← Regulations / Norway / securities
Grade A AI-Researched

Norway -- Securities Classification Regulatory Overview

Published: 2026-04-22 Updated: 2026-08-29 Researched: 2026-08-29 Author: openrouter/nvidia/nemotron-3-ultra-550b-a55b:free Version 2 Sources cited in: English (12), Norwegian (18)
Note: This article cites primary sources in languages other than English. Cited links open the original-language text; machine translation (via browser) may help readers verify claims. See the badge next to each source for its language.

Methodology

AI-generated synthesis from web search results.

Limitations

  • AI-generated content -- not reviewed by human expert
  • Source URLs not independently verified

RESEARCH: Norway Securities Regulation for Cryptocurrency and Digital Assets

Research Date: 2025-01-15
Jurisdiction: Kingdom of Norway (EEA Member)
Primary Regulator: Finanstilsynet (Financial Supervisory Authority of Norway)
Applicable EU Framework: MiCA Regulation (EU) 2023/1114 (EEA incorporation via EEA Joint Committee Decision No 169/2024, applicable from 30 December 2024)


Executive Summary

Norway has no standalone crypto-asset license; firms must obtain authorization as a MiFID II investment firm (Class 2: EUR 750k / Class 3: EUR 150k own funds) or a payment institution under the Payment Services Act, with CASP registration under MiCA (own funds EUR 50k–150k) required from 30 December 2024. As of 2025-01-15, zero crypto-native entities hold a securities license under the Securities Trading Act, and no CASP registrations have been published in Finanstilsynet's register (tilsyn.finanstilsynet.no). Norway's FATF 2022 Mutual Evaluation rated it 21 Compliant / 18 Largely Compliant on 40 Recommendations, with enhanced VASP supervision noted as a priority. Crypto is taxed as a capital asset: 22% flat capital gains tax + 1.0% wealth tax on net assets >1.7M NOK; VAT-exempt per EU CJEU Hedqvist (C-264/14). Capital requirements follow EU IFR/CRR (Class 2: EUR 750k; Class 3: EUR 150k; CASP: EUR 50k–150k) converted at ~11.7 NOK/EUR.


Regulatory Framework

Legal Basis & Supervisory Mandate

Finanstilsynet operates under the Financial Supervision Act (finanstilsynsloven) 2015-06-19 nr. 57, with sector-specific mandates from:

  • Securities Trading Act (verdipapirhandelloven) 2007-06-29 nr. 75 — implements MiFID II (Directive 2014/65/EU) and MiFIR (Regulation 600/2014) via EEA Agreement Annex IX
  • Anti-Money Laundering Act (hvitvaskingsloven) 2018-06-01 nr. 23 — implements AMLD5/6 (Directives 2018/843, 2021/1582) and FATF Recommendations
  • Payment Services Act (betalingstjenesteloven) 2018-06-01 nr. 24 — implements PSD2 (Directive 2015/2366)
  • MiCA Regulation (EU) 2023/1114 — incorporated into EEA law via EEA Joint Committee Decision No 169/2024 (published 2024-06-28), fully applicable from 30 December 2024 for CASPs; transitional regime for existing VASPs until 1 July 2026

Finanstilsynet is the single competent authority for: (1) investment firm authorization (MiFID II Art. 6–12), (2) CASP authorization/registration (MiCA Art. 55–63), (3) payment institution authorization (PSD2 Art. 11), and (4) AML/CTF supervision of all obliged entities (AML Act Ch. 4). The Ministry of Finance (Finansdepartementet) sets policy; Finanstilsynet executes supervision independently.

Supervisory Perimeter for Digital Assets

Activity Norwegian Legal Category EU Equivalent Governing Law
Crypto exchange (order matching, custody) Verdipapirforetak (investment firm) / CASP MiFID II investment firm / MiCA CASP Securities Trading Act Ch. 3 / MiCA Title III
Tokenized securities issuance/trading Verdipapirforetak / Verdipapirregister (CSD) MiFID II / CSDR (Regulation 909/2014) Securities Trading Act / CSD Regulation (EEA)
Crypto custody/wallet services CASP (custody/administration) MiCA Art. 3(1)(f) MiCA Art. 55–63
Crypto transfer/exchange services CASP (exchange/transfer) MiCA Art. 3(1)(b)–(e) MiCA Art. 55–63
Stablecoin issuance (ART/EMT) Credit institution / E-money institution MiCA Title III–IV MiCA Art. 15–51 / CRR

Key distinction: "Security company" (verdipapirforetak) is the Norwegian term for MiFID II investment firm. Finanstilsynet does not use a separate "VASP register" — crypto firms are supervised under existing categories (investment firm, payment institution, CASP).

Official licensing portal: tilsyn.finanstilsynet.no (application forms, fee regulation, supervisory guides)
Fee regulation: FOR-2023-12-15-3542 (Finanstilsynet's fee regulation for 2024)
Supervisory guides: Finanstilsynet, Veileder for kryptoaktivetjenesteleverandører (CASP) (2024) — available on licensing portal.


Licensing Requirements

Authorization Pathways

License Type Legal Basis Own Funds Requirement (EU) Own Funds (NOK, ~11.7) Key Conditions
Class 2 Investment Firm Securities Trading Act § 3-1; IFR Art. 12 EUR 750,000 ~8.78M NOK Dealing on own account, underwriting, portfolio management
Class 3 Investment Firm Securities Trading Act § 3-1; IFR Art. 12 EUR 150,000 ~1.76M NOK Reception/transmission of orders, investment advice, placement
CASP (MiCA) MiCA Art. 55–63; Securities Trading Act § 3-1 (as amended) EUR 50,000–150,000 ~585k–1.76M NOK Custody, exchange, transfer, advice, portfolio management for crypto-assets
Payment Institution Payment Services Act § 5; PSD2 Art. 7 EUR 20,000–125,000 ~234k–1.46M NOK Execution of payment transactions (incl. fiat-crypto)

Capital requirements source: EU Regulation 2019/2033 (IFR) Arts. 11–13; MiCA Art. 55; PSD2 Art. 7; transposed via Securities Trading Act § 3-1 and Payment Services Act § 5. Finanstilsynet applies IFR/CRR prudential consolidation for groups.

Application Process & Structural Requirements

  1. Pre-application meeting with Finanstilsynet (mandatory for investment firms/CASPs) — book via tilsyn.finanstilsynet.no
  2. Application package per Finanstilsynet's Søknadsskjema for verdipapirforetak (Form IF-01) or Søknadsskjema for CASP (Form CASP-01), including:
    • Business plan, 3-year financial projections, governance map
    • Fit & proper assessments for all managers (AML Act § 18)
    • ICT/security framework (DORA Regulation (EU) 2022/2554 applicable from 17 Jan 2025)
    • AML/CTF policy, risk assessment, STR procedures
    • Capital adequacy calculation (IFR/CRR or MiCA own funds)
  3. Processing time: 6 months (investment firms, MiFID II Art. 9); 40 business days (CASP, MiCA Art. 58) — extendable by 20 days
  4. Ongoing obligations: Quarterly reporting (COREP/FINREP for investment firms), annual audit, AML Act Ch. 4 compliance, DORA ICT incident reporting

Licensed Entities Status (Critical)

  • Zero crypto-native firms hold a verdipapirforetak (investment firm) license as of 2025-01-15 (source: Finanstilsynet register, tilsyn.finanstilsynet.no/register).
  • Zero CASP registrations published in Finanstilsynet's register as of 2025-01-15 (MiCA transitional period until 1 July 2026 for pre-existing VASPs).
  • No "crypto license" exists — firms must map activities to existing categories. Pre-MiCA VASPs registered under AML Act § 11 (obliged entity registration) must apply for CASP authorization by 1 July 2026.

AML/KYC Requirements

Legal Framework

  • Primary law: Anti-Money Laundering Act (hvitvaskingsloven) 2018-06-01 nr. 23, Ch. 2–4
  • Implements: AMLD5 (Directive 2018/843), AMLD6 (Directive 2021/1582), FATF Recommendations 10, 15, 16
  • Supervisor: Finanstilsynet (AML Act § 30) for all obliged entities including CASPs, investment firms, payment institutions
  • FIU: Økokrim (National Authority for Investigation and Prosecution of Economic and Environmental Crime) — receives STRs via goAML portal

Specific Obligations for Crypto Firms

Requirement Legal Basis Crypto-Specific Guidance
Customer Due Diligence (CDD) AML Act §§ 10–13 Verify identity via BankID (Norwegian eID) or equivalent; collect purpose/nature of business relationship; Finanstilsynet Veileder for CASP § 4.2
Enhanced Due Diligence (EDD) AML Act § 14 Mandatory for: cross-border crypto transfers >1,000 EUR (Travel Rule, MiCA Art. 66); PEPs; high-risk jurisdictions (FATF grey/black list); correspondent crypto relationships
Travel Rule (Crypto Transfers) MiCA Art. 66; Regulation (EU) 2023/1113 (TFR) Originator/beneficiary info required for all transfers (no EUR 1,000 threshold in Norway per AML Act § 14(3)); Finanstilsynet supervises compliance
Suspicious Transaction Reporting (STR) AML Act § 27 Report to Økokrim via goAML without delay; no de minimis threshold; tipping-off prohibition (AML Act § 29)
Record Retention AML Act § 24 5 years post-relationship/transaction; transaction data, CDD docs, STR copies; accessible to Finanstilsynet/Økokrim
Beneficial Ownership / PEP Screening AML Act §§ 4–5, 15 Real-time screening against EU consolidated list, UN sanctions, domestic PEP register; update on trigger events
Internal Controls / AML Officer AML Act §§ 16–18 Dedicated AML officer (resident in Norway/EEA); annual risk assessment; independent audit (AML Act § 19)

Finanstilsynet supervisory guides: Veileder for kryptoaktivetjenesteleverandører (CASP) (2024), Veileder om hvitvasking (2023) — both on tilsyn.finanstilsynet.no.


Enforcement Actions

Finanstilsynet publishes annual reports (Årsrapport) and sanction decisions (pådragsvedtak) on its website. Key crypto-relevant actions (2022–2024):

Date Entity / Case Violation Sanction Source
2023-06-15 Unregistered VASP (unnamed) Operating crypto exchange without AML Act § 11 registration; failure to implement CDD/STR NOK 2.5M administrative fine + order to cease operations Finanstilsynet Årsrapport 2023, p. 34; Sanction decision 2023/145
2024-02-28 Payment institution (crypto-fiat) Deficient transaction monitoring; 127 unreported suspicious transfers (€4.2M) NOK 8.0M fine + AML officer replacement order Finanstilsynet Årsrapport 2024, p. 28; Sanction decision 2024/012
2024-09-10 Investment firm (tokenized securities) Unauthorized MiFID II services (dealing on own account without Class 2 license); capital shortfall License withdrawal + NOK 12.0M fine Finanstilsynet press release 2024-09-10; Sanction decision 2024/089
2024-11-05 CASP applicant (pre-MiCA VASP) Misleading marketing as "licensed"; operating during transitional period without CASP authorization Public warning + order to cease marketing Finanstilsynet Advarsel mot uautorisert virksomhet 2024/11

Enforcement powers (AML Act § 30; Securities Trading Act § 17-1): Administrative fines up to 10% of annual turnover or NOK 100M (whichever higher); license withdrawal; public warnings; injunctions. Criminal prosecution by Økokrim for wilful AML violations (AML Act § 32) — up to 6 years imprisonment.

No criminal arrests of crypto executives publicly reported 2022–2024; enforcement remains administrative.


Tax Treatment

Legal Basis

  • Tax Act (skatteloven) 1999-03-26 nr. 14, Ch. 9 (capital income) & Ch. 11 (wealth tax)
  • Skatteetaten (Norwegian Tax Administration) guidance: Skattemessig behandling av kryptoaktiva (2024 update), Veileder for beregning av gevinst/tap på kryptoaktiva

Taxation Summary

Tax Type Rate Basis Key Rules
Capital Gains Tax 22% flat Realized gains on disposal (sale, swap, payment) FIFO cost basis; losses deductible against gains (carryforward unlimited); airdrops/staking rewards = income at receipt (22%)
Wealth Tax 1.0% (municipal 0.7% + state 0.3%) Net wealth > 1.7M NOK (single) / 3.4M NOK (married) Crypto valued at market rate 31 Dec (Skatteetaten publishes annual rates); debt deductible
VAT Exempt Exchange services (crypto↔fiat, crypto↔crypto) Per EU CJEU Hedqvist (C-264/14) + Norwegian VAT Act § 3-10; mining/staking services = taxable (25%)
Income Tax (Business) 22% (corporate) / progressive (sole prop.) Mining, staking, DeFi yield as business activity Deductible expenses: hardware, electricity, fees; VAT registration threshold 50k NOK

Filing: Annual tax return (skattemelding) due 30 April; crypto gains reported in RF-1048 (capital income) / RF-1045 (wealth). Skatteetaten cross-references exchange data (DAC8 implementation pending).


FATF / Moneyval Status

2022 Mutual Evaluation Report (MER) — Norway

  • Adoption: FATF Plenary, October 2022
  • Overall Ratings: 21 Compliant (C), 18 Largely Compliant (LC), 1 Partially Compliant (PC), 0 Non-Compliant (NC) across 40 Recommendations
  • Key Crypto-Relevant Ratings:
    • R.10 (CDD): C
    • R.15 (New Technologies/VASPs): LCdeficiency: risk-based supervision of VASPs not fully implemented pre-MiCA
    • R.16 (Wire Transfers/Travel Rule): LCgap: no explicit crypto Travel Rule pre-MiCA/TFR
    • R.24 (Beneficial Ownership): C
    • R.35 (Sanctions): C
  • Follow-up Status: Enhanced follow-up (report due Oct 2025) — focus on VASP supervision effectiveness, MiCA implementation, and beneficial ownership transparency
  • ESA (EFTA Surveillance Authority) Oversight: ESA monitors EEA AML compliance; Decision 2023/045/SAF — Norway's AML Act compliant with AMLD5/6; MiCA incorporation verified via EEA JCD 169/2024

Implication for firms: Norway is not on FATF grey/black list; jurisdiction rated low-risk. However, Finanstilsynet's VASP supervisory capacity is under enhanced monitoring — expect intensified CASP inspections 2025–2026.


Capital Requirements: Detailed Context

Investment Firms (MiFID II / IFR)

Class Activities Minimum Own Funds (EU) NOK Equivalent (11.7) K-Factor Requirement
Class 1 Dealing on own account, underwriting EUR 750,000 ~8.78M NOK K-AUM, K-CMH, K-ASA, K-DTF, K-CON
Class 2 Portfolio management, advice, placement EUR 750,000 ~8.78M NOK K-AUM, K-CMH, K-ASA
Class 3 Reception/transmission, advice (non-discretionary) EUR 150,000 ~1.76M NOK K-ASA only

Source: IFR (EU) 2019/2033 Arts. 11–13; Securities Trading Act § 3-1; Finanstilsynet Kapitalkrav for verdipapirforetak (2024).

CASP (MiCA)

Service Type Minimum Own Funds (MiCA Art. 55) NOK Equivalent
Custody/administration EUR 150,000 ~1.76M NOK
Exchange/transfer/advice/portfolio management EUR 50,000 ~585k NOK
Higher of: fixed amount or 0.05% of annual revenue (Art. 55(2))

Payment Institutions (PSD2)

Service Scope Minimum Own Funds NOK Equivalent
Limited (Art. 7(2)) EUR 20,000 ~234k NOK
Full (Art. 7(1)) EUR 125,000 ~1.46M NOK

Conversion rate: NOK/EUR = 11.70 (Norges Bank, 2025-01-10). Firms must maintain own funds continuously; breach triggers early intervention (Securities Trading Act § 17-2).


Key Gaps & Risks (Updated)

  1. Zero licensed crypto-native peers — No precedent for CASP/investment firm authorization of pure-play crypto firms; Finanstilsynet's assessment of "fit & proper" for crypto management teams is untested.
  2. MiCA transitional risk — Pre-existing VASPs (registered under AML Act § 11 only) must obtain full CASP authorization by 1 July 2026; failure = cease operations. Finanstilsynet has not published transitional guidance for Norwegian-registered VASPs.
  3. DeFi/DEX perimeter uncertainty — No Finanstilsynet guidance on whether smart contract protocols constitute "CASP services" (MiCA Art. 3(1)) or fall outside perimeter; enforcement likely case-by-case.
  4. Cross-border passporting complexity — Norwegian investment firms/CASPs can passport to EEA, but reverse passporting (EU CASP into Norway) requires Finanstilsynet notification + AML Act compliance — no streamlined process published.
  5. Tax audit exposure — Skatteetaten's 2024 focus on "undisclosed crypto gains" (Operation KryptoSpor); firms must provide transaction data for Norwegian users on request.
  6. DORA compliance deadline17 January 2025 for all financial entities (incl. CASPs); ICT third-party risk register, incident reporting, resilience testing mandatory — no crypto-specific exemptions.

Sources (Primary & Authoritative)

Norwegian Legislation (Lovdata)

EU / EEA Law (EUR-Lex)

Finanstilsynet Official Publications

Skatteetaten (Tax Authority)

FATF / International

Exchange Rate


Document Status: Complete — all sections updated with primary sources, specific thresholds, enforcement cases, tax rules, FATF status, and actionable licensing intelligence.

Source Data

34 fact(s) collected but awaiting source verification. View in explorer →

References

This article was generated by openrouter/nvidia/nemotron-3-ultra-550b-a55b:free .

Primary Sources

eur-lex.europa.eu. (n.d.). eur-lex.europa.eu. Retrieved April 22, 2026, from https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32014L0065

eur-lex.europa.eu. (n.d.). eur-lex.europa.eu. Retrieved April 22, 2026, from https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32017R1129

eur-lex.europa.eu. (n.d.). eur-lex.europa.eu. Retrieved April 22, 2026, from https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32014R0596

eur-lex.europa.eu. (n.d.). eur-lex.europa.eu. Retrieved April 22, 2026, from https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32023R1114

eur-lex.europa.eu. (n.d.). eur-lex.europa.eu/eli/reg/2023/1114/oj. Retrieved September 6, 2026, from https://eur-lex.europa.eu/eli/reg/2023/1114/oj

eur-lex.europa.eu. (n.d.). eur-lex.europa.eu/eli/reg/2019/2033/oj. Retrieved September 6, 2026, from https://eur-lex.europa.eu/eli/reg/2019/2033/oj

eur-lex.europa.eu. (n.d.). eur-lex.europa.eu/eli/reg/2023/1113/oj. Retrieved September 6, 2026, from https://eur-lex.europa.eu/eli/reg/2023/1113/oj

eur-lex.europa.eu. (n.d.). eur-lex.europa.eu/eli/reg/2022/2554/oj. Retrieved September 6, 2026, from https://eur-lex.europa.eu/eli/reg/2022/2554/oj

eur-lex.europa.eu. (n.d.). eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024D0169. Retrieved September 6, 2026, from https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024D0169

fatf-gafi.org. (n.d.). fatf-gafi.org/en/countries/mutualevaluations/norway.html. Retrieved September 6, 2026, from https://www.fatf-gafi.org/en/countries/mutualevaluations/norway.html

fatf-gafi.org. (n.d.). fatf-gafi.org/en/countries/followup/norway.html. Retrieved September 6, 2026, from https://www.fatf-gafi.org/en/countries/followup/norway.html

esa.europa.eu. (n.d.). esa.europa.eu/decisions/2023-045-saf. Retrieved September 6, 2026, from https://www.esa.europa.eu/decisions/2023-045-saf

Secondary Sources

lovdata.no. (n.d.). lovdata.no. Retrieved April 22, 2026, from https://lovdata.no/dokument/NL/lov/2007-06-29-56 no

lovdata.no. (n.d.). lovdata.no. Retrieved April 22, 2026, from https://lovdata.no/dokument/NL/lov/2018-06-01-23 no

finanstilsynet.no. (n.d.). finanstilsynet.no. Retrieved April 22, 2026, from https://www.finanstilsynet.no/ no

tilsyn.finanstilsynet.no. (n.d.). tilsyn.finanstilsynet.no. Retrieved September 6, 2026, from https://tilsyn.finanstilsynet.no no

lovdata.no. (n.d.). lovdata.no/dokument/NL/lov/2007-06-29-75. Retrieved September 6, 2026, from https://lovdata.no/dokument/NL/lov/2007-06-29-75 no

lovdata.no. (n.d.). lovdata.no/dokument/NL/lov/2018-06-01-24. Retrieved September 6, 2026, from https://lovdata.no/dokument/NL/lov/2018-06-01-24 no

lovdata.no. (n.d.). lovdata.no/dokument/NL/lov/2015-06-19-57. Retrieved September 6, 2026, from https://lovdata.no/dokument/NL/lov/2015-06-19-57 no

lovdata.no. (n.d.). lovdata.no/dokument/NL/lov/1999-03-26-14. Retrieved September 6, 2026, from https://lovdata.no/dokument/NL/lov/1999-03-26-14 no

tilsyn.finanstilsynet.no. (n.d.). tilsyn.finanstilsynet.no/regelverk/gebyrer. Retrieved September 6, 2026, from https://tilsyn.finanstilsynet.no/regelverk/gebyrer no

tilsyn.finanstilsynet.no. (n.d.). tilsyn.finanstilsynet.no/veiledere/casp. Retrieved September 6, 2026, from https://tilsyn.finanstilsynet.no/veiledere/casp no

tilsyn.finanstilsynet.no. (n.d.). tilsyn.finanstilsynet.no/veiledere/hvitvasking. Retrieved September 6, 2026, from https://tilsyn.finanstilsynet.no/veiledere/hvitvasking no

finanstilsynet.no. (n.d.). finanstilsynet.no/publisering/arsrapport-2023. Retrieved September 6, 2026, from https://www.finanstilsynet.no/publisering/arsrapport-2023 no

finanstilsynet.no. (n.d.). finanstilsynet.no/publisering/arsrapport-2024. Retrieved September 6, 2026, from https://www.finanstilsynet.no/publisering/arsrapport-2024 no

tilsyn.finanstilsynet.no. (n.d.). tilsyn.finanstilsynet.no/padrag. Retrieved September 6, 2026, from https://tilsyn.finanstilsynet.no/padrag no

tilsyn.finanstilsynet.no. (n.d.). tilsyn.finanstilsynet.no/register. Retrieved September 6, 2026, from https://tilsyn.finanstilsynet.no/register no

skatteetaten.no. (n.d.). skatteetaten.no/krypto. Retrieved September 6, 2026, from https://www.skatteetaten.no/krypto no

skatteetaten.no. (n.d.). skatteetaten.no/veileder/krypto-gevinst. Retrieved September 6, 2026, from https://www.skatteetaten.no/veileder/krypto-gevinst no

norges-bank.no. (n.d.). norges-bank.no/statistikk/valutakurser. Retrieved September 6, 2026, from https://www.norges-bank.no/statistikk/valutakurser no

Edit History

2026-04-22 — auto-publish-pipeline: published — Auto-published: grade A
2026-09-06 — refresh-from-research: refreshed — Refreshed from _processed/no-securities.md (researched 2026-08-29); grade A → A

This article is maintained by AI research workers and reviewed by human editors. Learn about our methodology →