Estonia’s financial regulator: the Financial Intelligence Unit of Estonia

As part of Estonia’s mission to become “the world’s most advanced digital society,” the government established the e-Estonia program. e-Estonia began in 1996 with the Tiger Leap Initiative, a roadmap to develop the country’s IT infrastructure. That approach led Estonia to pioneer a range of digital services, including:

• 1996: E-banking
• 2000: Online tax portal
• 2002: Digital ID and signatures
• 2007: Cybersecurity

Estonia’s e-Residency program, launched in 2014, has made the country a popular base for FinTech start-ups and financial institutions looking to expand into the EU. E-Residency lets people anywhere in the world apply for a government-issued digital ID that gives them access to Estonia’s business environment. Holders can use it to run an EU-registered company from wherever they are based, including opening a bank account and managing payments. In 2025, the program generated a record €124.9 million in direct revenue for the Estonian state, up 87% on the previous year, and e-residents established 5,556 new companies. Cumulatively, e-Residency has delivered close to €400 million in economic impact.

The government also runs an e-Residency Marketplace, a directory of vetted service providers covering company formation, business banking, accounting, tax, and legal support.

Estonia’s standing as a FinTech hub means its regulatory environment matters well beyond its borders, with implications for the crypto sector and other digital disruptors across Europe.

What is the FIU of Estonia?

The Financial Intelligence Unit (FIU) of Estonia is the country’s anti-money laundering and countering the financing of terrorism (AML/CFT) intelligence body. Established in 1999, it became an independent government agency in 2021, within the governance area of the Ministry of Finance.

The FIU’s core role is to receive and analyze reports of suspicious activity, submitted through its goAML system, and to forward material to law enforcement and prosecutors when it identifies signs of a criminal offense. Obliged entities across the financial sector must report suspicious or unusual transactions and any failure to comply with sanctions.

A separate authority, the Finantsinspektsioon (the Financial Supervision and Resolution Authority), supervises banks, insurers, investment firms, and payment providers, and manages crisis resolution. Since January 2025, it has also been Estonia’s licensing and supervisory authority for crypto-asset service providers under the EU’s Markets in Crypto-Assets Regulation (MiCA).

Anti-money laundering (AML) in Estonia

Alongside the EU’s AML framework, Estonia’s primary national law is the Money Laundering and Terrorist Financing Prevention Act (MLTFPA), passed in 2017. A 2020 amendment brought virtual currency service providers under the Act, giving them the same treatment as other financial institutions and requiring them to, among other things, appoint a compliance officer, pass a fit-and-proper test, and base their main operations in Estonia.

That amendment reshaped Estonia’s crypto sector: in 2020, authorities withdrew licenses from more than 1,000 firms after finding that many had used the e-Residency program to serve customers abroad while contributing little to the domestic economy.

The framework has since shifted again. Since December 30, 2024, the EU’s Markets in Crypto-Assets Regulation (MiCA) has applied directly across the bloc, replacing national virtual asset service provider (VASP) regimes with a single crypto-asset service provider (CASP) authorization. In Estonia, legacy FIU-issued VASP licenses remain valid only until July 1, 2026, with no automatic conversion. Firms must reapply to the Finantsinspektsioon for a MiCA CASP authorization. Minimum capital requirements now range from €50,000 to €150,000, depending on the services provided.

How to comply with AML regulations in Estonia

Compliance in Estonia now means preparing for the EU’s overhauled AML framework. The 2024 EU AML package introduces a single rulebook made up of the AML Regulation (AMLR, Regulation (EU) 2024/1624), the sixth AML Directive (AMLD6, Directive (EU) 2024/1640), and the regulation establishing the Anti-Money Laundering Authority (AMLA). Three points matter most for firms operating through Estonia:

• The AMLR and AMLD6 apply from July 10, 2027, harmonizing customer due diligence, beneficial ownership, and reporting rules directly across all member states.
• AMLA, operational in Frankfurt since July 1, 2025, sets technical standards and will directly supervise selected high-risk entities.
• All MiCA-authorized CASPs fall within the AML scope, closing gaps that previously applied to parts of the crypto sector.

Firms operating through Estonia will also want to review the MLTFPA, align their risk-based approach with Estonian requirements, and track how the country balances promoting e-Residency against concerns that foreign companies use it as a base without contributing to economic growth.