Self-custodial wallet / non-custodial software in Denmark
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Denmark with a local entity, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- Non-custodial wallet software publishers that merely provide software (no custody, no control over keys/funds) are not captured by the Danish AML Act (hvidvaskloven) as VASPs, because they do not fall under the defined VASP activities: exchange between fiat and virtual currencies, exchange between virtual currencies, custodian wallet provision, or other services related to virtual assets.
- If the software publisher nevertheless engages in any ancillary service that triggers VASP classification (e.g., integrated swapping, on-ramp facilitation where the publisher handles funds), full AML obligations attach under hvidvaskloven: CDD/EDD, enterprise-wide risk assessment, beneficial ownership identification, ongoing transaction monitoring, and suspicious transaction reporting.
- Registration with Finanstilsynet (the Danish FSA) is required if the entity's activities bring it within scope of VASP definitions under the AML Act.
Key Restrictions
- The publisher must not exercise any custody, control, or access over user private keys or funds — doing so would trigger VASP classification and full AML/licensing obligations.
- Any integrated services (e.g., in-wallet swapping, staking, fiat on-ramps) that involve the publisher handling virtual assets could bring the activity into scope of the AML Act.
- Marketing or offering the wallet in Denmark may need to consider Danish consumer protection law and the Danish Marketing Practices Act.
Key Risks
- Regulatory ambiguity: If the software provides integrated DeFi or swap features where the publisher collects fees or routes transactions, Danish regulators may reclassify the activity as a 'crypto-asset service' under MiCA, requiring CASP authorization from December 30, 2024.
- MiCA's scope (effective Dec 30, 2024 for most provisions) may capture non-custodial wallet providers that offer transfer services as part of the wallet interface, potentially requiring CASP authorization and full compliance.
- Enforcement risk: Finanstilsynet may scrutinize whether features like QR-code scanning, ENS resolution, or swap aggregation constitute 'crypto-asset services' even without custody.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Lov om forebyggende foranstaltninger mod hvidvask og finansiering af terrorisme (hvidvaskloven) – The Money Laundering Act.
This is the core Danish law that transposes the EU's 4th, 5th, and 6th Anti-Money Laundering Directives (AMLDs).
The 5th AMLD (Directive (EU) 2018/843) was particularly significant for bringing virtual asset service providers under the scope of AML/CFT regulations, requiring them to register and comply with the same obligations as traditional financial institutions.
Exchange between virtual currencies and fiat currencies.
The remaining provisions of MiCA apply from December 30, 2024.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — A pure non-custodial wallet software publisher (no access to keys/funds) does not trigger VASP/AML classification under Danish law today, but any ancillary service involving handling of virtual assets or integrated transfer functions may bring it into scope, and MiCA's CASP regime (effective Dec 30, 2024) may capture non-custodial providers offering transfer services, requiring authorization from Finanstilsynet.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?