DeFi protocol frontend in Jersey
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Jersey with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- VASP must register under the Designated Business (Registration and Oversight) (Jersey) Law 2019 with the JFSC
- Must comply with the Money Laundering (Jersey) Order 2008 — full CDD including identity verification (government-issued photo ID, proof of address)
- Must identify and verify beneficial owners (25%+ ownership threshold)
- Ongoing transaction monitoring to ensure consistency with customer risk profile
- Enhanced due diligence for PEPs, high-risk jurisdictions, and complex/abnormally large transactions
- Must appoint a Money Laundering Reporting Officer (MLRO) and file Suspicious Activity Reports (SARs) under Proceeds of Crime (Jersey) Law 1999
- Record-keeping obligations under the ML Order
- If the frontend takes fees denominated in virtual assets, the exchange between virtual assets and fiat (or between virtual assets) triggers VASP activities under je.aml.exchange-between-virtual-assets-and and je.aml.exchange-between-one-or-more
- Transfer of virtual assets via the frontend UI triggers additional VASP obligations under je.aml.transfer-of-virtual-assets
- Participation in and provision of financial services related to an issuer's offer/sale of a virtual asset (if relevant) is caught under je.aml.participation-in-and-provision-of
Key Restrictions
- Frontend operator must register as a Designated Business (VASP) with the JFSC under the Designated Business (Registration and Oversight) (Jersey) Law 2019
- Must incorporate locally in Jersey or maintain a registered presence — the JFSC expects a local entity for regulated VASP activities
- If the frontend collects fees (e.g., swap fees, routing fees) this likely triggers FSJL or MLO-regulated activity classifications
- Geofencing of US persons and other high-risk jurisdictions is expected per FATF/JFSC guidance
- Tokens that constitute 'investment products' (shares, units in collective investment funds, profit-sharing rights) may trigger FSJL 1998 requirements, requiring a financial services license beyond VASP registration
- Frontend must not offer services to customers from jurisdictions on the JFSC's high-risk list without enhanced due diligence
- The frontend must implement IP-based and jurisdictional screening to restrict access from prohibited/unsupervised jurisdictions
Key Risks
- Regulatory ambiguity: the JFSC has not issued definitive guidance that a non-custodial DeFi frontend with no control over smart contracts is definitively a VASP — risk of regulatory reinterpretation
- Fee collection (even via smart contract routing) likely crosses the line into regulated activity, creating unlicensed VASP exposure
- Enforcement precedent: JFSC actively penalizes AML/CFT failures (Volopa J£84k penalty; MLRO disqualification for SAR failures)
- If the tokens traded through the frontend are classified as 'investment tokens' (security tokens), the operator may require a full FSJL license, not just VASP registration
- No precedent specifically on DeFi frontends in Jersey — significant first-mover regulatory risk
- Tax/PR risk: Jersey is a low-tax jurisdiction; operating a DeFi frontend from Jersey without clear regulatory blessing could attract negative regulatory and political attention
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
JFSC Guidance Notes for Virtual Asset Service Providers (VASPs): (Crucial document!)
Designated Business (Registration and Oversight) (Jersey) Law 2019: https://www.jerseylaw.je/laws/enacted/Pages/designated-business-(registration-and-oversight)-(jersey)-law-2019.aspx-(jersey)-law-2019.aspx)
Money Laundering (Jersey) Order 2008 (MLO): Sets out the specific AML/CFT obligations for "financial services businesses" and "designated businesses."
Proceeds of Crime (Jersey) Law 1999 (PCL): Defines money laundering and terrorist financing offences.
Safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets.
Participation in and provision of financial services related to an issuer’s offer and/or sale of a virtual asset.
Understanding the Purpose and Nature of the Business Relationship:
Continuously scrutinize transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile.
Politically Exposed Persons (PEPs): Senior foreign and domestic public officials, their family members, and close associates. Enhanced scrutiny of transactions and source of wealth/funds is mandatory.
High-Risk Jurisdictions: Customers or transactions involving countries identified by FATF or the JFSC as having inadequate AML/CFT regimes.
Entity Targeted: Volopa (Jersey) Limited (an e-money institution). Violation Type: Significant and systemic breaches of the Money Laundering (Jersey) Order 2008 concerning its AML/CFT systems and controls. This included failures in client due diligence, transaction monitoring, and governance. While not explicitly stated as crypto-specific, e-money institutions often facilitate transactions that can involve virtual assets, making robust AML controls crucial in this space. Penalty Amount: £395,097 (civil financial penalty).
Entity Targeted: Ms Kateryna Sazonova (former Money Laundering Reporting Officer (MLRO) and Compliance Officer for a licensed trust company). Violation Type: Failure to make a Suspicious Activity Report (SAR) regarding a client whose funds were identified as proceeds of a cyber fraud. Cyber fraud frequently involves the use of virtual assets for the movement and concealment of illicit funds, making this action highly relevant to the crypto space indirectly. Penalty Amount: Prohibited from performing any function as a Money Laundering Reporting Officer, Compliance Officer, or Principal Person for any person registered under regulatory laws in Jersey. No specific financial penalty was imposed on her in this public statement.
Investment Tokens (Security Tokens): These are most likely to be classified as securities. They grant rights similar to traditional securities and are intended for investment purposes. Examples include:
Nature of the Rights: Does the token represent ownership, debt, a right to a share of profits, voting rights, or participation in a collective scheme?
Expectation of Profit: Is there an expectation of profit derived from the efforts of others (e.g., the issuer's management, development of a platform)?
Financial Services (Jersey) Law 1998 (FSJL): This law regulates traditional financial services. Certain virtual asset activities could, in specific circumstances, also fall under its scope, requiring a traditional licence (e.g., if a crypto offering constitutes a collective investment fund or an investment product).
JFSC Designated Business Registration Information:
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a DeFi frontend operated in/from Jersey that takes fees or facilitates virtual asset transfers would likely be a regulated VASP requiring JFSC registration as a Designated Business, full AML/CFT compliance under the Money Laundering Order, and local incorporation; if no fees are taken and the frontend is purely informational/non-custodial the analysis is less clear, but the JFSC's broad VASP definitions create material risk of capture.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?