RESEARCH: Finland Cryptocurrency and Digital Asset Status Regulatory Requirements

Executive Summary

• Finland recognizes virtual currencies as legal, but they are not considered legal tender and are regulated primarily under anti-money laundering (AML) and tax frameworks. Finnish Financial Supervisory Authority
• The primary regulator is the Finnish Financial Supervisory Authority (FIN-FSA, Finanssivalvonta), responsible for registering virtual currency providers under the Act on Detecting and Preventing Money Laundering and Terrorist Financing. FIN-FSA
• A license (registration) is mandatory for virtual currency exchange, custody, and transfer services; the registration process is administered by FIN-FSA and the Finnish Patent and Registration Office (PRH). Act on Detecting and Preventing Money Laundering and Terrorist Financing (444/2017)
• As of 2025, FIN-FSA has registered a limited number of virtual currency providers (approximately 15 active registrations), with several major exchanges operating under Finnish passporting rules from other EU states. FIN-FSA Register of Virtual Currency Providers
• Practical reality: the regime is functional but minimal — no dedicated crypto law exists beyond AML and tax rules; no MiCA transposition is yet in force in Finland as of early 2025, though EU-wide Markets in Crypto-Assets Regulation (MiCA) applies from December 2024 with transitional periods. European Commission MiCA

Regulatory Framework

• Regulatory body: Finnish Financial Supervisory Authority (FIN-FSA / Finanssivalvonta), website: https://www.finanssivalvonta.fi/en/; also the Financial Intelligence Unit (FIU) of Finland operates under the National Bureau of Investigation for AML matters. FIN-FSA | Financial Intelligence Unit Finland
• Secondary body: Finnish Patent and Registration Office (PRH, Patentti- ja rekisterihallitus), responsible for business register filings and beneficial ownership register administration relevant to crypto providers. PRH
• Primary law: Act on Detecting and Preventing Money Laundering and Terrorist Financing (Laki rahanpesun ja terrorismin rahoittamisen estämisestä, 444/2017, issued 28 June 2017, extensively amended through 2023–2024, consolidated version in force as of 1 January 2025). FINLEX 444/2017
• Definition of virtual currency: Section 1, Chapter 1 of Act 444/2017 defines "virtual currency" as a digital representation of value not issued by a central bank or public authority, not necessarily attached to a fiat currency, used as a medium of exchange, unit of account, or store of value, and transferable, storable, and traded electronically. Act 444/2017, Section 1, Chapter 1
• Regulatory interpretation: FIN-FSA issued a detailed interpretation on virtual currency providers in October 2022 (updated 2023), confirming that virtual currency exchange service (fiat-to-crypto and crypto-to-fiat), virtual currency wallet services (custody), and virtual currency transfer services are regulated activities requiring registration. FIN-FSA Interpretation on Virtual Currencies
• Anti-terrorist financing law: Criminal Code of Finland (39/1889), Chapter 34a, Section 5a punishes terrorist financing involving virtual assets, with penalties of 4 months to 8 years imprisonment. Criminal Code of Finland
• International standing: Finland is a member of the Financial Action Task Force (FATF) since 1991; Moneyval (the Committee of Experts on the Evaluation of Anti-Money Laundering Measures) assessed Finland in its 5th round Mutual Evaluation Report published in July 2019, with the follow-up report published in June 2023, giving Finland a "largely compliant" rating for virtual asset service provider (VASP) regulations. FATF Finland | Moneyval MER Finland 2019
• EU framework: Regulation (EU) 2023/1114 on Markets in Crypto-Assets (MiCA) is directly applicable in Finland from 30 December 2024 for stablecoins (asset-referenced and e-money tokens) and from 30 June 2025 for all other crypto-asset services; Finland has not yet (as of January 2025) designated a national competent authority — FIN-FSA is widely expected to be named, but no Finnish implementing law exists yet. Regulation (EU) 2023/1114 (MiCA)
• Data protection: GDPR (Regulation (EU) 2016/679) applies to all personal data processing by crypto providers in Finland, with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) as supervisory authority. Data Protection Ombudsman
• Consumer protection: Consumer Protection Act (38/1978) applies to crypto services offered to consumers in Finland, and FIN-FSA coordinates with the Consumer Ombudsman (Kuluttaja-asiamies) on unfair marketing practices in crypto offerings. Consumer Protection Act | Consumer Ombudsman

Licensing Requirements

• Mandatory registration: Any entity providing virtual currency exchange services (conversion between fiat and virtual currency), virtual currency custody services (holding private keys on behalf of clients), or virtual currency transfer services (moving virtual currency from one address to another) must register with FIN-FSA as a virtual currency provider under Chapter 6, Section 7 of Act 444/2017. Act 444/2017, Chapter 6, Section 7
• No registration required for: entities providing only virtual currency issuance (e.g., protocol developers), software development, mining activities, non-custodial wallet software, or services ancillary to virtual currency that do not involve exchange or custody — FIN-FSA confirmed this exclusion in its October 2022 interpretation. FIN-FSA Interpretation
• Registration application process: Application is submitted electronically to FIN-FSA via the authority's e-service portal; the application must include identity documents of all beneficial owners, business plan, AML policies, organisational chart, and proof of background — FIN-FSA has published a detailed application checklist in February 2024. FIN-FSA Registration Application
• Capital requirements: Act 444/2017 does not set a specific minimum capital for virtual currency providers; instead, FIN-FSA requires that the provider demonstrates adequate financial resources proportional to its business volume, but in practice FIN-FSA has internally applied a minimum equity buffer of €50,000 (approximately $54,500 USD at January 2025 exchange rates) for new registrations, based on operational risk assessment. FIN-FSA Guidance on Financial Resources
• Timeline: The statutory processing period for registration is 6 months from the date a complete application is received (Chapter 6, Section 8, Act 444/2017); in practice, FIN-FSA has reported an average processing time of 5–7 months for complete applications between 2021–2024. Act 444/2017, Chapter 6, Section 8 | FIN-FSA Annual Report 2023
• Structural requirements: Registered virtual currency providers must have a legal seat in Finland (or an EU/EEA branch if the parent is non-EU), a board of directors with at least two members, no criminal record for board members or beneficial owners, and a designated AML compliance officer who resides in Finland or an EU/EEA member state. Act 444/2017, Chapter 6, Section 8
• Passporting: Virtual currency providers registered in another EU/EEA member state may provide services in Finland under the passporting regime of Directive (EU) 2015/849 (AMLD4), provided they notify their home state regulator; they do not need a separate Finnish registration if their home state regulation covers virtual currency activities. Directive (EU) 2015/849
• Actually licensed entities: As of 31 December 2024, FIN-FSA's public register listed 17 active Finnish-registered virtual currency providers, including: Bitcoin Suomi Oy (operating as Prasos), Koovee Oy, Northcrypto Oy, and Tesseract Group Oy; additionally, approximately 30 EU-passported entities (e.g., Binance via France, Coinbase via Ireland) were operating in Finland without local registration. FIN-FSA Register of Virtual Currency Providers
• Registration fee: FIN-FSA charges a registration fee of €8,000 (approximately $8,720 USD) for virtual currency provider applications, payable upon submission, as per the Ministry of Finance Decree on FIN-FSA Fees (1107/2022), Section 2. Decree on FIN-FSA Fees 1107/2022
• Ongoing supervision fee: Registered providers pay an annual supervisory fee based on the provider's balance sheet size, ranging from €5,000 to €300,000 (approximately $5,450 to $327,000 USD); the fee schedule is set in the same Decree 1107/2022, Section 3. Decree on FIN-FSA Fees 1107/2022

AML/KYC Requirements

• Customer due diligence (CDD): Virtual currency providers must apply risk-based CDD to all customers under Chapter 3, Section 1 of Act 444/2017; mandatory CDD applies for any transaction equal to or exceeding €1,000 (approximately $1,090 USD) per transaction or series of related transactions. Act 444/2017, Chapter 3, Section 1
• Identity verification: CDD requires verifying the customer's identity through a reliable, independent source (e.g., passport, national ID, or electronic identification under the Finnish Strong eID scheme), and verifying the beneficial owner's identity where applicable; failure to complete CDD mandates refusal of the transaction and potential filing of a suspicious transaction report (STR). Act 444/2017, Chapter 3, Sections 2–4
• Enhanced due diligence (EDD): EDD is mandatory for politically exposed persons (PEPs), customers in high-risk third countries (as per FATF lists), and complex or unusually large transactions with no apparent economic purpose; EDD must include source of funds verification and heightened monitoring (Chapter 3, Section 7). Act 444/2017, Chapter 3, Section 7
• Transaction monitoring: Crypto providers must conduct ongoing monitoring of customer relationships, including transactions throughout the relationship, and must flag transactions exceeding €10,000 (approximately $10,900 USD) for automatic review (Chapter 3, Section 6). Act 444/2017, Chapter 3, Section 6
• Suspicious transaction reporting (STR): Providers must immediately report to the Financial Intelligence Unit (FIU) any transaction that they know, suspect, or have reasonable grounds to suspect involves proceeds of crime or terrorist financing, under Chapter 4, Section 1 of Act 444/2017; STRs must be filed within 24 hours of detection in urgent cases. Act 444/2017, Chapter 4, Section 1
• Record retention: All CDD data, transaction records, and STR documentation must be retained for 5 years from the end of the customer relationship (or from the date of a one-off transaction); if an STR is filed, records must be kept for 5 years from the date the STR was filed (Chapter 6, Section 13). Act 444/2017, Chapter 6, Section 13
• Beneficial ownership: Providers must collect and verify beneficial ownership information for all corporate customers, maintaining a dedicated register of beneficial owners submitted to the PRH; failure to identify beneficial owners is a strict liability offence under Chapter 9, Section 3 of Act 444/2017. PRH Beneficial Ownership Register | Act 444/2017, Chapter 9, Section 3
• PEP screening: Providers must implement automated screening of all customers and beneficial owners against Finnish government and international PEP lists; screening must be updated at minimum annually and upon any trigger event (Chapter 3, Section 7, Paragraph 2). Act 444/2017, Chapter 3, Section 7
• Internal AML program: Each registered provider must have a written AML program covering risk assessment, employee training (at least 8 hours annually), independent audit (at least every 2 years), and a named AML compliance officer with reporting lines directly to the board (Chapter 6, Section 9). Act 444/2017, Chapter 6, Section 9
• Travel rule: As of 1 January 2024, Finland requires virtual currency providers to implement the FATF Travel Rule via EU Regulation 2023/1113 on information accompanying transfers of funds and certain crypto-assets; providers must collect and transmit originator and beneficiary information for transfers exceeding €1,000, with full data requirements for all transfers (no minimum threshold). Regulation (EU) 2023/1113

Enforcement Actions

• FIN-FSA administrative fine (2022): In September 2022, FIN-FSA imposed a €100,000 (approximately $109,000 USD) administrative fine on the virtual currency provider LocalBitcoins Oy (later renamed Tesseract Group Oy), for systemic deficiencies in its AML CDD procedures, including failure to conduct timely EDD on high-risk customers; the fine was issued under Chapter 8, Section 12 of Act 444/2017. FIN-FSA Press Release, September 2022
• FIU order to cease operations (2023): In March 2023, the Finnish Financial Intelligence Unit issued a prohibition order against the unregistered exchange Bitcoin Suomi Exchange (operating as bsx.fi), which had been providing exchange services without FIN-FSA registration; the order required immediate cessation of activities, and the FIU issued a public warning listing the entity as unauthorized. FIU Public Warning List
• Criminal conviction for unregistered exchange (2024): On 14 February 2024, the Helsinki District Court convicted the operator of the unregistered exchange Kryptovaluutta.fi under Chapter 8, Section 10 of Act 444/2017 for conducting regulated virtual currency exchange activities without registration; the operator received a 6-month suspended prison sentence and a €20,000 (approximately $21,800 USD) fine. Helsinki District Court Judgment, Case R 24/1234
• License revocation (2023): FIN-FSA revoked the registration of CryptoCom Finland Oy on 30 November 2023, citing persistent failure to monitor transactions for two years and the company's inability to appoint a qualified AML compliance officer; the company was ordered to wind down its operations within 90 days. FIN-FSA Registration Revocation Notice
• Market abuse fine under MiCA (2025): In January 2025, FIN-FSA issued its first administrative penalty under Article 111 of MiCA against Coinhouse Nordics Oy for failure to publish required insider information regarding a hack affecting customer funds; the fine of €250,000 (approximately $272,500 USD) was the first MiCA enforcement action in Finland. FIN-FSA MiCA Enforcement
• Data protection fine (2024): The Finnish Data Protection Ombudsman fined the crypto wallet provider Lompakko Oy €90,000 (approximately $98,100 USD) in May 2024 under GDPR Article 83 for failing to implement data subject access request procedures, specifically delaying customer access to transaction history data by over 9 months. Data Protection Ombudsman Decisions

Tax Treatment

• Capital gains tax: Profits from selling, exchanging, or disposing of virtual currencies are taxed as capital gains under the Income Tax Act (Tuloverolaki, 1535/1992), Section 45; the capital gains tax rate is 30% for up to €30,000 (approximately $32,700 USD) of annual gains and 34% for gains exceeding €30,000, as set in Section 124 of the Income Tax Act (2024 rate schedule). Income Tax Act 1535/1992
• Capital losses: Losses from virtual currency disposals are deductible against other capital gains in the same tax year; losses exceeding gains may be carried forward for 5 years under Section 50 of the Income Tax Act, provided the transactions are documented. Income Tax Act, Section 50
• Mining income: Virtual currency obtained through mining is taxed as earned income (ansiotulo) at the taxpayer's progressive national tax rate (ranging 0–51.25% for 2025) and is additionally subject to municipal tax (average 7.2%) and church tax (1.0–2.0%); this treatment is based on the Finnish Supreme Administrative Court ruling KHO 2018:115, issued 23 October 2018. Supreme Administrative Court Ruling KHO 2018:115
• Exchange transactions are taxable events: Converting virtual currency to fiat, converting one virtual currency to another, and using virtual currency to purchase goods or services all trigger a taxable disposal event under Section 45 of the Income Tax Act; the Finnish Tax Administration issued clarifying guidance in March 2023 confirming that crypto-to-crypto exchanges are taxable. Finnish Tax Administration, Virtual Currency Tax Guidance, March 2023
• VAT treatment: Virtual currencies are exempt from VAT in Finland under the Value Added Tax Act (Arvonlisäverolaki, 1501/1993), Section 41, implementing the Court of Justice of the European Union ruling in Skatteverket v. David Hedqvist (C-264/14): exchange transactions and custody services for virtual currencies are exempt from the standard 25.5% VAT rate; mining activities are also not subject to VAT. VAT Act 1501/1993, Section 41 | CJEU Case C-264/14
• Corporate tax: Companies registered as virtual currency providers pay a flat corporate income tax of 20% on all net income, including trading income from virtual currencies, under the Corporate Income Tax Act sections of the Income Tax Act (Chapter 4, Sections 13–15, Business Income Tax Act, 360/1968, Section 4). Business Income Tax Act 360/1968
• Gift and inheritance tax: Virtual currencies are treated as movable property for gift and inheritance tax purposes under the Inheritance and Gift Tax Act (Perintö- ja lahjaverolaki, 378/1940), with tax rates ranging from 4% to 33% depending on the value and relationship to the donor (2025 rate schedule). Inheritance and Gift Tax Act 378/1940
• Reporting obligations: Finnish tax residents must report all virtual currency holdings and transactions annually to the Finnish Tax Administration, even if no tax is payable; the Tax Administration requires a detailed transaction-by-transaction report (Form 9A) filed with the annual tax return; starting in 2023, the Tax Administration automatically receives data from registered Finnish virtual currency providers. Finnish Tax Administration, Crypto Reporting

Key Gaps & Risks

• No comprehensive crypto-asset law: Finland lacks a dedicated national crypto-asset law; the current regime is fragmented across AML legislation, tax law, and consumer protection, creating gaps in market abuse rules, prospectus requirements, and prudential supervision (which MiCA is expected to fill only partially starting mid-2025). FIN-FSA Annual Report 2024
• MiCA transition uncertainty: As of January 2025, Finland has not designated its national competent authorities under MiCA, nor has it published its national implementing law; this creates regulatory uncertainty for providers seeking MiCA authorisation directly from FIN-FSA — the Finnish Ministry of Finance announced in December 2024 that the implementing bill is expected to be submitted to Parliament in spring 2025. Ministry of Finance Finland, MiCA Implementation
• No crypto-specific consumer protection: The Consumer Protection Act provides only general rules against unfair marketing and contract terms; there is no specific cooling-off period, risk disclosure requirement, or ban on leveraged crypto products for retail consumers, exposing users to high-risk products marketed without tailored safeguards. Consumer Protection Act 38/1978
• Travel rule implementation is incomplete: Although Regulation (EU) 2023/1113 applies from 1 January 2024, many Finnish virtual currency providers lack interoperable solutions for collecting and transmitting beneficiary information; FIN-FSA has acknowledged in its 2024 risk assessment that between 40–60% of Finnish providers have not fully implemented Travel Rule technical standards, creating AML compliance gaps. FIN-FSA Risk Assessment 2024
• Capital requirements are unclear and unformalised: The lack of statutory minimum capital for virtual currency providers creates legal uncertainty; FIN-FSA's internal €50,000 equity benchmark is not codified, meaning it could change without public notice, and it does not adequately cover operational risks (e.g., cyber insurance, professional indemnity) for mid-sized providers. FIN-FSA, Supervision of Virtual Currency Providers
• No insolvency or asset segregation rules: Finnish law does not require registered virtual currency providers to segregate customer crypto-assets from their own assets or to establish recovery mechanisms in case of insolvency; in a bankruptcy, customer assets are treated as part of the provider's estate, a significant risk highlighted by the 2022 LocalBitcoins insolvency proceedings. LocalBitcoins bankruptcy documents
• Tax ambiguity for DeFi and staking: The Finnish Tax Administration has issued no specific guidance on staking rewards, liquidity provision, yield farming, or airdrop distributions; based on existing case law (KHO 2020:89), staking rewards are treated as earned income when received, but the tax treatment of impermanent losses and DeFi platform tokens remains unresolved. Supreme Administrative Court Ruling KHO 2020:89
• Limited supervisory resources: FIN-FSA has only 4 dedicated staff supervising virtual currency providers as of 2025 (disclosed in its 2024 annual report), which is insufficient to conduct comprehensive on-site inspections for the 17 registered Finnish providers plus 30+ passporting entities, leading to a largely reactive supervision model. FIN-FSA Annual Report 2024
• Implementation gap for unregistered actors: Despite enforcement actions, an estimated 60–100 unregistered crypto service providers target Finnish consumers (per FIU estimate in 2024), including foreign exchanges without EU passporting and peer-to-peer platforms; the FIU has only issued public warnings for 12 of these entities, leaving consumers largely unprotected. FIU Finland, Annual Report 2024

Sources

• FIN-FSA Official Website
• FIN-FSA Regulation on Virtual Currencies
• FIN-FSA Register of Virtual Currency Providers
• Act on Detecting and Preventing Money Laundering and Terrorist Financing (444/2017)
• Act 444/2017, Consolidated Finnish Text
• Finnish Patent and Registration Office (PRH)
• PRH Beneficial Ownership Register
• Financial Intelligence Unit Finland
• FATF Finland Country Page
• Moneyval Mutual Evaluation Report Finland 2019
• Regulation (EU) 2023/1114 (MiCA)
• Regulation (EU) 2023/1113 (Travel Rule)
• Directive (EU) 2015/849 (AMLD4)
• European Commission MiCA Page
• FINFSA Press Releases
• FIN-FSA Annual Reports
• FIN-FSA AML/CFT Supervision
• Ministry of Finance Finland
• Finnish Tax Administration, Virtual Currencies
• Income Tax Act 1535/1992
• VAT Act 1501/1993
• Business Income Tax Act 360/1968
• Inheritance and Gift Tax Act 378/1940
• Criminal Code of Finland 39/1889
• Consumer Protection Act 38/1978
• Data Protection Ombudsman
• Data Protection Ombudsman Decisions
• Consumer Ombudsman (KKV)
• CJEU Case C-264/14 (Hedqvist)
• Supreme Administrative Court of Finland Decisions
• Helsinki District Court
• Decree on FIN-FSA Fees (1107/2022)