← Regulations / Israel / Operating Models / DeFi frontend

DeFi protocol frontend in Israel

Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.

Conditional AI-Generated · Unreviewed

DeFi frontend is conditionally permitted in Israel with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • VASP (FASP) license from ISA/CMISA required if the frontend operator exercises control, takes fees, or provides a service in financial assets
  • Customer screening against sanctions lists (including OFAC SDN) using KYC, transaction monitoring, and blockchain analytics
  • Travel Rule compliance for transfers — counterparty sanctions verification under FATF standards adopted in Israel
  • Ongoing real-time monitoring and regulatory engagement obligations under CMA/ISA supervision
  • IMPA AML rules apply — integrated AML compliance program required

Key Restrictions

  • Taking fees (e.g. swap fees, frontend fees) likely triggers classification as a 'service provided in a financial asset' under the Supervision of Financial Services Law — requiring a FASP license
  • If no fees taken and no user screening, the frontend may fall outside regulated activity, but regulatory guidance on DeFi/DAOs is still under evaluation by ISA committee on decentralized offerings
  • Must be an Israeli citizen/resident of legal age (or solvent corporation) with no convictions for financial offenses to obtain a license
  • Banking access historically challenging; banking sector only gradually opening after landmark court cases and Bank of Israel guidance
  • Transactions may need to route through licensed entities in the 'closed garden' model for licensed operators

Key Risks

  • Enforcement risk: ISA may treat fee-taking frontends as unlicensed VASPs even if the protocol is decentralized
  • Regulatory ambiguity: ISA committee evaluating decentralized offerings; no settled guidance on whether a non-custodial, non-fee-taking frontend is a regulated activity
  • Banking access risk: Despite improvements, obtaining and maintaining banking relationships remains operationally difficult
  • AML/CTF exposure: Failure to screen users or implement Travel Rule compliance for Israeli users could trigger IMPA enforcement
  • Legislative flux: National Crypto Strategy Committee interim report proposes a unified regulator and token issuance rules with 2026 legislative steps — obligations may change materially

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 40% confidence

ISA — Securities regulation, crypto oversight

licensing 40% confidence

CMISA — Financial Asset Service Provider licensing

licensing 40% confidence

Israel Money Laundering Prohibition Authority — AML/CFT compliance

licensing 20% confidence

Financial Asset Service Providers Regulation Law (2023) — FASP licensing covering crypto exchange, custody, portfolio management. Framework matured 2023-2024 after years of uncertainty.

licensing 20% confidence

VASP: Financial Asset Service Provider (FASP) License from ISA/CMISA. ILS 300,000-1,000,000 (~$80K-$270K USD) depending on activity type. 6-12 months. Banking sector gradually opening after landmark court cases and Bank of Israel guidance.

licensing 20% confidence

EXCHANGE: FASP license. Strong crypto startup ecosystem but banking access historically challenging.

licensing 20% confidence

Being an Israeli citizen/resident of legal age, legally competent, and not bankrupt (for individuals); or solvent for corporations.

licensing 20% confidence

No convictions for offenses unfit for financial handling.

licensing 20% confidence

ISA committee evaluating decentralized offerings; ongoing stablecoin regulation likely under BOI.

licensing 60% confidence

Supervision of Financial Services (Regulated Financial Services) Law: Core licensing framework (no direct URL in results; see CMA site via ).

licensing 60% confidence

Exchanges: Require a license as a "service provided in a financial asset" under the Supervision of Financial Services Law from the CMA. Recent ISA amendments (August 2024) allow non-bank Tel Aviv Stock Exchange (TASE) members (e.g., brokerages) to offer trading in approved cryptocurrencies like Bitcoin and Ethereum via licensed exchanges.

licensing 60% confidence

Custody Providers: Need the same CMA financial asset service license for management or custody of virtual currencies; Israeli Trust Act provisions may also apply. Transactions must route through licensed entities in the "closed garden" model.

licensing 60% confidence

Receive decision; ongoing obligations include real-time monitoring and regulator engagement.

aml 20% confidence

Screening Obligations: VASPs must screen customers, counterparties, wallets, and transactions against these lists using integrated KYC, transaction monitoring, and blockchain analytics; OFAC may list specific crypto addresses on the SDN List, requiring blocking of associated assets.

aml 20% confidence

Crypto Travel Rule Alignment: Under FATF standards adopted in Israel, VASPs comply with Travel Rule-like requirements for transfers, including counterparty sanctions verification; EU's Regulation (EU) 2023/1113 (MiCA-related) influences via cross-border operations, applying to all qualifying crypto transfers without thresholds since December 2024.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — A DeFi protocol frontend operator that takes fees or screens Israeli users likely requires a FASP license from ISA/CMISA (high burden, capital ILS 300K–1M), with full KYC/AML/Travel Rule obligations; a pure non-fee, non-screening interface operates in regulatory ambiguity with an ISA committee still evaluating decentralized offerings.

Questions this verdict aims to answer

  • Is operating the frontend a regulated activity even if the protocol is decentralized?
  • What geofencing or KYC obligations apply?
  • Does fee-taking change classification?