Financial Integrity Monitor

Estonia EE

Domains (D1–D6)

Sources

Role actions

Horizon <90d

Jurisdiction profile

CompliantTier BRisk: StableMixed

Estonia implements AML/CFT via the MLTFPA, supervised by the EFIU and Finantsinspektsioon (EFSA); a MONEYVAL 5th-round MER (Dec 2022) rated Estonia partially compliant on effectiveness, placing it in enhanced follow-up through at least two FURs (2024, 2025), with persistent gaps in targeted financial sanctions (R.7) and beneficial ownership enforcement.

Key deficiencies

Targeted financial sanctions (asset-freezing) provisions remain partially compliant across two follow-up rounds
No enforceable measures for supervisors/competent authorities to obtain accurate basic and beneficial ownership information from companies
Company Service Provider (CSP) sector poorly supervised despite being the primary vehicle for e-Residency-enabled shell company formation
VASP/CASP sector historically served large volumes of non-resident, offshore-linked clients with weak state awareness of ML/TF patterns

Recent developments (18m)

2nd enhanced Follow-Up Report adopted by FATF/MONEYVAL (Dec 2025, published Mar 2026) with partial technical-compliance re-ratings
Estonian Navy boarded and detained the sanctioned shadow-fleet tanker Kiwala in Estonian waters (April 2025)
Danske Bank A/S announced conclusion of its US DOJ corporate probation (Dec 2025), closing the final chapter of the Estonia-rooted 2007-2015 laundering scandal
Estonian Border Guard documented an armed Russian civilian tanker (Marshal Vasilevskiy) with heavy machine guns and FSB-linked personnel sailing near Estonian territorial waters (May-June 2026)
EFIU issued two revised sanctions-implementation guidelines in 2025
VASP-to-CASP MiCA transitional licensing regime approaching its 30 July 2026 hard deadline

Law made at European Economic Area level that applies in Estonia is covered once, on the European Economic Area page. This page covers Estonia’s own layer: implementation, national authorities, national options and local enforcement.

Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Estonia's crypto-asset service-provider base thinned sharply on 1 July 2026, when legacy FIU-issued VASP licences were cancelled with no automatic conversion to a MiCA CASP authorisation. Against roughly 369 legacy licence records held as of 2022, only Lightspark Payments Europe AS held a standalone CASP authorisation at the deadline. Finantsinspektsioon becomes the sole crypto-asset prudential authority going forward, distinct from the Estonian FIU (Rahapesu Andmeburoo), which remains the designated national financial intelligence unit.

Other Developments

Beneficial-ownership access tightened. From 10 July 2026, Estonia's e-Business Register (TEKSA) ends free public access to beneficial-ownership data; access now requires a defined basis, such as status as a competent authority, an obliged entity, a contractual partner, or a demonstrated legitimate interest. This implements the AMLD6 beneficial-ownership-register milestone at the national level and represents a structural shift away from open registry access.

Naval posture toward sanctions-evasion shipping softened. Estonia's navy commander stated in April 2026 that Tallinn would refrain from detaining Russian shadow-fleet vessels in the Baltic given escalation risk, and in June 2026 authorities reported a militarised, machine-gun-equipped shadow-fleet vessel transiting Estonian waters. This follows 2025 attempts to detain the sanctioned tankers Kiwala and Jaguar, the latter of which triggered a Russian fighter-jet incursion. The shift widens the practical enforcement gap between the EU sanctions architecture governing the oil price-cap regime and Baltic littoral-state risk tolerance for direct interdiction.

AML/CFT technical compliance continues incremental improvement under enhanced follow-up. Estonia remains under MONEYVAL 5th-round enhanced follow-up, with the first follow-up report adopted December 2024; the 2025 follow-up rates roughly seven FATF Recommendations as compliant, twenty-one as largely compliant, and twelve as partially compliant.

Cross-Monitor Connections

The VASP-to-CASP transition connects directly to the crypto monitor's own licensing tracking of the same cutover, and to world-payments' subscribed stablecoin and digital-money slot, which this financial-integrity sub-brief does not itself narrate. The shadow-fleet enforcement-posture shift is architecturally significant beyond Estonia alone: it illustrates how EU/G7 sanctions architecture depends on littoral-state willingness to act, a dependency that other Baltic and Nordic sanctions-enforcement contexts share. The beneficial-ownership register access change sits within the broader EU AML Package transition described in the D2 sub-brief below.

Outlook

AMLA begins direct supervision of selected high-risk cross-border obliged entities from January 2028; whether Estonian obliged entities fall within that direct-supervision perimeter has not yet been determined and is a key structural question for Estonian AML architecture over the next two years. Watch also for whether the authorised CASP population widens beyond the single standalone authorisation confirmed at the 1 July 2026 cutover, and whether Estonia's naval posture toward shadow-fleet vessels shifts again in response to further militarisation incidents.

weekly_brief_draft · JID EE

Domain intelligence (D1–D6)

D1 Sanctions Architecture and Evasion

Sanctions Architecture and Evasion

Estonia's posture toward Russian shadow-fleet sanctions evasion shifted materially in 2026. Following 2025 attempts to detain the sanctioned tankers Kiwala and Jaguar, the latter of which triggered a Russian fighter-jet incursion, Estonia's navy commander stated in April 2026 that Tallinn would refrain from detaining shadow-fleet vessels given the escalation risk such interdictions carry. In June 2026, Estonian authorities reported observing machine guns mounted on the deck of a shadow-fleet vessel transiting Estonian waters, confirming that the vessels Estonia has chosen not to interdict now include militarised assets.

This is an enablement-as-signal case in the strict analytical sense: the absence of continued interdiction in a jurisdiction with clear legal authority and prior operational willingness to act is itself the material finding, not merely a null result. The EU/G7 oil price-cap sanctions architecture depends on littoral states' willingness to physically intercept and inspect suspected shadow-fleet vessels; Estonia's April 2026 posture shift represents a direct narrowing of that enforcement capacity in the Baltic, even though the underlying sanctions instruments themselves have not changed. The June 2026 machine-gun sighting raises the stakes further, since it indicates the vessels transiting unchallenged are not merely evading price-cap compliance but may also be armed, a qualitatively different risk category from ordinary sanctions-evasion shipping.

No EU-level or UK/US sanctions-designation change specific to this shipping pattern was identified this cycle; the finding here is about enforcement posture and practical capacity, not about a change to the designation architecture itself. The structural read is that sanctions-evasion architecture in the Baltic now depends more heavily on non-Estonian actors (other littoral states, NATO naval presence, or EU-level coordination) than it did before April 2026.

Outlook

Watch for further sightings of militarised shadow-fleet vessels in Estonian or adjacent Baltic waters, and for any statement from Estonian authorities revising the April 2026 non-interdiction posture in response. A continued pattern of unchallenged transits would confirm a durable enforcement gap rather than a temporary risk-management pause.

D2 Beneficial Ownership and Corporate Transparency

Beneficial Ownership and Corporate Transparency

Globally, the EU AML Package sets the structural direction for beneficial-ownership transparency: three distinct instruments, the directly-applicable AML Regulation (AMLR, Regulation (EU) 2024/1624), the sixth AML Directive (6AMLD, transposed per Member State), and the AMLA Regulation (Regulation (EU) 2024/1620) establishing the Anti-Money Laundering Authority, together shift supervision from a purely national model toward a hybrid EU-level regime, with AMLA beginning direct supervision of selected high-risk cross-border obliged entities from January 2028. In Estonia specifically, the directly relevant development this cycle is domestic and concrete: from 10 July 2026, the e-Business Register (TEKSA) ends free public access to beneficial-ownership data, replacing it with a purpose-based access model requiring a defined basis, such as status as a competent authority, an obliged entity, a contractual partner, or a demonstrated legitimate interest.

This is a genuine structural shift, not merely a procedural tweak: Estonia's registry had previously been a comparatively open example of beneficial-ownership transparency among EU member states, and the move to purpose-based access brings it into closer alignment with the AMLD6 beneficial-ownership-register milestone as applied elsewhere in the bloc. As an EEA member, Estonia has AMLR applying directly with no domestic transposition act required; the TEKSA reform appears to be Estonia's mechanism for implementing the AMLD6 register-access milestone specifically.

Whether Estonian obliged entities will fall within AMLA's direct-supervision perimeter once it activates in January 2028 has not yet been determined, and this remains the single largest open structural question for Estonia's beneficial-ownership and corporate-transparency architecture over the medium term. The shift from open to purpose-based registry access should be read as Estonia moving in step with, rather than ahead of or behind, the broader EU transition currently underway.

Outlook

Watch for clarification of which Estonian obliged entities, if any, will be designated for direct AMLA supervision from January 2028, and for any early evidence of how the purpose-based TEKSA access regime is administered in practice, particularly whether the 'legitimate interest' basis for access is interpreted narrowly or broadly by Estonian authorities.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto / Digital Assets / Financial Innovation

Estonia's crypto-asset regulatory architecture crossed a hard cutover on 1 July 2026, when legacy FIU-issued VASP licences were cancelled with no automatic conversion to a MiCA CASP authorisation. Finantsinspektsioon and the Estonian FIU jointly announced that crypto-asset services may from that date only be provided under a MiCA CASP authorisation; the roughly 369 legacy virtual-currency licence records the FIU had held were cancelled outright. Only one firm, Lightspark Payments Europe AS, held a standalone CASP authorisation at the deadline, evidencing a sharp thinning of the authorised crypto-service-provider base relative to the pre-cutover population.

This is a market-structure finding with direct financial-integrity relevance: a thinned authorised population can indicate either genuine market consolidation around compliant firms, or a temporary supervisory gap in which previously-licensed activity continues without a clear authorisation basis while firms complete the MiCA application process. The interpreter's evidence base does not distinguish between these two readings this cycle, and both carry different integrity implications, the former suggesting a healthier, more compliant market; the latter suggesting a period of reduced supervisory visibility over ongoing crypto-asset activity in Estonia.

Finantsinspektsioon now holds sole responsibility as the crypto-asset prudential authority, a role now clearly distinct from the Estonian FIU's function as the designated national financial intelligence unit. This separation of prudential and financial-intelligence functions is itself a structural feature worth noting: it means AML/CFT typology monitoring for crypto-asset activity in Estonia depends on effective information-sharing between two distinct authorities rather than a single integrated supervisor.

Outlook

The key open question is whether the authorised-CASP population widens materially in the months following the 1 July 2026 cutover, which would support the market-consolidation reading, or remains thin, which would raise questions about ongoing unauthorised or unsupervised activity. Watch Finantsinspektsioon's public CASP register for movement, and watch for any indication of how the FIU and Finantsinspektsioon coordinate financial-intelligence sharing under the new bifurcated supervisory structure.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

AML/CTF Regime

Estonia remains under MONEYVAL 5th-round enhanced follow-up, with the first follow-up report adopted in December 2024. The 2025 follow-up assessment rates Estonia's technical compliance at roughly seven FATF Recommendations compliant, twenty-one largely compliant, and twelve partially compliant, an incremental improvement pattern consistent with a jurisdiction working through a structured post-mutual-evaluation remediation plan rather than one in acute non-compliance. The Estonian FIU (Rahapesu Andmeburoo) remains the designated national financial intelligence unit, a role now clearly distinct from Finantsinspektsioon, which functions solely as the crypto and payments prudential supervisor following the 1 July 2026 CASP cutover described in the D5 sub-brief.

This institutional bifurcation, FIU for financial intelligence and reporting, Finantsinspektsioon for prudential crypto/payments supervision, is a structural feature of Estonia's AML/CTF architecture that shapes how effectively typology signals from the crypto sector reach the financial-intelligence function. The continuing enhanced follow-up status itself indicates that MONEYVAL has not yet assessed Estonia's technical compliance as sufficiently improved to exit the follow-up process, even as the compliance ratings trend favourably.

No new FATF Recommendation re-rating beyond the 2025 follow-up figures was surfaced this cycle, and no EE-specific STR or CTR threshold change was identified. The AML/CFT regime read for Estonia this cycle is one of continuity under active remediation rather than a discrete new development.

Outlook

Watch for Estonia's next MONEYVAL follow-up report, which would indicate whether the 2025 trend of improving technical-compliance ratings continues toward eventual exit from enhanced follow-up. The coordination mechanism between the Estonian FIU and Finantsinspektsioon under the new bifurcated crypto-supervision structure is also worth monitoring as a potential source of either strengthened or weakened AML/CTF effectiveness going forward.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon

Adopted2028-Q1 · ±year

AMLA direct-supervision perimeter build-out

Some Estonian high-risk cross-border obliged entities may move from national supervision to direct AMLA supervision.

Source

1 dated · 4 pending date · baseline financial-integrity-2026-07-05

Role action cards

MLRO

Estonia's beneficial-ownership register moved from open to purpose-based access on 10 July 2026, and legacy crypto VASP licences were cancelled 1 July 2026 with no automatic MiCA conversion.

MLROs relying on open TEKSA lookups for beneficial-ownership verification must now establish and document a qualifying access basis. Crypto-sector counterparties should be re-screened for confirmed MiCA CASP authorisation rather than assumed legacy licence validity.

2 evidence refs

Compliance

Estonia remains under MONEYVAL enhanced follow-up with incrementally improving technical-compliance ratings, while its crypto-authorisation base has thinned sharply post-MiCA cutover.

Compliance functions should update Estonia risk-rating documentation to reflect the continuing enhanced follow-up status and the bifurcated FIU/Finantsinspektsioon supervisory structure, and verify that any Estonian crypto counterparties hold confirmed CASP authorisation.

2 evidence refs

Legal

Estonia's naval posture toward Russian shadow-fleet vessels shifted from interdiction to monitoring in April 2026.

Legal counsel advising on Baltic-exposed trade finance or shipping should note the widened gap between EU sanctions architecture and actual physical enforcement capacity in Estonian waters when assessing sanctions-evasion exposure in related transactions.

1 evidence refs

Board

Estonia's crypto-authorisation base thinned to a single standalone CASP holder at the 1 July 2026 legacy-licence cutover.

The Board should be aware that any Estonian crypto-sector exposure now depends on a substantially smaller pool of confirmed-authorised counterparties than existed under the pre-MiCA regime, a market-structure risk factor for due diligence on Estonian crypto partnerships.

1 evidence refs

CTO

Estonia's crypto-asset service-provider authorisation architecture consolidated to a single standalone CASP holder following the 1 July 2026 legacy-licence cancellation.

Technical integrations with Estonian crypto-asset infrastructure should be re-verified against current Finantsinspektsioon CASP registration rather than legacy FIU VASP-licence records, which are no longer a valid basis for service provision.

1 evidence refs

Risk

Three concurrent structural shifts, beneficial-ownership access restriction, crypto-licence cutover, and shadow-fleet enforcement de-escalation, move Estonia's risk profile this cycle.

Risk functions should treat Estonia as a jurisdiction in active structural transition across corporate-transparency, crypto-market, and sanctions-enforcement dimensions simultaneously, warranting a refreshed jurisdiction risk assessment rather than a routine rollover.

3 evidence refs

Operations

No material change for this persona this cycle.

No material change for this persona this cycle

Audit

Estonia's beneficial-ownership register access basis changed structurally on 10 July 2026, requiring updated audit-trail documentation for TEKSA lookups.

Internal audit should confirm that documented access bases (competent authority, obliged entity, contractual partner, or legitimate interest) are being recorded for all post-10-July-2026 TEKSA beneficial-ownership lookups used in due-diligence files.

1 evidence refs

Decision lens

MLRO

Estonia's beneficial-ownership register moved from open to purpose-based access on 10 July 2026, and legacy crypto VASP licences were cancelled 1 July 2026 with no automatic MiCA conversion.

Compliance

Estonia remains under MONEYVAL enhanced follow-up with incrementally improving technical-compliance ratings, while its crypto-authorisation base has thinned sharply post-MiCA cutover.

Legal

Estonia's naval posture toward Russian shadow-fleet vessels shifted from interdiction to monitoring in April 2026.

Board

Estonia's crypto-authorisation base thinned to a single standalone CASP holder at the 1 July 2026 legacy-licence cutover.

CTO

Estonia's crypto-asset service-provider authorisation architecture consolidated to a single standalone CASP holder following the 1 July 2026 legacy-licence cancellation.

Risk

Three concurrent structural shifts, beneficial-ownership access restriction, crypto-licence cutover, and shadow-fleet enforcement de-escalation, move Estonia's risk profile this cycle.

Operations

No material change for this persona this cycle.

Audit

Estonia's beneficial-ownership register access basis changed structurally on 10 July 2026, requiring updated audit-trail documentation for TEKSA lookups.

Shared evidence: 3 refs

Scenario sketches

AMLA direct-supervision perimeter reshaping Estonian cross-border obliged-entity oversight

Illustrative scenario for analytical orientation only: as AMLA's direct/indirect-supervision perimeter for cross-border obliged entities takes shape ahead of its January 2028 activation, Estonian obliged entities with significant cross-border EEA exposure could shift from purely national Finantsinspektsioon/FIU oversight toward a hybrid model involving direct AMLA engagement. This could alter how quickly typology signals surfaced at the national level (such as the TEKSA beneficial-ownership access changes) are escalated to EU-level supervisory attention, potentially compressing the time between a national finding and EU-wide corrective action, but also introducing new coordination friction between Estonia's national authorities and AMLA during the transition period. This is illustration, not observed fact.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)

Tracker	Status	Note
T1 · Russian Sanctions-Evasion Architecture	worsening
T2 · EU AML Package / AMLA	material_change
T3 · FATF Grey List	stable
T4 · Beneficial-Ownership Register Status	material_change
T5 · Crypto & Digital-Asset Integrity	material_change
T6 · Sanctions Regime Divergence	no_change

Registers

Enforcement actions

Estonia's navy stopped and boarded the sanctioned, Russia-bound tanker Kiwala in the Baltic Sea over its insurance status and suspected shadow-fleet membership, anchoring it in Estonian territorial waters. 11 Apr 2025
Estonian border guards photographed the Gazprom-linked civilian tanker Marshal Vasilevskiy, armed with heavy machine guns and carrying passengers with Russian military/FSB backgrounds, sailing as close as 13 nautical miles from the Estonian coast en route to Kaliningrad. 13 May 2026
The EFIU issued two revised guidelines on targeted financial sanctions implementation in 2025 -- one for all natural and legal persons and one specifically for AML/CFT reporting entities -- updating prior 2021 EFSA guidance. 30 Jun 2025
Danske Bank's corporate probation with the US DOJ, imposed as part of its 2022 guilty plea and $2 billion global settlement over the Estonia-rooted 2007-2015 laundering scandal, formally concluded. 15 Dec 2025
FATF/MONEYVAL adopted Estonia's second enhanced Follow-Up Report, re-rating select technical compliance recommendations (R.7, R.15 requested) based on a September 2025 assessment, while other deficiencies (freezing-obligation scope, third-party protections) remained partially addressed. 1 Dec 2025

Sanctions changes

The EU Council imposed restrictive measures on 41 additional Russian shadow-fleet vessels, bringing the total EU-listed shadow-fleet vessels to almost 600, subject to a port-access ban and broad services ban. 18 Dec 2025
The EU adopted its 19th sanctions package against Russia, including a ban on EU operators providing crypto and fintech services that could enable Russian sanctions circumvention, transaction bans on five third-country (Central Asian) banks, a full LNG import ban from 2027, and 69 additional listings. 23 Oct 2025
The EU Council added three individuals to its cyber-sanctions list specifically for malicious cyber-attacks against Estonia, marking a rare instance of an EU sanctions listing triggered directly by an attack on this jurisdiction. 27 Jan 2025

Regulatory horizon (register)

VASP-to-CASP MiCA transitional licence hard deadline
EU AML Regulation (AMLR) full application across Estonia
AMLA direct/indirect supervisory perimeter build-out
Estonia's next FATF/MONEYVAL enhanced follow-up report

Active schemes

[CRITICAL] Baltic/Gulf of Finland shadow-fleet oil transit corridor
[HIGH] e-Residency/CSP shell-company formation-for-sale pipeline
[HIGH] UK LLP/LP shell-company layering via Estonian correspondent banking
Belarus/Russia oil and fertiliser trans-shipment via Estonia-Latvia corridor

Sources

Coverage gaps

Estonia's targeted financial sanctions/proliferation-financi…

Estonia's targeted financial sanctions/proliferation-financing freezing regime (FATF R.7) remained rated partially compliant through both the 2024 and 2025 follow-up reports, with freezing obligations applying only in limited circumstances, a limited scope of covered assets, and no bona fide third-party protections.

The CSP (company/trust service provider) sector, identified …

The CSP (company/trust service provider) sector, identified by MONEYVAL as one of the two most ML-vulnerable DNFBP sectors alongside real estate, lacks enforceable measures for authorities to obtain accurate, current beneficial ownership information, particularly for foreign trusts and non-licensed CSPs.

Estonia's domestic Swedbank money-laundering prosecution -- …

Estonia's domestic Swedbank money-laundering prosecution -- covering the same 2010s-era Russian non-resident client book scrutinised in the Danske scandal -- was closed in February 2024 after prosecutors determined the case could not proceed without evidentiary cooperation from Russian authorities.

Granular Estonian-language prosecutorial and supervisory sta…

Granular Estonian-language prosecutorial and supervisory statistics (EFIU/EFSA enforcement case counts, penalty values, dual-use export circumvention prosecutions) are not comprehensively available in English-language open sources within the 18-month window; this baseline relies substantially on FATF/MONEYVAL technical reports and OCCRP/Delfi investigative journalism rather than direct national enforcement dockets.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.