DeFi protocol frontend in France
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in France with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- KYC/identity collection — collect, verify, and store identity documents (e.g. two forms of ID) for users accessing the frontend (fr.aml.collect-verify-and-store-identity)
- Ongoing transaction monitoring — monitor all transactions routed through the frontend for ML/FT indicators (fr.aml.ongoing-transaction-monitoring-kyb-for)
- Enhanced Due Diligence (EDD) for high-risk cases including PEPs, transactions over €1,000 to self-hosted wallets, or cross-border activities (fr.aml.enhanced-due-diligence-edd-for)
- KYB for corporate clients — identify beneficial ownership structures (fr.aml.ongoing-transaction-monitoring-kyb-for)
- ML/FT risk assessment systems must be in place (fr.aml.ongoing-transaction-monitoring-kyb-for)
- Sanctions compliance screening (fr.aml.amlcft-for-casps-since-december)
- FATF Travel Rule compliance for transfers (fr.aml.markets-in-crypto-assets-regulation-mica)
- Suspicious transaction reporting to TRACFIN (fr.licensing.tracfin-handles-suspicious-transaction-reports)
- DAC8 reporting — report user crypto transactions to tax authorities from January 1, 2026 (fr.licensing.dac8-implementation-finance-bill-2025)
- Managers and beneficial owners of the operator must be verified during AMF registration (fr.aml.managers-and-beneficial-owners-verified)
Key Restrictions
- DeFi frontend likely constitutes a CASP (crypto-asset service provider) under MiCA if it provides execution of orders on behalf of users or custody/transfer services as an intermediary — the frontend operator, not the underlying protocol, is the regulated entity
- Must obtain CASP authorization from the AMF — a capital-intensive process with minimum capital requirements (EUR 125,000–350,000 depending on services) and multi-month application (3–6 months)
- The 6-month transition window for existing registrants (PSANs → CASP by June 30, 2025) has passed; new entrants must apply directly for full CASP authorization
- Local entity incorporation required — the regulated CASP must be established in France/EU
- Geofencing of US persons and other sanctioned/restricted jurisdictions is required as part of AML/CDD obligations
- Fee-taking (e.g., frontend fees, swap fees, routing fees) strengthens the case that the frontend is providing a regulated service under MiCA — it reflects order execution as a business activity
- If the frontend is purely informational (no transaction routing, no fees, no user onboarding), it may escape CASP classification — but most commercial DeFi frontends do not meet this narrow exception
Key Risks
- AMF has taken an expansive view of what constitutes a regulated crypto service — a DeFi frontend that routes user transactions and takes fees is likely treated as a CASP, even if the underlying protocol is permissionless
- Enforcement risk: AMF and ACPR actively monitor unregistered operators serving French residents; no safe harbor for 'decentralized' frontends that charge fees or maintain user-facing interfaces
- Regulatory ambiguity about where the line is drawn between 'informational' frontends (unregulated) and 'execution' frontends (regulated) — operators must assess actual service characteristics
- DAC8 tax reporting obligations from 2026 add operational cost and data collection requirements that may conflict with pseudonymity expectations of DeFi users
- High licensing burden (capital, compliance program, governance) may be disproportionate for small DeFi frontend operators
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
The AMF is the French competent authority for MiCA CASP authorisation, and France is the second-largest EU home of authorised CASPs (AMF, 6 July 2026). Circle Internet Financial Europe SAS is listed by ESMA as an AMF-authorised CASP from 23 April 2026 and, separately, as an ACPR-supervised e-money institution issuing the EURC and USDC e-money tokens since 1 July 2024.
The ACPR (Autorité de contrôle prudentiel et de résolution) is the French prudential and AML/CFT supervisor for banks and insurers, applying Monetary and Financial Code articles L. 561-2 ff. and R. 561-1 ff.; under the PACTE regime it gave its AML/CFT opinion on each PSAN before AMF registration.
MiCA Regulation (EU) (2023) — CASP authorization, comprehensive crypto regulation
France applied the full 18-month MiCA transitional period: PSANs registered or licensed under French law could keep serving clients until 1 July 2026. Since 2 July 2026 only crypto-asset service providers (PSCA) authorised under MiCA may provide crypto-asset services in France; the AMF reported 31 French authorisations on 6 July 2026.
Operating a trading platform for crypto-assets is a MiCA Class 3 service requiring minimum capital of €150,000 (Regulation (EU) 2023/1114, Annex IV). In France it requires AMF authorisation as a PSCA, mandatory for all providers since the PSAN transition ended on 1 July 2026.
Custody and administration of crypto-assets on behalf of clients is a MiCA Class 2 service requiring minimum capital of €125,000 (Regulation (EU) 2023/1114, Annex IV). In France the AMF authorises CASPs offering it; the ESMA interim register listed 36 AMF-authorised French entries on 14 October 2026.
MiCA sets CASP minimum capital at €50,000 (Class 1), €125,000 (Class 2, including custody and exchange) or €150,000 (Class 3, trading platforms) under Annex IV of Regulation (EU) 2023/1114. French PSANs had until 1 July 2026 to obtain AMF authorisation, and transfers of crypto-assets follow Regulation (EU) 2023/1113, which the ACPR lists as in force.
Collect, verify, and store identity documents (e.g., two forms of ID); use third parties permitted.
Under Regulation (EU) 2023/1113, which the ACPR lists among AML/CFT texts in force in France, a CASP handling a transfer exceeding €1,000 to or from a self-hosted address must verify whether that address is owned or controlled by its client; enhanced vigilance for politically exposed persons is covered by ACPR guidelines under Monetary and Financial Code articles L. 561-2 ff.
Ongoing transaction monitoring, KYB for corporate clients (beneficial ownership), and ML/FT risk assessment systems.
Since the PSAN regime ended on 1 July 2026, management and shareholder checks run through AMF authorisation under MiCA: the AMF must refuse a CASP whose management body members lack sufficiently good repute and competence (Art 68(1)) or whose qualifying shareholders are unsuitable (Regulation (EU) 2023/1114, Art 63(10)). Under the former PSAN regime the ACPR gave an AML/CFT opinion before AMF registration.
Evidence fact fr.aml.amlcft-for-casps-since-december not found (may have been renamed).
Tracfin, the French financial intelligence unit under the Ministry of the Economy, receives AML/CFT suspicious-transaction declarations; the ACPR and Tracfin have issued joint guidelines on vigilance obligations and on declarations and information to Tracfin.
France's transposition of DAC8 (Council Directive (EU) 2023/2226), including the instrument, its date and the reporting duties of crypto-asset service providers, has no French primary source reachable on 14 October 2026.
France has replaced the PSAN regime with MiCA authorisation: the AMF stated on 6 July 2026 that the transition from the loi PACTE regime ended on 2 July 2026, that France had authorised 31 crypto-asset service providers and that 283 were authorised across the EU. The ESMA interim register listed 36 AMF-authorised French entries on 14 October 2026.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a DeFi protocol frontend that routes user transactions and takes fees is likely classified as a CASP under MiCA in France, requiring full AMF authorization, local entity incorporation, comprehensive AML/KYC obligations, geofencing of restricted jurisdictions, and DAC8 tax reporting, with no safe harbor for protocol decentralization alone.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?