Summary

What the decision actually ordered

The decision document FI published on 17 December 2025 at 08:00 opens with two numbered points: Finansinspektionen gives Svea Bank AB a remark, and Svea Bank AB shall pay a sanction fee of SEK 170,000,000 (https://www.fi.se/contentassets/d388bf1d1d1c47a1ac5dff513567510c/beslut-svea.pdf). That is the whole operative part. FI's legal powers include ordering remediation — the decision text itself records förelägga att vidta rättelse as an available option — but FI chose the remark-plus-fee combination, noting the maximum fee of about SEK 627 million (10% of group turnover of roughly SEK 6,271 million for 2024), that no quantifiable gain was identified, and that Svea's argument that its completed corrective measures justified non-intervention was rejected (https://www.fi.se/contentassets/d388bf1d1d1c47a1ac5dff513567510c/beslut-svea.pdf).

The findings behind the fee came from an investigation opened in May 2023 covering 30 April 2022 to 1 May 2023, limited to legal-person customers. FI reviewed 70 corporate customer files, 11 of them high-risk, and found failures in general risk assessments, beneficial-owner checks, information on the purpose and type of business relationships, and enhanced due diligence on high-risk customers; in 38 of 70 cases the mandatory check of the Bolagsverket beneficial-owners register was not performed (https://www.fi.se/contentassets/d388bf1d1d1c47a1ac5dff513567510c/beslut-svea.pdf, https://www.fi.se/sv/publicerat/granskningar/undersokningar/undersokningar-lista/2025/fi-avslutar-undersokning-av-svea-bank/).

What has happened since

The post-decision record, as of the latest public data, is thin in a specific, verifiable way. FI's rolling list of AML sanctions against supervised firms still lists the Svea Bank item at 17 December 2025; the entries after it are Norion Bank (2026-05-28) and Ikano Bank (2026-06-17), and no later Svea-specific follow-up, remediation order or appeal notice appears in that listing (https://www.fi.se/sv/bank/penningtvatt/sanktioner-mot-foretag-under-fis-tillsyn/). FI's own investigation-closure page for Svea Bank shows the same outcome and no subsequent update (https://www.fi.se/sv/publicerat/granskningar/undersokningar/undersokningar-lista/2025/fi-avslutar-undersokning-av-svea-bank/).

Svea Bank's own comment, issued the same day and attributed to CEO Lennart Ågren, said the bank would read and analyse the decision and promptly take any remaining measures, stressed heavy prior investment in AML organisation, routines and systems, and stated that the decision does not change its offering. Notably, it did not announce an appeal (https://via.tt.se/ir-files/2899986/4193396/4486/Ladda%20ned%20som%20PDF.pdf).

The word "appeal" does belong in Svea's history — but attached to a different matter. In July 2022 the bank's board decided to appeal FI's 21 June 2022 decision (a remark plus SEK 45 million) concerning consumer-credit assessment, to obtain legal clarity (https://via.tt.se/pressmeddelande/3327098/svea-bank-overklagar-finansinspektionens-beslut?publisherId=2899986). The administrative court annulled that decision on 14 November 2023 (mål 15051-22); the Stockholm County Administrative Court reinstated FI's decision on 25 September 2024 (mål 7294-23) (https://www.fi.se/contentassets/d7f2a5aa190e468190ade1aaf1562c2d/stockholm-kr-7294-23-dom-2024-09-25.pdf); and the Supreme Administrative Court refused leave to appeal on 13 December 2024 (mål 6003-24), leaving the kammarrätten judgment standing (https://www.fi.se/contentassets/d7f2a5aa190e468190ade1aaf1562c2d/beslut-hfd-svea-bank.pdf). That chain establishes that Svea does litigate FI sanctions. It is not an appeal of dnr 23-13249, and treating it as one would be a category error.

What this adds beyond prior coverage

Prior BTW coverage of the Svea abuse-contact object established the two-channel structure: a registry abuse contact validated annually for technical deliverability only, and a regulatory sanction that verifies signal rather than remedy. This briefing adds the post-decision delta: three months on, neither channel has produced a documented remediation.

The registry channel is unchanged in the public record — the legacy block 193.105.138.0/24 (netname SVEA-EKONOMI-SE, announced by AS211899) still displays a shared, carrier-era abuse mailbox on the Verizon Business/UUNET lineage, with no public source showing it processed a single report for this block. The regulatory channel has not escalated either: no follow-up enforcement and no remediation order appear in the public lists as of the latest observed data.

Svea's account that its corrective measures were "closed as planned", validated by internal audit and reported to FI, is self-reported and not independently verifiable from public sources; FI's decision explicitly declined to treat completed measures as a reason to abstain from intervening (https://www.fi.se/contentassets/d388bf1d1d1c47a1ac5dff513567510c/beslut-svea.pdf, https://via.tt.se/ir-files/2899986/4193396/4486/Ladda%20ned%20som%20PDF.pdf).

Evidence boundaries

The absence of an appeal or follow-up rests on FI's sanctions list, FI's investigation pages and Svea's press releases as captured in this research; a later action not listed there cannot be excluded, and FI's formal register of supervisory decisions was not directly fetched in the research session. Svea's internal remediation status cannot be independently verified. Neither absence is claimed as proof that nothing exists — only that the public record, at the latest observable point, documents signals without documented remedy.

References: