Remote VASP serving residents in Netherlands
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in Netherlands with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CASP authorization under MiCA (via DNB/AFM) required — includes rigorous UBO integrity screening, fit-and-proper tests, business plan submission, and AML/CTF policies.
- WWFT (Dutch AML Act) mandates DNB AML/CFT registration for exchanges and custodian wallet services, with KYC, transaction monitoring, and suspicious transaction reporting (STR) obligations.
- Travel Rule applies at EUR 0 threshold — no de minimis exemption; transfer-of-value data must accompany all crypto transactions.
- Ongoing AML/CFT supervision by DNB; sanctions screening under the Dutch Sanctions Act enforced by DNB.
- Non-compliance risks administrative fines (DNB/AFM enforcement) and criminal penalties including imprisonment under Wwft.
Key Restrictions
- Cross-border (remote) service to Dutch residents without a MiCA CASP license is unlawful — transitional period ended June 30, 2025.
- A local entity (EU-incorporated and established in the Netherlands or another Member State with passporting) is effectively required to obtain and maintain MiCA authorization.
- Pre-MiCA DNB registration had ~90% rejection rate; DNB and AFM apply stringent integrity screening to UBOs and management.
- Several major exchanges (e.g., Binance, Coinbase) faced DNB enforcement/fines for unregistered operations, indicating active enforcement against remote unlicensed operators.
Key Risks
- Active enforcement precedent: DNB has fined unregistered cross-border operators (Binance, Coinbase); operating without a license carries material enforcement risk.
- Pre-MiCA DNB registration had extremely high rejection rate (~90%), signaling a strict supervisory posture that continues under MiCA.
- Regulatory ambiguity during MiCA transition: post-June 2025, only licensed CASPs may operate; unlicensed remote service is clearly unlawful.
- Travel Rule compliance at EUR 0 threshold imposes operational burden on transaction data flows with no small-value exemption.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
DNB — VASP registration (~90% rejection rate pre-MiCA), AML/CFT supervision
MiCA Regulation (EU) (2023) — CASP authorization, comprehensive crypto regulation
WWFT (Anti-Money Laundering and Anti-Terrorist Financing Act) (2018) — Pre-MiCA VASP AML registration with DNB — rigorous WWFT compliance
VASP: CASP authorization under MiCA via DNB/AFM. Pre-MiCA DNB registration had ~90% rejection rate. Substantial UBO integrity screening. Several exchanges withdrew from Netherlands.
CUSTODY: CASP authorization — custody is a licensed MiCA activity
EXCHANGE: CASP authorization under MiCA; rigorous UBO integrity screening
AFM: Licenses and supervises crypto-asset service providers under MiCAR; opened its digital portal for MiCAR license applications as of April 22, 2024
DNB: Maintains the register of crypto service providers and oversees AML/CFT compliance under the Wwft
Comprehensive: Regulated via Dutch implementation of EU rules (e.g., 5AMLD and MiCA) rather than standalone national laws; covers AML/CTF, licensing, and supervision without prohibiting crypto.
Applies to crypto exchanges, custodian wallet providers, and CASPs; stablecoins and unbacked cryptos (e.g., Bitcoin) have specific oversight.
Transitional period ended June 30, 2025: Existing CASPs could operate under prior rules while applying for MiCA licenses; only licensed entities allowed post-transition.
De Nederlandsche Bank (DNB): Central bank; handles AML/CTF registration for crypto service providers (exchanges, custodians), monitors compliance, supervises stablecoin issuers under MiCA, and enforces Wwft/Sanctions Act. Requires fit-and-proper tests, business plans, and policies for registration.
Dutch Authority for the Financial Markets (AFM): Supervises conduct, handles MiCA license applications/notifications for CASPs (opened portal April 22, 2024), and applies Financial Supervision Act (Wft) if crypto qualifies as financial instruments.
Wwft (Dutch Money Laundering and Anti-Terrorist Financing Act): Implements 5AMLD (effective May 21, 2020); mandates DNB registration for exchanges and custodian wallets, with KYC, transaction monitoring, and suspicious activity reporting. Non-compliance risks fines/imprisonment.
Markets in Crypto-Assets Regulation (MiCA/MiCAR): EU-wide (enacted 2024, licenses effective December 30, 2024); AFM processes applications, promotes transparency; DNB focuses on stablecoins.
Legal and encouraged with oversight: Trading/owning crypto permitted; providers must register with DNB (pre-MiCA) or obtain AFM MiCA licenses post-2025. AFM advises new providers to apply directly for MiCA rather than DNB registration.
Strict enforcement: Fines on unregistered platforms (e.g., Binance, Coinbase).
AFM MiCA portal: Referenced in CMS guide (applications since April 2024).
Travel Rule adopted — threshold: EUR 0 (no threshold under TFR recast)
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a foreign-incorporated remote VASP cannot serve Dutch residents without obtaining a MiCA CASP license (via DNB/AFM), which requires EU establishment, rigorous UBO fit-and-proper screening, full AML/CFT compliance including WWFT registration, and Travel Rule compliance at a EUR 0 threshold; active enforcement against unlicensed remote operators (e.g., Binance, Coinbase fines) makes the risk of operating without a license very high.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?