Menu

Regulatory

William O’Rorke, Founding Partner at ORWL Avocats
Updated 12 November 2026
William O’Rorke
Partner

ORWL Avocats advises crypto-asset service providers, payment and e-money institutions, token and stablecoin issuers and tokenisation projects, from France and abroad, from the qualification of their business to ongoing compliance.

Specialists in banking and financial regulation, our lawyers have advised fintechs, exchanges, regulated institutions and foreign groups since 2018 and have handled several dozen authorisations. They combine the rigour of that discipline with close knowledge of crypto-asset services, stablecoins and tokenisation: business models, flows and technical constraints. We work in English and French before the AMF (Autorité des marchés financiers, the French financial markets regulator), the ACPR (Autorité de contrôle prudentiel et de résolution, the French Prudential Supervision and Resolution Authority), the Banque de France and the ANJ (Autorité nationale des jeux, the French gaming regulator).

MiCA has applied since 30 December 2024, and the transitional period for French-registered digital asset service providers (PSANs) ended on 1 July 2026: a provider without an authorisation or a passport must stop serving French clients, while a French authorisation can open the whole European Union. We advise on every rule at stake: MiCA, the Payment Services Directive (PSD2) and the Electronic Money Directive, the Digital Operational Resilience Act (DORA), anti-money laundering and counter-terrorist financing (AML/CFT) rules and the travel rule, MiFID II for tokenised financial instruments, and the ongoing revision of the payment services framework (PSD3 and the Payment Services Regulation, PSR).

How we can assist

Launching a project

Qualify the business and the tokens, choose the right status, prepare the offer.

Getting authorised

Build the application and handle the dialogue with the regulator through to the decision.

Staying compliant

Meet the commitments made in the application and adapt the organisation as the business changes.

Dealing with the regulator

Prepare for an inspection, respond to the AMF or the ACPR, organise an orderly exit.

Expertises

We advise crypto-asset and payment businesses throughout their regulatory life cycle, according to their status.

Crypto-asset service providers (CASPs)

AMF authorisation, ongoing MiCA compliance, AML/CFT and the travel rule, operational resilience, a new shareholder or a change of management, cessation of business: we advise CASPs at every stage of their regulatory life.

Payment and e-money institutions

Full authorisation, simplified authorisation (agrément simplifié), agent or e-money distributor status, dual status with a CASP authorisation, the Banque de France review of the security of payment means, and changes in capital subject to ACPR approval.

Issuers, stablecoins and tokenisation

Token qualification, crypto-asset white papers and admission to trading, stablecoin issuance, tokenisation of financial instruments and real-world assets, and legal opinions on token qualification for platforms that admit a token.

Foreign providers

MiCA passport, authorised French subsidiary, reverse solicitation, French marketing rules, removal from the AMF blacklist: we advise EU and third-country providers that serve the French market.

Crypto and Web3 start-ups

Games with monetisable digital objects (JONUM, a French regime), NFTs and marketplaces, DeFi protocols and staking, promotion by influencers and affiliates: we qualify the project and secure its launch.

Crypto-assets and MiFID II

Banks, investment firms and asset managers that provide crypto-asset services, CASPs that offer investment services or distribute tokenised fund units: we choose the route, handle the notification or the authorisation and reconcile MiCA and MiFID II.

AI agents, payments and crypto-assets

AI agents that initiate payments, place orders on crypto-assets or run a wallet: we qualify each function of the agent under PSD2 and MiCA and structure the product, both for the fintechs that build these agents and for the payment institutions and CASPs that open their services to them.

The firm also advises these businesses on the tax side of their activity, including the reporting obligations of CASPs under DAC8, through its tax practice.

Which activity, which status, which regulator?

ActivityStatusAuthorityHow we help
Crypto-asset servicesCrypto-asset service provider (CASP) authorisationAMF, after an opinion from the ACPRFrom the qualification of the services to authorisation, then day-to-day compliance.
Payment and e-moneyPayment or e-money institution authorisation, simplified authorisation, agent or distributorACPR; Banque de France for the security of payment meansChoice of status, authorisation, long-term compliance.
Token and stablecoin issuanceNotification of a white paper; for an e-money token, credit institution or e-money institution statusAMF for most tokens; ACPR for stablecoinsToken qualification and a secure issuance.
Foreign providerMiCA passport, authorised French subsidiary or reverse solicitationHome-country authority; AMFAccess to the French market and local compliance.
Web3 games, NFTs and DeFiDepending on the qualification: no status, a JONUM declaration or one of the statuses aboveANJ for JONUM; AMF or ACPR depending on the activityProject qualification and a secure launch.
Crypto-assets and financial instrumentsArticle 60 notification for an institution already authorised; investment firm authorisation or a partnership for a CASPACPR or AMF depending on the institution; home-country authority for an institution authorised elsewhere in the EUChoice of route, notification or authorisation, distribution agreements.
AI agents and paymentsDepending on what the agent does: no status, payment institution or CASP authorisation, or reliance on an authorised partnerACPR for payment services; AMF for crypto-asset servicesQualification of each function of the agent and structuring of the product.

Key achievements

A fintech wished to provide crypto-asset services in France without holding any status. We qualified each of its services, set the strategy for the application, drafted the programme of operations and the procedures, including the AML/CFT framework, and structured its organisation. We assisted it in all its exchanges with the AMF and the ACPR until it obtained its authorisation as a crypto-asset service provider.

A project whose token was already in circulation sought its admission to trading on a platform. We qualified the token under MiCA, drafted the white paper and assisted the issuer in its exchanges with the AMF. The token was admitted to trading on a secure footing.

A fintech wanted to offer an integrated service in fiat currency and crypto-assets. We ran in parallel its applications for CASP authorisation with the AMF and for payment institution authorisation with the ACPR, aligning the MiCA and PSD2 requirements on own funds, governance and internal control. The fintech obtained both authorisations and operates under dual status.

A business offered crypto-asset staking and lending services to retail and corporate clients. We analysed the risk of the model being requalified as an investment service or a collective investment scheme and proposed a compliant structure. We monitored for it the review of MiCA and the consultations of the European Securities and Markets Authority (ESMA) and the AMF, and assisted it in its exchanges with the regulators.

An international exchange was on the AMF blacklist. We assisted it in its relations with the AMF and other national regulators to design and implement an orderly exit from the French market. This plan led to its removal from the blacklist.

A crypto-asset service provider authorised in another Member State wished to serve the French market. We assisted it with the notification of its passport and the launch of its services in France. The passport does not settle everything: we brought its activities into line with the MiCA rules applicable in France, AML/CFT rules and consumer law, dealt with the tax questions raised by a possible establishment and its structure, and negotiated its contracts with local partners, in particular on marketing.

The publisher of a Web3 game with monetisable digital objects had to enter the JONUM regime. We analysed its business, handled the whole declaration process and assisted the publisher before the ANJ, before and after the declaration, to adapt its game to the regime. The project became compliant and secured its operations.

Why ORWL Avocats?

We advise regulated institutions and applicants for authorisation on the matters that determine their status: qualification, authorisation, governance, own funds, internal control and relations with the supervisory authorities. The authorisations we handle before the AMF and the ACPR concern fintechs, exchanges, regulated institutions and foreign groups. The firm is ranked by Chambers and Partners in FinTech and by Leaders League in blockchain.

As a boutique firm, we have particular command of crypto-asset services, stablecoins and tokenisation: business models, technical flows and the distinctions that determine status, such as the one between exchange and the execution of orders. A partner leads every matter. Where needed, the firm coordinates its clients’ accountants, cybersecurity providers, insurers and banks.

The firm contributes to legal scholarship and industry policy work. William O’Rorke, partner, is the author of Droit des crypto-actifs (LexisNexis, in French) and of the “PSCA” chapter of the LexisNexis encyclopaedia. He teaches the regulation of crypto-assets at the Paris Bar School (EFB) (in French) and in several master’s programmes. ORWL Avocats is involved in ADAN, the French association for the development of digital assets, where William O’Rorke sits on the board.

A lawyer’s advice gives your business a legal qualification, engages the lawyer’s professional liability and is protected by legal professional privilege.

Team

Our team brings together lawyers in banking and financial regulation who understand how crypto-assets and payments work technically. We work with a network of partners to provide complete support: cybersecurity firms, accountants, statutory auditors, insurance brokers, banks and law firms in other jurisdictions.

William O’Rorke, Founding Partner at ORWL Avocats
William O’Rorke

Frequently asked questions

They advise and represent businesses that provide crypto-asset services or payment services, or that issue tokens: qualification of the business, choice of status, authorisation application, ongoing compliance and relations with the AMF, the ACPR, the Banque de France and the ANJ. The lawyer is professionally liable for the advice, and exchanges with the client are protected by legal professional privilege.

Yes. We advise providers and groups established in other Member States and in third countries, both on entering the French market and on obtaining an authorisation in the European Union. We work in English and French and coordinate, where needed, with counsel in other jurisdictions.

Yes. Since the end of the transitional period on 1 July 2026, a provider serving clients in France must be authorised as a CASP by the AMF, or be authorised in another Member State and passport its services into France. Reverse solicitation, at the exclusive initiative of the client, remains a narrow exception. We handle these CASP authorisation applications.

The AMF authorises CASPs and receives the white papers of most tokens. The ACPR authorises payment and e-money institutions, supervises stablecoin issuers, gives an opinion on CASP applications and supervises their AML/CFT framework. The same project often falls under both authorities, for example under dual CASP and payment institution status.

Providers registered as PSANs that have not obtained MiCA authorisation can no longer provide their services in France. The AMF recommended that they prepare an orderly wind-down plan by 30 March 2026 at the latest. We assist these providers in winding down their business.

A CASP authorised in another Member State can do so under the MiCA passport, after notification to its home authority. A third-country provider must in principle set up an authorised entity in the European Union. Advertising aimed at the French public without authorisation exposes a provider to the AMF blacklist. We assist these foreign providers with access to the French market.

It depends on the qualification. Fungible tokens fall in principle under MiCA, genuinely unique NFTs are excluded, and only genuinely decentralised services fall outside the Regulation. A game with monetisable digital objects falls under the French JONUM regime and requires a declaration to the ANJ. We qualify these crypto and Web3 projects before launch.

Respond quickly, with counsel, and make no commitment you have not checked: the first exchanges shape what follows. Being on the blacklist is not final. Removal requires ceasing any offer to the French public and demonstrating this to the AMF. We handle these removals from the blacklist.

Contact us

Tell us about your project or situation: a lawyer from the Regulatory team will get back to you to assess what is at stake.

Your contact details
Name of the project or company
About your project or needs
Would you like to add a document? Deck, description of your needs, useful documents – PDF only, 10 MB maximum
Select files or drag them here

    Droit crypto-actifs blockchain
    Articles
    4 February 2021
    3 QUESTIONS: Towards a crypto-assets and blockchain law