Financial Integrity Monitor

Hungary HU

Domains (D1–D6)
1
Sources
12
Role actions
8
Horizon <90d
1
Jurisdiction profile
Largely CompliantTier BRisk: IncreasingMixed

Hungary is a MONEYVAL-assessed EU member with a largely-compliant technical AML/CFT framework (38 of 40 FATF Recommendations rated LC/C per the latest follow-up); HFIU (within NAV) is the FIU and MNB supervises financial-sector AML/CFT.

MoreCore exposure is political-level sanctions dilution and BO opacity in residency-by-investment schemes, not technical non-compliance.

Key deficiencies
  • R.8 (NPO risk-based oversight) and R.32 (cross-border cash/BNI) remain Partially Compliant in MONEYVAL follow-up
  • Beneficial ownership opacity persists in offshore intermediary structures used for residency-by-investment schemes
  • Executive-branch conduct (Foreign Ministry) actively diluting/vetoing EU Russia sanctions packages undermines the jurisdiction's nominal sanctions-implementation posture
Recent developments (18m)
  • OFAC designated PM Cabinet Office Minister Antal Rogán for corruption (January 2025)
  • Hungary negotiated a 'Kirill' exemption and other carve-outs in the EU 16th sanctions package (February 2025)
  • EU adopted 18th sanctions package on 18 July 2025 after Hungary/Slovakia delays
  • OCCRP/VSquare investigation ('Hotline to the Kremlin') revealed Foreign Minister Szijjártó coordinating sanctions dilution with Russian officials (published 2026)
  • Hungary vetoed the EU's 20th sanctions package outright in February 2026 over Druzhba pipeline flows
  • Hungary's MiCA transitional period for crypto-asset service providers closed early, on 30 June 2025
  • European Commission opened/pursued an infringement procedure over Hungary's 'Transparency of Public Life' (Sovereignty Protection Office) bill targeting foreign-funded NGOs (2025)

Law made at European Economic Area level that applies in Hungary is covered once, on the European Economic Area page. This page covers Hungary’s own layer: implementation, national authorities, national options and local enforcement.

Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Hungary's digital-asset architecture underwent a structural simplification this cycle. Act XXXVIII of 2026, effective 7 August 2026, repealed the distinct national requirement, in force since 1 July 2025, that crypto-to-fiat and crypto-to-crypto conversions be pre-validated by a licensed local validating service provider. Days before that repeal took effect, on 20 July 2026, Magyar Nemzeti Bank issued Hungary's first domestically-issued MiCA crypto-asset service provider licence to Tiwala Solutions Kft, trading as CoinCash, covering custody, exchange, transfer, investment advice and portfolio management. Read together, these two developments move Hungary from a bespoke national control layer atop MiCA toward full reliance on the harmonised EU framework, with the country's first domestic CASP now operating squarely inside that regime.

This is best read as consolidation rather than deregulation. The repealed validation layer duplicated obligations that MiCA and the Transfer of Funds Regulation now carry directly, so removing it collapses two overlapping compliance tracks into one rather than lowering the substantive bar CASPs must clear.

Other Developments

Bank AML/CTF remediation gap. Hungary's central bank fined OTP Bank HUF 28 million and MBH Bank HUF 15 million for AML/CTF deficiencies that had been flagged in 2023-24 supervisory decisions and remained unresolved past an August 2024 remediation deadline. The gap between the original finding, the lapsed remediation deadline, and the eventual fine spans more than a year, a pattern worth tracking independent of the amounts involved, which are modest relative to the institutions fined. No primary enforcement-register citation confirming the exact 2026 decision date was retrieved this cycle, so this finding is carried at reduced confidence.

6AMLD transposition posture. Industry commentary expects Hungary to absorb the Sixth Anti-Money Laundering Directive into its existing Act LIII of 2017 (the Pmt. Act) rather than adopt a standalone transposition statute. This is a Probable-confidence expectation only; no primary legislative text confirming the transposition mechanism was retrieved this cycle. It sits against the backdrop of the EU AML Package's broader architecture, addressed below.

Sanctions posture normalisation. Hungary's earlier vetoes of the EU's 20th Russia sanctions package, linked to Druzhba pipeline disruption concerns, were resolved following the change of government after the 12 April 2026 election. The subsequently adopted 21st sanctions package, of 23 July 2026, retains only a narrow Hungary-specific exemption for saturated acyclic hydrocarbons running through 31 December 2026. This is background normalisation rather than a new evasion-architecture finding.

Cross-Monitor Connections

The MiCA CASP licensing and validation-repeal findings are directly relevant to the crypto monitor's licensing and cross-border-transfer coverage of the same jurisdiction, since both trace to the same underlying regulatory shift toward full MiCA reliance. The ATM Act development tracked separately in world-payments coverage of Hungary sits in the same national regulatory environment but reflects a distinct policy strand, physical payment-infrastructure access rather than financial-crime control architecture, and no connection between the two is asserted here.

Outlook

The near-term marker to watch is whether the Hungarian CASP register expands beyond its first licensee, and whether any transitional or grandfathering provisions attach to the repealed validation regime for firms that had been licensed under it. On the AML/CTF side, the more structurally significant marker is 6AMLD transposition: the EU's AMLR becomes directly applicable from 10 July 2027, and how Hungary chooses to fold 6AMLD into the existing Pmt. Act, or does not, will be the clearer test of the country's alignment trajectory than this cycle's enforcement actions.

weekly_brief_draft · JID HU
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto, Digital Assets, and Financial Innovation

Crypto, Digital Assets, and Financial Innovation

Continue reading

Hungary's digital-asset compliance architecture shifted structurally this cycle. Act XXXVIII of 2026 took effect 7 August 2026, repealing the country's distinctive national requirement, in force since 1 July 2025, that crypto-asset conversions between crypto and fiat, and between crypto and crypto, be pre-validated by a licensed local validating service provider. That requirement had sat as a national layer atop the EU's Markets in Crypto-Assets Regulation, and its removal is confirmed by two independent trade-press sources naming the same Act number and effective date.

The repeal did not occur in isolation. On 20 July 2026, ahead of the repeal taking effect, Magyar Nemzeti Bank granted Tiwala Solutions Kft, operating as CoinCash, Hungary's first domestically-issued MiCA crypto-asset service provider licence. The authorisation covers custody, crypto-to-fiat and crypto-to-crypto exchange, transfer services, investment advice, and portfolio management, the full suite of CASP activities under MiCA. Three independent outlets corroborate the licensee's identity, the date, and the issuing authority, supporting Confirmed-tier treatment of this claim.

The analytical read is that this is consolidation, not weakening. The removed national validation layer duplicated controls that MiCA and the EU's Transfer of Funds Regulation (TFR) now impose directly on CASPs, including Travel Rule obligations on cross-border transfers. A national gold-plating requirement disappearing while the underlying harmonised framework remains fully in force is a simplification of the compliance map for firms operating in Hungary, not a reduction in the substantive AML/CTF standard applied to crypto-asset activity. This reading carries Probable confidence: it reflects an analytical judgment about the net effect of the two developments rather than a directly sourced statement.

A residual question, not resolved this cycle, is whether the repeal carries any transitional or grandfathering provisions for entities that were licensed or in process under the pre-repeal validation regime. No primary Hungarian legislative text was retrieved this cycle to confirm transposition mechanics of the related 6AMLD file, which bears on the same obliged-entity population going forward, since 6AMLD is expected to be folded into the existing Act LIII of 2017 (Pmt.) structure rather than a standalone statute.

Outlook

The marker to watch is whether Hungary's CASP register expands beyond CoinCash in the coming cycles, which would indicate the new MiCA-only regime is functioning as a genuine on-ramp rather than a one-off. Separately, the interaction between the repealed validation regime and any transitional provisions for previously-licensed local validators remains an open question that a primary-source Hungarian legislative or MNB publication could resolve. The broader EU AML Package, the AML Regulation (Reg (EU) 2024/1624), the sixth AML Directive, and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority, sets the structural direction for obliged-entity supervision generally, including crypto-asset service providers, as the EU shifts from purely national supervision toward a hybrid EU-level regime with AMLA taking direct or indirect supervisory responsibility for higher-risk cross-border entities; Hungary's CASP population would fall within that shifting perimeter once AMLR becomes directly applicable from 10 July 2027.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
Proposed2027-Q3 · ±year

6AMLD national transposition via amendment of Act LIII of 2017

Anticipated strengthening of FIU powers, supervisory cooperation and BO-register access rules under the harmonised EU AML framework.
1 dated · 5 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

Hungary repealed its national crypto-conversion validation requirement and MNB issued the country's first MiCA CASP licence, consolidating AML control onto the harmonised EU framework.

The removal of a duplicate national control layer means SAR-relevant monitoring for Hungarian crypto exposure now runs entirely through MiCA/TFR-aligned CASP obligations rather than a parallel domestic validation check. Separately, MNB's fines against OTP Bank and MBH Bank for unresolved 2023-24 AML/CTF deficiencies signal that remediation timelines are being enforced, even where enforcement lags the original finding by over a year.

3 evidence refs
Compliance

A national crypto-validation layer duplicating MiCA obligations has been repealed, and 6AMLD is expected to be transposed via amendment to the existing Pmt. Act rather than new legislation.

Compliance functions with Hungarian crypto-asset exposure can retire tracking of the repealed local validation requirement, but should watch for confirmation of 6AMLD transposition mechanics, since the expected route (amending Act LIII of 2017) has not yet been confirmed by primary legislative text.

2 evidence refs
Legal

No material change this cycle.

No material change for this persona this cycle

Board

Hungary's digital-asset regime consolidated onto MiCA following repeal of a bespoke national validation requirement and issuance of the country's first domestic CASP licence.

This is a liberalising structural shift rather than a weakening of standards, and is relevant to board-level oversight of any Hungarian crypto-asset exposure or counterparty relationships as the jurisdiction's regulatory profile normalises toward the EU baseline.

2 evidence refs
CTO

Hungary's CASP licensing and cross-border-transfer control architecture now runs solely through MiCA/TFR following repeal of the national crypto-validation layer.

Technical infrastructure supporting Hungarian crypto-asset operations, including Travel Rule data-sharing implementations, no longer needs to accommodate the separate local validating-service-provider integration point that existed from 1 July 2025 to 7 August 2026.

1 evidence refs
Risk

A duplicate national control layer for crypto conversions has been removed in Hungary, and a supervisory remediation gap of over a year is visible in the OTP/MBH AML/CTF fines.

The crypto-control simplification reduces operational-risk surface from maintaining two overlapping compliance tracks, while the bank AML/CTF fines illustrate that remediation-timeline risk can persist well past an initial supervisory finding before enforcement follows.

2 evidence refs
Operations

No material change this cycle.

No material change for this persona this cycle

Audit

Hungary's fines against OTP Bank and MBH Bank stem from AML/CTF deficiencies unresolved past an August 2024 remediation deadline, evidencing a documented multi-year gap between finding and remediation.

This is a useful reference point for testing the adequacy of remediation-tracking controls and documented evidence trails between an initial supervisory finding and confirmed closure, given the gap exceeded a year in this instance.

1 evidence refs
Decision lens
MLRO

Hungary repealed its national crypto-conversion validation requirement and MNB issued the country's first MiCA CASP licence, consolidating AML control onto the harmonised EU framework.

Compliance

A national crypto-validation layer duplicating MiCA obligations has been repealed, and 6AMLD is expected to be transposed via amendment to the existing Pmt.

Legal

No material change this cycle.

Board

Hungary's digital-asset regime consolidated onto MiCA following repeal of a bespoke national validation requirement and issuance of the country's first domestic CASP licence.

CTO

Hungary's CASP licensing and cross-border-transfer control architecture now runs solely through MiCA/TFR following repeal of the national crypto-validation layer.

Risk

A duplicate national control layer for crypto conversions has been removed in Hungary, and a supervisory remediation gap of over a year is visible in the OTP/MBH AML/CTF fines.

Operations

No material change this cycle.

Audit

Hungary's fines against OTP Bank and MBH Bank stem from AML/CTF deficiencies unresolved past an August 2024 remediation deadline, evidencing a documented multi-year gap between finding and remediation.

Shared evidence: 2 refs
Scenario sketches

AMLA supervisory transition reshaping cross-border CASP oversight

As the AML Regulation becomes directly applicable across the EEA from 10 July 2027 and the AMLA Regulation establishes a hybrid EU-level supervisory perimeter, one illustrative trajectory is that cross-border crypto-asset service providers headquartered or passporting through smaller Member States, Hungary among them, could see a portion of their supervisory relationship shift from the national regulator toward AMLA direct or indirect oversight. Under such a trajectory, a Hungarian CASP with material cross-border volume might face a dual-track supervisory relationship, national day-to-day conduct oversight alongside AMLA-level review of higher-risk cross-border exposure. This is architecture-over-incident framing: it illustrates a structural possibility inherent in the AMLR/AMLA transition design, not a forecast of any specific enforcement action or supervisory decision.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architecturematerial_changeHungary's veto-then-adoption pattern on the 20th package and renewed bespoke carve-outs in the 21st package materially affect architecture integrity at member-state level.
T2 · EU AML Package / AMLAno_changeNo HU-specific AMLR/6AMLD transposition or AMLA supervisory-perimeter development surfaced this cycle.
T3 · FATF Grey Listno_changeHungary is not FATF/ICRG-listed; no plenary action affecting HU this cycle.
T4 · Beneficial-Ownership Register Statusno_changeMONEYVAL's prior follow-up upgraded HU to largely compliant on BO transparency of legal persons; no new development this cycle.
T5 · Crypto & Digital-Asset Integrityno_changeTracked by the crypto consumer; no independent D5 finding produced here.
T6 · Sanctions Regime Divergencematerial_changeHungary's intra-EU obstruction of Russia sanctions packages and its bespoke exemptions represent a clear internal EU divergence pattern.
Registers

Enforcement actions

  • OFAC designated Rogán, a close Orbán ally, over allegations of diverting public funds via a residency-bond scheme, government communications contracts, and related corruption networks; his US-based assets were frozen and he was barred from dealings with US persons. 10 Jan 2025
  • OFAC issued and maintained General Licences (including GL 132 and amendments to GL 115D) specifically authorizing transactions with the Central Bank of the Russian Federation and sanctioned Russian entities where necessary for the Paks II project in Hungary, carving the project out of the broader Russia sovereign-transactions sanctions architecture. 10 Jan 2025
  • The EU adopted its 18th Russia sanctions package on 18 July 2025 after weeks of delay attributed to Hungary and Slovakia; the package targeted shadow-fleet vessels and third-country financial intermediaries, with Hungary's Foreign Minister separately claiming credit for narrowing its scope before adoption. 18 Jul 2025
  • The European Commission pursued/expanded an infringement procedure against Hungary over legislation empowering the Sovereignty Protection Office to investigate, fine, and blacklist foreign-funded NGOs and media, on grounds it may violate core EU principles including on transparency of funding flows. 14 May 2025

Sanctions changes

  • OFAC designated Antal Rogán, a senior Hungarian minister and Orbán ally, for corruption-related conduct including a residency-bond scheme and misuse of government communications contracts. 10 Jan 2025
  • During negotiation of the EU's 16th Russia sanctions package, Hungary secured a 'Kirill' exemption for a sanctioned Russian religious figure/oligarch-linked target and protected the Russian Olympic Committee and two Russian football clubs from listing. 1 Feb 2025
  • The EU adopted its 18th sanctions package on 18 July 2025, targeting Russia's shadow fleet and third-country banks/financial operators, after Hungary and Slovakia delayed adoption over specific bank delistings. 18 Jul 2025
  • Hungary vetoed the EU's 20th Russia sanctions package outright in February 2026, the first time it blocked an entire package rather than negotiating carve-outs, citing a dispute over Druzhba pipeline oil flows to Hungary and Slovakia. 23 Feb 2026

Regulatory horizon (register)

  • EU AML Regulation (AMLR) becomes directly applicable
  • 6AMLD transposition deadlines for Hungary (national supervisors, FIU powers)
  • EU-wide MiCA transitional-period hard deadline
  • Hungarian parliamentary election and EU oil-ban proposal timing
  • MONEYVAL next enhanced follow-up report on Hungary

Active schemes

  • [HIGH] Residency-by-investment BO opacity via offshore intermediaries
  • [CRITICAL] Intra-EU sanctions dilution channel via Hungarian veto leverage
  • Paks II nuclear project sanctions carve-out corridor
  • Russian-controlled IIB hosted on Hungarian soil (legacy)
Sources
  1. FATF / MONEYVAL
  2. Magyar Nemzeti Bank (Central Bank of Hungary)
  3. U.S. Department of the Treasury / OFAC
  4. Council of the European Union
  5. OCCRP / VSquare / FRONTSTORY / Delfi Estonia / The Insider / ICJK
  6. OCCRP
  7. Bloomberg
  8. Elliptic
  9. OCCRP
  10. OCCRP
  11. Council of the European Union
  12. Bloomberg
Coverage gaps
Hungary's MONEYVAL follow-up confirms 38 of 40 FATF Recommen…
Hungary's MONEYVAL follow-up confirms 38 of 40 FATF Recommendations rated Largely Compliant or Compliant, but Recommendation 8 (NPO risk-based oversight) and Recommendation 32 (cross-border cash/bearer negotiable instruments) remain Partially Compliant.
Despite technical AML/CFT compliance, Hungary's Foreign Mini…
Despite technical AML/CFT compliance, Hungary's Foreign Ministry has directly coordinated with Russian officials to remove entities from EU sanctions lists and to delay or dilute sanctions packages, as documented through intercepted communications.
Hungary's residency-by-investment schemes (residency bonds a…
Hungary's residency-by-investment schemes (residency bonds and the current guest-investor program) route foreign capital through intermediary companies without robust public beneficial-ownership disclosure, and past buyer identities have not been disclosed even where PEP or sanctions-list exposure was alleged.
Hungary's 'Transparency of Public Life' bill would empower t…
Hungary's 'Transparency of Public Life' bill would empower the Sovereignty Protection Office to investigate, fine (up to 25x foreign funding received), and blacklist NGOs and media receiving foreign/EU funding, potentially including anti-corruption watchdogs.

Evidence

Confidence-tiered claims

MONEYVAL 5th-round on-site mutual evaluation scheduled October 2026, plenary May 2027 SRC-fim-HU-001
Probable · 1 source
Authorities impose a documentary-evidence-of-direct-link condition on BOR access requests exceeding AMLD6's prescribed access model SRC-fim-HU-004
Uncertain · 1 source
Hungary reported as one of three EEA states without a domestic CASP in ESMA's MiCA register as of 30 Sept 2026, in tension with July 2026 reporting of an MNB CASP grant to CoinCash/Tiwala Solutions SRC-fim-HU-003
Disputed · 1 source
Act XXXVIII of 2026 repealed Hungary's SARA/SZTFH crypto-conversion validator regime and associated Criminal Code offences, in force 7 August 2026, following EC infringement proceeding INFR(2025)2174 opened 30 January 2026 SRC-fim-HU-007
Probable · 1 source
Act LIII of 2017 (AML Act) plus Act XLIII of 2021 (UBO Act) implement EU AML Directives; AMLR (Reg 2024/1624) directly applicable; AMLD6 under staged transposition; MNB is financial-sector AML/CFT supervisor SRC-fim-HU-001
Probable · 1 source