Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Poland PL

Domains (D1–D6)
2
Sources
12
Role actions
8
Jurisdiction profile
Largely CompliantTier BRisk: StableMixed

Poland's AML/CFT regime rests on the 2018 AML/CFT Act (transposing 5AMLD), supervised by GIIF (FIU, Ministry of Finance) and KNF for the financial sector.

MoreMONEYVAL's 2021 MER found largely-compliant technical standing with effectiveness gaps in DNFBP supervision, legal-person risk understanding, and VASP-specific oversight; incremental re-ratings continue through 2023-2025 follow-up reports.

Key deficiencies
  • No supervision of DNFBP sectors not subject to mandatory registration; registered DNFBPs (other than notaries) subject to markedly lower supervisory intensity
  • No VASP-specific AML/CFT legal framework or dedicated regulator; CASPs regulated only via general obliged-institution registry
  • Legal persons (shell companies fronted by 'straw men') identified as a primary ML vector for VAT/excise fraud, with only partial NRA-level assessment
  • No methodological guidelines for TF investigations, limiting integration into national counter-terrorism strategy
Recent developments (18m)
  • MONEYVAL/FATF follow-up report (December 2025) re-rated Recommendation 8 (NPOs) from Partially Compliant to Largely Compliant; Poland now stands at 3 Compliant, 25 Largely Compliant, 12 Partially Compliant
  • Poland held EU Council Presidency H1 2025 and led adoption of the 16th Russia sanctions package, prioritising shadow-fleet enforcement
  • March 2025 Warsaw seminar (GIIF-hosted) on EU AML/CFT package implementation and AMLA's future crypto-asset supervisory role
  • Series of OLAF/EPPO-Poland joint operations (April 2025, April 2026) uncovering shell-company VAT/customs fraud networks exceeding EUR 190 million combined

Law made at European Economic Area level that applies in Poland is covered once, on the European Economic Area page. This page covers Poland’s own layer: implementation, national authorities, national options and local enforcement.

Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Poland this cycle carries two structurally linked developments: a domestic AML Act draft amendment, project UC75, that would restrict access to the Central Register of Beneficial Owners and introduce a new SIGIIF reporting system built on the GoAML architecture, and a continuing capacity gap at the Komisja Nadzoru Finansowego, which remains unable to grant MiCA CASP authorisations after the Crypto-Assets Market Act was vetoed by the President twice, on 2 December 2025 and again on 12 February 2026. The two developments sit in different pillars, corporate transparency and crypto-asset supervision, but both describe the same underlying dynamic: Poland is a jurisdiction where EU-level architecture is arriving on schedule while the domestic implementing statute lags behind it.

The UC75 draft would restrict CRBR access ahead of the 10 July 2026 transposition deadline for the beneficial-ownership register provisions of the sixth EU Anti-Money Laundering Directive. Restricting access to a beneficial-ownership register, rather than expanding it, is a notable direction of travel and worth watching for how it interacts with the broader EU push toward harmonised BO transparency.

Other Developments

The MiCA transitional cliff approaches with no domestic licensing pathway resolved. Entities on Poland's Virtual Currency Activity Register, the RDWW, registered before 30 December 2024, may continue operating only until 1 July 2026 under the transitional regime set out in MiCA Article 143(3). After that date, continued unauthorised provision of crypto-asset services breaches EU law regardless of Poland's domestic implementation status, per ESMA's 17 April 2026 statement. With the implementing statute vetoed twice, KNF has no mechanism to process CASP applications ahead of that date, leaving legacy Polish VASPs without a confirmed domestic route to authorisation as the deadline nears.

GIIF's direct-supervision scope already spans currency exchange and crypto-asset activity. Independent of the CASP-authorisation gap, the General Inspector of Financial Information directly supervises entities including currency exchange operators and crypto-asset service providers under the Act of 1 March 2018 on Counteracting Money Laundering and Terrorist Financing. This existing AML supervisory reach means that crypto-asset firms operating in Poland remain subject to AML obligations and GIIF oversight even while the MiCA-specific licensing question remains unresolved, a distinction between AML supervision, which continues, and CASP prudential authorisation, which does not yet exist domestically.

Cross-Monitor Connections

The crypto-supervision capacity gap identified here is the same underlying fact set that the crypto monitor's own crypto_licensing module addresses from a licensing-pathway perspective; where that monitor situates the KNF gap within Poland's overall CASP timeline, this brief reads the identical vetoes and 1 July 2026 cliff for their AML/CTF exposure implication, namely a period in which crypto-asset firms may operate under GIIF's AML supervision without a settled prudential authorisation regime layered on top. Readers tracking Poland's crypto market structure should read the two monitors together rather than in isolation.

Outlook

The most consequential near-term marker is 1 July 2026, when the RDWW transitional regime expires. Absent a resolved Crypto-Assets Market Act, Polish VASPs face a genuine authorisation vacuum at that date, a supervisory gap rather than an enforcement action, and one this brief flags as analytically significant precisely because there is no enforcement to observe yet. On beneficial ownership, the 10 July 2026 AMLD6 transposition deadline for BO-register provisions is the marker to watch alongside the UC75 draft's progress through the legislative process; whether the draft's CRBR access restriction is adopted as proposed, and how it is squared with AMLD6's transparency objectives, remains open.

weekly_brief_draft · JID PL
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership and Corporate Transparency

Beneficial Ownership and Corporate Transparency

Continue reading

The EU AML Package establishes a durable structural architecture behind every Member State's beneficial-ownership regime: the AML Regulation, AMLR (Regulation (EU) 2024/1624), which applies directly across the EU without national transposition; the sixth AML Directive, 6AMLD, transposed individually by each Member State; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and shifts supervision of certain cross-border obliged entities from purely national authorities toward a hybrid EU-level regime combining direct and indirect AMLA supervision. This architecture is the standing backdrop against which Poland's own beneficial-ownership signal this cycle should be read.

Against that backdrop, Poland's own development this cycle is a draft AML Act amendment, project UC75, which would restrict access to the Central Register of Beneficial Owners, the CRBR, and introduce a new IT reporting system, SIGIIF, built on the GoAML architecture. The draft also introduces new weapons-of-mass-destruction proliferation risk assessments for obliged institutions. UC75 implements elements of the 6AMLD transposition Poland must complete, with the beneficial-ownership register provisions of that directive carrying a 10 July 2026 deadline. Restricting access to a beneficial-ownership register, rather than expanding public or third-party access, runs somewhat against the general direction of EU BO-transparency policy, though it is consistent with a broader European trend of narrowing public CRBR-style access following the Court of Justice of the European Union's 2022 ruling on unrestricted public BO-register access, even though that ruling itself is outside this cycle's evidenced material.

The evidentiary basis for UC75's exact status is currently a single T3 law-firm source; no Sejm or Government Legislation Centre (RCL) primary document was retrieved this cycle to confirm the draft's exact legislative stage or timeline. This is a material evidentiary gap given the significance of the 10 July 2026 deadline it is meant to satisfy: whether UC75 will actually be enacted, amended, or delayed before that date is not established by the material available this cycle.

Outlook

The marker to watch is 10 July 2026, the AMLD6 transposition deadline for beneficial-ownership register provisions. Whether UC75 passes in its current form, restricting rather than expanding CRBR access, or is amended during the legislative process, will determine whether Poland's transposition is judged compliant with the Directive's transparency objectives or creates friction with them. A primary-source check against the Sejm bill tracker or RCL register would materially improve confidence in this assessment ahead of that date.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto / Digital Assets / Financial Innovation

Continue reading

Poland's crypto-asset supervisory architecture this cycle is defined by a capacity gap rather than an enforcement event, which is itself the analytically significant fact. The Komisja Nadzoru Finansowego, KNF, remains without national competence to grant MiCA CASP authorisations. The implementing statute that would have conferred that competence, the Polish Crypto-Assets Market Act, has been vetoed by the President twice, on 2 December 2025 and again on 12 February 2026. This is corroborated across multiple independent T3 legal-practitioner sources on the veto dates and mechanism, though no T1 KNF or Sejm document was retrieved this cycle to confirm the exact veto dates against a primary record.

The consequence of this gap is a hard transitional cliff. Entities on Poland's Virtual Currency Activity Register, the RDWW, that were registered before 30 December 2024 may continue operating only until 1 July 2026, or until obtaining a CASP authorisation, whichever comes first, under the transitional regime in MiCA Article 143(3). After 1 July 2026, continued unauthorised provision of crypto-asset services breaches EU law regardless of Poland's domestic implementation status, according to ESMA's statement of 17 April 2026. Because KNF cannot yet process CASP applications, no entity on the Polish VASP register will obtain a CASP licence in Poland before that date, leaving an authorisation vacuum for legacy Polish VASPs precisely when the transitional protection expires.

This is not, however, a supervisory void in every respect. The General Inspector of Financial Information, GIIF, directly supervises entities including currency exchange operators and crypto-asset service providers under the Act of 1 March 2018 on Counteracting Money Laundering and Terrorist Financing. AML/CTF obligations and GIIF oversight therefore continue to apply to crypto-asset firms operating in Poland independent of the unresolved CASP-authorisation question. The gap is specifically in MiCA prudential authorisation, not in AML supervision as such.

Outlook

1 July 2026 is the operative date. Absent legislative resolution of the Crypto-Assets Market Act before then, Poland faces a period in which legacy VASPs have no confirmed domestic authorisation route under MiCA while remaining subject to GIIF's AML/CTF supervision. Whether the government attempts a third legislative pass at the implementing statute, and whether the President's objections from the two prior vetoes are addressed, are the key legislative-process questions to track. A primary KNF or Sejm source confirming the veto dates and any subsequent legislative timeline would materially strengthen this assessment.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
No dated horizon items this cycle. 4 items tracked without a confirmed date.
4 pending date · baseline fim-2026-07-08
Role action cards
MLRO

GIIF's direct AML supervision of crypto-asset service providers continues regardless of the unresolved MiCA CASP-authorisation gap.

MLRO functions at crypto-asset firms operating in or into Poland should note that AML/CTF reporting obligations to GIIF remain in force under the Act of 1 March 2018 independent of the CASP-licensing question; the absence of a domestic MiCA authorisation pathway does not suspend AML obligations.

2 evidence refs
Compliance

A draft AML Act amendment (UC75) would restrict CRBR beneficial-ownership register access and introduce a new SIGIIF reporting system.

Compliance functions relying on CRBR lookups for beneficial-ownership verification in Poland should track UC75's progress, as restricted access could change existing due-diligence workflows ahead of the 10 July 2026 AMLD6 transposition deadline.

1 evidence refs
Legal

The Crypto-Assets Market Act has been vetoed twice by the President, leaving KNF without competence to grant MiCA CASP authorisations.

Legal counsel advising crypto-asset clients on Polish market entry should treat the domestic CASP-authorisation pathway as unresolved and the 1 July 2026 transitional cliff under MiCA Article 143(3) as a live deadline with no confirmed domestic resolution.

2 evidence refs
Board

Poland's crypto-asset supervisory framework carries a structural authorisation gap heading into a hard 1 July 2026 deadline.

Board-level oversight of any Polish crypto-asset exposure should register that the gap is legislative and structural, a twice-vetoed statute, not an isolated enforcement incident, meaning resolution timing depends on the domestic legislative process rather than regulatory discretion.

2 evidence refs
CTO

Legacy Polish VASPs face a 1 July 2026 cliff with no confirmed domestic CASP-authorisation route.

Technical and platform teams supporting crypto-asset infrastructure serving Polish users should plan for the possibility that no domestic authorisation exists past 1 July 2026, and should evaluate cross-border CASP passporting or infrastructure contingencies ahead of that date.

1 evidence refs
Risk

Poland's risk direction is assessed as increasing, driven by a capacity deficit in crypto-asset supervision and a structural, not episodic, gap.

Risk functions should treat the KNF authorisation gap and the CRBR access-restriction draft as structural developments requiring monitoring against fixed statutory deadlines (1 July 2026 and 10 July 2026) rather than as one-off events.

3 evidence refs
Operations

No material change for this persona this cycle.

No material change for this persona this cycle

Audit

The evidentiary basis for the UC75 draft's legislative status rests on a single T3 source with no primary Sejm or RCL document retrieved this cycle.

Audit functions should note the documented evidentiary gap around UC75's exact legislative stage and the 12 February 2026 veto date, both flagged in the gaps register as unconfirmed against primary sources.

2 evidence refs
Decision lens
MLRO

GIIF's direct AML supervision of crypto-asset service providers continues regardless of the unresolved MiCA CASP-authorisation gap.

Compliance

A draft AML Act amendment (UC75) would restrict CRBR beneficial-ownership register access and introduce a new SIGIIF reporting system.

Legal

The Crypto-Assets Market Act has been vetoed twice by the President, leaving KNF without competence to grant MiCA CASP authorisations.

Board

Poland's crypto-asset supervisory framework carries a structural authorisation gap heading into a hard 1 July 2026 deadline.

CTO

Legacy Polish VASPs face a 1 July 2026 cliff with no confirmed domestic CASP-authorisation route.

Risk

Poland's risk direction is assessed as increasing, driven by a capacity deficit in crypto-asset supervision and a structural, not episodic, gap.

Operations

No material change for this persona this cycle.

Audit

The evidentiary basis for the UC75 draft's legislative status rests on a single T3 source with no primary Sejm or RCL document retrieved this cycle.

Shared evidence: 3 refs
Scenario sketches

AMLA transition and the CRBR access-restriction pattern

Illustrative orientation only. As the AMLA Regulation, Reg (EU) 2024/1620, moves the EU toward direct and indirect supervision of cross-border obliged entities alongside the directly-applicable AMLR, Reg (EU) 2024/1624, and per-state 6AMLD transposition, a jurisdiction's choice to restrict rather than expand beneficial-ownership register access, as Poland's UC75 draft illustrates, could interact with AMLA's supervisory reach in ways not yet settled: a hybrid EU-level regime may press for harmonised access standards even where individual Member States move to narrow domestic access. This is a structural possibility to orient analysis, not an observed outcome or a prediction of how AMLA will in fact respond to national access-restriction choices.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architecturestable
T2 · EU AML Package / AMLAstable
T3 · FATF Grey Liststable
T4 · Beneficial-Ownership Register Statusstable
T5 · Crypto & Digital-Asset Integrityescalating
T6 · Sanctions Regime Divergencestable
Registers

Enforcement actions

  • KAS imposed a 20 million zloty ($5.5 million) fine for intentional violation of EU sanctions via purchase and re-export of luxury cars to Russia through Poland, Lithuania and Belarus during 2022-2023. 21 Apr 2026
  • Following an OLAF referral, Polish authorities (ABW, KAS, CBŚP, CBZC) arrested four individuals, searched 50 locations, and seized documentation, telephones and nearly 300 company stamps linked to a shell-company VAT fraud network. 8 Apr 2025
  • EPPO opened a criminal investigation, leading to detention of nine suspects, in connection with a scheme importing goods via the Polish-Belarusian border under falsely declared EU transit procedures, evading an estimated EUR 118 million in customs duties and EUR 79 million in VAT. 28 Apr 2026
  • CBA arrested additional suspects, including a deputy director and IT/procurement officials, in the widening Kraków court corruption scandal involving bribery, fraud and money laundering through fictitious consulting/IT contracts and shell companies tied to court insiders. 19 Mar 2026
  • MONEYVAL's enhanced follow-up report re-rated Poland's Recommendation 8 (non-profit organisation oversight) from Partially Compliant to Largely Compliant, reflecting incremental strengthening of NPO-sector AML/CFT controls. 1 Dec 2025

Sanctions changes

  • EU 19th sanctions package (October 2025) designated the developer and Kyrgyz issuer of the ruble-backed stablecoin A7A5, together with third-country banks and oil traders in Tajikistan, Kyrgyzstan, the UAE and Hong Kong, directly binding on Poland as an EU Member State's obliged institutions. 23 Oct 2025
  • EU 20th sanctions package (April 2026) introduced a total sectoral ban on Russian crypto-asset service providers, prohibited the RUBx stablecoin and digital ruble, listed 46 further shadow-fleet vessels (632 total) and activated the EU's anti-circumvention tool against Kyrgyzstan for the first time — all directly applicable in Poland via EU regulation. 23 Apr 2026
  • UK OFSI designated 'Alliance Capital' (address registered in Poland) under the Russia (Sanctions) (EU Exit) Regulations 2019, alongside Abel Logistics Ltd, with asset freeze and trust-services sanctions. 24 Feb 2026

Regulatory horizon (register)

  • AMLR application and 6AMLD transposition deadline
  • AMLA direct-supervision selection cycle for cross-border entities
  • MiCA transitional-window closure for Polish CASPs
  • EU Commission technical assistance to strengthen Polish FIU NRA/SRA methodology

Active schemes

  • [HIGH] Luxury/dual-use goods transshipment to Russia via Poland
  • [HIGH] Poland-Belarus border customs transit-fraud network
  • China-Germany-Poland VAT 'customs procedure 42' fraud
  • Kaliningrad-Poland tobacco smuggling and crypto/property laundering
Sources
  1. MONEYVAL / FATF
  2. FATF / MONEYVAL
  3. European Anti-Fraud Office (OLAF)
  4. European Anti-Fraud Office (OLAF)
  5. Bloomberg
  6. Council of the European Union (Consilium)
  7. UK Office of Financial Sanctions Implementation (OFSI)
  8. OCCRP
  9. European Commission (DG REFORM)
  10. Elliptic
  11. European Commission / AMLA Task Force
  12. ICIJ
Coverage gaps
MONEYVAL's MER found no supervision of DNFBP sectors not sub…
MONEYVAL's MER found no supervision of DNFBP sectors not subject to mandatory registration, and registered DNFBPs (aside from notaries) are subject to markedly lower-intensity, non-risk-rated supervision, leaving professional-enabler gatekeeping structurally weak.
FATF's 2024 follow-up review found no dedicated legal framew…
FATF's 2024 follow-up review found no dedicated legal framework or supervisory guidance addressing VASP-specific AML/CFT risks in Poland beyond general obliged-institution requirements; VASPs are registered but not subject to sector-tailored oversight.
MONEYVAL found Poland's prosecution service and law enforcem…
MONEYVAL found Poland's prosecution service and law enforcement agencies have not adopted methodological guidelines or instructions specific to terrorist-financing investigations, and could not demonstrate that TF investigations are integrated into national counter-terrorism strategy.
No conflict-finance or extractive-industry-integrity enforce…
No conflict-finance or extractive-industry-integrity enforcement action, scheme, or dedicated typology specific to Poland was identified within Tier 1/2 sources during this baseline window; Poland is not a resource-extraction or conflict-commodity transit hub in the reviewed material.

Evidence

Confidence-tiered claims

Poland remains the only EU state without an operative domestic MiCA CASP authorisation gateway post-transition, following the Sejm's third failed override vote (241/266 needed) of the president's veto of the Crypto-Asset Market Act on 2026-09-04. SRC-fim-PL-001
Probable · 1 source
On 2026-09-04 the Sejm's override vote (241 for, 198 against, 3 abstentions of 442 present) fell 25 votes short of the 266 (three-fifths) threshold needed to overturn the president's third veto of the Crypto-Asset Market Act. SRC-fim-PL-001
Probable · 1 source
On 2026-09-08 the president submitted a second compromise draft act, built largely on the vetoed government text, aimed at designating KNF as MiCA competent authority; it had not become law at time of search. SRC-fim-PL-002
Probable · 1 source
Approximately 2,000 Polish VASP entities currently fall outside MiCA-grade prudential, custody and conduct supervision, as Poland lacks a national CASP authorisation gateway; affected firms must seek authorisation via another EEA competent authority (e.g. Lithuania, Cyprus) or cease MiCA-covered activity. SRC-fim-PL-001
Probable · 1 source
GIIF, within the Ministry of Finance, remains Poland's FIU and primary AML/CFT supervisor of obliged institutions not covered by a sectoral regulator, including currency-exchange operators and crypto-asset providers. Maximum administrative pecuniary penalty is up to twice the benefit gained/loss avoided, capped at EUR 1,000,000. SRC-fim-PL-003
Probable · 1 source
The legacy Register of Activity in the Field of Virtual Currencies, administered by the Director of the Tax Administration Chamber in Katowice, has accepted no new entries since 30 December 2024. SRC-fim-PL-004
Probable · 1 source
Poland is not FATF-grey-listed; MONEYVAL follow-up reporting records progress on national risk assessment, beneficial ownership, virtual assets and statistical capacity under enhanced follow-up. SRC-fim-PL-005
Uncertain · 1 source