Buy-side PI acquisition · Finland
Buy a Payment Institution in Finland
A FIN-FSA-authorised payment institution sits inside the EU 27 with full PSD2 passporting, the euro-area domestic banking corridor, and a Nordic supervisory posture closer to Stockholm than to Vilnius. Cadena Brokers represents acquirers only. Every Finnish PI we surface has been pre-vetted on banking continuity, qualifying-holding history, and FIN-FSA supervisory file before it reaches your desk.
Why Finland
FIN-FSA discipline, EU 27 passporting, Nordic banking corridor
The Finnish supervisor is the Financial Supervisory Authority — Finanssivalvonta in Finnish, FIN-FSA in everyday usage. It operates from Helsinki, sits administratively under the Bank of Finland (Suomen Pankki), and runs supervisory decisions independently. FIN-FSA consolidates prudential and conduct supervision of banks, payment institutions, e-money institutions, investment firms, fund managers, and insurance undertakings under a single authority, with the Bank of Finland handling payment-systems oversight and monetary policy alongside it. That single-supervisor architecture keeps the qualifying-holding file, the AML inspection record, and the prudential supervision history in one place. Acquirers used to fragmented supervisory lines in some peer EU jurisdictions feel the difference inside the first iteration of comments. The supervisor reading the change-of-control notification has typically already worked the target’s prudential and conduct files.
The Finnish PI population is small in headcount and skewed toward digitally-native operators. FIN-FSA publishes its register of authorised payment institutions on its public website. Active charters cluster around three patterns: cross-border digital-payments operators with a Helsinki engineering hub passporting into the wider EU 27; domestic Finnish PIs that scaled inside the Finnish retail and SME corridor on merchant-acquiring, account-execution, or instalment-payment books (Paytrail, Holvi, and Maksuturva are the historically notable names); and English-language fintech operators that picked Helsinki for the Nordic market access and now run under FIN-FSA supervision. The banking cluster around the licensed entities is concentrated (Nordea Suomi, OP Pankki, Danske Bank Finland, S-Pankki, Aktia), with the wider euro-area infrastructure one passport notification away. Recent live-deal proof: the Paxos acquisition of Membrane Finance (a FIN-FSA-authorised EMI) closed in 2025, and the change-of-control file was the standard bottleneck.
Three reasons acquirers shortlist Finland. First, the cross-border reach is unambiguous: a FIN-FSA-authorised PI passports under PSD2 by notification to every EU 27 host competent authority, with cross-border services and the establishment of branches, agents, and distributors all available across the EEA. Second, operating-environment quality is high. Finland has been a euro-area member since 1999, runs a 20% headline corporate income tax, the supervisor speaks fluent English on regulatory correspondence, accepts EBA-aligned documentation conventions, and maintains a digital case-management discipline that a well-prepared acquirer can clear without much iteration. Third, the Nordic supervisory posture itself: FIN-FSA reads the file the way Finansinspektionen in Stockholm does, not the way the faster-onboarding Baltic supervisors do. That is a feature for acquirers whose post-close thesis depends on a clean substance file and a banking corridor that institutional counterparties recognise on sight.
What a Finnish PI authorisation permits
Scope, capital, and the obligations a buyer inherits
The activities FIN-FSA authorises follow PSD2 directly. Directive (EU) 2015/2366 was transposed into Finnish statute through two instruments running in parallel: the Act on Payment Services (Maksupalvelulaki, 290/2010), which carries the conduct-of-business and consumer-protection regime, and the Act on Payment Institutions (Laki maksulaitoksista, 297/2010), which carries the licensing, prudential, and supervisory regime. Both originally enacted to implement PSD1, recast on PSD2 transposition. The licence covers PSD2 Annex I services in full: account-information services, payment-transaction execution from a payment account (with or without credit line), payment-initiation services, money remittance, and the issuance of card-based payment instruments and acquiring of payment transactions. A Finnish PI cannot take deposits or issue electronic money; those activities sit under separate FIN-FSA authorisations — the credit-institution licence under the Act on Credit Institutions (Laki luottolaitostoiminnasta), and the e-money institution authorisation under the same Act on Payment Institutions at the EUR 350,000 minimum-capital tier.
Statutory minimum initial capital follows the PSD2 Article 7 schedule, transposed into the Act on Payment Institutions without national variation. EUR 20,000 covers only money-remittance activity. EUR 50,000 covers only payment-initiation services. EUR 125,000 covers the full account-based payment-services menu — and that is the threshold most acquirers are working against, because the post-close service mix almost always reaches into card acquiring, card issuing, or PSD2 Annex I (3) execution. Own funds are then maintained on a continuous basis under one of the three PSD2 calculation methods, with Method B (the volume-linked formula) the most common posture for active issuers and acquirers. FIN-FSA sizes the operating buffer to the post-acquisition business plan; credible cross-border passport ambition typically calls for an operating capital base above the statutory floor.
Customer payment funds are safeguarded under the Act on Payment Institutions: held in a segregated account at a credit institution authorised in the EEA and ring-fenced from the PI’s own resources, or covered by an insurance policy or comparable financial guarantee from an institution outside the same group. FIN-FSA’s supervisory expectations on AML and governance sit alongside the prudential test as a parallel gate, with the Finnish Anti-Money Laundering Act (444/2017) carrying the AMLD5 and AMLD6 transpositions. The institution must maintain real office space and staff in Finland, with the management body and the heads of compliance, AML, and risk on the payroll of the licensed entity rather than on a service-agreement basis from a foreign parent. ICT and operational-resilience requirements follow DORA (Regulation EU 2022/2554), which has applied to Finnish PIs since 17 January 2025; FIN-FSA has been running its first DORA inspections through 2025, so the ICT third-party register, the operational-resilience self-assessment, and the incident-reporting plumbing are now part of the live supervisory file.
What we broker here
The Finnish PI profiles in our book
Specific entities are not disclosed outside an executed NDA. The general profile of what reaches an acquirer’s brief from the Finnish shelf falls into three patterns. Cross-border digital-payments operators with a Helsinki hub: small-to-mid-cap PIs running remittance and account-execution books across the Nordic and Baltic corridor, with passport notifications already filed across multiple EU 27 host states and a small but solid Finnish compliance and AML team. Domestic Finnish operators that exited the founder cycle: PIs that scaled inside the Finnish retail and SME banking corridor on merchant-acquiring, account-execution, or instalment-payment books, where the founders are stepping back without unwinding the customer franchise. Niche-acquired charters: PIs held by groups that parked the charter alongside an EMI, a credit business, or a brokerage operation and are now consolidating away from payments to focus on a different vertical.
The diligence gates we work through with every Finnish file are four. Banking continuity: which Finnish or Nordic credit institution holds the safeguarded balances (Nordea, OP, Danske Bank Finland, and S-Pankki are the recurring counterparties, with onboarding posture varying by acquirer profile and the post-close service mix), what the timeline looks like for re-papering on change-of-control, and whether SEPA participation, card-scheme memberships, and any acquiring sponsorship survive the new controlling group. AML programme integrity: FIN-FSA’s expectations on transaction monitoring, sanctions screening cadence, MLRO seniority, and the most recent on-site or off-site supervisory letter, with any open recommendations the acquirer would inherit treated as a deal item rather than a footnote. Substance test in Finland: real headcount in country, real office, the management-body and four-eyes expectations, and the local compliance and AML officers staying through closing or replaceable on a pre-agreed timetable. IT and DORA readiness: the ICT third-party register, the operational-resilience self-assessment, and the incident-reporting plumbing FIN-FSA has been examining since 17 January 2025.
One contrarian observation worth airing early. Acquirers often assume Finland sits in the same comparison set as Lithuania because both transpose PSD2 and both sit inside the euro area. They don’t. The Bank of Lithuania has been running a fast-onboarding posture on payment-services authorisations for almost a decade, and the resulting Lithuanian PI population is large, varied, and bank-onboarded across multiple counterparties. FIN-FSA reads files closer to how Finansinspektionen in Stockholm reads them: selective, slower at the completeness gate, with a tighter substance-and-management test at change-of-control. For an acquirer whose post-close thesis depends on a Nordic banking corridor and a clean supervisory file, the Finnish profile is structurally the better fit. For an acquirer who needs cohort breadth and banking optionality across multiple counterparties from day one, the right comparison set is Lithuania, not Finland. Sweden and Estonia are the Nordic peers that share Finland’s posture.
Acquisition path
Change-of-control under FIN-FSA’s qualifying-holdings regime
Acquisition runs through a share purchase of the Finnish entity holding the FIN-FSA authorisation, with prior FIN-FSA approval under the qualifying-holdings regime transposed from PSD2 Article 6 into the Act on Payment Institutions. The notification thresholds are the standard EU set: 10%, 20%, 30%, and 50%, plus any move that hands the buyer control of the licensed entity. The fit-and-proper assessment covers beneficial owners, the proposed members of the management body and audit committee, group structure transparency, the source and provenance of funds, and the strategic plan for the PI post-acquisition. FIN-FSA consults the home supervisor of any EU-regulated acquirer through the EBA’s standing colleges and bilateral channels, and works with the Finnish Financial Intelligence Unit (Rahanpesun selvittelykeskus, housed at the National Bureau of Investigation) where the acquirer profile triggers a direct AML-side review.
The assessment clock under the EBA/ESMA/EIOPA Joint Guidelines on Prudential Assessment of Acquisitions runs sixty working days from a complete file, extendable by thirty working days where the supervisor seeks supplementary information. The bottleneck for unprepared acquirers is the completeness gate, not the substantive review. Acquirers who arrive with a coherent group-structure chart, audited accounts, source-of-funds dossier, and a board-ready strategic plan typically clear the file without iteration. See the four-step acquisition process on the homepage for the standing checklist that runs in parallel with target negotiations.
Why Cadena
Buy-side only, transactional, fast
The mandate is buy-side only. We work for the acquirer. FIN-FSA notices when the same broker name turns up on both sides of a transaction, and the qualifying-holding file lands cleaner when the buyer arrives with independent representation. We do not run listing brokerage, we do not split fees with sellers, and we do not present targets whose seller is paying a placement bonus.
Engagement is transactional. We take the acquirer’s brief, map it to a small shortlist of pre-vetted Finnish profiles, run side-by-side regulatory and banking diligence, then file the qualifying-holding notification with FIN-FSA while target negotiations close in parallel. Each Finnish PI we present has a live, named safeguarding-bank relationship that has been personally confirmed. Our diligence checklist is mapped to the Act on Payment Institutions, the Act on Payment Services, the Finnish AML Act, the EBA Guidelines on authorisation information, and the DORA implementation expectations FIN-FSA has been issuing through 2024 and 2025. If the acquisition thesis depends on a particular service mix — card acquiring, payment initiation, cross-border remittance — we can tell you in the first meeting which targets in the Finnish book are board-ready for it and which need a service-scope amendment first.
FAQ
Finland PI: questions buyers ask us
Can I buy a Finnish payment institution licence directly, or must I apply for a new one?
Yes. Change-of-control on a FIN-FSA-authorised Finnish PI is the standard buy-side route, and it is materially faster than a fresh application. The transaction is structured as a share purchase of the Finnish entity holding the authorisation, with prior FIN-FSA approval under the qualifying-holdings regime transposed from PSD2 Article 6 into the Act on Payment Institutions. The mechanics: NDA, profile review, term sheet, regulatory and banking diligence, an SPA conditional on FIN-FSA non-objection, then filing of the qualifying-holding notification. Closing is conditional on supervisory clearance. Cadena Brokers does not list targets publicly and does not represent sellers; the entity opens up under NDA after the initial fit conversation.
What is the difference between a Finnish PI and a registered payment service provider under the volume threshold?
Both are recognised by FIN-FSA under the Act on Payment Institutions. A full Payment Institution carries the complete PSD2 Annex I service menu (account services, payment-initiation services, card acquiring, card issuing, money remittance, and account-information services), with EU-wide passporting on a notification basis. A registered payment service provider operates only domestically in Finland under a transaction-volume cap (the small-PI exemption pathway in the Act on Payment Institutions), cannot passport into the rest of the EU, and is subject to lighter prudential supervision. Statutory minimum initial capital differs accordingly. For an acquirer whose post-close thesis touches cross-border flows or any service mix beyond money remittance, only the full PI fits.
How does FIN-FSA change-of-control approval work?
A qualifying-holding notification filed under the regime transposed from PSD2 Article 6 into the Act on Payment Institutions. Thresholds are 10%, 20%, 30%, and 50%, plus any move that hands the buyer control of the licensed entity. FIN-FSA assesses fit-and-proper standing of beneficial owners and the proposed management body, financial soundness and source of funds, group structure transparency, the strategic plan for the PI post-acquisition, and AML/CFT integration. The assessment clock under the EBA/ESMA/EIOPA Joint Guidelines is sixty working days from a complete file, extendable by thirty working days where supplementary information is sought. FIN-FSA consults the home supervisor of any EU-regulated acquirer through the EBA channels and bilateral colleges, and works with the Finnish Financial Intelligence Unit on the AML-side review.
What is the statutory minimum capital for a Finnish PI?
The PSD2 Article 7 schedule, transposed into the Act on Payment Institutions without national variation. EUR 20,000 covers only money-remittance activity. EUR 50,000 covers only payment-initiation services. EUR 125,000 covers the full account-based payment-services menu, including card acquiring and card issuing. Most acquirers are working against the EUR 125,000 threshold because the post-close service mix typically reaches into card or account-execution services. Ongoing own funds are calculated on a continuous basis under one of the three PSD2 methods. FIN-FSA sizes the operating buffer to the business plan; credible cross-border passport ambition typically calls for an operating capital base above the statutory floor.
Do FIN-FSA-authorised PIs passport into the rest of the EU?
Yes. A FIN-FSA-authorised PI passports under PSD2 by notification through FIN-FSA to the host competent authority. Both cross-border services and the establishment of branches, agents, and distributors are available across the EU 27 and the wider EEA. Common host markets for Finnish PIs are Sweden, Estonia (the Helsinki-Tallinn corridor), Germany, the Netherlands, and the wider Nordic-and-Baltic region where euro settlement infrastructure carries operational weight. The passporting notification is administrative; it is not a second authorisation file in the host country. For acquirers whose post-close thesis is EU-wide or Nordic-regional reach, that single feature is the structural reason Finland sits in the comparison set with Sweden, Estonia, and Lithuania rather than with offshore alternatives.
What does FIN-FSA expect on substance and operating presence in Finland?
Real substance, not a brass-plate presence. The institution must maintain office space and employees in Finland, with the management body and the heads of compliance, AML, risk, and ICT on the payroll of the licensed entity rather than on outsourcing arrangements from a foreign parent. The four-eyes principle on management is enforced at authorisation and re-tested at change-of-control. We screen substance posture on every target before introduction; a thin substance file is the most common reason a peer-jurisdiction PI would clear change-of-control where a Finnish one would draw a follow-up. FIN-FSA’s Nordic-supervisor temperament reads outsourcing arrangements carefully, so a credible Finnish substance file generally requires the local management body to be Helsinki-resident in fact, not just on paper.
Next step
Open a buy-side mandate on Finnish PIs
Send a one-paragraph profile of the acquirer, the post-close service scope, banking-stack constraints if any, and any preference on substance footprint. We respond inside one business day with the matching set from the current Finnish book, plus the banking-stack readout and substance-posture score for each. Buy-side only: no listing brokerage, no double-ended deals.
Start the buy-side conversation Request the Finnish shortlist
