Every account of Finland's licensing regime says players must be identified before they play. Almost none of them says how, and the how is specific to Finland.
The requirement
Under the Gambling Act as described in published legal commentary, all gambling under a Finnish licence requires player registration and identification before play, with a minimum age of 18. There is no anonymous play, no play-first-verify-later, and no spending threshold below which identification is optional. Operators must also demonstrate anti-money laundering compliance as part of the licence application itself.
The Supervisory Agency can make test purchases, so the requirement is one it can check without waiting for a complaint. Letting an unidentified or underage player through is a substantive breach under the sanctions framework.
How identification works in Finland
Finland has a mature national infrastructure for strong electronic identification, and licensed operators will be expected to use it rather than document upload and selfie checks alone.
The system is the Finnish Trust Network. It was created under the EU eIDAS framework to replace the older TUPAS arrangement, under which every service provider had to negotiate a separate contract and integration with each Finnish bank. The Trust Network introduced a layer of identification brokers: intermediaries that hold a single standardised contract with the identity providers, which are the Finnish banks and mobile network operators, and resell that access to online services. A service integrates once with a broker and gains access to every Finnish bank ID and mobile ID.
In practice this means a Finnish player identifies to an operator using their online banking credentials or a mobile certificate, in the same way they identify to a government service or a pharmacy. The identification is strong in the regulatory sense, it returns a verified identity including the personal identity code, and it is instant.
What this means for an operator
Three practical consequences.
Onboarding is a Finnish integration, not a global one. Operators with a KYC stack built around document verification will need to add a Trust Network broker for Finland. Several international identity providers act as brokers, alongside Finnish ones.
Conversion behaves differently. Finnish players are used to bank identification and expect it. A flow that asks for a passport photo instead will look foreign and convert worse, not better.
The personal identity code returned by strong identification is what makes the national self-exclusion register workable across operators. It is the key that lets one register cover every licensed site, and it is why the register is feasible in Finland in a way it is not in markets without a universal identifier.
What this means for suppliers
Identity is a supplier category with a specific Finnish shape. Brokers in the Trust Network are the gatekeepers for every licensed operator's onboarding flow, which makes them a natural point of intelligence about who is preparing to launch. It also means a platform provider entering Finland needs a broker integration in its roadmap before its operator clients do.
Payments follow the same logic
Payment service providers face a more active compliance role under the reform. Payment blocking against unlicensed operators is an existing tool of the National Police Board and passes to the Agency, so PSPs are expected to process gambling payments only for licensed operators. Cryptocurrency is reported as not permitted. Expect payment methods to be limited to those that support identification and monitoring, and expect Finnish bank-based instant payment to be the default consumer expectation.
Status of this guide
The identification requirement comes from published legal commentary on the Act. The description of the Finnish Trust Network is drawn from public documentation of the national eID framework and is stable. Named identity brokers and payment providers are commercial parties and appear in our directory rather than as links here.
