Integrated supervisor
Finanstilsynet for banking and finance, payments, insurance and pensions, securities, funds, CASPs and specified professional registrations.
Jurisdiction dossier
Norway financial permissions and regulator dossier
Finanstilsynet, the Financial Supervisory Authority of Norway, licenses and supervises banks, mortgage and finance companies, payment and e-money institutions, insurers, pension undertakings, investment firms, fund managers, market infrastructure, debt collection and other financial professions. Norway implemented MiCA through the Crypto-Assets Act from 1 July 2025, and its legacy exchange and custody transition ended on 30 June 2026. Norway is in the EEA, so harmonised permissions use the relevant notification mechanism even though Norway is not an EU member. This dossier maps the position as of July 2026.
Route facts
Norway regulatory map
EEA status
Harmonised Norwegian permissions use their EEA cross-border notification procedure; domestic permissions and AML statuses do not.
Finance-company layer
Mortgage and finance companies cover regulated credit models separate from banks, PI and EMI.
Company-service status
Trust and company service providers require authorisation under AML Act section 42, but that status is not prudential financial licensing.
Crypto transition
Legacy virtual-currency exchange and custody providers needed MiCA status after 30 June 2026 or an orderly wind-down.
Review date
Last reviewed against official Finanstilsynet and Norwegian authority material on 11 July 2026.
Read the status first
EEA harmonisation sits inside Norwegian law
Norway implements much of the EU financial-services rulebook through the EEA Agreement and Norwegian statutes. A Norwegian PI, EMI, investment firm, manager, insurer or CASP can use the cross-border procedure available under its harmonised law, but only for the services printed on the home permission. A limited payment authorisation, AML company- service status, debt-collection licence or statutory exclusion cannot use that route. Norway's own licensing decision and Finanstilsynet register remain the starting points.
Crypto status now follows MiCA. Before implementation, providers of exchange between virtual currency and official currency and wallet-custody services used a Norwegian AML register. The Crypto-Assets Act allowed a transition through 30 June 2026. Finanstilsynet and ESMA then expected providers without Article 63 authorisation or an eligible Article 60 notification to stop onboarding and wind down. An old register entry, pending CASP file or Norwegian company registration is not authority to continue regulated crypto-asset services after that date.
Permission matrix
Norway licence, authorisation and registration families
| Permission family | Regulator and instrument | Activities and exclusions | Entry and capital basis |
|---|---|---|---|
| Permission family Commercial and savings banks | Regulator and instrument Norwegian banking licence under the Financial Institutions Act with Finanstilsynet review and supervision | Activities and exclusions Accept deposits, grant loans and provide the banking or investment services allowed by the licence; no finance-company, PI or EMI status independently permits deposits | Entry and capital basis Norwegian legal form and head office, qualifying holders, fit-and-proper management, governance and CRR capital, liquidity, recovery and risk evidence |
| Permission family Mortgage and finance company | Regulator and instrument Finanstilsynet licence under the Financial Institutions Act | Activities and exclusions Mortgage lending, consumer or commercial finance, leasing, factoring, guarantees, card or other finance within the category; public deposits remain reserved | Entry and capital basis Owners, management, Norwegian substance, funding, credit governance, responsible lending, prudential capital, liquidity, AML/CFT and reporting depend on type |
| Permission family Payment institution | Regulator and instrument Finanstilsynet licence under the Financial Institutions Act and PSD2 implementation | Activities and exclusions Approved account, execution, card, acquiring, remittance, initiation or information services; no e-money issuance or deposits merely from PI status | Entry and capital basis Initial and ongoing own funds vary with services and volume; safeguarding, governance, security, AML/CFT, agent, outsourcing and incident arrangements |
| Permission family Limited payment provider and AISP | Regulator and instrument Finanstilsynet limited authorisation, registration or notification under the payments framework | Activities and exclusions Limited-scale payment or account-information activity within statutory conditions; no full PI service set or unrestricted EEA reach follows from limited status | Entry and capital basis Volume and territorial limits, professional cover where applicable, suitable management, security and reporting replace parts of the full PI route |
| Permission family Electronic money institution | Regulator and instrument Finanstilsynet licence under the Financial Institutions Act and e-money rules | Activities and exclusions Issue and redeem e-money and provide approved payment services; safeguarded funds are not deposits and the licence scope controls EEA notifications | Entry and capital basis Norwegian head office, EMD initial capital, ongoing own funds, safeguarding, redemption, governance, distributor and agent oversight |
| Permission family Foreign exchange and money transmission | Regulator and instrument Finance-company or PI licence, or other applicable Finanstilsynet status, according to the exact service | Activities and exclusions Physical currency exchange, money remittance or other value transfer only within the granted category; no investment, e-money or deposit permission automatically follows | Entry and capital basis Funding, transaction systems, customer-funds controls, financial resources, governance and AML/CFT are assessed under the actual institution type |
| Permission family Investment firm and trading venue | Regulator and instrument Finanstilsynet licence under the Securities Trading Act and MiFID II implementation | Activities and exclusions Reception and transmission, execution, dealing, portfolio management, advice, underwriting, placement, custody and MTF or OTF operation only where granted | Entry and capital basis Norwegian head office, qualifying holders, fit-and-proper board and managers, prudential class, client assets, market conduct and compensation arrangements |
| Permission family UCITS manager and AIFM | Regulator and instrument Finanstilsynet authorisation or registration under the Securities Funds Act and AIF Act | Activities and exclusions Manage mutual funds or AIFs and perform permitted ancillary services; registered AIFM status is not full authorisation and has narrower marketing options | Entry and capital basis Full or registered status sets own funds, substance, risk, valuation, depositary, delegation, leverage, reporting and investor rules |
| Permission family Funds, depositaries and nominee services | Regulator and instrument Finanstilsynet product, marketing or nominee approval under securities-fund and central-securities law | Activities and exclusions Establish or market the applicable fund, act as eligible depositary, or hold approved nominee registration; product and functionary statuses remain separate | Entry and capital basis Fund rules, manager, depositary, prospectus, valuation, investment limits, custody and reporting apply; nominee applicants meet record and legal-rights requirements |
| Permission family Insurance and reinsurance | Regulator and instrument Finanstilsynet authorisation under the Financial Institutions Act and Solvency II implementation | Activities and exclusions Underwrite approved life, non-life or reinsurance classes; insurance mediation does not permit the intermediary to assume underwriting risk | Entry and capital basis Norwegian head office, qualifying holders, fit-and-proper board and key functions, governance, technical provisions, minimum and solvency capital |
| Permission family Insurance intermediary | Regulator and instrument Finanstilsynet registration or authorisation under insurance-distribution law | Activities and exclusions Advise, arrange or distribute insurance within the registered role and mandates; no banking, payment, investment or underwriting authority follows | Entry and capital basis Professional knowledge, good repute, professional indemnity, client-money, organisation, conduct and continuing competence depend on intermediary type |
| Permission family Pension undertaking and pension fund | Regulator and instrument Finanstilsynet licence or supervision under Norwegian pension and financial-institution law | Activities and exclusions Operate the occupational or other pension arrangement within its statutory scope; pension status is not an insurer, investment firm or bank licence | Entry and capital basis Governance, fit-and-proper key functions, capital or funding, actuarial and risk systems, investments, sponsor arrangements, member information and reporting |
| Permission family Credit intermediary and debt collection | Regulator and instrument Finanstilsynet registration or licence under credit-intermediation and debt-collection law | Activities and exclusions Intermediate loans or collect debt within the approved status; no balance-sheet lending, deposits, payments or investment services follow | Entry and capital basis Suitability, professional organisation, lender relationships, consumer information, complaints, client-money where relevant and conduct requirements |
| Permission family Crowdfunding service provider | Regulator and instrument Finanstilsynet authorisation under the Norwegian implementation of Regulation (EU) 2020/1503 | Activities and exclusions Operate an investment- or lending-based platform within the ECSPR perimeter; no deposit taking, unrestricted own-account lending or market operation follows | Entry and capital basis Prudential safeguards, governance, conflicts, investor protection, credit assessment where used, default handling, complaints and continuity |
| Permission family Crypto-asset service provider | Regulator and instrument Finanstilsynet Article 63 MiCA authorisation or Article 60 notification under the Crypto-Assets Act | Activities and exclusions Approved custody, platform, exchange, execution, placing, order, advice, portfolio-management or transfer services; legacy AML VASP registration is no current substitute | Entry and capital basis EEA establishment and effective management, suitable owners and managers, MiCA safeguards, custody, complaints, conduct, ICT, conflicts and AML/CFT |
| Permission family Trust and company service provider | Regulator and instrument Finanstilsynet authorisation under Anti-Money Laundering Act section 42 | Activities and exclusions Form companies or provide the company and trust services listed in AML law; authorisation creates fitness and AML supervision, not banking, investment, custody or payment permission | Entry and capital basis Entity Register entry, suitable managers, board and beneficial owners, business risk assessment, AML procedures, customer due diligence, monitoring and reporting |
| Permission family Gambling and lotteries | Regulator and instrument Norwegian Gambling and Foundation Authority permission under separate gambling law and the exclusive-rights model | Activities and exclusions Operate only activity permitted by the national monopoly, licence, permit or exemption; there is no general offshore-style online casino licence and no financial permission follows | Entry and capital basis Eligibility, public-interest basis, game controls, player protection, technical arrangements, financial security and AML duties depend on the separate route |
Entry test
Norwegian substance, suitability and financial resources
Applicants use the legal form and Norwegian registered office and head office required by their statute. Finanstilsynet assesses direct and indirect qualifying holders, source of funds, directors, senior managers and key functions for fitness and propriety. The governance map identifies compliance, MLRO, risk, finance, internal audit, security and responsibility for agents, distributors, delegates and outsourcing. An EEA-facing licence still requires the Norwegian management, records and control environment stated in the home law.
Financial resources follow the route: CRR for banks, prudential rules for mortgage and finance companies, PSD2 and e-money calculations, investment-firm prudential classes, manager own funds, Solvency II, pension funding, crowdfunding and MiCA safeguards. Client funds, financial instruments, fund assets and crypto-assets have separate safeguarding or custody rules. Finanstilsynet's current fee regulations and route guidance control application charges and published decision periods. A single NOK or EUR minimum cannot describe all categories.
Application path
A Norway authorisation, stage by stage
-
Classify every institution and service
Map deposits, finance, payments, e-money, investment, funds, insurance, pensions, crypto, company services and gambling to the exact licence, limited authorisation, registration or exemption.
-
Use Finanstilsynet licensing guidance
Confirm legal form, Norwegian substance, owners, managers, prudential method, forms, Altinn channel and any pre-application discussion for the sector.
-
Build the Norwegian operating file
Prepare programme, forecasts, ownership and suitability, governance, AML/CFT, safeguarding or client assets, outsourcing, DORA and ICT, complaints, continuity and wind-down.
-
Complete substantive review
Answer completeness and technical questions and interviews. Limited, nominee, product and Article 60 statuses must be sequenced separately where relevant.
-
Satisfy conditions and notify EEA activity
Complete capital, appointments, systems, reporting and register publication. Cross-border services start only after the applicable notification procedure.
After authorisation
Ongoing supervision and change in control
Norwegian institutions maintain capital or solvency, governance, AML/CFT, audit, regulatory returns, safeguarding or client assets, complaints, product and conduct duties, outsourcing, incident reporting and DORA resilience. Funds, insurers and pensions maintain product, valuation, custody, funding and reporting duties. Company-service providers maintain fitness, risk assessment, due diligence and reporting. New services, branches, agents, critical outsourcing or token functions can require approval, variation or notification.
A buyer acquires shares in the supervised company; the permission does not detach. Proposed qualifying holdings and control changes follow Finanstilsynet's ownership-control procedure for the institution. Diligence should reconcile the current register, exact grant, capital headroom, client assets, EEA notifications, complaints, inspections, enforcement, outsourcing and remediation. Legacy VASP status expired with the transition and cannot be valued as MiCA permission. Finanstilsynet decides on suitability, and no adviser can guarantee approval.
Territorial reach
Norway is an EEA home state, not an EU member
Harmonised Norwegian banks, PI, EMI, investment firms, managers, insurers and CASPs can use the relevant EEA notification procedure for services on their home grant. Norway's EEA status does not create rights outside that legislation. Limited payment status, credit or debt- collection permissions, company-service authorisation, nominee approval and gambling permits do not passport. Host-state consumer, conduct, distribution and general-good rules remain relevant. Non-EEA business requires separate target-market analysis.
Verify it yourself
Primary Norway sources
-
Finanstilsynet licensing catalogue
finanstilsynet.no publishes licensing pages for banking and finance, investment firms, fund managers, nominee registration and other supervised activities.
-
Finanstilsynet registry
The official registry lists current Norwegian and cross-border permissions, including PI, EMI, finance companies, investment firms, CASPs and company-service providers.
-
Payments and financial-institutions material
Official laws, regulations and reports distinguish banks, mortgage and finance companies, full and limited PI, EMI, AISP and excluded payment arrangements.
-
Crypto-Assets Act and MiCA notices
Finanstilsynet records MiCA's 1 July 2025 Norwegian entry and the end of the legacy VASP transition on 30 June 2026.
-
Gambling Authority sources
lotteritilsynet.no publishes the exclusive-rights model, permits, enforcement and operator information outside Finanstilsynet's financial perimeter.
01 Does a Norwegian financial licence work across the EU?
A harmonised permission can use its EEA notification mechanism because Norway is in the EEA. Only the services on the home grant travel, and the notification and host rules must be completed. Domestic permissions and AML authorisations do not use that mechanism.
02 Is legacy Norwegian VASP registration still sufficient?
No. The transition ended on 30 June 2026. Current crypto-asset services require MiCA authorisation or an eligible Article 60 notification shown in the Finanstilsynet or ESMA register.
03 Is company-service authorisation a fiduciary financial licence?
It is an authorisation under AML Act section 42 with suitability and AML requirements. It does not permit investment management, custody, payments, lending or deposit taking, each of which has its own financial perimeter.
04 Can Norway license a private online casino?
Norway operates an exclusive-rights gambling model, not a general commercial online casino licensing market. Any limited permit or exemption must be checked with the Norwegian Gambling and Foundation Authority and gives no financial permission.
05 Can an authorised Norwegian company be acquired?
Shares may be acquired subject to ownership-control rules. The licence stays with the company, incoming holders and funding are assessed, and the exact grant, EEA notifications and supervisory history require diligence.
Reviewed by the SKY7 advisory team. Last reviewed: 11 July 2026. This dossier is general information, not legal, regulatory, tax, investment or financial advice. It describes the Norway framework as of July 2026. Verify current Finanstilsynet laws, licence pages, registry, fee regulations, EEA notifications and Gambling Authority rules before relying on a route. No regulator outcome is promised.
Tell us what you need
Build the Norway permission map first
Send the services, products, customers, flow of funds, custody model, EEA markets and ownership chain. SKY7 will identify Finanstilsynet permissions, restricted statuses and evidence gaps before a filing or acquisition decision. Fees are on request.