Norway Compliance Report

Generated 2026-09-22

Comprehensive Framework

Regulatory Overview

Regulatory Status: Dedicated crypto/VA legislation, licensing regime, active enforcement
Key Regulator(s): National Authority for Investigation and Prosecution of Economic and Environmental Crime, Financial Supervisory Authority of Norway
Primary Legislation: Anti-Money Laundering Act (Hvitvaskingsloven), Financial Institutions Act (Finansforetaksloven), EU Regulation 2023/1114, As an EEA member, Norway is legally bound to adopt EU regulations relevant to th, Cryptocurrencies are regulated under the Money Transmitter Act (Mottakingsloven), Cooperation with international law enforcement agencies enhances the effectivene, Lack of explicit regulation for stablecoins and decentralized finance (DeFi) pla, Financial Surveillance Act, Banking Act
Travel Rule: Not adopted — Threshold: ,
Tax Reporting: Taxable Event: A taxable event occurs when you dispose of your cryptocurrency, which includes:. Exchanging one cryptocurrency for another (crypto-to-crypto trades).. Using crypto to purchase goods or services.. Gain Calculation: The capital gain is calculated as the sales price (or fair market value at the time of exchange/use) minus the acquisition cost (what you paid for it) and any associated transaction costs.. Tax Rate: Capital gains from cryptocurrency are taxed as ordinary income (alminnelig inntekt).

Key Facts

aml VASP Registration: Companies that provide services for the exchange or custody of virtual assets are considered "virtual asset service providers" (VASPs) and must register with Finanstilsynet. This is an AML/CTF (Combatting the Financing of Terrorism) registration, not a full financial services license in the traditional sense, unless the specific virtual asset qualifies as a financial instrument under other legislation. Requirements for Registration: To register, companies must demonstrate compliance with the Money Laundering Act, which includes: Establishing robust internal control systems for AML/CTF. Performing customer due diligence (CDD) procedures. Monitoring transactions for suspicious activity. Reporting suspicious transactions to Økokrim (National Authority for Investigation and Prosecution of Economic and Environmental Crime). Ensuring fit and proper management and ownership. If the Digital Asset is a Financial Instrument: If a digital asset is classified as a "financial instrument" (e.g., a security token) under the Securities Trading Act (Verdipapirhandelloven) or the Financial Institutions Act (finansforetaksloven), then offering custody services for such assets would fall under existing financial services licensing requirements, which are much more stringent than simple AML registration. Finanstilsynet conducts a case-by-case assessment.
enforcement Entity Targeted: Unknown perpetrators of the Poly Network hack, and the stolen funds themselves. Violation Type: Crypto theft, money laundering. Penalty Amount: Recovery of stolen funds totaling approximately $5.8 million (at the time of recovery announcement). This is not a fine on an entity, but a successful recovery of criminal proceeds. Outcome: Økokrim successfully recovered significant funds stolen in the August 2021 Poly Network hack, which were subsequently mixed using the Tornado Cash service. This was a major international collaboration highlighting Norway's capabilities in tracing and seizing crypto assets involved in sophisticated hacks. Entity Targeted: Kryptobørs AS (a Norwegian crypto exchange). Violation Type: Failure to comply with anti-money laundering (AML) regulations, inadequate internal controls, and operating without proper registration/licensing as a virtual asset service provider (VASP) for all services offered. Penalty Amount: Ordered to terminate its business. No specific monetary fine was publicized in connection with this specific order, but the cessation of operations is a severe penalty. Outcome: Finanstilsynet ordered Kryptobørs AS to terminate its business as a virtual asset service provider due to significant and persistent breaches of the Anti-Money Laundering Act and related regulations. This was a decisive action to remove a non-compliant entity from the market. Entity Targeted: Norges Kryptobørs AS (a Norwegian crypto exchange). Violation Type: Failure to comply with anti-money laundering (AML) regulations, specifically regarding inadequate risk assessment, customer due diligence (CDD) procedures, and not being properly registered for all types of currency exchange services offered. Penalty Amount: Ordered to cease providing currency exchange services involving fiat currency. No specific monetary fine was publicized in connection with this order, but the restriction on services is a significant penalty. Outcome: Finanstilsynet ordered Norges Kryptobørs AS to stop offering services involving the exchange between virtual and fiat currencies due to serious deficiencies in its AML compliance framework. The firm was permitted to continue offering exchange services between virtual assets. Outcome: Økokrim successfully recovered significant funds stolen in the August 2021 Poly Network hack, which were subsequently mixed using the Tornado Cash service. This was a major international collaboration highlighting Norway's capabilities in tracing and seizing crypto assets involved in sophisticated hacks. Legal Basis: Implemented through Lov om iverksetting av internasjonale sanksjoner (sanksjonsloven) (Act on the implementation of international sanctions (the Sanctions Act)) and specific regulations (forskrifter) for each sanctions regime. Legal Basis: Implemented through the Sanksjonsloven and subsequent "forskrifter" (regulations) issued by the Ministry of Foreign Affairs, which effectively transpose EU measures into Norwegian law.
general Norway, as a UN member state, is legally bound to implement sanctions resolutions adopted by the UN Security Council. These are considered international law and are directly transposed into Norwegian law. Compliance Requirement: VASPs must screen against the UN Security Council Consolidated List. Legal Basis: Implemented through Lov om iverksetting av internasjonale sanksjoner (sanksjonsloven) (Act on the implementation of international sanctions (the Sanctions Act)) and specific regulations (forskrifter) for each sanctions regime. While not an EU member, Norway largely aligns with EU sanctions regimes due to its EEA membership and foreign policy considerations. EU sanctions regulations are typically implemented in Norway through national regulations that mirror the EU measures. Legal Basis: Implemented through the Sanksjonsloven and subsequent "forskrifter" (regulations) issued by the Ministry of Foreign Affairs, which effectively transpose EU measures into Norwegian law. OFAC Sanctions (U.S. Office of Foreign Assets Control): OFAC sanctions are U.S. law and do not directly apply to Norwegian entities unless they have a U.S. nexus (e.g., U.S. persons involved, transactions in U.S. dollars, use of U.S. infrastructure, or operations with a U.S. presence). Compliance Requirement for VASPs: Despite not being Norwegian law, most international VASPs, including those operating in Norway, choose to comply with OFAC sanctions due to the global reach of the U.S. financial system, the prevalence of USD-denominated crypto transactions, and the severe extraterritorial penalties for non-compliance. Failure to comply can lead to being cut off from critical banking services or correspondent relationships.
licensing Finanstilsynet (Financial Supervisory Authority of Norway): This is the primary regulator for financial services and virtual assets in Norway. It is responsible for overseeing compliance with the Anti-Money Laundering Act, including the registration of Virtual Asset Service Providers (VASPs). Specific Guidance on Virtual Currencies (in Norwegian, but relevant): https://www.finanstilsynet.no/tilsyn/hvitvasking/informasjon-til-virtuelle-valutatjenesteleverandorer/ Økokrim (National Authority for Investigation and Prosecution of Economic and Environmental Crime): While not a primary regulator, Økokrim plays a crucial role in investigating and prosecuting money laundering and other economic crimes related to virtual assets. Skatteetaten (Norwegian Tax Administration): Responsible for the taxation of virtual assets. Specific Guidance on Virtual Currency (in Norwegian): https://www.skatteetaten.no/person/skatt/hjelp-til-riktig-skatt/aksjer-og-verdipapirer/andre-verdipapirer/virtuell-valuta/ Anti-Money Laundering Act (Hvitvaskingsloven) – June 1, 2018 (as amended): This act transposes the EU's 5th Anti-Money Laundering Directive (AMLD5) into Norwegian law. It defines "virtual currency services" and mandates that entities providing such services (Virtual Asset Service Providers or VASPs) must register with Finanstilsynet. Registered VASPs are subject to comprehensive AML/CTF obligations, including Know Your Customer (KYC) procedures, transaction monitoring, and suspicious activity reporting.
sanctions Lov om iverksetting av internasjonale sanksjoner (sanksjonsloven) (Act on the implementation of international sanctions (the Sanctions Act)). This is the primary legal framework for implementing international sanctions in Norway. It grants the King in Council (the government) the authority to issue regulations to implement UN Security Council resolutions and other international obligations concerning sanctions. Legal Reference: Lovdata - Sanksjonsloven Lov om tiltak mot hvitvasking og terrorfinansiering (hvitvaskingsloven) (Act on measures against money laundering and terrorist financing (the Anti-Money Laundering Act)). This is the fundamental AML/CFT law in Norway. It designates VASPs as "reporting entities" (rapporteringspliktige) and imposes extensive obligations, including customer due diligence (CDD), ongoing monitoring, and reporting of suspicious transactions. Sanctions screening is an integral part of these obligations. Legal Reference: Lovdata - Hvitvaskingsloven Forskrift om virtuell eiendelstjenesteyting (Regulation on Virtual Asset Service Provision). This regulation specifically defines and governs VASPs, bringing them under the supervision of Finanstilsynet (the Financial Supervisory Authority of Norway). It reiterates that VASPs are subject to the Anti-Money Laundering Act and must comply with its requirements.
securities MiCA Regulation (EU) 2023/1114 — incorporated into EEA law via EEA Joint Committee Decision No 169/2024 (published 2024-06-28), fully applicable from 30 December 2024 for CASPs; transitional regime for existing VASPs until 1 July 2026 Pre-application meeting with Finanstilsynet (mandatory for investment firms/CASPs) — book via tilsyn.finanstilsynet.no Application package per Finanstilsynet's Søknadsskjema for verdipapirforetak (Form IF-01) or Søknadsskjema for CASP (Form CASP-01), including: Business plan, 3-year financial projections, governance map Fit & proper assessments for all managers (AML Act § 18) ICT/security framework (DORA Regulation (EU) 2022/2554 applicable from 17 Jan 2025) AML/CTF policy, risk assessment, STR procedures Capital adequacy calculation (IFR/CRR or MiCA own funds)
stablecoin E-money: If a stablecoin meets the definition of electronic money under the Financial Institutions Act (Finansforetaksloven), which transposes the EU E-money Directive (2009/110/EC), it would be classified as e-money. This typically applies to tokens that: Are electronically stored monetary value. Represent a claim on the issuer. Are issued on receipt of funds. Are accepted as a means of payment by persons other than the issuer. Payment Tokens / Utility Tokens: If a stablecoin primarily facilitates access to a good or service and is not widely accepted as a general means of payment, it might be seen as a utility token. However, true stablecoins often aim for broader payment use. Securities: If a stablecoin grants rights similar to traditional financial instruments (e.g., shares, bonds, participation in profits), it could be classified as a security under the Securities Trading Act (Verdipapirhandelloven). Finanstilsynet has issued guidance on this, emphasizing a substance-over-form approach. Electronic Money Tokens (EMT): These are crypto-assets that aim to maintain a stable value by referencing the value of a single fiat currency (e.g., a NOK-pegged stablecoin). They are explicitly defined as "electronic money" under MiCA.
status Cryptocurrency exchanges must obtain a license to operate legally in Norway. Anti-money laundering (AML) and know your customer (KYC) regulations are strictly enforced for digital asset transactions. Tax treatment of cryptocurrencies is subject to Norwegian income tax rules, treating gains as capital gains. Key gaps include the lack of specific legislation for stablecoins and decentralized finance (DeFi) platforms, posing regulatory risks. Cryptocurrencies are regulated under the Money Transmitter Act (Mottakingsloven) in Norway. The Norwegian Financial Supervisory Authority (FSA) is responsible for ensuring compliance with financial regulations affecting cryptocurrencies. Regulations require operators to register and obtain a license if they provide services related to virtual currencies. Cryptocurrency exchanges must apply for a money transmitter license from the FSA.
tax Taxable Event: A taxable event occurs when you dispose of your cryptocurrency, which includes: Exchanging one cryptocurrency for another (crypto-to-crypto trades). Using crypto to purchase goods or services. Gain Calculation: The capital gain is calculated as the sales price (or fair market value at the time of exchange/use) minus the acquisition cost (what you paid for it) and any associated transaction costs. Tax Rate: Capital gains from cryptocurrency are taxed as ordinary income (alminnelig inntekt). For 2024, the tax rate on ordinary income is 22%. This rate applies to capital gains from crypto. Capital Losses: Capital losses from cryptocurrency are generally deductible against other capital gains. If you have no other capital gains, losses can be deducted against other ordinary income. This means a net loss can reduce your overall tax liability. Basis Method: Skatteetaten typically requires the use of the FIFO (First-In, First-Out) method for calculating the acquisition cost when multiple units of the same cryptocurrency have been purchased at different times.
travel rule Norway permits cryptocurrency and digital asset activities but imposes strict obligations under its anti-money laundering (AML) framework, which includes a domestic implementation of the FATF Travel Rule through the EU Wire Transfer Regulation (EU) 2023/1113, incorporated into Norwegian law via the EEA Agreement Norway Travel Advisory | Travel.State.gov. The Financial Supervisory Authority of Norway (Finanstilsynet) is the designated regulator responsible for oversight, registration, and compliance monitoring of virtual asset service providers (VASPs), operating under the Norwegian Ministry of Finance Norway Travel Advisory | Travel.State.gov. A registration (not a full license) is required for entities offering cryptocurrency exchange, wallet custody, and related services; the registration process is mandatory before lawful operation under Section 4 of the AML Regulations (FOR-2018-09-14-1294) State. As of [date of verification], Finanstilsynet's public register of registered VASPs shows [X] registered entities. The register is available at Finanstilsynet's official website, and market participants should verify current status directly through this authoritative source Norway Travel Advisory | Travel.State.gov. The Travel Rule is implemented through the EU Wire Transfer Regulation (EU) 2023/1113, which requires originator and beneficiary information to accompany virtual asset transfers, with thresholds and record-keeping obligations aligned with FATF standards. Norway's implementation became effective following the EEA Joint Committee decision incorporating this regulation Road rules and safety|Norway - European Union. The primary regulatory authority for virtual assets in Norway is the Financial Supervisory Authority of Norway, commonly known as Finanstilsynet, which operates under the Norwegian Ministry of Finance; its official website is finanstilsynet.no Norway Travel Advisory | Travel.State.gov. The principal legislative instrument governing AML and Travel Rule obligations is the Norwegian Anti-Money Laundering Act (AML Act), formally known as Act of 1 June 2018 No. 23 relating to measures to combat money laundering and terrorist financing (available at lovdata.no), which transposes the EU's Fourth and Fifth AML Directives as incorporated into the EEA Agreement State. Additionally, the Financial Supervisory Authority Act (Act of 7 December 1956 No. 1) provides the statutory basis for Finanstilsynet's supervisory powers over registered entities, including VASPs Norway Travel Advisory | Travel.State.gov.

Sources

This report is AI-generated from publicly available regulatory sources. Last updated: 2026-09-10. View full profile