Why a shelf licence is not a shortcut
The appeal is obvious. A fresh CIF authorisation runs on the section 7(3) clock - CySEC informs the applicant within six months of a complete application - and a ready-made entity looks like a way to skip the wait. The problem is that authorisation is a live permission, not a certificate you file in a drawer. Cyprus law treats prolonged non-use as a reason to take the permission back.
Section 8(1)(a) sets three independent triggers: non-use of the authorisation for twelve months, express renunciation, or no investment services and no investment activity across the preceding six months. Each stands on its own. A market-maker CIF whose dealing-on-own-account permission has sat idle is exposed on the first and third grounds at once, and the head-office rule in section 5(4) - every CIF must keep its head office in the Republic - means a hollow entity is not cheap to keep merely warm.
The fee meter runs before the first trade
Dormancy is not free. Under DI87-03 a CIF that has not started operating still owes the annual fee for the calendar year from grant, pro-rated by the month of authorisation. For a firm in the dealing-on-own-account tier - the EUR 750,000 initial-capital category under Article 9 of Law 165(I)/2021, and the subject of the market-maker permission - that fixed annual fee is EUR 10,000, before any CFD or algorithmic-trading add-on, and it is due within four months of the financial year end.
Miss it and the consequence is regulatory, not just commercial. Non-payment of the annual fee lets CySEC suspend the CIF authorisation under section 71(6)(c) until the fee is paid. A shelf entity that has quietly fallen behind on fees can therefore arrive at your deal already suspended - a defect a share-purchase agreement cannot cure, because the fix is with the regulator, not the seller.
The change-of-control clock, and how dormancy runs into it
Buying the entity does not transfer the licence to you - the licence stays with the CIF and CySEC approves the new owner. Anyone acquiring a qualifying holding of 10% or more, or crossing 20%, 30%, 50% or control, must notify CySEC in writing first under section 12(1)(a). The notification carries a EUR 3,500 fee (DI87-03) and uses the versioned forms 87-00-18, 19 or 20, depending on whether the acquirer is a natural person, a legal person or a trust.
Section 13 then sets the clock: CySEC acknowledges receipt within two working days and has 60 working days from acknowledgment of a complete notification to decide. It may request further information no later than the 50th working day, which interrupts the clock once for up to 20 working days - up to 30 where the acquirer is established or regulated outside the EU. If CySEC does not oppose in writing within the period, the acquisition is deemed approved under section 13(5).
Here is the interaction that catches buyers. Nothing in the change-of-control process pauses the section 8(1)(a) withdrawal grounds. If the target is already ten or eleven months into non-use when you sign, CySEC's assessment of your notification can outlast the twelve-month line, and you can complete a change of control over an entity that has meanwhile become withdrawable. The dormancy clock is the one to check first.
The acquisition clock in statutory arithmetic (as of July 2026)
| Stage | Provision | What the statute says |
|---|---|---|
| Stage Notify before acquiring | Provision s. 12(1)(a) | What the statute says Written notice to CySEC before acquiring a 10% holding or crossing 20%, 30%, 50% or control |
| Stage Acknowledgment | Provision s. 13 | What the statute says CySEC acknowledges receipt of the notification in writing within 2 working days |
| Stage The clock starts | Provision s. 13 | What the statute says 60 working days from acknowledgment of a complete notification and all required documents |
| Stage One information request | Provision s. 13 | What the statute says A request no later than the 50th working day interrupts the clock once, for up to 20 working days |
| Stage Non-EU acquirers | Provision s. 13 | What the statute says The single interruption may extend up to 30 working days for a non-EU or non-EU-supervised acquirer |
| Stage Silence at expiry | Provision s. 13(5) | What the statute says No written opposition within the assessment period means the acquisition is deemed approved |
| Stage Notification fee | Provision DI87-03 | What the statute says EUR 3,500 per section 12(1) notification, per proposed acquirer |
The pre-signing diligence file
-
Activity evidence
Trade records, client contracts and revenue that show the CIF has actually provided investment services, not merely held the permission. Silence here is the section 8(1)(a) risk.
-
Fee status
Confirmation that every DI87-03 annual fee is paid and current. An unpaid fee can suspend the authorisation under section 71(6)(c) before you complete.
-
Regulatory filings
The CIF's periodic returns to CySEC, including the quarterly QST-CIF statistical filing and audited financial statements. Gaps in the filing history read as inactivity.
-
Register and decisions check
The entity's entry on the public CIF register and any mention on CySEC's decisions page. A register listing confirms the authorisation exists, not that the firm has been active or unsanctioned.
-
Board and qualifying-holding status
Who currently controls and directs the CIF, and whether any qualifying-holding or board matter is outstanding, since every board change is separately assessed and separately charged.
-
Perimeter and safeguarding
Evidence the CIF has operated only within its licensed First Annex permissions. Trading outside the perimeter is its own enforcement exposure, as the record below shows.
The flip side: a live licence used outside its lines
Dormancy is one way a CIF loses value; misuse is the other. On 30 January 2026 CySEC announced a EUR 120,000 settlement with ZORIVO LTD, of which EUR 70,000 concerned a possible authorisation-perimeter breach under section 5(1) across February 2024 to July 2025, and EUR 50,000 concerned obstruction of an on-site investigation. The lesson for a buyer is symmetrical: an entity that traded outside its permissions is as compromised as one that never traded at all.
Diligence therefore cuts both ways. You are testing not only whether the target used its authorisation enough to keep it, but whether it used it only within the Annex items it actually holds. A CIF can be too idle to survive section 8, or too adventurous to survive section 5 - and both failure modes sit in the file before you ever reach the change-of-control notification.
June 2026: the withdrawals were not theoretical
This is a supervised market that acts. Through June 2026 the CySEC decisions page recorded a run of CIF outcomes: a licence suspension dated 23 June 2026, and authorisation withdrawals dated 9 June and 5 June 2026. We report these as dated regulator actions; the individual grounds were published as decision titles we have not each read in full, and a withdrawal can follow a firm's own renunciation under section 8(1) as readily as a CySEC-initiated action.
Treat the wave as enforcement colour with a short shelf life, and verify any specific case on the CySEC decisions page before relying on it. The through-line is simple: a CIF authorisation is a permission CySEC grants, polices and can take back - which is why the honest alternative to a shelf entity is an operating one. Our live lot is a Turnkey CySEC CIF (Market Maker) for Sale, an authorised dealing-on-own-account firm rather than a dormant shell, with pricing on request.
- 12 months
- of non-use is a withdrawal ground for a CIF authorisation (s. 8(1)(a))
- 6 months
- with no investment services is a separate withdrawal ground (s. 8(1)(a))
- 60
- working days for CySEC to assess a complete change-of-control notice (s. 13)
- EUR 3,500
- the fee for a section 12(1) change-of-control notification (DI87-03)
FAQ
Frequently asked questions
01 Can CySEC withdraw a CIF licence just for being dormant?
Yes. Section 8(1)(a) of Law 87(I)/2017 lets CySEC withdraw a CIF authorisation that has not been used within twelve months, that the firm expressly renounces, or that has provided no investment services in the preceding six months. A never-traded shelf entity is squarely within those grounds. Stated as of July 2026 - verify before relying.
02 Do we owe annual fees if the CIF never traded?
Yes. Under Directive DI87-03 a CIF that has not started operating still owes the annual fee from the calendar year of grant, pro-rated by month, and non-payment can suspend the authorisation under section 71(6)(c). Confirm the fee status is clean before you sign, and check the current directive before budgeting.
03 How long does a CySEC change-of-control approval take?
Section 13 gives CySEC 60 working days from its acknowledgment of a complete notification, with one information request that can interrupt the clock for up to 20 working days - 30 where the acquirer is outside the EU. If CySEC does not oppose in writing within the period, the acquisition is deemed approved under section 13(5). Stated as of July 2026.
04 What must we check before buying a shelf CIF?
Activity evidence that the firm has actually provided investment services, a clean DI87-03 fee record, complete regulatory filings including the quarterly QST-CIF return, the entity's register and decisions-page status, and any open qualifying-holding or board matter. Do this before the section 13 clock starts, not after.
Keep reading
Related reading
The full CySEC CIF licence guide
Law 87(I)/2017, the market-maker permission, EUR 750,000 capital, DI87-03 fees and the change-of-control clock - the whole architecture.
The market-maker permission, priced yearly
What dealing on own account adds to a CIF, the EUR 750,000 capital tier and the top annual-fee tier it locks in.
Turnkey CySEC CIF (Market Maker) for Sale
SKY7's live Cyprus lot - an authorised dealing-on-own-account CIF, not a dormant shell, pricing on request.