DeFi protocol frontend in Japan
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Japan with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Comprehensive KYC (CDD) on all Japanese users if the frontend qualifies as a Crypto-Asset Exchange Service Provider (VASP) under the Payment Services Act.
- Transaction monitoring for suspicious activity and reporting to FSA/JFSA via suspicious transaction reports (SARs), aligned with FATF standards.
- Obligation to verify user identity (name, address, date of birth) prior to any crypto-asset transfer or exchange activity.
- Record-keeping requirements for all transactions and customer due diligence data, retention periods under Japanese AML/CFT laws.
- Travel Rule compliance — originator and beneficiary information must be transmitted for transfers of crypto-assets.
Key Restrictions
- Geofencing Japan is likely necessary to avoid triggering CAESP registration requirements, unless the operator is prepared to undergo the full FSA licensing process.
- Taking any fee (e.g., frontend fee, swap fee, routing fee) significantly increases the risk that the operator is deemed a regulated Crypto-Asset Exchange Service Provider.
- Any act of intermediating, matching, or facilitating crypto-asset exchange on behalf of Japanese users is a regulated activity; a purely passive, non-custodial informational interface may not be, but this has not been conclusively tested by the FSA.
- JVCEA (self-regulatory organization) membership is mandatory for licensed VASPs, imposing additional operational rules on token listings and member conduct.
- Customer asset segregation and 100% cold storage recommendations apply if the frontend ever takes custody (even transiently).
- Margin/leverage products cannot exceed 2x leverage if offered.
Key Risks
- Regulatory ambiguity — the FSA has not issued a clear safe harbor for non-custodial DeFi frontends that do not take fees, creating enforcement risk.
- Aggressive enforcement precedent — the FSA has taken action against unregistered crypto exchanges; a DeFi frontend charging fees to Japanese users could be treated as an unregistered VASP.
- JVCEA token listing rules may apply if the frontend curates or presents specific tokens to Japanese users, restricting which protocols can be accessed.
- Tax reporting risk — the NTA may treat frontend fees or revenue as taxable Japanese-source income, creating filing obligations.
- Potential liability under FIEA if the frontend facilitates access to tokens that are classified as security tokens (electronically recorded transferable rights).
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
The FSA (with Local Finance Bureaus) registers and supervises crypto-asset exchange service providers (PSA Art. 63-2) and EPI exchange service providers (Art. 62-3), and drafted Law No. 64 of 2026, which moves crypto-asset trading to the FIEA; that law’s crypto provisions are not yet in force.
JVCEA is the certified association under PSA Art. 87, but membership is not mandatory: an applicant may instead adopt equivalent internal rules (PSA Art. 63-5(1)(vi)). New tokens require prior notification to the JVCEA, which may object (Rule on Handling of Crypto-Assets Art. 5); it also audits and sanctions members.
The Payment Services Act (Act No. 59 of 2009) crypto regime of registration, customer verification and asset segregation took effect in April 2017; a 2019 amendment in force May 2020 made changes to handled crypto-assets subject to prior notice, added advertising rules and required user crypto to be held in cold wallets in principle.
The 2019 FIEA and PSA amendment (in force May 2020) brought security tokens and crypto-asset derivatives under the FIEA; Law No. 64 of 2026, promulgated 23 Jul 2026, moves crypto-asset trading regulation from the PSA to the FIEA, but its crypto provisions take effect on a date set by cabinet order within one year of promulgation and are not yet in force.
Crypto-asset exchange service providers register under PSA Art. 63-2 with capital of at least ¥10 million and non-negative net assets (CAESP Ordinance Art. 9). Cold storage is mandatory except a 5% hot-wallet cap (Art. 27(2)). JVCEA membership is optional if equivalent internal rules are adopted (PSA Art. 63-5(1)(vi)); new tokens need prior notice to the JVCEA.
Crypto-asset exchange business requires Payment Services Act Art. 63-2 registration; individual margin must be at least 50% of the position, i.e. 2x maximum leverage (CAESP Ordinance Art. 25(5)(i)). Dealing in or intermediating stablecoins requires registration as an electronic payment instrument exchange service provider (PSA Arts. 2(10), 62-3); the FSA listed 2 as of 27 Aug 2026.
Crypto-asset exchange business under Payment Services Act Art. 2(15) covers buying, selling or exchanging crypto-assets, intermediating, brokering or acting as agent for these, managing user money in connection with them, and custody of crypto-assets for others; it requires registration with the Prime Minister (Art. 63-2), not a licence.
Payment Services Act Art. 2(14) defines crypto-assets as electronically recorded property values usable for payment to unspecified persons and tradeable with unspecified persons, or exchangeable for such values, transferable electronically; fiat, currency-denominated assets, electronic payment instruments and FIEA electronically recorded transferable rights are excluded.
Crypto-asset exchange service providers are specified business operators under the Act on Prevention of Transfer of Criminal Proceeds (Act No. 22 of 2007, Art. 2(2)(xxxii)); they must conduct customer verification (Art. 4), file suspicious transaction reports (Art. 8), and notify originator and beneficiary information to the receiving provider on customer crypto transfers to other providers (Art. 10-5).
Evidence fact jp.licensing.core-requirements-for-licensed-exchanges not found (may have been renamed).
All crypto-asset exchange service providers (暗号資産交換業者, CAESPs) must be registered with the Prime Minister under Payment Services Act Art. 63-2; the PSA regime is a registration, not a licence, and the FSA register listed 27 registered providers as of 1 Sep 2026.
Regulator: Financial Services Agency (FSA).
Regulator: National Tax Agency (NTA).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — operating a DeFi frontend targeting Japanese residents likely triggers CAESP registration (VASP license) as a crypto-asset exchange service, particularly if fees are taken or the frontend exercises any control beyond passive display of smart contract data.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?