D1 Sanctions
Austria: RBI persistent Russia-exposure enabler node; Rasperia/Strabag compensation dispute; October 2025 EU sanctions-package stalling resolved via adoption; trajectory worsening.
Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.
Austria's AML/CFT/CPF regime rests on the FMA (financial supervision), the police-based A-FIU, and the WiEReG beneficial-ownership register.
Law made at European Economic Area level that applies in Austria is covered once, on the European Economic Area page. This page covers Austria’s own layer: implementation, national authorities, national options and local enforcement.
Austria: RBI persistent Russia-exposure enabler node; Rasperia/Strabag compensation dispute; October 2025 EU sanctions-package stalling resolved via adoption; trajectory worsening.
On 29 September 2026 the Finanzausschuss voted, with support from OVP, SPO, NEOS and FPO, to advance a novelle harmonising and strengthening the legal framework for Austria's register of beneficial owners to the Nationalrat. The cross-party nature of the vote is itself notable: beneficial-ownership transparency measures do not always command this breadth of support, and the committee vote suggests the Nationalrat stage is unlikely to be contested on substance.
The durable structural backdrop against which this development sits is the EU AML Package, which consists of three distinct instruments operating on different legal mechanics. The AML Regulation, or AMLR (Regulation (EU) 2024/1624), is directly applicable across the Union without national transposition. The sixth AML Directive, or 6AMLD, requires transposition by each Member State into its own domestic legal order, leaving room for exactly the kind of national harmonisation exercise Austria's Finanzausschuss has just advanced. The AMLA Regulation (Regulation (EU) 2024/1620) establishes the Anti-Money Laundering Authority itself, the EU-level body that will take over direct supervision of a limited number of cross-border obliged entities from 2028, shifting the supervisory perimeter for those entities from purely national competence toward a hybrid EU-level regime while leaving the large majority of obliged entities under continued national supervision. Austria's beneficial-ownership novelle is best read as a 6AMLD-adjacent national harmonisation step, strengthening the domestic register framework that sits beneath, and feeds into, the EU-wide BO-register architecture the AMLR and 6AMLD together establish.
Whether the harmonised register framework changes who can access the register, what verification obligations apply to reporting entities, or how discrepancies between the register and underlying corporate records are resolved, is not established on the evidence available this cycle; the committee-stage materials describe the novelle's direction (harmonisation and strengthening) without yet detailing its operative text. The Nationalrat stage, where the bill will next be read, is where that operative detail should become available.
This development should also be read alongside the FMA-independence bill advanced by the same committee on the same day, which introduces a new duty for credit institutions to notify the FMA before executing prudentially relevant transactions. Register transparency and pre-transaction notification are different instruments addressing a related problem: the register increases the traceability of who ultimately controls a legal entity, while the notification duty gives the supervisor a window to assess money-laundering and terrorist-financing risk before certain transactions proceed. Read together, Austria's 29 September 2026 committee session represents a coordinated tightening of two distinct levers in the same architecture, rather than two unrelated legislative items that happened to move on the same day.
Whether any Austria-headquartered or Austria-branch financial group will be selected for direct AMLA supervision from January 2028 depends on the provisional list of eligible cross-border entities, which was due by the end of September 2026 but has not been confirmed as published on the evidence available this cycle. This is a live gap: the register-harmonisation novelle strengthens Austria's own BO-register framework regardless of the AMLA selection outcome, but the two processes will eventually intersect for any Austrian entity drawn into direct EU-level supervision.
The BO-register novelle now moves to the Nationalrat, where cross-party committee support makes passage likely absent a change in political alignment. The operative detail of the harmonised framework, including any changes to access rules, verification duties, or discrepancy-resolution mechanisms, should become clearer once the Nationalrat text is available. Separately, confirmation of the AMLA provisional eligible-entity list will determine whether any Austria-based group moves toward direct EU-level AML/CFT supervision ahead of the 2028 commencement, a question that remains open on the evidence available this cycle. Readers should expect the national harmonisation strand (BO register) and the EU-level supervisory strand (AMLA selection) to develop on separate but related timelines over the coming cycles.
Austria: A-FIU under-resourced, narrow predicate-offence focus; DNFBP supervision fragmented outside casinos/lawyers/notaries; trajectory stable.
Conflict Finance is not yet covered for this jurisdiction in this report.
Austria: MiCA CASP authorisation retention disputed (4-of-13 TRM Labs vs 8-licences Chambers); FMA joined AMF/CONSOB harmonisation call; trajectory improving pending count reconciliation.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
Austria's AML/CTF regime tightened on an institutional-architecture axis this cycle rather than through a new enforcement action or designation. On 29 September 2026 the Finanzausschuss forwarded to the Nationalrat a bill transposing CRD VI (Directive 2013/36/EU as amended by (EU) 2024/1619) that strengthens the independence of the Finanzmarktaufsicht. The bill introduces mandatory cooling-off periods for board members moving between regulated industry and the supervisor, annual interest declarations intended to surface conflicts of interest, and a 14-year cap on board tenure. It also creates a new duty: credit institutions must notify the FMA before executing a transaction that qualifies as prudentially relevant, and the FMA must assess that transaction for money-laundering or terrorist-financing risk before it proceeds. This is a materially different supervisory posture from after-the-fact reporting; it inserts the FMA into the transaction chain at the point of execution for a defined category of prudentially significant activity.
This legislative tightening sits against an already largely favourable baseline. Austria's FATF Mutual Evaluation Report, adopted at the February 2026 plenary and published 30 April 2026, found the country largely compliant or compliant across most of the FATF Recommendations and did not place Austria on the grey list. The report did flag two specific areas needing improvement: FIU operational capacity and the effectiveness of asset confiscation. No new FATF plenary action has touched Austria this cycle, so the April 2026 MER remains the reference baseline, and the current legislative activity should be read as Austria building on, rather than responding to, that already-favourable assessment. Architecturally, this is the more significant pattern: Austria is reinforcing supervisory independence and transaction-level oversight voluntarily, ahead of any FATF compulsion to do so, rather than making a defensive post-hoc correction.
The FMA's consolidated sanctions-supervision mandate, in effect since 1 January 2026 following its absorption from the Oesterreichische Nationalbank under the Sanktionengesetz 2024, forms the standing institutional context for the new prudential-notification duty. The same supervisor that screens for sanctions exposure across banks, insurers, payment institutions, e-money institutions and crypto-asset service providers will now also receive advance notice of prudentially relevant transactions from credit institutions specifically, for money-laundering and terrorist-financing risk assessment. Concentrating both functions in one authority has implications for how efficiently cross-referencing between sanctions screening and AML/CFT risk assessment can occur, though no evidence this cycle describes how the two functions will be operationally integrated.
The EU AML Package provides the broader frame within which Austria's domestic tightening sits: the AMLR (Regulation (EU) 2024/1624) applies directly, the 6AMLD requires national transposition of the kind the Finanzausschuss's committee work this cycle exemplifies, and the AMLA Regulation (Regulation (EU) 2024/1620) will bring a subset of cross-border obliged entities under direct EU-level supervision from 2028. Whether any Austrian entity falls within that direct-supervision perimeter depends on a provisional eligible-entity list that was due by the end of September 2026 but whose publication has not been confirmed on the evidence available this cycle.
The FMA-independence and CRD VI transposition bill now proceeds to the Nationalrat alongside the beneficial-ownership novelle advanced the same day. If enacted as forwarded, credit institutions will need to operationalise the pre-transaction notification duty for prudentially relevant transactions, and FMA board governance will need to accommodate the new cooling-off, interest-declaration and tenure-cap requirements. Austria's FATF MER flagged FIU operational capacity and asset-confiscation effectiveness as the two outstanding weak points; whether the current legislative round addresses either is not established on the evidence available this cycle, since the forwarded bills concern board governance and transaction notification rather than FIU resourcing or confiscation procedure directly. Confirmation of the AMLA provisional eligible-entity list remains the key open question determining whether Austria's AML/CTF architecture gains an EU-level direct-supervision dimension for any of its financial groups ahead of the January 2028 commencement.
Commercial Activity is not yet covered for this jurisdiction in this report.
If enacted, credit institutions will need to build a process to identify prudentially relevant transactions and notify the FMA before execution, feeding into an FMA money-laundering and terrorist-financing risk assessment. This sits alongside the FMA's existing consolidated sanctions-screening mandate covering banks, payment institutions, e-money institutions and crypto-asset service providers since 1 January 2026.
Both bills now proceed to the Nationalrat. Compliance functions at affected firms should anticipate operative detail on the harmonised BO-register framework and the pre-transaction notification mechanics once the Nationalrat text becomes available.
No material change for this persona this cycle
This reduces institutional-capture risk in Austria's financial supervisor and signals a broader governance-tightening direction that may extend to regulated entities' own board-governance expectations over subsequent cycles.
No material change for this persona this cycle
The risk posture is structurally improving rather than deteriorating: Austria is tightening governance and transaction-notification architecture from an already favourable FATF baseline, rather than correcting a deficiency identified in that evaluation.
Credit institutions' operations functions should anticipate a new transaction-level notification step once the bill is enacted, requiring identification of which transactions qualify as prudentially relevant before execution.
No material change for this persona this cycle
A new pre-transaction FMA notification duty for prudentially relevant transactions is advancing through the Nationalrat alongside a beneficial-ownership-register harmonisation novelle.
Two architecture-level bills, a BO-register harmonisation novelle and an FMA-independence/CRD VI transposition bill, advanced through committee on 29 September 2026.
No material change this cycle.
Austria is tightening FMA board-independence requirements, including cooling-off periods, interest declarations and a 14-year tenure cap, as part of its CRD VI transposition.
No material change this cycle.
Austria's FATF Mutual Evaluation Report (published 30 April 2026) remains the operative AML/CFT baseline, finding the country largely compliant with no grey-listing, while two architecture bills advance on top of that baseline.
A new pre-transaction notification workflow to the FMA for prudentially relevant transactions is advancing toward enactment.
No material change this cycle.
Illustrative scenario for analytical orientation only. As the AMLA Regulation (Reg (EU) 2024/1620) moves toward its 2028 direct-supervision commencement, the shift from purely national AML supervision toward a hybrid EU/national model could reshape how beneficial-ownership data, maintained under nationally harmonised registers such as the novelle Austria's Finanzausschuss has advanced, is cross-referenced during cross-border supervisory review. A cross-border group selected for direct AMLA supervision would need its national register data to interoperate cleanly with AMLA's own supervisory information requests; a harmonisation gap between the national register framework and the AMLA-level expectation could, in principle, create a transitional window where register data is available nationally but not yet structured for direct EU-level consumption. This is an illustrative structural possibility, not an observed development, and is offered purely to orient analytical attention to the interconnection point between national BO-register harmonisation and the AMLA selection and supervision timeline.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | no_change | No AT-specific Russia dark-fleet/tech-procurement development this cycle; Houthi/Yemen sub-channel awaiting primary source. |
| T2 · EU AML Package / AMLA | improving | AT-level delta: Finanzausschuss advanced the beneficial-ownership-register novelle (29 Sept 2026); AMLA EU-wide direct-supervision selection exercise continues on schedule (data-collection deadline 15 Aug 2026; provisional eligible-entity list due end-Sept 2026). |
| T3 · FATF Grey List | no_change | Austria's FATF MER adopted Feb 2026, published 30 April 2026; AT not placed on grey list. No new plenary action this cycle. |
| T4 · Beneficial-Ownership Register Status | improving | Finanzausschuss voted 29 Sept 2026 to advance a novelle harmonising and strengthening the national BO-register framework to the Nationalrat. |
| T5 · Crypto & Digital-Asset Integrity | stable | FMA's crypto-enforcement posture firming following first published MiCAR sanction (Bitpanda, Aug 2026) and earlier FM-GwG AML fines against Kurant GmbH and Coinfinity GmbH. |
| T6 · Sanctions Regime Divergence | no_change | No new AT-specific sanctions-designation divergence event this cycle; standing facts (EU high-risk third country list effective 29 Jan 2026; UK reg 33(1)(b) EDD-only regime from 30 June 2026) unchanged. |