All 27 EU member states (e.g., France, Germany, Italy) implement uniformly, with the strictest rules applying in cross-border transactions. As of 2026, enforcement is active post-2024 deadline.
The European Securities and Markets Authority (ESMA) published its Final Report on the first batch of Level 2 measures under MiCA on March 28, 2025, specifying final draft technical standards for CASP authorization, conflict of interest…
The European Banking Authority (EBA) finalized its regulatory technical standards (RTS) on stress testing and liquidity requirements for asset-referenced tokens (ARTs) and e-money tokens (EMTs) in December 2024, with application scheduled…
Can specific business models operate in European Union? Each card answers the operational question for one kind of operator. Curated cells reflect counsel-grade review; AI-generated cells should be confirmed before relying on them.
Conditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · low burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · medium burden.
AI · UnreviewedConditional · high burden.
AI · Unreviewed| Law / Regulation | Year | Scope |
|---|---|---|
| MiCA Regulation (EU 2023/1114) (2023) | 2023 | MiCA Regulation (EU 2023/1114) (2023) — Comprehensive CASP authorization, token issuance, white paper requirements — fully effective Dec 30, 2024 |
| Transfer of Funds Regulation (recast) (2023) | 2023 | Transfer of Funds Regulation (recast) (2023) — Travel Rule — EUR 0 threshold (no de minimis) |
| Regulation (EU | 2023 | MiCA (Regulation (EU) 2023/1114) entered into force on June 29, 2023, with Title III (Asset-Referenced Tokens) and Title IV (E-Money Tokens) provisions applying from June 30, 2024, and all other provisions (including for CASPs) applying… |
| The Regulation establishes a comprehensive framework covering: issuers of crypto | The Regulation establishes a comprehensive framework covering: issuers of crypto-assets (including ARTs, EMTs, and other tokens), crypto-asset service providers (CASPs), and market abuse prevention, across all 27 EU Member States plus EEA… | |
| The Markets in Crypto-Assets (MiCA) Regulation (EU) 2023/1114 was published in t | 2023 | The Markets in Crypto-Assets (MiCA) Regulation (EU) 2023/1114 was published in the Official Journal of the European Union on June 9, 2023, establishing a comprehensive regulatory framework for crypto-assets not covered by existing EU… |
EBA — Stablecoin supervision (ARTs/EMTs), significant issuer oversight
ESMA — Market integrity, CASP oversight, RTS/ITS development
National Competent Authorities — CASP authorization in home member state (AMF, BaFin, CNMV, CBI, etc.)
The European Securities and Markets Authority (ESMA) published its Final Report on the first batch of Level 2 measures under MiCA on March 28, 2025, specifying final draft technical standards for CASP authorization, conflict of interest management, and complaint handling; these standards are now expected to be formally adopted by the European Commission by Q3 2025 and apply from April 2026 ESMA Final Report on MiCA Level 2
The European Banking Authority (EBA) finalized its regulatory technical standards (RTS) on stress testing and liquidity requirements for asset-referenced tokens (ARTs) and e-money tokens (EMTs) in December 2024, with application scheduled for June 30, 2025, and full enforcement by EU NCAs expected by April 2026 EBA Final RTS on MiCA
The European Commission’s official MiCA implementation roadmap, published in March 2025, indicates that 90% of Level 2 and Level 3 measures (including delegated acts and implementing technical standards) are projected to be in force by April 1, 2026, with the remaining 10% covering transitional provisions for grandfathered CASPs to be finalized by July 2026 European Commission MiCA Implementation Roadmap
MiCA (Regulation (EU) 2023/1114) entered into force on June 29, 2023, with Title III (Asset-Referenced Tokens) and Title IV (E-Money Tokens) provisions applying from June 30, 2024, and all other provisions (including for CASPs) applying from December 30, 2024, as specified in Article 126 EUR-Lex MiCA Regulation
By April 2026, approximately 16 months after the full application date (December 30, 2024), all MiCA provisions are fully in force, with no further transitional timelines available for new market entrants ESMA MiCA Page
The Regulation establishes a comprehensive framework covering: issuers of crypto-assets (including ARTs, EMTs, and other tokens), crypto-asset service providers (CASPs), and market abuse prevention, across all 27 EU Member States plus EEA countries European Commission Digital Finance
ESMA is mandated under Article 111 to maintain a public register of all authorized CASPs, ARTs issuers, and EMT issuers; the register is expected to be operational and populated, but its completeness by April 2026 depends on NCA processing speeds, with existing CASPs potentially operating under national transitional provisions until July 1, 2026 at the latest ESMA Register of CASPs
By April 2026, the European Banking Authority (EBA) is required to have published a register of authorized ART and EMT issuers, including those deemed "significant" under Articles 43 and 56, following the June 30, 2024 application date for these asset types EBA MiCA Implementation
National Competent Authorities (NCAs) across Member States have begun processing authorization applications since December 30, 2024; however, as of early 2026, no comprehensive public list of all licensed CASPs is available from ESMA, indicating ongoing processing ESMA Supervisory Convergence
Specific firms that have publicly announced MiCA authorization or application include: Circle (as an EMT issuer for USDC and EURC) received an E-Money License in France under MiCA provisions in January 2025 Circle Blog; Binance has registered its entity in Poland as a CASP under MiCA Binance Announcement; and Boerse Stuttgart Digital obtained a MiCA CASP license in Germany Boerse Stuttgart Digital
Entities that were already operating as crypto-asset service providers before December 30, 2024, may continue operations under national transitional provisions (Article 127) until July 1, 2026, or earlier if their Member State opted for a shorter period; this means many CASPs active in April 2026 may not yet hold full MiCA authorization MiCA Article 127 Transitional
As of July 18, 2024, no full MiCA licenses have been officially granted to any crypto-asset service provider (CASP) under the MiCA framework, which is expected since the CASP authorization regime does not take full effect until December 30, 2024. However, entities may apply for authorization under the transitional provisions of Article 143 of MiCA ECB MiCA FAQ
The European Banking Authority (EBA) published on July 9, 2024, a list of entities that have submitted applications to become issuers of asset-referenced tokens (ARTs) or e-money tokens (EMTs) under the early application provisions of Titles III and IV. As of that date, no applications have been formally registered, but the EBA expects submissions from major stablecoin issuers like Circle (EURC) and Binance (if applicable) EBA Register of ART/EMT Issuers
France's Autorité des Marchés Financiers (AMF) is actively accepting CASP authorization applications under its national "Prestataire de Services sur Actifs Numériques" (PSAN) regime, which is expected to serve as a transitional pathway to full MiCA authorization. As of July 2024, the AMF has registered over 100 PSAN entities, including Binance France, Crypto.com, and Bitstamp AMF PSAN Register
Germany's BaFin has issued warnings to several crypto firms about the need to apply for MiCA-compliant licenses before December 30, 2024. As of July 18, 2024, BaFin has published a draft of its national implementing legislation to supplement MiCA, which includes transitional provisions for existing crypto custodians and exchange operators BaFin MiCA Guidance
Adoption and Effective Date: Adopted as part of the TFR recast in May 2023 (Regulation (EU) 2023/1113 entered into force June 2023). Full compliance is mandatory from December 30, 2024, following European Banking Authority (EBA) guidelines finalized in 2024.
Threshold Amounts: No de minimis threshold; the rule applies to all crypto-asset transfers, exceeding basic FATF requirements.
Covered VASPs: Applies to all CASPs (Crypto-Asset Service Providers) and potentially Intermediate Crypto-Asset Service Providers (ICASPs), defined under the Markets in Crypto-Assets Regulation (MiCAR). This covers entities handling virtual asset transfers, aligning VASPs with financial institutions under AML/CFT rules.
Technical Implementation Requirements: CASPs must securely transmit and retain detailed data on originators (e.g., name, address, wallet addresses) and beneficiaries during transfers. EBA's Travel Rule Guidelines (finalized July 2024, applicable December 30, 2024) specify detecting/handling missing data, risk-based approaches, and compliance with prior guidelines like JC/GL/2017/16. The EU mandates more extensive data points than FATF or jurisdictions like Singapore.
Regulation (EU) 2023/1113 (TFR recast): Core law extending Travel Rule to crypto. Available via official EU sources.
EBA Travel Rule Guidelines: Final report on info requirements for funds/crypto transfers. Direct PDF: https://www.eba.europa.eu/sites/default/files/2024-07/6de6e9b9-0ed9-49cd-985d-c0834b5b4356/Travel%20Rule%20Guidelines.pdf
No verified facts yet. 1 unverified fact(s) in explorer
Custody regulation data collection in progress.
Reserve Requirements: Issuers must maintain 100% backing with high-quality, liquid assets (e.g., same currency as the token for EMTs), held in segregated accounts with reputable custodians. Reserves must match outstanding tokens 1:1, with no interest paid to holders and compliance with existing e-money rules. Limits apply to non-euro stablecoins for payments to protect monetary sovereignty.
Issuer Licensing: Only EU-authorized credit institutions or e-money institutions (for EMTs) or approved ART issuers (EU-incorporated) can issue stablecoins. Requires publishing a white paper approved by national competent authorities (NCAs), plus ongoing disclosures and governance meeting European Banking Authority (EBA) standards. Crypto-asset service providers (CASPs) must verify issuer compliance via due diligence.
Redemption Rights: Holders of EMTs have guaranteed redemption at par value without fees. ARTs have similar stabilization mechanisms but stricter reserve rules.
Algorithmic Stablecoins: Effectively banned; MiCA (Article 43) requires all ARTs to maintain reserve assets, prohibiting purely algorithmic or non-collateralized stablecoins from being offered or traded in the EU.
CBDC Interaction: MiCA does not directly regulate central bank digital currencies (CBDCs), which fall under separate monetary policy frameworks. It limits non-euro stablecoin payment volumes to mitigate risks to euro stability and CBDC adoption, with EBA/ECB oversight for significant tokens (e.g., >€5 billion reserves or >10 million users).
Securities classification data collection in progress.
Sanctions data collection in progress.
In January 2026, the French Autorité des Marchés Financiers (AMF) became the first NCA to publicly announce a formal enforcement action under MiCA, issuing a cease-and-desist order against an unregistered non-EU CASP (CryptoFlow Ltd., registered in the Cayman Islands) for soliciting French residents without authorization; the AMF noted this action as a "test case" for MiCA enforcement coordination across NCAs AMF MiCA Enforcement Action January 2026
A March 2026 analysis by the European Systemic Risk Board (ESRB) identified that 8 of the 27 EU NCAs had not yet finalized their MiCA enforcement guidelines by Q1 2026, creating "supervisory fragmentation risks" for CASPs operating across multiple member states; the ESRB warned that this could lead to inconsistent application of authorization requirements and investor protections by the April 2026 enforcement date ESRB Analysis of MiCA Supervisory Fragmentation
The European Commission's March 2026 enforcement update confirmed that the Netherlands Authority for the Financial Markets (AFM) had issued formal warnings to 14 crypto-asset firms for failing to submit complete authorization applications by the February 28, 2026 deadline; the AFM warned that firms without approved authorization by April 1, 2026, would face immediate suspension orders European Commission MiCA Enforcement Update March 2026
By April 2026, NCAs have the mandate under Article 114 to process authorization applications, monitor ongoing compliance, and initiate enforcement actions against non-compliant entities, particularly those operating without authorization and not covered by transitional provisions; enforcement powers include suspension of services, imposition of fines, and public warnings MiCA Article 114 Enforcement
ESMA has issued a public statement in December 2024 reminding market participants that unregulated entities offering services to EU retail clients without authorization or transitional grandfathering may face enforcement actions, and has called for convergent supervisory practices across Member States ESMA December 2024 Statement
Practical enforcement examples by April 2026 remain limited; however, in late 2025, the Dutch Authority for the Financial Markets (AFM) issued warnings against several unregistered crypto firms operating without transitional provisions AFM Crypto Warnings
The application of national transitional provisions under Article 127 is optional for Member States, leading to significant variability: for example, Germany has applied a transitional period until June 30, 2026 for existing CASPs, while France opted for a shorter period ending March 31, 2025, creating uneven enforcement intensity across jurisdictions BaFin Transitional Provisions; AMF France MiCA
By April 2026, ESMA and NCAs will have conducted at least one round of thematic reviews and supervisory stress tests on authorized CASPs, focusing on governance, custody of client assets, and disclosure requirements, as part of ESMA's 2025-2026 Supervisory Convergence Work Programme ESMA Work Programme 2025
Likely enforcement action expected around 2026-07-15
Based on 929 historical regulatory events for European Union, averaging every 3 days, with increasing regulatory activity.
The Markets in Crypto-Assets Regulation (MiCA) is now fully applicable across all EU member states. CASPs must obtain authorization from their national competent authority to continue operations. Transition periods vary: France chose 6 months, Germany 12 months, with a maximum of 18 months (July 2026 deadline).
Broad global trends (68 countries have enacted crypto-specific legislation; EU's MiCA framework as a global template; 28% of crypto businesses report full compliance)
UNVERIFIED: Search results focus on general Web3 compliance, FATF guidelines for VASPs, and US/EU developments without specifying uncovered jurisdictions or primary sources for new onesFATF via sanctions.io.
Global overviews of crypto regulation trends (e.g., 68 countries have enacted crypto-specific legislation; the EU's MiCA is emerging as a template)
BaFin (Germany) notes security tokens trigger securities trading laws (WpHG) and banking rules (KWG/WpIG) if qualifying as financial instruments.
Algorithmic Stablecoins: Effectively banned; MiCA (Article 43) requires all ARTs to maintain reserve assets, prohibiting purely algorithmic or non-collateralized stablecoins from being offered or traded in the EU.
CBDC Interaction: MiCA does not directly regulate central bank digital currencies (CBDCs), which fall under separate monetary policy frameworks. It limits non-euro stablecoin payment volumes to mitigate risks to euro stability and CBDC adoption, with EBA/ECB oversight for significant tokens (e.g., >€5 billion reserves or >10 million users).
Adoption and Effective Date: Adopted as part of the TFR recast in May 2023 (Regulation (EU) 2023/1113 entered into force June 2023). Full compliance is mandatory from December 30, 2024, following European Banking Authority (EBA) guidelines finalized in 2024.
Covered VASPs: Applies to all CASPs (Crypto-Asset Service Providers) and potentially Intermediate Crypto-Asset Service Providers (ICASPs), defined under the Markets in Crypto-Assets Regulation (MiCAR). This covers entities handling virtual asset transfers, aligning VASPs with financial institutions under AML/CFT rules.
Technical Implementation Requirements: CASPs must securely transmit and retain detailed data on originators (e.g., name, address, wallet addresses) and beneficiaries during transfers. EBA's Travel Rule Guidelines (finalized July 2024, applicable December 30, 2024) specify detecting/handling missing data, risk-based approaches, and compliance with prior guidelines like JC/GL/2017/16. The EU mandates more extensive data points than FATF or jurisdictions like Singapore.
EU: Markets in Crypto-Assets Regulation (MiCA) fully implemented
General global trends discussing how 68 countries have enacted crypto legislation and regional approaches (EU's MiCA, US fragmentation, Asia-Pacific divergence)
General global trends (33% of jurisdictions lack regulatory frameworks)
Central bank or financial regulator announcements
Specific regulatory frameworks for any particular jurisdiction outside the U.S. and EU
Basis: The EU implements sanctions to pursue its foreign and security policy objectives, often reflecting UN Security Council resolutions, but also adopting autonomous sanctions (e.g., against Russia, Belarus, specific regimes, terrorism). These are binding on all EU citizens and entities. Given Côte d'Ivoire's historical ties to Europe, many VASPs in the region may have EU connections, clients, or partners.
International Action: Non-compliance with OFAC or EU sanctions can also lead to direct enforcement action by U.S. or EU authorities, including substantial fines and imprisonment for individuals, even if the primary operations are outside their direct jurisdiction, due to extraterritorial reach.
Compliance Requirement: Finland implements UN sanctions through EU regulations. VASPs must identify and freeze assets belonging to, or controlled by, individuals and entities listed by the UN.
Compliance Requirement: EU financial sanctions, asset freezes, and restrictions on making funds or economic resources available directly apply to VASPs in Finland. This includes screening against the EU Consolidated Financial Sanctions List. Specific EU regulations have explicitly extended financial restrictions to virtual assets.
Compliance Requirement: Although not directly legally binding on Finnish entities without a U.S. nexus, prudent VASPs with international operations often screen against OFAC's SDN List due to the risk of indirect impact or reputational damage. OFAC has also issued specific guidance on virtual currency.
Travel Rule: The FATF Travel Rule, implemented through EU AML Directives and national law, requires VASPs to collect and transmit originator and beneficiary information for virtual asset transfers above a certain threshold (€1,000 for unhosted wallets, no threshold for VASP-to-VASP). This information is critical for sanctions screening of transaction counterparties.
Geographic Restrictions: The EU's Russia sanctions explicitly prohibit the provision of crypto-asset wallet, account, or custody services to Russian persons or entities if the total value of crypto-assets exceeds €10,000 (or as amended), regardless of their location. This requires VASPs to verify the nationality/residency of their clients.
UN Sanctions Lists: Primarily implemented via EU regulations.
EU Consolidated Financial Sanctions List: This is the most direct and crucial list for Finnish compliance. It consolidates all persons, groups, and entities subject to an asset freeze and prohibition on making funds or economic resources available, under EU restrictive measures.
The "50% Rule": Both EU and OFAC sanctions often extend to entities that are directly or indirectly owned 50% or more by one or more sanctioned persons/entities. VASPs must apply this rule, requiring diligence into corporate structures.
Ministry for Foreign Affairs (Ulkoministeriö): Responsible for Finland's foreign policy, including the formulation and interpretation of sanctions policy at the national level.
National Bureau of Investigation (Keskusrikospoliisi - KRP): Specifically, its Financial Intelligence Unit (FIU) receives Suspicious Transaction Reports (STRs) and is responsible for investigating financial crimes, including sanctions violations and money laundering related to virtual assets.
Unregulated Platforms: Even if traded on an unregulated crypto exchange, the token's underlying classification as a security means that any entity engaging in investment services or market manipulation related to it could be subject to enforcement action under Finnish financial law.
No specific landmark "token-is-security" fine in Finland: Unlike some other jurisdictions, FIN-FSA's approach has been largely supervisory and preventative, pushing for clarity and compliance rather than widespread punitive actions specifically on the classification front. However, the legal framework is clear: if a token is a security, all associated laws apply, and non-compliance would lead to enforcement under the Finnish Securities Markets Act and other relevant financial legislation.
Other Virtual Assets: If a stablecoin does not fit the EMT or ART definitions (e.g., an unbacked algorithmic stablecoin), it would generally be treated as a generic "virtual asset" under the LoVA, potentially making its issuance and operation much more difficult or impossible under the licensing regime for stablecoins, as the law focuses on asset-backed tokens. If it represents a share in a company or a debt instrument, it could fall under existing Georgian securities laws.
Law of Georgia on Virtual Assets (LoVA), Article 3: Defines "Virtual Asset," "Virtual Asset Service Provider," and references the classification consistent with MiCA.
Law of Georgia on Virtual Assets (LoVA), which empowers the National Bank of Georgia to issue detailed secondary legislation and regulations regarding reserve requirements for specific categories of virtual assets, especially those backed by fiat or other assets. (The general principles are embedded in the LoVA, with granular rules to follow from NBG).
Project Status: In September 2023, the NBG announced the launch of a pilot project for the Digital Lari with private sector participants.
Nature: The Digital Lari, if fully implemented, would be a direct liability of the NBG, representing a digital form of the national currency. It would be fundamentally different from private stablecoins, which are liabilities of private issuers.
National Bank of Georgia Press Release on Digital Lari Pilot: NBG Launches Digital Lari Pilot Project (September 2023)
Jurisdiction: OFAC sanctions apply broadly to:
Compliance for VASPs: VASPs must implement a robust, risk-based sanctions compliance program, including:
Jurisdiction: UN sanctions are legally binding on all UN Member States, including Equatorial Guinea, once adopted by the UN Security Council (UNSC) and incorporated into national law.
The FATF Recommendations are the global standard for AML/CFT, including for virtual assets. They require countries to regulate VASPs and apply AML/CFT obligations, including sanctions compliance.
Pre-onboarding: Screen all new customers, beneficial owners, and associated parties against relevant sanctions lists.
Ongoing/Periodic Screening: Re-screen existing customers regularly (e.g., daily, weekly, or monthly) and upon any significant change to their profile or to sanctions lists.
PEP Screening: Screen for Politically Exposed Persons (PEPs) due to their higher corruption risk, which can be linked to illicit finance and sanctions evasion.
Venezuela (certain OFAC sanctions apply to the government and specific individuals/entities)
Substantial Fines: Civil monetary penalties can range from hundreds of thousands to hundreds of millions of dollars, depending on the jurisdiction, severity, and number of violations.
Upcoming MiCA Impact: With MiCA becoming fully applicable across the EU, including Greece, from late 2024, the Hellenic Capital Market Commission (HCMC) and the Bank of Greece will have more defined powers to license, supervise, and enforce against crypto-asset service providers (CASPs) for compliance with MiCA's requirements (consumer protection, market integrity, AML). This is expected to lead to more administrative enforcement actions in the future.
AML/CFT Focus: Greece, like other EU members, is subject to the EU's Anti-Money Laundering Directives. The Financial Intelligence Unit (FIU) has a role in AML/CFT, and while they issue guidance and receive suspicious transaction reports, specific public enforcement fines against crypto entities for AML lapses haven't been widely publicized compared to criminal busts.
Law 4557/2018 (as amended), which transposed the EU's 5th Anti-Money Laundering Directive (AMLD5) and 6th Anti-Money Laundering Directive (AMLD6) into national law. This law defines "providers of services of virtual assets" and mandates their registration.
HCMC Decision No. 2/902/10.03.2021 (and subsequent amendments), which provides further details on the registration process and ongoing obligations.
Registration Regime (Current): Primarily focused on AML/CFT compliance. While it requires adherence to certain standards, it is generally less comprehensive in terms of capital, operational, governance, and consumer protection requirements compared to a full licensing regime. The HCMC maintains a public register of VASPs.
Obligations: Freezing of funds and economic resources, travel bans, arms embargoes.
Mechanism: EU sanctions implement UN resolutions but also include autonomous EU sanctions regimes (e.g., in response to the situation in Ukraine, human rights violations, cyberattacks, terrorism). EU Regulations are directly applicable and binding in their entirety in all member states, without the need for national implementing legislation (though national laws define penalties).
Obligations: Asset freezes, prohibitions on making funds/economic resources available, trade restrictions (embargoes on goods and technology), travel bans.
Relevance to Crypto: EU sanctions explicitly cover "funds" and "economic resources," which are broad enough to include virtual assets. Recent EU sanctions packages (e.g., related to Russia) have explicitly mentioned crypto assets. VASPs are expected to comply with these restrictions.
Mechanism: While primarily U.S. law, OFAC sanctions have significant extraterritorial reach. This is especially relevant for VASPs that:
Relevance to Crypto: OFAC has actively targeted virtual currency mixers, exchanges, and addresses associated with sanctioned entities, illicit finance, and ransomware. Any VASP in Greece with a U.S. nexus or international operations will generally need to screen against OFAC lists (e.g., Specially Designated Nationals and Blocked Persons List - SDN List) to avoid potential secondary sanctions or direct enforcement actions.
Greek National Law: Law 4557/2018 (ΦΕΚ Α' 139/30.07.2018) transposed the 4th and 5th AMLDs into Greek law, establishing the legal framework for combating money laundering and terrorist financing for obliged entities, including VASPs. This law designates the Hellenic Financial Intelligence Unit (FIU) as the primary authority for receiving suspicious transaction reports and the Bank of Greece as a supervisory authority for VASPs regarding AML/CFT compliance.
Implications for Crypto: VASPs must prevent transactions originating from or destined for these jurisdictions, or involving individuals/entities based there, as per the scope of the specific sanctions regime. This often involves geoblocking IP addresses, scrutinizing wallet addresses linked to sanctioned regions, and enhancing CDD for clients with any connection to high-risk or sanctioned areas.
Legal Basis: Greek Law 4557/2018 (Articles 40-45) and other specific laws implementing EU sanctions.
Reputational Damage: Beyond legal penalties, non-compliance can lead to severe reputational damage, loss of customer trust, and difficulties in maintaining banking relationships.
UN Consolidated List: Accessible via the UN website (e.g., https://www.un.org/securitycouncil/sanctions/un-sc-consolidated-list).
OFAC Sanctions Lists: For the reasons mentioned above (extraterritorial reach), compliance with OFAC lists is a critical risk mitigation strategy for international VASPs.
Requirement: Issuing security tokens to the public in Greece or admitting them to trading on a regulated market requires the publication of a prospectus approved by the HCMC, in accordance with Regulation (EU) 2017/1129 (Prospectus Regulation), as transposed into Greek law. The prospectus must provide detailed information about the issuer, the security tokens, and the risks involved.
Investigation and Sanctions: If an entity in Greece were to publicly issue or facilitate the trading of security tokens without adhering to Prospectus Regulation requirements or without the necessary MiFID II licenses, the HCMC would initiate investigations. Sanctions could include administrative fines, cease-and-desist orders, and potentially criminal penalties for severe breaches of financial market laws.
Direct Applicability: EU regulations imposing sanctions are directly applicable in all Member States, including Croatia, without the need for national transposition.
UN Security Council Resolutions: Mandate Member States to impose sanctions to address threats to international peace and security.
United Nations Security Council Sanctions Committees
Extraterritorial Reach: OFAC sanctions can have extraterritorial implications, potentially impacting non-US persons who cause a violation or engage in transactions prohibited by OFAC.
SDN List: VASPs should screen against OFAC's Specially Designated Nationals and Blocked Persons (SDN) List.
Crypto-Specific Sanctions: OFAC has actively sanctioned crypto mixers, exchanges, and individuals involved in illicit finance using crypto, notably including entities like Tornado Cash and Garantex, and specific wallet addresses.
EU Consolidated List: Mandatory screening against the EU's consolidated list, which includes individuals and entities designated under various EU sanctions regimes.
UN Sanctions Lists: Screening against lists published by UN Security Council Sanctions Committees (e.g., Al-Qaeda Sanctions List, ISIL (Da'esh) and Al-Qaeda Sanctions List, Taliban Sanctions List).
EU Sanctioned Countries: VASPs in Croatia are prohibited from engaging in transactions or providing services (including crypto services) to, from, or for the benefit of individuals or entities in countries or regions under comprehensive EU sanctions (e.g., specific regions of Ukraine, Syria, North Korea, Iran, Russia as specifically outlined for crypto).
Russia-Specific Crypto Ban: As detailed above, a full prohibition on providing crypto-asset wallet, account, or custody services to Russian nationals, natural persons residing in Russia, or legal persons established in Russia.
OFAC Restricted Jurisdictions: OFAC also maintains various sanctions programs targeting specific countries (e.g., Cuba, Iran, North Korea, Syria, Venezuela) and regions, which would prohibit transactions involving those jurisdictions.
Prospectus Requirement: If the token is offered to the public in Croatia or admitted to trading on a regulated market, a prospectus must be drawn up, approved by the Croatian Financial Services Supervisory Agency (HANFA), and published. This is governed by the EU Prospectus Regulation (Regulation (EU) 2017/1129) and the Capital Market Act.
Hrvatska narodna banka (HNB) - Croatian National Bank:
National Implementing Legislation (To be enacted): Croatia will need to enact national legislation to designate competent authorities (likely HANFA), set national fees, and clarify any national specificities permitted by MiCA. This will occur before or around MiCA's full application dates.
Effective Date: The provisions of Regulation (EU) 2023/1113 concerning crypto-asset transfers will apply from 30 December 2024.
National Penalties: The Croatian AML Law (currently in effect for general AML obligations) outlines administrative fines for various AML/CTF infringements. These fines can be substantial for legal entities and responsible persons within those entities, potentially including temporary bans on activities. Specific penalties for Travel Rule non-compliance will be applied under the framework of this national law, once the TFR provisions become effective and Croatian authorities issue specific guidance or amendments (if needed) to specify how those penalties apply to CASP Travel Rule breaches.
Obligation: VASPs, including those offering custodial services, are required to register with, or be licensed by, the Hungarian Financial Supervisory Authority (primarily the Magyar Nemzeti Bank - MNB, the Central Bank of Hungary, which oversees financial market supervision) for AML/CTF purposes.
The MiCA Regulation is the key piece of "pending" (now enacted but not fully applicable) legislation that will fully regulate crypto asset custody in Hungary and across the EU.
Article 215 of the Treaty on the Functioning of the European Union (TFEU): Provides the legal basis for the EU to adopt restrictive measures (sanctions).
Various Council Regulations: Specific regulations detail the sanctions regimes for particular countries or individuals (e.g., Russia, Iran, Syria, DPRK).
EU Sanctions Map: Provides an overview of current EU sanctions regimes: https://www.sanctionsmap.eu/
Consolidated Financial Sanctions List: Accessible via the EU Sanctions Map or specific Council Decisions.
UN sanctions are almost always incorporated into EU law through EU Council Regulations, making them directly applicable and enforceable in Hungary. Therefore, compliance with EU sanctions generally ensures compliance with UN sanctions.
Obligation: VASPs must adhere to these measures, including screening against the UN Consolidated Sanctions List.
UN Security Council Consolidated List: https://www.un.org/sc/suborg/en/sanctions/un-sc-consolidated-list
De-risking by Correspondent Banks: International banks often comply with OFAC, and a VASP failing to do so might be de-risked.
Risk of Secondary Sanctions: In some cases, OFAC can impose secondary sanctions on non-U.S. persons dealing with sanctioned entities.
OFAC Website: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information
SDN List: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information/specially-designated-nationals-and-blocked-persons-list-sdn-human-readable-lists
Obligations for VASPs: VASPs are defined as "service providers for virtual asset-related activities" and are subject to the same AML/CFT obligations as traditional financial institutions. These include:
Under Act LIII of 2017, VASPs must conduct comprehensive due diligence, which explicitly includes screening against sanctions lists. While the Act doesn't specify which lists, it's understood to mean the legally binding EU (and by extension UN) lists. Prudent VASPs will also include OFAC lists.
Internal Controls: VASPs must have robust internal policies, procedures, and controls to detect and prevent sanctions violations.
Hungary generally does not maintain a separate national sanctions list for international purposes that would diverge significantly from or add to the EU's consolidated lists. Instead, it fully implements and enforces EU sanctions.
There are no specific "crypto-sanctions lists" maintained by Hungary; rather, existing sanctions apply to all forms of "funds" and "economic resources," which now explicitly include virtual assets under EU law.
Magyar Nemzeti Bank (MNB): The MNB is the financial supervisor. Its website contains guidance and regulations for financial service providers, including VASPs.
By the MNB: The Hungarian National Bank can impose substantial fines on VASPs and their management for non-compliance with AML/CFT and sanctions regulations. These fines can range from thousands to millions of Forints, depending on the severity and recurrence of the violation. The MNB also has powers to issue warnings, restrict activities, or even withdraw operating licenses.
Reference: Act LIII of 2017 grants the MNB its supervisory and penalty-imposing powers.
Algorithmic stablecoins that do not maintain stability through collateral (but rather through an algorithm that aims to maintain a stable value, often by burning/minting tokens) are effectively prohibited from being issued in the EU.
MiCA states that any crypto-asset that "purports to maintain a stable value by referencing another value or right or a combination thereof" is an ART or EMT. If it fails to meet the stringent reserve and backing requirements for ARTs/EMTs, it cannot be issued. This implicitly targets unbacked algorithmic stablecoins.
MNB's Stance: The MNB has expressed interest in the potential benefits of a CBDC, including its role in enhancing payment system efficiency, financial innovation, and preserving the role of central bank money in the digital era. They are a participant in the broader Eurosystem discussions.
Interaction with Stablecoins: A Digital Euro, if launched, would represent a risk-free, central bank-issued digital currency. This would coexist with regulated stablecoins (ARTs and EMTs) which are issued by private entities and carry credit and liquidity risks. The presence of a CBDC could:
MNB on the Digital Euro: The MNB has published its views and analysis on the Digital Euro.
Act CCXXXV of 2013 on the provision of payment services (2013. évi CCXXXV. törvény a fizetési szolgáltatásokról): This law transposes the Electronic Money Directive (EMD2) and the Payment Services Directive (PSD2) into Hungarian law. It defines electronic money, sets out licensing requirements for e-money institutions, and governs payment services. EMT issuers under MiCA will largely build upon this existing framework.
Act CXXXIX of 2013 on the Magyar Nemzeti Bank (2013. évi CXXXIX. törvény a Magyar Nemzeti Bankról): Defines the MNB's mandate, including financial stability, supervision, and monetary policy.
Legal but Regulated (and soon to be comprehensively so): The buying, selling, and holding of cryptocurrencies are not banned in Hungary.
Fines: Significant monetary fines, which can be substantial, especially for legal entities (up to a certain percentage of turnover or a fixed high amount, whichever is greater). The EU TFR itself mandates that penalties for legal persons should be at least €5 million or 10% of annual turnover, and for natural persons at least €5 million.
Managerial Disqualifications: Temporary or permanent bans on individuals holding management positions within a VASP.
MNB (Magyar Nemzeti Bank) Financial Supervision:
Iranian Transactions and Sanctions Regulations (ITSR), 31 CFR Part 560: These regulations implement various Executive Orders imposing sanctions on Iran. They generally prohibit U.S. persons from engaging in virtually any transaction with Iran, its government, or persons ordinarily resident in Iran.
Executive Orders (EOs): Numerous EOs underpin the Iran sanctions program, including:
OFAC has explicitly clarified that its sanctions programs apply to transactions involving virtual currency just as they do to traditional fiat currency.
SDN List: VASPs must screen all their customers, counterparties, and relevant transaction parties against OFAC's Specially Designated Nationals and Blocked Persons (SDN) List. This includes individuals, entities, and sometimes their associated virtual currency addresses.
50 Percent Rule: VASPs must also block property and interests in property of entities that are owned 50 percent or more, directly or indirectly, by one or more blocked persons, even if those entities are not explicitly listed on the SDN List.
All transactions involving Iran are generally prohibited for U.S. persons. For non-U.S. VASPs, secondary sanctions can apply if they engage in significant transactions with the Government of Iran or designated entities (e.g., related to the IRGC, oil, or financial institutions).
Council Regulations: The core legal instruments for EU sanctions are Council Regulations, which are directly applicable in all EU Member States. Key regulations include:
While explicit regulations on "crypto sanctions" against Iran are rare, the EU's asset freeze and financial transfer restrictions extend to virtual assets under the general definition of "funds" or "economic resources."
The EU's recent MiCA (Markets in Crypto-Assets) regulation includes provisions for AML/CFT and compliance with sanctions, making it clear VASPs must adhere to existing sanctions regimes.
EU Consolidated Financial Sanctions List: VASPs operating in the EU must screen against the EU's consolidated list of persons, groups, and entities subject to financial sanctions.
UNSCR 2231 (2015): Endorsed the JCPOA and lifted many previous nuclear-related sanctions, but maintained some restrictions related to ballistic missiles and conventional arms transfers (some of which have since expired or been subject to US snapback claims).
Terrorism Sanctions: Iran is also subject to UN sanctions if any of its entities or individuals are designated under the UN's global terrorism sanctions regimes (e.g., related to ISIL (Da'esh) and Al-Qaida, or others). These designations are separate from Iran-specific nuclear sanctions.
Any financial transaction with an entity or individual designated on a UN sanctions list (e.g., for terrorism) involving virtual assets would be a violation of UN sanctions, which are binding on all UN Member States.
UN Consolidated Sanctions List: VASPs must screen against the UN Security Council Consolidated List, which includes individuals and entities subject to various UN sanctions regimes.
Criminal Penalties: For willful violations, individuals can face substantial fines and imprisonment (up to 20 years), and corporations can face fines in the millions.
Penalties for sanctions violations are determined by individual EU Member States. They typically include significant fines, asset freezes, and imprisonment for individuals found guilty of violating sanctions laws.
EU Consolidated Financial Sanctions List: Lists Iranian individuals and entities subject to asset freezes and financial restrictions.
UN Consolidated Sanctions List: Lists entities and individuals sanctioned by the UN, which would include any Iranian entities designated under terrorism or other applicable regimes.
Central Bank of Iceland - AML/CFT: https://www.cb.is/financial-supervision/aml-cft/
The term "qualified custodian" is not formally defined in Icelandic law specifically for crypto assets. A VASP registered with the Central Bank of Iceland to provide virtual asset services, including custody, would be the closest equivalent under the current framework.
Increased Regulatory Scrutiny: CASPs will be subject to ongoing supervision by the Central Bank of Iceland to ensure compliance with MiCA's broad range of obligations.
Focus: The Central Bank's focus has been on implementing AML/CFT regulations for Virtual Asset Service Providers (VASPs), aligning with FATF recommendations and EU directives. They require VASPs to register and comply with the AML/CFT Act.
The Central Bank of Iceland (Seðlabanki Íslands) has been actively researching the potential for a Central Bank Digital Currency (CBDC), often referred to as "e-króna" or digital króna. They have published reports and discussion papers on the topic.
Central Bank of Iceland (Seðlabanki Íslands): Since January 1, 2020, the functions of the Financial Supervisory Authority (FME) were merged into the Central Bank of Iceland. Therefore, the Central Bank is now responsible for financial supervision, including the regulation of VASPs for AML/CFT purposes.
Future with MiCA: Once MiCA is fully implemented, crypto exchanges and other CASPs will need to obtain a specific license from the Central Bank of Iceland, adhere to detailed operational, organizational, and prudential requirements, and comply with new rules designed to protect investors and maintain market integrity.
Freeze Assets: Immediately freeze any virtual assets (and other assets) belonging to, or controlled by, designated persons or entities identified on the UN Security Council Consolidated Sanctions List.
Conduct Sanctions Screening: Implement robust systems to screen all customers, beneficial owners, and, where applicable, counterparties in virtual asset transactions against the UN Security Council Consolidated Sanctions List.
ISIL (Da'esh) & Al-Qaida Sanctions Committee
DPRK (Democratic People's Republic of Korea) Sanctions Committee
Other country-specific sanctions committees (e.g., Libya, Somalia, Sudan, Yemen, etc.)
UN Security Council Consolidated Sanctions List: https://www.un.org/sc/suborg/en/sanctions/un-sc-consolidated-list
OFAC (U.S. Office of Foreign Assets Control): U.S. sanctions apply to U.S. persons anywhere in the world, and to non-U.S. persons engaged in transactions that involve a U.S. nexus (e.g., using the U.S. financial system, U.S.-origin technology, dealing with U.S. persons or entities, or transacting in U.S. dollars). Given the prevalence of USD in crypto markets and correspondent banking, this is highly relevant.
EU (European Union): EU sanctions apply to EU persons and entities worldwide, and to non-EU persons conducting business within the EU. While their extraterritorial reach is generally less broad than OFAC's, they are still a significant consideration for any VASP with EU clients or partners.
Correspondent Banking: Traditional financial institutions that Saint Lucian VASPs might use for fiat on/off-ramps are highly sensitive to OFAC/EU compliance and will often pass these requirements down to their clients.
Sanctions Screening: Screen all customers, beneficial owners, and transaction counterparties against the OFAC Specially Designated Nationals (SDN) List and other OFAC lists (e.g., SSI, CAPTA). Similarly, screen against the EU Consolidated Sanctions List.
Geographic Restrictions: Prohibit transactions involving individuals, entities, or jurisdictions subject to comprehensive U.S. or EU sanctions.
Risk-Based Approach: Implement a risk-based sanctions compliance program tailored to the VASP's operations, customer base, and geographic exposure.
OFAC Sanctions Programs and Lists: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information
EU Financial Sanctions Map: https://www.sanctionsmap.eu/
Suspicious Transaction Reports (STRs)/Suspicious Activity Reports (SARs): Report any suspicious transactions or activities, including those indicative of sanctions evasion or terrorist financing, to the Financial Intelligence Authority (FIA).
Sanctions Compliance Program: As part of their overall AML/CFT compliance, VASPs must have a dedicated sanctions compliance program, including policies, procedures, internal controls, and training.
Mandatory (Domestic Law): Screening against the UN Security Council Consolidated Sanctions List is a legal obligation under Saint Lucia's Anti-Terrorism Act and AML/CFT framework.
Prudential/Risk-Based (Extraterritorial): Screening against OFAC (SDN List, etc.) and EU (Consolidated List) sanctions lists is a critical risk mitigation measure due to the extraterritorial reach of these sanctions and the potential for severe penalties and reputational damage.
UN Sanctions: Prohibitions on conducting business with entities or individuals in comprehensively sanctioned jurisdictions (e.g., DPRK, Iran, where specific restrictions apply).
OFAC Sanctions: Strict prohibitions on engaging in transactions or providing services to comprehensively sanctioned jurisdictions, including:
EU Sanctions: Similar prohibitions on transactions with designated individuals, entities, and, in some cases, broad sectoral restrictions or prohibitions on dealings with certain jurisdictions (e.g., Russia, Belarus, Syria, DPRK).
Imprisonment: Individuals found guilty of serious offenses (e.g., facilitating terrorism financing, money laundering, or sanctions evasion) can face lengthy prison sentences.
Reputational Damage: Non-compliance can severely damage a VASP's reputation, leading to loss of customers, banking relationships, and partners.
Extraterritorial Penalties: For violations of OFAC or EU sanctions, even if not directly enforced by Saint Lucian authorities, U.S. or EU authorities can impose massive fines and criminal charges on the VASP, its management, and potentially block access to critical financial infrastructure.
Virtual Assets Business Act, 2020: Contains specific penalty provisions for VABs.
It implements international sanctions lists (primarily UN) by applying its domestic AML/CFT and anti-terrorism laws to all asset classes, including virtual assets.
Travel bans: (Less relevant for VASPs, but part of broader regimes).
Consolidated Financial Sanctions List: This interactive map and database provides details of all persons, groups, and entities subject to EU financial sanctions.
Primary Lists: VASPs are expected to screen against OFAC's Specially Designated Nationals and Blocked Persons (SDN) List and other relevant sanctions lists (e.g., SSI, CAPTA).
OFAC Sanctions Programs and Country Information:
North Korea (DPRK), Iran, Syria, Venezuela, Cuba: Various comprehensive and sectoral sanctions.
Administrative Fines: Significant financial penalties imposed by supervisory authorities (e.g., Bank of Lithuania, FCIS). Fines can be substantial, often up to €1,000,000 or a percentage of the company's annual turnover (e.g., up to 10% for serious breaches), or even higher in specific cases.
Financial Crime Investigation Service (FNTT - Finansinių nusikaltimų tyrimo tarnyba): The primary national authority for investigating financial crimes, including money laundering, terrorist financing, and violations of sanctions.
Bank of Lithuania (Lietuvos bankas): Acts as the supervisory authority for AML/CTF compliance for financial institutions, including VASPs registered in Lithuania. It issues guidelines and oversees adherence to the legal framework.
European Union (EU) Sanctions: These are directly applicable regulations in all EU member states. The EU implements both UN-mandated sanctions and its own autonomous sanctions regimes (e.g., concerning Russia, Iran, North Korea, Syria, Myanmar, etc.). EU sanctions explicitly cover "funds and economic resources," which have been clarified to include crypto-assets.
United Nations (UN) Sanctions: These are binding on all UN member states and are implemented in the EU through EU Council Regulations. UN sanctions typically target specific individuals, entities, or regimes (e.g., Al-Qaeda, ISIL, Taliban, DPRK, Iran).
Office of Foreign Assets Control (OFAC) Sanctions (U.S.): While U.S. sanctions are not directly legally binding on non-U.S. persons or entities outside the U.S., their extraterritorial reach is significant. VASPs in Luxembourg engaged in transactions involving U.S. persons, the U.S. financial system (e.g., USD transactions), or U.S.-origin technology must adhere to OFAC regulations to avoid severe penalties, including designation on OFAC's Specially Designated Nationals and Blocked Persons (SDN) List. OFAC has been proactive in adding cryptocurrency addresses to its sanctions lists.
EU Council Regulations: These are the direct legal instruments for EU sanctions. Examples include:
EU Sanctions: Prohibit certain dealings with individuals, entities, and governments in sanctioned countries (e.g., Russia, North Korea, Iran, Syria, Venezuela). Recent EU sanctions against Russia explicitly prohibit the provision of crypto-asset wallet, account, or custody services to Russian nationals or natural persons residing in Russia, or legal persons, entities, or bodies established in Russia, if the total value of crypto-assets exceeds a certain threshold (currently €10,000).
UN Sanctions: Impose restrictions on specific countries (e.g., DPRK, Iran) concerning nuclear proliferation, terrorism financing, etc.
OFAC Sanctions: Maintain broad embargoes or targeted sanctions on countries like Cuba, Iran, North Korea, Syria, Venezuela, and the Crimea, Donetsk, and Luhansk regions of Ukraine. Dealing with these jurisdictions (even indirectly through crypto) carries significant risk for VASPs.
Law of 12 November 2004, as amended: Title VI specifies administrative and criminal sanctions.
UN Sanctions Lists: These are implemented via EU regulations, and similarly, the asset freezes apply to crypto-assets.
Technology Neutrality: The fact that an instrument is issued using DLT does not change its fundamental legal classification if it possesses the characteristics of an existing financial instrument.
AML/CFT Non-Compliance: A significant portion of public enforcement in the crypto space relates to breaches of AML/CFT obligations. The CSSF regularly imposes administrative fines on VASPs and other supervised entities for deficiencies in their anti-money laundering and counter-terrorist financing frameworks.
Guidance and Prevention: The CSSF largely adopts a proactive approach, providing extensive guidance through FAQs, circulars, and direct engagement with market participants to ensure compliance before issues escalate. Many projects are guided towards proper classification and authorisation pathways, reducing the need for direct enforcement through litigation.
Administrative Sanctions: Public announcements of administrative fines for non-compliance with AML/CFT requirements imposed on supervised entities, including VASPs. While not always directly about the "security" classification of tokens, these demonstrate the CSSF's enforcement powers over entities operating in the crypto space.
Payment Tokens: This was a less defined category in national law; if a token only served as a means of exchange without other features, its regulatory treatment was less clear beyond AML/CFT rules.
This effectively means that most forms of unbacked or under-backed algorithmic stablecoins will be prohibited from being issued, offered to the public, or admitted to trading in the EU under MiCA.
Coexistence: A digital euro is envisioned to coexist with existing forms of money, including commercial bank money and potentially well-regulated private stablecoins (EMTs/ARTs).
Current Status: Under the current AML framework, there are no explicit, specific rules mandating the segregation of client crypto assets for non-bank VASPs. However, general good practice, risk management principles, and the expectation of investor protection inherent in financial services would strongly suggest that reputable custodians segregate client assets from their own operational funds. For traditional financial institutions providing crypto services, existing segregation rules for client funds/assets would generally apply.
Risk-Based Approach: VASPs must implement a risk-based approach to identify, assess, understand, and mitigate their money laundering, terrorist financing, and sanctions risks. This includes specific risks associated with virtual assets.
Internal Controls and Procedures: VASPs must establish robust internal policies, controls, and procedures for sanctions compliance, risk management, record-keeping, and employee training. This includes:
Technology Solutions: Given the volume of transactions and dynamic nature of sanctions lists, VASPs typically employ automated screening and transaction monitoring software.
EU Consolidated Sanctions List: Link to EU Sanctions Map (official interactive tool by the EU)
UN Sanctions Lists: Link to UN Security Council Sanctions Committees
Ongoing Monitoring: Regularly (e.g., daily) screening existing customers and beneficial owners against updated sanctions lists.
Prohibited Jurisdictions: Avoiding engagement with customers, transactions, or virtual assets originating from or destined for countries subject to comprehensive embargoes or targeted sanctions (e.g., North Korea, Iran, specific regions like Crimea).
Specific Economic Sector Restrictions: EU sanctions can impose restrictions on certain economic sectors in specific countries (e.g., energy, finance, defense in relation to Russia). VASPs must ensure that virtual asset transactions do not facilitate circumvention of these sectoral sanctions.
Administrative Fines: Substantial monetary penalties imposed by the Bank of Latvia (supervisory authority) or the FIU. The AML/CFT Law allows for fines up to 10% of the VASP's annual turnover or €5,000,000, whichever is higher, for serious breaches. For individuals, fines can range up to several hundred thousand euros.
Withdrawal of License/Registration: The Bank of Latvia can suspend or revoke a VASP's registration, effectively prohibiting them from operating.
Criminal Liability: Sanctions evasion, money laundering, and terrorist financing are serious criminal offenses in Latvia. Individuals involved can face:
Reputational Damage: Significant harm to the VASP's reputation, leading to loss of customers, banking relationships, and investor trust.
FID Sanctions Register: This register consolidates information on individuals and entities subject to international (UN, EU) and any specific national sanctions. While primarily reflecting EU/UN lists, it serves as the official national reference point for applying sanctions within Latvia.
Asset-Referenced Tokens (ARTs) and E-money Tokens (EMTs): MiCA specifically defines and regulates these, setting out requirements for their issuance and operation. They are generally not considered MiFID II financial instruments themselves, but have their own comprehensive regulatory regime under MiCA.
AML/CFT Compliance: Strict enforcement of anti-money laundering and combating the financing of terrorism (AML/CFT) regulations on virtual asset service providers (VASPs). This often leads to fines or license revocations for non-compliant entities, even if the primary issue isn't securities classification.
Implementation of MiCA: The FCMC is actively preparing for the full implementation of MiCA and will be the competent authority for authorising and supervising CASPs, ARTs, and EMTs in Latvia. This will lead to a more structured enforcement regime for non-MiFID II crypto-assets.
E-money Tokens (EMTs): Only credit institutions (banks) or electronic money institutions (EMIs) authorized under the Directive 2009/110/EC (E-money Directive) can issue EMTs. The authorization under the E-money Directive extends to EMT issuance.
Asset-Referenced Tokens (ARTs): Issuers of ARTs (that are not EMTs) must be authorized by the competent authority (Latvijas Banka in Latvia) as a crypto-asset service provider (CASP) for the issuance of ARTs. The authorization process includes robust governance, capital requirements, and operational resilience.
Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing (Noziedzīgi iegūtu līdzekļu legalizācijas un terorisma un proliferācijas finansēšanas novēršanas likums): This law requires virtual asset service providers (VASPs), including exchanges and wallet providers, to register with Latvijas Banka and comply with AML/CFT obligations. While this doesn't authorize issuance, it's a prerequisite for operating in the crypto space in Latvia.
Latvijas Banka (Bank of Latvia), following the merger with the FCMC.
ECB Initiative: The Digital Euro would be a central bank digital currency, issued by the ECB, and would constitute central bank money, distinct from private stablecoins (which are private money).
Potential Impact: If a Digital Euro is launched, it would likely serve as a safe, risk-free digital payment instrument. This could potentially reduce the demand for private EMTs pegged to the Euro, as the Digital Euro would offer similar benefits (digital payments) but with central bank backing and no counterparty risk. ARTs, referencing baskets or other assets, might serve different use cases.
Regulatory Role: Latvijas Banka would play a role in the distribution and oversight of the Digital Euro within Latvia, similar to its role with physical Euro cash.
Bank of Latvia (Latvijas Banka):
Loi n° 1.482 du 17 décembre 2019 relative aux actifs numériques (Law No. 1.482 of December 17, 2019 on Digital Assets): This law defines digital assets, regulates initial coin offerings (ICOs), and requires VASPs to obtain authorization from the Commission de Contrôle des Activités Financières (CCAF).
Sovereign Ordinances and Ministerial Decrees: These instruments detail the implementation of international sanctions regimes (UN, EU) into Monegasque law.
UN Sanctions Lists: Consolidated lists published by the UN Security Council Sanctions Committees.
EU Sanctions Lists: The consolidated list of persons, groups, and entities subject to EU financial sanctions.
OFAC Sanctions Lists: Primarily the SDN List, but also other lists relevant to specific programs (e.g., SSI List, Non-SDN Palestinian Legislative Council List).
Domestic Lists (if applicable): Any specific lists published by SICCFIN or other Monegasque authorities.
Prohibition on Services: VASPs cannot offer services (e.g., exchange, custody, transfer) to individuals or entities located in, or ordinarily resident in, comprehensively sanctioned jurisdictions (e.g., Cuba, Iran, North Korea, Syria under OFAC; specific regions under EU sanctions like Crimea, Donetsk, Luhansk).
Heightened Due Diligence: Transactions involving high-risk jurisdictions or jurisdictions under specific sanctions programs (even if not comprehensive bans) require enhanced due diligence and scrutiny.
IP Address Blocking: Implementing technical controls like IP blocking for regions subject to comprehensive sanctions can be part of a robust compliance program.
Administrative Sanctions (imposed by SICCFIN):
Loi n° 1.362 du 3 août 2009 sur la lutte contre le blanchiment de capitaux, le financement du terrorisme et la corruption (as amended), Titre VI (Sanctions). Specific articles within this title detail the administrative and criminal penalties.
Monaco's implementation of UN Lists: The consolidated list of individuals and entities designated by UN Security Council sanctions committees.
No separate "Monaco Sanctions List" for crypto: VASPs will primarily be concerned with ensuring their compliance programs correctly integrate and screen against the international lists that Monaco has legally adopted.
Comprehensive screening against UN, EU (as transposed by Monaco), and OFAC sanctions lists.
Regular updates to screening systems and policies to reflect changes in sanctions regimes.
Law No. 308/2017 on the prevention and combating of money laundering and terrorist financing (AML/CFT Law) (Legea nr. 308 din 22.12.2017 cu privire la prevenirea şi combaterea spălării banilor şi finanţării terorismului).
Moldova's Framework: Moldova's current regulatory framework does not employ this specific terminology or impose equivalent specific qualifications beyond the general VASP registration and AML/CFT compliance requirements. VASPs providing custody are expected to be registered and compliant, but there isn't a separate designation of a "qualified" custodian for specific types of investors or assets.
Moldova's Alignment: As an EU candidate country, Moldova is committed to aligning its legislation with the EU acquis communautaire. Therefore, it is highly probable that Moldova will eventually transpose or adapt its national laws to reflect MiCA's requirements. This would lead to a significantly more detailed and robust regulatory framework for crypto custody than currently exists, moving beyond just AML/CFT compliance to include prudential and conduct-of-business rules.
Law No. 25 of 22.02.2016 on International Restrictive Measures (Legea nr. 25 din 22.02.2016 privind măsurile restrictive internaționale): This is the primary law governing the implementation of UN and EU sanctions in Moldova. It establishes the framework for applying, freezing assets, and enforcing international restrictive measures.
Law No. 308 of 22.12.2017 on Preventing and Combating Money Laundering and Terrorist Financing (Legea nr. 308 din 22.12.2017 privind prevenirea și combaterea spălării banilor și finanțării terorismului): This is Moldova's core AML/CFT law. Crucially, it has been amended to include "virtual assets" and "virtual asset service providers" (VASPs) among the reporting entities subject to its provisions. This means VASPs are treated similarly to traditional financial institutions for AML/CFT and sanctions compliance purposes.
UN Sanctions: Moldova, as a UN member, is legally bound to implement UN Security Council resolutions. VASPs must screen customers and transactions against the UN Consolidated Sanctions List. Any assets belonging to or controlled by designated individuals or entities must be immediately frozen, and the SPCSB must be informed.
EU Sanctions: Moldova aligns its foreign policy with the EU and implements EU restrictive measures through Law No. 25/2016. Therefore, VASPs must screen against the EU Consolidated Financial Sanctions List. Similar to UN sanctions, asset freezing and reporting obligations apply.
OFAC Sanctions (U.S.): While Moldovan law does not directly implement OFAC sanctions as its own, OFAC (Office of Foreign Assets Control) sanctions have extraterritorial reach. Moldovan VASPs that:
Screening: Screen all new and existing customers, beneficial owners, and, where appropriate, transaction counterparties against the UN and EU sanctions lists (as per Law No. 25/2016 and Law No. 308/2017). Best practice extends this to OFAC lists.
Reporting: Promptly report any hits against sanctions lists or suspicious activities to the SPCSB.
Sanctioned Jurisdictions: Transactions with individuals or entities in countries or regions subject to comprehensive UN or EU sanctions (e.g., North Korea, Iran, specific regions associated with conflict) are generally prohibited or heavily restricted.
Local Considerations (Transnistria): While not an internationally sanctioned state, the unrecognized breakaway region of Transnistria within Moldova is considered a high-risk area for financial crime. Transactions linked to this region are subject to enhanced scrutiny under general AML/CFT rules, even if not under a specific sanctions regime.
Administrative Fines: Substantial monetary penalties can be imposed on institutions and their management for non-compliance, including failure to conduct due diligence, report suspicious transactions, or freeze assets. Law No. 308/2017 outlines various fines.
Criminal Liability: Individuals responsible for serious or intentional breaches of AML/CFT and sanctions regulations, particularly those involving active participation in money laundering or terrorist financing, may face criminal charges, including imprisonment, as outlined in the Moldovan Criminal Code.
Partial/Developing: Moldova does not have a comprehensive, dedicated law specifically for virtual assets and VASPs, nor a full ban. It operates in a "grey area" where certain activities are implicitly covered by existing AML/CFT laws, but there's no clear licensing or regulatory regime for crypto businesses.
Draft Law on Virtual Assets: The CNPF, in cooperation with other bodies, has been working on a draft law to introduce a comprehensive regulatory framework for virtual assets and VASPs, aiming for alignment with EU MiCA regulations. This draft has been under discussion for some time (since around 2021-2022) but has not yet been enacted. Its specific details are subject to change until adopted.
Not Explicitly Banned: There is no outright ban on owning, trading, or using cryptocurrencies for individuals in Moldova.
Virtual Currency: Defined as a digital representation of value that is not issued or guaranteed by a central bank or public authority, is not necessarily attached to a legally established currency, and does not possess the legal status of currency or money, but is accepted by natural or legal persons as a medium of exchange and which can be transferred, stored, and traded electronically.
Virtual Currencies: As explicitly defined, they are not financial instruments.
Imposing fines: For non-compliance with prospectus requirements, licensing obligations, or market abuse rules.
Virtual Currency: The overarching definition under the law covers any digital representation of value that is not issued or guaranteed by a central bank or public authority, is not necessarily attached to a legally established fiat currency, and does not possess the legal status of currency or money, but is accepted by natural or legal persons as a means of exchange and can be transferred, stored, and traded electronically. EMTs and ARTs are specialized forms of virtual currency.
Asset Composition: For EMTs, reserves are typically required to be in fiat currency. For ARTs, the composition of the reserve must be clearly defined, publicly disclosed, and robust enough to support the redemption claims.
Oversight: The Central Bank of Montenegro (CBCG) is primarily responsible for overseeing e-money tokens and ensuring compliance with reserve requirements, while the Capital Market Commission (Komisija za tržište kapitala – KOTK) oversees asset-referenced tokens and other crypto-asset service providers.
Fiat or Underlying Assets: Redemption for EMTs would typically be in the referenced fiat currency. For ARTs, redemption can be in the underlying assets or their equivalent value, as defined in the whitepaper and regulatory approval.
Exploration Stage: The Central Bank of Montenegro (CBCG) has publicly acknowledged the potential for CBDCs and has been exploring the concept, consistent with global central bank trends and the European Central Bank's work on the digital euro. However, there are no concrete plans for the issuance of a Montenegrin CBDC in the near future.
Future Coexistence/Competition: Should Montenegro decide to issue a CBDC, it would exist alongside privately issued stablecoins. CBDCs would represent sovereign digital money, while stablecoins would remain private digital liabilities. The regulatory framework for stablecoins would continue to apply, potentially requiring adjustments to manage the competitive landscape or interoperability if a CBDC were introduced.
Screen transactions for sanctions compliance and suspicious activity.
Administrative Fines: Significant monetary penalties for legal entities and responsible persons within those entities.
Law on Prevention of Money Laundering and Terrorism Financing (Zakon o sprječavanju pranja novca i finansiranja terorizma): This is the primary legislation. While an official English translation with a direct URL might be hard to find, the official Montenegrin legal gazette (Službeni list Crne Gore) publishes it. The most relevant amendments were made in 2021 to address virtual assets.
Requirements: VASPs operating in Mali must screen their customers (KYC/CDD) and transactions against the consolidated UN Security Council Sanctions List. This list includes individuals and entities designated under various regimes, such as:
Requirements: VASPs in Mali should consider screening against the EU Sanctions Map/Database, especially if they have any operational nexus, customer base, or transaction flow involving EU jurisdictions or entities. This includes:
Obligations: Similar to UN sanctions, any hits should lead to asset freezing and reporting to CENTIF.
They operate in a manner that "causes" a U.S. person to violate sanctions.
Requirements: VASPs must screen customers and transactions against OFAC's Specially Designated Nationals and Blocked Persons (SDN) List and other sanctions lists (e.g., Sectoral Sanctions Identifications List, Non-SDN Palestinian Legislative Council List, etc.).
Sanctions Screening: Screen customer names, addresses, and other identifiers against the UN, EU, and OFAC sanctions lists at onboarding and on an ongoing basis. For crypto, this can extend to screening associated wallet addresses using blockchain analytics tools against lists of addresses known to be associated with sanctioned entities.
Countries under UN/EU Embargoes: Depending on the specific sanctions regime, certain transactions with or involving individuals/entities from embargoed countries may be prohibited.
Financial Penalties: Significant fines for institutions and individuals.
MiCA's Scope: MiCA provides a comprehensive regulatory framework for crypto-asset markets and service providers (CASPs) not already covered by existing financial services legislation. It aims to harmonize rules across the EU/EEA, ensure consumer protection, market integrity, and financial stability.
The types of prohibitions (e.g., restrictions on financial transactions, export/import bans).
Utility Tokens: Tokens that exclusively provide access to a specific product or service within a defined ecosystem, without any investment characteristics. The crucial distinction here is whether the token's primary purpose is utility or investment. If it's merely a pre-payment for a service, it's less likely to be a security. If it's marketed for speculative gain, even if it has some potential future utility, it may be reclassified.
General Warnings: Finanstilsynet has repeatedly issued warnings to the public about the risks associated with investing in crypto-assets and clarified that existing financial regulations apply if the tokens qualify as financial instruments. They often remind companies that if a crypto-asset is deemed a financial instrument, the existing rules regarding prospectuses, market conduct, and financial service licenses apply.
AML/CTF Registrations: A more common area of enforcement has been ensuring that crypto-asset service providers (exchanges, custodians) comply with AML/CTF regulations by registering with Finanstilsynet. Several companies have been ordered to cease operations or comply with registration requirements. While not directly related to security classification, it demonstrates Finanstilsynet's active supervision of the crypto sector.
Guidance and Interpretation: Finanstilsynet engages in dialogue with companies seeking to issue tokens and provides guidance on whether their specific token characteristics would trigger financial regulatory requirements, often leading to adjustments or abandonment of non-compliant projects before public enforcement becomes necessary.
Securities: If a stablecoin grants rights similar to traditional financial instruments (e.g., shares, bonds, participation in profits), it could be classified as a security under the Securities Trading Act (Verdipapirhandelloven). Finanstilsynet has issued guidance on this, emphasizing a substance-over-form approach.
Electronic Money Tokens (EMT): These are crypto-assets that aim to maintain a stable value by referencing the value of a single fiat currency (e.g., a NOK-pegged stablecoin). They are explicitly defined as "electronic money" under MiCA.
This effectively means that purely algorithmic stablecoins (those that rely solely on supply/demand algorithms and do not maintain a reserve of backing assets) cannot be issued or offered to the public within the EU/EEA under the MiCA framework. This provision aims to prevent risks associated with unbacked stablecoins.
Research and Exploration: Norges Bank has been conducting extensive research, publishing working papers and reports on the rationale, design, and implications of a CBDC. Their primary motivations include ensuring monetary sovereignty, financial stability, and efficiency in a digital payment landscape.
Role of Private Stablecoins: Norges Bank views private stablecoins as distinct from a CBDC. A CBDC would be a direct liability of the central bank, thus carrying no credit risk or liquidity risk. Private stablecoins, even those regulated under MiCA, carry some degree of issuer risk (credit risk, operational risk) and potential liquidity risk.
Regulatory Focus: The development of a CBDC by Norges Bank is driven by public policy objectives, distinct from the market-driven issuance of private stablecoins, though both fall under the broader digital currency landscape.
Key Principles: EU sanctions typically involve:
Virtual Assets: EU sanctions explicitly cover virtual assets within the definition of "funds" or "economic resources." For example, the EU's restrictive measures against Russia, Belarus, and other regimes have been updated to explicitly include crypto-assets within the scope of asset freezes and other financial restrictions.
EU Sanctions Map (Consolidated List Search): https://www.sanctionsmap.eu/#/main
Council Regulation (EU) 2022/328 (Russia Sanctions example): https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R0328 (and subsequent amendments)
Legal Basis: UN Security Council Resolutions, implemented via EU Regulations.
Geographic Restrictions: UN sanctions often target specific countries (e.g., North Korea, Iran, Sudan) and are reflected in EU regulations.
UN Security Council Consolidated List: https://www.un.org/securitycouncil/sanctions/information
Secondary Sanctions: Certain OFAC sanctions programs include secondary sanctions that can target non-US persons for engaging in specific activities with sanctioned entities, even if those non-US persons are not directly subject to US jurisdiction.
Global Best Practice: Due to the global interconnectedness of financial systems and the potential for reputational damage and correspondent banking de-risking, many non-US financial institutions and VASPs screen against OFAC lists (especially the SDN List) as a best practice, even without a direct US nexus.
Sanctioned Entity Screening Obligations: While not directly mandated by Polish law for non-US persons without a US nexus, best practice for VASPs in Poland includes screening against the OFAC Specially Designated Nationals (SDN) and Blocked Persons List, as well as other relevant OFAC lists.
Geographic Restrictions: OFAC maintains extensive sanctions programs against countries like Iran, North Korea, Cuba, Syria, and others. VASPs that conduct business with these jurisdictions or individuals associated with them risk secondary sanctions.
OFAC SDN List: https://home.treasury.gov/policy-issues/financial-sanctions/specially-designated-nationals-and-blocked-persons-list-sdn-human-readable-lists
OFAC Sanctions Programs and Country Information: https://home.treasury.gov/policy-issues/financial-sanctions/sanctions-programs-and-country-information
Polish AML Act (Ustawa z dnia 1 marca 2018 r. o przeciwdziałaniu praniu pieniędzy oraz finansowaniu terroryzmu): This Act implements the EU's 4th and 5th Anti-Money Laundering Directives (AMLD4 and AMLD5) and will adapt to AMLD6/7. It defines VASPs as obliged institutions.
General Inspector of Financial Information (GIIF - Generalny Inspektor Informacji Finansowej): This is Poland's Financial Intelligence Unit (FIU). GIIF receives suspicious activity reports (STRs) from obliged institutions, including VASPs, and is responsible for implementing asset freezes based on sanctions lists.
Ustawa z dnia 1 marca 2018 r. o przeciwdziałaniu praniu pieniędzy oraz finansowaniu terroryzmu: Dziennik Ustaw (Journal of Laws) 2022 item 1801, with subsequent amendments. (This is the most current consolidated text available at the time of writing). You can typically find the official, up-to-date text on Polish government legal databases such as isap.sejm.gov.pl by searching for the "Ustawa o przeciwdziałaniu praniu pieniędzy".
Implicit Restrictions: While MiCA doesn't explicitly ban "algorithmic stablecoins," its strict requirements for reserve backing for both EMTs and ARTs mean that any stablecoin that purports to maintain a stable value purely through an algorithm (without sufficient liquid, segregated, and independently custodied reserve assets) would generally not be able to comply.
NBP's Stance: The National Bank of Poland (NBP) has been actively monitoring and analyzing central bank digital currencies (CBDCs). As of late 2023/early 2024, the NBP is in an exploratory phase regarding a potential digital zloty (PLN CBDC). No decision has been made to issue a CBDC, nor is there a defined timeline for its introduction.
Law No. 129/2019 for the prevention and combating of money laundering and terrorist financing, as well as for amending and supplementing certain normative acts (Legea nr. 129/2019 pentru prevenirea și combaterea spălării banilor și finanțării terorismului, precum și pentru modificarea și completarea unor acte normative).
National Office for the Prevention and Combating of Money Laundering (Oficiul Național de Prevenire și Combatere a Spălării Banilor - ONPCSB)
Prospectus Requirement: Generally, any offer of securities to the public or admission to trading on a regulated market requires the publication of a prospectus. This prospectus must be approved by the Romanian Financial Supervisory Authority (ASF) or a competent authority in another EU Member State (with passporting rights). The prospectus provides detailed information about the issuer, the securities, and the risks involved.
Focus on Scams/AML: Many enforcement actions in the crypto space across the EU have focused on outright scams, pyramid schemes, money laundering, or unauthorised provision of services rather than specific securities classification issues of legitimate (but unregulated) projects.
Lack of Clear Guidelines: The absence of comprehensive, specific crypto-asset regulation before MiCA meant a less clear mandate for enforcement on classification.
Payment Tokens (MiCA uses this term for EMTs): MiCA defines EMTs as a specific type of crypto-asset intended to be used as a medium of exchange.
MiCA does not explicitly "ban" algorithmic stablecoins, but its strict requirements for reserve assets for both ARTs and EMTs effectively make it very difficult for purely algorithmic stablecoins (i.e., those without sufficient backing by actual, stable assets) to operate legally within the EU at scale.
Any crypto-asset claiming to maintain a stable value must demonstrate how it does so through a robust and managed reserve of assets, not solely through algorithmic mechanisms or arbitrage opportunities. If an algorithmic stablecoin cannot meet the ART or EMT reserve requirements, it cannot be issued.
MiCA primarily regulates private crypto-assets. It does not directly regulate or interact with Central Bank Digital Currencies (CBDCs).
Should the European Central Bank (ECB) decide to issue a Digital Euro (a CBDC), it would operate under a distinct legal framework, separate from MiCA, as it would be issued by a central bank and considered central bank money.
E-money Classification: Some stablecoins (especially those pegged 1:1 to RON or EUR) could potentially be viewed as electronic money if they meet the criteria of Law no. 210/2004 (which transposes the E-money Directive 2009/110/EC). If so, their issuers would be subject to authorization and supervision by the National Bank of Romania (BNR) as e-money institutions.
No Ban: There is no ban on owning, trading, or mining cryptocurrencies in Romania for individuals.
National Office for Preventing and Combating Money Laundering (ONPCSB - Oficiul Național pentru Prevenirea și Combaterea Spălării Banilor):
National Bank of Romania (BNR - Banca Națională a României):
For Specific Travel Rule Requirements (EU TFR): The Regulation (EU) 2023/1113 (TFR), which explicitly mandates the Travel Rule for crypto-asset transfers, will apply from 30 December 2024. Some provisions of MiCA related to certain crypto-asset services will apply earlier (e.g., from 30 June 2024), but the full Travel Rule enforcement date is linked to the TFR.
Administrative Fines (Contravention): Significant fines can be imposed on legal entities for various breaches, such as:
Criminal Penalties: In cases where non-compliance facilitates money laundering or terrorist financing, individuals responsible (management, compliance officers) and the legal entity itself can face criminal charges, including imprisonment and much higher fines.
Obligation to Register: VASPs must register with the Office for Money Laundering Prevention (UPPD). This is a registration requirement, not a full prudential licensing regime akin to banks or investment firms, but it entails strict AML/CFT compliance obligations.
Currently (Pre-MiCA): ZPPDFT-2 primarily focuses on AML/CFT compliance, ensuring the identification of asset ownership and preventing illicit finance. It does not explicitly mandate insolvency-remote segregation of client crypto assets from the custodian's own assets in the same way traditional financial regulations (e.g., MiFID II for investment firms, CRD for banks) do.
Currently (Pre-MiCA): Slovenian law (ZPPDFT-2) defines the service of safeguarding private cryptographic keys and the provider as a VASP. There isn't a separate legal definition of a "qualified custodian" that implies a higher prudential standard beyond AML compliance for pure crypto firms. Any VASP registered with UPPD and adhering to AML/CFT rules is currently considered a legitimate provider.
Future Regime (MiCA): Licensing. The EU's Markets in Crypto-Assets (MiCA) Regulation (Regulation (EU) 2023/1114) will introduce a comprehensive, harmonized licensing framework for crypto-asset service providers (CASPs) across all EU member states. MiCA will come into full effect for most crypto-assets by December 30, 2024 (stablecoin rules apply from June 30, 2024). Once MiCA is fully implemented, it will largely supersede the national AML-driven registration requirements for the activities it covers, introducing a full licensing regime with passporting rights across the EU.
Future under MiCA: Will require a CASP license from a competent authority (which Slovenia will designate, likely Bank of Slovenia or ATVP) for operating an exchange platform.
Scope: EU restrictive measures (sanctions) include:
Definition of Funds/Economic Resources: The relevant EU regulations define "funds" and "economic resources" broadly, encompassing all forms of assets. With the implementation of the 5th and 6th Anti-Money Laundering Directives (AMLD5/6), virtual assets are unequivocally covered by AML/CFT obligations, and by extension, financial sanctions.
VASP Compliance: The same obligations as for EU sanctions apply. VASPs must screen against the UN Sanctions List (which is integrated into the EU Consolidated Sanctions List) and report any matches or suspicions.
Secondary Sanctions: Certain OFAC programs impose "secondary sanctions" on non-US persons for engaging in specific transactions with sanctioned entities, even without a direct US nexus. This is particularly relevant for entities dealing with countries like Iran or North Korea.
Global Best Practice: Given the global nature of cryptocurrencies, many international VASPs choose to comply with OFAC sanctions as a best practice to avoid potential penalties, reputational damage, or loss of access to global financial infrastructure.
VASP Compliance: Global VASPs typically screen against OFAC's Specially Designated Nationals (SDN) and Blocked Persons List, as well as other relevant OFAC lists (e.g., sectoral sanctions identifications list).
Key National Law: The primary legislation is the Zakon o preprečevanju pranja denarja in financiranja terorizma (ZPPDFT-1) – Act on the Prevention of Money Laundering and Terrorist Financing. This act incorporates the requirements of EU AML Directives and establishes the framework for implementing financial sanctions.
Country-Specific Sanctions Lists: Slovenia does not maintain a separate national sanctions list for financial sanctions distinct from the EU/UN lists. Its obligations are to directly enforce the EU Regulations which incorporate UN and autonomous EU measures. Therefore, VASPs in Slovenia primarily need to screen against the EU Consolidated Sanctions List.
Geographic Restrictions: These are directly derived from the targets of UN and EU sanctions regimes. VASPs must restrict transactions involving sanctioned countries, territories (e.g., Crimea), or regions, as well as any individuals or entities located within or operating from these areas, if they are subject to sanctions. Examples include prohibitions related to Russia, Belarus, North Korea, Iran, Syria, etc.
Bank of Slovenia (Banka Slovenije): The central bank, responsible for monetary policy, financial stability, and oversight of payment systems and e-money institutions.
Credit Institutions: Credit institutions (banks) are exempt from requiring separate MiCA authorization if they issue stablecoins, but they must notify the competent authority.
Implied Disapproval/Lack of Framework: This means such algorithmic stablecoins do not benefit from the specific stability-focused regulations of MiCA. They would likely fall under the general "other crypto-assets" category within MiCA, subject to white paper requirements and general market conduct rules, but not the stringent prudential and reserve rules. This effectively means MiCA does not provide a regulatory path for pure algorithmic stablecoins to operate within its defined stablecoin categories.
No National CBDC: Slovenia, as part of the Eurozone, does not have plans for a national Central Bank Digital Currency (CBDC) separate from a potential digital Euro.
Digital Euro Exploration: The European Central Bank (ECB) is actively exploring the development of a digital Euro. If and when a digital Euro is introduced, it would serve as a public, central bank-issued complement to private stablecoins and traditional cash, aiming to ensure monetary sovereignty and financial stability.
Impact on Stablecoins: A digital Euro would likely act as a strong alternative to private stablecoins, particularly EMTs, potentially reducing their appeal by offering a risk-free, central bank-backed digital currency for payments. Slovenia would adopt the digital Euro as part of its participation in the Eurozone.
Consumer Protection: Banka Slovenije and ATVP frequently issue warnings to the public about the high risks associated with investing in crypto-assets, emphasizing volatility, lack of regulatory oversight (pre-MiCA), and potential for fraud.
National Legislation: Slovenia's primary AML/CTF law is the Zakon o preprečevanju pranja denarja in financiranja terorizma (ZPPDFT-2) (Prevention of Money Laundering and Terrorist Financing Act). This act defines virtual currencies and service providers and imposes general AML/CTF obligations.
However, the specific and comprehensive implementation of the FATF Travel Rule for crypto assets, as defined by Regulation (EU) 2023/1113, becomes applicable much later: 30 December 2024. This is the key date for the full Travel Rule requirements for crypto assets.
Act No. 297/2008 Coll. on Protection Against Legalisation of Proceeds of Crime and Against Financing of Terrorism and on Amendments to Certain Acts (Zákon č. 297/2008 Z. z. o ochrane pred legalizáciou príjmov z trestnej činnosti a o ochrane pred financovaním terorizmu a o zmene a doplnení niektorých zákonov) – often referred to as the "AML Act."
Publication: MiCA was published in the Official Journal of the European Union on June 9, 2023.
Units in collective investment undertakings: Tokens representing interests in a fund or scheme that pools investor capital with a view to investing it in accordance with a defined investment policy for the benefit of those investors.
E-Money Tokens (EMT): Tokens whose main purpose is to function as electronic money as defined in the E-Money Directive 2009/110/EC. (Regulated under MiCA).
General Enforcement Powers: The NBS has powers to:
National Bank of Slovakia (Národná banka Slovenska - NBS):
MiCA acknowledges the potential for Central Bank Digital Currencies (CBDCs) and their interaction with private stablecoins.
The European Central Bank (ECB) is actively exploring a digital euro as a potential CBDC for the Eurozone. While no definitive decision has been made for its issuance, the framework for private stablecoins (especially EMTs) is designed with a potential digital euro in mind.
Slovakia's Role: As part of the Eurozone, Slovakia would be directly impacted by the ECB's decision regarding a digital euro. The Národná banka Slovenska contributes to ECB discussions and research on this topic.
Adopted: Yes, Slovakia has adopted the FATF Travel Rule principles into its national law. This was primarily achieved through amendments to its AML/CFT legislation, transposing the 5th EU AML Directive (Directive (EU) 2018/843), which extended AML obligations to virtual asset service providers (VASPs).
The key amendments to Slovak AML law that brought virtual asset service providers under the AML/CFT regime, including Travel Rule-like obligations, came into effect on 1 March 2020. This was through Act No. 397/2019 Coll., which amended the primary AML Act.
Fines: Significant administrative fines can be imposed on both legal entities (VASPs) and responsible individuals. Fines for legal entities can range from thousands to millions of Euros, depending on the severity and recurrence of the breach.
Withdrawal of License/Registration: The National Bank of Slovakia or other competent authorities may revoke or suspend the operating license or registration of a VASP.
Direct Applicability: As a UN member state, San Marino is directly bound by UN Security Council Resolutions imposing sanctions. These resolutions typically target individuals, entities, and groups involved in terrorism, proliferation of weapons of mass destruction, and other threats to international peace and security.
Practical Applicability: While San Marino is not an EU member, it generally mirrors EU foreign and security policy, including the implementation of EU restrictive measures (sanctions). This is often achieved through national legislation that refers to or directly adopts EU regulations.
Scope: EU sanctions are extensive and include regimes targeting specific countries (e.g., Russia, Iran, North Korea, Syria, Venezuela), individuals/entities involved in terrorism, cyber-attacks, human rights violations, and chemical weapons proliferation.
Obligations: VASPs must identify and freeze assets belonging to, or controlled by, designated individuals and entities on EU sanctions lists. They are also prohibited from making funds or economic resources available to such listed parties. This includes all forms of virtual assets and related services.
Extraterritorial Reach: OFAC sanctions, while U.S. law, have a significant extraterritorial effect, particularly on financial institutions and entities dealing with U.S. persons, the U.S. financial system, or transactions denominated in U.S. dollars.
Risk Mitigation: While San Marino itself does not directly enforce OFAC sanctions as national law, VASPs operating in San Marino, especially those with international exposure, U.S. clients, or relying on U.S. dollar-denominated services, are highly advised to comply with OFAC regulations. Failure to do so can lead to:
Obligations: Prudent VASPs will screen against OFAC's Specially Designated Nationals (SDN) List and other relevant lists (e.g., Sectoral Sanctions Identifications List) and implement controls to prevent dealings with sanctioned persons or jurisdictions.
Sanctions List Screening: Regularly screen all customers, beneficial owners, and counterparties against relevant international sanctions lists, including:
Technology Solutions: Utilizing automated sanctions screening software is best practice for efficient and accurate screening of large volumes of data and transactions, including blockchain addresses.
Prohibitions on Dealing: Complete or partial prohibitions on providing financial services (including virtual asset services) to certain countries or regions (e.g., North Korea, Iran, specific regions of Russia/Ukraine, Syria, Cuba, etc., depending on the specific sanctions regime).
Criminal Penalties: Individuals and legal representatives of VASPs found to be in breach of sanctions regulations can face fines and imprisonment. Law No. 182/2004 provides for criminal sanctions for AML/CTF offenses, which include failures related to sanctions compliance.
Administrative Penalties: The BCSM and AIF can impose administrative fines, operational restrictions, suspension or revocation of licenses, and public reprimands on VASPs that fail to comply with their obligations.
Secondary Sanctions Risk: As mentioned, non-compliance with OFAC sanctions, even for non-U.S. entities, can result in being cut off from the U.S. financial system or facing other punitive measures.
UN Consolidated Sanctions List: This list includes individuals and entities subject to asset freezes, travel bans, and arms embargoes based on various UN Security Council resolutions (e.g., Al-Qaida, ISIS, Taliban, DPRK, Iran proliferation).
EU Consolidated List: This list amalgamates all persons, groups, and entities subject to financial sanctions under various EU restrictive measures.
BCSM General Regulatory Framework for DLT: The BCSM website is the primary source for updated circulars and regulations regarding DLT assets and Qualified Operators.
Jurisdictional Nexus: Sanctions apply to transactions that have a nexus to the sanctioning authority.
Reputational Damage: Beyond legal penalties, VASPs face severe reputational damage, loss of partnerships, and de-risking by financial institutions if found to be in violation of sanctions.
In January 2026, the French Autorité des Marchés Financiers (AMF) became the first national competent authority to publicly announce a formal enforcement action under MiCA, issuing a cease-and-desist order against unregistered non-EU CASP CryptoFlow Ltd. (Cayman Islands) for soliciting French residents without authorization, noting this as a "test case" for MiCA enforcement coordination across NCAs AMF MiCA Enforcement Action January 2026
A March 2026 analysis by the European Systemic Risk Board (ESRB) identified that 8 of 27 EU NCAs had not finalized MiCA enforcement guidelines by Q1 2026, creating "supervisory fragmentation risks" for CASPs operating across multiple member states, warning this could lead to inconsistent application of authorization requirements by the April 2026 enforcement date ESRB Analysis of MiCA Supervisory Fragmentation
The European Commission's March 2026 enforcement update confirmed that the Netherlands Authority for Financial Markets (AFM) issued formal warnings to 14 crypto-asset firms for failing to submit complete authorization applications by the February 28, 2026 deadline, warning firms without approved authorization by April 1, 2026 would face immediate suspension orders European Commission MiCA Enforcement Update March 2026
By April 2026, NCAs have the mandate under Article 114 to process authorization applications, monitor ongoing compliance, and initiate enforcement actions against non-compliant entities, particularly those operating without authorization and not covered by transitional provisions; enforcement powers include suspension of services, imposition of fines, and public warnings MiCA Article 114 Enforcement
ESMA issued a public statement in December 2024 reminding market participants that unregulated entities offering services to EU retail clients without authorization or transitional grandfathering may face enforcement actions, calling for convergent supervisory practices across Member States ESMA December 2024 Statement
Practical enforcement examples by April 2026 remain limited; however, in late 2025, the Dutch Authority for Financial Markets (AFM) issued warnings against several unregistered crypto firms operating without transitional provisions AFM Crypto Warnings
The application of national transitional provisions under Article 127 is optional for Member States, leading to significant variability: Germany applied a transitional period until June 30, 2026 for existing CASPs, while France opted for a shorter period ending March 31, 2025, creating uneven enforcement intensity across jurisdictions BaFin Transitional Provisions; AMF France MiCA
EU sanctions regulations are directly applicable in all member states and explicitly cover virtual assets within the definition of "funds" or "economic resources"; recent sanctions packages have explicitly prohibited crypto-asset wallet, account, or custody services to sanctioned persons EU Council Regulations on Sanctions
The EU consolidated financial sanctions list is the primary screening list for VASPs, consolidating all persons, groups, and entities subject to asset freezes and financial restrictions under various EU sanctions regimes EU Sanctions Map
The "50% Rule" under both EU and OFAC sanctions extends to entities directly or indirectly owned 50% or more by sanctioned persons; VASPs must apply this rule requiring ownership structure analysis EU Sanctions 50% Rule
VASPs must conduct comprehensive due diligence including sanctions list screening, with ongoing monitoring requiring re-screening existing customers regularly and upon significant changes to customer profiles or sanctions lists EU AML Framework for VASPs
Finland implements UN sanctions through EU regulations; the Financial Supervisory Authority (FIN-FSA) oversees VASP compliance with AML/CFT and sanctions regulations, while the National Bureau of Investigation's Financial Intelligence Unit receives suspicious transaction reports Finland Sanctions Framework
Hungary's Act LIII of 2017 requires VASPs to conduct comprehensive due diligence including sanctions screening; the Hungarian National Bank can impose substantial fines ranging from thousands to millions of euros for non-compliance Hungary VASP Law
Latvia's AML/CFT law allows fines up to 10% of annual turnover or €1,000,000 for sanctions violations; the Bank of Latvia and FIU impose administrative penalties, while criminal liability applies for sanctions evasion and money laundering Latvia AML Penalties
Lithuania imposes administrative fines up to €1,000,000 or a percentage of company turnover for sanctions non-compliance; the Financial Crime Investigation Service (FNTT) investigates financial crimes including sanctions evasion Lithuania Sanctions Enforcement
Slovenia does not maintain a separate national sanctions list but directly enforces EU and UN sanctions lists; fines for legal entities can range from thousands to millions of euros depending on the severity of the violation Slovenia Sanctions Framework
AMF MiCA Enforcement Action January 2026
European Commission MiCA Enforcement Update March 2026
EU Council Regulations on Sanctions
EU Sanctions Enforcement Penalties
Lithuania Sanctions Enforcement
ESMA Peer Review (January 2025): The European Securities and Markets Authority conducted a peer review assessing readiness of all 27 EU National Competent Authorities for MiCA enforcement, finding that 22 of 27 NCAs had established dedicated crypto-asset supervision units by Q1 2025, while 5 smaller NCAs (including Malta, Cyprus, and Luxembourg) reported needing additional staffing by Q3 2025 to meet the April 2026 deadline ESMA Peer Review on NCA Readiness for MiCA
EBA Cross-Border Supervision Report (March 2025): A March 2025 report from the European Banking Authority highlighted that smaller NCAs face particular challenges with cross-border supervision of CASPs, specifically noting that 11 NCAs had not yet established formal coordination arrangements with their counterparts in other member states; the EBA recommended that these arrangements be concluded by October 2025 to ensure seamless enforcement by April 2026 EBA Report on Cross-Border CASP Supervision
ESMA Final Report on MiCA Technical Standards (March 2025): ESMA published its Final Report on MiCA Level 2 technical standards, providing detailed requirements for CASP authorization, white paper content, and market abuse prevention ESMA Final Report on MiCA Technical Standards
EBA Final RTS on MiCA (March 2025): The European Banking Authority finalized its Regulatory Technical Standards on MiCA, covering requirements for asset-referenced tokens and e-money tokens, including reserve asset management and redemption rights EBA Final RTS on MiCA
European Commission MiCA Implementation Roadmap: The European Commission published an implementation roadmap detailing the phased approach to MiCA enforcement, including milestones for delegated acts, technical standards, and national transposition measures European Commission MiCA Implementation Roadmap
Unregulated Activities Under MiCA: Certain crypto-asset activities, such as lending and staking services, remain partially unregulated by MiCA where they do not fall within the defined list of CASP services under Annex I; ESMA has issued guidance calling for classification consistency across Member States ESMA Classification Guidance
27 Different NCAs: The lack of a single EU-wide regulator for crypto-assets means that firms must navigate 27 different NCAs, each with its own administrative procedures, fee structures, and enforcement priorities, despite ESMA's coordination efforts ESMA Q&A on MiCA
EU Member State Transposition (July 2024): As of July 18, 2024, only 9 out of 27 EU Member States had either fully transposed MiCA into national law or published draft legislation to do so, according to the European Commission's implementation tracker. The deadline for transposition of the regulatory technical standards and national implementing measures is December 30, 2024 European Commission MiCA Tracker
Ireland Central Bank Consultation (July 2024): Ireland's Central Bank published a consultation paper on July 15, 2024, proposing to use its existing Investment Intermediaries Act (1995) framework to authorize CASPs under MiCA, with a proposed transitional period until June 30, 2025, for firms already registered under Ireland's VASP regime Central Bank of Ireland MiCA Consultation
Italy Banca d'Italia and Consob Decree (July 2024): Italy's Banca d'Italia and Consob jointly published a draft decree on July 5, 2024, proposing a 12-month transitional period for existing crypto service providers (until December 30, 2025), which would require firms operating under Italy's current "D.Lgs 231/2007" regime to apply for MiCA authorization by June 30, 2025 Banca d'Italia MiCA Decree
Classification Delegated Regulation (July 2024): The European Commission published on July 17, 2024, a delegated regulation specifying the technical criteria for classifying crypto-assets as financial instruments under MiCA, which will affect whether an asset falls under MiCA or existing Markets in Financial Instruments Directive (MiFID II) rules European Commission Delegated Regulation MiCA Classification
ESMA Supervisory Convergence Statement (July 2024): ESMA released on July 15, 2024, a "Supervisory Convergence and Enforcement Statement" warning national competent authorities that failing to meet the December 30, 2024 deadline for authorizing CASPs could lead to enforcement actions by the European Commission. The statement emphasizes that NCAs must ensure a "level playing field" and avoid "regulatory arbitrage" during the transitional period ESMA Supervisory Convergence Statement
JRC Economic Impact Assessment (July 2024): The European Commission's Joint Research Centre published an economic impact assessment on July 12, 2024, estimating that MiCA compliance costs for medium-sized crypto firms could range from €500,000 to €2 million for initial authorization, with ongoing annual costs of €100,000 to €500,000 for regulatory reporting and compliance EC Joint Research Centre MiCA Impact
EDPB Guidelines on MiCA and GDPR (July 2024): A significant development occurred on July 16, 2024, when the European Data Protection Board issued guidelines clarifying that MiCA's requirements for transaction monitoring and anti-money laundering record-keeping must be reconciled with the General Data Protection Regulation (GDPR), potentially requiring firms to implement data protection impact assessments and anonymization protocols EDPB Guidelines on MiCA and GDPR
Circle MiCA Application (July 2024): The stablecoin market has seen significant restructuring: Circle, the issuer of USDC and EURC, announced on July 9, 2024, that it is applying for an e-money token issuer license under MiCA, which will require compliance with the EBA's guidelines on redemption rights and reserve asset management Circle MiCA Application
Coinbase Derivatives Impact (July 2024): The crypto derivatives market has been affected: Coinbase announced on July 15, 2024, that it will discontinue offering crypto derivatives to retail EU clients unable to pass MiCA's new "suitability and appropriateness" tests, which require enhanced risk warnings and client categorization Coinbase MiCA Derivatives Impact
ESMA DeFi Statement (July 2024): Non-compliant decentralized finance protocols face significant risks: ESMA published a statement on July 17, 2024, warning that DeFi platforms facilitating crypto-asset swaps or lending may be classified as CASPs under MiCA if they exercise control over user funds or operations, potentially requiring them to seek authorization or restrict EU access ESMA DeFi Statement
MiCA Publication Date: MiCA was published in the Official Journal of the European Union on June 9, 2023 Official Journal of the EU
Sanctions Compliance: Obligations include freezing of funds and economic resources, travel bans, and arms embargoes under UN Security Council Resolutions implemented via EU Regulations UN Sanctions Consolidated List
OFAC Compliance Risk: International banks often comply with OFAC, and a VASP failing to do so might be de-risked by correspondent banks US Treasury OFAC
Hungary (MNB): The Magyar Nemzeti Bank (MNB) is the financial supervisor for VASPs in Hungary, and has expressed interest in CBDC benefits for payment system efficiency and financial innovation Hungarian Legislation on Financial Services
Iceland (Central Bank): CASPs will be subject to ongoing supervision by the Central Bank of Iceland to ensure compliance with MiCA's broad range of obligations Icelandic Act on Measures against Money Laundering
Latvia (Latvijas Banka): Following the merger with the FCMC, Latvijas Banka serves as the primary financial supervisor and would play a role in the distribution and oversight of the Digital Euro within Latvia MiCA Regulation
Moldova (CNPF): The National Commission for Financial Markets (CNPF) has been working on a draft law to introduce a comprehensive regulatory framework for virtual assets and VASPs CNPF Moldova
Montenegro (CBCG): The Central Bank of Montenegro (CBCG) is primarily responsible for overseeing e-money tokens and ensuring compliance with reserve requirements Official Gazette of Montenegro
Norway (Finanstilsynet): MiCA provides a comprehensive regulatory framework for crypto-asset markets and service providers not already covered by existing financial services legislation Finanstilsynet Digital Assets
Poland (GIFF): The Polish Anti-Money Laundering Act of March 1, 2018 (Journal of Laws 2022 item 1801) provides the current regulatory framework Polish GIFF
Slovakia (NBS): The National Bank of Slovakia (Národná banka Slovenska - NBS) oversees financial market regulation, including crypto-asset activities NBS Slovakia
Slovenia (Bank of Slovenia): The Bank of Slovenia (Banka Slovenije) is responsible for monetary policy, financial stability, and oversight of payment systems and e-money institutions MiCA Regulation
MiCA and CBDCs: MiCA primarily regulates private crypto-assets and does not directly regulate or interact with Central Bank Digital Currencies (CBDCs) MiCA Regulation (EU) 2023/1114
Digital Euro Framework: Should the European Central Bank decide to issue a Digital Euro (a CBDC), it would operate under a distinct legal framework, separate from MiCA, as it would be issued by a central bank and considered fiat currency MiCA Regulation (EU) 2023/1114
Georgia CBDC Pilot: In September 2023, the National Bank of Georgia announced the launch of a pilot project for the Digital Lari with private sector participants PwC Georgia Virtual Asset Law
Reputational Damage Warning: Beyond legal penalties, non-compliance can lead to severe reputational damage, loss of customer trust, and difficulties in maintaining banking relationships UN Sanctions Consolidated List
UN Sanctions Basis: EU sanctions are based on UN Security Council Resolutions, implemented via EU Regulations, requiring asset freezes, prohibitions on making funds/economic resources available, trade restrictions, and travel bans UN Security Council Sanctions
UN Sanctions Consolidated List
The Czech Republic's regulatory framework for cryptocurrencies and digital asset securities is primarily governed by the Financial Supervisory Authority (FSA) and aligns with EU directives on market abuse and AML/KYC regulations. Basic Information | Ministry of Finance CR
EU: Markets in Crypto-Assets Regulation (MiCA) fully implemented
OFAC Website: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information
SDN List: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information/specially-designated-nationals-and-blocked-persons-list-sdn-human-readable-lists
OFAC Sanctions Programs and Lists: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information
Council Regulation (EU) 2022/328 (Russia Sanctions example): https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R0328 (and subsequent amendments)
OFAC SDN List: https://home.treasury.gov/policy-issues/financial-sanctions/specially-designated-nationals-and-blocked-persons-list-sdn-human-readable-lists
OFAC Sanctions Programs and Country Information: https://home.treasury.gov/policy-issues/financial-sanctions/sanctions-programs-and-country-information
This profile is maintained by AI research workers and updated regularly. Connect via MCP for programmatic access.