Denmark

Other Developments

Licensing and safeguarding provide the regime's foundation. Denmark regulates payment services under the Payments Act, the domestic transposition of PSD2 and EMD2, which requires full payment-institution or e-money-institution authorisation, EU/EEA passporting, or a restricted authorisation tier available below EUR 3 million in average monthly transaction volume; the regime is administered exclusively by Finanstilsynet. Copenhagen-based crypto-finance PSP Januar illustrates the escalation pathway between tiers: it moved from a 2021 restricted, Denmark-only authorisation to a full Payment Institution licence granted by Finanstilsynet in April 2023, unlocking EEA-wide passporting rights. E-money institution client funds are safeguarded under Executive Order no. 722 of 24 June 2011, alongside the Payments Act and Financial Business Act; the European Commission's conformity assessment found Denmark's transposition of Directive 2009/110/EC largely conform with some partial-conformity gaps. Marketing and consumer-facing conduct is supervised by the Consumer Ombudsman under the Payment Services Act and the Marketing Practices Act, operating in parallel with Finanstilsynet's prudential and payments-conduct supervision; Denmark applies a stricter-than-EU-baseline enforcement posture in payments in some areas. On digital money, Danmarks Nationalbank explored a retail CBDC, the e-krone, from 2016, concluded in 2017 that the benefits do not outweigh the costs, and reaffirmed that position in a 2022 report evaluating stablecoins, wholesale CBDC and retail CBDC; the central bank continues monitoring with no current issuance plan. Finanstilsynet granted GCEX a full MiCA licence permitting regulated crypto and digital-asset exchange, trading, custody and administration for institutional and professional clients across the EU/EEA. Operational resilience is now fully codified: Finanstilsynet enforces DORA incident-reporting timelines of a 4-hour initial notification after classification (maximum 24 hours after detection), a 72-hour intermediate report, and a one-month final report for major ICT incidents under DORA Article 19, with Article 28 requiring a Register of Information of ICT third-party arrangements. In cards, Dankort, launched in 1983 and carrying roughly 90% card penetration, is owned and operated by Nets as sole scheme owner and acquirer; scheme rules are revised biannually and enforced by the scheme itself, with Finanstilsynet and Danmarks Nationalbank overseeing Nets as critical infrastructure, and PCI DSS applies to all Dankort merchants. The Dankort merchant subscription fee is regulated by ministerial executive order under the Payment Services Act and supervised by the Danish Competition and Consumer Authority; the share of scheme costs recoverable via the subscription fee rose from 50% before 2012 to 100% by 2018, substituting for a conventional interchange fee. That consolidated acquiring structure sits within a broader industry-structure picture: Nexi acquired Denmark's Nets for EUR 7.8 billion via an EC-unconditionally-cleared merger completed March 2021, creating one of Europe's largest payments firms by volume across merchant acquiring, POS-terminal deployment and card processing. SMB-acquiring challenger Flatpay reached unicorn status on 17 November 2025 following a roughly EUR 146 million growth-equity round, valuing the company at approximately EUR 1.5-1.7 billion as it competes against Adyen, Stripe, SumUp and PayPal. Acquiring risk management remains concentrated: Nets holds a de facto monopoly as sole acquirer of the Dankort domestic scheme, with chargeback and objection procedures, PCI DSS pass-through obligations and merchant customer-due-diligence requirements set out in standard Dankort merchant agreements; high-risk verticals such as gambling, crypto, adult content and subscription billing face heightened onboarding scrutiny. On product innovation, Vipps MobilePay launched 'Olga', an AI fraud-detection model, in Denmark during 2025, building on capabilities proven in Norway and intended to help prevent tens of millions in annual fraud losses. Denmark's PSD2 open-banking regime, implemented in 2019 with near-universal bank API coverage and mandatory strong customer authentication, is expected to extend to open finance via the forthcoming EU Financial Data Access Regulation, though no confirmed in-force date is yet available. Consumer protection is under growing strain: Danish payers are entitled to immediate refund for unauthorised payment transactions under the Payment Services and Electronic Money Act, absent indications of payer fraud, with MitID authentication and 3D Secure serving as core fraud-mitigation layers. The Global Anti-Scam Alliance's State of Scams in Denmark report found nearly half of Danish adults reported falling victim to a scam in the prior 12 months, with combined estimated losses of DKK 6.9 billion, roughly $1 billion, driving public demand for guaranteed reimbursement akin to UK and Australian models. Settlement-access structure also matters here: Kronos2, migrated into T2/TIPS on 22 April 2025, is the domestic RTGS backbone administered by Danmarks Nationalbank; direct, co-managee and indirect T2 DKK participation models exist for banks and mortgage-credit institutions, but citizens and companies have no direct central-bank account access, and Danmarks Nationalbank may extend emergency liquidity assistance to solvent institutions. The Nordic retail-payments corridor is expanding in parallel: Vipps MobilePay operates a cross-border P2P corridor between Denmark, Norway and Finland using phone-number-based transfers at a 4% standard cross-border fee, with Sweden added on 24 September 2024 under a temporarily discounted 2% fee that ran through 1 November 2024 as a promotional measure. Finally, the trailing-12-month commercial ledger was active: Flatpay raised approximately EUR 146 million on 17 November 2025 from a syndicate including Hedosophia, AVP Growth, Smash Capital and Dawn Capital, reaching unicorn status at a valuation of approximately EUR 1.5-1.7 billion. Performativ raised EUR 11.96 million (approximately $14 million) on 28 April 2026 in a Series A led by Deutsche Borse Group with Rabo Investments and EIFO participation. Embankment, alternative-investment-fund infrastructure, raised approximately DKK 112 million (EUR 15 million), reported January 2026, in a Series A co-led by Smedvig Ventures and BlackFin Capital Partners. Vipps MobilePay launched its 'Olga' AI fraud-detection model in Denmark during 2025, as part of continued Nordic-wallet product development. GCEX secured a full MiCA licence from Finanstilsynet, enabling regulated crypto and digital-asset services across the EU/EEA for institutional and professional clients, reported within the trailing-12-month window with corroborating secondary reporting dating the licence to 15 December 2025.

Cross-Monitor Connections

Denmark's payments file connects most directly to the Financial Intelligence Monitor's illicit-finance workstream through the Danske Bank Estonia case. Sentinel's feed attributes to the Danske Bank money laundering scandal approximately EUR 200 billion in suspicious transactions flowing through the bank's sole Estonian branch between 2007 and 2015, described as possibly the largest money-laundering case in European history, with funds traced to over 150 countries. This Monitor treats that feed as provenance only and does not perform original illicit-finance typology analysis, routing the underlying findings to FIM for correspondent-banking de-risking assessment. The same episode also shapes this Monitor's own correspondent-banking view, even as Danmarks Nationalbank's settlement infrastructure continues to support bank and non-bank participation on different terms.

Outlook

Denmark's near-term regulatory horizon is thin but concrete: non-euro-area payment and e-money institutions face an Instant Payments Regulation compliance deadline of 9 April 2027, with extended PI/EMI phase-in milestones running into 2028, both layered onto a settlement backbone that is now fully integrated with T2/TIPS. No confirmed date exists yet for the Financial Data Access Regulation's extension of open banking into open finance, nor for any retail e-krone pilot, consultation or issuance. The sharper near-term political variable is consumer protection: DKK 6.9 billion in annual reported scam losses is generating visible pressure for a guaranteed-reimbursement model. Commercially, continued SMB-acquiring competition from Flatpay against the Nexi/Nets-Vipps MobilePay incumbency, alongside the active fintech funding cycle evidenced by Performativ, Embankment and GCEX, suggests industry structure will keep evolving even as the underlying legal and prudential regime stays settled.

Outlook

Denmark's regulatory trajectory is stable across licensing, safeguarding, resilience and scheme governance, with the clearest forward milestones being the 9 April 2027 Instant Payments Regulation deadline and 2028 phase-in extensions for non-euro-area PI/EMI entities. The principal live policy variable is consumer-protection reform in response to scam losses, while correspondent-banking scrutiny tied to the Danske Bank legacy remains the dominant reputational overhang rather than an open compliance matter.