C804 to Administrative Service Providers – Quarterly Statistics (Form QST-ASP) – 30/09/2026 Submission

TO : Administrative Services Providers (‘ASPs’) FROM : Cyprus Securities and Exchange Commission DATE : October 2, 2026 CIRCULAR No : C804 FILE No : E.K. 02.03.001 and E.K. 01.13.001.002.002 SUBJECT : ASPs Quarterly Statistics (Form QST-ASP) – 30/09/2026 Submission The present Circular is issued pursuant to section 25(1)(c)(ii) & (iii) of the Cyprus Securities and Exchange Commission Law (the ‘CySEC Law’). The Cyprus Securities and Exchange Commission (the ‘CySEC') wishes to inform all ASPs about the following:

1. Information Requested by CySEC
   1.1 The latest version of the Form QST-ASP (the ‘Form’), Version 13, found in the Appendix,
   must be completed and submitted to CySEC by all ASPs that were authorised by CySEC by September 30, 2026. In this respect, ASPs that were authorised by September 30, 2026, but have not made use of their authorisation must also submit the Form.
   1.2 The steps that ASPs will have to follow, for the successful submission of the Form to the
   TRS, can be found here. Upon submission, ASPs are responsible to ensure that they have received a feedback file, i.e. an official submission confirmation dispatched by the TRS in the Outgoing directory.
   1.3 The feedback file will either contain a NO ERROR indication or, in case that an error(s)
   has occurred during submission, the description of that error(s). In case of any errors detected during submission of the Form, ASPs must review the Form and ensure that all errors are addressed and corrected before they digitally sign (only applicable for the Excel files) and re-submit the Form. The Form is regarded as being successfully submitted to CySEC, only when a NO ERROR indication feedback file is received. This feedback file is dispatched, only during CySEC regular hours.
2. Deadline for the submission of the Form
   2.1. The Form must be successfully submitted electronically via the CySEC’s Transaction
   Reporting System (‘TRS’) by Friday, October 30, 2026, the latest.

2
2.2. CySEC wishes to emphasise the importance of meeting the deadline set for successful
submission of the Form. Extension to the above deadline, i.e. Friday, October 30, 2026, will not be granted.
2.3. Failure to promptly and duly comply with the above may bear the administrative
penalties of section 37(5) of the CySEC Law. It is further noted that CySEC will not send any reminders to those ASPs, which fail to promptly and duly comply.
3. General Comments for the Form
3.1. The Form will be available only in the English language.
3.2. ASPs are required to report data in Euro, rounded to the nearest unit.
3.3. Please always ensure that you have the latest version of the Form, i.e. Version 13.
3.4. Instructions on the completion of the Form can be found in the ‘Instructions’ worksheet
of the Form.
3.5. As per the table below, please be advised when completing the information requested in
the Form, of the distinction regarding the columns (i) Reporting Period (Column D) and (ii) Cumulative Reporting Period (Column E), of Section F - Income Statement. Kindly note that both, Columns D and E, refer to the ASP and not to the ASP’s subsidiaries. Quarter Reporting Period (Column D) Cumulative Reporting Period (Column E) Period Time Span Period Time Span Q1 1 January 20XX-31 March 20XX 3 months 1 January 20XX-31 March 20XX 3 months Q2 1 April 20XX-30 June 20XX 3 months 1 January 20XX-30 June 20XX 6 months Q3 1 July 20XX-30 September 20XX 3 months 1 January 20XX-30 September 20XX 9 months Q4 1 October 20XX-31 December 20XX 3 months 1 January 20XX-31 December 20XX 12 months
3.6. Before submitting the Form, please ensure that all validation tests that are contained in
the Form (Sections General Information, A, B, C, D, E, F, G and Validation Tests Worksheet) are TRUE (Green Colour).
4. Method of creating, signing and submitting the Form to the CySEC
After populating the required Excel fields in the Form, ASPs should name their Excel file in accordance with the following naming convention:
Username_yyyymmdd_QST-ASP
The information below explains the naming convention:
(1) Username – is the username of the TRS credentials, which should already be in the possession of the ASPs, which have previously submitted any electronic files to the TRS system. This codification should be entered in capital letters.

3
ASPs, that have not previously requested the TRS credentials, can do so, by referring here, where further information is provided about the TRS. (2) yyyymmdd – this denotes the end of the reporting period of the Form. In this case, the Form should have a 20260930 format. Future forms will have different reporting periods. (3) QST-ASP – this is the coding of the Form, that it remains unchanged and should be inserted, exactly as it appears. (4) The Excel® must be of 2007 version and onwards. Excel will add the extension.xlsx, as soon as it is saved. This extension should not under any circumstances, be inserted manually. The fully completed excel form, which is named based on the above paragraph, must be submitted only electronically, through the Transaction Reporting System (‘TRS’), within the timeframes set.
5. Support
5.1 Queries on how to complete the fields of the Form
Should you have any queries on the completion of Form QST-ASP, please submit them only in writing, any day PRIOR to Friday, October 23, 2026, by sending an email to the address riskstatistics.asps@cysec.gov.cy.
5.2 Technical Queries on digitally signing and submitting the Form
For technical matters on digitally signing and submitting the Form, the ASPs are advised to frequently visit the CySEC’s website, at the specified section. For further clarifications, ASPs are requested to use the electronic address information.technology@cysec.gov.cy. All email communication with CySEC should include in the subject, the ASP’s full name and the TRS coding. Yours sincerely, George Karatzias Chairman Cyprus Securities and Exchange Commission