← Regulations / Finland / Operating Models / Crypto debit card

Crypto-funded debit card in Finland

A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.

Conditional AI-Generated · Unreviewed

Crypto debit card is conditionally permitted in Finland with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Registration as a virtual currency provider (VCP) with FIN-FSA under the Act on Virtual Currency Providers (572/2019) is required for entities that touch virtual currencies (e.g., crypto-to-fiat conversion at point of sale).
  • Customer due diligence (CDD), risk assessment, and internal control mechanisms must comply with AML/CTF obligations under Finnish law, as enforced by FIN-FSA (enforcement actions against Tesseract Finance Oy and Coinmotion Oy demonstrate FIN-FSA scrutiny).
  • Suspicious transaction reports (STRs) must be filed with the Financial Intelligence Unit (FIU) within the National Bureau of Investigation.
  • Capital requirements: No statutory minimum share capital for VCPs, but professional indemnity insurance requirements may apply.
  • Management must be located in Finland (CEO and at least one other board member).
  • Applicant must be a Finnish limited liability company (osakeyhtiö) or an EEA branch.

Key Restrictions

  • Crypto-to-fiat conversion at point of sale or top-up triggers VASP registration with FIN-FSA under the Act on Virtual Currency Providers.
  • If the card program involves issuing e-money tokens (EMTs) or holding customer fiat balances as e-money, a separate e-money institution (EMI) license under the Finnish Act on Payment Institutions and Electronic Money (297/2010) is required, or authorization as a credit institution.
  • The operator needs a partner-bank or BIN-sponsor arrangement — as no standalone crypto firm is a card scheme member, a regulated EMI/bank partner is required for BIN sponsorship and settlement.
  • MiCA full enforcement by 2026 will add further licensing/regulatory layers for stablecoin activities and broader crypto services.
  • Management (CEO + at least one board member) must be physically located in Finland.

Key Risks

  • FIN-FSA has a demonstrated enforcement track record — public warnings/reprimands issued to Tesseract Finance Oy (2023) and Coinmotion Oy (2022) for AML/CDD deficiencies, creating regulatory precedent risk.
  • Ambiguity around whether the crypto-to-fiat conversion component is regulated as a VASP activity, a payment service, or both — dual licensing risk (VCP + EMI) is material.
  • Tax treatment: every crypto-to-fiat disposition triggers a taxable event (capital gains at 30%/34% progressive rates), creating reporting friction for cardholders and potential withholding obligations for the operator.
  • VAT exemption under Hedqvist applies to crypto-to-fiat exchange but may not extend to card program fees or ancillary services, creating VAT classification risk.
  • BIN sponsorship dependency — any interruption or compliance issue with the partner bank/EMI can halt the entire card program.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 20% confidence

Financial Supervisory Authority (FIN-FSA): The primary regulator responsible for authorizing and supervising all crypto-asset service providers, ensuring compliance with anti-money laundering (AML), consumer protection standards, and operational requirements.

licensing 20% confidence

Financial Intelligence Unit (FIU): Operates within the National Bureau of Investigation to receive and investigate suspicious transaction reports from crypto service providers, focusing on preventing money laundering and terrorist financing.

licensing 20% confidence

Issuance of licenses for providers offering stablecoins and other crypto assets.

licensing 20% confidence

Obligations for market makers, custodial services, and exchanges to comply with stringent operational standards.

licensing 20% confidence

2026: Full enforcement across all covered activities.

licensing 20% confidence

Regulatory Engagement: Engage with Finnish authorities (e.g., The Finnish Financial Supervisory Authority) early to ensure alignment and potentially expedite the licensing process.

aml 60% confidence

Providing services for exchanging virtual currency and fiat currency: This covers entities facilitating the purchase or sale of virtual currencies using traditional currencies (e.g., EUR, USD).

aml 60% confidence

Providing custodial wallet services: This refers to services where an entity holds, stores, or transfers virtual currencies or private cryptographic keys on behalf of customers.

aml 60% confidence

Exchanges: Both exchanges offering fiat-to-crypto and crypto-to-crypto trading services are clearly defined as "virtual currency providers" and require registration with the FIN-FSA.

aml 60% confidence

Custody Providers: Entities providing "custodial wallet services" are also explicitly defined as "virtual currency providers" and require registration with the FIN-FSA. This includes services where the private keys are held by the provider on behalf of the client.

aml 60% confidence

Payment Processors: This depends on the nature of the service:

aml 60% confidence

For the purposes of crypto licensing, if the payment processor is directly involved in the acceptance, transfer, or conversion of virtual assets, registration as a VCP is required.

aml 60% confidence

The applicant must be a Finnish limited liability company (osakeyhtiö) or a branch of a limited liability company incorporated in an EEA country.

aml 60% confidence

The management of the applicant must be located in Finland. This includes the CEO and at least one other member of the board of directors.

aml 60% confidence

Capital Requirements (Professional Indemnity Insurance):

aml 90% confidence

The entity targeted by the FIN-FSA public warning on October 25, 2023, is Tesseract Finance Oy. The company may currently operate under the name "Stableton" (listed on FIN-FSA's registered providers list), but the enforcement action cited only refers to Tesseract Finance Oy.

aml 100% confidence

The entity targeted by the FIN-FSA public reprimand on February 9, 2022, is Coinmotion Oy.

stablecoin 60% confidence

Finnish E-money Act: Laki maksulaitoksista ja sähkörahasta (297/2010) (in Finnish)

enforcement 50% confidence

Entity Targeted: Tesseract Finance Oy (now operating as Stableton). Violation Type: Providing virtual currency services without proper registration for a period, and deficiencies in internal control mechanisms, risk assessment, and customer due diligence processes for Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF). Penalty Amount: Public warning (julkinen varoitus). While not a monetary fine, it's a formal and significant disciplinary measure by the FIN-FSA, obliging the company to rectify its shortcomings. Outcome: The company was required to implement corrective measures to comply with the Virtual Currency Providers Act and AML/CTF obligations. The public warning serves as a significant mark on the company's regulatory record.

enforcement 50% confidence

Entity Targeted: Coinmotion Oy (a registered virtual currency provider in Finland). Violation Type: Deficiencies in compliance with Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) obligations, specifically regarding customer due diligence, risk assessment, and internal control. The FIN-FSA found that Coinmotion's practices did not fully meet the requirements of the Act on Virtual Currency Providers and the Anti-Money Laundering Act. Penalty Amount: Public reprimand (julkinen huomautus). Similar to the public warning, this is a formal, non-monetary disciplinary action, indicating serious shortcomings that required immediate correction. Outcome: Coinmotion Oy was instructed to rectify the identified deficiencies in its AML/CTF processes to ensure full compliance with regulatory requirements.

tax 20% confidence

Taxable Event: Any disposition as listed above triggers a capital gain or loss.

tax 20% confidence

Capital Gains Tax Rates (Pääomatulon verokanta): Finland has a progressive capital income tax rate:

tax 20% confidence

Exemption for Exchange: The European Court of Justice (ECJ) ruling in the Hedqvist case (C-264/14) established that the exchange of traditional currencies for Bitcoin (and other virtual currencies) and vice versa, as well as exchanges between different virtual currencies, constitutes the supply of services exempt from VAT. Finland follows this interpretation.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a crypto-funded debit card can operate in Finland but requires dual licensing: (1) VASP registration with FIN-FSA under the Act on Virtual Currency Providers for the crypto-to-fiat conversion, and (2) an EMI license (or partnership with a licensed EMI/bank) for the e-money/fiat-holding component, plus BIN sponsorship through a regulated partner, with AML obligations, local incorporation, and Finland-based management.

Questions this verdict aims to answer

  • What e-money / payment-institution license is required?
  • How is the crypto-to-fiat conversion regulated?
  • What KYC and AML obligations apply to cardholders?
  • What partner-bank or BIN-sponsor arrangements are required?