# Acquiring a CySEC CIF: Section 22 Change-in-Control Vetting

> Execute a Cyprus CIF M&A acquisition under Law 87(I)/2017 Sec. 22 (MiFID II Art. 11): 10%/20%/30%/50% thresholds, 60-day clock, and AML SOW vetting.

Canonical: https://eurofirmledger.com/bulletins/cysec-m-and-a-change-in-control-section-22-qualifying-holdings
Last updated: 2026-11-14T19:49:25.901Z

**Publication:** Euro Firm Ledger
**Category:** Cysec Cif Icf Safeguarding Directives
**Published:** 2026-11-13T09:50:25.915Z
**Author:** Lukas Lindqvist, CEFA (Certified European Financial Analyst (EFFAS/CEFA, Frankfurt & Zurich))
**Reviewer:** Not recorded

## Answer-first summary

Buying an existing Limassol CIF license to skip greenfield setup is NOT a rubber-stamp shortcut: Section 22 of Law 87(I)/2017 subjects every buyer crossing 10%, 20%, 30%, or 50% ownership to exhaustive source-of-wealth vetting.

## Key takeaways

- Under Section 22 of Law 87(I)/2017, acquiring or increasing a holding across 10%, 20%, 30%, or 50% in a CySEC CIF requires prior written CySEC non-opposition—closing without approval voids voting rights and triggers fines.
- Although the statutory review clock is 60 working days (plus 20–30 working-day RFI clock-stops), realistic Section 22 CIF acquisitions take 5 to 9 months due to rigorous 10-year AML Source-of-Wealth audits.
- Buyers acquiring shares of an existing CIF inherit 100% of its historical CySEC TRS enforcement inquiries, URN client complaints, and EUR 50,000 CyFO restitution exposures—making a 24-month SPA escrow holdback essential.
- Under CRR Article 36(1)(b), M&A goodwill counts for EUR 0 toward CET1 Own Funds—buyers must fund goodwill premiums at HoldCo level and never leverage the CIF itself.

## Related financial entities

- **Cyprus Investment Services and Activities Law (CySEC)** (CYSEC-CIF) — license: Statutory framework administered by CySEC transposing MiFID II, governing the authorization and operational requirements of Cypriot Investment Firms.
- **European Securities and Markets Authority (ESMA)** (ESMA) — license: Independent European Union authority contributing to safeguarding the stability of the EU financial system by enhancing investor protection and promoting stable markets.
- **MiFID II Cross-Border Passporting Framework** (MIFID2-PASS) — license: Harmonized European framework allowing authorized investment firms to provide investment services across all EU member states and EEA countries.

## Analysis

Every week in Limassol, corporate M&A brokers pitch foreign fintech groups, prop-trading founders, and private-equity buyers on *"buying an existing ready-made EUR 150k or EUR 750k CySEC CIF license in 30 days instead of waiting 12 months for a new license!"* Buyers who wire non-refundable deposits believing that sales pitch get burned badly: under **Section 22 of Cyprus Law 87(I)/2017** (transposing **MiFID II Articles 11–13** and the **Joint ESMA/EBA/EIOPA Guidelines on the Prudential Assessment of Acquisitions of Qualifying Holdings, JC/GL/2016/01**), **no share transfer crossing 10%, 20%, 30%, or 50% of voting rights or capital is legally valid until [CySEC](/competent-authorities/cysec) grants prior written non-opposition**—backed by forensic AML **Source-of-Wealth (SOW) and Source-of-Funds (SOF) audits** going back a decade!

Within our [CySEC CIF & ICF master guide](/bulletins/cysec-cif-authorisation-eur-20000-icf-safeguarding-guide-2026) and the [CySEC safeguarding hub](/topics/cysec-cif-icf-safeguarding-directives), compare M&A acquisition mechanics against our [Greenfield Law 87(I)/2017 CIF Authorization Guide](/bulletins/cyprus-law-87-i-2017-cif-authorisation-tiers-6-month-timeline) before signing any Share Purchase Agreement (SPA).

## Section 22 Qualifying Holding Thresholds & The Five Statutory Assessment Criteria

Under **Section 22(1) of Law 87(I)/2017**, any natural or legal person (or persons **"acting in concert"**—splitting 100% into eleven 9.09% cousins NEVER fools CySEC!) proposing to acquire or increase a **Qualifying Holding (>= 10%)** or cross **20%, 30%, or 50%** must pass all five statutory tests in **Commission Delegated Regulation (EU) 2017/1946**:

| Statutory Vetting Pillar (Del. Reg. 2017/1946) | Exact Evidentiary Proof Demanded by CySEC | Common Deal-Killer Red Flag in Limassol M&A |
| :--- | :--- | :--- |
| **1. Reputation of Proposed Acquirer** | Apostilled criminal-record certificates (<3m), regulator good-standing letters across all past firms, tax clearance, & litigation search | Buyer previously owned or directed an **unlicensed offshore broker blacklisted by CONSOB, CNMV, AMF, or BaFin**! |
| **2. Reputation & Competence of New Board** | Personal Questionnaires (PQs) + live interviews for incoming [Cyprus-resident Four-Eyes Directors](/bulletins/cysec-limassol-substance-four-eyes-executive-director-residency) | Buyer tries firing competent local directors and installing inexperienced associates |
| **3. Financial Soundness of Acquirer** | 3 years of audited personal net-worth / group IFRS statements proving unleveraged ability to fund SPA price + **3-year capital plan** | Buying a CIF using **borrowed debt (leveraged buyout)** repaid out of CIF dividends! |
| **4. Prudential & Organizational Compliance** | Full 3-year **Business Plan + [ICARA](/bulletins/ifd-article-24-icara-internal-capital-wind-down-stress-testing)** if business model shifts (e.g., dormant wealth shell -> retail CFD broker!) | Buying a dormant A1/A2 CIF expecting automatic expansion into A3 B-book without a separate Section 7 license-extension filing! |
| **5. Zero AML / Terrorist Financing Risk (SOW/SOF)** | Complete audited **bank-to-bank money trail** from original tax-declared income/dividends/exit to the Cyprus SPA escrow IBAN! | **Unverified offshore crypto wealth** or dividends from opaque BVI/Seychelles shells lacking audited accounts & tax returns! |

![Statutory 60-working-day plus clock-stop timeline for acquiring a Qualifying Holding in a CySEC CIF under Law 87(I)/2017 Section 22](/api/figure?type=flow&title=Law%2087%28I%29%2F2017%20Section%2022%20CIF%20Change-in-Control%20Statutory%20Timeline&subtitle=How%20the%2060-working-day%20assessment%20clock%2C%2020%2F30-day%20clock-stops%2C%20and%20SPA%20escrow%20interact&steps=1.%20Forensic%20Due%20Diligence%3A%3AAudit%20target%20CIF%20TRS%2C%20DI87-01%20recs%2C%20URN%20complaints%20%26%20hidden%20CySEC%20fines!%7C2.%20Conditional%20SPA%20%26%20Escrow%3A%3ASign%20SPA%20strictly%20conditional%20on%20CySEC%20Sec.%2022%20approval%20%28100%25%20refundable%20escrow%29%7C3.%202d%20Ack%20%2B%2060WD%20Clock%3A%3ACySEC%20acknowledges%20completeness%20in%202WD%3B%2060-working-day%20review%20%28%2B20%2F30WD%20stop%29%7C4.%20Completion%20Deadline%3A%3AReceive%20non-opposition%20-%3E%20close%20share%20transfer%20within%20CySEC%E2%80%99s%20max%20window!&metrics=QUALIFYING%20TRIGGERS%3A%3A10%2F20%2F30%2F50%25%3A%3AIncludes%20%22acting%20in%20concert%22%7CSTATUTORY%20CLOCK%3A%3A60%20Working%20Days%3A%3A%2B20WD%20%28EEA%29%20or%20%2B30WD%20%28Non-EEA%29%20stop!%7CUNAPPROVED%20CLOSING%3A%3AVoting%20Rights%20Void%3A%3ALaw%2087%28I%29%2F2017%20Sec.%2022%287%29%20sanction!%7CREALISTIC%20DEAL%20TIME%3A%3A5%20to%209%20Months%3A%3ADossier%20prep%20%2B%20RFI%20clock-stops)

## Buyer Beware: Hidden Legacy Skeletons Inside "Clean" Target CIF Shells!

Why do seasoned M&A lawyers warn that **acquiring an existing 10-year-old CIF carries *more* tail liability than applying for a brand-new greenfield CIF**? Because when you acquire shares of Target CIF Ltd (unlike an asset purchase), **you inherit 100% of Target CIF Ltd's historical regulatory, tax, and client-restitution liabilities**! Before signing any SPA, run a ruthless forensic audit across four traps:
1. **Unnotified CySEC Inspection Letters & Pending Enforcement**: Demand complete read-only access to the target's **[TRS Inbox/Outbox](/bulletins/cysec-prudential-form-165-01-xbrl-portal-quarterly-filings)** over the past 5 years—sellers routinely omit "pending inquiry letters" from CySEC Market Surveillance that crystallize into a **EUR 250,000 administrative settlement 6 months after you buy the company**!
2. **Latent [CyFO EUR 50,000 Claims](/bulletins/cysec-financial-ombudsman-cyprus-adr-complaint-handling-metrics) & URN Logs**: Pull the complete URN Complaints Register and all 5-year VoIP call recordings in Spain, Italy, and Germany—retail clients have up to 12–24 months to surface mis-selling claims!
3. **Qualified Safeguarding Audit Rate Hangover**: Check whether the target CIF received a *Qualified* external auditor DI87-01 opinion last April—locking you into the punitive **1.00% ICF contribution rate** ([ICF risk-based levies](/bulletins/cysec-icf-risk-based-ex-ante-contributions-extraordinary-buffer))!
4. **Dormancy Revocation Clock (Section 8(1)(a) — 6 Months Non-Use)**: If the seller shut down active client trading **more than 6 months ago**, CySEC has statutory power under Section 8(1)(a) to declare the license lapsed for non-use!

## Quantitative Buy-vs-Build Total Cost & Timeline Model (Section 22 M&A vs Section 7 Greenfield)

Compare the **True All-In Cash & Risk-Adjusted Cost** of buying an existing **EUR 750,000 A1+A2+A3+B1 CIF shell** at current Limassol market Goodwill premiums versus building a clean greenfield CIF from scratch:

```formula
CySEC_EUR_750k_CIF_Buy_vs_Build_Total_Acquisition_Cost_Model (2026_Market_EUR):
 Route_A_Buy_Existing_EUR_750k_CIF_Via_Section_22 (Realistic Closing = 6 to 9 Months):
 Net_Asset_Value_Paid_Dollar_For_Dollar (Existing CET1 Cash/HQLA) = EUR 850,000 (Remains inside CIF!)
 Non_Recoverable_Shell_Goodwill_Premium_Paid_To_Seller = EUR 450,000 to EUR 750,000! (Deducted/Outside CIF CET1!)
 Forensic_Legal_Tax_IT_Safeguarding_M&A_Due_Diligence + Sec22_Advisory = EUR 85,000
 Interim_Target_Substance_Burn_During_7m_CySEC_Review_Escrow_Split = EUR 140,000
 Recommended_SPA_Indemnity_Holdback_Escrow (24 Months for Fines/CyFO) = >= EUR 250,000 of Seller Goodwill!
 Total_Sunk_Non_CET1_Transaction_Premium (Route_A) = EUR 675,000 to EUR 975,000!

 Route_B_Greenfield_Law_87_I_2017_Section_7_Application (Realistic Approval = 9 to 13 Months):
 Injected_CET1_Share_Capital (EUR 750k PMR + Buffer) = EUR 900,000 (100% Remains Your Own Cash!)
 Licensing_Legal_ICARA_Advisory + CySEC_Application_Fees + Pre_Live_Setup = EUR 115,000 to EUR 165,000
 Historical_Legacy_Fine_And_CyFO_MisSelling_Liability = EUR 0.00!
 Net_Sunk_Cost_Savings_Of_Greenfield_Build = Saves EUR 510,000 to EUR 810,000 in Seller Goodwill + Zero Legacy Tail Risk!
```

![Sunk non-capital acquisition cost and timeline comparison between buying an existing EUR 750k CySEC CIF shell under Section 22 versus greenfield licensing](/api/figure?type=bars&title=Buy%20vs%20Build%20a%20EUR%20750k%20CySEC%20CIF%3A%20Sunk%20Cost%20%26%20Risk%20Comparison&subtitle=Comparing%20non-recoverable%20seller%20goodwill%20premiums%20against%20clean%20greenfield%20setup%20costs&steps=Buy%20CIF%20%20Seller%20Goodwill%3A%3AEUR%20450k%E2%80%93750k%20non-recoverable%20license%20premium%20%28%2BEUR%20850k%20NAV%29%7CBuy%20CIF%20%20DD%20%2B%20Burn%20Cost%3A%3A%2BEUR%20225k%20forensic%20legal%2FTRS%20audit%20%2B%20interim%207m%20substance%20burn%7CBuild%20Greenfield%20Sunk%20Cost%3A%3AEUR%20115k%E2%80%93165k%20total%20licensing%2Fsetup%20fees%20%28%2BEUR%20900k%20YOUR%20cash%29%7CSeller%20Indemnity%20Escrow%3A%3AHold%20back%20%3E%3DEUR%20250k%20for%2024m%20against%20hidden%20TRS%2FCyFO%20claims!&metrics=GOODWILL%20SAVED%3A%3AEUR%20510k%E2%80%93810k%3A%3AGreenfield%20vs%20shell%20purchase%7CTIME%20DIFFERENCE%3A%3AOnly%20~3%E2%80%934%20Months%3A%3A6%E2%80%939m%20Sec.%2022%20vs%209%E2%80%9313m%20new%20CIF!%7CNON-EEA%20CLOCK%20STOP%3A%3AUp%20to%2030%20Workdays%3A%3ASec.%2022%283%29%20RFI%20suspension%7CGOODWILL%20CET1%20RULE%3A%3A100%25%20Deducted!%3A%3ACRR%20Art.%2036%281%29%28b%29%20intangible%20hit)

## Never Forget CRR Article 36(1)(b): Acquisition Goodwill Counts for EUR 0 CET1!

One final accounting trap catches private-equity acquirers who structure the deal wrong: under **IFR Article 9 cross-referencing CRR Article 36(1)(b)**, **Goodwill and intangible assets MUST be deducted 100% from Common Equity Tier 1 (CET1) Own Funds**! Never push acquisition debt or goodwill down onto the regulated CIF's own balance sheet—pay any purchase price strictly at the unregulated **Cyprus/EU Holding Company (HoldCo)** level using 100% unencumbered equity, while keeping clean cash and sovereign HQLA inside the regulated CIF!

## Parallel Safeguarding Bank & Prime-Broker Change-of-Control Pre-Clearance

Because Tier-1 European safeguarding banks and institutional Prime-of-Prime liquidity providers enforce strict Change-of-UBO KYC triggers at 10%–25% ownership shifts, experienced Section 22 acquirers submit their apostilled SOW dossier to the target CIF's relationship banks in parallel with CySEC—preventing abrupt post-closing IBAN freezes under [Directive DI87-01](/bulletins/cysec-client-fund-credit-institution-diversification-emi-limits).

## Frequently asked questions

### Can four co-founders each buy 9.9% (39.6% total) of a CySEC CIF to avoid filing a Section 22 Qualifying Holding application?

Never! Under Section 22 of Law 87(I)/2017 and the Joint European Supervisory Authorities Guidelines (JC/GL/2016/01), investors coordinating an acquisition, sharing funding, or signing shareholder agreements are "acting in concert"—their holdings are aggregated (39.6% >= 30%!) and bypassing CySEC voids their voting rights!

### Does CySEC accept early-stage Bitcoin or DeFi trading gains as valid Source of Wealth (SOW) to buy a CIF?

CySEC applies heightened forensic scrutiny to crypto-derived wealth: acquirers must produce an unbroken, Big-4/forensic-audited trail from initial fiat bank acquisition through KYC-regulated exchanges, complete on-chain wallet provenance (zero mixer/sanctioned exposure), and 100% reconciled personal tax returns!

### If I buy an existing EUR 150,000 STP CIF (A1+A2), can I immediately operate a B-book and bump capital to EUR 750,000 upon closing?

No! Section 22 approves only the change in shareholder control of the CIF’s EXISTING license scope. Adding Dealing on Own Account (Annex I Section A3) requires a separate Section 7 license-extension application—often eliminating any timeline advantage over a greenfield build!

### What happens to the target CIF’s existing Tier-1 European bank accounts when ownership changes by >25%?

Almost every European correspondent bank and Prime-of-Prime LP triggers a mandatory Change-of-UBO KYC re-onboarding review whenever ownership shifts >=10%–25%—smart buyers engage the CIF’s safeguarding banks in parallel BEFORE closing so client accounts are never frozen!


## Source URLs

- https://www.cysec.gov.cy/en-GB/entities/investment-firms/cifs/licensing/
- https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32017R1946
- https://www.eba.europa.eu/sites/default/files/documents/10180/1699703/b3c3c9f5-8210-4b75-8753-91889a29d7a0/Final%20Joint%20Guidelines%20on%20the%20prudential%20assessment%20of%20acquisitions%20%28JC-GL-2016-01%29.pdf

## Citation

- APA: Lukas Lindqvist, CEFA. (2026). Acquiring a CySEC CIF Shell: Section 22 Qualifying Holdings, 60-Day Clock & Source-of-Wealth Vetting. Euro Firm Ledger. https://eurofirmledger.com/bulletins/cysec-m-and-a-change-in-control-section-22-qualifying-holdings
- Canonical article: [Acquiring a CySEC CIF Shell: Section 22 Qualifying Holdings, 60-Day Clock & Source-of-Wealth Vetting](https://eurofirmledger.com/bulletins/cysec-m-and-a-change-in-control-section-22-qualifying-holdings)
- Site research index: [Euro Firm Ledger](https://eurofirmledger.com/llms-full.txt)