Norway's financial regulators have issued strengthened anti-money laundering requirements that take effect in the first half of 2026. International companies operating in Norway – particularly those accessing the Norwegian banking system, holding credit facilities, or engaged in correspondent banking relationships – face immediate compliance obligations. Failure to meet these requirements risks account restrictions, loss of banking access, and enforcement action by Finanstilsynet (the Financial Supervisory Authority of Norway).
Norway's updated AML rules tighten know your customer (KYC) procedures, expand beneficial owner disclosure requirements, and introduce stricter thresholds for enhanced due diligence across a broad range of business categories. Companies subject to the rules must complete initial compliance steps within 90 days of the effective date. The primary legal basis is Norway's anti-money laundering and counter-terrorist financing legislation. This has been amended to align more closely with the EU's Fourth and Fifth Anti-Money Laundering Directives. frameworks that Norway adopts through the European Economic Area agreement.
This alert sets out what has changed, which businesses are affected, and the specific steps that international companies should take without delay.
What changed and when it takes effect
The amendments to Norway's AML legislation came into force on 1 January 2026. Finanstilsynet issued supplementary supervisory guidance in February 2026 clarifying how the rules apply in practice. Several changes are immediately material for cross-border businesses.
First, the definition of a beneficial owner has been tightened. Any individual holding direct or indirect ownership or control above a specified threshold – or exercising effective control through other means – must now be identified, verified, and registered. The previous rules permitted more flexibility in multi-layered corporate structures. The updated rules do not.
Second, enhanced KYC checks are now required at the point of bank account opening for all non-resident entities and for Norwegian entities with foreign shareholders above the disclosure threshold. Banks must obtain documentation on the source of funds, the nature of business activity, and the beneficial owner chain before any account is activated.
Third, correspondent banking relationships involving non-EEA counterparties are subject to a new category of enhanced scrutiny. Norwegian banks are required to assess the AML controls of foreign correspondent institutions before maintaining or establishing such relationships. This directly affects international businesses that route payments through non-EEA banks into Norway.
Fourth, companies seeking a credit facility from a Norwegian lender must now complete full AML onboarding – including beneficial owner verification – before any facility is drawn. This requirement previously applied mainly to larger transactions; it now applies uniformly across credit products.
For businesses already in a banking or credit relationship in Norway, institutions are conducting retroactive KYC reviews. Incomplete files will result in restricted account functionality until remediation is complete.
Companies active in Norwegian capital markets should also review their position under the updated rules. Our analysis of capital markets regulation in Norway covers the interaction between AML obligations and securities law compliance for listed and unlisted entities.
Who is affected and what thresholds apply
The updated AML legislation applies to a wide range of obliged entities. For international businesses, the most immediately relevant categories are the following.
- Foreign companies with a Norwegian branch, subsidiary, or registered representative office
- Non-resident entities holding Norwegian bank accounts or maintaining credit relationships with Norwegian lenders
- Companies engaged in correspondent banking arrangements with Norwegian financial institutions
- Investment vehicles – including funds and holding structures – with Norwegian investors or Norwegian-source assets
- Professional service providers in Norway: accountants, auditors, lawyers, and real estate agents operating within the scope of AML legislation
The beneficial owner threshold that triggers mandatory disclosure and verification is any individual with direct or indirect ownership or control at or above the level specified in the amended legislation. For layered corporate structures, each intermediate layer must be documented and the ultimate natural person identified. Where no individual meets the ownership threshold, the natural persons exercising effective management control must be disclosed instead.
Enhanced due diligence – a more intensive review involving source-of-wealth documentation and senior management approval – applies automatically to: entities from jurisdictions on the FATF high-risk list. Politically exposed persons and their associates. Additionally, any transaction or relationship that Finanstilsynet classifies as presenting elevated risk indicators.
Engaging a lawyer in Norway with cross-border AML experience is strongly advisable for any company facing retroactive KYC review or establishing new banking relationships. For comprehensive legal support on banking regulation in Norway, see our banking and finance practice in Norway.
To receive an expert assessment of your AML compliance position in Norway, contact us at info@ferrazwhitmore.com.
Immediate actions for international companies
The 90-day window from the 1 January 2026 effective date runs to the end of March 2026. Companies that have not yet acted should treat the following steps as urgent.
1. Audit your beneficial owner register. Confirm that all natural persons meeting the ownership or control threshold are identified, verified with current documentation, and recorded. Outdated or incomplete records will not satisfy the new verification standard. Where corporate structures have changed since the last KYC update, re-verification is required.
2. Prepare source-of-funds documentation. Norwegian banks are now requesting evidence of the origin of funds for existing accounts, not only at onboarding. Companies should prepare a clear narrative – supported by audited accounts or transaction records – explaining the commercial basis for funds held or transferred through Norwegian accounts.
3. Review correspondent banking exposures. If your business uses a non-EEA bank to make or receive payments involving Norwegian counterparties, assess whether your correspondent institution's AML controls will satisfy Norwegian supervisory expectations. Undocumented correspondent relationships are a primary enforcement target for Finanstilsynet.
4. Check credit facility drawdown conditions. Any undrawn credit facility with a Norwegian lender requires full AML onboarding before the facility can be accessed. If onboarding is incomplete, the facility may be frozen. Address this with your lender before the compliance deadline passes.
5. Update internal AML policies and training. If your company operates as an obliged entity in Norway. whether as a financial intermediary. Professional service provider. Alternatively, otherwise. your internal AML procedures must reflect the updated legislative requirements. Finanstilsynet has signalled that supervisory inspections will focus heavily on the adequacy of written policies and staff training records in the near term.
Companies monitoring similar developments across the EEA may also find it useful to review the parallel update covered in our alert on AML updates in Portugal. This addresses obligations arising under the same EU-derived legislative trajectory.
About Ferraz & Whitmore
Ferraz & Whitmore is an international law firm based in Lisbon, advising business clients across 46 jurisdictions. Our banking and finance practice covers AML compliance, KYC procedures, beneficial owner disclosure, bank account opening, and credit facility structuring across European and international markets. We advise international companies, institutional investors, and in-house legal teams who need results-oriented counsel across multiple legal systems. As a law firm in Norway and across the Nordic region, we support clients facing regulatory reviews, enforcement inquiries, and onboarding challenges with Norwegian financial institutions. Our attorneys have advised on AML-related matters before Finanstilsynet and in coordination with EEA regulatory bodies. To discuss your compliance situation in Norway, contact us at info@ferrazwhitmore.com.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.