Financial Integrity Monitor

Croatia HR

Domains (D1–D6)
3
Sources
10
Role actions
8
Horizon <90d
1
Jurisdiction profile
CompliantTier BRisk: DecreasingMixed

Croatia's AML/CFT regime rests on the Anti-Money Laundering and Terrorist Financing Law (AMLTFL, 2017, amended 2023), supervised by the Ministry of Finance's Anti-Money Laundering Office (AMLO/FIU), HNB (banking) and HANFA/CFSSA (capital markets).

MoreCroatia was FATF grey-listed June 2023-June 2025; MONEYVAL rates the regime as improving but with residual gaps in VASP supervision, ML prosecutions, and confiscation capacity.

Key deficiencies
  • Beneficial ownership register nominally public but gated by e-identification restricted to Croatian citizens and residents of a small number of EU states, blocking genuine public/investigative access
  • VASP framework rated partially compliant (R.15): virtual-asset transfer services fall outside the formal VASP definition despite CDD applying in substance
  • Persistent shortage of financial investigators and State Attorney's Office (SAO) capacity limiting complex ML prosecutions and asset confiscation
  • Demonstrated gap in monitoring/enforcement of sanctioned assets physically present in Croatian territory (yacht escape from Adriatic marina despite active US/UK/EU sanctions)
Recent developments (18m)
  • FATF/MONEYVAL removed Croatia from the Jurisdictions Under Increased Monitoring list on 13 June 2025 after completing its action plan
  • MONEYVAL 2nd Enhanced Follow-Up Report (October 2024) re-rated Croatia on 8 Recommendations
  • MONEYVAL further follow-up report (23 March 2026) recorded continued technical-compliance progress
  • Completion of Croatia's 2023 National Risk Assessment covering legal-persons misuse and real-estate cash risk
Weekly brief

Lead signal

Lead Signal

Read full brief

Lead Signal

The coordinated FinCEN-OFAC action against Cartel de Jalisco Nueva Generacion this cycle is the clearest sanctions-architecture signal of the period. OFAC designated two Mexican nationals and nine entities tied to CJNG fuel-smuggling and tax-evasion schemes, while FinCEN issued a supplemental alert flagging over seven billion dollars in reported suspicious activity connected to the network since 2025. Read alongside SDNY charges against a sitting Mexican state governor, the development signals that cartel finance in Mexico now carries an explicit state-capture dimension rather than representing purely private criminal infiltration of the financial system — a structural characterisation that should reframe how obliged entities calibrate correspondent-banking and trade-finance exposure to Mexican counterparties, not merely how they screen named designees.

This is architecture, not incident: the designation itself is a single enforcement action, but the pattern it sits within — sustained FinCEN-OFAC coordination, a parallel prosecutorial track reaching into state government, and a persistent multi-year suspicious-activity volume — indicates a durable illicit-finance channel rather than an episodic one. Firms with correspondent or trade-finance exposure to Mexican counterparties, particularly in fuel and bulk-commodity trades, should treat this as reason to revisit customer-due-diligence depth on that corridor generally, not only to screen the newly designated names.

Other Developments

Continued Houthi-network designations. OFAC added two individuals to the SDN list on 16 January 2026 and sanctioned three vessels and their owners for supplying refined petroleum to Houthi-controlled Yemeni ports, building on the 2025 FTO re-designation. The refined-petroleum channel is a sustained revenue stream rather than a one-off shipment, and continuing designation cadence against it indicates the architecture remains open despite prior sanctions rounds.

Cambodia's own regulator flags grey-list risk. National Bank of Cambodia Governor Chea Serey has publicly warned of renewed risk of a third FATF grey-list placement, tied to scam-hub and casino/DNFBP-linked laundering. Casinos and DNFBPs remain the identified weak point per FATF's own 2023 follow-up reporting. A jurisdiction's own supervisor volunteering this risk assessment is a stronger enforcement-urgency signal than an externally-sourced risk assessment would be, and it sits alongside a second national risk assessment and intensified licence revocations.

Continuing SDN designations under E.O. 13224. OFAC added Ahmad Idriss and Adil Mutahhar Abdallah Al Muayyad to the SDN list on 16 January 2026, extending the post-FTO-redesignation designation cadence tied to the broader Yemen-conflict financing architecture.

Cross-Monitor Connections

The Mexico thread connects directly to WDM's state-capture tracking: SDNY charges against a sitting state governor, read alongside the CJNG fuel-smuggling designation, describe a financial-crime architecture in which state office and cartel finance are not clearly separable functions. The Houthi refined-petroleum channel is simultaneously a sanctions-evasion finding and a conflict-finance finding: the same vessel and facilitator designations fund missile, uncrewed-aerial-vehicle, and naval-mine operations, which is the natural hand-off point to ERM's commodity-flow tracking and SCEM's conflict-finance work. Cambodia's casino/DNFBP laundering exposure is an enabler-jurisdiction finding with an obvious FCW-adjacent dimension where scam-hub operations blend financial fraud with the broader information-operations space FCW tracks, though that connection is not evidenced in this cycle's sourcing and is noted here only as a routing signal for further monitoring.

Outlook

The near-term question for the Mexico thread is whether the state-capture dimension broadens beyond the single SDNY prosecution already in train; any additional designations naming Mexican public officials would confirm rather than merely suggest a systemic pattern. For Cambodia, the second national risk assessment and intensified licence-revocation activity are the developments to watch for concrete evidence that the casino/DNFBP weak point identified by FATF in 2023 is closing rather than persisting into a third grey-list placement. On the conflict-finance side, further OFAC vessel or facilitator designations against the Houthi refined-petroleum channel would indicate the revenue stream remains open despite the current designation round; their absence over the coming cycle would be a modestly positive signal worth surfacing explicitly under the enablement-as-signal principle. Each of these three threads — Mexico, Cambodia, and the Houthi network — represents a distinct pillar of exposure (state-capture-adjacent AML, enabler-jurisdiction CDD, and CTF/CPF conflict finance), and the three-pillar balance argues against reading any single thread as more urgent than the others this cycle.

weekly_brief_draft · JID HR
Domain intelligence (D1–D6)

D1 Sanctions

Sanctions

Continue reading

This cycle's sanctions-architecture signal centres on two parallel threads: a coordinated FinCEN-OFAC action against Cartel de Jalisco Nueva Generacion fuel-smuggling and tax-evasion networks, and continuing OFAC designations against the Houthi war-economy's refined-petroleum revenue channel. OFAC designated two Mexican nationals and nine entities tied to CJNG, and FinCEN issued a supplemental alert identifying over seven billion dollars in suspicious activity reported since 2025 connected to the network. The scale of that reported-activity figure is the more analytically significant data point: a single designation action names discrete individuals and entities, but a multi-year, multi-billion-dollar suspicious-activity volume describes an entrenched laundering architecture that outlives any individual designee. Read alongside SDNY charges against a sitting Mexican state governor, the finding indicates that cartel finance in this corridor now carries an explicit state-capture dimension, meaning the evasion architecture likely extends into functions of formal government rather than operating solely through private criminal infrastructure.

On the Houthi thread, OFAC's 16 January 2026 action added two individuals to the SDN list under Executive Order 13224 and sanctioned three vessels and their owners for supplying refined petroleum to Houthi-controlled Yemeni ports. This is architecture rather than incident: the designation builds directly on the 2025 FTO re-designation and a running cadence of vessel, owner, and facilitator designations, indicating that the underlying revenue channel — petroleum discharge at controlled ports — has not been closed by prior sanctions rounds and continues to require fresh designation action to disrupt. The persistence of the channel despite repeated enforcement is itself the sanctions-evasion story: designation of individual vessels and owners is a necessary but evidently not sufficient control against a revenue stream built on physical commodity logistics rather than formal financial-system rails.

Both threads share a common evasion-architecture lesson for compliance functions: screening against the SDN list catches named parties, but neither the Mexican fuel-smuggling network nor the Houthi petroleum channel is disrupted by list-screening alone, because the underlying value transfer occurs through physical commodity movement and correspondent-banking relationships that persist independently of any single designated entity. The BSA-grounded reporting obligation underpinning FinCEN's supplemental alert (31 U.S.C. §5318) is directed specifically at trade-finance and correspondent-banking customer typologies, the two channels through which fuel-smuggling proceeds are most likely to intersect the formal financial system; this identifies the specific customer-typology surface area where institutions should expect exposure, a materially more actionable signal than the designation list alone.

Neither thread in this cycle's signal originates from an EU or UK autonomous listing; both are US Treasury actions (OFAC/FinCEN), consistent with a sanctions-regime-convergence pattern rather than divergence between the major sanctioning authorities. For firms operating dual US and EU/UK sanctions programs, this reduces near-term reconciliation risk between regimes on these two specific threads, though it does not reduce the underlying due-diligence burden the designations themselves create. The three-pillar balance is worth stating explicitly here: both threads generate primarily AML/sanctions enforcement volume, but the Houthi channel is simultaneously a CTF matter given its direct funding of Houthi weapons and naval-mine capability, a dimension addressed further under the conflict-finance domain read this cycle.

Outlook

The Mexico thread's near-term trajectory turns on whether additional designations extend the state-capture dimension beyond the single SDNY prosecution currently in train; a broadening pattern would confirm rather than merely suggest systemic cartel penetration of state office, with material implications for any institution maintaining correspondent relationships with Mexican regional financial institutions. On the Houthi thread, the test is whether the refined-petroleum channel closes or simply relocates to new vessels and owners following this designation round — prior cycles' designation cadence suggests the latter is the more probable near-term outcome. Absence of further designation activity against either corridor over the coming cycle would itself be a notable data point, consistent with the enablement-as-signal principle, and should prompt inquiry into whether enforcement attention has genuinely closed the channel or simply moved on.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Enabler Jurisdictions

Continue reading

Cambodia is this cycle's enabler-jurisdiction signal, and the notable feature is its source: National Bank of Cambodia Governor Chea Serey has publicly warned of renewed risk of a third FATF grey-list placement, tied to scam-hub and casino- and DNFBP-linked laundering. A jurisdiction's own central-bank governor volunteering this risk assessment is a stronger enforcement-urgency signal than an externally-sourced risk assessment, and it indicates the domestic authorities themselves now assess the casino/DNFBP weak point identified in FATF's 2023 follow-up report as unresolved. The Governor's warning is paired with a second national risk assessment and intensified licence revocations, suggesting the domestic supervisory response is escalating ahead of any formal FATF re-listing decision rather than only in reaction to one.

The professional-facilitator dimension here runs through the casino and DNFBP sector specifically — the same sector FATF flagged as the structural weak point in 2023 — rather than through banks or other regulated financial institutions, which is consistent with Cambodia's broader risk profile as an enabler jurisdiction for scam-hub-adjacent laundering rather than for traditional correspondent-banking abuse.

Outlook

The decisive near-term marker is whether Cambodia's second national risk assessment and licence-revocation activity produce visible structural change in the casino/DNFBP sector before any FATF plenary re-listing decision; a purely administrative national risk assessment without accompanying revocation follow-through would leave the underlying weak point unresolved. This sub-brief is flagged as limited-signal this cycle: the finding rests on a single, high-confidence Tier-1 development rather than a broader corroborated pattern, and further primary-source reporting on the national risk assessment's substantive findings would materially strengthen next cycle's read.

D4 Conflict Finance

Conflict Finance

Continue reading

The Houthi war-economy's refined-petroleum revenue channel is the conflict-finance signal of this cycle. OFAC sanctioned three vessels and their owners on 16 January 2026 for supplying refined petroleum to Houthi-controlled Yemeni ports, building directly on the 2025 FTO re-designation of Ansarallah and a preceding round of Yemen-bank designations. The petroleum discharge revenue is described in the underlying Treasury materials as funding, in particular, the Houthi movement's missile, uncrewed-aerial-vehicle, and naval-mine capability — placing this squarely in conflict-finance rather than general sanctions-evasion territory, since the analytical question is not merely who moved value but what that value purchased operationally.

Two independent Tier-1 US Treasury press releases corroborate the channel directly, a materially stronger evidentiary basis than the single-source findings that dominate several other threads this cycle. The customer-typology tag attached to this finding — correspondent banking — indicates that, notwithstanding the physical-commodity character of the underlying trade, value ultimately intersects the formal financial system through correspondent relationships, the control point most relevant to institutions assessing their own exposure to this conflict-finance architecture.

Read architecture-over-incident, the significant fact is not this single designation round but its place in a sustained cadence: repeated vessel and facilitator designations against the same revenue channel since the 2025 FTO re-designation indicate that petroleum-discharge revenue has proven durable and adaptive under sanctions pressure. The CTF pillar is the operative frame here rather than AML, deliberately weighted to correct for the structural AML-volume bias the three-pillar-balance principle flags: sanctions-designation volume against this channel is real, but the underlying analytical significance is the conflict-financing outcome the revenue purchases, not the designation count itself.

Outlook

The test for the coming cycle is whether the refined-petroleum channel contracts in volume following this designation round or whether new vessels and owners simply substitute for those now designated. Continued OFAC designation activity against this channel should be read as evidence the channel remains open and adaptive rather than as evidence of diminishing enforcement priority. This sub-brief is flagged limited-signal this cycle pending further Treasury reporting on channel volume.

D5 Crypto / Digital Assets / Financial Innovation

Not covered

Crypto / Digital Assets / Financial Innovation is not yet covered for this jurisdiction in this report.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

Regulatory horizon
Adopted2027-Q3 · ±year

EU AML Package — AMLR/6AMLD/AMLA phased application and transposition

Movement to a directly-applicable single EU AML rulebook (AMLR) plus a new supranational supervisor (AMLA) with a direct-supervision perimeter.
1 dated · 4 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLROHigh

OFAC/FinCEN sustained a coordinated designation cadence against CJNG fuel-smuggling networks and continuing Houthi-network vessel designations this cycle.

The CJNG action and its associated FinCEN supplemental alert identify specific customer typologies (trade finance, correspondent banking) as the exposure surface for SAR-trigger review; the continuing Houthi vessel designations extend an existing correspondent-banking screening obligation rather than introducing a new one.

3 evidence refs
ComplianceHigh

Cambodia's own central bank governor publicly acknowledged renewed FATF grey-list re-listing risk tied to casino/DNFBP-linked laundering.

This is a stronger enforcement-urgency signal than an externally-sourced risk assessment and should inform how obliged-entity relationships with Cambodia-linked casino/DNFBP counterparties are risk-rated pending the outcome of Cambodia's second national risk assessment.

1 evidence refs
LegalHigh

SDNY charges against a sitting Mexican state governor add a state-capture dimension to the CJNG fuel-smuggling designation.

The parallel prosecutorial track against a state official, read alongside the OFAC/FinCEN action, indicates cartel-finance liability exposure in this corridor may extend into relationships with formal state-adjacent counterparties, not solely private criminal actors.

1 evidence refs
BoardHigh

Cartel finance in Mexico now carries an explicit state-capture dimension rather than purely private criminal infiltration.

This is a structural characterisation with reputational and strategic-exposure implications for any institution with material correspondent or trade-finance presence in the affected Mexican corridor, distinct from the routine designation-screening burden.

1 evidence refs
CTOPossible

No material change this cycle.

No material change for this persona this cycle

RiskHigh

Three distinct exposure pillars moved this cycle: Mexico state-capture-adjacent AML risk, Cambodia enabler-jurisdiction risk, and Houthi conflict-finance risk.

Each thread sits in a different pillar (AML, enabler-jurisdiction CDD, CTF), and the three-pillar-balance principle argues against concentrating risk-committee attention on only one; the Houthi channel in particular straddles both the sanctions-evasion and conflict-finance domains.

3 evidence refs
OperationsHigh

New SDN designations this cycle require screening-list updates against CJNG-linked entities and additional Yemen-conflict-linked individuals.

Operational screening workflows should incorporate the newly designated Mexican nationals/entities and the two individuals added to the SDN list on 16 January 2026 under E.O. 13224.

2 evidence refs
AuditPossible

No material change this cycle.

No material change for this persona this cycle

Decision lens
MLRO

OFAC/FinCEN sustained a coordinated designation cadence against CJNG fuel-smuggling networks and continuing Houthi-network vessel designations this cycle.

Compliance

Cambodia's own central bank governor publicly acknowledged renewed FATF grey-list re-listing risk tied to casino/DNFBP-linked laundering.

Legal

SDNY charges against a sitting Mexican state governor add a state-capture dimension to the CJNG fuel-smuggling designation.

Board

Cartel finance in Mexico now carries an explicit state-capture dimension rather than purely private criminal infiltration.

CTO

No material change this cycle.

Risk

Three distinct exposure pillars moved this cycle: Mexico state-capture-adjacent AML risk, Cambodia enabler-jurisdiction risk, and Houthi conflict-finance risk.

Operations

New SDN designations this cycle require screening-list updates against CJNG-linked entities and additional Yemen-conflict-linked individuals.

Audit

No material change this cycle.

Shared evidence: 4 refs
Typology observations
Exposure: {'total_matched_typologies': 0, 'by_typology': {}, 'top_indicators': [], 'exposure_note': None}
Scenario sketches

AMLA supervisory-perimeter transition and cross-border evasion adaptation

As the EU moves from purely national AML supervision toward AMLA direct and indirect supervision of cross-border obliged entities under the AMLA Regulation, alongside the directly-applicable AMLR and per-state 6AMLD transposition, the supervisory and evasion landscape could reshape in ways that shift where facilitators seek regulatory arbitrage. Illustratively, entities currently relying on divergence between national supervisory practices could face a narrower gap to exploit as AMLA's methodology standardises examination approaches, though facilitators may in turn probe the boundary between AMLA's direct-supervision perimeter and residual national-authority scope. This is an illustrative structural sketch, not an observed development.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion ArchitecturestableCroatia's HNB flagged financial-stability risk from a government threat to divest Russian equity stakes in domestic oil refiner INA — a single-source, unconfirmed signal pending primary verification.
T2 · EU AML Package / AMLAstableAMLR binds obliged entities EU-wide from July 2027; 6AMLD BO-register provisions due 10 July 2026; AMLA supervisory build-out proceeds on its own track. No Croatia-specific transposition text sourced this cycle.
T3 · FATF Grey ListescalatingCambodia faces renewed risk of a third FATF grey-list placement driven by scam-hub/casino-linked laundering; NBC has launched a second national risk assessment and intensified licence revocations/asset freezes.
T4 · Beneficial-Ownership Register StatusstableEU-wide BO-register interconnection/further-development provisions under 6AMLD due for transposition by 10 July 2026; no Croatia-specific BO-registry update sourced this cycle.
T5 · Crypto & Digital-Asset IntegritystableCroatia's HANFA continues MiCA implementation (Q3 2026 target) with a partial CASP-registration backlog (8 of 19); FinCEN's proposal to sever Huione Group successor entities from the US financial system is an active global crypto-laundering enforcement thread.
T6 · Sanctions Regime Divergenceno_changeNo material EU/US/UK autonomous-listing drift identified this cycle; continuing coordinated US-Houthi-related designations show convergence rather than divergence.
Registers

Enforcement actions

  • Second Enhanced Follow-Up Report on Croatia found progress addressing MER technical-compliance deficiencies, re-rating the country on multiple FATF Recommendations following the 2021 Mutual Evaluation. 25 Oct 2024
  • The FATF, following joint FATF-MONEYVAL plenary review, formally removed Croatia from the list of Jurisdictions Under Increased Monitoring after determining it had substantially completed its action plan. 13 Jun 2025
  • Further MONEYVAL follow-up report on Croatia recorded continued technical-compliance progress and additional Recommendation re-ratings since the 2024 FUR. 23 Mar 2026
  • MUP investigators used blockchain forensic tooling to trace a seed-phrase theft and subsequent cross-chain laundering of approximately EUR 154,525.71 in Bitcoin, resulting in searches, seizure of digital evidence, and investigative custody of a suspect. 14 Dec 2025

Sanctions changes

  • EU's 19th sanctions package against Russia eliminated the transaction exemption for Rosneft and Gazprom Neft oil/gas imports, imposed a phased LNG import ban, added 117 vessels to the shadow-fleet list (total 557), and for the first time extended measures to crypto infrastructure; directly applicable to Croatia as an EU member state. 23 Oct 2025
  • EU Council designated 41 additional shadow-fleet vessels (bringing the EU total to almost 600) subject to port-access and maritime-services bans, alongside a new EU declaration on shadow-fleet risks to critical undersea infrastructure, applicable across all EU member states including Croatia's Adriatic ports. 18 Dec 2025
  • European Commission adopted Delegated Regulations (EU) 2026/46 and (EU) 2026/83 amending the EU list of third countries with strategic AML/CFT deficiencies (the EU high-risk third-country list), which Croatia, as an EU member, must apply via enhanced due diligence obligations on its obliged entities under national AMLTFL rules. 4 Dec 2025

Regulatory horizon (register)

  • EU AML Regulation (AMLR) becomes directly applicable
  • 6AMLD transposition deadline for Croatia
  • AMLA direct-supervision perimeter expansion
  • Next MONEYVAL follow-up report on Croatia

Active schemes

  • [HIGH] PEP-linked Russia-tied laundering via Croatian real estate/trusts
  • Adriatic port/shadow-fleet exposure and product-specific derogation
  • Seed-phrase theft to cross-chain cash-out pipeline
  • Restricted-access beneficial ownership register exploitation
Sources
  1. FATF / MONEYVAL
  2. FATF
  3. FATF / MONEYVAL
  4. Republic of Croatia Ministry of Finance
  5. Council of the European Union
  6. European Commission
  7. OCCRP
  8. Global Witness
  9. TRM Labs
  10. ICIJ
Coverage gaps
Croatia's beneficial ownership register requires e-identific…
Croatia's beneficial ownership register requires e-identification restricted to Croatian citizens and residents of a handful of other EU states, preventing genuine public/investigative access required under the 5th AML Directive and obstructing cross-border verification of ownership structures.
A sanctioned oligarch-linked luxury yacht docked in a Croati…
A sanctioned oligarch-linked luxury yacht docked in a Croatian Adriatic marina was able to depart Croatian territorial waters and sail to Turkey despite active US, UK and EU sanctions restricting its movement, passing police, customs and harbour-master controls undetected until reported by local media.
MONEYVAL's technical-compliance review found that while VASP…
MONEYVAL's technical-compliance review found that while VASPs are subject to AML/CFT registration obligations, the transfer of virtual assets as a discrete service is not captured within Croatia's formal VASP definition, leaving Recommendation 15 rated only partially compliant.
MONEYVAL follow-up reporting continues to flag insufficient …
MONEYVAL follow-up reporting continues to flag insufficient State Attorney's Office (SAO) and financial-investigator staffing, hampering complex money-laundering prosecutions and the application of provisional measures to secure proceeds of crime.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.