Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Portugal PT

Domains (D1–D6)
3
Sources
19
Role actions
8
Horizon <90d
1
Jurisdiction profile
Largely CompliantTier BRisk: StableMixed

Portugal has a technically sound AML/CFT legal framework (Law 83/2017 transposing EU AMLDs; RCBE beneficial-ownership register since 2018) supervised by Banco de Portugal (financial sector, incl.

MoreVASPs) and CMVM (securities). FATF's 2017 MER found the regime sound but flagged weak DNFBP implementation, low conviction rates and real-estate/legal-person vulnerabilities that persist structurally.

Key deficiencies
  • Weak historical implementation of AML obligations among DNFBPs (real estate agents, lawyers, auditors) despite adequate legal basis
  • RCBE beneficial-ownership register access restricted by legitimate-interest tests, EU-only e-ID authentication and mandatory TIN-based search, undermining public transparency
  • Golden Visa residency-by-investment scheme remains structurally exposed to real-estate-based laundering and PEP capital inflows despite 2023 property-investment route restriction
  • Historically low STR volumes and asset confiscation statistics relative to Portugal's exposure to foreign predicate-offence proceeds (esp. Lusophone-Africa PEP wealth)
Recent developments (18m)
  • MiCA (Markets in Crypto-Assets Regulation) became fully applicable across the EU from the start of 2025, requiring Portuguese CASPs to transition from the Banco de Portugal Notice 3/2021 VASP registration regime to MiCA authorisation
  • Portugal considered sweetening Golden Visa and NHR-successor tax incentives in mid-2025 even as Spain scrapped its equivalent scheme
  • EU adopted its 19th (Oct 2025) and 20th (Apr 2026) Russia sanctions packages, both directly applicable in Portugal as an EU member state, including first-ever activation of the EU anti-circumvention tool
  • AMLA became operational and began ramping up supervisory build-out (Frankfurt seat), with Portugal's national supervisors (Banco de Portugal, CMVM) remaining the frontline AML/CFT authorities pending 2027-28 direct-supervision selection

Law made at European Economic Area level that applies in Portugal is covered once, on the European Economic Area page. This page covers Portugal’s own layer: implementation, national authorities, national options and local enforcement.

Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Portugal closed a defined chapter in its digital-asset supervisory architecture this cycle. The transitional registration regime that had allowed virtual-asset service providers registered with Banco de Portugal as of 30 December 2024 to keep operating under a lighter, AML-only bar ended on 1 July 2026, per Law 69/2025. From that date, crypto-asset service providers operating in or serving Portugal fall fully under the Markets in Crypto-Assets Regulation authorisation structure, with Banco de Portugal and CMVM operating as joint supervisors of what was previously a single-regulator, lower-compliance-bar register. This is an architecture shift rather than an incident: the legal basis for operating a crypto business in Portugal has changed category, not merely tightened in degree.

The closure sits alongside two December 2025 statutory transpositions that reinforce the same direction. Law 70/2025 transposed Article 38 of Regulation (EU) 2023/1113, the crypto-asset Travel Rule, into Portuguese law by amending the core AML statute, Law 83/2017. Law 72/2025 transposed Directive (EU) 2024/1226 on criminal offences and penalties for violating EU restrictive measures, amending Law 97/2017. Read together, these three instruments describe a coordinated December 2025 to July 2026 tightening across the AML/CFT and digital-asset perimeter, arriving ahead of the July 2027 full application date of the EU AML Regulation and the Anti-Money Laundering Authority framework.

Other Developments

Beneficial ownership disclosure remains EU-timeline-dependent. Portugal's Central Register of Beneficial Owners, established under Law 89/2017, remains the operative national instrument, but the EU AML Package requires disclosure-regime improvements due 10 July 2026, including a lowered ownership threshold, new aggregation rules, a legitimate-interest access model, and a 14-day discrepancy-reporting requirement for obliged entities. Portugal's independent capacity to implement this tightened window has not been verified this cycle; the finding rests on a Tier-2 source rather than a primary Portuguese instrument, and should be read as a EU-level obligation landing on Portugal rather than confirmation of domestic delivery.

FATF standing is unchanged. Portugal is not named on FATF's current call-for-action or increased-monitoring lists. Its last full mutual evaluation dates to the third-round cycle under the 2004 methodology, meaning the jurisdiction's most recent authoritative assessment predates a substantial portion of the AML/CFT architecture described above. This is worth stating plainly rather than assuming: a jurisdiction can tighten its statute book considerably between mutual evaluations without that tightening yet being tested against the FATF's current methodology.

Cross-Monitor Connections

The MiCA CASP transition closure and the Travel Rule transposition both touch the crypto monitor's licensing and cross-border-transfer coverage for Portugal, and the advertising and product-rules tightening tracked on the gambling monitor sits in the same December 2025 to mid-2026 window without any evidenced statutory overlap between the two regimes. The payments monitor's tracking of PSD3/PSR at EU level is architecturally adjacent to the AML Package timeline described here, since both instruments move toward EU-level direct application on broadly overlapping horizons, though no single source connects the two regimes for Portugal specifically this cycle.

Outlook

The next dispositive date is 10 July 2026, when the AMLR and 6AMLD beneficial-ownership register provisions and AMLA technical standards fall due; whether Portugal's RCBE reform lands on schedule is the open question raised by this cycle's Tier-2 sourcing gap. The second dispositive date is 10 July 2027, full AMLR application, which will convert several of this cycle's transposition steps from national implementing measures into directly applicable EU law. Absent an updated fourth-round mutual evaluation, Portugal's FATF standing should be treated as stable rather than re-tested.

weekly_brief_draft · JID PT
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership and Corporate Transparency

Beneficial Ownership and Corporate Transparency

Continue reading

Structurally, the EU AML Package is three distinct instruments: the directly applicable AML Regulation (Reg (EU) 2024/1624), the sixth AML Directive transposed per Member State, and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority. Together they shift supervision from purely national authorities toward a hybrid EU-level regime, with AMLA taking on direct and indirect supervisory functions over a defined perimeter of obliged entities across the bloc. This structural backdrop is durable and applies to Portugal regardless of this cycle's specific developments, and it is the frame against which Portugal's own beneficial-ownership picture should be read this cycle.

Against that backdrop, the directly relevant Portuguese development is that the Central Register of Beneficial Owners, established under Law 89/2017, remains the operative national mechanism, but the EU AML Package requires disclosure-regime improvements due 10 July 2026. These include a lowered ownership threshold for reportable beneficial owners, new aggregation rules for indirect ownership chains, a legitimate-interest access model likely replacing the prior broader public-access provisions, and a 14-day discrepancy-reporting requirement for obliged entities that identify inconsistencies between register data and their own customer due-diligence findings.

The evidentiary basis for Portugal's readiness against this deadline is thin: the finding rests on a single Tier-2 source, and Portugal's independent implementing capacity for the tightened window has not been separately verified this cycle. This matters because the deadline sits ahead of the full AMLR application date of 10 July 2027, meaning Portugal has a defined, near-term interval in which to demonstrate whether its RCBE reform keeps pace with the EU timetable or lags it. A lag would be architecturally significant, not merely an administrative delay, because it would leave Portuguese obliged entities relying on beneficial-ownership data that has not yet absorbed the lowered-threshold and aggregation-rule changes that peer Member States are expected to have implemented by the same date.

From a corporate-transparency perspective, the coincidence of Portugal's BO-register reform deadline with its broader December 2025 AML/CFT tightening (the Travel Rule and sanctions-offence transpositions) suggests a jurisdiction moving in a coordinated direction across multiple AML pillars simultaneously, even where individual components, like the BO register, remain EU-timeline-dependent rather than autonomously driven. Enabler-jurisdiction and professional-facilitator dynamics that often attach to weak beneficial-ownership regimes were not separately evidenced for Portugal this cycle and should not be inferred from the register-timing gap alone.

Outlook

The determinative date is 10 July 2026, when the AMLR and 6AMLD beneficial-ownership provisions and AMLA technical standards fall due. Whether Portugal's RCBE reform is confirmed as delivered on that date, or slips, is the single most consequential open question for this domain heading into the following cycle. The second marker, 10 July 2027, is when full AMLR application converts these national implementing steps into directly applicable EU law across the bloc, at which point any residual Portuguese gap would become considerably more visible against a harmonised EU baseline.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto, Digital Assets, and Financial Innovation

Crypto, Digital Assets, and Financial Innovation

Continue reading

Portugal's digital-asset supervisory perimeter completed a structural transition this cycle. The transitional registration regime under Law 69/2025, which had permitted virtual-asset service providers registered with Banco de Portugal as of 30 December 2024 to continue operating under a lighter, AML-only compliance bar, closed on 1 July 2026. From that date, entities providing crypto-asset services in or into Portugal fall under the full Markets in Crypto-Assets Regulation authorisation framework, supervised jointly by Banco de Portugal and CMVM. This is the kind of architecture-level finding that outweighs any single enforcement action: an entire category of previously lower-bar registrants has now been folded into the dual-supervisor MiCA structure, with materially higher governance, capital and conduct expectations attached.

The closure did not happen in isolation. Law 70/2025, in force since December 2025, transposed Article 38 of Regulation (EU) 2023/1113, the crypto-asset Travel Rule, into Portuguese law by amending the core AML statute, Law 83/2017. This gives Portuguese authorities a statutory basis for originator and beneficiary information requirements on crypto-asset transfers, closing a gap that had previously allowed crypto transfers to move with materially less identifying information attached than equivalent fiat wire transfers. Taken together with the MiCA transition, Portugal's digital-asset perimeter moved on two fronts simultaneously within a seven-month window: market-entry authorisation (MiCA CASP) and transaction-level traceability (Travel Rule).

The evidentiary basis for both findings is Tier-3 secondary legal commentary rather than a directly retrieved Diário da República primary text, a genuine sourcing gap for this cycle rather than a substantive weakness in the finding itself; both laws are cited by number and are consistent with the EU-level instruments they implement. A reported instance of a Portuguese bank obtaining MiCA CASP status through a subsidiary merger, effective late July 2026, would represent the traditional banking sector's first direct entry into the licensed digital-asset space in Portugal, but this specific claim rests on a single Tier-4 newswire source and has not been independently corroborated.

Three-pillar balance is worth noting here: this cycle's crypto findings are entirely AML/CFT-pillar in character (Travel Rule, authorisation regime), with no CPF-specific or sanctions-nexus crypto finding surfacing for Portugal this cycle. That absence is itself worth registering rather than assuming coverage, since CFT and CPF signals are structurally under-represented relative to AML enforcement volume across the fleet.

Outlook

The near-term question for this domain is whether Banco de Portugal and CMVM publish a consolidated post-1-July-2026 register of MiCA-authorised CASPs, which would allow a clearer read on how many of the pre-existing VASP registrants converted successfully versus exited the market. The broader question is how Portugal's now-completed MiCA transition and Travel Rule transposition interact with the AMLR/AMLA timeline landing in July 2026 and July 2027, since crypto-asset service providers are explicitly named obliged entities under the incoming EU AML architecture.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

AML/CTF Regime

Continue reading

Portugal's standing AML/CTF architecture rests on Law 83/2017, supervised by Banco de Portugal through its sectoral notices and by CMVM through its own regulatory framework, with the UIF, housed within the Polícia Judiciária, as the designated financial intelligence unit. This cycle saw two December 2025 statutory amendments to that base framework. Law 70/2025 transposed Article 38 of Regulation (EU) 2023/1113, the crypto-asset Travel Rule, amending Law 83/2017 directly. Law 72/2025 transposed Directive (EU) 2024/1226 on criminal offences and penalties for violating EU restrictive measures, amending the separate sanctions-implementation statute, Law 97/2017. Neither instrument replaces Law 83/2017 as the governing AML statute; both extend and tighten it in specific, named respects.

The practical effect is a coordinated broadening of the regime's reach along two axes simultaneously: crypto-asset transfer traceability, through the Travel Rule, and criminal accountability for sanctions violations, through the new offences-and-penalties framework. Both amendments arrived in the same month, December 2025, and both took effect ahead of the mid-2026 MiCA transition closure described under the crypto and digital-assets domain, suggesting a deliberate sequencing by Portuguese authorities to have the AML statutory base updated before the digital-asset supervisory perimeter itself changed category.

On FATF standing, Portugal is not named on the current call-for-action or increased-monitoring lists, a Tier-1 finding drawn directly from FATF's own country page. That same source notes Portugal's last full mutual evaluation dates to the third-round cycle under the 2004 methodology, meaning the authoritative external assessment of Portugal's AML/CFT effectiveness has not been refreshed against the current FATF methodology despite the domestic statutory activity described above. This is a meaningful qualifier: statutory tightening and externally-verified effectiveness are two different things, and only the former is evidenced here for this cycle.

Three-pillar balance: this cycle's D7 findings are predominantly AML- and CFT-adjacent (Travel Rule, sanctions-offence criminalisation) rather than CPF-specific; no standalone counter-proliferation-financing development was evidenced for Portugal this cycle, and that absence should be read as a coverage gap rather than a finding of CPF-regime adequacy or inadequacy.

Outlook

The open question for this domain is whether an updated FATF mutual evaluation, beyond the third-round 2004-methodology assessment currently on record, will be scheduled, which would provide the first externally verified read on how Portugal's December 2025 to July 2026 statutory tightening translates into practice. In the interim, primary Diário da República text for both Law 70/2025 and Law 72/2025 remains unretrieved this cycle and should be prioritised for direct verification ahead of the next reporting window.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
Adopted2026-Q3 · ±quarter

AMLR/6AMLD beneficial-ownership register provisions and AMLA technical standards

Core AMLR/AMLD6 beneficial-ownership register provisions and AMLA technical standards fall due 10 July 2026, ahead of full AMLR application on 10 July 2027.
Source
1 dated · 4 pending date · baseline fim-2026-07-08
Role action cards
MLRO

Portugal's MiCA CASP transitional window closed 1 July 2026, ending AML-only registration for legacy VASPs.

Firms with Portuguese VASP counterparties that relied on the pre-MiCA registration status should confirm those counterparties have obtained CASP authorisation under Banco de Portugal and CMVM's joint framework, since continued reliance on the lapsed registration status is no longer accurate.

2 evidence refs
Compliance

Portugal transposed the crypto Travel Rule (Law 70/2025) and an EU sanctions-offence directive (Law 72/2025) in December 2025.

Policies and procedures referencing Portugal's AML statute should be updated to reflect the amendments to Law 83/2017 and Law 97/2017; both remain Tier-3 sourced pending primary Diário da República retrieval.

2 evidence refs
Legal

No material change this cycle.

No material change for this persona this cycle

Board

Portugal's beneficial-ownership register faces an EU-mandated improvement deadline of 10 July 2026, ahead of full AMLR application in July 2027.

The board should be aware that Portugal's beneficial-ownership disclosure capacity is a live watch item, with a Tier-2-sourced gap in confirmed domestic implementation ahead of the EU deadline.

1 evidence refs
CTO

Portugal's crypto-asset service providers now operate under the full MiCA CASP authorisation regime following the 1 July 2026 transitional-window closure.

Technical infrastructure supporting Portuguese crypto-asset operations should reflect Travel-Rule-compliant transaction-data capture per Law 70/2025, alongside MiCA-level governance and reporting architecture.

2 evidence refs
Risk

Portugal's AML/CFT and digital-asset perimeter tightened on three fronts within a seven-month window (Dec 2025-Jul 2026).

The concentration of Travel Rule transposition, sanctions-offence criminalisation, and MiCA CASP transition closure represents a coordinated structural tightening rather than isolated events, relevant to cross-border exposure concentration assessments involving Portuguese counterparties.

3 evidence refs
Operations

No material change this cycle.

No material change for this persona this cycle

Audit

Portugal's FATF standing rests on a third-round (2004 methodology) mutual evaluation, not yet refreshed against current AML/CFT statutory activity.

Audit scope for Portugal-related AML/CFT control testing should note the gap between the jurisdiction's last externally verified evaluation and its subsequent December 2025 to July 2026 statutory tightening, since no updated mutual evaluation corroborates the practical effect of the new laws.

1 evidence refs
Decision lens
MLRO

Portugal's MiCA CASP transitional window closed 1 July 2026, ending AML-only registration for legacy VASPs.

Compliance

Portugal transposed the crypto Travel Rule (Law 70/2025) and an EU sanctions-offence directive (Law 72/2025) in December 2025.

Legal

No material change this cycle.

Board

Portugal's beneficial-ownership register faces an EU-mandated improvement deadline of 10 July 2026, ahead of full AMLR application in July 2027.

CTO

Portugal's crypto-asset service providers now operate under the full MiCA CASP authorisation regime following the 1 July 2026 transitional-window closure.

Risk

Portugal's AML/CFT and digital-asset perimeter tightened on three fronts within a seven-month window (Dec 2025-Jul 2026).

Operations

No material change this cycle.

Audit

Portugal's FATF standing rests on a third-round (2004 methodology) mutual evaluation, not yet refreshed against current AML/CFT statutory activity.

Shared evidence: 2 refs
Scenario sketches

AMLA supervisory transition and evasion-landscape reshaping

Illustrative orientation only: as the AMLA Regulation (Reg (EU) 2024/1620) establishes direct and indirect supervision over a defined perimeter of cross-border obliged entities, alongside the directly-applicable AMLR (Reg 2024/1624) and per-state 6AMLD transposition, the supervisory landscape could shift from a purely national model toward a hybrid EU-level one. This could, in principle, alter where illicit-finance actors perceive weaker points of national-level oversight to persist during the transition period, particularly in jurisdictions like Portugal whose own beneficial-ownership register reform is timed to land close to the AMLA transition itself. This is illustration for analytical orientation, not a prediction of actual displacement or an observed pattern.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion ArchitecturestableNo material Portugal-specific development identified this cycle.
T2 · EU AML Package / AMLAmaterial_changeEC opened infringement proceedings against Portugal and 17 other Member States for incomplete 6AMLD transposition; AMLR remains directly applicable from July 2027.
T3 · FATF Grey ListstableJune 2026 Plenary added Bosnia and Herzegovina and Iraq, removed Algeria and Namibia; 22 jurisdictions under monitoring. Portugal not listed. Next plenary October 2026.
T4 · Beneficial-Ownership Register Statusmaterial_changeEC infringement action against Portugal centres on incomplete transposition of 6AMLD BO-register-access provisions.
T5 · Crypto & Digital-Asset IntegritystablePortugal's MiCA transitional regime closure (1 July 2026) already reflected in prior cycles; only secondary commentary surfaced this cycle.
T6 · Sanctions Regime DivergencestableNo new EU Council, OFAC or OFSI designation specific to Portugal identified this cycle.
Registers

Enforcement actions

  • Portugal co-led (with Austria and Spain) a multi-month Europol-coordinated sweep against counterfeit-currency distribution hubs spanning Asia, the Americas and the Middle East, seizing large quantities of fake notes including 'movie money' props exploited by criminals. 1 Mar 2025
  • Portugal's parallel national VASP registration regime (Banco de Portugal Notice 3/2021) was superseded by the EU-wide MiCA authorisation requirement upon MiCA's full application, forcing incumbent Portuguese crypto firms into a harmonised EU licensing perimeter or cessation of regulated activity. 1 Jan 2025
  • A Eurojust-coordinated joint action day executed searches, arrests and asset freezes in Portugal alongside Spain, Italy, Romania and Bulgaria against a cryptocurrency investment fraud scheme active across 23 countries since at least 2018; Europol deployed a cryptocurrency specialist to Portugal to assist with asset seizures. 1 Oct 2025

Sanctions changes

  • The EU's 19th Russia sanctions package added 69 new listings (oligarchs, energy companies, shadow-fleet managers, third-country banks and oil traders) and, for the first time, sanctioned crypto/stablecoin infrastructure (the A7A5 stablecoin ecosystem); directly applicable in Portugal as an EU member state. 23 Oct 2025
  • The EU's 20th Russia sanctions package added 120 new listings (37 individuals, 83 entities), 36 additional energy-sector listings, further shadow-fleet and maritime-insurer designations, and activated the EU's anti-circumvention instrument for the first time to block exports of critical EU goods to a third country used to undermine sanctions; directly applicable in Portugal. 23 Apr 2026

Regulatory horizon (register)

  • AML Regulation (AMLR, Reg 2024/1624) becomes directly applicable in Portugal
  • 6AMLD transposition deadline for Portugal as EU member state
  • AMLA first harmonised-methodology direct-supervision selection round
  • Portugal's next FATF mutual evaluation (5th round) scheduling

Active schemes

  • [HIGH] Golden Visa real-estate laundering pipeline
  • [HIGH] Angola-linked PEP capital structuring via Portuguese enablers
  • VASP-to-CASP transition supervisory gap
  • Iberian hawala-based organised-crime layering network
Sources
  1. FATF
  2. FATF
  3. Banco de Portugal
  4. European Commission
  5. Council of the European Union
  6. ICIJ
  7. ICIJ
  8. Global Witness
  9. OCCRP
  10. OCCRP
  11. Elliptic
  12. Bloomberg
  13. OCCRP
  14. OCCRP
  15. European Commission
  16. Global Witness
  17. FATF
  18. HM Treasury (UK)
  19. European Commission
Coverage gaps
Golden Visa and broader real-estate sector AML supervision r…
Golden Visa and broader real-estate sector AML supervision remains structurally weak: FATF's 2017 MER found DNFBP obligations 'need to be more comprehensively applied,' and the 2023 property-route restriction did not retroactively address the existing stock of property-linked residencies or extend equivalent scrutiny to substitute investment categories.
Portugal's RCBE beneficial-ownership register, while nominal…
Portugal's RCBE beneficial-ownership register, while nominally public, imposes practical access barriers: authentication limited to a small set of EU electronic-ID systems, mandatory prior knowledge of a company's tax identification number to search, and legitimate-interest gating, all of which Global Witness graded 'red' for failing genuine public-access standards.
Seized Isabel dos Santos-linked assets in Portugal (NOS/ZOPT…
Seized Isabel dos Santos-linked assets in Portugal (NOS/ZOPT stakes, Efacec, EuroBic proceeds, real estate) have not been repatriated to Angola years after freezing orders, prompting Angolan civil-society organisations to publicly demand explanation from both governments; the matter remained unresolved into the current reporting period.
No confirmed jihadist-financing, hawala-based terrorist-fina…
No confirmed jihadist-financing, hawala-based terrorist-financing, or DPRK/Iran proliferation-corridor case specifically implicating Portugal was identified in open-source Tier 1/2 reporting within the 18-month window; the last substantive CPF effectiveness assessment (2017 MER) found Portuguese CPF coordination capacity sound but this has not been re-tested under the FATF 2022 methodology.
Open-source reporting on Banco de Portugal's RegTech/SupTech…
Open-source reporting on Banco de Portugal's RegTech/SupTech modernisation (the EU Commission-backed project to build an automatic risk-based AML/CFT categorisation methodology) is limited to a single EU Technical Support Instrument project page, with no independent T2 verification of implementation progress or supervisory outcomes located.

Evidence

Confidence-tiered claims

European Commission opened infringement proceedings against Portugal and 17 other Member States for incomplete transposition of four articles of the 6th AML Directive (Directive (EU) 2024/1640), specifically beneficial-ownership-register access provisions. SRC-fim-PT-001
Probable · 1 source
Portugal's MiCA transitional regime for legacy Banco de Portugal-registered virtual-asset providers closed on 1 July 2026; crypto-asset service providers now treated as financial entities supervised by Banco de Portugal for AML/CFT purposes. SRC-fim-PT-005
Probable · 1 source
Cambodia revoked 20 casino licences and suspended 29 of 195 inspected licensees in August 2026; proxy/live-dealer streaming to be suspended from October 2026, framed around money-laundering and scam-compound risk. SRC-fim-KH-001
Probable · 1 source
At the June 2026 Plenary, FATF added Bosnia and Herzegovina and Iraq to the grey list and removed Algeria and Namibia, leaving 22 jurisdictions under increased monitoring; blacklist (Iran, North Korea, Myanmar) unchanged. SRC-fim-GLOBAL-001
Probable · 1 source
FinCEN's 30 June 2026 supplemental alert on fiscal fuel-smuggling schemes tied to CJNG, Sinaloa and Gulf Cartel networks, issued alongside an OFAC sanctions action against two Mexican nationals and nine entities; no newer update found this cycle. SRC-fim-MX-001
Probable · 1 source