DeFi protocol frontend in France
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in France with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- KYC/identity collection — collect, verify, and store identity documents (e.g. two forms of ID) for users accessing the frontend (fr.aml.collect-verify-and-store-identity)
- Ongoing transaction monitoring — monitor all transactions routed through the frontend for ML/FT indicators (fr.aml.ongoing-transaction-monitoring-kyb-for)
- Enhanced Due Diligence (EDD) for high-risk cases including PEPs, transactions over €1,000 to self-hosted wallets, or cross-border activities (fr.aml.enhanced-due-diligence-edd-for)
- KYB for corporate clients — identify beneficial ownership structures (fr.aml.ongoing-transaction-monitoring-kyb-for)
- ML/FT risk assessment systems must be in place (fr.aml.ongoing-transaction-monitoring-kyb-for)
- Sanctions compliance screening (fr.aml.amlcft-for-casps-since-december)
- FATF Travel Rule compliance for transfers (fr.aml.markets-in-crypto-assets-regulation-mica)
- Suspicious transaction reporting to TRACFIN (fr.licensing.tracfin-handles-suspicious-transaction-reports)
- DAC8 reporting — report user crypto transactions to tax authorities from January 1, 2026 (fr.licensing.dac8-implementation-finance-bill-2025)
- Managers and beneficial owners of the operator must be verified during AMF registration (fr.aml.managers-and-beneficial-owners-verified)
Key Restrictions
- DeFi frontend likely constitutes a CASP (crypto-asset service provider) under MiCA if it provides execution of orders on behalf of users or custody/transfer services as an intermediary — the frontend operator, not the underlying protocol, is the regulated entity
- Must obtain CASP authorization from the AMF — a capital-intensive process with minimum capital requirements (EUR 125,000–350,000 depending on services) and multi-month application (3–6 months)
- The 6-month transition window for existing registrants (PSANs → CASP by June 30, 2025) has passed; new entrants must apply directly for full CASP authorization
- Local entity incorporation required — the regulated CASP must be established in France/EU
- Geofencing of US persons and other sanctioned/restricted jurisdictions is required as part of AML/CDD obligations
- Fee-taking (e.g., frontend fees, swap fees, routing fees) strengthens the case that the frontend is providing a regulated service under MiCA — it reflects order execution as a business activity
- If the frontend is purely informational (no transaction routing, no fees, no user onboarding), it may escape CASP classification — but most commercial DeFi frontends do not meet this narrow exception
Key Risks
- AMF has taken an expansive view of what constitutes a regulated crypto service — a DeFi frontend that routes user transactions and takes fees is likely treated as a CASP, even if the underlying protocol is permissionless
- Enforcement risk: AMF and ACPR actively monitor unregistered operators serving French residents; no safe harbor for 'decentralized' frontends that charge fees or maintain user-facing interfaces
- Regulatory ambiguity about where the line is drawn between 'informational' frontends (unregulated) and 'execution' frontends (regulated) — operators must assess actual service characteristics
- DAC8 tax reporting obligations from 2026 add operational cost and data collection requirements that may conflict with pseudonymity expectations of DeFi users
- High licensing burden (capital, compliance program, governance) may be disproportionate for small DeFi frontend operators
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
AMF — CASP authorization — most experienced EU NCA for crypto. Circle chose France for EU MiCA authorization.
MiCA Regulation (EU) (2023) — CASP authorization, comprehensive crypto regulation
VASP: CASP authorization under MiCA via AMF. SHORT 6-month transition (existing PSANs had to apply by June 30, 2025). 3-6 months (AMF is experienced). France positioning as EU crypto hub.
EXCHANGE: CASP authorization — EUR 150,000 minimum capital for trading platforms
CUSTODY: CASP authorization — custody is a licensed MiCA activity (EUR 50,000 minimum capital)
Markets in Crypto-Assets Regulation (MiCA): Enhances transparency, security, and AML for crypto providers; DASPs must transition to CASP licensing with minimum capital (€125,000–€350,000) and FATF Travel Rule compliance.
Collect, verify, and store identity documents (e.g., two forms of ID); use third parties permitted.
Enhanced Due Diligence (EDD): For high-risk cases like PEPs, transactions over €1,000 to self-hosted wallets, or cross-border activities.
Ongoing transaction monitoring, KYB for corporate clients (beneficial ownership), and ML/FT risk assessment systems.
Managers and beneficial owners verified during AMF registration.
Evidence fact fr.aml.amlcft-for-casps-since-december not found (may have been renamed).
TRACFIN: Handles suspicious transaction reports for AML/CFT.
DAC8 implementation (Finance Bill 2025, effective January 1, 2026): Requires CASPs and tied providers to report user crypto transactions to tax authorities.
French adaptations to MiCA: Order (October 15, 2024), Decree (February 21, 2025), Law (April 30, 2025); replaced DASP regime with CASP licensing, integrated electronic money tokens (EMTs), and aligned with EU standards. Over 100 DASPs registered previously.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a DeFi protocol frontend that routes user transactions and takes fees is likely classified as a CASP under MiCA in France, requiring full AMF authorization, local entity incorporation, comprehensive AML/KYC obligations, geofencing of restricted jurisdictions, and DAC8 tax reporting, with no safe harbor for protocol decentralization alone.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?