Bank and Payment Accounts Monitoring System

Via the Bank and payment accounts monitoring system, information pursuant to the Act can be transmitted regarding

• bank and payment accounts
• safety deposit boxes
• balances and account transactions (as of 1 June 2026)
• securities (as of 10 July 2027)

The information is transmitted through two functionalities that make up the Bank and payment accounts monitoring system (as of 1 December 2025). These functionalities are

1. a centralised automated account information system and
2. a centralised electronic balance and account transaction system

Centralised Automated Account Information System refers to a centralised automated mechanism, which makes it possible to immediately obtain bank and payment account information as well as safety deposit box information. This functionality is provided for in Chapter 2 of the Act on the Bank and Payment Accounts Monitoring System.

Centralised Electronic Balance and Account Transaction System refers to a method of processing balance and account transaction information as well as information on securities from the Bank and payment accounts monitoring system based on electronic data processing. This functionality is provided for in Chapter 3 of the Act on the Bank and Payment Accounts Monitoring System. Via the Centralised electronic balance and account transaction system it is possible to transmit balance and account transaction information as of 1 June 2026 and information on securities as of 10 July 2027.

The Bank and payment accounts monitoring system consists of

• the Bank and Payment Accounts Register
• the aggregating application
• the data suppliers’ own bank and payment accounts data retrieval systems
• the Data Disclosure System (to be introduced on 1 June 2026)

The Bank and Payment Accounts Register is a register whose purpose is to receive, store and disclose bank and payment account information referred to in the Act on the Bank and Payment Accounts Monitoring System. Customs maintains the register and is responsible for transmitting the stored data to competent authorities such as the Police or the Tax Administration. Data to the Bank and payment accounts register is provided by payment institutions, electronic money institutions, crypto-asset service providers and credit institutions authorised by the Financial Supervisory Authority.

The Aggregating Application is an automated technical solution that transmits the information requests of the competent authorities to the data suppliers, and the data received from data suppliers back to the authority. The application is maintained by Customs.

The Bank and Payment Accounts Data Retrieval Systems are data suppliers’ own systems used to respond to requests from competent authorities. Via the system, the data suppliers transmit information on bank and payment accounts, safety deposit boxes, balance and account transactions (as of 1 June 2026) and securities (as of 10 July 2027) to the aggregating application maintained by Customs. From there, they are transferred to the competent authorities. Credit institutions must maintain their own bank and payment accounts data retrieval system. Payment institutions, electronic money institutions and crypto-asset services may also maintain a bank and payment accounts data retrieval system.

The Data Disclosure System can be used to provide balance and account transaction information if the data supplier does not have their own bank and payment accounts data retrieval system. The Data disclosure system is maintained by Customs. It will be introduced on 1 June 2026, when the data suppliers must also begin transmitting balance and account transaction information.

The Centralised Automated Account Information System (information on bank and payment accounts as well as on safety deposit boxes) can be used by 

• the Police
• the Financial Intelligence Unit
• Finnish Customs 
• the Finnish Border Guard
• the Tax Administration
• the National Enforcement Authority Finland
• the Defence Forces 
• the Financial Supervising Authority
• the Finnish Patent and Registration Office
• the Finnish Supervisory Agency
• the Lottery Administration of the National Police Board 
• the Bar Association

The Centralised Electronic Balance and Account Transaction System (information on balance and account transactions as well as securities) can be used by

• the Police
• the Financial Intelligence Unit
• Finnish Customs 
• the Finnish Border Guard
• the Tax Administration
• the National Enforcement Authority Finland
• the Defence Forces 
• the Financial Supervising Authority

Competent authorities can make enquiries to the Bank and payment accounts monitoring system and request only the information required by law on bank and payment accounts, safety deposit boxes, balance and account transactions and securities of individuals or companies. Each authority has, by law, a specifically defined set of tasks for which the information may be used. The rights to access information are defined in separate legislation applicable to each individual data user.

Disclosure of bank and payment account information

Financial operators, that is data suppliers, must for the purpose of disclosing their customers' bank and payment account information as well as any safety deposit box information, either

• join the Bank and payment accounts register maintained by Customs, or
• build their own data retrieval system for bank and payment accounts.

Both ways require preparations by operators, and data suppliers need to contact Customs for detailed instructions.

Payment institutions, electronic money institutions and providers of crypto-assets services must join the Bank and payment accounts register to store data in accordance with the Act on the Bank and Payment Accounts Monitoring System. Alternatively, operators can also create their own bank and payment accounts data retrieval system.

Credit institutions are required to maintain their own bank and payment accounts data retrieval systems for releasing information. Credit institutions can also ask the Financial Supervisory Authority for an exemption from the obligation to maintain such a system. In practice, this means joining the Bank and Payment Accounts Register maintained by Customs.

Disclosure of balance and account transaction information as of 1 June 2026

As of 1 June 2026, data suppliers must also begin to disclose balance and account transaction information in accordance with Chapter 3 of the Act on the Bank and Payment Accounts Monitoring System. The information can be disclosed either

• via the data supplier’s own bank and payment accounts data retrieval system or
• The data disclosure system maintained by Customs.

Under the guidance of the Ministry of Finance, Customs is responsible for the implementation of the Bank and Payment Accounts Monitoring System.

Customs maintains the Bank and Payment Accounts Register, the aggregating application and the data disclosure system. In addition, Customs has issued regulations for technical implementation to operators who use their own data retrieval system or who enter data in the Bank and payment accounts register. Customs acts as the controller of the Bank and Payment Accounts Register and the aggregating application (for personal data).

According to the Act on the Bank and Payment Accounts Monitoring System, Customs is one of the competent authorities that can receive data via the Bank and payment accounts monitoring system.

You can read more in Customs’ privacy statement about the processing of personal data in the Bank and Payment Accounts Register and in the aggregating application.