Summary

When a company disappears into a merger, its obligations do not. Swedish regulator Finansinspektionen has now said so twice from the supervisory side. On 21 June 2022 it imposed a remark and a SEK 45 million sanction over Svea Ekonomi AB's credit assessments — directed at Svea Bank AB, because, as the regulator put it, the bank had taken over Svea Ekonomi's obligations after the merger. That decision was annulled by the förvaltningsrätten, Finansinspektionen appealed, and the kammarrätt upheld the regulator's decision, with finality reported in 2024. https://www.fi.se/sv/publicerat/sanktioner/finansiella-foretag/2022/svea-bank-far-anmarkning-och-sanktionsavgift/ More recently, on 17 December 2025, the same authority imposed a remark and a SEK 170 million sanction on Svea Bank AB for breaches of central parts of the anti-money-laundering rules, restating in its background that the parent Svea Ekonomi AB had merged into Svea on 3 January 2022 and that all of its activity continued in the bank. https://fi.se/contentassets/d388bf1d1d1c47a1ac5dff513567510c/sanktionsbeslut-svea-bank-ab.pdf https://www.fi.se/sv/publicerat/sanktioner/finansiella-foretag/2025/svea-bank-far-en-anmarkning-och-en-sanktionsavgift/ https://fi.se/contentassets/d7f2a5aa190e468190ade1aaf1562c2d/beslut-svea-bank.pdf

So at the level of regulated obligations, the accountability question has a regulator-confirmed answer: the survivor is responsible.

The registry record has not kept the same pace. AS211899, whose as-name is simply "SVEA", is registered to Svea Bank AB through organisation object ORG-SBA155-RIPE, created on 2 February 2021 and last modified on 13 May 2022. http://whois.ipip.net/AS211899 https://sitezilla.org/asn/211899 But the person object JE4899-RIPE — Jorgen Edstrom, listed as both admin-c and tech-c of the autonomous system — still carries the address "Svea Ekonomi AB", and mirror renderings show it was last modified on 11 April 2022. The dissolved company's name has therefore sat in that field for over three years after the merger. http://whois.ipip.net/AS211899 https://ip.cc/topic/asn/AS211899/ https://sitezilla.org/asn/211899

What a reporter actually sees depends on which surface renders the record. Several mirrors print a computed line naming an individual Svea.com address as the abuse contact — an individual's mailbox rather than a role account — while the organisation object itself references a role handle, abuse-c SEAR1-RIPE. https://ipgeolocation.io/browse/asn/AS211899 https://sitezilla.org/asn/211899 The contents of the SEAR1-RIPE role object were not retrievable in the research for this briefing, so the actual role mailbox behind the handle remains unverified. This matters because the two surfaces imply different respondents: a role account designed to be staffed, versus a named individual. The RIPE NCC's own published guidance describes abuse-c role objects as the mechanism for receiving and processing reports of unacceptable use — a guarantee, on its face, about registration, not about answering. https://www.ripe.net/manage-ips-and-asns/resource-management/abuse-c-information/ https://docs.db.ripe.net/Types-of-Queries/Abuse-Contacts/

Two further details compound the picture. First, the only IPv4 route AS211899 announces, 193.105.138.0/24, appears in mirror renderings with its origin labelled Svea Bank AB but its underlying object belonging to Svea Billing Services AB — a fourth differently named Svea entity in the same contact surface. No public source names which entity is the first responder for that prefix. https://ipgeolocation.io/browse/asn/AS211899 Second, the mirrors themselves disagree: some show ORG-SBA155-RIPE last modified on 1 December 2022, others on 13 May 2026. Both cannot be right, and the discrepancy demonstrates why mirror renderings cannot substitute for primary registry inspection — a limitation this briefing carries openly, since the primary RIPE query did not return content during research and every registry-state fact here rests on attributed third-party mirrors. https://apps.db.ripe.net/db-web-ui/query?searchtext=AS211899 http://whois.ipip.net/AS211899 https://ip.cc/topic/asn/AS211899/ https://sitezilla.org/asn/211899

One reading trap deserves explicit mention. A redacted mirror substitutes DUMY-RIPE for the named contacts under RIPE personal-data redaction. That is a redaction artefact, not a withdrawal or reassignment of the Svea contacts, and it should not be counted as evidence of anything. https://radar.qrator.net/as/211899/whois