title: Norway Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/norway/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # Norway NO schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 64 sourced findings · 120 sources in the cumulative register 14 Modules baseline.modules[] 64 Findings modules[].findings[] 17 Tier-1 sources run_metadata.t1_source_count Confidence mix (sums to 14 rendered modules; click to filter) No modules moved this cycle. ** Law made at European Economic Area level** that applies in Norway is covered once, on the [European Economic Area](https://payments.gi/jurisdictions/european-economic-area/) page. This page covers Norway’s own layer: implementation, national authorities, national options and local enforcement. ## Jurisdiction brief ###### Latest update · 18 October 2026 #### Lead Signal Norway's payments landscape saw no regulatory-instrument change this cycle; the material movement was commercial rather than legal. Vipps MobilePay, Norway's dominant mobile-wallet operator, is consolidating its Nordic brands under the single Vipps name, with the MobilePay app in Denmark and Finland adopting the Vipps icon from 6 October 2026 while retaining the MobilePay name until 12 January 2027. This rebrand runs alongside Vipps MobilePay's co-founding of the European Network for Payments, a new cross-border account-to-account interoperability initiative bringing together Bancomat in Italy, Bizum in Spain, the EPI/Wero scheme, SIBS-MB WAY in Portugal, and Vipps MobilePay in the Nordics. #### Other Developments **Vipps MobilePay partnered with Rootline**, announced 16 October 2026, to extend its reach to platform merchants, a distribution-side move that broadens the wallet's merchant-acquisition surface beyond its existing direct-integration base. Taken together with the Nordic rebrand and the ENP founding membership, this signals a dominant domestic operator actively consolidating its brand identity at the same time as it builds out pan-European interoperability rails and platform-merchant distribution channels, three moves on different axes of the same underlying commercial strategy. #### Cross-Monitor Connections The European Network for Payments initiative, bringing together five national account-to-account schemes including Vipps MobilePay, sits adjacent to ongoing instant-payments infrastructure work tracked elsewhere; Norway's own Instant Payments Regulation incorporation status into the EEA Agreement remains unresolved, a gap worth monitoring as these interoperability initiatives mature. No AML/CFT or financial-integrity development specific to Norway's payments sector was identified this cycle to cross-reference. #### Outlook The Nordic brand consolidation completes on 12 January 2027, when the MobilePay name is retired in Denmark and Finland in favour of Vipps; this is the next concrete date to track. The European Network for Payments' operational build-out, and whether further national schemes join the five founding members, is the longer-horizon item to watch for anyone assessing the pace of pan-European account-to-account interoperability. The Rootline partnership's platform-merchant reach will be worth revisiting once early uptake figures, if any, become available. _4 earlier updates not shown here._ ###### Standing brief · as of 7 August 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal Vipps, Norway's dominant mobile payments app, is merging its payment ecosystem with Denmark's and Finland's MobilePay to form a combined Nordic platform serving 11+ million users. The merger is currently at the announced stage, with parties named as Vipps and MobilePay; deal terms, including any valuation, have not been publicly disclosed. It lands against a backdrop of comparatively subdued Norwegian fintech venture funding: the domestic sector raised $18.3M in equity funding across 6 rounds through September 2025, well below the 2022 peak of over $187M raised in a single year. The combination also gains strategic weight from the underlying rail it controls: Straks 2.0, Norway's real-time account-to-account payment rail led by Vipps P2P, has already overtaken standard giro transfers to become the country's most-used payment type. #### Other Developments Norway's payment-services regime continues to run through the EEA route: PSD2 (Directive (EU) 2015/2366) was transposed into Norwegian law on 1 April 2019, with SCA/RTS rules under Delegated Regulation (EU) 2018/389 in force since 14 September 2019, supervised by Finanstilsynet. Finanstilsynet's 2026 supervisory priorities commit to strengthened AML/CFT compliance oversight, DORA follow-up, and enhanced monitoring of unauthorised financial-services activity. At EU level, a 12 February 2026 EBA Opinion narrowed but did not eliminate dual-authorisation requirements for EMT-related payment activities under MiCA and PSD2, and the related No-Action Letter transition ended 2 March 2026, a development Norway will need to track for its own eventual EEA transposition of PSD3/PSR. Norway's crypto-asset supervision moved through a concentrated MiCA licensing wave this cycle, with three domestic firms crossing into full authorisation. AK Jensen Norway AS became one of the first firms permitted to offer crypto-asset services under MiCA Art. 60(3) from February 2026, covering order transmission and portfolio management. Firi, with roughly 400,000 users, received full MiCA authorisation in May 2026 with EEA-wide passporting, adding to an e-money licence it has held since 2024 that covers stablecoin operations. Norwegian Block Exchange (NBX) was granted MiCA CASP authorisation on 30 June 2026, covering custody, trading-platform operation, exchange, order execution/transmission and transfer services, also with EEA-wide passporting; the grant closed the transitional-period window for existing VASPs operating under AML-registration-only status. On instant payments, Norway's infrastructure remains anchored on Straks 2.0, aligned with real-time account-to-account transfers led by Vipps P2P. The EU Instant Payments Regulation (2024/886) has not yet been incorporated into Norwegian law, leaving the account number as the sole unique payee identifier pending future EEA transposition. #### Cross-Monitor Connections Finanstilsynet's 2026 supervisory priorities include strengthened AML/CFT compliance oversight, DORA follow-up, and enhanced monitoring of unauthorised financial-services activity. That language is directly relevant to illicit-finance tracking, but original analysis of criminal-network linkages and illicit-finance typologies is a Financial Integrity Monitor matter, not a World Payments Monitor conclusion; it is flagged here only as a cross-reference into the Norway W1a licensing picture. #### Outlook Norway's payments-regulatory posture is likely to remain in a holding pattern pending EU-level finalisation of PSD3/PSR and the Instant Payments Regulation, both of which require EEA incorporation before they bind Norwegian law. PSD3/PSR's eventual EEA transposition into Norwegian law is provisionally expected around 2027-Q1, a multi-year horizon; the EU Instant Payments Regulation's transposition is expected in 2027, also on a multi-year horizon, at which point the account number would cease to be Norway's sole unique payee identifier. The three-firm MiCA CASP authorisation wave, paired with the extension of the VASP transitional period to the maximum permitted window of 30 June 2026, points to Finanstilsynet processing capacity as the binding constraint on Norway's crypto-supervisory transition, rather than policy resistance. Resolution of the Vipps-MobilePay merger's regulatory approvals across the three Nordic markets it spans will be a signal worth tracking in the coming cycles, as will any further clarity on Norway's PSD3/PSR transposition timeline. trust tier: ai_unverified _Standing brief, as of 8 July 2026._ #### Regulatory Status Norway's payments regulatory perimeter is now fully harmonised with the EU's MiCA, TFR II and DORA package via the EEA Agreement, closing most of the gap between Norwegian and EU-27 crypto-asset and operational-resilience regimes within a twelve-month window from July 2025 to July 2026. Licensing and safeguarding rest on the Financial Institutions Act, with Finanstilsynet as sole authority across banks, payment institutions and e-money institutions; the AML/CFT track runs on the 2018 Anti-Money Laundering Act with beneficial-ownership register enforcement live since 31 July 2025. On digital money, Norges Bank concluded on 10 December 2025 that a CBDC is not currently warranted, while Firi AS became a MiCA-authorised crypto-asset service provider on 22 May 2026 alongside TYR Markets and NBX. Structurally, the market remains a bank-anchored duopoly of BankAxept and Vipps MobilePay, with BankAxept's card-payment share slipping from 49% to 46% between 2024 and 2025, and merchant acquiring continuing to run through commercial banks absent a bespoke acquiring statute. Consumer-protection scrutiny centres on the bank-discretion APP-fraud reimbursement model, which the Consumer Ombudsman has criticised as inconsistent, while operational resilience is anchored in the national DORA Act and TIBER-NO threat-led penetration testing regime. #### Outlook Norway's risk profile is assessed as moderate with a tightening regulatory direction, driven principally by scheme-level compliance tightening (Visa VAMP), continued MiCA/DORA supervisory build-out, and unresolved consumer-protection pressure on APP-fraud reimbursement; no material near-term legislative shift is expected beyond the already-scheduled EU T+1 settlement and PSD3 fraud-API transitions. trust tier: ai_unverified ###### Latest update · 25 August 2026 #### Regulatory Status Finanstilsynet found this cycle that certain account-servicing payment service providers breach PSD2's information-parity requirement (Delegated Regulation (EU) 2018/389, Article 36) by giving richer transaction categorisation in their own apps than via PSD2 APIs to third-party account information service providers. This is a Tier 1, High-confidence supervisory finding, and it is the only module across the fourteen-module World Payments spine to carry material first-party content for Norway this cycle. #### Outlook Whether Finanstilsynet escalates this finding into named-provider supervisory action or formal guidance is the clearest marker to watch. Given Norway's status as a full PSD2-implementing EEA member, any escalation would carry relevance beyond the Norwegian market alone. ###### Standing brief · as of 7 August 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Norway's payment-services regime continues to run through the EEA route: PSD2 (Directive (EU) 2015/2366) was transposed into Norwegian law on 1 April 2019, with SCA/RTS rules under Delegated Regulation (EU) 2018/389 in force since 14 September 2019, supervised by Finanstilsynet. Norway's crypto-asset supervision moved through a concentrated MiCA licensing wave this cycle, with three domestic firms crossing into full authorisation. Straks 2.0, Norway's real-time account-to-account payment rail led by Vipps P2P, has overtaken standard giro transfers to become the country's most-used payment type. Vipps, Norway's dominant mobile payments app, is merging its payment ecosystem with Denmark's and Finland's MobilePay to form a combined Nordic platform serving 11+ million users. #### Outlook Norway's payments-regulatory posture is likely to remain in a holding pattern pending EU-level finalisation of PSD3/PSR and the Instant Payments Regulation, both of which require EEA incorporation before they bind Norwegian law. The three-firm MiCA CASP authorisation wave, paired with the extension of the VASP transitional period to the maximum permitted window of 30 June 2026, points to Finanstilsynet processing capacity as the binding constraint on Norway's crypto-supervisory transition, rather than policy resistance. Resolution of the Vipps-MobilePay merger's regulatory approvals across the three Nordic markets it spans will be a signal worth tracking in the coming cycles, as will any further clarity on Norway's PSD3/PSR transposition timeline. 14 of 14 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W1a Licensing, Authorisation & Market Access Confirmed confirmed 2026-07-04 Norway implements the EU payment-services regime via the EEA agreement: PSD2 entered Norwegian law 1 April 2019, SCA/RTS in force since 14 September 2019, supervised by Finanstilsynet. Norway will need EEA incorporation of PSD3/PSR once finally adopted at EU level. Standing sub-brief · as of 7 August 2026 153 words · last cycle 2026-10-05 #### Licensing, Authorisation & Market Access Norway's payment-services regime continues to run through the EEA route: PSD2 (Directive (EU) 2015/2366) was transposed into Norwegian law on 1 April 2019, with SCA/RTS rules under Delegated Regulation (EU) 2018/389 in force since 14 September 2019, supervised by Finanstilsynet. Finanstilsynet's 2026 supervisory priorities commit to strengthened AML/CFT compliance oversight, DORA follow-up, and enhanced monitoring of unauthorised financial-services activity. At EU level, a 12 February 2026 EBA Opinion narrowed but did not eliminate dual-authorisation requirements for EMT-related payment activities under MiCA and PSD2, and the related No-Action Letter transition ended 2 March 2026, a development Norway will need to track for its own eventual EEA transposition of PSD3/PSR. #### Outlook PSD3/PSR's eventual EEA transposition into Norwegian law is provisionally expected around 2027-Q1, a multi-year horizon. Until then, Finanstilsynet's 2026 supervisory priorities, including AML/CFT compliance oversight and DORA follow-up, remain the operative near-term posture for W1a licensing and prudential supervision. Periodic update · new data 2026-09-28 #### Licensing, Authorisation & Market Access Norway's current legal basis for payment services remains the Regulations on Payment Services and Systems of 15 February 2019 (no. 152), which applies to banks, credit institutions, e-money institutions, payment institutions and their EEA-branch equivalents. This is the standing scope baseline, confirmed and unchanged this cycle, and it draws the licensing/authorisation line explicitly between bank-PSPs and non-bank payment institutions and e-money institutions, both of which sit within scope but under differing prudential expectations appropriate to their institution type. The material development this cycle is at the EU level rather than the domestic level: the proposed PSD3/PSR package's final compromise texts were approved for COREPER sign-off on 23 April 2026, setting up an EEA-wide repeal of the current PSD2/EMD2 framework once in force. The estimated timeline places entry into force roughly 21 months out, putting actual effect in the 2027-2028 window. For Norway, this is a future EEA-incorporation horizon item: the domestic Regulations on Payment Services and Systems will need to be replaced or substantially amended once PSD3/PSR is incorporated into the EEA Agreement, but that has not yet happened and the current 2019 regulation remains the operative licensing framework for market access today. #### Outlook The PSD3/PSR EEA-incorporation timeline is the primary licensing-framework item to track for Norway over the next one to two years. Firms currently authorised under the 2019 Regulations should expect a future transposition process once PSD3/PSR clears EU-level adoption and moves to EEA incorporation, though the exact domestic implementation mechanism and timeline remain to be confirmed. **Sources and findings (5)** 1. T1 [https://info.altinn.no/en/forms-overview/financial-supervisory-authority-of-norway/License-to-operate-as-an-electronic-money-institution/](https://info.altinn.no/en/forms-overview/financial-supervisory-authority-of-norway/License-to-operate-as-an-electronic-money-institution/) retrieved 2026-07-04 2. T3 [https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/norway/](https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/norway/) retrieved 2026-07-04 3. T3 [https://iclg.com/practice-areas/fintech-laws-and-regulations/norway](https://iclg.com/practice-areas/fintech-laws-and-regulations/norway) retrieved 2026-07-04 4. T2 [https://firi.com/about/financial-supervisory-authority](https://firi.com/about/financial-supervisory-authority) retrieved 2026-07-04 5. T1 [https://www.regjeringen.no/en/dep/fin/about-the-ministry/subordinateagencies/the-financial-supervisory-authority/id270404/](https://www.regjeringen.no/en/dep/fin/about-the-ministry/subordinateagencies/the-financial-supervisory-authority/id270404/) retrieved 2026-07-04 ### W1b Conduct, Safeguarding & Promotions Confirmed confirmed 2026-07-04 Safeguarding of client/e-money funds is codified in the Financial Institutions Act (protection of funds, prohibition on paying interest on e-money float, redemption rights) and detailed in the Financial Institutions Regulations; conduct and market-promotion abuse is policed via Finanstilsynet's market-warning register and the non-binding but cost-shifting Financial Services Complaints Board. Standing sub-brief · as of 8 July 2026 149 words · last cycle 2026-07-08 #### Conduct, Safeguarding & Financial Promotions Client and e-money funds held by Norwegian payment institutions and e-money institutions are protected under Financial Institutions Act Sections 13-18 to 13-20, which prohibit paying interest on e-money float and set redemption rights. The live conduct-side development for this cycle is the safeguarding regime itself, which applies identically regardless of whether the provider is a bank or a non-bank payment/e-money institution. Where a customer dispute is not resolved directly, it can be escalated to the Financial Services Complaints Board (Finansklagenemnda); the Board's decisions are not binding, but an institution that loses and does not comply must cover the customer's court costs if the matter later proceeds to court, a meaningful cost-shifting incentive toward compliance. #### Outlook Safeguarding and conduct rules are expected to remain stable near-term, though the Board's cost-shifting mechanism is likely to keep driving informal settlement of consumer disputes ahead of formal litigation. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T1 [https://lovdata.no/dokument/NLE/lov/2015-04-10-17/*](https://lovdata.no/dokument/NLE/lov/2015-04-10-17/*) retrieved 2026-07-04 2. T1 [https://lovdata.no/dokument/SFE/forskrift/2016-12-09-1502](https://lovdata.no/dokument/SFE/forskrift/2016-12-09-1502) retrieved 2026-07-04 3. T1 [https://www.finanstilsynet.no/en/consumer-protection/complaints-bodies/](https://www.finanstilsynet.no/en/consumer-protection/complaints-bodies/) retrieved 2026-07-04 4. T1 [https://www.finanstilsynet.no/en/consumer-protection/market-warningsinvestment-scams/](https://www.finanstilsynet.no/en/consumer-protection/market-warningsinvestment-scams/) retrieved 2026-07-04 5. T1 [https://lovdata.no/dokument/NLE/lov/2024-06-21-41](https://lovdata.no/dokument/NLE/lov/2024-06-21-41) retrieved 2026-07-04 ### W2 Stablecoins & Digital Money Confirmed confirmed 2026-07-04 Norway is mid-transition from AML-registration-only VASP status to full MiCA authorisation via the domestic Crypto Assets Act; the transitional period for existing VASPs was extended to the maximum permitted window of 30 June 2026. Standing sub-brief · as of 7 August 2026 163 words · last cycle 2026-08-05 #### Stablecoins & Digital Money Norway's crypto-asset supervision moved through a concentrated MiCA licensing wave this cycle, with three domestic firms crossing into full authorisation. AK Jensen Norway AS became one of the first firms permitted to offer crypto-asset services under MiCA Art. 60(3) from February 2026, covering order transmission and portfolio management. Firi, with roughly 400,000 users, received full MiCA authorisation in May 2026 with EEA-wide passporting, adding to an e-money licence it has held since 2024 that covers stablecoin operations. Norwegian Block Exchange (NBX) was granted MiCA CASP authorisation on 30 June 2026, covering custody, trading-platform operation, exchange, order execution/transmission and transfer services, also with EEA-wide passporting; the grant closed the transitional-period window for existing VASPs operating under AML-registration-only status. #### Outlook The three-firm MiCA CASP authorisation wave, paired with the extension of the VASP transitional period to the maximum permitted window of 30 June 2026, points to Finanstilsynet processing capacity as the binding constraint on Norway's crypto-supervisory transition, rather than policy resistance. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T3 [https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/norway/](https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/norway/) retrieved 2026-07-04 2. T3 [https://www.mexc.com/news/1142505](https://www.mexc.com/news/1142505) retrieved 2026-07-04 3. T2 [https://firi.com/about/financial-supervisory-authority](https://firi.com/about/financial-supervisory-authority) retrieved 2026-07-04 4. T3 [https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/norway/](https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/norway/) retrieved 2026-07-04 5. T3 [https://businesslaw.no/articles/eu-s-dora-regulation-on-ict-security-in-finance-norwegian-implementation/](https://businesslaw.no/articles/eu-s-dora-regulation-on-ict-security-in-finance-norwegian-implementation/) retrieved 2026-07-04 ### W3 Operational Resilience & Critical Infrastructure Confirmed confirmed 2026-07-04 Norges Bank is building next-generation settlement infrastructure: committed to NBO INST (instant NOK settlement) with a 2026 decision-basis target; signed a November 2024 agreement with the ECB to join TIPS; began a February 2025 investigation into joining T2 RTGS. Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open this jurisdiction's page on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/norway/) Standing sub-brief · as of 8 July 2026 128 words · last cycle 2026-09-05 #### Operational Resilience & Critical Infrastructure Norway's national DORA Act took effect on 1 July 2025, repealing the 2003 ICT Regulation for in-scope entities and giving Finanstilsynet supervisory authority backed by fines of up to NOK 50 million for breaches. TIBER-NO now forms the basis for DORA-mandated threat-led penetration testing of the most significant entities, with seven TIBER tests completed to date, an operational cadence that applies uniformly to bank and non-bank critical infrastructure participants. The transition from the prior ICT Regulation to full DORA supervision represents the most significant resilience-regime change in the Norwegian market in recent years. #### Outlook Expect continued TIBER-NO test cycles and incremental DORA supervisory guidance from Finanstilsynet; no further primary legislative change is anticipated near-term given the regime only took effect a year ago. Periodic update · new data 2026-09-08 #### Operational Resilience & Critical Infrastructure Norway's settlement infrastructure is undergoing its most consequential upgrade cycle in years, driven by Norges Bank's decision to integrate proactively with Eurosystem settlement rails despite standing outside the euro area and the SEPA scheme. On 28 November 2024, Norges Bank signed a formal agreement with the European Central Bank for Norway to join TIPS, the Eurosystem's instant-settlement platform, enabling instant NOK payments to settle on Eurosystem infrastructure. This is a Confirmed, Tier 1-sourced finding drawn from the ECB's own MIP News publication, and it represents a deliberate strategic choice by a non-euro central bank to embed its domestic currency's instant-payment settlement within continental infrastructure rather than build or maintain an entirely separate track. That TIPS agreement was followed in February 2025 by a further, equally Confirmed and Tier 1-sourced decision: Norges Bank began investigating joining T2, the Eurosystem's real-time gross settlement system, which handles large-value and critical interbank settlement. Taken together, the TIPS agreement and the T2 investigation describe a central bank pursuing settlement-infrastructure integration on two fronts simultaneously — instant retail-scale payments and large-value RTGS settlement — rather than a narrow, single-purpose infrastructure decision. Domestically, Norges Bank's own Financial Infrastructure Report 2025 sets out a third, parallel workstream: the central bank aims to have the decision basis for NBO INST, a domestic instant-settlement upgrade, ready during 2026. This is again a Confirmed, Tier 1 finding sourced directly from the central bank's own publication. The NBO INST work sits alongside, rather than in place of, the TIPS and T2 integration efforts, suggesting Norges Bank is pursuing a dual-track resilience strategy: modernising domestic settlement capability while simultaneously embedding into continental infrastructure that offers redundancy and cross-border reach the domestic system alone could not provide. For operators and PSPs, whether bank or non-bank, this combination of developments signals that Norway's settlement infrastructure is entering a period of active technical transition rather than steady-state operation. Institutions dependent on Norwegian settlement rails, for either domestic NOK clearing or cross-border euro-denominated flows, should expect infrastructure-level change to be a live operational planning variable across 2026 and into the TIPS/T2 integration timeline beyond. #### Outlook The most concrete near-term milestone is the targeted 2026 completion of the NBO INST decision basis. Beyond that, the pace and sequencing of Norway's TIPS and T2 integration will be the key operational-resilience variables to track, since both depend on further technical and governance steps beyond the initial 2024-2025 agreements already confirmed. **Sources and findings (5)** 1. T3 [https://www.rismasystems.com/en/resources/articles/how-nis2-dora-gdpr-are-implemented-in-scandinavia](https://www.rismasystems.com/en/resources/articles/how-nis2-dora-gdpr-are-implemented-in-scandinavia) retrieved 2026-07-04 2. T1 [https://www.finanstilsynet.no/en/publications/risk-and-vulnerability-analysis-rav/risk-and-vulnerability-analysis-2025/risk-and-vulnerability-analyses-2025/risk-and-vulnerability-analyses-2025/](https://www.finanstilsynet.no/en/publications/risk-and-vulnerability-analysis-rav/risk-and-vulnerability-analysis-2025/risk-and-vulnerability-analyses-2025/risk-and-vulnerability-analyses-2025/) retrieved 2026-07-04 3. T1 [https://www.norges-bank.no/en/news-events/publications/Financial-Infrastructure-Report/finansiell-infrastruktur-2025/web-report-financial-infrastructure-2025/](https://www.norges-bank.no/en/news-events/publications/Financial-Infrastructure-Report/finansiell-infrastruktur-2025/web-report-financial-infrastructure-2025/) 4. T3 [https://www.pwc.no/no/innsikt/dora-alt-du-trenger-a-vite.html](https://www.pwc.no/no/innsikt/dora-alt-du-trenger-a-vite.html) retrieved 2026-07-04 5. T1 [https://www.finanstilsynet.no/globalassets/laws-and-regulations/laws/regulations-on-payment-services-systems.pdf](https://www.finanstilsynet.no/globalassets/laws-and-regulations/laws/regulations-on-payment-services-systems.pdf) retrieved 2026-07-04 ### W4 Scheme & Network Compliance Probable confirmed 2026-07-04 Norway retains a rare national, bank-owned, interchange-free debit scheme (BankAxept) alongside international Visa/Mastercard co-branded rails; Vipps MobilePay operates under 2018 merger remedies mandating transparent pricing and open APIs, while global card-scheme monitoring programmes (Visa VAMP, Mastercard ECM/HECM) apply to Norwegian-facing acquirers. Standing sub-brief · as of 8 July 2026 141 words · last cycle 2026-07-08 #### Scheme & Network Compliance BankAxept, Norway's interchange-free, bank-owned national debit scheme, saw its share of card payments fall from 49% in 2024 to 46% in 2025 as acquiring continues to be offered by commercial banks on bilaterally set fees plus a fee to scheme owner Sto AS. The erosion reflects continued growth of Vipps and international-scheme volumes rather than any regulatory intervention against BankAxept itself. Layered on top of domestic scheme dynamics, Visa's VAMP fraud/dispute-monitoring programme reached full enforcement in October 2025 and tightened further in April 2026, requiring acquirers processing Norwegian merchant traffic to keep fraud and dispute ratios under defined thresholds, a scheme-global compliance overlay that applies most directly to non-bank acquirers and PSPs. #### Outlook Expect BankAxept's share erosion to continue gradually rather than sharply, with Visa VAMP compliance pressure the more immediate near-term operational concern for Norwegian-facing acquirers. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T1 [https://www.norges-bank.no/contentassets/d9d288daa8684f81809fd5da2604af3b/payments-in-the-nordics.pdf?v=10122025175501](https://www.norges-bank.no/contentassets/d9d288daa8684f81809fd5da2604af3b/payments-in-the-nordics.pdf?v=10122025175501) retrieved 2026-07-04 2. T1 [https://one.oecd.org/document/DAF/COMP/WD(2025)9/en/pdf](https://one.oecd.org/document/DAF/COMP/WD(2025)9/en/pdf) retrieved 2026-07-04 3. T3 [https://www.mordorintelligence.com/industry-reports/norway-payments-market](https://www.mordorintelligence.com/industry-reports/norway-payments-market) 4. T1 [https://www.norges-bank.no/en/news-events/publications/Financial-Infrastructure-Report/financial-infrastructure-2026/web-report-financial-infrastructure-2026/](https://www.norges-bank.no/en/news-events/publications/Financial-Infrastructure-Report/financial-infrastructure-2026/web-report-financial-infrastructure-2026/) retrieved 2026-07-04 5. T3 [https://docs.adyen.com/risk-management/dispute-and-fraud-monitoring/](https://docs.adyen.com/risk-management/dispute-and-fraud-monitoring/) retrieved 2026-07-04 ### W5 Payment Corridor Dynamics Probable confirmed 2026-07-04 As an EEA (non-EU) member, Norway relies on SEPA/SCT Inst for euro corridors (with FX conversion since NOK is the domestic currency), SWIFT with correspondent nostro/vostro arrangements for non-SEPA flows, and domestic instant-payment rails (NICS Real/Straksbetalinger, Vipps); Norges Bank is exploring cross-currency instant payments with Sweden and Denmark and is preparing for the EEA-wide T+1 securities settlement transition. Standing sub-brief · as of 8 July 2026 138 words · last cycle 2026-10-05 #### Payment Corridor Dynamics Euro-denominated flows into and out of Norway route via SEPA Instant Credit Transfer, which requires FX conversion since the Norwegian krone rather than the euro is the domestic settlement currency, while non-SEPA and non-EEA flows route via traditional SWIFT correspondent nostro/vostro banking. This dual-rail corridor architecture is standard for an EEA member outside the eurozone and has not changed materially this cycle. Looking further out, Finanstilsynet circulated a legislative amendment for consultation in spring 2026 preparing Norway, as an EEA-relevant jurisdiction, for the EU/ESMA transition to T+1 securities settlement by 11 October 2027, a horizon item running in parallel with similar Swiss and UK settlement-cycle moves. #### Outlook Corridor architecture is expected to remain stable through the settlement-cycle transition window, with T+1 preparation the dominant forward-looking item for Norwegian market infrastructure over the next two years. Periodic update · new data 2026-09-28 #### Payment Corridor Dynamics Norway's domestic open-banking infrastructure continues to mature under the PSD2 framework. Norwegian banks including DNB, SpareBank 1 and Nordea Norway have deployed open-banking APIs built on the Berlin Group NextGenPSD2 standards, forming the account-to-account data-access layer that underpins both regulatory compliance and newer commercial product development in the Norwegian market. This bank-PSP-led API deployment is the infrastructure baseline against which downstream product and competitive developments, including the NFC-enabled wallet launch tracked separately under Product Innovation, are being built. The deployment of NextGenPSD2-standard APIs by Norway's three largest domestic banks represents a maturing rather than nascent corridor dynamic: these are established institutions with functioning open-banking infrastructure already in production use, rather than early-stage pilots. This positions Norway's account-to-account corridor as a relatively developed one within the broader Nordic and EEA open-banking landscape. #### Outlook Watch for whether non-bank payment institutions and e-money institutions begin building comparable or complementary account-to-access-layer infrastructure alongside the bank-PSP-led NextGenPSD2 deployments already in place, and for how the domestic corridor infrastructure interacts with the pending PSD3/PSR reforms once those move toward EEA incorporation. **2 earlier distinct update(s)** Periodic update · new data 2026-09-14 #### Payment Corridor Dynamics The central corridor-dynamics development for Norway this cycle is a transposition gap rather than a substantive rule change. The EU Instant Payments Regulation, (EU) 2024/886, has not yet been incorporated into the EEA Agreement and consequently has not been transposed into Norwegian law. This means that Norwegian payment service providers currently carry no Verification-of-Payee obligation on NOK-denominated transfers, a protection already operative for euro-area and EU member-state PSPs. Industry commentary indicates incorporation is more likely to occur in 2026 or 2027, positioning this as a multi-quarter-to-multi-year lag rather than an imminent change. Norway's domestic instant-payments infrastructure operates independently of this EU instrument in the interim. Bits AS operates the Norwegian Interbank Clearing System, regulated by Finance Norway, running two principal domestic rails: NICS Real, a real-time retail payment rail available 24 hours a day, seven days a week, and NICS Netto, a same-day settlement system. Settlement of all NOK-denominated payments is carried out by Norges Bank via its own real-time gross settlement infrastructure. Norges Bank is also reported to coordinate with the European Central Bank on TIPS-platform settlement specifically for euro-leg payment flows touching Norway, though this specific coordination detail carries lower confidence in the underlying evidence and should be read as reported rather than fully confirmed. The practical corridor-dynamics consequence is a bifurcated protection landscape: domestic NOK-denominated instant payments running over NICS Real benefit from Norway's existing domestic clearing infrastructure and oversight, while cross-border euro-leg flows and any future NOK flows once IPR is incorporated will sit under a different, EU-derived verification regime. Until EEA incorporation occurs, Norwegian PSPs and their counterparties should not assume that a Verification-of-Payee check is available on NOK transfers, even where the underlying rail is technically capable of instant settlement. #### Outlook The timing of EEA incorporation of the EU Instant Payments Regulation is the key corridor-dynamics variable to track for Norway, with industry expectation currently centred on 2026 or 2027 rather than an immediate timeline. Once incorporated, Norwegian PSPs would gain a Verification-of-Payee obligation on NOK-denominated transfers for the first time, a material addition to the domestic corridor's fraud-protection architecture. Until then, the corridor continues to operate on the existing Bits/Norges Bank domestic infrastructure without that specific protection. Periodic update · new data 2026-09-08 #### Payment Corridor Dynamics Norway's principal payment-corridor constraint remains structural: because the pan-European SCT Inst scheme only supports euro-denominated payments, Norwegian businesses sending NOK across borders must currently route cross-border instant transfers through an FX-conversion layer rather than settling directly on the same instant rail used within the euro area. This is a probable finding, sourced from a single Tier 4 source, and should be read as an informed but not fully corroborated characterisation of the current corridor mechanics. The resolution path for this constraint is tied directly to the settlement-infrastructure integration documented under Operational Resilience: TIPS integration is projected to link NOK and EUR real-time settlement more directly, with a projected timeline of around 2028. Until that integration matures, Norwegian businesses and their counterparties operating in the NOK/EUR corridor should expect the current FX-conversion-layer workaround to remain the practical mechanism for cross-border instant transfers, carrying whatever cost and latency overhead that conversion layer entails relative to a direct same-currency instant rail. This corridor dynamic sits at the intersection of domestic monetary sovereignty and cross-border payment efficiency: Norway's decision to pursue TIPS integration despite retaining the NOK, rather than adopting the euro, reflects a calculated bet that infrastructure-level integration can substantially resolve corridor friction without requiring currency-level integration. The 2028 projected linkage timeline is the single most important variable for any business or PSP currently absorbing FX-conversion costs on NOK/EUR corridor flows. #### Outlook The corridor constraint identified here will not be resolved by domestic Norwegian action alone; it depends on the broader TIPS integration timeline discussed under Operational Resilience & Critical Infrastructure. Businesses and PSPs with material NOK/EUR corridor exposure should treat the 2028 projected linkage as an indicative planning horizon rather than a confirmed date, given its single-source, Tier 4 provenance. **Sources and findings (4)** 1. T3 [https://www.banqglobal.com/guide/norwegian-payment-rails-explained](https://www.banqglobal.com/guide/norwegian-payment-rails-explained) 2. T1 [https://www.norges-bank.no/en/news-events/publications/Financial-Infrastructure-Report/finansiell-infrastruktur-2025/web-report-financial-infrastructure-2025/](https://www.norges-bank.no/en/news-events/publications/Financial-Infrastructure-Report/finansiell-infrastruktur-2025/web-report-financial-infrastructure-2025/) 3. T1 [https://www.norges-bank.no/en/news-events/publications/Financial-Infrastructure-Report/financial-infrastructure-2026/web-report-financial-infrastructure-2026/](https://www.norges-bank.no/en/news-events/publications/Financial-Infrastructure-Report/financial-infrastructure-2026/web-report-financial-infrastructure-2026/) retrieved 2026-07-04 4. T1 [https://www.norges-bank.no/contentassets/d9d288daa8684f81809fd5da2604af3b/payments-in-the-nordics.pdf?v=10122025175501](https://www.norges-bank.no/contentassets/d9d288daa8684f81809fd5da2604af3b/payments-in-the-nordics.pdf?v=10122025175501) retrieved 2026-07-04 ### W6 Industry Structure & Commercial limited signal Probable confirmed 2026-07-04 The Norwegian payments market is a bank-anchored duopoly of BankAxept and bank-owned Vipps MobilePay (majority Norwegian-bank owned, Danske Bank minority), with DNB as the dominant systemic player, Nets/Nexi as key acquiring/processing infrastructure, and a maturing fintech challenger tier (Neonomics, Sokin/Settle, Aprila Bank) alongside continued Sparebank-alliance consolidation. Standing sub-brief · as of 8 July 2026 127 words · last cycle 2026-10-18 #### Industry Structure & Commercial Dynamics A consortium of Norwegian banks owns 72.2% of Vipps MobilePay, with Danske Bank holding the remaining 27.8% following the 2022 Nordic merger with MobilePay. This bank-anchored ownership structure, paired with BankAxept, entrenches a duopoly at the centre of Norwegian retail payments even as BankAxept's own transaction share erodes. Consolidation also continues among regional banks: Sparebank 1 SR-Bank and Sparebank 1 Sorost-Norge merged in October 2024, without objection from the competition authority, to form Sparebank 1 Sor-Norge, extending the alliance-based savings-bank model that underpins much of Norway's retail banking infrastructure. #### Outlook Expect continued bank-anchored consolidation at the alliance level and no near-term challenge to the Vipps/BankAxept duopoly from new domestic entrants; competitive pressure is more likely to come from international schemes and wallets. Periodic update · new data 2026-10-18 #### Industry Structure & Commercial Dynamics Norway's payments market structure is being reshaped this cycle by Vipps MobilePay's consolidation of its pan-Nordic footprint under a single brand. From 6 October 2026, the MobilePay app in Denmark and Finland began displaying the Vipps smile as its icon, with the MobilePay name itself scheduled for retirement on 12 January 2027. This is a brand-unification move following the earlier merger of Norway's Vipps and the Danish/Finnish MobilePay into a single combined entity, and it signals an operator moving from a multi-brand regional presence toward a single pan-Nordic identity, likely intended to simplify cross-border consumer recognition and merchant onboarding across the three markets it now spans. Alongside the rebrand, Vipps MobilePay has co-founded the European Network for Payments together with four other established national account-to-account schemes: Bancomat in Italy, Bizum in Spain, the EPI/Wero scheme, and SIBS-MB WAY in Portugal. This is a structurally significant development for the European account-to-account landscape, bringing together several of the continent's most established domestic wallet and transfer schemes under a shared interoperability initiative. For Norway specifically, Vipps MobilePay's inclusion as a founding member confirms its position as the Nordic region's representative scheme in what is shaping up to be a meaningful piece of pan-European payments infrastructure, positioning the Norwegian-origin operator at the centre of a wider European interoperability push rather than as a purely domestic utility. The combination of brand consolidation and new cross-border scheme membership reflects a broader consolidation dynamic within the account-to-account payments space, where large, successful domestic mobile-wallet schemes are increasingly looking outward for interoperability partnerships rather than remaining nationally siloed. For market participants assessing competitive dynamics in Norway's payments sector, Vipps MobilePay's dominant domestic position is not in question this cycle, but its strategic posture, building scale through brand unification and international scheme participation, is the notable shift to track. #### Outlook The completion of the Nordic rebrand on 12 January 2027 is the near-term date to watch. Beyond that, the development and expansion of the European Network for Payments, including whether further national schemes join the five founding members and what interoperability functionality the network delivers in practice, is the structural item most likely to shape Norway's competitive payments landscape over the coming periods. **Sources and findings (5)** 1. T3 [https://en.wikipedia.org/wiki/Vipps](https://en.wikipedia.org/wiki/Vipps) retrieved 2026-07-04 2. T3 [https://www.mordorintelligence.com/industry-reports/norway-payments-market](https://www.mordorintelligence.com/industry-reports/norway-payments-market) 3. T3 [https://iclg.com/practice-areas/fintech-laws-and-regulations/norway](https://iclg.com/practice-areas/fintech-laws-and-regulations/norway) retrieved 2026-07-04 4. T3 [https://iclg.com/practice-areas/fintech-laws-and-regulations/norway](https://iclg.com/practice-areas/fintech-laws-and-regulations/norway) retrieved 2026-07-04 5. T3 [https://tracxn.com/d/explore/fintech-startups-in-norway/38FtfxfYPbd2pJZUtqxCh3meJfuLu2CTBRo-VzUw7vY#top-companies](https://tracxn.com/d/explore/fintech-startups-in-norway/38FtfxfYPbd2pJZUtqxCh3meJfuLu2CTBRo-VzUw7vY#top-companies) retrieved 2026-07-04 ### W7 Legal & Litigation Probable confirmed 2026-07-04 Finanstilsynet has issued a supervisory finding that certain account-servicing payment service providers breach PSD2's information-parity requirement (Delegated Regulation (EU) 2018/389, Article 36) by giving richer transaction categorisation in their own banking apps than through PSD2 APIs. Standing sub-brief · as of 8 July 2026 141 words · last cycle 2026-08-21 #### Legal & Litigation DNB ASA was fined a record NOK 400 million, approximately $48.1 million, in 2020 for systematic anti-money-laundering compliance violations, a benchmark still referenced in current Finanstilsynet supervisory posture. More recently, Finanstilsynet initiated an AML/CFT inspection in autumn 2024 of a foreign payment institution's Norwegian agent network handling money-transfer services, examining customer due diligence, transaction monitoring and reporting to Okokrim; the resulting report was due for publication in 2025, though its publication status remains unconfirmed in current sourcing. Separately, the Consumer Ombudsman has criticised Norwegian banks over inconsistent handling of authorised-push-payment fraud claims, a conduct-adjacent legal-pressure point distinct from the AML enforcement track. #### Outlook The unresolved status of the 2024 agent-network inspection report is the key item to watch; its publication would be the first material test of Finanstilsynet's post-DNB enforcement posture against a non-bank payment institution's distribution network. Periodic update · new data 2026-08-25 #### Legal & Litigation Finanstilsynet's supervisory finding this cycle is that certain account-servicing payment service providers breach PSD2's information-parity requirement, set out in Article 36 of the Regulatory Technical Standards on strong customer authentication and common and secure communication (Commission Delegated Regulation (EU) 2018/389), by supplying richer transaction categorisation within their own proprietary banking applications than through the PSD2 dedicated interface used by third-party account information service providers (AISPs). The finding is Tier 1 sourced, drawn directly from Finanstilsynet's own published PSD2 clarifications, and carries High confidence. Article 36's information-parity standard exists to ensure that account-servicing payment service providers do not degrade the quality, breadth or usability of account data made available through the dedicated interface relative to what the same institution's own customer-facing channels provide. Finanstilsynet's finding that this is happening in practice, with respect to transaction categorisation specifically, moves this concern from a theoretical vulnerability in the PSD2 framework to a documented instance of it. From a legal-risk perspective, this finding sits at an early stage of the enforcement continuum: Finanstilsynet has made a supervisory finding, but no named provider, fine, formal order, or litigation outcome has been identified this cycle. The finding nonetheless establishes a clear evidentiary and legal basis on which Finanstilsynet, or an affected third-party provider, could pursue further action, whether through direct supervisory measures against identified providers or a market-wide guidance update, although no such claims have been identified in the sourcing available this cycle. The finding specifically concerns account-servicing providers, which in the Norwegian market are predominantly bank entities that hold and administer the underlying payment accounts, as distinct from the non-bank payment institutions and e-money institutions that typically sit on the API-consuming, third-party-provider side of this particular relationship. This bank-versus-non-bank framing matters for remediation: any corrective action properly falls to the account-holding banks operating the dedicated interfaces, not to the third-party providers disadvantaged by the parity gap. Because Norway is a full PSD2-implementing EEA member, the finding also carries signal value for supervisory practice beyond Norway's own borders: a national regulator identifying and publishing an information-parity deficiency in dedicated-interface implementations is a template other EEA supervisory authorities monitoring compliance with the same technical standard may find directly relevant, even though this cycle's evidentiary basis speaks specifically to the Norwegian market and no cross-jurisdictional enforcement coordination has been identified this cycle. Whether Norwegian law affords a private right of action to a disadvantaged third-party provider for an Article 36 parity breach, as distinct from Finanstilsynet's own supervisory powers, has not been established in the sourcing available this cycle; this is a live legal question rather than a settled one, and it would typically depend on the specific transposition mechanics of the underlying EU technical standard into Norwegian administrative and civil law, which fall outside this cycle's evidentiary base. Absent primary legal analysis on this point, the finding should be read as a supervisory-enforcement development in the first instance, with any private-litigation dimension remaining speculative until further sourcing is obtained. #### Outlook The clearest next-cycle marker is whether Finanstilsynet escalates this finding into named-provider supervisory action, publishes updated market-wide technical guidance on the specific data fields or categorisation standards account-servicing providers must expose through the PSD2 interface, or leaves the finding as a standalone clarification without further follow-up. Any of the first two outcomes would represent a material escalation in this module's severity read; the third would suggest the finding functions primarily as an interpretive signal rather than the opening move of a supervisory case. Given the Tier 1 sourcing and High confidence already attached to the underlying finding, this is one of the stronger candidates in this cycle's Norway coverage for generating a follow-on, named-entity development in a subsequent cycle. **Sources and findings (4)** 1. T3 [https://ripjar.com/blog/aml-compliance-in-norway-what-you-need-to-know/](https://ripjar.com/blog/aml-compliance-in-norway-what-you-need-to-know/) retrieved 2026-07-04 2. T1 [https://www.finanstilsynet.no/en/publications/annual-report/annual-report-2024/reports-from-the-supervised-sectors-for-2024/banks-and-other-financing-activity/](https://www.finanstilsynet.no/en/publications/annual-report/annual-report-2024/reports-from-the-supervised-sectors-for-2024/banks-and-other-financing-activity/) retrieved 2026-07-04 3. T3 [https://iclg.com/practice-areas/fintech-laws-and-regulations/norway](https://iclg.com/practice-areas/fintech-laws-and-regulations/norway) retrieved 2026-07-04 4. T3 [https://www.thelocal.no/20230130/what-you-should-do-if-you-are-the-victim-of-fraud-in-norway](https://www.thelocal.no/20230130/what-you-should-do-if-you-are-the-victim-of-fraud-in-norway) retrieved 2026-07-04 ### W8 Merchant Acquiring & Risk Probable confirmed 2026-07-04 Merchant acquiring in Norway runs through commercial banks for domestic BankAxept transactions (bilateral fee-setting, no interchange) and through international-scheme acquirers/PSPs for Visa/Mastercard traffic, with global scheme chargeback-monitoring programmes (Visa VAMP, Mastercard ECM/HECM) forming the primary risk-control overlay in the absence of a bespoke Norwegian merchant-acquiring statute. Standing sub-brief · as of 8 July 2026 108 words · last cycle 2026-07-08 #### Merchant Acquiring & Risk BankAxept acquiring is offered by commercial banks with fees set bilaterally between retailer and acquirer, in the absence of any bespoke Norwegian merchant-acquiring statute. Risk management for merchants therefore runs primarily through scheme-level monitoring programmes (see W4) rather than a domestic acquiring-specific rulebook. The scale of fraud exposure facing Norwegian banks is material: DNB alone blocked NOK 2.1 billion of fraud in 2024, an indicator of the resources being diverted toward defensive tooling across the acquiring chain. #### Outlook Absent a bespoke acquiring statute, expect continued reliance on scheme rulebooks (Visa VAMP among them) as the primary lever for merchant-risk management in the Norwegian market. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://www.norges-bank.no/contentassets/d9d288daa8684f81809fd5da2604af3b/payments-in-the-nordics.pdf?v=10122025175501](https://www.norges-bank.no/contentassets/d9d288daa8684f81809fd5da2604af3b/payments-in-the-nordics.pdf?v=10122025175501) retrieved 2026-07-04 2. T2 [https://www.adyen.com/payment-methods/bankaxept](https://www.adyen.com/payment-methods/bankaxept) retrieved 2026-07-04 3. T3 [https://docs.adyen.com/risk-management/dispute-and-fraud-monitoring/](https://docs.adyen.com/risk-management/dispute-and-fraud-monitoring/) retrieved 2026-07-04 4. T3 [https://www.mordorintelligence.com/industry-reports/norway-payments-market](https://www.mordorintelligence.com/industry-reports/norway-payments-market) ### W9 Product Innovation & Market Development Confirmed confirmed 2026-07-04 Straks 2.0 is Norway's domestic instant-payment rail, aligned with SEPA Instant Credit Transfer; Vipps is the dominant consumer app, now undergoing a Nordic-wide merger with MobilePay. The EU Instant Payments Regulation is not yet incorporated into Norwegian law. Horizon · 2026-Q4 (±year) PSD3 fraud-mitigation API mandate takes effect_in_force_pending · TT3_ Standing sub-brief · as of 7 August 2026 89 words · last cycle 2026-10-05 #### Product Innovation & Market Development Straks 2.0, Norway's real-time account-to-account payment rail led by Vipps P2P, has overtaken standard giro transfers to become the country's most-used payment type. The EU Instant Payments Regulation (2024/886) has not yet been incorporated into Norwegian law, leaving the account number as the sole unique payee identifier pending future EEA transposition. #### Outlook The EU Instant Payments Regulation's transposition into Norwegian law is expected in 2027, a multi-year horizon; the account number will cease to be Norway's sole unique payee identifier once that transposition occurs. Periodic update · new data 2026-09-28 #### Product Innovation & Market Development The headline product-innovation development in Norway this cycle is Vipps MobilePay's launch of 'Tap with Vipps,' enabled by the EU Digital Markets Act forcing Apple to unlock iPhone NFC access to third-party wallet providers. This is described as the world's first native iOS alternative to Apple Pay, a notable first-mover product achievement for a Nordic payments provider operating in a market where Apple Pay has historically held a structural advantage on iOS devices through exclusive NFC access. The significance of this development lies in its regulatory origin: it is a product-innovation outcome produced by platform-access regulation (the DMA) rather than by payments-specific rulemaking, illustrating a cross-regime interaction in which a non-payments regulatory intervention reshapes the competitive product landscape within payments. This is a structural product-development shift rather than an incremental feature launch, since it removes a technical barrier (exclusive NFC access) that had previously constrained wallet competition on iOS specifically. #### Outlook Watch for competitive responses from other Nordic and European wallet providers now that the DMA-forced NFC access applies EU/EEA-wide, not solely to Vipps, and for whether Apple's own commercial response (fee structures, technical terms for third-party NFC access) shapes how quickly other providers can replicate Vipps's first-mover position. **1 earlier distinct update(s)** Periodic update · new data 2026-09-08 #### Product Innovation & Market Development The key forward-looking product-regulation development for the Norwegian payments market this cycle is the anticipated arrival of PSD3, expected in 2026, which will hard-wire dedicated fraud-mitigation APIs into the payments ecosystem via Norway's EEA alignment with EU payment-services legislation. This is an uncertain-confidence finding, resting on a single Tier 4 source, and should be treated as an informed market expectation rather than a confirmed regulatory commitment at this stage. The anticipated PSD3 fraud-API mandate does not arrive in isolation. Norwegian PSPs are simultaneously navigating DORA-driven operational-resilience compliance cost pressure, and the combination of DORA compliance obligations and an anticipated PSD3 fraud-API mandate together represent a converging compliance-cost picture for Norwegian payment institutions heading into 2026, ahead of the full continental rollout timing that both directives are expected to follow. For product and innovation teams at Norwegian PSPs, this means near-term product-development roadmaps should anticipate building toward standardised fraud-mitigation API architecture rather than treating PSD3 compliance as a distant, lower-priority item. This anticipated regulatory direction is consistent with, and reinforces, the Verification of Payee rollout already underway in the consumer-protection and APP-fraud space, suggesting that Norwegian and broader EEA payment-product innovation in the near term will be substantially shaped by fraud-mitigation regulatory requirements rather than by commercially-driven feature differentiation alone. #### Outlook The key uncertainty is the precise 2026 arrival date and final scope of PSD3's fraud-mitigation API requirements, given the finding's reliance on a single Tier 4 source. Norwegian PSPs should treat the DORA-plus-PSD3 compliance-cost convergence as a planning assumption for 2026 budget and roadmap cycles regardless of the precise final PSD3 timeline. **Sources and findings (5)** 1. T1 [https://www.marketdataforecast.com/market-reports/Norway-Cards-and-Payments-Market](https://www.marketdataforecast.com/market-reports/Norway-Cards-and-Payments-Market) retrieved 2026-07-04 2. T3 [https://www.mordorintelligence.com/industry-reports/norway-payments-market](https://www.mordorintelligence.com/industry-reports/norway-payments-market) 3. T1 [https://www.norges-bank.no/en/news-events/publications/retail-payment-services/retail-payment-services-2025/web-report-retail-payment-services-2025/](https://www.norges-bank.no/en/news-events/publications/retail-payment-services/retail-payment-services-2025/web-report-retail-payment-services-2025/) retrieved 2026-07-04 4. T3 [https://iclg.com/practice-areas/fintech-laws-and-regulations/norway](https://iclg.com/practice-areas/fintech-laws-and-regulations/norway) retrieved 2026-07-04 5. T3 [https://www.mordorintelligence.com/industry-reports/norway-payments-market](https://www.mordorintelligence.com/industry-reports/norway-payments-market) ### W10 Consumer Protection & APP Fraud Probable confirmed 2026-07-04 Verification of Payee (VoP) is rolling out across 2025-2026 to reduce APP fraud and misdirected payments by matching recipient name to IBAN; DNB alone blocked NOK 2.1 billion of fraud in 2024. Standing sub-brief · as of 8 July 2026 130 words · last cycle 2026-10-05 #### Consumer Protection & APP Fraud Norwegian banks may either refund an authorised-push-payment fraud victim the full amount less a NOK 1,200 deductible, or contest the claim and refer the case to the Financial Services Complaints Board. This bank-discretion reimbursement model contrasts with the UK Payment Systems Regulator's mandatory-reimbursement approach and leaves outcome variability for victims depending on which institution they bank with. The Consumer Ombudsman has publicly criticised Norwegian banks' inconsistent APP-fraud reimbursement practices, alleging in some cases misinformation about referral routes to the Financial Appeals Board, a criticism that keeps consumer-protection pressure on the sector even absent a legislative reimbursement mandate. #### Outlook Expect continued Consumer Ombudsman pressure for a more consistent, possibly UK-style reimbursement standard; whether this translates into legislative change remains the key open question for this module. Periodic update · new data 2026-09-28 #### Consumer Protection & APP Fraud Two distinct but related developments define this cycle's consumer-protection and fraud picture for Norway. First, DNB reported blocking NOK 2.1 billion (approximately USD 190 million) of fraud in 2024, a substantial figure that illustrates the scale of fraud attempts against Norway's largest bank and, by extension, the scale of the fraud-prevention infrastructure required to defend against it. Second, and forward-looking, the pending PSD3/PSR package will mandate IBAN and name-check verification and broaden authorised-push-payment fraud reimbursement obligations for banks and payment institutions once transposed EEA-wide. The combination of a large current fraud-blocking figure and a forthcoming mandatory verification and reimbursement regime suggests that Norway's consumer-protection posture on payment fraud is set to tighten materially once PSD3/PSR reaches EEA incorporation. The current framework does not yet mandate IBAN/name checks at the domestic regulatory level in the way the future EU package will, meaning the DNB fraud-blocking figure reflects current-state fraud prevention absent that future mandatory verification layer. #### Outlook The PSD3/PSR-mandated IBAN/name-check and broadened APP-fraud reimbursement obligations represent a material forthcoming compliance shift for Norwegian banks and payment institutions once EEA-incorporated, expected in the 2027-2028 window. Watch for how Norwegian institutions position their fraud-prevention infrastructure ahead of that mandatory shift, given the scale of fraud already being blocked under current arrangements. **1 earlier distinct update(s)** Periodic update · new data 2026-09-08 #### Consumer Protection & APP Fraud Norway's principal consumer-protection development in the payments space this cycle is the ongoing rollout of Verification of Payee, a mechanism that matches a payment recipient's stated name against their IBAN before a transfer completes, intended to reduce authorised-push-payment fraud and misdirected payments. The rollout is underway across 2025 and 2026, per a probable, Tier 4-sourced finding. The scale of the fraud problem VoP is designed to address is illustrated by a striking data point from a single major Norwegian bank: DNB alone blocked NOK 2.1 billion, approximately USD 190 million, of fraud in 2024. This figure, also probable-confidence and Tier 4-sourced, is presented here as a dashboard-level data point rather than a fully corroborated standing finding, but it usefully contextualises why VoP and similar name-matching mechanisms are being prioritised across the Norwegian market: the absolute scale of fraud exposure at even a single institution is substantial. Looking forward, the anticipated PSD3 fraud-mitigation API mandate, expected in 2026 via EEA alignment, is likely to further formalise and standardise the kind of fraud-mitigation infrastructure that VoP represents, suggesting Norway's current voluntary or market-driven fraud-mitigation rollout may be followed by a more prescriptive regulatory mandate within the same rough timeframe. #### Outlook The key APP-fraud metric to watch going forward is whether VoP's continued rollout across 2025-2026 produces a measurable reduction in fraud-loss figures comparable to the NOK 2.1 billion DNB blocked in 2024. The anticipated PSD3 fraud-API mandate is the regulatory development most likely to reinforce and standardise this consumer-protection trajectory across the broader EEA-aligned Norwegian market. **Sources and findings (4)** 1. T1 [https://www.finanstilsynet.no/en/consumer-protection/what-does-finanstilsynet-do-for-consumers/](https://www.finanstilsynet.no/en/consumer-protection/what-does-finanstilsynet-do-for-consumers/) retrieved 2026-07-04 2. T3 [https://www.thelocal.no/20230130/what-you-should-do-if-you-are-the-victim-of-fraud-in-norway](https://www.thelocal.no/20230130/what-you-should-do-if-you-are-the-victim-of-fraud-in-norway) retrieved 2026-07-04 3. T1 [https://www.finanstilsynet.no/en/consumer-protection/complaints-bodies/](https://www.finanstilsynet.no/en/consumer-protection/complaints-bodies/) retrieved 2026-07-04 4. T3 [https://tandhconsult.com/blog/how-to-report-a-scam-in-norway/](https://tandhconsult.com/blog/how-to-report-a-scam-in-norway/) retrieved 2026-07-04 ### W11 AML/CFT & Financial Crime [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/norway/#sec-dom-D7) Confirmed confirmed 2026-07-04 Norwegian AML/CFT is anchored on the 2018 AML Act (implementing 4th/5th/6th AMLD standards), with Finanstilsynet as supervisor, Økokrim as FIU, a beneficial-ownership register opened October 2024 (enforcement fines live from 31 July 2025), and TFR II now extending AML/CFT obligations to MiCA-authorised crypto-asset service providers. This module carries the Sentinel.gi payments-context feed only; no original illicit-finance analysis is performed here. Standing sub-brief · as of 8 July 2026 157 words · last cycle 2026-07-08 #### AML/CFT & Financial Crime The 2018 Anti-Money Laundering Act sets out obliged entities, cash-payment thresholds, risk-based customer due diligence and ongoing monitoring including beneficial-owner identification, with Finanstilsynet as supervisor and Okokrim as the financial intelligence unit. This surface is fed by the Sentinel.gi illicit-finance monitor and is presented here only in its payments-context form; original illicit-finance analysis of these developments is carried in Sentinel's own reporting rather than in this brief. The beneficial-ownership register opened for registrations on 1 October 2024, with enforcement fines effective from 31 July 2025, and TFR II now extends customer due-diligence obligations to MiCA-authorised crypto-asset service providers and asset-referenced-token issuers, widening the AML perimeter to cover the newly licensed CASP sector described under W2. #### Outlook Expect the beneficial-ownership enforcement regime to mature further and TFR II's CASP-facing CDD obligations to be tested in practice as more Norwegian crypto firms complete MiCA authorisation; readers seeking illicit-finance-use analysis should consult the Sentinel.gi feed directly. no periodic updates on record for this sub-brief ** Sources and findings (6)** 1. T3 [https://ripjar.com/blog/aml-compliance-in-norway-what-you-need-to-know/](https://ripjar.com/blog/aml-compliance-in-norway-what-you-need-to-know/) retrieved 2026-07-04 2. T? FIM (sentinel.gi) per-JID baseline profile — Norway — Norway (EEA/EFTA, non-EU) runs AML/CFT under the Hvitvaskingsloven (Money Laundering Act), supervised by Finanstilsynet with Økokrim as FIU/economic-crime prosecutor. As an EEA state it incorporates EU AML directives with a lag rather than automatic application, and is outside AMLR/AMLA direct scope pending EEA incorporation decisions. 3. T2 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-001) — Enforcement: Finanstilsynet — Svenska Handelsbanken AB, Norwegian branch 4. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: political-constraint 5. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: sourcing-thinness 6. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: capacity-deficit ### W12 Correspondent Banking, Settlement & Access Probable confirmed 2026-07-04 Central settlement runs through Norges Bank's own settlement system (NBO/NBO INST) in central-bank money, with Bits AS coordinating interbank clearing (NICS); cross-border corridors rely on SEPA/SCT Inst for euro flows and SWIFT correspondent (nostro/vostro) banking for other currencies, with no Norway-specific de-risking episodes surfaced in current sourcing. Standing sub-brief · as of 8 July 2026 143 words · last cycle 2026-09-14 #### Correspondent Banking, Settlement & Access The Norges Bank Settlement System processes large-value and time-critical transactions and settles them in central-bank money on a final, irrevocable basis, while Bits AS coordinates domestic interbank clearing through NICS. This core settlement architecture is structurally unchanged this cycle. Division of powers between the two supervisors is clear: Finanstilsynet may approve securities settlement systems under Payment Systems Act Section 4-1 and, under Securities Trading Act Section 13-2, authorises and supervises central counterparties established in Norway, while Norges Bank retains oversight of the settlement infrastructure itself. No Norway-specific correspondent-banking de-risking episodes were identified this cycle beyond generic global commentary, a gap flagged for continued monitoring given de-risking's standing bias-correction priority in this methodology. #### Outlook Expect settlement-infrastructure stability near-term, with the main structural question remaining the bank-versus-non-bank access asymmetry inherent in correspondent banking relationships rather than any imminent domestic reform. Periodic update · new data 2026-09-14 #### Correspondent Banking, Settlement & Access The correspondent-banking and settlement development relevant to Norway this cycle is a scheme-level messaging-format deadline rather than a change to Norwegian access or correspondent-relationship rules directly. From 15 November 2026, only structured or hybrid address formats may be transmitted in SEK and SEPA payments. This is described as a hard deadline affecting Nordic-connected payment flows, including those touching Norway, even though Norway's own currency is NOK rather than SEK and Norway sits outside the eurozone. The relevance to Norwegian correspondent and settlement infrastructure arises through cross-border payment flows that interact with SEK-denominated or SEPA-scheme messages, where Norwegian-linked counterparties or correspondent banks will need to ensure structured or hybrid address formatting compliance ahead of the deadline. This finding carries lower confidence in the underlying evidence this cycle and should be read as a reported scheme-level deadline rather than a fully corroborated Norwegian regulatory requirement; no Norwegian-specific implementing instrument or regulatory guidance addressing this deadline was identified this cycle. The analytical significance for correspondent banking and settlement access lies in the asymmetry the deadline could create: Norwegian-linked flows that fail to adopt structured or hybrid addressing in time for the 15 November 2026 cutoff risk rejection or delay when interacting with SEK or SEPA-scheme counterparties, a settlement-access friction point distinct from any licensing or conduct-rule question. No further correspondent-banking access-asymmetry development, such as a bank-versus-non-bank access differential specific to Norway, was identified this cycle beyond the messaging-format deadline itself. #### Outlook The fixed 15 November 2026 deadline for structured or hybrid address formats in SEK and SEPA payments is a near-term, calendar-certain event against which Norwegian-linked correspondent and settlement flows should be assessed for readiness. Given the deadline's proximity and its reach into Nordic-connected flows generally, continued monitoring for any Norwegian-specific implementing guidance or correspondent-bank readiness signal ahead of the cutoff is the appropriate posture for the coming cycle. **Sources and findings (4)** 1. T3 [https://www.banqglobal.com/guide/norwegian-payment-rails-explained](https://www.banqglobal.com/guide/norwegian-payment-rails-explained) 2. T1 [https://www.norges-bank.no/en/topics/financial-stability/Oversight/oversight-payment-systems/roles/](https://www.norges-bank.no/en/topics/financial-stability/Oversight/oversight-payment-systems/roles/) retrieved 2026-07-04 3. T1 [https://www.norges-bank.no/en/news-events/publications/Financial-Infrastructure-Report/finansiell-infrastruktur-2025/web-report-financial-infrastructure-2025/](https://www.norges-bank.no/en/news-events/publications/Financial-Infrastructure-Report/finansiell-infrastruktur-2025/web-report-financial-infrastructure-2025/) 4. T3 [https://www.banqglobal.com/guide/norwegian-payment-rails-explained](https://www.banqglobal.com/guide/norwegian-payment-rails-explained) ### W13 Commercial Intelligence (M&A, Investment & Product) limited signal Probable confirmed 2026-07-04 Norway's fintech/payments commercial landscape this cycle is dominated by the Vipps-MobilePay Nordic consolidation, against modest domestic venture funding relative to peer Nordic markets. Standing sub-brief · as of 7 August 2026 126 words · last cycle 2026-10-18 #### Commercial Intelligence (M&A, Investment & Product) Vipps, Norway's dominant mobile payments app, is merging its payment ecosystem with Denmark's and Finland's MobilePay to form a combined Nordic platform serving 11+ million users. The merger is currently at the announced stage, with parties named as Vipps and MobilePay; deal terms, including any valuation, have not been publicly disclosed. It lands against a backdrop of comparatively subdued Norwegian fintech venture funding: the domestic sector raised $18.3M in equity funding across 6 rounds through September 2025, well below the 2022 peak of over $187M raised in a single year. #### Outlook Resolution of the Vipps-MobilePay merger's regulatory approvals will be a signal worth tracking in the coming cycles, set against a domestic venture-funding backdrop that remains well below 2022 levels. Periodic update · new data 2026-10-18 #### Commercial Intelligence & Fintech Vipps MobilePay announced a partnership with Rootline on 16 October 2026, aimed at extending the wallet operator's reach to platform merchants. This is a discrete commercial development rather than a structural market-wide shift: it represents a specific distribution deal through which Vipps MobilePay seeks to broaden its merchant-acquisition channel by reaching merchants operating on platform infrastructure rather than through direct integration alone. No financial terms or transaction value were identified in reporting on this partnership this cycle. This announcement sits alongside, but is analytically distinct from, Vipps MobilePay's broader Nordic rebrand and its co-founding of the European Network for Payments; those are structural moves addressed separately, while the Rootline partnership is a specific, named commercial event of the kind this module is intended to capture. Taken together, the cluster of announcements this cycle indicates a period of active commercial and strategic initiative at Vipps MobilePay across distribution, branding, and cross-border infrastructure simultaneously, though each should be read as a discrete event rather than evidence of a single coordinated master plan absent further confirmation. #### Outlook Further detail on the commercial terms or merchant uptake of the Rootline partnership, if disclosed, would be the next marker to watch for assessing the materiality of this platform-merchant distribution move. **1 earlier distinct update(s)** Periodic update · new data 2026-09-28 #### Commercial Intelligence & Fintech The standout commercial-intelligence event this cycle is Vipps MobilePay's launch of 'Tap with Vipps,' enabled by DMA-forced NFC access and described as the world's first native iOS alternative to Apple Pay; this DMA-driven NFC access opened a new on-device wallet competition vector in Norway, led by Vipps. As a discrete commercial product launch by a named entity, this is a W13 commercial event distinct from the structural product-innovation-regulation reading of the same fact tracked under Product Innovation & Market Development. A second, lower-confidence commercial signal this cycle concerns Neonomics, which has reportedly lodged competition complaints against incumbent Norwegian banks over PSD2 account-to-account data-access API pricing. This rests on a single source and carries only Uncertain confidence, so it should be treated as a watch item rather than a confirmed commercial dispute at this stage. #### Outlook Watch for confirmation or further detail on the Neonomics API-pricing complaint, which would elevate it from an uncertain single-source signal to a substantiated commercial dispute, and for competitive commercial responses to Vipps's NFC wallet launch from other Nordic fintech and banking-sector players. **Sources and findings (3)** 1. T2 [https://firi.com/about/financial-supervisory-authority](https://firi.com/about/financial-supervisory-authority) retrieved 2026-07-04 2. T3 [https://tracxn.com/d/explore/fintech-startups-in-norway/38FtfxfYPbd2pJZUtqxCh3meJfuLu2CTBRo-VzUw7vY#top-companies](https://tracxn.com/d/explore/fintech-startups-in-norway/38FtfxfYPbd2pJZUtqxCh3meJfuLu2CTBRo-VzUw7vY#top-companies) retrieved 2026-07-04 3. T3 [https://www.mexc.com/news/1142505](https://www.mexc.com/news/1142505) retrieved 2026-07-04 ** No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for Norway| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 2 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 64 finding(s), 120 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).