DeFi protocol frontend in Japan
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Japan with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Comprehensive KYC (CDD) on all Japanese users if the frontend qualifies as a Crypto-Asset Exchange Service Provider (VASP) under the Payment Services Act.
- Transaction monitoring for suspicious activity and reporting to FSA/JFSA via suspicious transaction reports (SARs), aligned with FATF standards.
- Obligation to verify user identity (name, address, date of birth) prior to any crypto-asset transfer or exchange activity.
- Record-keeping requirements for all transactions and customer due diligence data, retention periods under Japanese AML/CFT laws.
- Travel Rule compliance — originator and beneficiary information must be transmitted for transfers of crypto-assets.
Key Restrictions
- Geofencing Japan is likely necessary to avoid triggering CAESP registration requirements, unless the operator is prepared to undergo the full FSA licensing process.
- Taking any fee (e.g., frontend fee, swap fee, routing fee) significantly increases the risk that the operator is deemed a regulated Crypto-Asset Exchange Service Provider.
- Any act of intermediating, matching, or facilitating crypto-asset exchange on behalf of Japanese users is a regulated activity; a purely passive, non-custodial informational interface may not be, but this has not been conclusively tested by the FSA.
- JVCEA (self-regulatory organization) membership is mandatory for licensed VASPs, imposing additional operational rules on token listings and member conduct.
- Customer asset segregation and 100% cold storage recommendations apply if the frontend ever takes custody (even transiently).
- Margin/leverage products cannot exceed 2x leverage if offered.
Key Risks
- Regulatory ambiguity — the FSA has not issued a clear safe harbor for non-custodial DeFi frontends that do not take fees, creating enforcement risk.
- Aggressive enforcement precedent — the FSA has taken action against unregistered crypto exchanges; a DeFi frontend charging fees to Japanese users could be treated as an unregistered VASP.
- JVCEA token listing rules may apply if the frontend curates or presents specific tokens to Japanese users, restricting which protocols can be accessed.
- Tax reporting risk — the NTA may treat frontend fees or revenue as taxable Japanese-source income, creating filing obligations.
- Potential liability under FIEA if the frontend facilitates access to tokens that are classified as security tokens (electronically recorded transferable rights).
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
FSA/JFSA — CAESP registration, exchange oversight, stablecoin regulation, policy development
JVCEA — Mandatory self-regulatory organization — token listing standards (green/white list), operational rules, member monitoring
Payment Services Act (amended 2017, 2020) (2017) — CAESP registration, crypto-asset definition, customer asset segregation
Financial Instruments and Exchange Act (amended 2020) (2020) — Security tokens (electronically recorded transferable rights), crypto derivatives — Type I FIB license
VASP: CAESP registration with FSA. JPY 10M (~$70K USD) minimum capital. Must maintain positive net assets. 100% cold storage recommended for customer assets. JVCEA membership mandatory. 6-18 month application timeline. Token listings pre-screened by JVCEA.
EXCHANGE: CAESP registration required. Margin trading capped at 2x leverage. Stablecoin intermediation requires separate fund transfer service provider registration.
Licensing Requirement: Mandates that all entities operating "Crypto-Asset Exchange Services" (which include buying/selling, exchanging, intermediating, managing, or transferring crypto-assets for others) must register with and obtain a license from the FSA.
Definition of Crypto-Assets: Legally defines crypto-assets as property values that can be used for payment to unspecified persons, can be bought/sold, and can be transferred electronically.
Anti-Money Laundering (AML) & Counter-Terrorist Financing (CFT): Comprehensive Know Your Customer (KYC) procedures, transaction monitoring, and suspicious activity reporting (SAR) obligations. These align with FATF recommendations.
Core Requirements for Licensed Exchanges (VCEPs):
Licensing and Registration: All crypto-asset exchange service providers (VCEPs) must be licensed and registered with the FSA. This is a rigorous process.
Regulator: Financial Services Agency (FSA).
Regulator: National Tax Agency (NTA).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — operating a DeFi frontend targeting Japanese residents likely triggers CAESP registration (VASP license) as a crypto-asset exchange service, particularly if fees are taken or the frontend exercises any control beyond passive display of smart contract data.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?