Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Ukraine UA

Domains (D1–D6)
1
Sources
14
Role actions
8
Jurisdiction profile
CompliantTier BRisk: IncreasingMixed

Ukraine is a MONEYVAL member assessed under a 2017 MER now in regular follow-up, with a 2022 National Risk Assessment flagging wartime ML, virtual-asset ML and illicit outflows as top threats.

MoreInstitutionally strong anti-corruption architecture (NABU/SAPO/HACC) coexists with repeated political attempts to curb its independence, an unimplemented Virtual Assets Law, and occupied territories outside AML/CFT jurisdictional reach.

Key deficiencies
  • Recurrent political attempts to subordinate NABU/SAPO to the Prosecutor General, undermining institutional independence
  • 2017 MER follow-up found only limited progress on technical-compliance deficiencies
  • 2022 'About Virtual Assets' law remains unimplemented pending Tax and Civil Code amendments, leaving VASPs in a supervisory gray zone
  • Occupied Crimea/Donbas/Zaporizhzhia/Kherson ports operate entirely outside Ukrainian AML/CFT and customs jurisdiction
  • Legislative initiatives have sought to limit transparency of public beneficial-ownership registers
Recent developments (18m)
  • July 2025: parliament passed, then reversed after protests and EU pressure, a law subordinating NABU/SAPO to the Prosecutor General
  • November 2025: NABU's 'Operation Midas' exposed a $100m Energoatom kickback-and-laundering network reaching the presidential inner circle
  • November 2025: Ukraine imposed domestic sanctions on businessman Timur Mindich and suspended Justice Minister Herman Halushchenko
  • November 2025: Ukraine sanctioned 56 vessels linked to grain exports from Russian-occupied territory
  • June 2026: EU-Ukraine accession negotiations opened the 'fundamentals' cluster covering rule of law and anti-corruption
Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Ukraine continued its established practice of extending its autonomous sanctions architecture in September 2026, with the National Security and Defence Council register widened to cover 29 additional legal entities, 30 individuals and 20 vessels linked to the Russian shadow fleet. The extension sits on the existing legal basis under the Law of Ukraine On Sanctions No 1644-VII and does not introduce a new designation criterion or evasion typology; it is best read as routine maintenance of an active list rather than a structural shift in Ukraine's sanctions posture.

The same period saw bloc-level maintenance on the European side. The EU Council adopted Implementing Regulation (EU) 2026/2160 and Decision (CFSP) 2026/2161 on 22 September 2026, amending designee details for 104 individuals and 71 entities, removing three deceased persons from the list, lifting measures on three individuals and one entity, and extending the overall regime to 22 September 2029. Taken together, the Ukrainian and EU actions this cycle represent parallel but procedurally distinct maintenance cycles of the two largest Russia and Ukraine-related sanctions architectures, with Ukraine running its national list on an independent monthly cadence and the EU renewing its bloc-wide regime on a multi-year horizon.

Other Developments

Ukraine's FATF standing is unchanged. Ukraine remains off both the FATF grey list and the black list, with no plenary action recorded this cycle and the next plenary scheduled for October 2026. This is a standing confirmation rather than a new finding, and it sits alongside the National Bank of Ukraine's implementation of a package easing currency-exchange restrictions, primarily focused on supporting the population, including permitted transactions for Ukrainian borrowers receiving funds via loans. That easing is a background foreign-exchange control matter rather than a sanctions or AML instrument in itself, but it is adjacent to the currency-control environment within which sanctions screening operates.

Divergence in designation criteria remains absent. Although Ukraine's national list and the EU's bloc-wide list are now running on different cadences and different horizons (monthly extension versus a regime renewed to 2029), no divergence has emerged this cycle in the underlying designation criteria themselves. The two architectures continue to track the same underlying conflict-finance target set even as their maintenance rhythms diverge procedurally.

Cross-Monitor Connections

The shadow-fleet vessel designations added to Ukraine's register this cycle carry an evident connection to conflict-finance and commodity-flow monitoring, since vessel-level sanctions of this kind typically target the logistics layer of sanctioned oil and other commodity trade rather than financial intermediaries directly. Readers tracking state-capture or extractive-industry integrity questions in parallel monitors should note the vessel count (20) as a maintenance-level data point rather than a new typology. The EU's bloc-wide renewal to 2029 is also a multi-year architecture decision with implications for any cross-monitor work that models sanctions-regime duration assumptions.

Outlook

Both the Ukrainian national list and the EU bloc-wide list are now positioned for continued routine maintenance: Ukraine on its established monthly extension cadence, and the EU under a regime renewed through September 2029. Ukraine's FATF status is next due for review at the October 2026 plenary, as scheduled; no change to that status is indicated by anything in the current cycle's substrate. Absent a new designation criterion or evasion typology surfacing in either architecture, the near-term picture is one of continuity rather than structural change.

weekly_brief_draft · JID UA
Domain intelligence (D1–D6)

D1 Sanctions Architecture and Evasion

Sanctions Architecture and Evasion

Continue reading

September 2026 produced routine but concrete maintenance activity across both the national Ukrainian and bloc-wide EU sanctions architectures tied to the Russia-Ukraine conflict. Ukraine's National Security and Defence Council extended its autonomous sanctions register to cover 29 additional legal entities, 30 individuals and 20 vessels associated with the Russian shadow fleet. This extension operates under the existing legal basis of the Law of Ukraine On Sanctions No 1644-VII of 14 August 2014, and nothing in the substrate this cycle indicates a new designation criterion, a new legal instrument, or a newly identified evasion typology. The vessel component of the extension (20 vessels) is consistent with continued targeting of the logistics layer supporting sanctioned commodity trade, a pattern that has recurred across multiple monthly extensions of the Ukrainian list.

In parallel, the EU Council adopted Implementing Regulation (EU) 2026/2160 and Decision (CFSP) 2026/2161 on 22 September 2026. These instruments amend designee details for 104 individuals and 71 entities, remove three deceased persons from the list, lift measures on three individuals and one entity, and extend the overall EU Ukraine-related sanctions regime to 22 September 2029. This is architecturally significant as a duration decision: the EU has now locked in its sanctions regime for a further three-year horizon, a structural fact independent of any single designation change within that regime. The amendment of over 170 designee records in a single instrument is itself a substantial administrative undertaking, though the available substrate characterises it as housekeeping and correction (deceased-person removal, detail amendment) rather than a shift in the criteria for designation.

Reading these two actions together, the architecture-over-incident framing points to a widening procedural divergence between Ukraine's own sanctions list, maintained on an independent monthly cadence, and the EU's bloc-wide list, now renewed on a multi-year cycle to 2029. This divergence in cadence and renewal horizon is itself the more durable structural fact of the cycle, even though the designation criteria underlying both lists remain aligned on the same underlying Russia-Ukraine conflict-finance target set. No new divergence in designation criteria was identified this cycle; the divergence that exists is procedural and temporal rather than substantive.

The absence of enforcement-action substrate on the Ukrainian side this cycle is also worth registering explicitly rather than passing over: the available sourcing on Ukraine's own State Sanctions Register primary page was not directly reached, with only secondary law-firm commentary retrieved. This is a research-coverage gap rather than a finding about Ukraine's regime, and it means the characterisation of the extension as routine rests on secondary commentary rather than the primary NSDC decree text. The same caveat applies to the EU instruments, where EUR-Lex primary text was not directly retrieved this cycle.

Outlook

Both architectures are positioned for continuity. Ukraine's list is expected to continue its established pattern of monthly extensions targeting entities, individuals and vessels connected to sanctions evasion, absent any indication in the current substrate of a change in that cadence. The EU's regime, now renewed through September 2029, removes near-term renewal uncertainty from that side of the architecture, though periodic amendment of individual designee records (of the kind seen in this cycle's 104-individual, 71-entity amendment) should be expected to continue within that multi-year window. No FATF action affecting Ukraine's list status is anticipated from this cycle's substrate ahead of the scheduled October 2026 plenary.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Not covered

Crypto / Digital Assets / Financial Innovation is not yet covered for this jurisdiction in this report.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
No dated horizon items this cycle. 5 items tracked without a confirmed date.
5 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

Ukraine and the EU both extended their respective Russia-Ukraine sanctions registers in September 2026 through routine designation and renewal actions.

Screening lists for both the Ukrainian national register and the EU bloc-wide list require routine refresh to capture 29 newly listed legal entities, 30 individuals and 20 vessels on the Ukrainian side, and amended designee details for 104 individuals and 71 entities on the EU side. No new designation criterion or evasion typology was identified, so this is a list-maintenance action rather than a policy change requiring reassessment of screening logic.

2 evidence refs
Compliance

No change to Ukraine's FATF status or to the legal basis underlying either sanctions list this cycle.

Ukraine remains off the FATF grey and black lists, with the next plenary review scheduled for October 2026. The EU sanctions regime affecting Ukraine has now been renewed to 22 September 2029, which removes near-term renewal risk from compliance planning for that architecture.

2 evidence refs
Legal

No material change this cycle.

No material change for this persona this cycle

Board

The EU has locked in its Ukraine-related sanctions regime for a further three-year horizon, to September 2029.

This is a structural duration decision at the bloc level that provides multi-year regulatory certainty for the EU side of the sanctions architecture relevant to Ukraine exposure, even as the underlying designee list continues to be amended periodically.

1 evidence refs
CTO

No material change this cycle.

No material change for this persona this cycle

Risk

Ukraine's national sanctions list and the EU bloc-wide list are now diverging in maintenance cadence, though not in designation criteria.

Ukraine continues monthly independent list extensions while the EU has moved to a multi-year renewal cycle; this procedural divergence should be tracked as a structural feature of the sanctions architecture even though no substantive divergence in targeting criteria has emerged.

2 evidence refs
Operations

Screening lists require routine update to reflect September 2026 designations across both the Ukrainian and EU registers.

Operational screening workflows should capture the 29 legal entities, 30 individuals and 20 vessels added to Ukraine's list, and the amended details for 104 individuals and 71 entities under the EU instruments, alongside the delisting of three deceased persons and the lifting of measures on three individuals and one entity.

2 evidence refs
Audit

Primary-source documents for both the Ukrainian and EU September 2026 sanctions actions were not directly retrieved this cycle.

The characterisation of both actions as routine maintenance rests on secondary law-firm commentary rather than the primary NSDC decree text or EUR-Lex instrument text, which is a documented gap in the evidentiary trail for these findings.

2 evidence refs
Decision lens
MLRO

Ukraine and the EU both extended their respective Russia-Ukraine sanctions registers in September 2026 through routine designation and renewal actions.

Compliance

No change to Ukraine's FATF status or to the legal basis underlying either sanctions list this cycle.

Legal

No material change this cycle.

Board

The EU has locked in its Ukraine-related sanctions regime for a further three-year horizon, to September 2029.

CTO

No material change this cycle.

Risk

Ukraine's national sanctions list and the EU bloc-wide list are now diverging in maintenance cadence, though not in designation criteria.

Operations

Screening lists require routine update to reflect September 2026 designations across both the Ukrainian and EU registers.

Audit

Primary-source documents for both the Ukrainian and EU September 2026 sanctions actions were not directly retrieved this cycle.

Shared evidence: 2 refs
Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion ArchitecturestableUkraine's own list extended (29/30/20) and EU list amended in September 2026; no new evasion-architecture typology surfaced.
T2 · EU AML Package / AMLAno_changeNo new AMLR, 6AMLD-transposition, or AMLA development specific to UA located this cycle (UA is not an EEA member).
T3 · FATF Grey Listno_changeUA not on the FATF grey or black list; no plenary action this cycle.
T4 · Beneficial-Ownership Register Statusno_changeNo UA beneficial-ownership register development located this cycle.
T5 · Crypto & Digital-Asset Integrityno_changeUA crypto-AML development owned by crypto consumer under subscription; no FIM first-party finding this cycle.
T6 · Sanctions Regime DivergencestableEU extended its Ukraine-sanctions regime to 2029 while Ukraine continues independent monthly list extensions; no new divergence in designation criteria identified.
Registers

Enforcement actions

  • NABU's 15-month 'Operation Midas' investigation dismantled a criminal organization accused of extorting 10-15% kickbacks from Energoatom contractors and laundering roughly $100 million, issuing notices of suspicion to seven individuals and detaining five. 11 Nov 2025
  • Ukraine's Cabinet proposed personal sanctions against businessman Timur Mindich, including freezing of assets and bank accounts, and suspended Justice Minister Herman Halushchenko, named a suspect in the Energoatom case. 12 Nov 2025
  • Ukraine's High Anti-Corruption Court ordered former Deputy PM Oleksiy Chernyshov held in custody until January 16, 2026, with bail set at 51 million hryvnias, on suspicion of helping legalize over $1.2 million in Energoatom-linked illicit proceeds. 18 Nov 2025
  • President Zelenskyy signed a decree sanctioning 56 maritime vessels accused of exporting Ukrainian grain from Russian-occupied territories, targeting the maritime infrastructure supporting Russia's war economy. 25 Nov 2025
  • The EU's 19th sanctions package designated the A7A5 ruble-pegged stablecoin ecosystem and payment provider Payeer for supporting Russia's evasion of sanctions imposed over its invasion of Ukraine, the EU's first direct crypto-asset designations tied to the war. 23 Oct 2025
  • The EU's 20th sanctions package imposed a total sectoral ban on Russia-established crypto platforms, banned the RUBx stablecoin and EU support for the digital rouble, and added 120 individual/entity listings including 58 military-industrial designees. 23 Apr 2026

Sanctions changes

  • EU 19th sanctions package (23 October 2025) designated the A7A5 stablecoin, its issuer Old Vector LLC, developer A7 LLC and payment processor Payeer for enabling Russian sanctions evasion tied to the Ukraine war, marking the EU's first crypto-asset-specific designations in this context. 23 Oct 2025
  • EU 20th sanctions package (23 April 2026) introduced a total sectoral ban on Russia-established crypto platforms, banned RUBx transactions and EU support for the digital rouble, and designated a Kyrgyz A7A5 trading platform, closing channels Russia had increasingly relied on for international transactions amid financial-sector sanctions. 23 Apr 2026
  • The Council renewed EU restrictive measures on actions destabilising Ukraine's territorial integrity for a further six months, extending the sectoral economic sanctions regime to 31 July 2026, continuing a rolling six-month renewal cycle in place since 2014/2016. 22 Dec 2025
  • Ukraine's own national sanctions regime designated 56 vessels linked to grain exports from occupied territory (November 2025) and imposed asset-freeze sanctions on businessman Timur Mindich (November 2025), operating alongside but distinct from EU/US/UK Russia-sanctions lists. 25 Nov 2025
  • In December 2025, EU leaders decided against using immobilised Russian Central Bank assets to fund a proposed loan to Ukraine, instead opting for a €90 billion EU-backed capital-markets loan (Regulation (EU) 2026/467), reflecting continued political division among member states over full asset mobilisation versus asset-backed lending. 18 Dec 2025

Regulatory horizon (register)

  • Ukraine to adopt Anti-Corruption Strategy 2026-2030
  • NABU/SAPO jurisdiction expansion and Prosecutor General reform
  • Virtual Assets Law full entry into force pending fiscal amendments
  • 8th Ukraine Facility disbursement and MFA tranches
  • MONEYVAL next follow-up review of Ukraine's AML/CFT system

Active schemes

  • [HIGH] Occupied-territory grain and commodity theft via shadow fleet
  • [CRITICAL] Wartime state-enterprise kickback and laundering network
  • Unregulated virtual-asset sector as laundering conduit
  • [HIGH] Offshore trust and shell structuring for corrupt proceeds
  • Legislative pressure to narrow public registry transparency
Sources
  1. FATF
  2. FATF
  3. European Commission (DG NEAR / Enlargement)
  4. Council of the European Union
  5. U.S. Department of the Treasury (OFAC)
  6. UNODC
  7. OCCRP
  8. OCCRP
  9. Bellingcat
  10. ICIJ
  11. Elliptic
  12. TRM Labs
  13. Bloomberg
  14. UK Government / OFSI
Coverage gaps
Ukraine's anti-corruption enforcement architecture (NABU/SAP…
Ukraine's anti-corruption enforcement architecture (NABU/SAPO) faced a direct legislative attempt in July 2025 to subordinate it to the Prosecutor General, preceded by warrantless SBU raids on NABU/SAPO offices; independence was restored only after mass protests and international pressure.
Ports in Russian-occupied Crimea and other occupied territor…
Ports in Russian-occupied Crimea and other occupied territories (Sevastopol, Feodosia, Berdyansk, Mariupol) operate entirely outside Ukrainian AML/customs jurisdiction, enabling systematic grain and commodity theft laundered via shadow-fleet dark port calls to third markets.
Ukraine's 2022 virtual-assets law has not been operationalis…
Ukraine's 2022 virtual-assets law has not been operationalised because implementing Tax and Civil Code amendments remain outstanding, leaving virtual-asset service providers without an enforceable licensing or AML supervisory regime despite the sector being flagged as a top national ML threat.
The MONEYVAL follow-up process to Ukraine's 2017 MER found o…
The MONEYVAL follow-up process to Ukraine's 2017 MER found only limited progress in addressing identified technical-compliance deficiencies, indicating persistent gaps in the formal AML/CFT legal and institutional framework even as effectiveness in high-level prosecutions has improved.
NABU had to formally request the State Financial Monitoring …
NABU had to formally request the State Financial Monitoring Service trace the source of tens of millions of hryvnias in bail funds posted for Operation Midas suspects, after a shell company with 1,000-hryvnia statutory capital and no evident real economic activity was found to have posted substantial bail sums.

Evidence

Confidence-tiered claims

Ukraine's NSDC extended its autonomous sanctions register in September 2026 to cover 29 additional legal entities, 30 individuals and 20 shadow-fleet vessels SRC-fim-UA-001
Probable · 1 source
EU Council adopted Implementing Regulation (EU) 2026/2160 and Decision (CFSP) 2026/2161 on 22 September 2026, amending designee details for 104 individuals and 71 entities, removing 3 deceased persons, lifting measures on 3 individuals and 1 entity, and extending the regime to 22 September 2029 SRC-fim-UA-002
Probable · 1 source
Ukraine is not on the FATF grey or black list; no plenary action this cycle SRC-fim-UA-004
Probable · 1 source
NBU implemented a package easing currency-exchange restrictions, primarily focused on supporting the population, including permitted transactions for borrowers receiving loan funds SRC-fim-UA-005
Probable · 1 source
Cambodia is off the FATF deficient/grey list but continues to carry unilateral OFAC/FinCEN designations from its 2024-2025 forced-labour/scam-compound enforcement wave SRC-fim-UA-006
Uncertain · 1 source