Estonia's FIU Regulatory License Inquiry Process | How to Verify Virtual Asset and Forex Platform Compliance with the Financial Intelligence Unit

1. What is FIU? Regulatory Background and Status

The Estonian Financial Intelligence Unit (FIU) is an independent regulatory body under the Estonian National Police and Border Guard. Its main responsibilities are:

• Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) supervision ;

• Virtual Asset Service Provider (VASP) registration and supervision ;

• Financial compliance enforcement and penalties .

📌 History

• 2017 : Estonia was the first country in Europe to introduce a virtual currency licensing system , registering and managing cryptocurrency exchanges and wallet custodians.

• 2019 : The number of licenses surged, with more than 1,300 companies obtaining VASP licenses in a short period of time. Estonia once became a "safe haven" for global crypto compliance.

• 2020–2021 : Due to the large number of companies posing “shell” (registered but not operational) and AML risks, the FIU began to tighten standards.

• New regulations in 2022 : Increase capital requirements to more than 250,000 euros , and require a real office location and substantial management in Estonia.

• 2023–2024 : FIU undergoes a large-scale cleanup, leaving fewer than 200 licensed VASPs , with an elimination rate of 85%+.

👉 This means:

• The days of “easy registration for an Estonian crypto license” are over;

• Companies that can now be found to have an “Active status” are generally more compliant.

II. Scope of FIU Supervision

1. Virtual Asset Service Providers (VASPs)

• Cryptocurrency exchange : provides virtual currency exchange services for legal tender/other virtual currencies;

• Wallet custodian : provides virtual currency wallet custody and key storage services;

• Crypto payment/settlement services .

2. Related financial companies

• Some foreign exchange/CFD platforms, if they involve virtual asset services, also need to register with the FIU;

• Anti-money laundering obligations apply to a wide range of sectors, including financial advisors, payment institutions, etc.

3. Why do you need to check the FIU license?

1. Confirm compliance

• Legitimate VASPs must appear on the FIU public registry.

• Operating without registration → High risk, may involve money laundering.

2. Avoid false advertising

• Many overseas forex/crypto platforms falsely claim to have "Estonian licenses", but in fact they have been revoked in the 2022 cleanup.

3. Distinguishing between “company registration” and “regulated”

• Simply having a company number in the Estonian e-Business Register does not mean you are licensed.

• Must be verified on the FIU registration form.

4. Investor Protection

• The FIU publishes penalty and revocation announcements to help investors identify risky platforms.

📌 Official website:

• 🔗 FIU Official Website

• 🔗 Estonian e-Business Register

IV. Evolution of the Licensing System and Data

• 2017–2019 : The number of licenses issued surged to over 1,300 ;

• 2020–2021 : FIU launched an AML review and revoked the licenses of 500+ non-compliant VASPs;

• 2022 New Regulations Implementation :

• Registered capital: ≥ 250,000 Euros;

• local physical office;

• Executives must reside in Estonia or hold a permanent position;

• Strict AML/KYC reporting system.

• 2023–2024 : There are currently fewer than 200 registered VASPs, and the compliance threshold is approaching that of traditional financial institutions.

👉 The shift from “loose entry and strict management” in supervision has gradually made FIU on par with Lithuania’s LB and Cyprus’ CySEC in European crypto regulation.

5. FIU License Inquiry Process (Step-by-Step)

Step 1: Go to the FIU official website

👉 FIU Register

Step 2: Search for company information

• Enter the company's full name or registration number;

• The system displays whether the company holds a VASP license.

Step 3: Confirm license status

• Active / Authorised → Compliant;

• Revoked → revoked and not allowed to operate;

• Suspended → Suspended, the risk is extremely high.

Step 4: View business categories

• Exchange Service;

• Wallet Service (wallet custody);

• Payment/Settlement Service.

Step 5: Cross-verify business registration

👉 Estonian e-Business Register

• Confirm the company's legal name, registered address, and director information;

• If there is only a record in the Commercial Registry but the FIU does not have authorization → it does not meet the compliance requirements.

Step 6: Check the penalty notice

• The FIU regularly updates its list of suspended or non-compliant companies;

• If the company has been named → high risk, it is recommended to avoid it.

6. Practical Cases

✅ Compliance Examples

• Company Name : Kriptomat OÜ

• Category : VASP (Exchange + Wallet)

• Status : Active

• Result : Compliant✅

❌ Risk Examples

• Company Name : An overseas CFD platform

• Promotion : "Holding an Estonian license plate"

• Query results : This company is not listed in the FIU registry;

• Result : False advertising → High risk ❌

VII. Typical Penalty Cases

• 2020 : The FIU revoked the licenses of more than 500 VASPs at one time, citing “shell operations and failure to comply with AML/KYC” as the reasons.

• 2022 : A crypto company was forced to liquidate due to insufficient capital;

• 2023 : The FIU warned dozens of foreign platforms against abusing the "Estonian license" for external publicity.

8. Investor Protection Mechanism

1. Public registry : transparent access to all licensed companies;

2. AML reporting system : Licensed companies must submit anti-money laundering reports;

3. Penalty announcement : Regularly publish a list of violating companies;

4. Cross-border cooperation : The FIU cooperates with FATF, ESMA and EBA to prevent cross-border money laundering.

IX. Connection between FIU and EU MiCA

• MiCA (Markets in Crypto-Assets Regulation) will come into full effect in 2024–2025;

• FIU’s current VASP registration requirements are already highly aligned with MiCA’s framework;

• In the future, VASPs registered with the FIU will obtain EU passport rights and can operate legally throughout Europe.

👉 If investors want to judge the long-term compliance of the platform, they should give priority to Active VASPs that meet MiCA requirements .

10. Common Misconceptions

1. Mistakenly believing that “company registration” = regulated ❌;

2. Only looked at the license plate number advertised on the official website , and did not verify it on the FIU official website❌;

3. Mistakenly taking an expired license plate as valid❌ ;

4. Ignore penalty announcements and miss important risk signals.

11. Investor Recommendations

• You must check the FIU Register + Commercial Registry before investing;

• Confirm that the company name, registration number, and license status are consistent;

• All companies that appear on the penalty list will be avoided;

• Priority will be given to companies that are “Active + meet capital requirements + have local physical offices”.

12. Conclusion

The Estonian FIU is a pioneer in virtual asset regulation in Europe . After evolving from “loose to tight”, its licensing system has now become one of the most stringent crypto compliance frameworks in the world.

• Compliant companies : few but excellent, and generally able to meet AML/KYC requirements;

• Illegal companies : often pretend to have an “Estonian license” but are actually unregulated.

Investors must strictly follow the Step 1 – Step 6 process and combine the penalty announcement with MiCA requirements to maximize the security of their funds.