France FR

The standing feature of this cycle for France's sanctions posture is the delisting of two individuals, Alisher Usmanov and Mikhail Fridman, from the Annex I list attached to Council Regulation (EU) No 269/2014, achieved as part of the three-year renewal of the broader EU Russia-sanctions package agreed 22 September 2026. The sourcing behind this finding is a single Tier 3 legal-commentary piece rather than the Council's own Official Journal publication, so the finding sits at probable rather than confirmed confidence; the underlying mechanics of the bargain, and whether other names were discussed and declined, remain unverified against a primary text.

What makes this architecturally interesting rather than merely an incident is the channel through which relief was obtained. The EU's sanctions regulations already contain an established humanitarian-derogation route, Article 6b of Regulation 269/2014, through which a designated person or a Member State acting on their behalf can seek individualised relief on defined grounds, adjudicated case by case. The pattern described here is different: France and Luxembourg appear to have used their position within a unanimity-based package renewal, where the entire sanctions architecture must be re-agreed by all Member States on a periodic basis, to extract delisting of two specific names as the price of their continued assent to the three-year renewal. This is leverage available only at the moment of package renewal, to a Member State prepared to use its veto, rather than a standing right available to any affected party at any time. If this pattern is confirmed by primary sources, it represents a second, structurally distinct channel for individualised sanctions relief operating alongside the humanitarian-derogation mechanism, one that rewards Member State bargaining power rather than the underlying facts of a case.

This sits within the broader observation that the EU and FATF sanctions-and-monitoring architectures diverge and should be read separately. France itself is not FATF grey-listed as of the 19 June 2026 plenary, a confirmed finding drawn directly from FATF's own primary statement. That list separately keeps Laos under increased monitoring, citing explicit supervisory weaknesses in casinos, banks, and Special-Economic-Zone reporting entities, while Cambodia remains off the list, having exited in February 2023. None of this FATF-list activity bears directly on France's own standing, but it is the comparator against which France's sanctions-architecture behaviour, operating instead through the EU's own Council-regulation renewal process, should be read: these are two separate international frameworks moving on separate tracks, not a single combined risk ladder.

A further episodic data point this cycle, geographically distant but typologically adjacent, is FinCEN's continuing alert cadence against Mexico-based trade-based-laundering networks: FIN-2026-Alert007, issued 1 October 2026 against the so-called A7 Network, continues a typology thread opened by a supplemental alert on fiscal fuel-theft and tax-evasion schemes on 30 June 2026. This was retrieved as a Tier 1 primary index entry, though the alert's substantive content was not opened in depth this cycle. It has no direct French nexus identified this cycle, but any French correspondent bank or trade-finance desk with Latin American exposure should treat the underlying typology, fuel-theft-linked tax evasion and trade-based laundering through cartel-linked networks, as a live screening concern regardless of jurisdiction of booking.

Outlook

The single most important follow-up for this architecture thread is independent verification of the Council's own renewal text and the Official Journal publication for the 22 September 2026 package, which would move the French/Luxembourg delisting finding from probable to confirmed and would also surface whether the bargain extended beyond the two names currently reported. If the pattern holds up under primary-source scrutiny, it is worth tracking whether other Member States test the same unanimity-leverage channel at future renewal cycles, since a repeated pattern would constitute a more durable structural feature of the EU sanctions regime rather than a single cycle's outcome. On the FATF side, no near-term plenary movement is expected before the next scheduled review; Laos's continued presence on the increased-monitoring list, with its specific casino and Special Economic Zone supervisory gaps, remains the regional item most likely to generate incremental FATF commentary.

The financial-integrity-relevant crypto finding for France this cycle is not a new rule but a confirmation of where a settled rule's AML-adjacent perimeter currently sits. The ACPR has confirmed, in Tier 1 guidance, that crypto-asset service providers transferring or providing custody of e-money tokens are treated as providing payment services, which triggers a requirement for dual authorisation: registration as a Payment Services and Crypto-Assets provider under the MiCA-derived regime, plus a separate payment-institution authorisation. The relevant transitional flexibility, an EBA no-action position that had allowed firms to operate without the payment-institution layer, expired on 2 March 2026. This is accordingly a stable, confirmed, settled-rule finding rather than a this-cycle regulatory move, but it is the correct anchor for assessing the current AML/CFT exposure of e-money-token-handling crypto firms operating in France.

From a financial-integrity perspective, the significance of this dual-authorisation requirement is that it collapses what might otherwise be treated as a purely prudential or conduct-licensing question into an AML/CFT question as well. A payment institution authorisation in France carries with it the full suite of payment-institution AML obligations, including customer due diligence, transaction monitoring, and suspicious-activity reporting obligations that sit on top of, rather than instead of, whatever AML obligations already attach to the firm's status as a crypto-asset service provider. A firm handling e-money tokens therefore cannot rely on its crypto-specific authorisation alone to discharge its AML/CFT posture; the payment-institution layer brings a second, independently supervised set of AML obligations into play. This is the kind of regulatory layering that financial-integrity monitoring should track closely, because it changes the supervisory population relevant to e-money-token flows: ACPR's payment-institution supervision, not solely its crypto-specific supervision, now governs a meaningful share of EMT-related activity in France.

No new typology observation, enforcement action, or incident tied to this perimeter was identified this cycle; the finding is confirmatory rather than developmental. There is also no indication this cycle of how actively the dual-authorisation requirement is being enforced against non-compliant EMT-handling firms, nor of how many firms have completed the payment-institution leg of the authorisation since the EBA flexibility lapsed in March 2026. Both would be natural follow-up items for a future cycle, since a gap between the rule's formal scope and its practical enforcement would itself be a significant finding under the enablement-as-signal principle: an unenforced dual-authorisation requirement would function, in practice, as a lighter-touch regime than its text describes.

Outlook

The near-term question worth tracking is enforcement intensity: whether the ACPR brings any public action against an EMT-handling crypto-asset service provider that has not completed the payment-institution authorisation since the March 2026 deadline for the EBA flexibility lapsed. A confirmed enforcement action would sharpen this from a settled-rule finding into an active compliance-risk signal for the sector; continued silence on enforcement, absent any other confirming information, would itself be analytically relevant as a possible sign of under-resourced supervision of this specific authorisation layer.

France's core AML/CTF architecture remains stable this cycle: Tracfin continues as the financial intelligence unit, with the AMF and ACPR retaining their respective supervisory roles over the financial sector, consistent with the Fourth and Fifth Anti-Money Laundering Directive transposition France completed via an ordonnance dated 1 December 2016. The one confirmed procedural development within this standing architecture is a widening of Tracfin's remit under the Sapin II whistleblower-protection regime: a decree dated 24 April 2026, in force from 1 July 2026, adds Tracfin to the list of external authorities competent to receive whistleblower disclosures. The sourcing for this specific decree is a single Tier 3 legal-press report naming the decree and its effective date; the decree text itself was not independently retrieved this cycle, so the finding is held at probable rather than confirmed confidence pending primary verification.

The practical significance of adding Tracfin to the Sapin II external-disclosure-recipient list is that it creates an additional intake channel for financial-crime-relevant information that sits outside the conventional suspicious-transaction-report pathway supervised obliged entities already use. A whistleblower within a regulated or non-regulated entity who identifies potential money-laundering or terrorist-financing activity now has a direct, legally protected route to Tracfin alongside whatever internal reporting channel their employer maintains. This is a modest but genuine expansion of Tracfin's intake aperture, and it is consistent with a broader pattern across EU Member States of widening financial intelligence units' access to non-traditional information sources beyond the regulated-sector reporting chain.

France's position relative to the international standard-setting architecture remains unchanged and favourable: the FATF's 19 June 2026 plenary statement, checked directly against the primary source, confirms France is not among the jurisdictions under increased monitoring. This is a stable, confirmed baseline rather than a new development, but it is the correct backdrop against which France's domestic AML/CTF posture should be read this cycle: France sits outside the FATF's own watch-list architecture entirely, a materially different position from grey-listed jurisdictions such as Laos, where the FATF has explicitly cited supervisory weaknesses in casinos, banks, and Special Economic Zone reporting entities.

The principal item of structural unfinished business for France's AML/CTF regime is the Sixth Anti-Money Laundering Directive transposition deadline of 10 July 2027. As of this cycle, no implementing legislation transposing 6AMLD into French law had been identified; the directive's harmonisation of twenty-two predicate offences for money laundering and its expansion of financial intelligence unit powers therefore remain prospective rather than operative in France. This is a known, dated gap rather than a surprise, but it is worth tracking as the 2027 deadline approaches, since late transposition by a major Member State would itself be a noteworthy compliance signal.

Outlook

The most useful near-term confirmation would be independent retrieval of the 24 April 2026 decree's own text, to move the Tracfin whistleblower-remit finding from probable to confirmed and to establish precisely which categories of disclosure now route to Tracfin under this channel. Looking further ahead, the 10 July 2027 deadline for 6AMLD transposition is the single largest structural item on France's AML/CTF horizon; no implementing legislation had been identified as at this cycle, and the gap between the EU deadline and domestic legislative progress is worth monitoring as a recurring item in subsequent cycles rather than treating it as settled simply because the deadline remains some distance away.