept of the "securities dealer" under the Stock Exchange Act and created a graduated licence structure for financial service providers.

Under FINIG, four categories of financial institution require a FINMA licence: portfolio managers (independent asset managers managing client portfolios on a discretionary basis), trustees (managing assets held in trust), managers of collective investment schemes (fund managers), and securities firms (entities dealing in securities on their own account, market makers, issuing houses, and operators of organised trading facilities). Each category has distinct minimum capital requirements — from CHF 100,000 for portfolio managers to CHF 1.5 million for securities firms that trade on their own account.

FIDLEG governs the conduct of financial services rather than the institutions themselves. It introduced client segmentation (retail, professional, institutional clients), documentation requirements (Key Information Documents for financial instruments), and a registration requirement for client advisers. Financial service providers who are not subject to prudential supervision (for example, foreign advisers servicing Swiss retail clients) must register in a Swiss adviser register maintained by a registration body recognised by FINMA.

For a fintech startup offering portfolio management, investment advisory, or securities execution services, the entry point under FINIG is typically the portfolio manager licence, which has the lightest capital and organisational requirements in the FINIG hierarchy. Since 1 January 2020, all portfolio managers and trustees must be affiliated with a FINMA-recognised Supervisory Organisation (SO) — a new layer of oversight sitting between the individual firm and FINMA.

DLT and Crypto Authorisation Under Swiss Law

Switzerland's approach to crypto and distributed ledger technology regulation is among the most developed globally. FINMA published its initial guidance on token classification and ICO regulatory treatment in February 2018, applying a technology-neutral "same risk, same rules" principle: activities that functionally replicate regulated financial services — custody, lending, securities dealing — require the same authorisation as their traditional equivalents, regardless of the technology used.

Under the 2018 FINMA guidelines, tokens are classified into three categories:

• ●Payment tokens: Pure cryptocurrencies used as a means of payment or value transfer (e.g. Bitcoin, Ether). Subject to AML rules (AMLA/GwG) if exchanged commercially; no securities licence required if no investment return is promised.
• ●Utility tokens: Tokens providing access to a digital platform, application, or service. Generally not treated as securities if the access is the primary purpose and the token has no investment character.
• ●Asset tokens (security tokens): Tokens representing economic rights against an issuer — equity, debt, profit participation, or fund interests. Treated as securities under FIDLEG; the issuer may require a FINMA licence depending on the activity.

The DLT Act (Federal Act on the Adaptation of Federal Law to Developments in Distributed Ledger Technology) came into force on 1 August 2021 and introduced three structural improvements: legal recognition of uncertificated DLT securities (Registerwertrechte), a new DLT trading facility licence under FinfraG for hybrid exchange-settlement venues for tokenised securities, and improved insolvency segregation protection for crypto assets held by custodians. FINMA issued the first DLT trading facility licence to BX Digital AG in March 2025.

Crypto custodians, exchanges, and OTC desks operating in Switzerland typically require SRO membership as a baseline (for AML compliance) and may require a FINMA licence depending on the scale and structure of their operations. See the dedicated guide to the Swiss DLT licence and the overview of the FINMA crypto licence for detailed requirements.

SRO Membership: The Lighter-Touch Compliance Route

For many fintech startups, the most practical first step into Swiss regulatory compliance is affiliation with a Self-Regulatory Organisation (SRO) recognised by FINMA under the Anti-Money Laundering Act (AMLA/GwG). SRO membership does not require a FINMA licence but satisfies the AML supervision obligation for financial intermediaries who are not otherwise directly supervised by FINMA.

Financial intermediaries required to affiliate with an SRO include payment service providers (money remitters, foreign exchange dealers, payment processing platforms), crypto service providers (exchanges, custodians, OTC dealers), smaller independent asset managers (below the FINIG threshold or not yet licensed), fiduciaries, and factoring and leasing companies that qualify as financial intermediaries under AMLA.

Switzerland currently has ten FINMA-recognised SROs. The main ones relevant to fintech and payment startups are:

The SRO application process typically takes 2 to 4 months and involves: submission of the applicant's business description, AML compliance documentation, KYC procedures, management CVs and criminal record certificates, and evidence of adequate internal organisation. SROs conduct annual compliance audits of their members and report serious breaches to FINMA. SRO membership fees vary but are typically CHF 1,500–5,000 per year for smaller firms.

SRO membership is not a substitute for a FINMA licence where one is legally required. If a company's activity triggers a banking, securities, or collective investment licence requirement, SRO membership alone is insufficient. The two tracks are complementary: many licensed institutions are also SRO members (or affiliated with a Supervisory Organisation), and many SRO members eventually grow to the point where a full FINMA licence is required.

Licence Application Process: What to Expect

FINMA licence applications follow a structured process regardless of category. The quality and completeness of the initial application dossier is the single most important factor in the outcome. Incomplete applications are returned for supplementation, which resets the clock and can add months to the timeline.

FINMA charges fees for licence applications based on the actual time spent by its staff, at hourly rates published in the FINMA Fee Ordinance (FinmaGebV). Application fees for a FinTech licence typically run CHF 30,000–80,000; for a securities firm (FINIG) licence, CHF 30,000–100,000; for a banking licence, CHF 80,000–200,000 or more depending on complexity. Legal advisory costs for preparing the application dossier add materially to these figures. Ongoing annual supervision levies (Aufsichtsabgaben) are assessed annually based on balance sheet size and supervised status. FINMA levies these charges on a cost-recovery basis under the FINMA Fees and Charges Ordinance (FINMA-GebV); the indicative ranges above reflect market practice as of 2026 and should be confirmed against FINMA's current fee schedule before budgeting.

Timelines by Licence Category

The overall timeline from the decision to seek FINMA authorisation to receipt of the licence depends on three factors: the complexity of the licence category, the quality of the application dossier, and the responsiveness of FINMA's case officer. The indicative timelines below assume a well-prepared, complete application and a business model that clearly fits the chosen licence category.

These timelines assume the application is submitted as a complete dossier on first submission. Applications returned for supplementary information typically add 3 to 6 months to each listed timeline. FINMA does not publish binding processing commitments; the indicative timelines above are derived from market practice as of 2026, and actual duration depends on current case officer workloads and the complexity of the specific application.

How Goldblum & Partner AG Assists With FINMA Matters

Goldblum & Partner AG has advised Swiss and international financial services companies on FINMA licensing, SRO affiliation, and regulatory assessment from Baarerstrasse 25, 6300 Zug since 2007. The firm's financial regulatory practice covers the full spectrum of FINMA matters relevant to startups and established financial institutions.

Our FINMA-related services include:

• ●Regulatory assessment: Determining the correct FINMA licence category (or confirming that none is required) for a new business model, including fintech desk enquiry preparation and no-action letter submissions
• ●SRO application: End-to-end management of the SRO membership application, including AML procedure drafting, management documentation, and SRO audit preparation
• ●FinTech and FINIG licence applications: Full dossier preparation, business plan review, internal regulation drafting, and liaison with FINMA case officers throughout the process
• ●DLT / crypto structuring: Token classification analysis, ICO/STO regulatory advice, DLT trading facility licence planning
• ●Ongoing compliance support: FINMA reporting obligations, annual audit management, AMLA programme updates, qualified shareholder change notifications

For further reading on specific FINMA authorisation categories, see the dedicated guides on FINMA licences, the FINMA FinTech licence, the FINMA crypto licence, and the Swiss DLT trading facility licence. For the underlying Swiss company structure needed to apply for a FINMA licence, see the guides to Swiss company formation and the Swiss AG.

Legal note: Swiss financial market law is complex and subject to ongoing legislative change. The proposed FinIA reform (consultation opened 22 October 2025, closed 6 February 2026), which would abolish and replace the FinTech licence, had not yet entered into force as of 2026. Timelines and fees stated here reflect market practice as of 2026 and should be confirmed with FINMA or a Swiss financial regulatory counsel before any application is filed. This article does not constitute legal advice.