#
Finland regulates payment institutions and e-money institutions under PSD2/EMD2-derived national law (Act 898/2017, Act 890/2017), supervised by FIN-FSA. PSD3/PSR final texts were agreed at EU level in 2026 (ECON approval 5 May 2026) and will apply on a 21-month clock from Official Journal publication, landing effective application around Q1-Q2 2028; no FI-specific transposition text was located this cycle.
Outlook
Watch the Official Journal publication date in Q3 2026 as the trigger for Finland's PSD3/PSR transposition clock; expect FIN-FSA guidance on the light-registration thresholds to be revisited once national implementing measures are drafted, and expect continued convergence between payment-institution and MiCA CASP supervision under a single FIN-FSA mandate.
Licensing, Authorisation & Market Access
Finland's banking M&A and structural-change supervisory regime tightened materially on 1 October 2026 with the entry into force of a new chapter of the Act on Credit Institutions implementing CRD6. The new chapter introduces advance written notification requirements to FIN-FSA for credit institutions ahead of material asset or liability transfers reaching a 10% balance-sheet-value threshold, or 15% where the transfer is intra-group, as well as material-holding acquisitions and mergers or demergers of credit institutions. These transactions are now subject to FIN-FSA's own assessment and approval process rather than proceeding on a notification-only basis.
This is a market-access and structural-change development specifically for the bank-PSP model: a bank considering a material transfer of assets, a material-holding acquisition, or a merger or demerger must now build an advance notification and FIN-FSA approval step into its transaction timeline. The obligation does not extend to non-bank payment institutions or e-money institutions, whose authorisation and structural-change framework sits outside the Act on Credit Institutions. Separately, FIN-FSA published updated principles on 1 October 2026 for determining the size of penalty payments and administrative fines across all supervised sectors, giving more explicit weight to early and comprehensive cooperation by a responsible party; while not specific to licensing or market access, this shapes the consequences of any future non-compliance with the new notification regime.
Outlook
The practical operation of the new CRD6 notification and approval process has not yet been tested against an actual transaction, so the pace and rigour of FIN-FSA's assessment process remains to be observed. A bank-PSP planning a material asset transfer, holding acquisition, merger, or demerger should expect the advance notification and approval step to now form part of the transaction timeline from 1 October 2026 onward.
3 earlier distinct update(s)
Licensing, Authorisation & Market Access
Finland's payment-services licensing basis remains the Payment Services Act, implemented via Acts 898/2017 and 890/2017, transposing PSD2 and in force mainly from 13 January 2018; this continues to be the operative legal basis for FIN-FSA-supervised payment and e-money institutions in Finland. The material development this cycle sits at the EU level: PSD3 and the Payment Services Regulation reached final-text agreement among EU Parliament, Council, and Commission negotiators on 27 November 2025, with the European Parliament's ECON committee approving the agreed texts on 5 May 2026. Plenary vote and Official Journal publication are expected mid-to-late 2026, which will start a 21-month application clock currently projected to land effective application around Q1-Q2 2028. No Finland-specific transposition text for PSD3/PSR has yet been located, so this remains tracked at the supranational level pending national implementing measures.
A concrete obligation already operative ahead of the full PSD3/PSR timeline is the IBAN-name Verification of Payee check, mandatory for SEPA Instant transfers since 9 October 2025 under the Instant Payments Regulation. PSD3/PSR is set to extend this check to all transfer rails, not just SEPA Instant, once it enters into application, meaning Finnish payment service providers already compliant on the SEPA Instant rail have a partial head start on the wider obligation.
Outlook
The PSD3/PSR plenary vote and Official Journal publication timing, expected mid-to-late 2026, will fix the start date of the 21-month application clock and therefore the effective date of the expanded Verification of Payee mandate across all transfer rails. Whether and how Finland transposes or otherwise implements PSD3/PSR domestically once adopted is the key item to track into subsequent cycles.
Licensing, Authorisation & Market Access
Finland's payment-institution licensing regime is administered by FIN-FSA under a threshold-based registration and authorisation structure, with the average threshold for small-payment-institution registration set at EUR 3,000,000 in monthly transactions. Institutions handling transaction volumes below this threshold may operate under the lighter small-payment-institution registration category, while those above it require full payment-institution authorisation, carrying a more substantial prudential and conduct compliance burden.
What distinguishes Finland's regime this cycle is evidence of active supervisory enforcement behind this threshold structure: FIN-FSA has withdrawn payment-institution registrations specifically for sanctions-screening failures, demonstrating that the registration and authorisation framework is not a passive formality but is backed by genuine ongoing supervisory scrutiny. This finding is held at probable confidence and is analytically significant because it indicates a more rigorous supervisory posture than a purely threshold-based light-touch registration regime would suggest on its face — the existence of a registration category does not by itself indicate how actively that category is policed, and Finland's withdrawal history supplies exactly that missing enforcement-posture evidence.
The bank-versus-non-bank distinction is directly relevant here: small payment institutions and payment institutions (the non-bank PI/EMI population) face this threshold-and-withdrawal-risk regime directly, whereas banks operate under a separate prudential authorisation track. For a non-bank payment institution or EMI considering Finnish market access, the take-away is that the registration threshold itself is only part of the compliance picture; ongoing sanctions-screening adequacy is evidently a live supervisory priority that can result in registration withdrawal if found deficient.
Outlook
The item to watch is whether further registration withdrawals occur in coming cycles, which would confirm this cycle's finding as a sustained supervisory pattern rather than an isolated enforcement episode, and would further clarify the practical compliance bar non-bank payment institutions must clear to retain FIN-FSA authorisation.
Licensing, Authorisation & Market Access
Finland's payment and crypto-asset licensing landscape operates across two distinct regulatory tracks that increasingly overlap in practice. FIN-FSA serves as the primary regulator authorising and supervising all crypto-asset service providers operating in Finland under the Markets in Crypto-Assets Regulation, a role that layers a new MiCA-based authorisation perimeter on top of Finland's existing PSD2-derived payment-licensing framework. For firms operating in both payments and crypto-asset services, this means navigating two parallel, FIN-FSA-administered authorisation regimes rather than a single unified licence.
At the lower end of the market, Finland's Small Payment Institution registration route continues to offer a lighter-touch entry path for domestic payment-services providers. Registration under this route carries a EUR 3 million monthly transaction-volume cap, restricts activity to domestic payment services, and requires compliance with an anti-money-laundering framework distinct from the fuller obligations attached to full payment institution or e-money institution authorisation. This bank/non-bank distinction is structurally significant: the SPI route is available only to non-bank entities operating below the volume threshold, meaning it functions as a genuine on-ramp for smaller fintech entrants rather than a route available to banks or larger payment institutions.
Outlook
Watch for how the forthcoming PSD3/PSR transition interacts with Finland's existing SPI registration tier once the new regime's twenty-one-month transposition period begins, since PSD3 is expected to revise authorisation categories at EU level. Watch also for growth in FIN-FSA's MiCA-authorised CASP population specific to Finland, which was not separately confirmed this cycle against the EU-wide total of 199 authorised entities across 23 countries.
Sources and findings (6)
- T1https://www.finanssivalvonta.fi/en/financial-market-participants/banks/authorisations-registrations-and-notifications/payment-service-providers/retrieved
- T1https://www.finanssivalvonta.fi/en/financial-market-participants/banks/authorisations-registrations-and-notifications/payment-service-providers/retrieved
- T3https://www.nordiclaw.fi/en/news/how-to-be-an-emiretrieved
- T3https://practiceguides.chambers.com/practice-guides/fintech-2025/finlandretrieved
- T3https://globallawexperts.com/how-to-be-a-payment-institution-in-finland/retrieved
- T1https://practiceguides.chambers.com/practice-guides/blockchain-crypto-assets-2026/finlandretrieved