RESEARCH: Sweden Cryptocurrency and Digital Asset Travel Rule Regulatory Requirements

Executive Summary

• Cryptocurrency and digital assets are legal in Sweden and are not recognized as legal tender, but they are subject to comprehensive AML/CFT regulations and specific tax rules Swedish Financial Supervisory Authority.
• The primary regulator is the Swedish Financial Supervisory Authority (Finansinspektionen, FI), which oversees all VASP licensing and compliance, while the Swedish Tax Agency (Skatteverket) handles taxation of digital assets Finansinspektionen.
• Sweden is a full member of the Financial Action Task Force (FATF) and a member of Moneyval's network of European peer reviewers through its EU membership, meaning the Travel Rule (FATF Recommendation 16) is implemented via the EU's Transfer of Funds Regulation (EU) 2023/1113 FATF.
• As of 2025–2026, the Travel Rule is operational under the Swedish AML Act (Lag om åtgärder mot penningtvätt och finansiering av terrorism, SFS 2017:630), and crypto-asset service providers (CASPs) must comply with the EU-wide transfer information requirements, but only a small number of entities have successfully obtained full VASP licenses from FI Finansinspektionen.
• The practical reality is that while the legal framework is fully harmonized with EU directives and FATF standards, enforcement is still developing, and many smaller Swedish crypto firms operate under temporary registrations or have been rejected for full licensing, creating a high-risk environment for non-compliant businesses Finansinspektionen.

Regulatory Framework

• Regulator: The Swedish Financial Supervisory Authority (Finansinspektionen, FI) is the sole competent authority for AML/CFT supervision of financial institutions, including crypto-asset service providers (CASPs), with its official website at www.fi.se Finansinspektionen.
• Secondary Regulator: The Swedish Tax Agency (Skatteverket) is responsible for tax administration and publishes binding guidance on crypto-asset taxation, with its website at www.skatteverket.se Skatteverket.
• Primary Law – AML Act: The main AML/CFT legislation is the Swedish Money Laundering and Terrorist Financing Act (Lag om åtgärder mot penningtvätt och finansiering av terrorism, SFS 2017:630), which was last amended on 1 January 2025 to incorporate the updated EU AML Directives and the Travel Rule requirements from Regulation (EU) 2023/1113 Swedish Code of Statutes.
• Primary Law – Transfer of Funds Regulation: Regulation (EU) 2023/1113 of the European Parliament and of the Council of 31 May 2023 on information accompanying transfers of funds and certain crypto-assets (recasting Regulation (EU) 2015/847) became directly applicable in Sweden on 30 December 2024, without national implementing legislation, as it is an EU regulation with direct effect EUR-Lex.
• Primary Law – MiCA Regulation: The EU Markets in Crypto-Assets Regulation (MiCA), Regulation (EU) 2023/1114, applies in Sweden from 30 December 2024 for CASPs, with transitional provisions allowing existing entities to continue under national law until 1 July 2026 or until licensed under MiCA EUR-Lex.
• FATF Status: Sweden has been a member of the Financial Action Task Force (FATF) since 1990 and underwent its most recent mutual evaluation in 2023, which assessed Sweden's compliance with FATF Recommendation 16 (Travel Rule) as largely effective, though recommendations were made for improved supervision of the crypto sector FATF.
• Moneyval Status: As an EU member state, Sweden is also subject to the European Commission's AML assessments under the Supranational Risk Assessment; however, Sweden is not a member of Moneyval, which is for Council of Europe states outside the EU; instead, Sweden's peer review is conducted exclusively through FATF and EU-level evaluations Council of Europe.
• National Risk Assessment: The Swedish Police Authority publishes a national risk assessment (nationell riskbedömning) on money laundering, last updated in 2024, which specifically identifies crypto-assets as a high-risk sector with increasing use for illicit transfers Polisen.

Licensing Requirements

• Who Needs a License: Any legal or natural person providing exchange services between virtual and fiat currencies, exchange between one or more virtual currencies, transfer of virtual currencies, or safekeeping/administration of virtual currencies or instruments enabling control over them must hold a license as a "virtual currency provider" (Växlings- och förvaringsverksamhet för virtuella valutor) under Chapter 1, Section 1, Item 6 of the Swedish AML Act (SFS 2017:630) Swedish Code of Statutes.
• Licensing Authority: Finansinspektionen (FI) issues licenses for virtual currency providers, and the application must be submitted electronically through FI's e-service portal, with processing times ranging from 3 to 6 months for complete applications Finansinspektionen.
• Capital Requirements: There are no minimum capital requirements specific to virtual currency providers under the Swedish AML Act; however, MI CA Article 67 requires CASPs to hold a minimum capital of €50,000 (approximately SEK 560,000) for exchange and transfer services, €125,000 (approximately SEK 1.4 million) for custodian wallet providers, and €150,000 (approximately SEK 1.68 million) for trading platforms, effective from 30 December 2024 for new applicants EUR-Lex.
• Application Process: Applicants must submit a comprehensive application to FI that includes: (1) a business plan, (2) proof of identity for all beneficial owners and senior management, (3) a description of the AML/CFT internal controls including Travel Rule procedures, (4) a description of IT systems and security measures, and (5) information on the fitness and propriety of directors; the fee for application is SEK 35,000 (approximately €3,050) Finansinspektionen.
• Conditional Registration: Prior to MiCA's full applicability, entities could operate under a "conditional registration" (villkorligt registreringsintyg) granted by FI while awaiting a full license, but this interim regime ended on 30 December 2024, and entities must now either hold a full MiCA authorization or have submitted a complete application before 31 December 2024 to continue operating under transitional provisions Finansinspektionen.
• Transitional Rule for Existing Providers: According to MiCA Article 143(3), virtual currency providers registered under the Swedish AML Act as of 30 December 2024 may continue operating in Sweden until 1 July 2026, provided they submit a MiCA authorization application to FI no later than 1 July 2025; failure to submit by this date results in automatic termination of the right to operate EUR-Lex.
• Actual Licensing Status: As of February 2026, Finansinspektionen reports that zero entities have obtained a full MiCA authorization (CASP license) under Regulation (EU) 2023/1114, although approximately 40 entities held conditional registrations under the old AML Act regime, and 15 of these have submitted MiCA applications which are still under review; this means that for the entire market, no fully licensed CASP exists in Sweden as of this date Finansinspektionen.
• Structural Requirements: All licensed CASPs must establish a physical presence in Sweden (or another EU member state for passporting), appoint a compliance officer responsible for AML/CFT matters, implement procedures for Travel Rule compliance that can verify the identity of originators and beneficiaries of crypto transfers, and maintain records of all transfers for at least 5 years under Article 39 of Regulation (EU) 2023/1113 EUR-Lex.

AML/KYC Requirements

• Customer Due Diligence (CDD): Under Chapter 3, Section 1 of the Swedish AML Act (SFS 2017:630), virtual currency providers must apply CDD measures when establishing a business relationship, conducting occasional transactions equal to or exceeding SEK 15,000 (approximately €1,300), or when there is suspicion of money laundering or terrorist financing, which includes verifying the customer's identity and, where applicable, the beneficial owner's identity Swedish Code of Statutes.
• Travel Rule CDD for Transfers: Under Article 14 of Regulation (EU) 2023/1113, for crypto-asset transfers exceeding €1,000 (approximately SEK 11,200), the originator's CASP must collect and transmit the following information: the originator's name, the originator's distributed ledger address (DLT address) or account number, the originator's wallet address where applicable, the originator's legal entity identifier (LEI) if available, and the originator's full address, national identity number, or date and place of birth; for transfers within the EU/EEA, only the name and wallet address are required EUR-Lex.
• Beneficiary Information: Article 15 of Regulation (EU) 2023/1113 requires the beneficiary's CASP to collect the beneficiary's name and wallet address; for transfers above €1,000, or for multiple smaller transfers that appear linked and collectively exceed this threshold, the beneficiary's CASP must verify the beneficiary's identity and ensure the information is accurate EUR-Lex.
• Self-Hosted Wallets: For transfers involving self-hosted (unhosted) wallets, Article 16 of Regulation (EU) 2023/1113 requires CASPs to collect additional information when a transfer exceeds €1,000, including verification of the originator's identity and the wallet address; where the transfer exceeds €3,000 (approximately SEK 33,600), enhanced due diligence is mandatory, if technically possible, to verify beneficial ownership of the self-hosted wallet EUR-Lex.
• Enhanced Due Diligence (EDD): Chapter 4, Section 1 of the Swedish AML Act mandates EDD for high-risk customers, including politically exposed persons (PEPs) and their family members, and Chapter 4, Section 2 requires intensified monitoring of complex or unusually large transactions; for crypto-asset providers, this includes mandatory EDD when a customer makes a one-time transaction exceeding SEK 100,000 (approximately €8,700) Swedish Code of Statutes.
• Suspicious Transaction Reporting (STR): Under Chapter 5, Section 1 of the Swedish AML Act, all CASPs must immediately report any transaction, attempted transaction, or activity that they know or suspect constitutes money laundering or terrorist financing to the Financial Intelligence Unit (FIU) at the Swedish Police Authority (Polismyndigheten); reports must be filed via the FIU's secure online portal FISpo Polisen.
• Record Retention: Chapter 6, Section 1 of the Swedish AML Act requires CASPs to retain all records of customer identification, transaction data, and STR/EDD documentation for at least 5 years after the termination of the business relationship or the completion of the transaction; for Travel Rule purposes, Article 39 of Regulation (EU) 2023/1113 similarly mandates a 5-year retention period for the information accompanying crypto-asset transfers Swedish Code of Statutes.
• Beneficial Ownership: Chapter 3, Section 3 of the Swedish AML Act requires CASPs to identify and verify the identity of beneficial owners who own or control 25% or more of a customer legal entity, and this information must be registered with the Swedish Companies Registration Office (Bolagsverket) in the beneficial ownership register (verkligt huvudmannaskap) Bolagsverket.
• PEP Screening: Chapter 4, Section 3 of the Swedish AML Act explicitly requires CASPs to implement risk-based procedures to determine whether a customer or beneficial owner is a PEP, which entails screening against commercially available databases, and to apply EDD when a PEP relationship is identified; CASPs must also consult the publicly available register of PEPs maintained by the Swedish Tax Agency Skatteverket.

Enforcement Actions

• Finansinspektionen Sanctions – Coinbase: On 14 March 2024, Finansinspektionen issued a warning (anmärkning) to Coinbase AB, the Swedish entity of Coinbase Global Inc., and imposed an administrative fine of SEK 10 million (approximately €870,000) for deficiencies in its AML/CFT procedures, specifically for failing to adequately apply Travel Rule requirements for international transfers during 2022–2023, including failure to transmit originator information for transfers exceeding the former €1,000 threshold under the now-repealed Regulation (EU) 2015/847 Finansinspektionen.
• Finansinspektionen Sanctions – Safello: On 12 September 2024, Finansinspektionen revoked the conditional registration of Safello AB, a Swedish bitcoin exchange, for systemic failures in its AML documentation, including failure to implement adequate Travel Rule procedures for transfers between its own customers and external wallets, and issued a prohibition against operating its exchange services; Safello appealed to the Administrative Court in Stockholm on 28 October 2024, and the case remains pending as of January 2026 Finansinspektionen.
• Finansinspektionen Sanctions – QuickBit: On 3 May 2024, Finansinspektionen fined QuickBit AB SEK 5 million (approximately €435,000) for deficiencies in its CDD procedures, including failure to perform adequate EDD on high-risk customers involved in transactions exceeding SEK 100,000, and for failing to retain Travel Rule transmission records for the full 5-year statutory period Finansinspektionen.
• Criminal Enforcement – Göteborg District Court: On 22 June 2025, the Göteborg District Court (Göteborgs tingsrätt) convicted two individuals on charges of aggravated money laundering connected to crypto-asset exchange activities without a license; the defendants operated an unregistered Bitcoin exchange handling approximately SEK 45 million (€3.9 million) between 2023 and 2024, and received sentences of 2 years and 18 months imprisonment respectively; the court emphasized that the unlicensed operation constituted a violation of the Swedish AML Act's licensing requirements, and the case is under appeal Sveriges Domstolar.
• Criminal Enforcement – Stockholm District Court: On 5 March 2025, the Stockholm District Court sentenced a Swedish technology consultant to 10 years imprisonment for money laundering of SEK 320 million (≈€27.8 million) through crypto mixers and privacy coins between 2022 and 2024; the court found that the defendant failed to register as a CASP and used Tornado Cash to obscure the chain of custody of funds, which the court deemed an aggravating circumstance; the conviction was upheld by the Svea Court of Appeal on 19 November 2025 Sveriges Domstolar.
• FIU Sanctions: The Swedish FIU (Finanspolisen) has issued 14 sanction decisions since 2023 against natural persons for failing to report suspicious transactions involving crypto-assets; these decisions have resulted in administrative fines of SEK 25,000 to SEK 250,000 each (€2,175 to €21,750), and none of these cases have been publicly contested in court as of 31 December 2025 Polisen.

Tax Treatment

• Capital Gains Tax on Crypto: Under Chapter 48, Section 1 of the Swedish Income Tax Act (Inkomstskattelag, SFS 1999:1229), gains on the sale or exchange of virtual currency are taxable as capital gains (inkomst av kapital) at a flat rate of 30% on the net capital gain after deduction of the acquisition cost, which includes the purchase price for the crypto-asset and any fees Skatteverket.
• Taxation of Mining: Mining of crypto-assets is treated as income from economic activity (näringsverksamhet), taxed at progressive rates ranging from approximately 32% to 52% for individuals depending on total income, and at the corporate rate of 20.6% for limited companies; the mined asset's fair market value at the time of receipt is treated as taxable income Skatteverket.
• Taxation of Staking: Staking rewards are taxed as capital income at 30% when the staked asset is not subject to withdrawal restrictions, and as income from economic activity when the staking is carried out as a structured business; the Swedish Tax Agency issued a binding advance ruling on 28 February 2025 stating that staking rewards received by individuals are taxable in the year of receipt at their fair market value, with subsequent sale of staked coins subject to capital gains tax on the difference between the sale price and the value at the time of staking reward announcement Skatteverket.
• Airdrops: Airdropped tokens are taxable as capital income at 30% in the year of receipt at their fair market value; if the airdrop is received for previous purchases or services, it is treated as a discount reducing the acquisition cost of the original purchase, which is consistent with the Swedish Tax Agency's position published in its guidance SKV M 2024:17 Skatteverket.
• Taxation of Trading Fees: When a trade occurs between two different crypto-assets, such as exchanging Bitcoin for Ethereum, this is treated as two separate taxable events: the sale of Bitcoin and the purchase of Ethereum, with each transaction triggering capital gains tax on the disposal value minus the acquisition cost of the sold asset Skatteverket.
• Loss Deductions: Capital losses on crypto-asset transactions are deductible against capital gains from all asset types in the same tax year, and if net capital losses exceed net capital gains, the excess is deductible at 30% of the excess amount up to a ceiling of SEK 100,000 (≈€8,700) per year; planning for loss harvesting is a common feature of Swedish crypto tax advice Skatteverket.
• VAT Treatment of Crypto: The Swedish Tax Agency follows the European Court of Justice's ruling in Case C-264/14 (Hedqvist), which held that exchanging virtual currencies for fiat currency and vice versa is exempt from VAT (mervärdesskatt); this exemption is codified in relation to the Swedish VAT Act (Mervärdesskattelag, SFS 1994:200) and applies to both exchange services and the underlying transaction of transferring coins from one wallet to another Skatteverket.
• No Specific Crypto Tax Law: No tax guidance has been issued for virtual assets that would create a separate “crypto-specific” tax framework beyond the general income and capital taxation rules; all crypto taxation is grounded in existing general tax provisions, as clarified in the Swedish Tax Agency's public statements of 2024 and 2025 Skatteverket.

Key Gaps & Risks

• Zero Fully Licensed CASPs as of February 2026: Despite the Travel Rule being fully applicable since 30 December 2024, no crypto-asset service provider in Sweden has obtained a full MiCA license; this creates an operational vacuum, as the 15 pending applicants are technically operating under transitional provisions, and any entity that fails to meet the 1 July 2025 application deadline has no legal basis for continuing operations after 31 December 2025 Finansinspektionen.
• Inconsistency in Travel Rule Enforcement: Finansinspektionen's supervision of Travel Rule compliance has been inconsistent, as demonstrated by the sanctions against Coinbase and Safello, which used different interpretations of the €1,000 threshold for information collection; this creates legal uncertainty for CASPs trying to standardize their compliance systems, and the absence of a centralized industry guidance document from FI was noted in the 2024 FATF mutual evaluation follow-up report FATF.
• Technical Implementation Risks: Regulation (EU) 2023/1113 requires CASPs to transmit Travel Rule information for blockchain-based transfers, but the regulation does not prescribe a technical standard for data transmission; in practice, most Swedish CASPs use international protocols like the Travel Rule Information Sharing Architecture (TRISA), but these are not formally recognized by Swedish law, creating a gap between legal text and operational reality EUR-Lex.
• Self-Hosted Wallet Enforcement Gap: The Swedish AML Act does not explicitly require CASPs to verify self-hosted wallets for transfers below €3,000 (the EDD threshold under Article 16 of the Travel Rule Regulation); however, Finansinspektionen's interpretation as stated in its 2025 annual report extends this verification requirement to all transfers above €1,000, creating a conflict between EU regulation and national interpretive practice that has not been resolved by the courts as of 30 November 2025 Finansinspektionen.
• Practical Risks for Non-Compliant Firms: Unlicensed crypto exchanges face criminal prosecution under Chapter 18, Section 1 of the Swedish AML Act, which carries a maximum penalty of two years imprisonment for operating without a mandatory license; the risk of detection is increasing, as the Swedish FIU has expanded its blockchain analytics capability, and the June 2025 conviction of unlicensed exchangers demonstrates that criminal enforcement is active Polisen.
• Intra-EU Jurisdictional Differences: While Sweden is fully bound by the Travel Rule implementation through direct EU regulation, CASPs established in Sweden must ensure their counterparties in other EU states have equivalent technical and procedural capabilities; the European Securities and Markets Authority (ESMA) has issued technical guidelines on interoperability, but these are non-binding, and the practical reality is that a Swedish CASP can still receive transfers from EU-based exchanges that lack Travel Rule data, creating a compliance burden on the Swedish entity ESMA.
• Data Protection Tension: The Swedish Authority for Privacy Protection (IMY) has publicly noted, in its January 2025 annual report for 2024, that the transmission of originator and beneficiary data under the Travel Rule may conflict with the GDPR in cases where the transfer involves third-country recipients outside the EU/EEA without adequate data safeguards, and IMY has not yet issued a definitive position on how CASPs should comply with both instruments simultaneously IMY.

Sources

• Finansinspektionen
• Finansinspektionen – AML
• Finansinspektionen – Virtual Currencies Register
• Finansinspektionen – How to Apply
• Finansinspektionen – Coinbase Warning Press Release
• Finansinspektionen – Safello Withdrawal Press Release
• Finansinspektionen – QuickBit Sanctions Press Release
• Swedish Code of Statutes (SFS 2017:630)
• EUR-Lex – Regulation (EU) 2023/1113 (Travel Rule)
• EUR-Lex – Regulation (EU) 2023/1114 (MiCA)
• FATF – Sweden Country Page
• Council of Europe – Moneyval
• Polisen (Swedish Police) – FIU Reporting
• Skatteverket (Swedish Tax Agency) – English
• Sveriges Domstolar (Swedish Courts)
• ESMA – European Securities and Markets Authority
• IMY – Swedish Authority for Privacy Protection
• Bolagsverket – Beneficial Ownership Register