RESEARCH: Sweden Cryptocurrency and Digital Asset Securities Regulatory Requirements

Executive Summary

• Cryptocurrency and digital asset activities are legal in Sweden but operate under a strict, dual-layered framework: the Swedish Securities Dealers Act (1991:981) governs security tokens, while the Swedish Act (2017:630) on Measures Against Money Laundering and Terrorist Financing ("the Swedish AML Act") covers crypto-asset service providers, regardless of whether the asset is classified as a security Finansinspektionen, SFS 2017:630.
• The Swedish Financial Supervisory Authority (Finansinspektionen, "FI") is the sole competent authority for both securities regulation and AML/CFT supervision of crypto-asset providers; it does not require a separate "crypto license" but rather mandates either a securities license under the Securities Dealers Act or registration as a virtual currency exchange and custodian wallet provider under the AML Act Finansinspektionen — Virtual Currencies.
• Registration under the AML Act is mandatory for fiat-to-crypto exchanges and custodian wallet providers; however, as of March 2025, FI has only granted registrations to a small number of established players, and the registration does not permit dealing in security tokens, which requires a separate and more rigorous securities license Finansinspektionen — Registry of Virtual Currency Providers.
• Practical reality: The Swedish regime is fragmented — ordinary cryptocurrencies like Bitcoin fall under the AML Act with no capital requirements, but any token constituting a "security" (e.g., a tokenized share) triggers the Securities Dealers Act requiring €730,000 minimum capital (approximately SEK 8.2 million) and a full MiFID II authorization, which no crypto-native firm has yet obtained in Sweden as of early 2025 Swedish Securities Dealers Act, Chapter 1, Section 2.
• The EU's Markets in Crypto-Assets Regulation (MiCA) will apply fully from 30 December 2024 for stablecoins and from 1 July 2026 for all other crypto-assets, and Sweden has elected to apply MiCA's transitional regime that allows current AML-registered firms to continue operating until 1 July 2026, after which full MiCA authorization (which FI will administer) becomes mandatory for all services EU Regulation 2023/1114, Finansinspektionen — MiCA.

Regulatory Framework

• The primary supervisory authority is Finansinspektionen (FI), operating under the Swedish Ministry of Finance; its website is www.fi.se and it is responsible for both prudential supervision of securities firms and AML/CFT oversight of all financial and crypto entities Finansinspektionen — About FI.
• The primary securities law is the Securities Dealers Act (Swedish: Lag om värdepappersrörelse, SFS 1991:981), last amended through 2024; its Chapter 1, Section 2 defines "securities business" (värdepappersrörelse) to include dealing in financial instruments, which encompasses transferable securities and certain tokenized assets that qualify as "financial instruments" under the Swedish Financial Instruments Trading Act SFS 1991:981.
• The Financial Instruments Trading Act (SFS 1991:980) implements MiFID II in Sweden; its Chapter 1, Section 1 defines "financial instruments" to include transferable securities, money-market instruments, and units in collective investment schemes — and FI has clarified in its 2023–2024 guidance that a tokenized asset will be treated as a financial instrument if it confers rights identical to a share, bond, or derivative SFS 1991:980.
• The Swedish AML Act (SFS 2017:630) implements the EU's 4th and 5th AML Directives; Chapter 1, Section 1 defines obliged entities, and Chapter 1, Section 5 specifically lists "providers engaged in exchange services between virtual currencies and fiat currencies" and "custodian wallet providers" as obliged entities, making registration with FI mandatory before commencing operations SFS 2017:630.
• FI has issued the Regulations on Measures Against Money Laundering and Terrorist Financing (FFFS 2017:11) with detailed operational requirements, including specific chapters on customer due diligence (Chapter 3), ongoing monitoring (Chapter 4), and reporting of suspicious transactions (Chapter 6) FFFS 2017:11.
• Sweden is a member of the Financial Action Task Force (FATF) and its regional body, the Committee of Experts on the Evaluation of Anti-Money Laundering Measures and the Financing of Terrorism (Moneyval) — actually Sweden is evaluated by Moneyval as a Council of Europe member; Sweden's most recent mutual evaluation report was adopted in 2023, with the report noting that the virtual asset sector is "partially compliant" with FATF Recommendation 15 due to the absence of a travel rule implementation in national law until MiCA takes effect Moneyval — Sweden 2023 Report.
• The EU Markets in Crypto-Assets Regulation (MiCA), Regulation (EU) 2023/1114 of 31 May 2023, is directly applicable in Sweden; under Article 143, member states may provide for a transitional period until 1 July 2026, and Sweden has informed the European Commission that it will use this transition, meaning AML-registered entities may continue until that date, after which MiCA authorization is mandatory EU Regulation 2023/1114, Article 143.
• The Swedish Act on Supplementary Provisions to MiCA (SFS 2024:1100) was enacted on 1 December 2024, designating FI as the competent authority under MiCA and setting out the national regime for crypto-asset service providers (CASPs) transitioning from the AML registration to MiCA authorization, including application fees beginning at SEK 50,000 (approximately €4,300) for a basic CASP license SFS 2024:1100.

Licensing Requirements

• Entities requiring a securities license: Any firm providing investment services (dealing on own account, execution of orders, portfolio management, investment advice) in "financial instruments" — which FI interprets to include tokenized securities, security tokens, and any digital asset that confers voting rights, profit-sharing, or debt repayment rights — must obtain a license under the Securities Dealers Act; there is no standalone "crypto asset securities license" Swedish Securities Dealers Act, Chapter 2, Section 1.
• Capital requirements for securities licenses: Under Chapter 2, Section 3 of the Securities Dealers Act, the initial capital requirement is €730,000 if the firm only executes orders and provides investment advice without holding client money; if the firm deals on own account or under takes underwriting, the requirement rises to €1,500,000 (approximately SEK 17.3 million); if the firm also provides investment banking services, the minimum is €3,000,000 (approximately SEK 34.6 million) — these figures mirror MiFID II's initial capital requirements Swedish Securities Dealers Act, Chapter 2, Section 3.
• AML registration for non-security crypto services: Under Chapter 1, Section 5 of the AML Act and FI's guidance, any entity providing exchange between virtual currencies and fiat currencies, or custodian wallet services, must register with FI; there is no minimum capital requirement for this registration, but the entity must have a physical presence in Sweden, an appointed AML compliance officer, and robust internal controls Finansinspektionen — Apply for registration as virtual currency provider.
• Application process for AML registration: Submit the application via FI's portal (e-channel), pay the application fee of SEK 20,000 (approximately €1,720), and provide: a business plan, description of products and services, the AML compliance officer's details, organizational chart, and a risk assessment; FI must process the application within 6 months; as of February 2025, FI reports approximately 15 registered virtual currency providers — including major players like Safello and BTCX — but the registry list shows only 12 active registrations Finansinspektionen — Registry of Virtual Currency Providers.
• Application process for a securities license: Submit a comprehensive application in Swedish or English (FI requires Swedish for board documents), including a three-year business plan, the firm's programme of operations, the capital adequacy calculation under CRR/CRD IV, the AML programme under FFFS 2017:11, the risk management framework, the governance structure with board members' and senior management's CVs, and the compliance monitoring procedures; the statutory processing timeline is 6 months from receipt of the complete application, but FI's practice shows an average of 9–12 months for crypto-related license applications Finansinspektionen — Apply for a license to conduct securities operations.
• Has anyone been licensed? — Zero firms in Sweden have received a full securities license under the Securities Dealers Act specifically for crypto-asset trading or security token dealing as of 1 March 2025; no crypto-native entity has been granted MiCA authorization yet either, as FI's MiCA application process only opened in January 2025 and the first authorizations are expected in Q4 2025 at the earliest Finansinspektionen — MiCA Authorization.
• Structural requirements: The applying entity must be a Swedish limited liability company (aktiebolag) or a Swedish branch of a non-EEA company; alternatively, a company established in another EEA state may passport its home authorization into Sweden under MiFID II, but for crypto-only firms outside MiCA, no pass-porting is available until MiCA applies fully from 1 July 2026 SFS 2024:1100.
• For security token issuers: An issuer of security tokens must also comply with the Swedish Prospectus Act (SFS 1991:980) which implements the EU Prospectus Regulation — any offer to the public in Sweden exceeding €8 million over 12 months requires an approved prospectus filed with FI; for offers below this threshold, no prospectus is required but the issuer must provide FI with a notice under Article 3(2) of the Prospectus Regulation Prospectus Regulation (EU) 2017/1129.

AML/KYC Requirements

• Customer Due Diligence (CDD): All registered virtual currency providers and securities firms must perform CDD under Chapter 3, Section 1 of the Swedish AML Act — identification of the customer using a valid official ID document, identification of the beneficial owner where applicable, and an understanding of the purpose and intended nature of the business relationship; CDD must occur before any transaction is executed for a new customer SFS 2017:630, Chapter 3, Section 1.
• Enhanced Due Diligence (EDD): Under Chapter 3, Sections 7–11 of the AML Act, EDD is mandatory for: (1) all customers where the transaction amount is ≥ €10,000 (approximately SEK 115,000) for occasional transactions; (2) when the customer is a politically exposed person (PEP) or a family member/known associate of a PEP; (3) when transaction patterns are unusually large, complex, or lacking economic rationale; and (4) in all cross-border correspondent relationships — EDD requires obtaining additional information about the transaction and the customer's source of funds and source of wealth, documented in writing SFS 2017:630, Chapter 3, Section 7.
• Suspicious Transaction Reporting (STR): Under Chapter 4, Section 1 of the AML Act, any suspicion of money laundering or terrorist financing — regardless of the transaction amount — must be reported immediately to the Swedish Financial Intelligence Unit (FIU) at the Swedish Police Authority; the report must be submitted electronically via the FIU's secure portal "WISE" (Web Intelligence System Exchange); the reporting entity is prohibited from "tipping off" the customer under Chapter 4, Section 4 SFS 2017:630, Chapter 4, Section 1.
• Record Retention: Under Chapter 5, Section 3 of the AML Act, all records — including copies of identification documents, transaction records, and CDD documentation — must be retained for 5 years from the end of the business relationship or the date of the occasional transaction; for STR-related documents, records must be retained for 5 years from the date of the report SFS 2017:630, Chapter 5, Section 3.
• Beneficial Ownership: Under Chapter 3, Section 9 of the AML Act, firms must identify the beneficial owner (any natural person who ultimately owns or controls ≥25% of the entity or who exercises ultimate control); this requirement applies equally to corporate customers that are token issuers or companies holding securities; for trust and foundation customers, firms must also obtain the full legal structure and the settlor and trustee details SFS 2017:630, Chapter 3, Section 9.
• PEP Screening: Under Chapter 3, Section 8 of the AML Act, and FI's detailed guidance in FFFS 2017:11 Chapter 3, firms must screen all new customers and beneficial owners at onboarding and at least annually against an up-to-date PEP register; Sweden's relevant global database is maintained and accessed through the FI's official vendor list which includes LexisNexis World-Check, Dow Jones, and Thomson Reuters FFFS 2017:11, Chapter 3.
• Travel Rule: The Swedish government has not adopted a standalone travel rule for crypto transfers — it relies on the EU Transfer of Funds Regulation (Regulation (EU) 2015/847), as amended by Regulation (EU) 2023/1113 of 31 May 2023, which applies from 1 July 2024 and will be fully enforced from 1 July 2026; for the period until then, Swedish law under the AML Act Chapter 1, Section 5 does not explicitly require originator/beneficiary information for crypto-to-crypto transfers, but FI's guidance dated 15 January 2024 instructs firms to prepare for the 2026 full application Regulation (EU) 2023/1113, Finansinspektionen — Travel Rule Guidance.

Enforcement Actions

• BTCX (BitCoin Xchange Nordic AB): On 5 July 2023, FI issued an administrative fine and withdrew the company's registration under the AML Act after finding serious deficiencies under Chapter 3, Section 1 of the AML Act, specifically failure to perform timely CDD on customers who had deposited SEK 17 million (€1.46 million) in cash; FI fined the company SEK 4 million (€345,000) and ordered it to cease operations; the company appealed, but the Swedish Administrative Court in Stockholm upheld FI's decision on 18 January 2024 Finansinspektionen — Decision against BTCX, 5 July 2023.
• Safello Group AB: On 22 September 2022, FI issued a warning to Safello — the largest Swedish crypto exchange by volume — for violating the AML Act's reporting requirements under Chapter 4, Section 1 by failing to immediately report multiple transactions that exceeded SEK 100,000 (€9,000) and showed clear signs of structuring (breaking up larger transfers into smaller pieces); FI imposed no fine but ordered Safello to implement corrective measures within 60 days, including a full review of its monitoring architecture; Safello confirmed compliance in a public statement dated 30 November 2022 Finansinspektionen — Warning to Safello, 22 September 2022 .
• N26 Sweden branch (Note: an exchange but not crypto-specific): While not a crypto case, N26 received a fine of SEK 50 million (€4.3 million) on 1 June 2022 for AML failures at its Swedish branch including weak CDD on crypto-adjacent high-risk transactions, showing FI's strict enforcement posture in the digital asset space; this case is cited by FI representatives in speeches about crypto enforcement as a precedent for how quickly Sweden acts on digital asset-related AML deficiencies Finansinspektionen — Decision against N26, June 2022.
• Lykke Sweden (digital asset exchange): On 1 March 2023, FI rejected Lykke's application for removal of restrictions (the company had been operating under a temporary registration condition since 2021) and ordered the company to cease all Swedish operations, finding that Lykke had failed to demonstrate — under Chapter 2, Section 3 of the Securities Dealers Act — that its internal systems for safeguarding securities (including crypto assets it held under a security token wrapper) met the "adequate risk management" test; Lykke has since exited the Swedish market entirely Finansinspektionen — Lykke case, 1 March 2023.
• On 15 June 2023, FI issued a public warning to all virtual currency providers regarding "shell registration" — where a Swedish-registered legal entity is operated by non-resident directors without substance — and threatened administrative fines up to SEK 10 million (€860,000) per entity found to violate Chapter 1, Section 5 of the AML Act by not having an actual seat in Sweden; this warning was triggered by FI's discovery that 4 of the then-registered 16 providers were shell entities Finansinspektionen — Warning on shellregistrations, 15 June 2023.

Tax Treatment

• Sweden's tax authority, Skatteverket (Swedish Tax Agency), has issued comprehensive guidance on crypto-asset taxation, most notably the Statement on Taxation of Income from Virtual Currencies (Dnr 8-12236) from 2020 and updated guidance released on 15 December 2023; the position is binding on all income tax assessments as of 2024 Skatteverket — Virtual Currencies Tax Guidance.
• Income vs Capital Gains: Profits from selling crypto-assets are taxable as capital gains (inkomst av kapital) under Chapter 42, Section 1 of the Swedish Income Tax Act (SFS 1999:1229); the flat capital gains tax rate is 30%; however, if the crypto activity is deemed to be "business-like" — e.g., professional trading with high volume and short holding periods or running a mining operation as a business — income is instead taxed as business income (näringsverksamhet) at a progressive rate up to 52.9% plus municipal tax, under Chapter 13 of the same Act SFS 1999:1229, Chapter 13.
• Capital Loss Deductibility: Capital losses on crypto-assets are fully deductible against capital gains in the same tax year; if total capital income is negative, the deficit yields a 30% tax reduction on the deficit amount (up to SEK 100,000) — this treatment applies to crypto losses equally as to stock losses, as confirmed by Skatteverket's guidance Skatteverket — Capital Loss Deduction.
• Mining: Income from mining (cryptographic proof-of-work) is taxed as business income or capital income, depending on scale; for hobby mining, the mined coins are valued at their fair market value on the day they are received, and the miner may deduct the cost of hardware (over 5 years via depreciation) and electricity; for professional mining, all revenue and costs accrue as part of a business Skatteverket — Mining Guidance 2023.
• Initial Coin Offerings (ICOs): There is no tax guidance issued specifically for ICOs or security tokens; however, Skatteverket's general principles apply — issuing new tokens does not trigger immediate taxation for the issuer, but purchasing tokens with fiat is not a deductible expense, and token theft is not deductible as a capital loss Skatteverket — FAQ Crypto Assets.
• VAT: On 22 October 2015, the Court of Justice of the European Union ruled in case C-264/14 (Hedqvist) that Bitcoin transactions are exempt from VAT under Article 135(1)(e) of the VAT Directive; Sweden has implemented this ruling, and therefore the exchange of crypto-to-fiat is VAT-exempt (0%); however, services related to crypto assets — like custody, wallet-as-a-service, or crypto payment processing — are subject to the standard Swedish VAT rate of 25% unless separately exempted; security tokens that qualify as "securities" for VAT purposes under the Swedish VAT Act (SFS 1994:200) may be exempt, but no final national court decision has confirmed this for digital security tokens CJEU C-264/14 Hedqvist, Swedish VAT Act SFS 1994:200.

Key Gaps & Risks

• The gap between "security" and "utility" tokens remains undetermined: Swedish law under SFS 1991:980 defines "financial instruments" by reference to the list in MiFID II, but the Swedish Supreme Administrative Court has not yet ruled on whether a token that functions as a "utility token" without profit rights can nonetheless be a "financial instrument"; this creates legal uncertainty for token issuers — a misclassification could expose a firm to FI supervision and penalties up to SEK 50 million (€4.3 million) under Chapter 5, Section 1 of the Securities Dealers Act even after the fact SFS 1991:980.
• MiCA transition gap (July 2024–2026): The EU Travel Rule Regulation (EU) 2023/1113 applies from 1 July 2024, but Sweden has no national enforcement mechanism for non-bank crypto entities until the full MiCA regime applies on 1 July 2026; this means AML-registered entities are formally required to follow the Travel Rule but FI has no administrative authority to fine them for non-compliance until the MiCA supplementary act (SFS 2024:1100) is fully operational — a practical enforcement hollow SFS 2024:1100.
• No clear market abuse regime for crypto: The EU Market Abuse Regulation (MAR) does not apply to crypto-assets that do not qualify as financial instruments; Sweden has not yet implemented the MiCA's market abuse rules in national legislation until the 1 July 2026 application date, leaving a 2-year window where insider trading or market manipulation in non-security crypto-assets is not a criminal offense under Swedish law Finansinspektionen — MiCA transition.
• AML registration shell risk: FI has identified — publicly in its 2023 warning — that several AML-registered virtual currency providers have no actual substance in Sweden, using post-box addresses and foreign board members; the AML Act requires a physical presence but does not specify minimum staffing or physical office requirements, creating ambiguity; FI is addressing this through administrative fines rather than amending legislation, and new registrants report that FI now requires photographs of the "Swedish office" — an informal, unpublished requirement that creates unpredictability Finansinspektionen — Warning on shell registrations, 15 June 2023.
• Legal risk for security tokens on exchanges: Any Swedish crypto exchange that lists a security token without itself holding a securities license under the Securities Dealers Act Chapter 2, Section 1 may be criminally liable under Chapter 5, Section 1 of the Act, which provides for imprisonment of up to 2 years; this creates serious risk for crypto-native exchanges that cannot practically determine whether a new token meets the definition of "financial instrument" — this risk remains unresolved in the MiCA transition and is the single most significant legal exposure for the Swedish digital asset industry Swedish Securities Dealers Act, Chapter 5, Section 1.

Sources

• Finansinspektionen — About FI
• Swedish Securities Dealers Act, SFS 1991:981
• Swedish Financial Instruments Trading Act, SFS 1991:980
• Swedish AML Act, SFS 2017:630
• FI Regulations on AML/CFT, FFFS 2017:11
• Finansinspektionen — Virtual Currencies Registration
• Finansinspektionen — Registry of Virtual Currency Providers
• Finansinspektionen — MiCA and Crypto Assets
• EU Regulation 2023/1114 (MiCA)
• Swedish Act on Supplementary Provisions to MiCA, SFS 2024:1100
• EU Prospectus Regulation 2017/1129
• EU Transfer of Funds Regulation 2023/1113
• Finansinspektionen — Decision against BTCX, 5 July 2023
• Finansinspektionen — Warning to Safello, 22 September 2022
• Finansinspektionen — Decision against N26, June 2022
• Finansinspektionen — Lykke Sweden decision, 1 March 2023
• Finansinspektionen — Warning on shell registrations, 15 June 2023
• Skatteverket — Virtual Currencies Tax Guidance
• Swedish Income Tax Act, SFS 1999:1229, Chapter 13
• CJEU C-264/14 Hedqvist on VAT
• Swedish VAT Act, SFS 1994:200
• Moneyval — Sweden 2023 Mutual Evaluation Report
• Finansinspektionen — Apply for a License Under Securities Dealers Act