Inpay faces Danish restriction on new online gambling clients over AML

Inpay A/S is facing a temporary restriction from Denmark’s Financial Supervisory Authority, Finanstilsynet, concerning the establishment of new business relationships with online gambling companies. The measure follows an AML inspection conducted in March 2026, during which the regulator identified what it described as serious breaches of Denmark’s anti-money laundering legislation.

The decision does not prevent Inpay from continuing to serve gambling-sector customers it already has relationships with. It also does not represent a withdrawal of the company’s Danish authorisation. Instead, the restriction is focused specifically on accepting new corporate customers within the online gambling sector until the regulator is satisfied that the identified shortcomings have been addressed.

The development places renewed attention on compliance controls supporting gambling-related payment flows, particularly where businesses operate across multiple jurisdictions and involve complex ownership arrangements.

Finanstilsynet issues formal order

According to the formal decision, Finanstilsynet issued its order on 17 August 2026 following the March inspection. Inpay had already informed the regulator that it had voluntarily stopped establishing new business relationships with online gambling companies.

The regulator’s decision requires that this halt remain in place until Inpay can demonstrate that the serious AML deficiencies identified during the inspection have been resolved. The restriction therefore operates as a corrective supervisory measure rather than a general prohibition on the company’s payment activities.

Finanstilsynet’s action focuses on the adequacy of Inpay’s customer due diligence and transaction monitoring arrangements. The regulator concluded that the company had not been able to document sufficient procedures for managing risks connected to its online gambling customer base.

For businesses operating in regulated financial services, such supervisory measures can have significance beyond the immediate customer onboarding process. Effective AML controls are expected to remain operational as a relationship develops rather than being limited to checks performed when a client first enters into a business relationship.

Areas of compliance concern

The inspection identified weaknesses in several aspects of Inpay’s approach to customer monitoring. Finanstilsynet highlighted the need for stronger due diligence when relevant circumstances surrounding a customer change as well as more robust assessments of high-risk relationships.

Ongoing transaction monitoring was another area of concern. The regulator’s findings indicate that Inpay was not able to demonstrate that its controls were consistently sufficient for the risk profile associated with its online gambling customers.

Customer circumstances can change significantly over the life of a financial relationship. Ownership structures may be revised, licences can change, business activities can expand into new markets and transaction patterns can develop in ways that require a reassessment of risk. AML frameworks therefore depend on continuous review and not solely on initial onboarding procedures.

The regulator also pointed to the use of complex corporate structures and cross-border business activity involving multiple countries. Such characteristics do not by themselves establish unlawful conduct, but they can increase the level of scrutiny required from regulated financial institutions under a risk-based compliance framework.

Why online gambling receives particular attention

Payment services connected with online gambling can involve high transaction volumes, international customers and activity spanning several regulatory jurisdictions. The combination can make effective customer due diligence and monitoring especially important for financial institutions supporting the sector.

Finanstilsynet stated that a significant portion of Inpay’s transaction volume was connected to corporate customers in the online gambling sector. Many of those customers were based outside Denmark and some were located outside the European Union.

The regulator also said that Inpay did not have insight into deposits made by the gambling operators’ end users. That limitation was relevant to Finanstilsynet’s assessment of the risks surrounding the company’s payment relationships.

From a supervisory perspective, visibility over relevant payment activity can be important when evaluating whether a customer’s transactions are consistent with its declared business model. Where a payment provider has limited information about the underlying flow of funds, its ability to identify unusual activity or assess potential risks may be reduced.

Risk of exposure to unlicensed activity

Finanstilsynet’s concerns extend beyond conventional money laundering controls. The authority said the weaknesses identified in Inpay’s customer due diligence and transaction monitoring created a real and material risk that the company could support illegal gambling operations or unlicensed payment services.

That finding does not mean that Inpay or its customers were determined to have engaged in such conduct. Rather, it reflects the regulator’s assessment of the risks created by gaps in the systems used to identify and manage potentially problematic relationships.

The distinction is important in understanding the nature of the decision. A supervisory order based on inadequate controls is not the same as a finding that criminal activity occurred. The stated regulatory objective is to ensure that the institution has effective safeguards capable of identifying and managing risks before those risks can translate into prohibited activity.

For regulated payment companies, this places substantial importance on the ability to demonstrate that compliance procedures operate effectively in practice and can be adapted when a customer’s risk profile changes.

Inpay continues serving existing gambling customers

The restriction is targeted at new online gambling relationships. Existing gambling customers are not covered by the onboarding halt described in the decision, allowing Inpay to continue its established business relationships while the compliance deficiencies are being addressed.

This distinction is commercially relevant because the gambling sector forms a significant part of Inpay’s transaction activity. A restriction limited to new customers can therefore allow existing payment operations to continue while the institution works through the supervisory remediation process.

Inpay is a Danish payment institution headquartered in Copenhagen and authorised under Denmark’s payments legislation. The company provides cross-border payment services to several sectors, including financial services, corporate customers non-governmental organisations and iGaming businesses.

The company’s public materials also describe its focus on international payments and compliance controls. The current regulatory action demonstrates why statements about compliance capabilities must be supported by documented procedures, effective monitoring and demonstrable implementation across relevant customer relationships.

What Inpay must now demonstrate

The central issue for Inpay is remediation. Under the order, the restriction can remain in force until the company provides evidence to Finanstilsynet that the serious breaches identified by the regulator have ceased.

That process is likely to require attention to customer due diligence, risk classification, enhanced scrutiny of higher-risk relationships and ongoing monitoring. It may also require changes to internal governance, documentation and escalation procedures where existing controls do not provide sufficient visibility into customer activities.

An effective remediation process generally involves more than updating written policies. Supervisors typically expect firms to demonstrate that the revised framework is operating effectively and that employees and systems can apply it consistently.

For Inpay, the regulatory test will therefore centre on whether the shortcomings identified during the inspection have been addressed in a way that provides Finanstilsynet with sufficient assurance.

Wider implications for payment firms

The Inpay case also illustrates the growing importance of the infrastructure surrounding regulated gambling payments. Oversight is not limited to gambling operators themselves. Payment institutions, banks and other financial intermediaries can become subject to close scrutiny when they provide services to businesses operating in higher-risk sectors.

The focus on customer monitoring and risk assessment is consistent with the broader principle of risk-based AML supervision. Financial institutions are expected to understand the particular risks associated with their business relationships and apply controls proportionate to those risks.

Cross-border operations can make that responsibility more complex. Payment providers may work with businesses incorporated in one jurisdiction while processing transactions connected to users, payment accounts or service providers in several others. The resulting compliance environment can require detailed information about ownership, licensing status, business activities and transaction patterns.

A compliance-focused path forward

For Inpay, the immediate regulatory priority is clear: demonstrate that the deficiencies identified by Finanstilsynet have been corrected. Until that point, the company remains restricted from establishing new corporate relationships within the online gambling sector under the regulator’s order.

The decision should also be viewed in its proper legal and regulatory context. Finanstilsynet’s action concerns deficiencies in AML compliance controls and the risks that the regulator believes those deficiencies create. It should not be interpreted as a determination that Inpay or its existing customers have committed criminal offences.

The case highlights the importance of continuous compliance in international payments. As financial flows become increasingly cross-border and digitally connected, regulators are placing greater emphasis on whether payment providers can identify customers, understand their risk profiles and monitor activity throughout the relationship.

For the wider gambling and payments industries, the message is equally significant. Strong market access depends not only on payment technology and commercial reach but also on the ability to maintain reliable compliance systems under regulatory scrutiny.

Conclusion

The regulatory action against Inpay represents a targeted intervention focused on new online gambling customer relationships rather than a suspension of the company’s wider payment operations. Finanstilsynet’s March 2026 inspection identified serious AML compliance shortcomings involving customer due diligence, risk assessment and ongoing monitoring. The subsequent order requires Inpay to demonstrate that those deficiencies have been corrected before it can resume onboarding new corporate customers in the online gambling sector.

The outcome will ultimately depend on the effectiveness and demonstrability of Inpay’s remediation work. For the company and for other payment providers serving gambling businesses, the case reinforces a central principle of regulated finance: compliance must extend throughout the customer relationship and must be capable of addressing risks created by international structures, changing customer circumstances and complex payment flows. The regulatory focus is therefore likely to remain firmly on evidence, controls and the practical effectiveness of AML safeguards.

FAQs

Why has Inpay been restricted from taking on new online gambling clients?
Finanstilsynet imposed a temporary restriction after identifying serious shortcomings in Inpay’s AML controls during an inspection conducted in March 2026.

Does the restriction apply to Inpay’s existing gambling customers?
No. The order concerns the establishment of new corporate customer relationships within the online gambling sector. Existing gambling customers are not covered by the restriction.

Has Inpay lost its Danish payment authorisation?
No. The regulatory action described by Finanstilsynet is a targeted restriction on new online gambling relationships and is not a revocation of Inpay’s authorisation.

When did Finanstilsynet conduct the inspection?
The inspection took place in March 2026. The formal supervisory decision was issued on 17 August 2026.

What AML weaknesses did Finanstilsynet identify?
The regulator identified shortcomings involving customer due diligence when circumstances changed, assessments of higher-risk gambling relationships and ongoing transaction monitoring.

Why are international gambling customers relevant to the case?
Finanstilsynet noted that many of the relevant customers were located outside Denmark and in some cases outside the European Union. The regulator also considered complex ownership structures and cross-border activity.

Did Finanstilsynet find that Inpay committed a criminal offence?
The regulatory decision concerns AML compliance deficiencies and the risks arising from those deficiencies. It should not be interpreted as a finding that Inpay committed a criminal offence.

What must Inpay do to have the restriction lifted?
Inpay must provide evidence to Finanstilsynet demonstrating that the serious AML breaches identified by the regulator have ceased and that the relevant compliance deficiencies have been addressed.

Can Inpay continue providing payment services to other sectors?
The order is specifically directed at establishing new corporate relationships within the online gambling sector. Inpay continues to operate across other areas of its payment business.

What does the case mean for payment providers serving gambling companies?
The case highlights the importance of strong customer due diligence, risk assessment and ongoing monitoring, particularly where payment relationships involve international operations and potentially higher-risk activities.