FINMA: Switzerland's financial market regulator

What does FINMA supervise?

FINMA supervises every prudentially licensed financial institution in Switzerland and the market infrastructure those institutions trade on. The Financial Market Supervision Act (FINMASA, SR 956.1) is the umbrella statute; the sector acts below define who needs authorisation and what FINMA polices in each case.

One neighbouring institution is often confused with FINMA: the Swiss National Bank. Monetary policy, interest rates and the franc belong to the SNB, not the regulator. How the central bank, FINMA and the commercial banks divide the work is mapped in our guide to the Swiss banking system.

What does FINMA do?

FINMA performs four statutory tasks: it authorises, it supervises, it enforces and it resolves. Authorisation is the gate: no bank, insurer, securities firm, fund institution or portfolio manager may operate in or from Switzerland without the licence its activity requires. Supervision is the standing work: monitoring capital, liquidity, governance and conduct for as long as the licence exists.

The five supervisory categories

FINMA grades every supervised institution into one of five supervisory categories using measurable criteria: total assets, assets under management, privileged deposits and required capital. Category 1 holds the extremely large, complex institutions whose failure could destabilise the financial system; since the 2023 takeover of Credit Suisse, UBS is the standing example. Category 5 holds small firms watched through quantitative indicators and examined closely only when something looks off. The category decides how intensive the supervision is, and how high the annual levy runs.

The audit-firm model

FINMA does not inspect most institutions itself. Switzerland runs a dual supervisory system in which licensed audit firms conduct the periodic regulatory audit as FINMA's extended arm, with the supervised institution paying for its own audit. Portfolio managers and trustees have a further layer: their day-to-day supervision sits with a FINMA-authorised Supervisory Organisation (SO), with FINMA above it. Only the largest banks and insurers see intensive direct supervision, including on-site reviews and stress tests.

Resolution is the fourth task. FINMA is Switzerland's resolution authority for banks and insurers, running restructuring and bankruptcy proceedings when prevention fails. The largest case to date: on 19 March 2023 FINMA approved the takeover of Credit Suisse by UBS and ordered roughly CHF 16 billion of AT1 capital instruments written down — a demonstration that its crisis powers reach investors, not only managers.

How do you check whether a firm is FINMA-regulated?

FINMA publishes two tools that answer the question in minutes, and both are free. The first is the directory of authorised institutions, individuals and products, searchable by name and licence category. Every bank, insurer, securities firm, fund institution, portfolio manager and trustee holding a FINMA licence appears there; a firm that claims a Swiss licence but is absent from the directory does not have one.

The second is the FINMA warning list: companies and individuals that may be carrying out unauthorised activities, often while presenting themselves as Swiss-regulated. Two caveats apply. Inclusion signals missing authorisation, not a court finding of illegality. And the list is not exhaustive and is not updated daily, so absence from it proves nothing on its own.

A reliable check runs in this order:

• Take the exact legal name from the contract or website imprint, not the marketing brand.
• Search that name in the FINMA directory of authorised institutions.
• Check the warning list for the name and any individuals behind it.
• If the firm claims only SRO membership, verify it on that SRO's own member list. SRO members do not appear in FINMA's licence directory.
• Match the claimed status to the service sold: an AML affiliation is not an asset-management licence, and a commercial-register entry is not regulation at all.

What enforcement powers does FINMA have?

FINMA's enforcement powers are administrative and sit in arts. 29–37 FINMASA. Where it finds violations of supervisory law, it can:

• order measures to restore compliance and issue declaratory rulings naming the breach (arts. 31–32 FINMASA);
• ban individuals from senior positions in the supervised sector for up to five years (art. 33 FINMASA);
• publish its final ruling, naming the firm or person (art. 34 FINMASA);
• confiscate profits earned through the breach: disgorgement, not a penalty (art. 35 FINMASA);
• appoint an investigating agent inside the firm, at the firm's cost (art. 36 FINMASA);
• withdraw the licence and, for unauthorised operators, order liquidation (art. 37 FINMASA).

What FINMA cannot do is fine anyone. Disgorgement strips the gain but adds no punishment on top, and FINMASA gives the regulator no power to impose monetary penalties. Criminal offences under the financial-market acts (operating without a licence among them) are prosecuted by the Federal Department of Finance, while insider trading and market manipulation fall to the Office of the Attorney General. Where FINMA suspects a crime, it files the complaint and hands over the file.

How does FINMA regulate crypto?

FINMA regulates crypto by substance, not by label, and it moved earlier than most peers. Its 16 February 2018 ICO guidelines sorted tokens into three categories (payment, utility and asset tokens), each mapped to existing financial-market law. The DLT framework that followed amended ten federal acts, entering into force in stages during 2021 and creating ledger-based securities and a DLT trading facility licence from 1 August 2021.

Stablecoins came next: FINMA's guidance of 26 July 2024 set out when an issuer takes deposits under the Banking Act, the conditions for default guarantees from banks, and the heightened money-laundering and sanctions risks it expects issuers to control. Today a crypto exchange or custody business typically operates as a financial intermediary under AMLA, while a federal consultation that closed in February 2026 prepares two dedicated licence categories (a Payment Instrument Institution licence and a Crypto-Institution licence) expected to enter into force in 2027 with a one-year transition. What that means for a crypto business in practice is set out in our guide to the Swiss crypto licence.

What FINMA does not do

The limits matter as much as the powers, because most misplaced expectations of FINMA fall in one of five gaps.

It does not vet investment quality. A licence confirms capital, organisation and fit-and-proper management, not that the products are sound or the strategy sensible. FINMA pays no compensation for investment losses and does not arbitrate individual client disputes; complaints against a bank go to the Swiss Banking Ombudsman.

It does not supervise ordinary companies. A Swiss commercial-register entry, a Zug address or a ".ch" domain places a firm under no financial supervision whatsoever.

It does not directly supervise AML-only intermediaries. Fiduciaries, payment firms and crypto brokers below the prudential threshold are supervised day to day by one of the eleven FINMA-recognised self-regulatory organisations, as of June 2026: the affiliation route described in our SRO membership guide. FINMA supervises the SROs, not each member.

It does not insure deposits. Deposit protection up to CHF 100,000 per client per bank is run by esisuisse, a private industry-funded scheme, as of June 2026.

It does not prosecute, and it does not set monetary policy. Criminal cases belong to the Federal Department of Finance and the Attorney General; interest rates belong to the SNB.

How do supervised firms deal with FINMA?

For a firm, FINMA is first a gatekeeper and then a standing counterparty. The relationship begins with the licence: confirming which category the activity falls under, building the application file and carrying it through the supervisory dialogue; the process, capital thresholds and timelines are covered in our FINMA authorisation service page. In the authorisation files we run, the rounds that consume the most time are the fit-and-proper evidence for the proposed managers and the AML section of the business plan, rarely the capital threshold, which is usually the simplest condition to satisfy.

After approval the relationship becomes a cycle. The firm undergoes its periodic regulatory audit by a licensed audit firm or its Supervisory Organisation, files reports and applications through FINMA's electronic survey and application platform (EHP), and pays the annual supervisory levy scaled to its category. Material changes (new owners, new managers, new business lines) need notification or fresh approval before they happen, not after. The licence categories, capital figures and SRO alternatives are covered in detail across our FINMA licensing guides.