Finland's licensed market opens on 1 July 2027. The EU Anti-Money Laundering Regulation starts to apply on 10 July 2027.

Nine days. A Finnish licensee will go live under national anti-money laundering law, operate under it for a week and a half, and then find a directly applicable European regulation sitting on top of the same obligations.

That is not a problem in itself. It is a problem if the compliance build for launch is scoped against the rules as they stand today, because those are not the rules the operation will be running under by the end of its second week.

What Denmark just did

The Danish parliament adopted amendments to its Anti-Money Laundering Act on 3 September. They came into force on 15 September, and they are aimed at bringing Denmark closer to the Financial Action Task Force's recommendations.

For a gambling operator, three things changed.

Proliferation financing becomes its own risk assessment. Not a line in an existing document. A separate assessment, with written policies, procedures and controls behind it.

Financial sanctions get the same treatment. Sanctions against jurisdictions, persons and companies now require their own documented controls rather than being handled inside general customer due diligence.

An independent audit function is required over the operator's policies, procedures and controls. This is the one with organisational consequences. It is not a bigger compliance team; it is a function that has to be able to audit the compliance team.

Why a Finnish operator should read Danish law

Because Denmark is doing early what the European framework is heading towards, and because Finland's own supervisor will be new.

The Finnish Supervisory Agency takes over licensing and supervision on 1 July 2027. It will begin with no enforcement history of its own, in a market with around fifty licensees, at the same moment a European regulation lands. New supervisors in that position tend to look at what comparable authorities are already doing, and Denmark is the closest comparable authority with thirteen years of licensed-market experience.

What Denmark enforces now is a reasonable forecast of what Finland asks about in 2028.

The enforcement is landing on payments first

This is the part worth acting on.

In August the Danish authority restricted Inpay, a Danish payments company, from taking on any new gambling clients. The decision followed an inspection in March 2026 that found serious deficiencies in the firm's anti-money laundering work, and it stands until the company can demonstrate it has fixed them. Inpay's own iGaming materials have listed several large operators as clients.

Separately, the Danish authority issued three orders against an operator in April 2026 over risk assessment, performance of controls, and inadequate customer screening.

The pattern in both cases is that the supervisor went after the documentation and the controls rather than any proven laundering. An operator does not need to have been used for money laundering to be found non-compliant. It needs to be unable to evidence that it could have detected it.

What this means for a Finnish launch plan

  • Scope the AML build against July 2027 and beyond, not against the Act as it reads now. The national law tells you on what terms you may offer gambling. The European regulation will tell you how the money is policed.
  • Check whether your payment providers are under restriction anywhere. A provider that cannot take new gambling clients in Denmark is a provider with a supervisory finding on file, and Finnish suitability assessment covers the people and companies around an applicant.
  • Budget for an independent audit function, not just a compliance hire. If Finland follows the Danish direction, the requirement is structural and cannot be met by adding headcount to the team being audited.
  • Assume sanctions and proliferation financing become separate documented controls. They are cheap to build now and expensive to retrofit under supervision.

The Finnish layer nobody has described yet

Finnish licensees will identify players through bank identification rather than document upload, which produces a stronger identity record at onboarding than most European markets have. Deposit limits are set by the player and a company-level transfer limit applies. Account transactions must be available for a year.

That combination is unusually favourable for anti-money laundering work: verified identity, capped flows, and a retained transaction history. The obligations arriving in 2027 are demanding, but the Finnish system hands operators better raw material to meet them than most of the markets they already run.

Whether the supervisor sees it that way, and what it will expect operators to do with that material, has not been published.

What we do not know

  • Whether Finland will introduce its own gambling-specific anti-money laundering guidance before the market opens.
  • How the Finnish Supervisory Agency will divide anti-money laundering supervision with other Finnish authorities.
  • Whether an independent audit function will be required of Finnish licensees.
  • What transitional arrangements, if any, apply in the nine days between the market opening and the European regulation taking effect.

We will update this article as guidance is published.