Finland

The regime's transitional architecture has now closed at EU level. ESMA's statement on the end of transitional periods under MiCA sets 1 July 2026 as the EU-wide backstop date after which entities providing crypto-asset services to EU clients without a MiCA licence are in breach of EU law, superseding the earlier national registration-based regimes that member states, including Finland, operated during MiCA's phase-in. ESMA has followed that statement with a further, direct public call on unauthorised crypto-asset service providers to cease operations, applicable to the Finnish market under FIN-FSA's supervisory remit as much as to any other EU member state. Together these mark the definitive end of the grace period during which a provider could rely on legacy national authorisation, rather than full MiCA authorisation, to continue serving Finnish or EU clients.

Underneath this generally settled trajectory sits a live and unresolved dispute that materially affects compliance timing for at least some Finnish-facing providers. The EU-wide 1 July 2026 backstop is the position taken by the highest-tier, directly-sourced ESMA material relied on in this research pass. Separately, however, lower-tier commentary -- law-firm and industry-newsletter sources -- asserts that Finland exercised a national option to shorten its own transitional window to six months, which would have closed legacy-provider cover as early as 30 June 2025, a full year earlier than the EU-wide date. This is not a trivial difference: it is a binding, high-materiality question about exactly when a legacy Act-572/2019-registered provider ceased to have any lawful basis to continue operating without full MiCA authorisation. Because the higher-tier source supports the later date and the earlier date rests only on secondary commentary, the claim recording the 1 July 2026 backstop has been retained rather than overwritten, but the discrepancy has been escalated for human and regulatory confirmation rather than resolved definitively in this pass. This dispute is the specific reason the published record for Finland currently carries a held status rather than an unconditional publication.

Separately from the transitional-date question, Finland's own pre-MiCA national framework -- the Act on Providers of Virtual Currency (572/2019), which had required registration with FIN-FSA for virtual currency exchange and custodian wallet providers -- has now been effectively superseded by the combination of direct MiCA applicability and the 2024 amendment to Finland's anti-money-laundering act (414/2024), which brings MiCA-authorised CASPs within the existing obliged-entity AML/CFT framework rather than maintaining a separate parallel licensing track. This is treated as a non-normative historical fact describing the transition between regimes rather than a currently binding rule in its own right.

Outlook

The most consequential open item for Finland's licensing module is resolution of the Finland-specific transitional-closure date. Whichever date is ultimately confirmed by FIN-FSA or Finnish implementing legislation, the direction of travel is unambiguous: Finland now operates a single, EU-harmonised CASP authorisation regime under FIN-FSA supervision, with no further national registration route available to new entrants and no remaining lawful basis for legacy providers to operate outside full MiCA authorisation. A secondary, lower-materiality gap is confirmation of the exact title and number of any Finland-specific MiCA-implementing legislation beyond the 2024 AML Act amendment, which has not yet been independently retrieved from Finlex. Neither item is expected to alter the fundamentally settled, green-rated character of this module, but both are expected to sharpen the precision of the record in a subsequent research pass.

Crypto-assets that independently qualify as MiFID II financial instruments -- commonly termed security tokens -- fall outside MiCA's scope entirely and instead remain governed by Finland's existing securities-markets legislation and FIN-FSA's investment-services supervisory function, meaning MiCA does not disturb the pre-existing securities perimeter for tokenised instruments that already meet the financial-instrument definition. Non-fungible, genuinely unique crypto-assets (NFTs) are likewise generally excluded from MiCA's scope in Finland, with the important exception that NFTs issued in large series or collections that in substance function as fungible assets can be pulled back into scope. Crypto-assets that are neither ARTs, EMTs, security tokens nor exempt NFTs -- broadly, utility-token-like assets -- fall under MiCA Title II's public-offer and white-paper-publication requirements, which apply to Finnish issuers and to issuers targeting Finnish holders regardless of where the issuer is established.

No FI-specific interpretive divergence from the EU-level MiCA taxonomy has been identified in this research pass: Finland has not been found to gold-plate, narrow, or supplement the classification categories with additional national criteria, and FIN-FSA's classification practice appears to track the MiCA text directly.

Outlook

Because the classification framework is EU-harmonised and directly applicable, this module is expected to remain stable absent further EU-level Level 2/3 technical standards or ESMA interpretive guidance affecting how borderline cases -- particularly NFT series thresholds and utility-token-versus-ART boundary questions -- are resolved in practice. No Finland-specific developments are currently pending that would be expected to alter this module's green rating.

The sourcing underpinning this module is comparatively thin: the staking/lending finding rests on a single T4 news-commentary source describing how EU nations are preparing to enforce MiCA, and the DeFi and mining findings, while resting on a more authoritative MiCA summary source, are themselves negative findings about the absence of a regime rather than affirmative sourced rules. No FIN-FSA-specific guidance on the classification of staking-as-a-service under MiCA's custody-and-administration service category has been located in this pass.

Outlook

This module is expected to remain amber and unsettled until the EU delivers further Level 2/3 measures or FIN-FSA issues Finland-specific supplementary guidance addressing staking, DeFi, and mining/validator activity directly. Given the pace of EU-level MiCA implementation elsewhere, on-chain activity regulation is a reasonable candidate for the next material regulatory development affecting Finland's crypto perimeter, and this module should be watched closely for the emergence of either EU technical standards or national interpretive guidance in subsequent cycles.

This module carries an important sourcing caveat. Stablecoin regulation has been designated a thin-evidence module requiring a higher sourcing bar than a single generic MiCA citation can satisfy, and a review of this cycle's claims found that four stablecoin claims -- covering authorisation, reserve requirements, redemption rights, and disclosure obligations -- rested on generic MiCA text without independent Finland-specific corroboration. Confidence on all four has accordingly been downgraded from Confirmed to Probable pending research that ties these obligations more directly to FIN-FSA's specific supervisory practice, rather than to the EU regulation's text alone.

Outlook

The underlying legal regime is stable and unlikely to change materially in the near term, since MiCA's stablecoin provisions are already fully in force. The principal open task for this module is evidentiary rather than substantive: closing the sourcing gap identified by the thin-evidence-module review by locating FIN-FSA-specific supervisory statements, authorisation decisions, or enforcement actions concerning ART/EMT issuers, which would allow confidence on the affected claims to be restored toward Confirmed in a subsequent pass.

Sitting alongside these binding CASP-level obligations, Finland's consumer protection posture also includes a broader risk-awareness dimension. The European Supervisory Authorities, including FIN-FSA as one of the national authorities jointly issuing the statement, have publicly warned consumers that crypto-assets can be risky and that legal protection may be limited even where a provider is MiCA-authorised, and have recommended that consumers verify a provider's MiCA authorisation status before investing. This warning is not itself a binding rule but functions as a standing supervisory communication reinforcing the message that MiCA authorisation, while a meaningful protective threshold, does not eliminate market and product risk for retail holders.

Outlook

This module's core legal architecture is settled and unlikely to shift materially absent a broader MiCA amendment cycle. The main developments likely to affect this record going forward are enforcement-level: FIN-FSA complaint-handling statistics, any published enforcement actions concerning custody-segregation breaches, or updated ESA risk warnings, none of which have yet been located in Finland-specific form in this research pass.

Both findings carry sourcing caveats that warrant disclosure. The capital-income characterisation rests on secondary news commentary rather than direct Verohallinto guidance retrieved in this pass, consistent with a broader pattern in which tax treatment has proven a structurally thin module across this monitor's coverage generally. The VAT-exemption finding likewise originated from a single news-commentary source describing the 2014 ruling; a review of that claim noted that a directly on-point primary Vero.fi source confirming the ruling and its alignment with the CJEU Hedqvist position does exist but was not cited in this pass, and confidence on that claim has accordingly been downgraded from Confirmed to Probable. A further, entirely open question concerns Finland's current reporting-obligation mechanics for crypto-asset transactions, including how DAC8/CARF-driven exchange reporting requirements are being implemented domestically -- this has not been independently verified and remains a sourcing gap rather than a researched finding.

Outlook

Closing the primary-source gap by retrieving direct Vero.fi guidance -- both the specific page confirming the 2014 VAT ruling's continued validity and current guidance on capital-gains computation, cost-basis methodology, and DAC8/CARF reporting mechanics -- is the clear priority for improving this module's confidence in a subsequent pass. Substantively, no change to Finland's underlying tax treatment is currently signalled; the amber rating here reflects an evidentiary gap rather than regulatory instability.

Beyond the travel rule itself, third-country crypto-asset service providers cannot lawfully provide or solicit MiCA services to Finnish or wider EU clients, nor outsource custody to non-CASP-authorised entities, except under the narrow reverse-solicitation exemption that must be initiated exclusively by the client rather than induced by the provider. This restriction applies with particular force following the closure of the transitional period discussed in the licensing module, since it removes any residual argument that a non-MiCA-authorised third-country provider could continue servicing Finnish clients on a legacy basis. Finally, Finland-specific guidance on how EU restrictive measures -- for example, Russia-related sanctions -- apply to Finnish CASP crypto-asset transfers has not been independently retrieved in this pass and remains an open research item rather than a resolved finding.

Outlook

The core EU-level travel-rule and third-country-solicitation framework governing Finland is clear and binding, but Finland-specific implementing and enforcement detail -- particularly around the EUR 1,000 threshold's precise scope and any sanctions-nexus guidance -- was only partially verified against primary Finnish sources this cycle. Retrieving the Finnish AML Act's text directly, rather than relying on secondary commentary, is the clearest route to resolving the remaining Uncertain-confidence items and restoring this module toward a fully Confirmed, green-rated position.