D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
Hungary is a MONEYVAL-assessed EU member with a largely-compliant technical AML/CFT framework (38 of 40 FATF Recommendations rated LC/C per the latest follow-up); HFIU (within NAV) is the FIU and MNB supervises financial-sector AML/CFT.
Law made at European Economic Area level that applies in Hungary is covered once, on the European Economic Area page. This page covers Hungary’s own layer: implementation, national authorities, national options and local enforcement.
Sanctions is not yet covered for this jurisdiction in this report.
Beneficial Ownership is not yet covered for this jurisdiction in this report.
Enabler Jurisdictions is not yet covered for this jurisdiction in this report.
Conflict Finance is not yet covered for this jurisdiction in this report.
Hungary's digital-asset compliance architecture shifted structurally this cycle. Act XXXVIII of 2026 took effect 7 August 2026, repealing the country's distinctive national requirement, in force since 1 July 2025, that crypto-asset conversions between crypto and fiat, and between crypto and crypto, be pre-validated by a licensed local validating service provider. That requirement had sat as a national layer atop the EU's Markets in Crypto-Assets Regulation, and its removal is confirmed by two independent trade-press sources naming the same Act number and effective date.
The repeal did not occur in isolation. On 20 July 2026, ahead of the repeal taking effect, Magyar Nemzeti Bank granted Tiwala Solutions Kft, operating as CoinCash, Hungary's first domestically-issued MiCA crypto-asset service provider licence. The authorisation covers custody, crypto-to-fiat and crypto-to-crypto exchange, transfer services, investment advice, and portfolio management, the full suite of CASP activities under MiCA. Three independent outlets corroborate the licensee's identity, the date, and the issuing authority, supporting Confirmed-tier treatment of this claim.
The analytical read is that this is consolidation, not weakening. The removed national validation layer duplicated controls that MiCA and the EU's Transfer of Funds Regulation (TFR) now impose directly on CASPs, including Travel Rule obligations on cross-border transfers. A national gold-plating requirement disappearing while the underlying harmonised framework remains fully in force is a simplification of the compliance map for firms operating in Hungary, not a reduction in the substantive AML/CTF standard applied to crypto-asset activity. This reading carries Probable confidence: it reflects an analytical judgment about the net effect of the two developments rather than a directly sourced statement.
A residual question, not resolved this cycle, is whether the repeal carries any transitional or grandfathering provisions for entities that were licensed or in process under the pre-repeal validation regime. No primary Hungarian legislative text was retrieved this cycle to confirm transposition mechanics of the related 6AMLD file, which bears on the same obliged-entity population going forward, since 6AMLD is expected to be folded into the existing Act LIII of 2017 (Pmt.) structure rather than a standalone statute.
The marker to watch is whether Hungary's CASP register expands beyond CoinCash in the coming cycles, which would indicate the new MiCA-only regime is functioning as a genuine on-ramp rather than a one-off. Separately, the interaction between the repealed validation regime and any transitional provisions for previously-licensed local validators remains an open question that a primary-source Hungarian legislative or MNB publication could resolve. The broader EU AML Package, the AML Regulation (Reg (EU) 2024/1624), the sixth AML Directive, and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority, sets the structural direction for obliged-entity supervision generally, including crypto-asset service providers, as the EU shifts from purely national supervision toward a hybrid EU-level regime with AMLA taking direct or indirect supervisory responsibility for higher-risk cross-border entities; Hungary's CASP population would fall within that shifting perimeter once AMLR becomes directly applicable from 10 July 2027.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
AML/CTF Regime is not yet covered for this jurisdiction in this report.
Commercial Activity is not yet covered for this jurisdiction in this report.
The removal of a duplicate national control layer means SAR-relevant monitoring for Hungarian crypto exposure now runs entirely through MiCA/TFR-aligned CASP obligations rather than a parallel domestic validation check. Separately, MNB's fines against OTP Bank and MBH Bank for unresolved 2023-24 AML/CTF deficiencies signal that remediation timelines are being enforced, even where enforcement lags the original finding by over a year.
Compliance functions with Hungarian crypto-asset exposure can retire tracking of the repealed local validation requirement, but should watch for confirmation of 6AMLD transposition mechanics, since the expected route (amending Act LIII of 2017) has not yet been confirmed by primary legislative text.
No material change for this persona this cycle
This is a liberalising structural shift rather than a weakening of standards, and is relevant to board-level oversight of any Hungarian crypto-asset exposure or counterparty relationships as the jurisdiction's regulatory profile normalises toward the EU baseline.
Technical infrastructure supporting Hungarian crypto-asset operations, including Travel Rule data-sharing implementations, no longer needs to accommodate the separate local validating-service-provider integration point that existed from 1 July 2025 to 7 August 2026.
The crypto-control simplification reduces operational-risk surface from maintaining two overlapping compliance tracks, while the bank AML/CTF fines illustrate that remediation-timeline risk can persist well past an initial supervisory finding before enforcement follows.
No material change for this persona this cycle
This is a useful reference point for testing the adequacy of remediation-tracking controls and documented evidence trails between an initial supervisory finding and confirmed closure, given the gap exceeded a year in this instance.
Hungary repealed its national crypto-conversion validation requirement and MNB issued the country's first MiCA CASP licence, consolidating AML control onto the harmonised EU framework.
A national crypto-validation layer duplicating MiCA obligations has been repealed, and 6AMLD is expected to be transposed via amendment to the existing Pmt.
No material change this cycle.
Hungary's digital-asset regime consolidated onto MiCA following repeal of a bespoke national validation requirement and issuance of the country's first domestic CASP licence.
Hungary's CASP licensing and cross-border-transfer control architecture now runs solely through MiCA/TFR following repeal of the national crypto-validation layer.
A duplicate national control layer for crypto conversions has been removed in Hungary, and a supervisory remediation gap of over a year is visible in the OTP/MBH AML/CTF fines.
No material change this cycle.
Hungary's fines against OTP Bank and MBH Bank stem from AML/CTF deficiencies unresolved past an August 2024 remediation deadline, evidencing a documented multi-year gap between finding and remediation.
As the AML Regulation becomes directly applicable across the EEA from 10 July 2027 and the AMLA Regulation establishes a hybrid EU-level supervisory perimeter, one illustrative trajectory is that cross-border crypto-asset service providers headquartered or passporting through smaller Member States, Hungary among them, could see a portion of their supervisory relationship shift from the national regulator toward AMLA direct or indirect oversight. Under such a trajectory, a Hungarian CASP with material cross-border volume might face a dual-track supervisory relationship, national day-to-day conduct oversight alongside AMLA-level review of higher-risk cross-border exposure. This is architecture-over-incident framing: it illustrates a structural possibility inherent in the AMLR/AMLA transition design, not a forecast of any specific enforcement action or supervisory decision.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | material_change | Hungary's veto-then-adoption pattern on the 20th package and renewed bespoke carve-outs in the 21st package materially affect architecture integrity at member-state level. |
| T2 · EU AML Package / AMLA | no_change | No HU-specific AMLR/6AMLD transposition or AMLA supervisory-perimeter development surfaced this cycle. |
| T3 · FATF Grey List | no_change | Hungary is not FATF/ICRG-listed; no plenary action affecting HU this cycle. |
| T4 · Beneficial-Ownership Register Status | no_change | MONEYVAL's prior follow-up upgraded HU to largely compliant on BO transparency of legal persons; no new development this cycle. |
| T5 · Crypto & Digital-Asset Integrity | no_change | Tracked by the crypto consumer; no independent D5 finding produced here. |
| T6 · Sanctions Regime Divergence | material_change | Hungary's intra-EU obstruction of Russia sanctions packages and its bespoke exemptions represent a clear internal EU divergence pattern. |