Finnish Trust Network (FTN): how to accept Finnish bank IDs
How a business accepts the Finnish Trust Network: choosing a tunnistuspalvelu, what a sign-in returns, the 3-cent legal cap, AML and AMLR standing, limits for foreigners and minors, and the document fallback.
In short
The Finnish Trust Network (FTN, luottamusverkosto) is the legally regulated network that lets a business accept Finnish bank IDs and mobile certificates through one identification broker, a tunnistuspalvelu.[1] Every registered means provider must offer its means to every registered broker, and the law caps the provider's fee at 3 cents per identification.[1][2]
- A sign-in returns the name, the date of birth and the personal identifier. No portrait.[15]
- Bank IDs and mobile certificates are rated Substantial in Finland[3] and are not EU-notified.[4]
In Finland, strong electronic identification (vahva tunnistautuminen) means a bank ID, a mobile certificate or the ID card chip. A business signs one contract with a tunnistuspalvelu, a registered broker, and reaches every provider in the network.[1][3]
The Finnish Trust Network at a glance
The network was formed on 1 May 2017 by all notified providers, meaning the providers notified to Traficom's national register, not the EU eIDAS list.[1] The National Cyber Security Centre Finland (NCSC-FI) at Traficom keeps the register and supervises it.[1]
Finnish Trust Network
Finland's network of bank IDs and mobile certificates
How many Finns use strong identification
We found no official 2025 total of users or identifications from Traficom or the Digital and Population Data Services Agency (DVV), as of 5 October 2026.
Sources: Suomi.fi news, the Traficom register and Finlex.[3][2]
The register of 16 June 2026 lists the banks, the three mobile operators' certificates, one wallet app and DVV's citizen certificate as means.[3] The mobile certificate needs a subscription with one of those three operators.[14]
- 1 September 2009Act in forceAct 617/2009 on strong electronic identification.
- 1 May 2017Trust networkProviders must serve every registered broker.
- 25 April 2025Card notifiedThe citizen certificate is notified under eIDAS at High.
- 4 September 2026New titleAmendment 811/2026 renames the act.
- 1 March 2026Licence applicationsGambling licence applications open.
- 1 July 2027GamblingLicensed gambling may launch; all gambling needs identification.
From the act to licensed gambling.[2][1][4][8]
What the user sees
The user chooses a bank or a mobile certificate and signs in on that service's own screens: a username and password plus an app approval, a key-code list or a separate code device, depending on the bank.[3][15]
Choose how to verify
Use the eID you already have.
Finnish Trust Network
Use an ID document instead
1The user picks Finnish Trust Network in your sign-up.
Choose your bank
Or sign in with a mobile certificate.
Your bank
Mobile certificate
2The broker shows the bank chooser.[15]
Sign in to your bank
Enter your username and password.
3The user signs in on the bank's own page.[3]
Approve the sign-in
Or type a code from your key-code list or code device.
4The user approves in the bank app (app path shown).[3]
Confirm sharing
Your details go to the service you came from.
5The user consents to sharing on the bank or broker side (illustrative) and returns.[15]
The mobile certificate (Mobiilivarmenne) sits on the SIM, so it has its own path after step 2.[3]
- The user picks the mobile certificate at the chooser.
- The user types their own phone number.[14]
- The user approves on the phone with a self-chosen PIN.[14]
- Consent and return, as in step 5.
The operators claim that 99% of services accept the mobile certificate (mobiilivarmenne.fi, a site run by the operators).[14]
Video pending: flow-redirect
A generic redirect eID sign-in, start to finish; for FTN the bank steps run inside it.
What the Finnish Trust Network returns to a business
The broker passes back a signed identity: the name, the date of birth and the personal identifier when the selected method returns them.[15]
| Attribute | When | Notes |
|---|---|---|
| Full name | Returned | From the bank or operator record[15] |
| Date of birth | When returned | Proves age[15] |
| Personal identity code (henkilötunnus) | When returned | Finland's national identifier[15] |
| Electronic ID number (SATU) | Citizen certificate | 8 digits plus a check character; reveals no date of birth[12] |
| Address | Never by default | Plan another source |
| Portrait | Never | Not part of the result[15] |
What a completed FTN sign-in carries.[15][12]
The ID card stores no personal identity code, date of birth or address, only the SATU, so a broker resolves the identifier to a henkilötunnus via the population register.[12]
Watch out
No address and no portrait. If your due diligence needs either, add a second source and a liveness and face step from day one.[15]
Vahva tunnistautuminen and the law: level of assurance and legal standing
The governing law is Act 617/2009, titled since amendment 811/2026 of 4 September 2026 "Laki vahvasta sähköisestä tunnistamisesta" (previously "...ja sähköisistä luottamuspalveluista"), the Act on Strong Electronic Identification.[2]
| Instrument | What it means for FTN |
|---|---|
| Act 617/2009, § 12 c | Caps the means provider's fee, paid by the broker, at 3 cents per forwarded identification, all identity data included[2] |
| Act 617/2009, § 17 | For a means provider's initial identification, permits reliance only on a valid EEA, Swiss or San Marino passport or ID card, or a DVV digital identity certificate, and requires means providers to accept other providers' strong means at the same or a lower level[2] |
| EU notified-schemes list | Only the citizen certificate on the ID card, High, 25 April 2025, C/2025/2448[4] |
| Act 444/2017, chapter 3, § 11 | Remote identification: one option is a strong identification means under 617/2009[5] |
| Act 444/2017, chapter 3, § 1(12) | Data obtained through eIDAS identification means may be stored as customer due diligence data[5] |
| Regulation (EU) 2024/1624, Art. 22(6)(b) | eID means at Substantial or High, from 10 July 2027[6] |
The anti-money laundering act names FTN means directly.
Chapter 3, § 11Rahanpesulaki 444/2017, as amended by 818/2026
"todentaa asiakkaan henkilöllisyys vahvasta sähköisestä tunnistamisesta annetussa laissa (617/2009) tarkoitetulla tunnistusvälineellä"
Source: Finlex, 444/2017[5]
In English, one option for remote identification: "verify the customer's identity with an identification means referred to in the Act on strong electronic identification (617/2009)".[5]
From 10 July 2027 the EU Anti-Money Laundering Regulation (AMLR) applies. Its Article 22(6)(b) accepts "electronic identification means which meet the requirements of Regulation (EU) No 910/2014 with regard to the assurance levels 'substantial' or 'high'".[6] The final draft due diligence standards of the Anti-Money Laundering Authority (AMLA), sent to the Commission on 30 September 2026 and not yet law, say eID means qualify "regardless of whether they are notified" if they meet Substantial or High, and note that "this includes European Digital Identity Wallets" (EUDI Wallet).[7] Our reading: a Substantial FTN sign-in fits, notified or not.
Note
DVV's own Suomi.fi Wallet app is now planned for 2027, after EU certification delays. An October 2025 government plan had said the end of 2026.[13]
How to connect: choosing a tunnistuspalvelu
The register of 16 June 2026 lists four pure brokers and seven providers that both issue means and broker: banks, the three mobile operators and a wallet app provider.[3]
Most businesses
Contract a registered broker
- One contract for every provider
- The broker holds the provider contracts
- Price per sign-in, set by the broker
Act 617/2009, trust network
Large volumes
Register as a broker yourself
- Notify NCSC-FI and enter the register
- Submit audit reports, valid up to two years
- Providers must serve you at the capped fee
Supervised by NCSC-FI
Public sector
Suomi.fi identification
- Run by DVV for authorities
- Not for private companies
DVV
The three ways into Finnish strong identification.[1][2][3]
The law caps only the provider's fee.[2] Broker fees are set by the market and lead times are not published, as of 5 October 2026. NCSC-FI can prohibit services, so check the current register.[1]
The user signs in and approves
A brokered FTN sign-in. The provider's fee for step 5 is capped by law.[2]
Use cases and sector rules
| Use case | What FTN gives you | Rule behind it |
|---|---|---|
| KYC and AML onboarding | Remote identity from a strong means | Act 444/2017, ch. 3 § 11[5] |
| Online gambling | Identity and age at registration | New Gambling Act from 1 July 2027[8] |
| Age checks | A signed date of birth | Broker result[15] |
| Signing | The ID card's citizen certificate signs with legal effect | DVV[12] |
Gambling is the big change. Licence applications opened on 1 March 2026, and from 1 July 2027 "All gambling will require identification to verify age", with an age limit of 18.[8]
Limits and fallbacks
A Finnish bank ID needs an account at a Finnish bank, and usually a Finnish personal identity code.
- Foreigners: the Finnish Authenticator app serves only selected public services.[11] Residents with a residence permit can get the citizen certificate.[12]
- Minors: banks set their own age rules (see the FAQ).
Outages happen. On 17 September 2025, from 04:00 to 08:23, bank IDs and the mobile certificate failed in Suomi.fi identification.[10] Fraud is the other limit. According to Finance Finland (Finanssiala), criminals tried to take EUR 148 million from Finns in 2025. Banks blocked or recovered EUR 75.5 million and EUR 72.5 million was lost. Safe-account scams (turvatilihuijaus), where callers pose as the bank, cost EUR 38.4 million.[9]
For everyone else, the fallback is a document check: read the passport or ID card chip over NFC (near-field communication), check liveness and match the face (see NFC eID verification and chip security).
1Offer FTN first to Finnish users
Bank ID or mobile certificate through your broker.
The user completes an FTN sign-in
Accept the signed result
Name, date of birth, identity code.
Verify with a document
NFC chip reading, liveness and face match.
2Add the address from another source
FTN does not return it.
3Screen and decide
Sanctions and PEP checks, then your decision.
eID first, document as the fallback, one decision at the end.
Finnish Trust Network integration checklist: tunnistuspalvelu, data and fallback
- Choose a broker from the current Traficom register.[3]
- List the attributes you need and an address source.
- Offer both bank IDs and the mobile certificate.
- Store the result as due diligence evidence (Act 444/2017, chapter 3, § 1(12)).[5]
- Build the document fallback for users without FTN.
- Test success, cancellation, expiry and fallback.
- Plan age checks for gambling before 1 July 2027.[8]
- Recheck your policy against AMLR before 10 July 2027.[6]
How Didit helps with Finnish Trust Network verification
The Finnish Trust Network is live on Didit, so you need no broker contract of your own. The user picks it in the hosted flow or the SDK, on the same phone or by QR code from a computer. Didit never asks for the PIN or the bank password.
Turn it on in the console under Workflows, ID Verification, Countries, Finland, Wallets accepted, or with the workflows API (methods.FIN.wallet).
Users without FTN fall back to document checks with NFC chip reading ($0.15), liveness and face match in the same workflow. A full KYC check costs $0.33; AML screening $0.20. Only completed FTN sign-ins are billed, at $0.25 (pricing). Every eID Didit runs is listed on the digital ID wallets page.
Screenshot pending: hosted-flow-wallet-chooser
The user picks Finnish Trust Network in the Didit flow.
Screenshot pending: hosted-flow-qr
On a computer, a QR code hands the sign-in to the phone.
Screenshot pending: console-wallets-accepted
Turning the Finnish Trust Network on in the Didit console.
A completed FTN sign-in is one identification step inside your workflow, not a full onboarding. It gives you the full name, the date of birth, the Finnish personal identity code, the level of assurance (labelled Substantial) and a signature check. It does not give you an address, a portrait or a risk decision.
Didit provides
- Finnish Trust Network sign-in in the hosted flow or the SDK
- The document route for users without FTN
- The signed attributes and the evidence of every check
Stays with you
- The risk assessment and the policies
- The onboarding decision
- The source for the customer's address
Accept the Finnish Trust Network in your sign-up today
FTN and the document route in one workflow.
Key takeaways
- One registered broker reaches every Finnish bank ID and mobile certificate.
- The provider's fee is capped by law at 3 cents. Broker charges vary by provider and contract; check current pricing.
- No address and no portrait come back.
- FTN is Substantial, not EU-notified, and named in Finland's AML act.
Frequently asked questions
What is the Finnish Trust Network?
A legally regulated network, formed on 1 May 2017, in which every registered means provider must offer its means to every registered broker. A business signs with one broker and reaches them all.[1]
How much does an FTN identification cost?
The law caps the means provider's fee at 3 cents per forwarded identification, all identity data included. Separately, broker charges vary by provider and contract; check current pricing.[2] Didit charges $0.25.
What data does a business receive?
The name, the date of birth and the personal identity code (henkilötunnus) when the chosen method returns them. There is no address by default and no portrait.[15]
Is FTN eIDAS-notified?
No. Finland's only EU-notified scheme is the ID card's citizen certificate, at High since 25 April 2025.[4] Bank IDs and mobile certificates are Substantial under Finnish law.[3]
Can FTN be used for AML customer due diligence in Finland?
Yes. The anti-money laundering act, chapter 3, section 11, on remote identification, lists verifying the customer's identity with a strong identification means under Act 617/2009 as one option.[5]
Will FTN still work for KYC under the AMLR?
Article 22(6)(b) accepts eID means meeting the eIDAS Substantial or High requirements from 10 July 2027. FTN means are not EU-notified, so the article alone does not settle it; AMLA's final draft standards, not yet law, accept non-notified means, so in our reading FTN fits.[6][7]
Can foreigners use the Finnish Trust Network?
Only with Finnish bank credentials or a Finnish mobile certificate. The Finnish Authenticator app covers selected public services only, so private services need another route, such as a document check.[11]
Can minors sign in with FTN?
Some can. Banks set their own age rules; according to S-Pankki, it issues bank IDs from age 12. The citizen certificate on the ID card needs every guardian's consent.[12]
How long does an FTN integration take?
Lead times are not published, as of 5 October 2026. With a broker, its own onboarding schedule sets the lead time. Becoming a broker yourself means notifying NCSC-FI and submitting audit reports, valid for up to two years, so plan for re-audits.[1]
How do I test an FTN integration?
Test access comes through the broker you contract with. The broker register is public, but we found no published shared test environment, as of 5 October 2026.[1][3] Run real sign-ins covering success, cancellation, expiry and the document fallback, because a sandbox result does not prove a real bank sign-in.[15]
Sources
- Electronic identification, National Cyber Security Centre Finland, Traficom.
- Laki vahvasta sähköisestä tunnistamisesta 617/2009, Finlex, consolidated text after 811/2026.
- Register of identification services, Traficom, 16 June 2026.
- Overview of pre-notified and notified eID schemes under eIDAS, European Commission, read 5 October 2026.
- Rahanpesulaki 444/2017, Finlex, as amended by 818/2026.
- Regulation (EU) 2024/1624 (AMLR), Article 22, EUR-Lex.
- Final Report, draft RTS under Article 28(1) AMLR, AMLA, 30 September 2026.
- Reform of the gambling system, questions and answers, Ministry of the Interior.
- Suomalaisilta yritettiin huijata 148 miljoonaa euroa vuonna 2025, Finanssiala.
- Häiriö Suomi.fi-tunnistuksessa 17.9.2025, Suomi.fi.
- Identification means in Suomi.fi identification, Suomi.fi.
- Kansalaisvarmenne henkilökortilla, Digital and Population Data Services Agency (DVV).
- European Digital Identity Wallet, DVV.
- Mobiilivarmenne, joint site of the Finnish mobile operators.
- Finnish Trust Network integration, Didit documentation, read 5 October 2026.
Compare every national eID on the eID verification page, or start with what eID verification is.
One workflow for Finland and the Nordics
Add the eIDs your users already have and keep documents as the fallback.
Related articles
- Cl@ve integration in Spain: who can connect and what to use instead
- PhilSys verification: how businesses check the National ID
- OpenID4VP verifier guide: accepting the EUDI Wallet
- eIDAS regulation explained: what eIDAS 2 (2024/1183) changes
- Smart-ID API: a developer's guide to RP API v3
- National digital identity worldwide: models, leaders, standards