Short answer
Finantsinspektsioon distinguishes the two by putting them in different official record families and giving them different evidence.
An authorised-provider record appears in a defined register category and identifies the legal person, its official company number and—where the category requires it—the licence decision, decision date and authorised service scope. The verified , for example, appears under “Licensed creditors in Estonia” and states decision 4.1-1/35, dated 16 March 2016, with the scope “Granting of credit to consumer.”
An investor warning appears under “Investor alerts.” Its PDF is headed “Warning Notification,” identifies the person, website and available contact or registration details, and describes an “infringement or suspicion.” The verified warnings for and respectively state suspected provision of investment services without authorisation and granting credit without authorisation. Each directs the reader to Finantsinspektsioon's separate lists of companies holding its authorisation or allowed to provide services cross-border in Estonia.
The safe rule is:
Neither a name match nor mere appearance anywhere in the combined Finantsinspektsioon collection answers the authorisation question.
The authorised-provider entry contains an affirmative regulatory basis
The Creditstar record provides a concrete example of affirmative authorisation evidence. Its official path places the company in the “Licensed creditors in Estonia” category. The source record gives:
- corporate name: Creditstar Estonia AS;
- Estonian commercial-register number: 11251314;
- date of entry: 2 May 2006;
- activity-licence decision number: 4.1-1/35;
- licence-decision date: 16 March 2016; and
- authorisation scope: granting credit to consumers.
The register page also supplies address and contact details, but those do not establish permission to provide a regulated service. The legally useful distinction comes from the register category, decision and scope linked to the identified company.
Even that evidence should not be overgeneralised. A consumer-credit licence does not prove authorisation for investment, payment, insurance or another financial service. The page supports the stated activity in the capacity represented by that register entry.
An authorised provider may rely on a cross-border route
Finantsinspektsioon's warning wording expressly recognises two routes. It directs readers to companies that either:
- have authorisation granted by Finantsinspektsioon; or
- may provide services cross-border in Estonia.
That means “not found among domestic licence holders” is not the same as “unauthorised in Estonia.” A provider may appear in a cross-border services register on the basis of home-state authorisation and the applicable notification or passporting arrangement.
A proper check must therefore ask both:
- does Finantsinspektsioon list this exact legal person in an appropriate category; and
- what regulatory route and service scope does that category establish?
The answer should be phrased precisely—for example, “listed as a licensed creditor in Estonia” or “listed as permitted to provide the named service cross-border”—rather than the unqualified label “approved.”
An investor warning is an adverse alert, not an authorisation record
The , dated 4 June 2026, appears under the Consumer → Investor alerts path and links to an official bilingual warning PDF.
The PDF identifies:
- the name MiningRace / Miningrid L.L.C;
- websites
miningrace.comandminingrid.com; - an address in Dubai; and
- the infringement or suspicion as provision of investment services without authorisation.
The warning does not supply an activity-licence decision number or authorised scope. Instead, it tells the reader where the separate lists of authorised and cross-border providers can be found.
The , dated 9 January 2025, follows the same structure. It identifies LuxGold OÜ, Estonian registry code 14169398 and the carbank.ee website, then describes the infringement or suspicion as granting credit without authorisation. It too points readers to the authoritative provider lists.
These examples show that a warning is not merely a provider page carrying a negative status. It is a different official document with a different purpose, vocabulary and evidentiary structure.
Preserve the words “infringement or suspicion”
The warning template uses the heading “Rikkumine või selle kahtlus,” translated in the PDF as “Infringement or suspicion.” That qualification matters.
A faithful summary can say that Finantsinspektsioon warned the public and identified the specified suspected unlicensed activity. Unless the source supplies a final decision or sanction, the warning should not be rewritten as a conclusive judicial finding that every alleged act occurred.
The distinction is especially important where:
- the record lacks a registry number;
- the warning identifies a website or brand rather than a fully verified legal person;
- similar corporate or trading names exist;
- a website changes operator; or
- the entity later obtains, loses or changes authorisation.
The date and exact wording of the warning should remain attached to any downstream status.
The warning is activity-specific
The two verified warnings concern different regulated activities:
- MiningRace / Miningrid: investment services without authorisation; and
- LuxGold OÜ: granting credit without authorisation.
An investor warning should therefore be recorded with the activity it names. It does not automatically establish that the person is unauthorised for every possible activity, that every product offered is unlawful or that all related companies share the same status.
Likewise, a positive entry must be matched to the service being checked. A licence to grant consumer credit does not answer whether the same company may manage funds or provide investment advice.
How the Legalcode records expose the difference
The production Legalcode index preserves several machine-readable signals that help separate the record types.
The Creditstar entry is indexed as reference material. Its source category is “Licensed creditors in Estonia,” its source number is the commercial-register number, and its metadata includes an active authorisation status plus the licence decision number and date.
The warnings are indexed as warning documents under investor-alerts. Their source number is a source-native alert slug rather than a corporate identifier. Each warning is represented as one canonical alert event with two linked documents:
- the public alert page; and
- the attached official PDF containing the substantive warning.
This parent/attachment relationship should be used to avoid counting one warning twice. The page establishes the public alert, date and attachment; the PDF supplies the detailed identity table and the described infringement or suspicion.
Raw internal fields are useful for search and deduplication, but a reader-facing conclusion should cite the official category, company identifier, licence decision and scope—or the alert date, named subject, website and warning language.
Why ACTIVE cannot be treated as “authorised”
Both provider records and warning documents may carry an indexed status of ACTIVE. The meaning is record-specific.
For a provider record, separate authorisation metadata and the official licence fields can support an authorisation conclusion. For an investor warning, ACTIVE describes the warning document's indexed status. It does not transform the warned-about person into an authorised provider.
An implementation that maps every active Finantsinspektsioon record to authorised = true would reverse the meaning of the warning collection. At minimum, the system must distinguish:
- document type;
- source category;
- authorisation status, if separately populated;
- licence or decision fields;
- authorised service scope; and
- alert activity and publication date.
A reliable comparison workflow
When checking a name that appears in Finantsinspektsioon material:
- Resolve the legal person. Match the commercial-register or foreign identifier where available, not only the display name.
- Match the website and trading name. Warnings often identify the site through which the suspected activity occurred.
- Classify the page. Determine whether it is a provider register entry, investor alert, enforcement decision, guidance page or terminal error page.
- Record the category. Preserve “Licensed creditors in Estonia,” the relevant cross-border category or
Investor alerts. - For a positive entry, verify the regulatory basis. Read the decision number, date, current status and exact service scope.
- For a warning, quote the proposition accurately. Preserve “infringement or suspicion,” the activity, warning date and named websites.
- Check both domestic and cross-border lists. Absence from one category is not a complete authorisation search.
- Look for later events. A warning and an authorisation record are dated evidence; regulatory status can change.
- Use one alert event, not two documents, for counts. Link the page and PDF rather than double-counting them.
- Retain the official URLs and verification date. The indexed copy is a research layer, not a substitute for a current official check.
Common incorrect conclusions
The verified record structure rules out several shortcuts:
- “It appears on the Finantsinspektsioon website, so it is authorised.” False. Investor warnings appear there too.
- “Its indexed status is active, so its licence is active.” False for warning documents; document status and authorisation status are different.
- “It is absent from domestic licence holders, so it cannot serve Estonia.” Incomplete. Check the relevant cross-border category.
- “A warning proves a final infringement.” Too strong where the document says “infringement or suspicion.”
- “The same name means the same person.” Unsafe without identifiers, websites and other matching evidence.
- “One licence covers all finance activities.” False. Read the stated category and scope.
Authority, currentness and MCP audit
The official Finantsinspektsioon pages are the primary evidence of what the authority published. The Creditstar page's source text reports that the entry was last changed on 20 February 2026. The indexed publication/listing date remains 11 May 2023, so it must not be presented as the latest verification date; that known metadata problem is tracked in .
The production MCP search returned the Creditstar record as a single provider entry and returned warning candidates with explicit canonical-event and attachment relationships. Five exact records were fetched and their authenticated full-text downloads checked: one provider entry, the two warning pages and their two official PDF attachments. Every production bypass call charged zero.
The substantive provider and warning information was complete and the warning page/PDF relationships were correct. One new ingest-quality defect was found: the Creditstar provider download continues past the legal and business fields into the register iframe's sendHeight JavaScript, including its domain allowlist and postMessage implementation. That non-content template code can pollute search and embeddings. It is tracked in .
Other previously identified Finantsinspektsioon limitations remain relevant: terminal “Subject not found” pages may be indexed as active provider records (), and the advertised source-category facet cannot currently be enumerated (). A fetched body must therefore be checked before relying on a candidate as a real provider.
Personal identification numbers appearing in source warning PDFs are intentionally omitted here. The authority's publication does not remove the need for accurate identity matching, proportional use and current verification.
Conclusion
Finantsinspektsioon distinguishes authorisation from warning through the record's official category and evidence. A positive register entry identifies the legal person and regulatory capacity and, where applicable, gives the licence decision, date and service scope. An investor warning identifies the person or website, describes an infringement or suspicion involving a specific unlicensed activity and directs the reader to the separate authorised and cross-border lists.
The correct conclusion is never “the name appears in the FI collection.” It is either a narrowly sourced positive proposition—this identified provider is listed in this capacity for this service—or a dated warning proposition—Finantsinspektsioon warned the public about this named person or site and this suspected activity on this date.
Sources and audit issues
This article provides general legal information, not advice for a specific matter. Laws, facts and procedural deadlines may change the result. Follow the linked primary sources and obtain local advice before acting.