Regulatory AlertsFinland: lending & credit regulation
RegulatedFinland: VASP licensing via SEC's ARIP; CBN governs the banking interface
- Lead regulator
- Finnish Financial Supervisory Authority (Finanssivalvonta)
- Also involved
- Data Protection Ombudsman (privacy) · National Bureau of Investigation (AML enforcement)
- Core law
- Act on Payment Services (2010/517)
- Entry capital
- EUR 20,000 (Payment Institution)
- Approval timeline
- 3-6 months for registration
- Customer assets
- Segregated accounts required for client funds
- Data protection
- GDPR · Finnish Data Protection Ombudsman
- Sandbox
- Yes - Finanssivalvonta Regulatory Sandbox
Consumer credit and lending activities are primarily regulated under the Act on Payment Services and the Act on Consumer Credit. The Finnish Financial Supervisory Authority (Finanssivalvonta) oversees compliance, requiring registration for credit grantors and P2P intermediaries. Recent regulatory focus has shifted towards robust risk management and default risk classification for consumer lending.
The regulatory environment is mature and strict, emphasizing consumer protection and financial stability. Entities must adhere to stringent capital adequacy and operational resilience standards. The direction of travel involves tighter integration of AML/CFT requirements and enhanced supervision of non-bank credit providers.
Which licence do you need?
| Your activity | Requirement | Capital | Timeline | Authority |
|---|---|---|---|---|
| Consumer lending | LicencePayment Institution Registration[1][2] Requires robust risk classification systems per 2025 guidelines. | EUR 20,000 | 3-6 months | Finanssivalvonta |
| SME / commercial lending | LicenceCredit Institution Authorization Standard banking license required for commercial lending. | EUR 5,000,000 | 6-12 months | Finanssivalvonta |
| Microfinance | Uncertainverify with regulator No specific regime identified; likely falls under general credit rules. | — | — | — |
| Buy-now-pay-later | LicencePayment Institution Registration[2] Treated as payment service if deferred payment is structured as such. | EUR 20,000 | 3-6 months | Finanssivalvonta |
| P2P lending platform | RegistrationP2P Loan Intermediary Registration[2] Mandatory registration for intermediaries under 2023 regulations. | — | 3-6 months | Finanssivalvonta |
| Credit bureau / scoring | Uncertainverify with regulator Scoring services are ancillary; no specific license mentioned. | — | — | — |
| Debt collection | Uncertainverify with regulator Debt collection is regulated under separate consumer protection laws. | — | — | — |
New — what changed recently
- 2025-01-01Regulations and Guidelines 2/2024 — New risk management requirements for mortgage bank operations entered into force.
- 2025-01-01Management of Default Risks in Consumer Lending — Standardized risk classification systems required for credit grantors.
- 2023-07-01Regulations and Guidelines 3/2023 — Mandatory registration introduced for credit grantors and P2P intermediaries.
Market-entry checklist
- 1Register with FinanssivalvontaSubmit application for Payment Institution or P2P Intermediary registration.
- 2Secure Minimum CapitalEnsure EUR 20,000 initial capital for payment institution status.
- 3Implement Risk SystemsDeploy robust default risk classification systems per 2025 guidelines.
- 4Establish AML ComplianceRegister with the National Bureau of Investigation for AML supervision.
- 5Prepare Operational ResilienceDocument risk management frameworks aligned with FIN-FSA expectations.