Illustrative firm examples
Sweden country research brief
Research dated 2026-10-11 · Reviewed 2026-10-11
Version 0b58dd14dad9
0b58dd14dad96d7053ccfd387b3a1c8b736eb46712a58e5cf7a9e134654d1c1bScope: Illustrative firm examples. The selector is not an authorisation or legal-applicability determination. Source-check observations concern retrieval/access only and do not establish legal currentness; the research date is the content date boundary. Source health: review-required, checked 2026-10-12T06:25:43.870Z.
Framework and authorities
The AML perimeter is activity-based
Sweden's AML Act (2017:630) covers listed activities, not every company. Its section 1:2 includes banking, life insurance, investment/fund, payments, e-money and MiCA crypto-asset services, plus specified non-financial activities with limits. Check the entity, activity and carve-outs. The Riksdag consolidation is amended through SFS 2026:1075, effective 1 July 2026. The Government register separately lists SFS 2026:1023 effective 20 November 2026; the future section 1:2 alternative is withheld from current examples. Section 8:1 has no future commencement marker.
Supervision and reporting route
Finansinspektionen (FI) supervises financial businesses within its remit; other sectors have separate supervisors. Finanspolisen, the Police Authority's FIU, receives qualifying statutory reports through goAML. A portal link does not prove access, filing or receipt. FI's FFFS 2017:11 adds rules for stated in-scope firms; the retained PDF is updated 12 March 2024 and says the printed enactment controls. October 2026 currentness is not established.
Risk, FATF and sanctions context
National assessment: dated sector context, not a firm score
The September 2026 version of the 2024/2025 national assessment finds generally higher ML risk than in 2020/2021, chiefly from increased organised crime integrating into legitimate structures. Its highest-risk sectors are bank/financing businesses, payment institutions, bookkeeping/accounting and real-estate agents. TF channels include ordinary finance, hawala, couriers carrying gold/other assets and some crypto-assets. These are national findings, not customer scores or automatic controls. The FIU's 2025 annual report is separate operational context.
Sanctions are a separate, measure-specific regime
AML due diligence does not replace sanctions compliance. EU regulations and national authority roles must be checked against the actual measure. The International Sanctions Act (2025:327), effective 10 June 2025, criminalises specified breaches. Section 6 qualifies sections 3-5, including stated humanitarian/basic-needs and legal-representation cases; section 3 requires intent or gross negligence, not strict liability. Measure-specific designation, scope, exceptions, licences and reporting still need checking. No live list, match, licence or transaction was tested.
Selected firm implications
Meaning: Relationship CDD has no amount threshold here. The linked-transaction knowledge test remains. Native wording names funds/crypto-assets but cites EU 2023/1113 Article 3(9), which defines funds transfers; Article 3(10) defines crypto-asset transfers. This dependency is unresolved, not silently corrected or a universal threshold.
Conditions: EUR 15,000-equivalent limbs require no business relationship and the stated single/connected test. Transfers must strictly exceed EUR 1,000 equivalent under the literal category; crypto-reference scope remains unresolved. Assess the operator's perimeter and separate EU duties.
Exceptions: The transaction triggers in this section are framed for cases without a business relationship; other CDD duties and provisions must be assessed separately.
Suggested action: Apply CDD at relationship establishment. Without one, check the single/connected EUR 15,000-equivalent limbs and literal transfer limb strictly over EUR 1,000 equivalent. Resolve the native crypto-reference dependency before relying on a crypto threshold.
Legislation / Binding · 3 kap. 4 §Meaning: Chapter 2 section 1 calls for an operator-specific general risk assessment. It does not set a customer score or prescribe one template; the actual statutory perimeter and the operator's own risk factors matter.
Conditions: Operators within 1:2 and the specified auction-platform activity through 1:5; account for the legal-person employer allocation in 2:16 where applicable. Factors must reflect actual activity and risks.
Exceptions: No general firm-level waiver is stated in this provision.
Suggested action: For an in-scope operator, assess how its own products and services may be exploited and how high the risk is. Consider its products/services, customers, distribution channels, geography, information from its suspicious-activity reports, typologies and relevant authority information.
Legislation / Binding · 2 kap. 1 §Meaning: The section requires enhanced checks and additional measures responsive to the high relationship risk. Further information about the customer's business/financial situation and source of funds are examples, not a mandatory fixed package for every high-risk customer.
Conditions: Triggered when risk associated with the customer relationship is assessed as high; the chosen measures must address that risk.
Exceptions: No general exemption is stated here; examples are not an exhaustive list of required documents.
Suggested action: Where the risk associated with a customer relationship is assessed as high, carry out the specified more extensive customer checks and add measures needed to counter that high risk.
Legislation / Binding · 3 kap. 16 §Notices and limitations
- Illustrative bank, payments and crypto examples, not an assessed firm profile.
- Product/customer exposure alone is not statutory applicability. This is not a licensing guide.
- Local entity / domestic activity selected.
- 3 representative obligations from 4 editorial matches; see the full register for other duties.
- Source observations are unavailable, stale, failed or review-required. This dated brief does not confirm today's legal position.
- Dated, bounded research, not legal advice, a complete national corpus, customer score, permission decision or current-law certification. All 143 retained Act section versions/transitional units are inventoried; publication requires independent review. Section 6:3 refers to absent item 13 b: this remains unresolved.
- SFS 2026:1075 is effective 1 July 2026; SFS 2026:1023's future alternative is separated for 20 November 2026. Full amendment, commencement, repeal, savings and sector-rule reconciliation remains outstanding.
- Reused originals lack acquisition timestamps/headers. Read/hash verification on 11 October 2026 is not a fresh download. No current FATF list or assessment outcome is asserted.
- The September 2026 version of the 2024/2025 national assessment is national context, not a firm/customer score. Cited passages were checked; not every page was visually inspected. FIU context is dated 2025.
- FFFS 2017:11's retained electronic edition is dated 12 March 2024; printed enactment controls. Later rules, firm permissions, sanctions matches/licences and cross-border scope need separate checks.
- Original wording and full unofficial, model-assisted English translations remain private/analysis-only pending rights review. Neither author drafting nor technical tests establishes regulatory certification.
Evidence sources
Original source documents are not reproduced in this brief. Retained originals are private research evidence; use the official-source links.
- Legislation · Sveriges riksdag / Svensk författningssamling · Riksdag consolidation amended through SFS 2026:1075; page also presents separately marked SFS 2026:1023 alternative wording effective 20 November 2026. Local capture timestamp and response headers were not retained. · Complete source HTML: 142 numbered section versions plus transitional provisions; sections 1:2, 2:1, 3:4, 3:7, 3:16, 4:1 and 4:3.
- Official Legislation Index · Regeringskansliets rättsdatabaser · Official Government amendment register; observed 11 October 2026. Capture timestamp/headers not retained. · Records SFS 2026:1075 effective 1 July 2026 and SFS 2026:1023 effective 20 November 2026.
- Supervisory Regulation · Finansinspektionen · Consolidated electronic edition states last updated 12 March 2024 and says the printed enactment controls in legal application; October 2026 currentness not verified. · Whole 232,994-byte PDF; amending series listed in source: FFFS 2019:28, 2021:37 and 2024:4.
- Official Supervisory Page · Finansinspektionen · Official FI explanatory page, exact retained HTML; local capture timestamp/headers not retained. · FI description of financial and specified non-financial statutory activities and supervisory allocation.
- Official Supervisory Page · Finansinspektionen · Official FI framework page, exact retained HTML; local capture timestamp/headers not retained. · FI identifies the AML Act, FFFS 2017:11 and separate EU AML package instruments.
- Official Fiu Page · Polismyndigheten · Official Police page, exact retained HTML; local capture timestamp/headers not retained. · FIU role, statutory reporter framing and reporting channel.
- Official Fiu Reporting Portal · Polismyndigheten / Finanspolisen · Exact retained portal landing-page HTML; local capture timestamp/headers not retained. · Portal describes reporting access for statutory reporters and registration; not a report submission or delivery test.
- National Risk Assessment · Polismyndigheten, Samordningsfunktionen · Whole 160-page PDF; report version September 2026. National and sector context, not a firm score. · Version/colophon, printed p. 2; executive summary, printed p. 3: increasing organised-crime threat, four highest ML-risk sectors and terrorism-financing channels.
- Official Fiu Report · Polismyndigheten, Finanspolisen · Annual report published March 2026; complete retained PDF. · FIU mandate and 2025 reporting/operational context.
- Legislation · Sveriges riksdag / Svensk författningssamling · Promulgated 8 May 2025; transitional provision states commencement 10 June 2025; exact retained Riksdag HTML. · Sections 1-6 and 15-24: scope, sanctions offenses, exceptions, implementation of measures not directly applicable in Sweden, and interim powers.
- Official Sanctions Authority Page · Regeringskansliet · Official Government sanctions authority page, exact retained HTML; local capture timestamp/headers not retained. · Government account of directly applicable EU sanctions regulations, national authority allocation, FI reporting remit and exception/notification routes.
Swedish AML Act (2017:630)
Riksdag consolidation amended through SFS 2026:1075; page also presents separately marked SFS 2026:1023 alternative wording effective 20 November 2026. Local capture timestamp and response headers were not retained. · Complete source HTML: 142 numbered section versions plus transitional provisions; sections 1:2, 2:1, 3:4, 3:7, 3:16, 4:1 and 4:3.
Source record
Retrieved unknown. SHA-256: e9861cc145afa6e155ffb7e4e01f5225e07eea184986788bd2101091b5bbdf9d
Source retrieval check
review-required · Checked 2026-10-12T06:25:32.529Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
SFSR amendment register for SFS 2017:630
Official Government amendment register; observed 11 October 2026. Capture timestamp/headers not retained. · Records SFS 2026:1075 effective 1 July 2026 and SFS 2026:1023 effective 20 November 2026.
Source record
Retrieved unknown. SHA-256: ad8514cb65849167b7810cb2c2eb5af9a1d6a5a3f5d04ca6d52e278cf02e3361
Source retrieval check
observed · Checked 2026-10-12T06:25:34.273Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Finansinspektionens föreskrifter FFFS 2017:11
Consolidated electronic edition states last updated 12 March 2024 and says the printed enactment controls in legal application; October 2026 currentness not verified. · Whole 232,994-byte PDF; amending series listed in source: FFFS 2019:28, 2021:37 and 2024:4.
Source record
Retrieved unknown. SHA-256: a645ea965c8c7f7827ef435dba4005eee68457b5ad61945f29de14ad4a0e3f94
Source retrieval check
review-required · Checked 2026-10-12T06:25:35.230Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Företag som omfattas av penningtvättslagen
Official FI explanatory page, exact retained HTML; local capture timestamp/headers not retained. · FI description of financial and specified non-financial statutory activities and supervisory allocation.
Source record
Retrieved unknown. SHA-256: 0a76f87692573dba8de10d3961a9e63ff21961d9dad9e8f60f086a320f1b749d
Source retrieval check
failed · Checked 2026-10-12T06:25:36.255Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Regler mot penningtvätt och finansiering av terrorism
Official FI framework page, exact retained HTML; local capture timestamp/headers not retained. · FI identifies the AML Act, FFFS 2017:11 and separate EU AML package instruments.
Source record
Retrieved unknown. SHA-256: 81d9ac10b8d582246f592f2e359e5ce40b1dd14014b438709b044cd7cfd0508c
Source retrieval check
failed · Checked 2026-10-12T06:25:36.654Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Finanspolisen
Official Police page, exact retained HTML; local capture timestamp/headers not retained. · FIU role, statutory reporter framing and reporting channel.
Source record
Retrieved unknown. SHA-256: a2bc737c488d7d6da440192978ccef8958114a9e0720c68af17c4b27bea77ce7
Source retrieval check
review-required · Checked 2026-10-12T06:25:37.055Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Finanspolisens portal för inrapportering i goAML
Exact retained portal landing-page HTML; local capture timestamp/headers not retained. · Portal describes reporting access for statutory reporters and registration; not a report submission or delivery test.
Source record
Retrieved unknown. SHA-256: 08a7bae45e054e678acc52cfa051b775b8d5dc6d9f28a91839a5560b60a465cf
Source retrieval check
failed · Checked 2026-10-12T06:25:38.079Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Nationell riskbedömning av penningtvätt och finansiering av terrorism i Sverige 2024/2025
Whole 160-page PDF; report version September 2026. National and sector context, not a firm score. · Version/colophon, printed p. 2; executive summary, printed p. 3: increasing organised-crime threat, four highest ML-risk sectors and terrorism-financing channels.
Source record
Retrieved unknown. SHA-256: 69017b4bd5f622e5c71f8200bd16d0c114f32329854c145f4d682bd1dd84f212
Source retrieval check
observed · Checked 2026-10-12T06:25:38.593Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Finanspolisens årsrapport 2025
Annual report published March 2026; complete retained PDF. · FIU mandate and 2025 reporting/operational context.
Source record
Retrieved unknown. SHA-256: e25d0ec45b00d05c6fe62283d4a7d6206ecc2eeb1232760347250b9868e1ce03
Source retrieval check
observed · Checked 2026-10-12T06:25:40.907Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Lag (2025:327) om internationella sanktioner
Promulgated 8 May 2025; transitional provision states commencement 10 June 2025; exact retained Riksdag HTML. · Sections 1-6 and 15-24: scope, sanctions offenses, exceptions, implementation of measures not directly applicable in Sweden, and interim powers.
Source record
Retrieved unknown. SHA-256: c56b49650adcb6d0244efa5abf72207297d1fad09a246341d7587ce6a2e2c8d5
Source retrieval check
review-required · Checked 2026-10-12T06:25:42.442Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Myndighetsuppdrag och behöriga myndigheter
Official Government sanctions authority page, exact retained HTML; local capture timestamp/headers not retained. · Government account of directly applicable EU sanctions regulations, national authority allocation, FI reporting remit and exception/notification routes.
Source record
Retrieved unknown. SHA-256: 4a10281352e83976cc592ea6d0f671b01a6c7b0185408c149af9cfd379ebfe1b
Source retrieval check
review-required · Checked 2026-10-12T06:25:43.870Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Retail bank
Meaning
Relationship CDD has no amount threshold here. The linked-transaction knowledge test remains. Native wording names funds/crypto-assets but cites EU 2023/1113 Article 3(9), which defines funds transfers; Article 3(10) defines crypto-asset transfers. This dependency is unresolved, not silently corrected or a universal threshold.
Full public provision explanation
Establishing a business relationship triggers CDD without an amount threshold here. Without a relationship, CDD applies to a single transaction of EUR 15,000 equivalent or more, or knowingly/ought-to-be-known connected transactions reaching that amount. The transfer limb is strictly over EUR 1,000 equivalent. The Swedish text says funds or crypto-assets but cites EU 2023/1113 Article 3(9), which defines funds transfers; Article 3(10) defines crypto-asset transfers. This crypto-reference dependency remains unresolved: do not silently replace the native citation or infer a universal threshold or complete EU transfer workflow.
Suggested action
Apply CDD at relationship establishment. Without one, check the single/connected EUR 15,000-equivalent limbs and literal transfer limb strictly over EUR 1,000 equivalent. Resolve the native crypto-reference dependency before relying on a crypto threshold.
Conditions
EUR 15,000-equivalent limbs require no business relationship and the stated single/connected test. Transfers must strictly exceed EUR 1,000 equivalent under the literal category; crypto-reference scope remains unresolved. Assess the operator's perimeter and separate EU duties.
- Relationship establishment, or absent a relationship: single transactions of EUR 15,000 equivalent or more; connected transactions the operator knows or ought to know reach that sum; the literal transfer limb strictly exceeding EUR 1,000 equivalent. Native Article 3(9) names funds transfers while the text also mentions crypto-assets: the crypto-reference dependency is unresolved.
Exceptions
The transaction triggers in this section are framed for cases without a business relationship; other CDD duties and provisions must be assessed separately.
Payments and e-money
Meaning
Chapter 2 section 1 calls for an operator-specific general risk assessment. It does not set a customer score or prescribe one template; the actual statutory perimeter and the operator's own risk factors matter.
Full public provision explanation
Each operator within the Act’s statutory perimeter assesses the risks arising from its own products and services. The statute specifically names product/service type, customers, distribution channels, geography, information from its suspicious-activity reporting, typologies and relevant authority information. This is a business-wide assessment duty, not a prescribed customer score or document template.
Suggested action
For an in-scope operator, assess how its own products and services may be exploited and how high the risk is. Consider its products/services, customers, distribution channels, geography, information from its suspicious-activity reports, typologies and relevant authority information.
Conditions
Operators within 1:2 and the specified auction-platform activity through 1:5; account for the legal-person employer allocation in 2:16 where applicable. Factors must reflect actual activity and risks.
- Applies to operators within 1:2 and the specifically described auction-platform activity through 1:5; account for the legal-person employer allocation in 2:16 where applicable. Select factors for the actual activity and risks.
Exceptions
No general firm-level waiver is stated in this provision.
Crypto and digital assets
Meaning
The section requires enhanced checks and additional measures responsive to the high relationship risk. Further information about the customer's business/financial situation and source of funds are examples, not a mandatory fixed package for every high-risk customer.
Full public provision explanation
A high-risk assessment triggers more extensive versions of the specified customer checks and any additional measures needed to mitigate that risk. The examples (business/financial information and source of funds) are illustrative, not a fixed mandatory package for every customer.
Suggested action
Where the risk associated with a customer relationship is assessed as high, carry out the specified more extensive customer checks and add measures needed to counter that high risk.
Conditions
Triggered when risk associated with the customer relationship is assessed as high; the chosen measures must address that risk.
- The enhanced-measures trigger is a high assessment of risk associated with the customer relationship; measures must be proportionate to counter that high risk.
Exceptions
No general exemption is stated here; examples are not an exhaustive list of required documents.