Finland Fin-FSA CASP Authorisation 2026 — Practitioner Guide

Helsinki as a MiCA jurisdiction

Finland is one of the smaller MiCA jurisdictions by current applicant volume but a credible mid-tier option for operators with Nordic or Baltic market focus. The positioning reflects three factors.

First, Finland’s financial-services ecosystem is mature and well-integrated with broader Nordic banking. Nordea (one of the largest Nordic banks), OP Financial Group, Danske Bank Finland, and various smaller Finnish institutions provide banking access for licensed operators. The Nordic correspondent banking network reduces the cross-border friction that affects some smaller EU member states.

Second, the Fin-FSA is a substantively-credible supervisor. Banking-grade supervisory expectations, substantive engagement with applicants, and proportionate but rigorous review of governance, risk management, and AML frameworks. Operators that pass Fin-FSA review carry reputational signal closer to BaFin-level than to lighter EU supervisors.

Third, Finland offers English-language operational reality despite Finnish and Swedish being the official languages. Helsinki’s business environment operates substantially in English. Fin-FSA staff are English-proficient. Supporting documentation in English is accepted for review purposes. The translation overhead applies primarily to formal application documents.

The trade-off: Finland is not a low-cost MiCA jurisdiction. Substance investment runs EUR 250-500k first year for a mid-tier CASP, comparable to Ireland and meaningfully higher than Estonia or Bulgaria. Finland makes sense for operators with strategic Nordic positioning, not for operators choosing on pure cost minimisation.

The Fin-FSA supervisory model

Finland adopted an integrated supervisory model for MiCA — single Fin-FSA authority covering CASP authorisation, prudential supervision, conduct supervision, and AML/CFT. This contrasts with split-supervisor arrangements in some other EU member states.

The integrated model produces several operational characteristics:

Single file engagement — applicants work with one supervisor across all dimensions of the application. Fin-FSA’s case team handles prudential, conduct, AML, and governance review jointly.

Substantive AML integration — AML supervision is integrated with prudential and conduct supervision. AML findings inform broader supervisory engagement and vice versa. This produces more substantive AML enforcement than the previous fragmented Finnish framework.

Banking-grade governance expectations — Fin-FSA applies the same supervisory rigour to CASP governance that it applies to Finnish banks and investment firms. Board composition, key-person fit-and-proper, organisational structure, internal controls, risk management — all tested at substantive depth.

For operators with substantive compliance infrastructure, the integrated model is operationally efficient. For operators with skeletal governance, the model produces more rigorous testing than lighter supervisory frameworks.

Pre-MiCA virtual-currency-provider register

Finland established a pre-MiCA virtual-currency-provider register in 2019 under the Act on the Provision of Virtual Currency Services (572/2019). The register was AML-focused — registered operators committed to AML/CFT obligations under EU 5AMLD and were subject to Fin-FSA AML supervision but were not subject to substantive prudential or conduct regulation.

The Finnish virtual-currency register was substantively smaller than Estonian or Lithuanian equivalents — approximately 15-25 registered operators at peak. The Fin-FSA had taken a more selective approach to virtual-currency registration than the larger pre-MiCA jurisdictions, applying substantive AML and operational expectations even at the registration phase.

The transition to MiCA CASP authorisation has been correspondingly smoother than in larger pre-MiCA jurisdictions. Most Finnish virtual-currency-registered operators that committed to MiCA migration completed authorisation through 2025. The total post-MiCA Finnish CASP population is approximately 20-30 operators including some new entrants attracted to the Nordic positioning.

Language and translation realities

Finnish and Swedish are Finland’s two official languages. Fin-FSA formal applications must be submitted in one of the two official languages. This creates substantive translation overhead for non-native-Finnish operators.

The formal documents requiring Finnish (or Swedish) translation:

• Articles of association of the Finnish operating entity
• Application form and supporting attestations
• Internal policies (governance, risk management, AML, conduct)
• Business plan (a Finnish summary plus English full document is sometimes acceptable, though Fin-FSA prefers Finnish full document)
• Financial projections and capital documentation
• AML manual and customer due-diligence procedures
• ICT risk management framework documentation (substantial document under DORA)

Working translations in English are acceptable for supporting documents during file review but the formal authorisation documents must be in Finnish or Swedish.

Translation cost for a substantive CASP file runs EUR 15,000-30,000. Translation timeline runs 4-6 weeks for substantial-volume work. Operators should plan certified translation engagement concurrent with the file preparation.

Some operators choose to submit in Swedish rather than Finnish — Swedish has a smaller translator population in Finland but the language is recognised and Fin-FSA accepts Swedish submissions. For operators with Swedish-language compliance teams (from Sweden or international Swedish-speaking operations), the Swedish submission can simplify the documentation workflow.

Substance expectations

Fin-FSA applies Nordic banking-grade substance expectations to CASP files. Specific requirements:

Senior management — CEO, MLRO, and other key-person roles must be Finnish-resident or document substantive working presence in Finland. Pure-non-resident arrangements with monthly Helsinki visits face refusal. Fin-FSA prefers Finnish-resident senior compliance staff.

Functional substance — substantive in-Finland AML team, compliance team, risk management. Outsourcing of critical functions is permitted under MiCA outsourcing rules but Fin-FSA expects substantive Finnish oversight of outsourced functions.

Operational infrastructure — Helsinki office (not corporate-services-provider arrangement), Finnish corporate registration, Finnish employment for substantive headcount, Finnish banking arrangements.

Board governance — board with appropriate independence, board-level committees for risk and audit, documented governance policies and procedures aligned with Finnish corporate governance standards.

Substance investment runs typically EUR 250-500k in the first year for a mid-tier CASP and EUR 200-350k ongoing per year. Comparable to Ireland and Netherlands; lower than Germany; higher than Estonia, Bulgaria, or Latvia.

DORA implementation in the Finnish framework

The Digital Operational Resilience Act (DORA) Regulation (EU) 2022/2554 applies to CASPs from 17 January 2025. Fin-FSA expects substantive DORA implementation as a baseline component of CASP applications.

Specific Fin-FSA DORA expectations:

ICT risk management framework — comprehensive identification, assessment, and management of ICT risks. Board-level governance of ICT risks with documented policies.

ICT third-party risk management — registry of all ICT third-party providers. Contractual provisions ensuring DORA flow-through. Critical-third-party identification.

ICT incident reporting — categorisation framework. Reporting to Fin-FSA within DORA timelines. Post-incident documentation and review.

Digital operational resilience testing — annual testing including threat-led penetration testing for larger operators. Test results reported to Fin-FSA on request.

ICT contractual arrangements — DORA-compliant terms in critical-third-party contracts covering service levels, audit rights, exit arrangements, data protection.

Fin-FSA applications without substantive DORA framework receive substantive information requests at the prudential review phase. Build the DORA framework concurrent with the CASP application rather than as a post-authorisation task.

Application timeline

Realistic timeline from initial Fin-FSA engagement to authorisation grant: 7-9 months for clean first-time applications.

Months 1-2 — Finnish company formation, senior management appointments, Fin-FSA pre-application engagement, scoping of application file.

Months 2-4 — Application file preparation in English (working draft), parallel Finnish translation engagement, governance documentation, ICT framework (DORA-compliant), AML programme, conduct-of-business framework.

Months 4-5 — Translation completion, final formal Finnish (or Swedish) submission preparation.

Month 5 — Formal application submission. Fin-FSA initial completeness review (typically 3-5 weeks). Statutory five-month clock begins on file completeness.

Months 6-9 — Substantive Fin-FSA review. Typically 2-3 rounds of information requests covering prudential, governance, ICT, AML, and conduct dimensions.

Month 9-10 — Authorisation decision.

For operators with pre-MiCA Finnish virtual-currency registration, modest timeline compression is possible if the pre-existing documentation provides substantive starting material.

When Finland is the right choice

Finland makes operational sense for specific CASP profiles:

Nordic-focused operators — operators serving Nordic and Baltic markets with substantive operational reasons to base in the region. Finland integrates well with Sweden, Norway, Denmark, and the Baltic states.

Operators wanting Nordic banking access — Finnish banking arrangements give access to the Nordic correspondent banking network that reduces cross-border payment-processing friction.

Substantive operators with capital for substance — Finland’s substance bar and supervisory expectations work for operators committing to substantive Finnish operations. Operators choosing on pure cost economics should consider Estonia, Bulgaria, or Latvia.

English-language-capable operators with translation budget — Finland’s official-language requirement creates real translation overhead but is manageable for substantively-resourced operators.

For operators that fit these profiles, Finland is a credible mid-tier MiCA jurisdiction with stronger reputational signal than the headline applicant volume suggests.