When the Network Goes Down: How the Nordics Are Building Resilient Payments

Executive summary

Nordic payment markets combine very high digital adoption with low reliance on cash. That efficiency creates a resilience challenge: if telecommunications, card infrastructure, a bank, a processor or another critical dependency becomes unavailable, the ability to buy essential goods can be impaired even when customers have sufficient funds. Central banks and market participants are therefore moving from institution-level business continuity toward end-to-end payment preparedness.

The four markets examined here pursue the same objective through different architectures and at different maturity levels. Denmark and Sweden now have operational offline-card arrangements focused on essential purchases. Finland combines an offline-card development project with statutory national backup arrangements for daily payments. Norway is implementing a broader preparedness model spanning consumers, merchants, banks, communications, clearing and settlement, and cash. The maturity rating in the table below is our own qualitative assessment based on three criteria:

• operational status (live versus in development),
• breadth of coverage across instruments, merchants and the wider payment chain, and
• evidence from real incidents or structured testing.

Five conclusions at a glance

• Resilience is becoming a payment-product requirement, not only a Business Continuity Management (BCM) requirement.
• There is no single Nordic model: each market combines different layers of redundancy.
• Offline capability preserves commerce by accepting bounded financial and fraud risk for a limited period.
• Merchants and POS infrastructure are as important to continuity as banks, schemes and processors.
• The agenda is expanding beyond cards toward mobile and account-based alternatives, linking operational resilience with payment sovereignty.

Digital payments are efficient – but they are also dependent

Across the Nordic countries, paying has become almost frictionless. Cards, mobile wallets and account-based solutions dominate everyday commerce, while cash plays a much smaller role than it did only a few years ago. This is convenient in normal times. But it also creates a strategic question for banks, merchants and authorities: what happens when the network goes down?

A cardholder may have sufficient funds, the merchant may be open, and the terminal may still have power, yet the transaction can fail because the terminal cannot reach an acquirer, card network or issuing bank. The same problem can arise from a telecommunications outage, cyberattack, processor failure, power disruption or damage to critical infrastructure.

From recovery to degraded-mode operation

Traditional continuity planning often concentrates on restoring a failed service. Payment preparedness adds another objective: the ability to keep critical payments working in a deliberately degraded mode while parts of the normal chain remain unavailable.

Offline mode: local acceptance is bounded; forwarding, account posting and settlement follow after connectivity returns.

How offline card payments work

Sweden’s model provides a clear example. The customer inserts a physical card and enters the PIN. If the card supports the relevant offline functionality, its EMV chip can authorize the purchase locally within defined parameters without contacting the acquirer or issuer. The terminal stores the accepted transaction. When communications recover, the transaction is submitted through the normal chain for funding, account posting and settlement.¹ Local acceptance does not, however, guarantee that the transaction will ultimately be funded: if the account turns out to have insufficient funds, the resulting loss falls on the issuer or the merchant, depending on the applicable scheme and contractual rules.

EMV – originally Europay, Mastercard and Visa – is the global chip-card technology framework. In an offline scenario, issuer-configured card and terminal parameters can determine whether a transaction is allowed to proceed without real-time issuer authorization.

Online versus offline contingency

The central risk trade-off

A customer could theoretically make purchases at several merchants during an outage while no participant has a complete current view of available funds or other offline transactions. The benefit of resilience therefore comes with credit and fraud exposure. To limit this exposure, offline acceptance is carefully bound by limits, eligibility, authentication and recovery controls.

Typical control levers

• Per-transaction and cumulative offline limits
• Card eligibility and issuer-defined EMV parameters
• Offline PIN and chip authentication
• Scope restrictions: participating merchants and/or eligible categories of goods
• Terminal storage capacity and secure transaction queues
• Automatic or controlled activation of contingency mode
• Post-recovery submission, reconciliation, exception handling and loss allocation

Four Nordic approaches

Sweden: coordinated offline cards are live

On 1 July 2026, expanded offline card payments went live following an agreement between Sveriges Riksbank and market participants. The arrangement is intended to preserve access to food, medicines and fuel during data-communication disruptions lasting up to seven days.²

Sweden’s continuity approach relies on a broad ecosystem of market participants rather than on a card network operated by the central bank. Participating actors include issuers, Visa and Mastercard, acquirers and representatives of essential goods sectors. This provides an important governance lesson: the central bank convenes and sets preparedness expectations, while commercial participants implement the technical and operational capability.³

Sweden’s contingency mode requires a physical card, chip insertion and PIN. Mobile wallets and ordinary contactless acceptance should therefore not be treated as equivalent fallbacks. The Riksbank is already investigating offline Swish functionality, showing that the resilience agenda is moving beyond cards.³

Denmark: operational contingency, including mobile wallets

By April 2026, adults with Danish-issued Dankort, Mastercard or Visa cards could make offline payments in most nationwide supermarket chains for at least one week during a card-infrastructure or internet outage. Denmark’s design also includes card-based mobile wallets such as Apple Pay and Google Pay.⁴ This is possible because the Danish contingency is based on deferred authorization: the terminal registers the payment locally and sends it for authorization only once the connection is restored, so no offline parameters on the card chip are required. Wallet payments therefore work only in stores that participate in the contingency and have switched their terminals to offline mode, and only if the customer’s phone is working and the card is already set up in the wallet. Elsewhere, offline payments rely on local chip authorization, which requires the physical card and PIN – wallets do not work in that mode. Under deferred authorization, the merchant carries the risk of a later decline; a pre-agreed loss-sharing arrangement between retailers and card-issuing banks applies once a situation is classified as socially critical.⁵

The Danish case has already moved beyond theoretical preparedness. During a Nets outage in May 2026, Danmarks Nationalbank reported that the offline contingency meant that many grocery customers did not notice the disruption. The incident also highlighted practical design parameters: terminal storage capacity matters, and some terminals switch automatically while others require staff to activate offline mode.⁶

Finland: layered national backup plus offline-card development

The Bank of Finland launched a project in 2025 to improve offline card payments during data-communication disruptions, and the work continued in 2026.⁷ Finland’s approach should not be equated with Sweden’s 1^st July launch: the offline-card work is still at project stage, and it is embedded in a broader, layered backup architecture rather than in a single coordinated offline-card agreement.

Finland also has a statutory national emergency account system. It was established under the Act on Certain Backup and Emergency Arrangements in the Financial Sector (666/2022), is maintained by the Financial Stability Authority and is already in place, but kept on standby: it would only be deployed in an actual crisis. In a severe and prolonged disruption at a Finnish bank or significant foreign-bank branch, customers can continue receiving payments, make domestic credit transfers, use debit cards and withdraw cash from specified ATMs. Banks regularly provide relevant account and debit-card information to the Financial Stability Authority to enable this capability.⁸

This makes Finland’s architecture particularly interesting: resilience is built not only at the point of sale but also beyond it, through backup account and interbank capabilities and a policy preference for multiple payment methods.⁹

Norway: resilience across the full payment chain

Norway’s 2026 Financial Infrastructure Report frames resilience as diversification across the payment chain. Merchant recommendations include multiple card solutions, alternative payment channels, offline terminal payments, backup cash-register systems, cash, alternative communications, emergency power and rehearsed contingency plans.¹⁰

For consumers, Norges Bank recommends multiple payment cards, some cash and accounts at more than one bank. It specifically highlights physical BankAxept cards because some existing contingency arrangements depend on them. BankAxept’s backup solution allows staffed terminals that have lost contact with the payment infrastructure to keep accepting physical BankAxept cards, with a settlement guarantee for the merchant of six hours. An extended version introduced in 2021 for merchants selling essential goods – currently grocery, pharmacy and fuel chains – works for up to seven days. Cards stored in mobile wallets are not yet covered; extending the solution to digital cards and to four weeks has been proposed.¹¹

Comparative view: one objective, different architectures

There is no single Nordic technical blueprint – and that is precisely the point. The common principle is optionality: critical payments should not depend on one institution, one rail, one device or one communications path.

Implications for banks and payment service providers

Issuers

Offline capability becomes part of card-product configuration and operational resilience. Issuers need to decide which cards are eligible, how offline limits and chip parameters are set, how exposure is treated when funds prove insufficient after recovery, and how customers are informed about physical-card and PIN requirements.

Acquirers, processors and schemes

Store-and-forward behavior requires secure queuing, later submission, duplicate prevention, recovery procedures and reconciliation. Resilience testing therefore needs to cross organizational boundaries rather than stop at a single institution’s perimeter.

Merchants and POS providers

A resilient card does not help if the terminal, cash register, power supply or staff procedure fails. Merchant preparedness includes terminal configuration and storage, alternative connectivity, backup cash-register processes, power, cash handling and exercises.

BCM and operational-risk functions

Traditional Business Continuity Management often focuses on restoring an institution’s own systems within defined recovery targets. The Nordic direction adds a customer-outcome question: can an essential payment still be completed while parts of the ecosystem remain unavailable?

A practical end-to-end test could look like this: in selected stores, terminals are disconnected for a defined period and switched to offline mode; staff accept chip-and-PIN and, where supported, wallet payments within the configured limits; after reconnection, the queued transactions are submitted, checked for duplicates and authorized or declined by the issuers; finally, declined transactions, loss allocation and reconciliation between merchant, acquirer and issuer are reviewed against the agreed procedures. In Denmark, the Payments Council has agreed to run such a coordinated test of its card contingency at least once a year.⁵

Strategic relevance: resilience and payment sovereignty

The initiatives also intersect with payment sovereignty. Sweden links broader offline functionality to national sovereignty in payments. Finland emphasizes genuine alternatives in payment transmission, while Norway emphasizes multiple underlying payment channels. The strategic direction is toward optionality and reduced dependence on any single infrastructure provider.¹²

Offline cards are not an offline digital euro

Offline card payments continue to use commercial bank money and existing card relationships; acceptance is local and submission is deferred. A future offline digital euro would be a separate payment instrument based on central-bank money. Its legal basis is still being negotiated: the Council and the European Parliament have adopted their negotiating positions, and trilogue talks are under way with the aim of finalizing the regulation by the end of 2026. If that happens, the Eurosystem plans a pilot from 2027 and aims to be ready for a potential first issuance in 2029.¹³  The planned offline functionality would enable device-to-device payments in close proximity without a network connection, with cash-like privacy and holding limits.

Of the four markets, only Finland would be directly affected as a euro-area member. Outside the euro area, no Nordic central bank has decided to issue a retail CBDC: Danmarks Nationalbank has so far seen no clear case for one, Norges Bank is continuing its research so that it could introduce one if necessary, and the Riksbank has recommended an inquiry into the legislative changes an e-krona would require – potentially using the digital-euro platform.^{10, 14} In the short term, the Nordic initiatives therefore focus on hardening today’s payment infrastructure to withstand disruptions; digital central-bank money is at most a potential future addition to a resilient payment system rather than a central building block today.

What should banks be asking now?

• Which customer journeys must continue during a telecommunication, processor, bank or scheme outage?
• Where are the single points of failure across issuing, acquiring, POS, communications and settlement?
• Which degraded operating modes are technically possible today, and which require new product or infrastructure capabilities?
• How much offline credit/fraud exposure is acceptable, and who is responsible for controlling and covering it?
• Can post-outage reconciliation and exception handling cope with a multi-day store-and-forward scenario?
• Do merchant and customer preparedness measures align with the bank’s own continuity assumptions?
• How should cards, instant payments, mobile wallets, cash and future central-bank money interact in a target-state resilience architecture?

Outlook through 2028

• Sweden: outcome of work on offline Swish and expansion of offline functionality beyond cards.
• Denmark: wider merchant/pharmacy coverage and operational lessons from real outages.
• Finland: concrete design and rollout milestones for the offline-card project and evolution of account-based backup arrangements.
• Norway: implementation of end-to-end preparedness recommendations, especially merchant channels, communications and settlement resilience.
• Cross-Nordic (our assessment, not an agreed joint initiative): possible convergence of minimum continuity expectations, testing practices and responsibility/risk allocation.

Conclusion: from efficient payments to resilient payments

For years, payment innovation has been measured mainly through speed, cost and convenience. The Nordic experience adds another dimension: the ability to continue functioning when normal conditions no longer apply.

Offline cards are the most visible manifestation, but they are only one layer. The more important trend is the emergence of layered resilience across cards, accounts, mobile solutions, communications, merchant infrastructure and cash.

The question is no longer only how fast a failed payment service can be restored. Increasingly, the primary challenge is to determine which payments must continue during severe disruptions, before full restoration – and to design the ecosystem so that this is possible.