You have the licence. Now you need to become operational.

A newly licensed crypto exchange operator has typically spent a long and demanding period securing its authorisation, working through regulatory applications, capital requirements, governance documentation, and often a lengthy back-and-forth with a regulator on policies, systems and controls. By the time the licence is granted, the founding team is understandably exhausted, and there is a natural assumption that the hardest part is now behind them. In practice, the licence is the entry ticket to a different and equally demanding phase, not the conclusion of the project, and many operators discover this only once the congratulatory messages have stopped and the operational questions have started.

The gap between holding a licence and running a functioning exchange shows up almost immediately in three areas that a licensing process does not, by itself, resolve: banking and payment access, order book liquidity, and the day-to-day machinery of a compliance programme that has to actually run rather than merely exist on paper. A licence tells the market that a regulator has assessed the operator as fit to be authorised under a given regime; it does not tell a bank that the operator is a viable client, it does not tell a market maker that the venue is worth quoting on, and it does not by itself produce the transaction monitoring alerts, the onboarding queues, or the surveillance reports a functioning exchange generates from its first live trade onward.

This is the point at which many newly licensed operators discover that they do not know who to call. The regulator that approved the licence is not in the business of introducing the operator to a correspondent bank, a payment service provider, or a market making firm, and nor should it be; its role was to assess fitness and impose conditions, not to build the operator's commercial network. Legal counsel who guided the licensing process are typically not equipped to source banking relationships or negotiate liquidity mandates either, because that work sits in a different professional discipline entirely, one built on relationships, technical evaluation and ongoing monitoring rather than legal drafting.

The consequence is a scramble that plays out in broadly similar ways across most newly licensed venues we have observed. Founders start cold-emailing banks that do not serve crypto clients, approach market makers without a clear mandate structure or KPI framework, and attempt to build a compliance programme from templates that were not designed for their specific licence conditions or their specific transaction profile. Each of these efforts individually is well-intentioned, but collectively they consume months, and every month spent scrambling is a month in which the venue is licensed but not trading meaningfully, not onboarding clients at scale, and not building the track record that later banking and liquidity conversations depend on.

This is precisely the gap Xavion Capital exists to close for exchange operators. Having worked with newly licensed venues across Asia and the Gulf, we have observed that the operators who move from licensed to genuinely operational fastest are not necessarily the best-capitalised or the most technically sophisticated; they are the ones who treat the post-licensing period as a distinct, structured project with its own sequencing, rather than an unplanned continuation of the licensing effort. Banking, liquidity and compliance operationalisation are three separate workstreams with different counterparties, different timelines and different failure modes, and conflating them into a single undifferentiated to-do list is one of the more common and avoidable causes of delay.

The remainder of this piece works through each of those workstreams in turn, along with the regional context, the listing and institutional client questions that follow once a venue is trading, and the sequencing we typically recommend across the first one hundred and eighty days after licensing. Throughout, we have tried to be precise about what is realistically achievable and what depends on decisions made independently by banks, regulators and counterparties, because a newly licensed operator's most valuable resource in this period is an accurate picture of what is actually within its control and what is not.

None of what follows should be read as a promise of any particular banking, liquidity or regulatory outcome. Banks decide independently whether to accept an exchange operator as a client, regulators decide independently how to apply and enforce licence conditions, and market makers decide independently whether a mandate is commercially attractive to them. What we can offer is structured guidance, an experienced network, and a realistic operational roadmap, built on pattern recognition from having supported exchange operators through this exact transition before. This is general information, not legal, tax or investment advice, and specific decisions should always be taken with appropriately qualified counsel and advisers engaged for that purpose.

An exchange, unlike most operating businesses, needs several distinct categories of banking and payment infrastructure functioning simultaneously from close to day one. It needs an operating account for the entity itself, to pay staff, vendors, rent and taxes in the ordinary course of business, which is often the easiest piece to arrange because it resembles the banking need of any other regulated financial services company. It separately needs arrangements for handling client fiat, whether structured as segregated client money accounts held at a bank, safeguarded funds arrangements consistent with its licence conditions, or a stablecoin-based settlement model where the licence permits it, and this piece is considerably harder because it sits at the centre of a bank's own risk assessment of the venue.

On top of the operating and client-money layers, the exchange needs payment service provider relationships and on- and off-ramp coverage across each corridor it intends to serve, because a venue that can onboard a client but cannot actually accept that client's fiat deposit or process a withdrawal in a reasonable timeframe has not solved the banking problem, it has merely deferred it to the point of first transaction. Corridor coverage varies enormously: a PSP relationship that works well for SEPA transfers into a European client base may be entirely unsuited to a Gulf-based client base transacting in dirhams or riyals, and a single banking relationship rarely covers every corridor a growing exchange eventually wants to serve.

Correspondent banking risk sits underneath all of this and is frequently the least visible factor to a first-time exchange operator. Many of the banks willing to service crypto exchanges directly are themselves dependent on correspondent relationships with larger banks to clear cross-border payments, and those larger correspondent banks apply their own, often more conservative, risk appetite toward crypto-related flows. A banking relationship that looks solid on the surface can be disrupted by a correspondent bank's decision, made without notice to the exchange and sometimes without full transparency even to the exchange's direct banking partner, which is one of the structural reasons exchange operators are well advised to maintain more than one banking relationship rather than concentrating all flow through a single institution.

In our experience advising operators through this process, the majority of banking applications that fail do not fail because the operator's financials are inadequate or its capital position is weak; they fail because the narrative presented to the bank does not answer the questions a compliance and risk committee will actually ask. Banks assessing a crypto exchange want to understand the source and destination of client funds, the jurisdictions the exchange intends to serve and exclude, the token listing standards that determine what assets the exchange will support, the transaction monitoring and sanctions screening the exchange runs, and how the exchange's own licence conditions map onto the bank's own regulatory obligations. An application built around trading volume projections and revenue forecasts, without a clear and specific answer to these questions, reads to a bank as unprepared rather than promising.

Building that narrative correctly requires understanding what a specific bank's risk committee has approved crypto exposure for in the past, what corridors and client types it is comfortable with, and how the exchange's own compliance programme should be described to align with that institution's existing risk framework rather than a generic template. This is detailed, relationship-dependent work, and it is precisely the reason a newly licensed operator benefits from an adviser who has already mapped which institutions are actively receptive to exchange business, under what conditions, and with what documentation expectations, rather than starting from a blank list of banks found through general research.

Xavion Capital maintains a network of more than one hundred and twenty banking and payment institutions across multiple jurisdictions, ranging from traditional correspondent banks with defined crypto risk appetites to specialist payment service providers and stablecoin settlement partners, built through years of direct engagement with exchange operators, token issuers and trading firms. Our role is to help an exchange operator identify which of those institutions are genuinely suited to its specific licence, corridor mix and client profile, prepare the documentation and narrative in the form that institution's risk committee expects, and manage the introduction and application process directly, rather than leaving the operator to discover through repeated rejection which institutions were never a realistic fit in the first place.

It is important to be direct about what this process does and does not guarantee. Every bank and payment institution makes its own independent decision about whether to accept an exchange operator as a client, based on its own risk appetite, regulatory obligations and internal approval processes, and no adviser, including Xavion, can commit a banking outcome on a third party's behalf. What a well-run introduction and application process does achieve is a materially higher likelihood of reaching the institutions actually suited to the mandate, presented in the manner most likely to receive a considered assessment, which shortens the realistic timeline from licensing to functioning banking relative to an unguided search.

The practical sequencing we generally recommend is to pursue the operating account and at least one client-money-capable relationship in parallel from the earliest possible point after licensing, rather than sequentially, because each has a different lead time and neither should sit waiting on the other. PSP and on/off-ramp relationships for the exchange's primary corridors should follow closely behind, prioritised by where the expected client base and trading volume are concentrated rather than pursued in every jurisdiction simultaneously, since a broad but thin coverage of corridors typically serves clients worse than a deep, reliable coverage of the two or three corridors that matter most in the venue's first year of operation.

A newly licensed exchange with no meaningful order book depth faces a problem that compounds rather than resolves itself with time. Traders evaluate a venue within minutes of opening its order book, and a thin, wide-spread book signals unreliability regardless of how sound the venue's licence, technology or compliance programme actually is. Word of a poor first impression travels quickly among the institutional desks, OTC counterparties and active traders whose participation an exchange ultimately needs to establish itself, and reversing an early reputation for thin liquidity is considerably harder than establishing a good one from the outset, because the traders who tried the venue once and found it wanting are unlikely to check back voluntarily.

This makes day-one liquidity arrangement a genuine priority rather than a nice-to-have addition once other matters are settled, and it means market maker sourcing needs to begin well before the exchange's public launch, not after. Sourcing credible market makers for a newly licensed venue is different from sourcing market makers for an established token, because the counterparty being evaluated is the exchange itself rather than a single asset, and market makers assess venue mandates against a different set of criteria including the exchange's technology stability, its API reliability, its fee structure, its expected trading volume and its regulatory standing, all of which are harder to demonstrate convincingly for a venue that has not yet opened.

Vetting candidate market makers properly means going well beyond a firm's marketing materials and self-reported track record, and includes checking references from other venues the firm has serviced, understanding the firm's balance sheet and capital adequacy relative to the size of book it proposes to run, and assessing whether its technology and risk management are suited to the specific asset classes and trading pairs the exchange intends to list. A firm that performs well quoting large-capitalisation tokens on established venues does not automatically perform equally well quoting a newly licensed venue's full listing book, and the due diligence needs to be specific to the mandate under discussion rather than generic.

Mandate design should be built around explicit, measurable key performance indicators rather than a general commitment to provide liquidity. The KPIs that matter most typically include maximum spread in basis points measured across defined intervals through the trading day, minimum depth maintained at specified price bands around the mid-price, a quote uptime percentage measured against agreed market hours, and coverage across the specific pairs and venues the exchange has designated as priorities. Vague commitments to maintain a competitive market are effectively unenforceable, whereas specific, independently measurable KPIs give the exchange a basis for ongoing performance review and, where necessary, remediation or termination.

Inventory and incentive structures for exchange-level market making mandates commonly combine a fee rebate or reduced maker fee schedule with a direct retainer, and in some cases a modest token or equity incentive tied to sustained performance over an initial period, though the right combination depends heavily on the exchange's own economics and the specific market maker's cost of capital. What matters more than the precise structure is that incentives are aligned toward sustained, measurable market quality rather than short bursts of activity around launch that taper once initial obligations are notionally satisfied, since a maker whose commercial interest ends the moment the minimum contractual term expires provides limited value to a venue trying to build a durable reputation.

The first six months of a newly licensed exchange's trading activity carry disproportionate weight in how the venue is perceived by the market for years afterward, because this is the period during which prospective institutional clients, OTC desks and active traders form their initial and often lasting impression of whether the venue is a serious, well-run market or a thinly resourced one. A venue that launches with credible depth, tight spreads and reliable uptime during this period builds a reputation that continues to attract flow well after the initial market making arrangements have matured or been renegotiated, whereas a venue that launches thin struggles to shake that early impression even after its liquidity genuinely improves.

Xavion's role in this workstream is to manage the market maker sourcing and evaluation process on the exchange's behalf, drawing on relationships with vetted market making firms whose performance we have observed across other mandates, and to help design the KPI framework and incentive structure appropriate to the exchange's specific listing book and expected volume profile. We also support the exchange in establishing independent monitoring of realised market maker performance against the agreed KPIs, since a market maker's self-reported performance figures are not a substitute for independently verified data drawn directly from the exchange's own order book, and an exchange that only reviews the figures its market maker chooses to present is not genuinely overseeing the mandate.

It is worth being explicit that liquidity sourcing does not, and should not, extend to arrangements designed to manufacture artificial trading volume or misleading depth, and Xavion declines mandates of that kind as a matter of firm policy, discussed further later in this piece. Genuine, sustainable liquidity built on properly incentivised market making arrangements takes longer to establish than artificial volume, but it is the only form of liquidity that survives regulatory scrutiny, institutional due diligence and the ordinary passage of time, all of which artificial volume eventually fails to withstand.

A licence is typically granted subject to a set of conditions covering areas such as anti-money laundering and counter-terrorist financing controls, client asset protection, governance arrangements, technology resilience and reporting obligations, and these conditions are usually described in terms of outcomes a regulator expects rather than a step-by-step specification of the systems and procedures required to achieve them. Turning those conditions into a functioning, auditable compliance programme is a substantial undertaking in its own right, one that many newly licensed operators underestimate because the licensing process itself already required extensive policy documentation, creating a false sense that the compliance work is already largely complete.

The reality is that policy documents submitted during a licensing application describe intended controls, while an operational compliance programme has to actually implement, evidence and continually test those controls against live client and transaction activity. This distinction matters enormously in practice: a written AML and CTF policy that describes a risk-based customer due diligence approach is not the same thing as a functioning KYC and KYB onboarding workflow that applies differentiated verification tiers to individual retail clients, corporate clients and institutional counterparties, routes edge cases to manual review, and produces an auditable record of the decision made and the basis for it in every single case.

Transaction monitoring presents a similarly significant operational gap between policy and practice. A licence condition requiring the exchange to monitor for suspicious activity translates operationally into selecting and configuring a transaction monitoring system, integrating it with blockchain analytics tools capable of screening deposit and withdrawal addresses against known illicit activity, sanctioned entities and high-risk exposure categories, tuning alert thresholds to avoid both under-detection and an unmanageable volume of false positives, and establishing an escalation and suspicious activity reporting workflow staffed by people with the authority and training to act on what the system surfaces. None of this exists automatically because a policy document describes the intended outcome.

The Travel Rule, requiring originator and beneficiary information to accompany qualifying virtual asset transfers between obligated entities, has become a standard licence condition across most credible regulatory regimes and creates its own distinct operational burden, since compliance depends on integrating with a Travel Rule messaging solution, establishing counterparty due diligence processes for other virtual asset service providers the exchange transacts with, and handling the practical reality that not every counterparty exchange globally supports the same messaging standard, requiring a documented approach to managing that inconsistency in a way a regulator will find defensible on review.

Market surveillance, covering the detection of activity such as wash trading, spoofing and layering on the exchange's own order book, is a further operational build that is easy to underweight in the excitement of preparing for launch, precisely because its absence is invisible until either a genuine incident occurs or a regulator asks to see the surveillance function during a post-licensing review. A credible market surveillance capability requires both the technology to detect anomalous trading patterns and the trained staff to investigate alerts and determine an appropriate response, and building this in parallel with the liquidity workstream described earlier is important, since a healthy order book and a healthy surveillance function need to develop together rather than one being addressed as an afterthought.

Staffing the compliance function adequately is one of the most consistently underestimated elements of post-licensing operationalisation. A Money Laundering Reporting Officer role carries substantial personal and regulatory responsibility, and the individual filling it needs both the technical competence and the organisational authority to act independently of commercial pressure, including from the exchange's own founders and shareholders when their interests conflict with a compliance judgement. Beyond the MLRO, a functioning compliance team needs analysts to handle onboarding review and alert investigation at the volume the exchange expects, and this staffing need scales with trading and client growth in a way that is easy to underprovision for during the optimistic projections common at launch.

Audit readiness should be treated as a continuous discipline rather than a periodic scramble, because most licensed regimes require regular independent audits of the AML and CTF programme, and a compliance function that has been documenting its decisions, retaining evidence, and testing its own controls on an ongoing basis moves through an audit smoothly, while one that has been operating informally faces a materially more disruptive and costly audit process, sometimes surfacing gaps that themselves become reportable matters to the regulator. Building the discipline of continuous evidence retention from the first day of live operations, rather than introducing it retrospectively, is one of the more valuable and least glamorous investments a newly licensed exchange can make.

Xavion supports exchange operators through this workstream by helping translate specific licence conditions into an operational build plan, introducing vetted providers of transaction monitoring, blockchain analytics, Travel Rule messaging and KYC/KYB infrastructure suited to the exchange's jurisdiction and expected client profile, and advising on staffing structure and MLRO positioning appropriate to the scale of the licensed activity. We are not a law firm and do not provide legal advice on the interpretation of specific licence conditions, and operators should engage qualified legal counsel for that purpose; our role is operational and advisory, helping the compliance programme actually function once counsel has defined what it needs to achieve.

Understanding the broad shape of the regulatory landscape across the jurisdictions where newly licensed exchanges typically operate helps an operator anticipate the kind of questions banks, market makers and institutional counterparties are likely to ask, even though the detail of any specific regime should always be assessed with qualified local legal counsel rather than through general commentary of this kind. What follows is offered as landscape context intended to orient an operator's thinking, not as an interpretation of any specific licence condition or regulatory obligation, and every regulator makes its own independent decisions about the entities it authorises and how it supervises them.

In the United Arab Emirates, the Virtual Assets Regulatory Authority in Dubai and the Financial Services Regulatory Authority within Abu Dhabi Global Market operate distinct regimes with their own scope, licensing categories and supervisory expectations, and the Gulf more broadly has become an increasingly active venue for exchange licensing activity in recent years, drawing operators attracted by a comparatively clear framework and proximity to both regional retail demand and a growing base of institutional capital. Operators considering the region should expect a detailed and iterative licensing dialogue and should not assume that a licence obtained in one Gulf jurisdiction carries any recognition or equivalence in another.

In Hong Kong, the Securities and Futures Commission operates a licensing regime for virtual asset trading platforms that has evolved considerably over recent years, including requirements addressing custody, token due diligence and retail access, and the regime is generally regarded as one of the more thoroughly specified frameworks in Asia. Singapore's Monetary Authority has taken a similarly detailed approach through its Payment Services Act framework, with licensing categories that distinguish between different types of digital payment token activity and a supervisory posture that has, at points, been notably selective about the entities it ultimately authorises relative to the volume of applications received.

Japan's regime, administered through its Financial Services Agency and involving self-regulatory bodies with delegated authority over aspects of exchange conduct, is among the longest-established in Asia and reflects lessons learned from early exchange failures in the market, resulting in a framework with particular attention to cold storage requirements and segregation of client assets. South Korea similarly operates a detailed licensing and reporting regime, with close attention to banking arrangements between exchanges and real-name verified accounts at partner banks, a structural feature that has meaningfully shaped how exchanges in that market are able to onboard and serve retail clients.

Within the European Union, the Markets in Crypto-Assets Regulation, generally referred to as MiCA, has introduced a harmonised authorisation framework for crypto-asset service providers intended to allow a single authorisation to be passported across member states, representing a significant shift from the previously fragmented national regimes that operators in Europe had to navigate individually. Operators considering the EU market should expect that national competent authorities retain meaningful discretion in how they apply the framework in practice, and early experience under MiCA suggests continuing variation in supervisory expectations and timelines between member states even under the common rulebook.

A number of offshore jurisdictions continue to offer Virtual Asset Service Provider registration or licensing regimes that are, in general terms, lighter-touch and faster to obtain than the frameworks described above, and these can serve legitimate purposes for certain business models, though operators should be aware that banks, payment institutions and institutional counterparties increasingly apply their own heightened scrutiny to entities licensed in jurisdictions perceived as offering lighter supervisory oversight, which can materially affect the banking and institutional client acquisition workstreams discussed elsewhere in this piece regardless of the underlying quality of the operator's actual controls.

The practical implication for a newly licensed operator is that the jurisdiction of licensing shapes, but does not by itself determine, the banking, liquidity and institutional relationships the exchange is able to build, and operators should think carefully about how their chosen jurisdiction will be perceived by the specific banks, market makers and institutional counterparties they intend to approach, rather than treating jurisdiction selection purely as a function of licensing speed or cost. This context should not be relied upon as a substitute for jurisdiction-specific legal advice, and Xavion, as an adviser rather than a law firm, does not provide opinions on the interpretation of any specific regulatory framework.

Having advised exchange operators across a number of jurisdictions in Asia and the Gulf, we have observed recurring regional realities that shape what a workable operational plan actually looks like, realities that are easy to underestimate from outside the region and that generic global guidance tends to smooth over in ways that do not survive contact with the actual market. Banking access, in particular, varies enormously by corridor in ways that are not always predictable from a jurisdiction's general reputation for being crypto-friendly, and an operator's assumptions based on headline regulatory posture frequently need revising once actual banking conversations begin.

A jurisdiction with a genuinely progressive licensing regime does not automatically translate into an equally progressive domestic banking sector willing to service licensed crypto exchanges, and we have seen operators licensed in jurisdictions with clear, well-regarded regulatory frameworks nonetheless struggle for months to secure domestic banking, ultimately finding workable relationships through banks in an entirely different jurisdiction willing to serve the licensed entity cross-border. This disconnect between licensing progressiveness and banking sector readiness is one of the more persistent patterns across the region and a key reason the banking workstream needs to be pursued with a realistic, corridor-specific view rather than an assumption that a good licence automatically opens good banking doors.

Local partner expectations also differ meaningfully across markets, and in several Gulf and Asian jurisdictions a genuinely effective market entry benefits from, and in some structures requires, a credible local partner with standing relationships and market knowledge, not merely a nominee arrangement satisfying a formal ownership requirement. Operators who treat local partnership as a box-ticking exercise rather than a genuine value-additive relationship often find that the partnership contributes little to the operational challenges that actually matter, while operators who invest in identifying a partner with real standing and genuine engagement tend to move through banking, institutional introductions and regulatory dialogue considerably more smoothly.

Licence-conditioned banking arrangements are a further regional feature worth flagging specifically, since several jurisdictions attach explicit conditions to an exchange's licence regarding where and how client funds must be held, sometimes requiring domestic custody of fiat client funds or specific safeguarding arrangements with named categories of institution. These conditions interact directly with the banking workstream and need to be understood precisely before banking conversations begin, since approaching the wrong category of institution, or structuring an arrangement that does not satisfy the specific safeguarding requirement, can create a compliance problem even where a workable commercial banking relationship has otherwise been found.

Language and time-zone operations present a more practical but no less important consideration for exchanges serving multiple markets across Asia and the Gulf simultaneously, since client support, compliance escalation and market surveillance functions all need coverage aligned to when the exchange's actual client base is active, which for a venue serving both Gulf and East Asian clients can mean a demanding round-the-clock coverage requirement that is easy to underprovision for at launch. Compliance documentation and client-facing disclosures also often need to be prepared in more than one language to meet both regulatory expectation and genuine client comprehension, a requirement that adds meaningful lead time to what might otherwise look like a straightforward documentation task.

The mix of regional retail and institutional flow varies substantially by market and shapes almost every downstream decision an exchange makes, from its KYC tiering structure to its market maker mandate design to its fee schedule. Markets with a large, highly active retail base place different demands on onboarding throughput and customer support scale than markets where the addressable client base is concentrated among institutional desks and high-net-worth individuals, and an operator that designs its operational infrastructure around an assumed client mix that does not match the market's actual composition tends to find itself either overbuilt in one area or badly underprepared in another once real trading activity begins.

Our work across the region has reinforced that there is no single template that transfers cleanly from one Gulf or Asian market to another, and an operator that treats its regional expansion as a series of copy-paste launches, using the operational playbook that worked in its first licensed jurisdiction without adapting it to the banking reality, partner expectations and client mix of the next, tends to encounter avoidable friction. Xavion's role in these engagements has generally been to bring the specific, current, on-the-ground pattern recognition from having supported operators through comparable transitions elsewhere in the region, while being clear that every jurisdiction's regulator, banking sector and market ultimately behave according to their own dynamics, which no amount of prior pattern recognition can fully predict in advance.

A newly licensed exchange needs a steady, credible pipeline of tokens to list within a reasonably short period of establishing its trading infrastructure, because a venue with strong liquidity infrastructure but a thin or unconvincing listing book struggles to attract the trading volume that liquidity infrastructure was built to support. Building this pipeline properly means establishing a listing framework before the first listing decision is made under pressure, rather than improvising standards project by project as issuer applications arrive, since ad hoc listing decisions taken early in a venue's life are the ones most likely to be scrutinised later, whether by regulators, institutional counterparties or the exchange's own community.

A credible listing framework specifies the categories of diligence the exchange conducts on every prospective listing, covering matters such as the token's legal structure and jurisdiction of issuance, tokenomics and vesting schedule, smart contract audit history, the issuing team's track record and background, and the presence and quality of any existing market making or liquidity arrangements the issuer already has in place. Applying this framework consistently, rather than making exceptions for well-connected or well-funded issuers, is what gives a listing decision durability, both in the sense of the token remaining a defensible listing over time and in the sense of the exchange's own listing standards retaining credibility with the market.

Pay-to-list arrangements, where a listing fee effectively substitutes for genuine diligence, have caused significant reputational damage to exchanges across multiple cycles, and newly licensed operators are particularly vulnerable to the short-term temptation of listing fee revenue precisely when treasury pressure in the early months of operation is at its highest. An exchange that becomes known, fairly or not, as a venue where sufficient payment secures a listing regardless of underlying quality finds that reputation extremely difficult to shed, and it directly undermines the institutional client acquisition efforts discussed later in this piece, since sophisticated counterparties specifically ask about listing standards as part of their own due diligence on a venue.

A well-designed listing fee structure can coexist with genuine diligence standards provided the fee is transparently disclosed, applied consistently, and structured so that it covers the exchange's actual cost of technical integration and ongoing surveillance rather than functioning as a de facto purchase of favourable placement, and this distinction, while sometimes subtle in practice, is one that institutional counterparties and increasingly regulators pay close attention to when assessing a venue's overall credibility and governance quality.

Connecting a newly licensed exchange with credible issuers is a distinct piece of work from the diligence framework itself, and it is an area where an established adviser's existing relationships add tangible value, since issuers with genuinely strong projects generally have a choice of venues willing to consider their listing and tend to prioritise venues that come recommended through a trusted intermediary relationship over venues reaching out cold. Xavion maintains relationships with token issuers across multiple jurisdictions through our separate issuer advisory work, and where appropriate and consented to by the issuer, we introduce credible projects to exchange clients whose listing standards and operational maturity we consider suited to the issuer's stage and profile.

Building this pipeline also benefits from a clear-eyed view of sequencing, since an exchange's very first listings carry outsized reputational weight relative to listings that follow once the venue has an established track record, meaning the initial listing cohort deserves particular care in selection even if this means a slower initial pace of listing activity than the exchange's growth targets might otherwise call for. A newly licensed venue that lists a small number of well-diligenced, genuinely credible tokens in its first months establishes a foundation that supports a faster and more confident listing pace later, whereas a venue that lists aggressively and indiscriminately from day one often finds itself constrained by the reputational consequences of its own early decisions.

Over time, a mature listing framework should also include defined delisting criteria and a process for reviewing existing listings against ongoing standards, since a listing decision made at one point in time does not remain appropriate indefinitely if a token's liquidity deteriorates, its issuer becomes unresponsive, or new information emerges that would have affected the original diligence outcome. Building this review capability alongside the initial listing framework, rather than treating delisting as an unplanned reactive measure taken only under external pressure, is part of what distinguishes a listing programme institutional counterparties regard as genuinely well governed.

A well-designed VIP and fee-tier programme is one of the more effective tools a newly licensed exchange has for attracting and retaining the higher-volume clients that disproportionately determine a venue's overall liquidity and trading revenue, yet fee-tier design is frequently treated as an afterthought, copied loosely from a competitor's public fee schedule without the underlying economic modelling that determines whether the resulting structure is actually sustainable for the exchange offering it. A tier structure built without careful modelling of the volume distribution the exchange actually expects across its client base can end up rewarding a small number of clients far more generously than the exchange's own fee economics can support at scale.

The core mechanics of most fee-tier programmes revolve around a maker and taker fee schedule that decreases as a client's trailing trading volume, and sometimes token holdings, increase, with the underlying logic being that market makers and other liquidity-providing participants, who typically post rather than take liquidity, should be rewarded with lower or even negative fees to encourage the tighter spreads and deeper books that benefit the exchange's overall market quality. Getting the maker-taker spread right within the schedule matters considerably, since a schedule that does not sufficiently reward maker activity relative to taker activity fails to attract the liquidity-providing flow the structure is designed to incentivise in the first place.

Rebate design, where certain top-tier makers receive a fee rebate rather than merely a reduced fee, needs particular care because rebates paid out at a rate the exchange's own trading revenue cannot sustainably support create a structural drain that only becomes apparent once volume scales to the level the rebate programme was originally designed to attract, at which point unwinding a rebate commitment already extended to major clients is commercially and reputationally difficult. Modelling rebate sustainability against realistic, rather than optimistic, volume growth projections before launching a tier programme avoids this trap considerably more cheaply than discovering it after the fact.

Sustainability also depends on how a tier programme interacts with the exchange's broader market making mandates discussed earlier in this piece, since an exchange's contracted market makers and its highest VIP-tier clients are often, in practice, drawing on overlapping fee incentive pools, and a programme designed without reference to the separate market making mandate can end up either duplicating incentive spend inefficiently or creating unintended competition between the exchange's contracted liquidity providers and its own top-tier clients for the same fee benefits.

Institutional desks evaluating a new venue's fee-tier programme look beyond the headline fee numbers to assess whether the tier thresholds and qualifying criteria are realistic and transparently documented, whether the exchange has a track record of honouring its stated tier commitments consistently, and whether the programme's underlying economics appear sustainable enough that the desk is not exposed to the risk of favourable terms being unilaterally withdrawn once the desk has built meaningful operational dependency on the venue. A tier programme that looks generous on paper but is perceived as fragile or opportunistically structured does less to attract durable institutional flow than a more modest but demonstrably sustainable and consistently honoured programme.

Programme design also needs to account for how tiers interact with the exchange's onboarding and KYC/KYB tiering discussed in the compliance section of this piece, since higher trading tiers often correspond to higher expected transaction volumes that in turn warrant enhanced due diligence, and a fee-tier structure that is not properly linked to the corresponding compliance review level can create a mismatch where high-volume clients are being fast-tracked commercially while remaining under-scrutinised from a risk perspective, a gap that both internal audit and external regulatory review are likely to identify.

Xavion's role in this workstream is to help model tier economics against realistic volume assumptions specific to the exchange's client mix and jurisdiction, benchmark proposed fee schedules against comparable venues at a similar stage of development rather than against the largest global exchanges whose economics operate at an entirely different scale, and advise on how the tier structure should interact with both the market making mandate and the compliance tiering framework so that the three systems function coherently rather than as separately designed pieces bolted together after the fact.

How an exchange structures its treasury and custody arrangements has become one of the first questions institutional counterparties, sophisticated retail clients and, increasingly, regulators ask when assessing a newly licensed venue, a shift driven substantially by a series of high-profile exchange failures across recent cycles that made clear how much damage weak custodial segregation and opaque reserve practices can cause when they finally surface. A newly licensed exchange has an opportunity, largely unavailable to legacy venues carrying years of accumulated custodial practice, to build a genuinely sound custody architecture from the outset rather than retrofitting one under pressure later.

The standard architecture separates client assets across hot, warm and cold storage tiers, with hot wallets holding only the minimum balance needed to service expected withdrawal volume over a short operational window, warm wallets serving as an intermediate tier used for rebalancing between hot and cold storage on a controlled schedule, and cold storage holding the substantial majority of client assets in offline, multi-signature or multi-party-computation-secured wallets with strict, auditable procedures governing any movement of funds. The specific percentage allocation across tiers should reflect the exchange's actual observed withdrawal patterns rather than an arbitrary industry-standard figure applied without reference to the venue's real operational needs.

Insurance arrangements covering custodial risk, whether sourced through specialist crypto insurance markets or negotiated as part of a broader custodian relationship, are increasingly expected by institutional counterparties as part of a credible custody posture, though it is worth noting clearly that available insurance coverage in this market typically addresses a defined subset of risks such as theft from hot wallets under specified conditions, rather than providing comprehensive coverage against every form of loss, and exchanges should be precise and honest in how they describe the scope of any insurance coverage to clients rather than allowing marketing language to imply broader protection than actually exists.

Proof-of-reserves practices have moved from a differentiating feature to something approaching a baseline institutional expectation, though the rigour of proof-of-reserves implementations varies enormously across the market, ranging from a simple published wallet address with no accompanying attestation of liabilities, which demonstrates very little on its own, through to a full cryptographic Merkle-tree-based proof of both assets and client liabilities reviewed by an independent third party, which provides considerably stronger assurance. Newly licensed exchanges building a proof-of-reserves capability should understand this spectrum clearly and be honest about where their own implementation sits on it, since overstating the rigour of a proof-of-reserves practice to clients or counterparties carries obvious reputational and potentially regulatory risk.

Independent reserve attestation, conducted by a qualified external auditor reviewing both the exchange's held assets and its client liability figures at a point in time, provides materially stronger assurance than a self-published proof-of-reserves exercise, though attestations of this kind are typically point-in-time snapshots rather than continuous real-time verification, a limitation that should be disclosed transparently rather than allowed to create a misleading impression of continuous assurance in client-facing communications.

Institutional clients evaluating a new venue's treasury and custody posture typically ask specific, pointed questions that go beyond marketing claims: which custodian or custody technology is used and what is its own track record, what percentage of assets sit in cold storage and how is that percentage actually verified rather than merely stated, what is the withdrawal processing time under both normal and stressed conditions, and what governance controls exist over any movement of assets between storage tiers, including how many authorised signatories are required and how those signatories are selected and monitored. An exchange unable to answer these questions specifically and confidently is unlikely to satisfy the diligence standards a serious institutional counterparty applies before routing meaningful flow to the venue.

Xavion advises exchange operators on structuring a custody and treasury architecture appropriate to their licence conditions, expected asset mix and client base, introduces vetted custody technology providers and insurance markets where relevant, and helps design a proof-of-reserves and attestation practice pitched honestly at a level of rigour the exchange can actually sustain operationally, rather than one that looks impressive at launch but proves difficult to maintain consistently once trading volumes and operational complexity increase.

Attracting institutional trading desks, funds and OTC counterparties to route flow through a newly licensed venue requires satisfying a diligence process considerably more demanding, and considerably more specific, than the general reputation-based assessment a retail client might apply, because institutional counterparties are deploying their own clients' or their own firm's capital and typically operate under their own internal counterparty risk policies requiring documented sign-off before a new venue is approved for trading. Understanding what these counterparties actually diligence, rather than assuming general market reputation is sufficient, materially shapes how a newly licensed exchange should prioritise its early operational build.

Regulatory and licensing standing is usually the first filter applied, with institutional compliance teams checking not only that the exchange holds a valid licence but which specific regime issued it, what conditions attach to that licence, and how the jurisdiction is generally regarded within the counterparty's own internal risk framework, a framework that in many institutions is more conservative than the exchange's own regulator's minimum requirements. An exchange licensed in a jurisdiction that an institutional counterparty's own policy treats as higher risk may find that even a genuinely well-run operation struggles to clear this initial filter, regardless of the actual quality of its controls.

Custody and treasury posture, covered in the previous section, is typically the second area of focus, with institutional counterparties requesting specific documentation on cold storage percentages, insurance coverage scope, proof-of-reserves methodology and governance controls over asset movement, generally through a structured due diligence questionnaire rather than an informal conversation, and an exchange unable to produce clear, specific written answers to a standard institutional due diligence questionnaire loses considerable credibility even before any substantive concern is raised about the answers themselves.

Historical trading and market quality data forms a third pillar of institutional evaluation, with desks reviewing realised spread and depth data over a meaningful historical period, uptime and outage history, and evidence of how the venue's order book behaved during periods of market stress, since a venue's performance during volatile conditions reveals considerably more about its actual resilience than performance during calm markets. This is precisely why the day-one liquidity quality discussed earlier in this piece matters so much to institutional client acquisition specifically, since the historical data institutional desks review during their diligence is a direct record of the market making and surveillance decisions made in the venue's earliest months.

AML, sanctions and compliance programme maturity is scrutinised closely, often through direct questions about the exchange's transaction monitoring provider, its Travel Rule compliance approach, and its MLRO's background and reporting line, and institutional counterparties increasingly ask for evidence of an independent audit of the compliance programme rather than accepting a description of the policy alone, reflecting the broader industry shift discussed in the compliance operationalisation section toward evidenced, auditable controls rather than documented intentions.

Operational reliability, including API stability, settlement speed, and the quality and responsiveness of the exchange's institutional support function, rounds out the typical diligence checklist, and while this may appear a more mundane consideration relative to regulatory and custody questions, institutional desks that have experienced settlement delays or unresponsive support at other venues weight operational reliability heavily precisely because these failures translate directly into realised trading losses and operational risk for their own business, in a way that is immediate and measurable compared with more abstract governance concerns.

Xavion supports newly licensed exchanges in institutional client acquisition by helping prepare the documentation institutional due diligence processes actually require, reviewing the exchange's own posture against the criteria described above before external counterparties raise them, and making direct introductions to institutional desks, funds and OTC counterparties within our network where the exchange's operational maturity genuinely warrants the introduction. We are candid with exchange clients when we believe a venue is not yet ready for institutional-grade scrutiny, since a premature introduction that results in a failed diligence process can be more damaging to a venue's reputation among institutional counterparties than simply waiting until the underlying operational gaps have been closed.

The period immediately following licensing is finite, and how an operator sequences its work across that period has an outsized effect on how quickly the venue becomes genuinely operational, because several of the workstreams described in this piece have long lead times that only begin to run once initiated, meaning delay in starting them is rarely recoverable simply by working harder later. A realistic roadmap begins by acknowledging that banking, liquidity and compliance operationalisation should start in parallel from day one, rather than in the sequence a founder's intuition might otherwise suggest, which typically prioritises the workstream that feels most urgent in the moment rather than the one with the longest lead time.

In the first thirty days, priority should go to initiating banking applications for both the operating account and client-money-capable relationships simultaneously, beginning market maker sourcing and evaluation in earnest so that mandates can be negotiated and agreed well ahead of public launch, and commencing the build-out of core compliance infrastructure including transaction monitoring, KYC and KYB onboarding workflow, and blockchain analytics integration. This period should also include finalising the listing framework and diligence standards discussed earlier, so that the exchange is not designing its listing criteria reactively once the first issuer applications begin arriving.

Days thirty to sixty typically see banking applications progressing through the institutions' own review processes, which is largely outside the operator's direct control but benefits from active, responsive engagement whenever additional information is requested, alongside continued market maker due diligence and the negotiation of specific KPI-based mandate terms with the shortlisted candidates identified in the first month. Compliance infrastructure build should be reaching the point of internal testing during this window, including test transactions run through the monitoring system to validate alert configuration before any live client transaction depends on it functioning correctly.

Days sixty to ninety should focus on finalising market maker mandates and beginning technical integration between the market maker's systems and the exchange's own trading infrastructure, completing staffing of the core compliance function including the MLRO role and initial analyst hires, and conducting an internal dry run of the full client onboarding and transaction monitoring workflow with test accounts to identify gaps before real clients encounter them. This is also the period in which the initial listing pipeline should be firming up, with the first cohort of tokens moving through the diligence framework toward a launch-ready state.

Days ninety to one hundred and twenty typically encompass final pre-launch preparation, including confirming at least one functioning banking relationship sufficient to support live operations even if broader corridor coverage remains a work in progress, activating market maker quoting in a controlled pre-launch or limited-access environment if the exchange's technology supports it, and conducting a final compliance readiness review, ideally with an external party providing an independent assessment ahead of the regulator's own likely early post-licensing review or audit.

Days one hundred twenty to one hundred fifty are generally the window for a public or soft launch, with close monitoring of realised market maker performance against agreed KPIs from the first trading day, active surveillance of onboarding volume and transaction monitoring alert flow to confirm the compliance infrastructure is performing as designed under real rather than test conditions, and the beginning of institutional client outreach for the desks and counterparties whose own diligence timelines mean early engagement is worthwhile even before the venue has a long operating track record to show them.

The final stretch to one hundred and eighty days should focus on stabilising operations based on what the first weeks of live trading reveal, addressing any gaps in banking corridor coverage identified through actual client demand rather than theoretical planning, reviewing early market maker performance data to determine whether mandate terms need renegotiation, and formalising the treasury, custody and proof-of-reserves posture into a form that can be presented confidently to the institutional counterparties whose diligence conversations should now be actively progressing.

This roadmap is offered as a general sequencing framework based on patterns observed across the exchanges we have advised, not a guaranteed timeline, since actual progress through each workstream depends on decisions made independently by banks, market makers, regulators and counterparties that no operator or adviser can fully control. Operators should expect some workstreams to move faster and others slower than this framework suggests, and the value of the roadmap lies less in its specific day counts than in the discipline of starting every major workstream in parallel from the earliest possible point, rather than allowing any one of them to be deferred until the others feel resolved.

A Xavion exchange advisory mandate typically begins with a structured diagnostic phase, during which we review the operator's licence conditions, current banking and payment status, existing or planned market making arrangements, compliance programme documentation and staffing, and any listing or institutional client activity already underway, in order to produce a clear, honest assessment of where the venue genuinely stands relative to the operational benchmarks described throughout this piece. This diagnostic is deliberately candid, since an accurate picture of gaps, even where uncomfortable, is considerably more useful to an operator than a reassuring summary that understates the work remaining.

Following the diagnostic, we scope the engagement into discrete workstreams aligned with the areas covered in this piece, typically banking and payment rails, market maker sourcing and mandate design, compliance operationalisation support, listing framework development, and institutional client acquisition preparation, with each workstream given its own realistic timeline and set of deliverables rather than being bundled into a single undifferentiated engagement. Operators are free to engage us across all workstreams simultaneously or to prioritise the one or two areas where they have the least existing capability or the most urgent gap, since not every newly licensed exchange needs the same balance of support.

Introductions form a core part of how we deliver value across most workstreams, drawing on our network of more than one hundred and twenty banking and payment institutions, vetted market making firms, custody and compliance technology providers, and institutional trading desks and OTC counterparties, built through years of direct engagement across trader, token issuer and exchange advisory work. We manage these introductions actively, preparing the operator's documentation and narrative in the form each specific counterparty expects, rather than simply providing a contact list and leaving the operator to navigate an unfamiliar relationship and application process alone.

Independent monitoring is a further component we generally recommend, and often provide directly, particularly around market maker performance and compliance programme functioning, since the value of a well-designed KPI framework or a well-documented compliance policy depends entirely on someone actually checking, on an ongoing basis, whether performance in practice matches what was agreed on paper. We help operators establish this ongoing monitoring discipline, whether through periodic independent review of market maker execution data, or through structured check-ins against the compliance operationalisation roadmap, so that gaps are identified while they are still cheap and quick to correct rather than after they have compounded into a genuine operational or regulatory problem.

It is important to be equally clear about the boundaries of what a Xavion mandate covers. We are an advisory firm, not a law firm, and we do not provide legal advice on the interpretation of licence conditions, regulatory obligations or contractual terms, all of which should be reviewed by appropriately qualified legal counsel engaged directly by the operator. We are not a bank or a licensed exchange ourselves, and we do not obtain regulatory licences on an operator's behalf, open bank accounts as an operator's agent, or make any banking, listing or regulatory decision that properly belongs to the institution or authority being approached.

We similarly do not guarantee any banking outcome, any market maker mandate, any listing decision or any institutional client relationship, because every one of these outcomes depends on an independent decision made by a third party, whether a bank's risk committee, a market maker's own commercial assessment, or a regulator's supervisory judgement, and no adviser can properly commit another institution's decision on its behalf. What we do commit to is thorough preparation, an experienced and genuinely relevant network, honest assessment of where an operator's readiness stands, and structured, sequenced support through the operational build described throughout this piece.

Finally, as a matter of firm policy, Xavion declines exchange advisory mandates that involve or contemplate manipulative liquidity practices, including wash trading, artificial volume generation, or market making arrangements designed to misrepresent a venue's genuine trading activity to prospective clients, counterparties or regulators. We take this position because such practices are inconsistent with the compliance-first advisory approach on which our firm is built, because they expose the operator to serious and escalating regulatory and reputational risk, and because a venue's long-term commercial success depends on genuine market quality that artificial activity can never actually substitute for, regardless of how convincing it may appear in the short term. This piece is general information, not legal, tax or investment advice, and any exchange operator considering the matters discussed here should seek advice specific to its own licence, jurisdiction and circumstances.