Self-custodial wallet / non-custodial software in Netherlands
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Netherlands without local incorporation, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- No AML obligations attach to the publisher of self-custodial wallet software because the entity never holds, controls, or has access to user funds or private keys.
- Facts only reference AML duties (KYC, transaction monitoring, STRs) under the Wwft for 'exchanges and custodian wallets' (nl.licensing.wwft-dutch-money-laundering-and); self-custodial software publishers do not fall within this custodial scope.
- No CASP authorization (MiCA) is triggered because custody, exchange, and transfer services all require the provider to hold or control the crypto assets — pure non-custodial software does not meet any MiCA service definition.
Key Restrictions
- The software must not include any value-added service where the publisher temporarily holds, transfers, or has access to user funds (e.g., an integrated fiat on-ramp where the publisher acts as intermediary).
- If the software facilitates fiat-to-crypto or crypto-to-fiat conversions directly (not via third-party integrations), it may trigger CASP classification under MiCA.
- Consumer-protection or disclosure rules (e.g., Wft) may apply if the wallet software is marketed as a financial service, but this is untested for pure non-custodial tools.
Key Risks
- Regulatory ambiguity: Dutch regulators could take the view that wallet publishers facilitating connectivity to DeFi protocols or integrated swap features constitute a 'transfer service' under MiCA, triggering licensing requirements.
- Enforcement precedent: DNB has shown aggressive enforcement (Binance, Coinbase fines) and may interpret MiCA expansively to ensnare non-custodial providers with ancillary features.
- No explicit safe harbor or exemption for non-custodial software publishers in the regulatory facts provided; determination rests on the functional definition of 'custody' under MiCA.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
DNB — VASP registration (~90% rejection rate pre-MiCA), AML/CFT supervision
MiCA Regulation (EU) (2023) — CASP authorization, comprehensive crypto regulation
WWFT (Anti-Money Laundering and Anti-Terrorist Financing Act) (2018) — Pre-MiCA VASP AML registration with DNB — rigorous WWFT compliance
VASP: CASP authorization under MiCA via DNB/AFM. Pre-MiCA DNB registration had ~90% rejection rate. Substantial UBO integrity screening. Several exchanges withdrew from Netherlands.
CUSTODY: CASP authorization — custody is a licensed MiCA activity
Applies to crypto exchanges, custodian wallet providers, and CASPs; stablecoins and unbacked cryptos (e.g., Bitcoin) have specific oversight.
Wwft (Dutch Money Laundering and Anti-Terrorist Financing Act): Implements 5AMLD (effective May 21, 2020); mandates DNB registration for exchanges and custodian wallets, with KYC, transaction monitoring, and suspicious activity reporting. Non-compliance risks fines/imprisonment.
Dutch Financial Supervision Act (Wft/FSA): Applies if crypto is a security or e-money.
Strict enforcement: Fines on unregistered platforms (e.g., Binance, Coinbase).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Pure non-custodial wallet software (no custody/control of keys or funds) is not classified as a VASP or CASP under Dutch law and carries no AML obligations, but any ancillary integrated service (swap, fiat on-ramp) may trigger MiCA licensing requirements.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?