What is a Swiss SRO (Self-Regulatory Organisation)?

An SRO is a private body that FINMA recognises

An SRO is a private association (usually a Verein under the Civil Code) that Swiss law lets perform a public supervisory function. Its members fund it through their fees; the state does not. What turns an ordinary trade body into a supervisor is recognition: FINMA examines the organisation's regulations, governance and audit programme and, if they meet the statutory standard, recognises it under the AMLA. Recognition is conditional and revocable. FINMA approves changes to an SRO's regulations, inspects how it audits and enforces, and can withdraw recognition if the SRO fails its task.

The result is a deliberate piece of Swiss regulatory design. The state does not directly police every fiduciary, payment firm or crypto broker. It licenses a layer of private bodies to do that for the money-laundering side, then watches those bodies closely. Self-regulation here carries the weight of a statutory duty. The law requires the supervision, delegates it to a recognised body, and keeps that body on a leash through the regulator above it.

One name often gets confused with the SRO: the Supervisory Organisation, or SO. They are separate institutions. An SO is a FINMA-authorised body that conducts the ongoing prudential supervision of portfolio managers and trustees who already hold a FinIA licence. An SRO does AML supervision for intermediaries that hold no prudential licence. The statute differs, the members differ, and the task differs.

What an SRO supervises

An SRO supervises its members' compliance with Swiss anti-money-laundering law, and only that. The Act sets the duties; the SRO turns them into binding regulations and checks that each member meets them. In practice the supervised perimeter covers a defined set of obligations.

• Identification. Verifying the contracting party and establishing the beneficial owner behind every business relationship.
• The risk-based framework. A written AML policy and a documented risk assessment that classify clients and transactions by money-laundering risk. The shape of that analysis is set out in our note on the AML risk assessment.
• Monitoring. Ongoing scrutiny of transactions against the client's expected profile, with special clarification where something does not fit.
• Reporting. Filing a report with the Money Laundering Reporting Office Switzerland (MROS) on reasonable suspicion, and freezing assets where the Act requires.
• Organisation and training. A named AML officer, internal controls and trained staff. Many smaller intermediaries place the officer function with an external AML officer rather than building it in-house.

An SRO enforces this through a recurring AML audit, usually annual, carried out by an auditor it accredits or by its own inspectorate. Where it finds breaches it can impose conditions, fines under its own regulations, and in the worst case expulsion. Expulsion is not a private inconvenience. A member that loses its affiliation and cannot find another, while continuing the activity, is operating without the AML supervision the law demands.

The eleven FINMA-recognised SROs

Eleven self-regulatory organisations are recognised by FINMA as of June 2026, and they are not interchangeable. All apply the same federal law. They differ in the sectors they admit, their working language and their fees. Four of them (VQF, PolyReg, ARIF and SO-FIT) take the broad span of parabanking intermediaries, which is where most crypto, payment, token and fiduciary businesses end up. The remainder are tied to specific industries such as insurance, leasing or asset management.

The remaining seven are narrower. They serve particular trades, sometimes with a single sponsoring federation behind them, and admit only intermediaries from that world. For most internationally owned businesses the practical choice sits among the four above, decided by language, sector fit, cost and how the SRO treats the specific activity. The authoritative roster is FINMA's own published list, and it changes; treat any third-party copy, including this one, as a pointer to that list rather than a substitute for it.

How affiliation differs from a FINMA licence

An SRO affiliation and a FINMA licence answer two different questions, and conflating them is the costliest mistake in this area. A prudential licence asks whether the whole undertaking is fit to be trusted with a regulated activity: its capital, its organisation, the fit-and-proper standing of the people running it. FINMA grants it and supervises the institution directly for as long as it operates. An SRO affiliation asks something far narrower. It asks only whether a financial intermediary's money-laundering controls meet the standard, and it places the supervision of those controls with a private body rather than the state.

The two routes mostly apply to different businesses; the same business rarely gets to pick between them on budget. If the activity is deposit-taking, fund management, securities dealing or professional third-party portfolio management, a sector act requires a prudential FINMA licence, and AML supervision then comes bundled with that licence. If the activity is financial intermediation that touches client money but stays below every licence threshold, the AMLA requires SRO affiliation instead. A licensed bank does not separately join an SRO for its banking activity; an intermediary on the AML route does not hold a licence it does not need.

Which gate a given business goes through is decided by what it actually does, and getting that wrong costs months. We set out the full comparison, threshold by threshold, in our guide to FINMA licence vs SRO membership, and the regulator itself in our explainer on FINMA. The scoping, SRO choice and admission file are covered on our SRO membership service page.

How a business becomes an SRO member

Affiliation is a process with a fixed sequence, closer to an application than to a registration. The duty itself bites once the activity is professional. The Anti-Money Laundering Ordinance (AMLO, SR 955.01) sets the de-minimis thresholds that mark the line: gross profit above CHF 50,000 a year, business relationships with more than 20 contracting parties in a year, unlimited power of disposal over third-party assets above CHF 5 million at any time, or transactions exceeding CHF 2 million in a calendar year. Cross any single one and the activity counts as professional, which triggers the affiliation duty under art. 14 AMLA.

From there the path runs in order. Confirm that the activity is in fact financial intermediation under art. 2 para 3 AMLA. Pick the SRO whose sector, language and rules fit the business. Build the AML framework the chosen SRO will accept: policy, risk assessment, identification procedures, monitoring rules, the named officer. Submit the admission file and answer the SRO's questions. Affiliation completes when the SRO admits the member, after which the recurring audit cycle begins.

In the affiliations we run, the part that bites is rarely the form-filling. It is making the risk assessment and the client-onboarding rules genuinely fit the business before the SRO reads them, because a framework copied from a template invites a round of questions that a properly fitted one avoids, and those rounds are where the weeks go. Crypto and payment models attract the most scrutiny, since their transaction patterns are the hardest to map to a standard risk profile.

One date shapes the whole picture. Until the end of 2019 a financial intermediary could choose to be supervised for AML directly by FINMA, under the directly-subordinated (DSFI) status. The FinSA and FinIA reform abolished that route on 31 December 2019. Since 1 January 2020, SRO affiliation has been the only way for a non-prudentially-licensed intermediary to meet its AML duty. For the businesses on this page, affiliation is the sole route into compliant operation.

What an SRO does not do

The limits of an SRO matter as much as its powers, because most misplaced confidence in the badge sits in one of these gaps.

It does not grant a licence. SRO membership permits nothing. It confirms that an intermediary's money-laundering controls are supervised. It does not authorise the firm to take deposits, manage third-party assets as a profession, run a fund or operate market infrastructure. Those activities need a FINMA licence, and no affiliation substitutes for one.

It does not vouch for the business. An SRO says nothing about a member's capital, its solvency, the quality of its products or the competence of its management. A firm can be fully and properly affiliated and still be a poor place to put money. Affiliation is an AML control, not a seal of financial soundness, and certainly not investment advice.

It does not make the firm "FINMA-regulated". The supervisor of an SRO member is the SRO, not FINMA. FINMA supervises the SRO. A firm that markets its affiliation as a FINMA licence, or implies the regulator stands behind it directly, is overstating its status. That claim, on its own, is reason to look harder.

It does not supervise companies that handle no client money. A Swiss commercial-register entry, a Zug address or a ".ch" domain places a business under no AML supervision by itself. The duty attaches to professional financial intermediation; incorporation alone does not trigger it.

It does not replace the wider compliance build. Affiliation is the supervisory wrapper. The substance, meaning onboarding, screening, monitoring, training and the officer function, still has to be built and run. Those building blocks, and how they fit together for a Swiss intermediary, sit across our AML and compliance guides.