AFM MiFID II investment firm authorisation in the Netherlands
AFM MiFID II investment firm authorisation in the Netherlands runs through two supervisors at once. A beleggingsonderneming — the Dutch MiFID II investment firm — is licensed under the Wet op het financieel toezicht (Wft), which layers Directive 2014/65/EU (MiFID II), Regulation (EU) 600/2014 (MiFIR) and the Investment Firm Regulation and Directive (IFR / IFD) into national law. Conduct supervision sits with the AFM; prudential supervision sits with DNB. That split shapes everything: how the dossier is structured, who asks which questions, and what reporting switches on the day the licence is granted. This walkthrough covers the legal basis, the IFR Class 2 / Class 3 test that drives the prudential regime, the dossier itself, timing, and how the Dutch track compares with the Spanish ESI, French PSI and Italian SIM.
1. Who grants and who supervises
The Netherlands runs a “twin peaks” model for investment firms:
- AFM — conduct of business, market abuse, marketing communications, customer protection. It is the primary authorisation authority, coordinating with DNB.
- DNB — prudential requirements (capital, K-factors, concentration risk), governance soundness, ICT resilience under DORA, and the integrity/AML framework.
The applicant submits a single file. The two authorities coordinate internally — DNB delivers its prudential and integrity assessment into AFM’s decision — and the applicant receives one authorisation. In practice you should expect two parallel question streams: conduct-flavoured questions from AFM case handlers and balance-sheet and governance questions traceable to DNB.
2. Legal basis
- Directive 2014/65/EU (MiFID II) and Regulation (EU) 600/2014 (MiFIR) — the services catalogue, conduct rules and transaction reporting
- Regulation (EU) 2019/2033 (IFR) and Directive (EU) 2019/2034 (IFD) — the prudential regime for investment firms
- Wet op het financieel toezicht (Wft) — the Dutch implementation, with the licence requirement for beleggingsondernemingen
- Besluit Gedragstoezicht financiële ondernemingen Wft — the conduct-of-business decree fleshing out the Wft
- AFM and DNB policy notices and guidance — the operational layer applicants actually work against
3. The MiFID II services in Dutch law
The Wft mirrors the MiFID II Annex I catalogue. The main services a licence can cover:
- Het ontvangen en doorgeven van orders — reception and transmission of orders
- Het uitvoeren van orders voor rekening van cliënten — execution of orders on behalf of clients
- Het handelen voor eigen rekening — dealing on own account
- Beheer van een individueel vermogen — portfolio management
- Het geven van beleggingsadvies — investment advice
- Het overnemen en plaatsen van financiële instrumenten — underwriting and placing
- Het exploiteren van een multilaterale handelsfaciliteit — operating an MTF, and equivalently an OTF
Scope discipline matters. Every service you tick expands the dossier: dealing on own account pulls in market-risk K-factors and the highest capital floor; portfolio management pulls in suitability and assets-under-management reporting. Apply for what the three-year business plan actually needs.
4. IFR Class 1 / 2 / 3 — the test that drives everything prudential
The IFR splits investment firms into classes. Class 1 firms — the very largest, dealing on own account or underwriting at systemic scale — are pushed toward the credit-institution regime and are not the subject here. The real decision for a fintech applicant is Class 2 versus Class 3. Class 3 firms are “small and non-interconnected” (SNI) under the IFR Article 12 conditions; they benefit from a reduced prudential and reporting regime. Class 2 firms compute the full K-factor requirement and file the fuller COREP-IFR set. The framework is identical for the Spanish ESI, French PSI and Italian SIM — see our Spanish ESI piece for the threshold-test detail.
5. Capital floors and ongoing own funds
IFR Article 9 sets the initial capital floors by service: €75,000, €150,000 or €750,000. Broadly: firms that only receive and transmit orders or advise, without holding client money or securities, sit at the low floor; dealing on own account and underwriting sit at the top floor; most other combinations sit in the middle. Ongoing own funds must equal the highest of three numbers: the permanent minimum (the floor), the fixed-overheads requirement, and — for Class 2 firms — the K-factor requirement. Class 3 firms skip the K-factor leg but never fall below the floor or the fixed-overheads requirement.
6. Two worked examples
Example A — execution-only broker app.
Facts: a Dutch fintech wants to offer an execution-only trading app for retail clients: reception and transmission plus execution of orders, no own-account dealing, client assets held via a custody chain. Projected year-three client order handling is modest and assets safeguarded stay well inside the SNI thresholds.
What the rule says: the service set avoids the €750,000 floor reserved for own-account dealing and underwriting. If all IFR Article 12 SNI conditions hold, the firm is Class 3: no K-factor calculation, reduced reporting, own funds at the higher of the floor and the fixed-overheads requirement.
What the practitioner does: documents the SNI test in the capital plan, but sizes initial capital off the fixed-overheads requirement — a quarter of projected annual fixed overheads typically exceeds the floor well before year three. Presenting only the floor invites an immediate DNB question about viability.
Example B — portfolio manager scaling toward Class 2.
Facts: a robo-advisory portfolio manager projects assets under management crossing the SNI ceiling in year two of the business plan.
What the rule says: once any Article 12 condition fails, the firm becomes Class 2: full K-factor requirement (here driven by K-AUM), fuller COREP-IFR reporting, and IFD governance and remuneration requirements bite harder.
What the practitioner does: applies as a Class 2 firm from the outset — or at minimum presents the transition in the capital plan with the K-factor model already built. Filing as Class 3 while the plan shows a year-two breach reads as either careless or optimistic, and both cost review time.
7. What goes in the dossier
English or Dutch are both accepted; English is common for international founders. The investment-firm-specific elements:
- Programme of operations anchored to the specific MiFID II services and instruments
- Business plan with three-year financial projections, base and stress case
- Governance — the dagelijks beleidsbepalers (day-to-day policymakers), supervisory-board members, and fit-and-proper testing of each of them by AFM and DNB
- Internal-control framework — compliance, risk and audit functions, plus the MiFID II conflicts-of-interest, best-execution and suitability policies
- ICT and DORA framework — ICT risk management, incident handling, third-party register
- Capital plan — initial own funds, the classification test, K-factor calculation where relevant
- AML/CFT programme under the Wwft
- Conduct framework — client categorisation, suitability/appropriateness, complaints handling
- MiFIR transaction-reporting framework — how Article 26 reports will be produced and controlled from day one
8. Realistic timing
MiFID II sets a six-month statutory assessment period running from a complete application. “Complete” is the operative word: the clock effectively restarts with every substantial information request. End-to-end — pre-application contact, drafting, filing, question rounds, fit-and-proper interviews — a first-time applicant should plan for nine to twelve months.
9. What switches on at grant
- MiFIR Article 26 transaction reporting to the AFM — daily, from the first reportable trade
- IFR / IFD prudential reporting via DNB’s Digitaal Loket Rapportages, on the COREP-IFR templates
- AFM conduct returns and marketing-communication rules
- AML/CFT obligations under the Wwft
- Passporting notifications for services into other EEA states
10. How the Dutch track compares
| Regime | Authority model | Prudential framework | Notable feature |
|---|---|---|---|
| Netherlands (beleggingsonderneming) | AFM conduct + DNB prudential, single file | IFR / IFD | English-language dossier accepted |
| Spain (ESI) | Single CNMV track | IFR / IFD | One authority handles conduct and prudential |
| France (PSI) | Split between conduct and prudential authorities | IFR / IFD | Structure comparable to the Dutch split |
| Italy (SIM) | Split between conduct and prudential authorities | IFR / IFD | Structure comparable to the Dutch split |
The substance — services, capital, K-factors, conduct rules — is uniform EU law. What differs is process: who you talk to, in which language, and how the question rounds are run.
FAQ
Why are two authorities involved in one licence?
Dutch law splits investment-firm supervision “twin peaks” style: AFM handles conduct, DNB handles prudential and integrity. You file once; they coordinate internally and one authorisation comes out.
Can the application dossier be in English?
Yes. AFM and DNB accept English-language files, which is one of the practical attractions of the Dutch track for international groups.
How much initial capital do I need?
The IFR Article 9 floor is €75,000, €150,000 or €750,000 depending on the services. In practice the binding number is usually the fixed-overheads requirement or, for Class 2 firms, the K-factor sum — whichever is highest.
Can a beleggingsonderneming offer crypto-asset services?
For financial instruments under MiFID II — such as security tokens — yes, within the licensed services. For MiCA-scope crypto-assets a separate CASP authorisation is needed.
Is the Dutch licence passportable across the EEA?
Yes. MiFID II passporting applies: the firm notifies the AFM, which transmits the notification to host-state authorities for services or branches.
How is client money handled?
Under the MiFID II safeguarding rules as implemented in Dutch law: segregation of client funds and instruments, robust reconciliation, and the arrangements evidenced in the application file.
How long does authorisation really take?
The statutory review is six months from a complete file, but realistic end-to-end timing for a first-time applicant is nine to twelve months including pre-application and question rounds.
What to do, today
- CFO: run the IFR Class 2 / Class 3 threshold test on projected year-three numbers and size own funds off the highest of the three legs, not the floor.
- CEO: request coordinated pre-application meetings with AFM and DNB before drafting — the feedback reshapes the file.
- COO / CTO: build the MiFIR Article 26 transaction-reporting layer in parallel with the application; it must work from the first trade.
- Compliance: start fit-and-proper documentation for every board member now — it is the usual critical-path item.
- Everyone: map the full post-grant reporting catalogue before submission so day one is not a surprise.
Related: Investment firm Spain · AMF MiFID France · CONSOB MiFID Italy
