Estonia has successfully strengthened its regulatory framework through various economic and financial crimes crises over the years, but alongside these stricter rules, the country’s procedural environment has undergone a significant shift. According to attorney-at-law Karmen Turk, current administrative practices no longer conform to good governance and professional practice, instead acting as a major deterrent to international companies looking to establish operations in the Baltic nation.
No one within the legal or corporate sectors is disputing the fundamental requirement that a licensed gambling operator must actively combat money laundering. The law explicitly requires it, and robust oversight is a necessary pillar of the modern financial ecosystem. However, the core question facing policymakers and regulators lies elsewhere: do Estonia’s administrative rules genuinely prevent money laundering, or do they primarily function as an artificial barrier keeping new companies from entering the Estonian market? Unfortunately, the practical experience of the past year points increasingly toward the latter outcome.
The recently amended Remote Gambling Tax Act has brought into sharp focus the international opportunities available for financing Estonia’s state budget, particularly when it comes to supporting domestic sports and cultural initiatives. The commercial and legal environment in Estonia could theoretically be highly attractive for international entities, given that the foundational purpose of an Estonian remote gambling license is straightforward: to bring tax revenue earned elsewhere into a digitally advanced, transparent economy. International remote gambling operators do not target domestic Estonian players. Their customer bases are spread out across other countries around the globe.
However, holding an Estonian license means that the taxes generated by their global activities are paid directly into the Estonian state treasury, funding local sports and cultural programs. Every single license successfully brought into Estonia represents a clear victory for national culture and athletics, achieved without increasing the prevalence of gambling within the domestic population. To achieve this revenue-generating goal, however, companies actually need to navigate the licensing process and establish a presence in the country.
What is deterring these prospective corporate citizens today? The simple answer, according to legal experts, is a pervasive, fear-driven regulatory culture that diminishes the legal and economic opportunities originally created by Estonia’s progressive legislation. In practice, every applicant is treated primarily as an inherent risk rather than a legitimate business partner.
To explain the mechanism in more detail, a gambling operating license is formally issued by the Estonian Tax and Customs Board (MTA), but it must first receive prior approval from the Financial Intelligence Unit (FIU). Under the procedural framework, the applicant must submit its internal anti-money laundering regulations, formally appoint a designated person who will act as the primary point of contact for the FIU—commonly referred to as the contact person—and submit comprehensive documentation concerning its ultimate beneficial owners and corporate managers. Companies that were already operating prior to the rule changes must meet these rigorous new requirements by January 1, 2027, at the latest.
In effect, remote gambling operators are now regulated under the exact same stringent framework applied to traditional financial institutions and cryptocurrency firms. While the broad societal purpose behind stricter rules is entirely understandable and widely supported, the core problem lies in how these regulations are interpreted and applied in day-to-day administrative practice.
The Contact Person Must Work in Estonia
Under the current legal interpretation, the designated contact person must be working on a permanent, physical basis within Estonia. The FIU’s official training materials even go so far as to state that "the entire department should be located in Estonia." In addition to this strict geographical constraint, the contact person must possess suitable higher education, specialized professional experience, and an impeccable reputation, while the FIU retains the absolute authority to approve or reject their appointment.
What does this specific regulation mean for a major international company? Typically, the corporate professionals responsible for an operator’s anti-money laundering controls work in the exact same centralized location as its specialized information technology and payment processing teams—such as in financial hubs like Latvia, Italy, or Malta. In order to successfully secure an Estonian license, however, the enterprise must locate and hire someone who physically works in Estonia, deeply understands the unique risks of the global gambling sector, and successfully passes the rigorous scrutiny of the FIU.
Furthermore, the FIU has indicated that a single individual may serve as the designated contact person for no more than two distinct companies, and must also have a qualified replacement readily available during vacation periods and extended leaves. In reality, this means that a single contact person is mathematically and operationally insufficient; two separate experts meeting the exact same stringent criteria are required. Given that Estonia is a small labor market with a limited population, there are very few such specialized compliance professionals available. Consequently, this requirement functions not merely as a regulatory formality, but as a genuine, insurmountable barrier to market entry.
The physical location of where the contact person sits says nothing substantial about the actual quality or integrity of their professional work. Notably, the FIU’s own updated guidelines do not even mention physical location as a prerequisite. Instead, they require that the contact person report directly to the corporate management board, maintain professional competence, and have uninterrupted access to all necessary data at all times. The guidelines even state that an entire corporate department can serve as the contact person. None of these critical conditions depend on a specific national territory.
On the contrary, actual operational knowledge and oversight control are often far more effective when compliance teams are physically situated "close" to the core business operations and transaction flows themselves. According to the FIU’s own statistical data, the sector’s real vulnerability lies not in geography, but in the accurate detection of suspicious transactions. In 2025, for instance, only about 14 percent of submitted reports were related to genuine, verified suspicions, while nearly 94 percent of all regulatory reports originated from just about a tenth of all active companies.
This systemic problem is best resolved by implementing a sophisticated, high-performing transaction monitoring system and employing a skilled, experienced compliance team, regardless of whether the contact person sits at a desk in Tallinn or in Rome. If a company’s existing international compliance team is vastly superior to an individual specialist available locally in Estonia, the state’s rigid geographic requirement may in practice weaken, rather than strengthen, overall financial controls.
This situation also raises significant questions regarding European Union law. Companies holding Estonian licenses frequently belong to larger corporate groups managed in other EU member states and primarily serve foreign consumer markets. The European Union guarantees its businesses the fundamental freedom to operate and provide cross-border services across member states. While the European Court of Justice has historically permitted individual national governments to restrict gambling operations, it has stipulated that such restrictions must rest on solid, demonstrable grounds, genuinely help achieve their stated policy objective, be applied with absolute consistency, and avoid going any further than strictly necessary.
Estonia’s strict location requirement appears highly questionable when measured against the last two conditions. First, the policy lacks internal consistency: according to the FIU’s own regulatory guidelines, customers originating from other EU member states are evaluated as presenting a lower risk profile, yet a fully qualified compliance specialist working in another EU country is treated as an unacceptable risk. Second, far less restrictive solutions readily exist. It would be entirely sufficient for the designated contact person to remain available at all times, communicate fluidly with the FIU in Estonian, and ensure that the authority maintains uninterrupted access to all relevant transaction data.
In addition, a uniform EU-wide anti-money laundering regulation is scheduled to take effect across member states on July 10, 2027. It is therefore entirely appropriate to question whether Estonia’s additional, gold-plated national requirements—which the European Union does not demand—are truly necessary or sustainable moving forward.
Documents Must Be in Estonian
The second major administrative obstacle encountered by prospective market entrants is the strict language requirement enforced by authorities. According to the direct operational experiences of international companies, the FIU routinely requires that all internal compliance rules, operational manuals, and related corporate documents be fully translated into Estonian.
While it is entirely natural and expected that official communication between a licensed company and the regulatory authority should take place in the national language, an international enterprise’s internal rules serve as an everyday, practical working tool. They are actively consulted and utilized by employees operating across various countries and jurisdictions, and are consequently drafted in a language that all relevant personnel can understand—typically English.
If a company is forced to prepare a separate, dedicated Estonian-language version specifically for local compliance purposes, it invariably creates two distinct documents: one that is actually used in day-to-day business operations, and another that exists merely to be presented to the regulatory authority upon request. This administrative practice directly contradicts the FIU’s own stated objectives. The FIU explicitly aims to verify whether internal compliance rules are genuinely integrated into daily operations or if they exist solely on paper.
Furthermore, the FIU’s own updated guidelines state clearly that internal rules must be easily understandable to all employees and accurately describe what the company actually does in practice. Regarding customer-facing documentation, the guidelines themselves explicitly recommend avoiding unnecessary translation costs and delays if the original records are already maintained in a comprehensible international language, such as English. Notably, there is no formal requirement within the guidelines mandating that internal operating rules be drafted in Estonian. Ultimately, the rigid obligation to translate internal working documents does nothing substantive to help combat money laundering.
A Procedure Whose Duration and Outcome Are Unknown
The uncertainty surrounding licensing procedures extends far beyond document translation. In 2024, the Estonian Chancellor of Justice formally examined the FIU’s licensing and authorization procedures and identified several systemic problems.
First, the FIU frequently fails to formally notify applicants when all of their submitted application documents are deemed to be in proper order. As a direct result, corporate applicants are left entirely in the dark, unable to determine when the statutory 60-day legal deadline for making a final administrative decision actually begins to run.
Second, during the course of mandatory vetting interviews, applicants are sometimes informally advised by officials to replace specific individuals—such as the designated contact person, an owner, or a management board member—or to voluntarily withdraw their entire application altogether. Crucially, these critical evaluation interviews are not formally logged in written meeting minutes.
Based on the documented experiences of several international companies throughout 2026, these high-stakes interviews have reportedly lasted for hours, with three to four state officials simultaneously questioning a single corporate representative. For any foreign enterprise planning substantial capital investments in Estonia, this profound level of administrative uncertainty sends the worst possible signal.
While an official, written refusal can be formally challenged and reviewed in a court of law, if the ultimate outcome of a multi-million-euro licensing procedure depends on informal interviews that leave no official paper trail or minutes, corporate leaders will simply choose to invest in alternative European jurisdictions where the legal procedures are clear, transparent, and predictable.
Rules Must Be Based on Actual Risks
The Estonian state is already well aware of the genuine risks present within the financial and gambling sectors. According to the official national risk assessment, the potential money laundering risk posed by remote gambling operators is categorized as high, primarily because Estonian licenses are utilized predominantly to serve foreign customers, while business partners and payment processors are frequently located abroad.
The FIU rightly focuses its investigative attention on critical indicators such as the origin of funds, the deployment of front persons, the suspicious splitting of transactions, and the use of cryptocurrencies. These are unquestionably the right operational issues to target. However, requiring a contact person to live physically within the borders of Estonia or mandating that internal compliance manuals be written in the Estonian language does absolutely nothing to counter these sophisticated financial crime risks.
What is genuinely needed to protect the financial system is robust transaction monitoring, rapid and secure information exchange between entities, and continuous access to underlying data for the FIU. The latter safeguard is already fully guaranteed by existing legislation, even in scenarios where corporate servers and data storage facilities are located abroad.
The law itself explicitly demands regulatory proportionality, meaning that the scope and intensity of administrative controls must correspond directly to the actual level of risk and remain reasonable. The exact same principle should logically apply to the state when it decides what administrative burdens to impose on a new market entrant. Furthermore, the legal penalties for non-compliance are already exceptionally severe, with administrative fines of up to one million euros hanging over companies for violating internal rules requirements.
Estonia does not have to choose between maintaining strict, uncompromising anti-money laundering controls and fostering an attractive regulatory framework designed to generate crucial tax revenue. However, the ultimate success of these state controls must be measured objectively by whether they successfully intercept and stop suspicious money flows. Neither a physical office address located on a street in Tallinn nor the specific human language used in a corporate compliance manual demonstrates that financial crime is being prevented.
