France FR

Lead Signal

France's financial integrity posture shows continuity rather than rupture. The dominant signal is the Autorite des Marches Financiers continuing its quarterly enforcement cadence against unauthorised crypto-asset providers, adding twenty-six names to its public blacklist on 19 October 2026 and bringing the 2026 total to sixty-four. The action is routine in form but structurally significant: it confirms that the post-transitional Markets in Crypto-Assets regime, now the sole authorisation pathway for crypto-asset service activity in France, is being actively policed rather than left to lapse into a paper requirement.

Alongside this, a modest commercial development surfaced in the payment-verification space, where the fintech 3Pay announced on 16 October 2026 an all-share acquisition of MoneyTrack, a company focused on advancing payment verification for healthcare costs. Neither development rises to the threshold of a structural regime change, but together they describe a financial ecosystem in which oversight of digital-asset access points and consolidation of payment-adjacent infrastructure are both proceeding steadily.

Other Developments

Crypto-asset enforcement continues on a predictable cycle. The AMF's blacklist mechanism, which flags websites it has identified as offering crypto-asset services without the required authorisation, operates on a quarterly rhythm. The addition of twenty-six new names in the third-quarter update is consistent with the volume seen across 2026 and reflects sustained monitoring of the unauthorised-access perimeter rather than any escalation in enforcement posture or a new legal basis for action.

Payment-verification infrastructure consolidates further. The 3Pay acquisition of MoneyTrack's assets and teams is a commercial transaction in the fraud-prevention and payment-verification technology space, a sector adjacent to financial integrity concerns because such tooling underpins the controls that obliged entities rely on to detect anomalous payment activity. The deal is structured as an all-share transaction, with the combined entity reported at a modest valuation, and is accompanied by a separate funding round. It illustrates continued consolidation among smaller technology providers serving the compliance and anti-fraud functions of payment firms, rather than a materially new capability entering the market.

Cross-Monitor Connections

The crypto-asset enforcement activity recorded here connects directly to the digital-asset regulatory architecture tracked elsewhere: the same post-transitional authorisation regime that the AMF polices through its blacklist is the backdrop against which crypto-asset service providers in France must now operate, with no national transitional pathway remaining. The payment-verification consolidation signal is commercial in nature and has only indirect bearing on sanctions, beneficial-ownership, or enabler-jurisdiction concerns; it is noted here primarily because fraud-prevention and payment-verification technology forms part of the control infrastructure that broader anti-money-laundering obligations depend upon.

Outlook

Neither development signals an imminent shift in France's financial integrity architecture. The AMF's enforcement rhythm is expected to continue on its established quarterly basis, and the broader transposition of the European Union's single AML rulebook remains on its statutory track toward mid-2027, a matter that falls outside the material findings but frames the direction of travel. Commercial consolidation in the payment-verification space is likely to continue as smaller fintech providers combine capabilities, a pattern that bears watching for its cumulative effect on the concentration of compliance-adjacent infrastructure providers, even though no single transaction observed is independently significant.

Lead Signal

France used the European Union's unanimity-based sanctions-renewal mechanism to secure the removal of two individuals, Alisher Usmanov and Mikhail Fridman, from the Annex I designation list attached to Council Regulation (EU) No 269/2014, as part of a three-year renewal of the broader Russia sanctions package agreed on 22 September 2026. The reporting on this episode comes from a single Tier 3 legal-commentary source rather than from the Council's own Official Journal text, so the mechanics are probable rather than confirmed, but the shape of the episode is analytically significant regardless of the exact bargaining detail: a Member State appears to have converted its veto power within a package renewal into leverage for individualised relief, a channel structurally distinct from the humanitarian-derogation route under Article 6b of the same regulation. Where the Article 6b route is available to any affected party on humanitarian grounds and is adjudicated case by case, a renewal-linked delisting is available only to a Member State with blocking power at the moment the whole package comes up for its periodic vote. This is a structural finding about how sanctions regimes are actually administered inside the EU's unanimity architecture, not an incident about two individuals, and it is the kind of precedent other Member States may look to test in future renewal cycles.

Other Developments

Tracfin's whistleblower-reporting remit has been formally widened. A decree dated 24 April 2026 and in force from 1 July 2026 adds France's financial intelligence unit, Tracfin, to the list of external authorities competent to receive whistleblower disclosures under the Sapin II regime. The source for this is a single Tier 3 legal-press report naming the specific decree and its effective date; the decree text itself has not been independently retrieved this cycle, so the finding is held at probable confidence. The practical effect, if the reporting is accurate, is that Tracfin's intake channel now sits alongside existing Sapin II disclosure routes, potentially widening the aperture through which financial-crime-relevant tips reach the FIU outside the conventional suspicious-transaction-report channel.

France's standing position outside the FATF increased-monitoring list is unchanged. The FATF's own 19 June 2026 plenary statement, checked directly, confirms France is not among the twenty-two jurisdictions currently under increased monitoring. This is a confirmed, stable finding rather than a new development, but it anchors the baseline against which France's domestic AML/CTF architecture should be read this cycle. Elsewhere on the same FATF list, Cambodia remains absent, having exited the grey list in February 2023, while Laos remains under increased monitoring, with the FATF's own language specifically citing weak risk-based supervision of casinos, banks, and reporting entities operating in Special Economic Zones.

FinCEN has continued its alert cadence against Mexico-based trade-based laundering networks. FIN-2026-Alert007, issued 1 October 2026 and targeting the so-called A7 Network, continues a typology thread FinCEN opened with a supplemental alert on fiscal fuel-theft and tax-evasion schemes on 30 June 2026. The alert index itself was retrieved directly from FinCEN as a Tier 1 primary source, though the content of the alert was not opened in depth this cycle. This is an episodic enforcement-communication development concentrated in the US-Mexico corridor rather than a France-specific finding, but it sits on the same cartel-finance typology thread that French correspondent banks with Latin American exposure would need to screen against.

The crypto-asset-service-provider authorisation perimeter affecting payment-adjacent AML exposure remains settled rather than newly moving. The ACPR's confirmation that crypto-asset service providers transferring or custodying e-money tokens require dual authorisation, as a Payment Services and Crypto-Assets provider and as a payment institution, is a Tier 1, confirmed finding, but the relevant flexibility window, an EBA no-action position, expired on 2 March 2026. The rule itself is therefore not a this-cycle move; it is included here because it continues to define the AML-adjacent perimeter for e-money-token-handling crypto firms operating in France.

Cross-Monitor Connections

The ACPR's dual-authorisation requirement for e-money-token transfer and custody sits directly at the AML/CFT and crypto-regulatory interface: a crypto-asset service provider handling EMTs in France now carries payment-institution-level AML obligations on top of its Payment Services and Crypto-Assets registration, a convergence of two previously separate supervisory perimeters that is relevant to any crypto-market monitoring exercise tracking France's authorisation landscape. Separately, the FinCEN alert cadence against Mexico-based trade-based-laundering and fiscal-fuel-theft networks touches a corridor of interest to any conflict-finance or illicit-trade-flow tracking exercise, given the correspondent-banking and trade-finance typologies cited in the underlying alerts.

Outlook

The most consequential open question is whether the French delisting episode becomes a template other Member States test at the next Russia-sanctions renewal, or remains a one-off outcome specific to this cycle's bargaining. Confirming the underlying Council and Official Journal text for the 22 September 2026 renewal, rather than relying on secondary legal commentary, would move this finding from probable to confirmed and would also clarify whether other names were discussed and declined. On the domestic AML/CTF side, France's core architecture, Tracfin as FIU and AMF/ACPR as supervisors, remains stable, with the widened Sapin II whistleblower remit the only confirmed procedural change; the larger structural item on the horizon is the Sixth Anti-Money Laundering Directive transposition deadline of 10 July 2027, which has not yet been enacted domestically and for which no implementing legislation had been identified as at this cycle.

Lead Signal

France's Commission nationale des sanctions (CNS) has, for the first time, confirmed AML/CFT failings by a licensed online gambling operator and imposed formal sanctions. Convened on a referral the Autorite nationale des jeux (ANJ) lodged in July 2025, the CNS held a hearing on 8 July 2026 and found that the operator had failed to apply the asset-freeze sanctions regime, had no internal AML procedures in place, and had failed to inform the economy minister as required. The CNS imposed pecuniary sanctions and a two-month suspended ban on exercising online gambling activity against the operator, an executive, and the compliance officer. ANJ announced the outcome publicly on 21 September 2026; the operator was not named and the sanction amount was not disclosed. This is a first-of-kind escalation path for the French gambling sector: a sector regulator carrying a compliance failure through to a dedicated sanctions commission rather than resolving it administratively, naming individual officer-level exposure alongside the entity.

Other Developments

New fund-freeze power against illegal operators. Loi n deg 2026-725 of 3 August 2026, in force from 5 August 2026, amends Code monetaire et financier article L.563-2 (via its article 42) to let the ANJ president freeze, for six renewable months following five days' formal notice, fund movements to and from the accounts of illegal gambling operators. This is a sanctions-adjacent mechanism: it does not add a name to a sanctions list, but it gives a sector regulator a freezing power modelled on the logic of asset-freeze regimes, aimed specifically at the unlicensed offshore operator ecosystem rather than licensed entities. The underlying statutory text could not be read directly on Legifrance this cycle; the drafting detail here rests on secondary legal commentary, and the mechanism should be treated as provisional pending direct verification of the gazetted text.

Cross-Monitor Connections

The CNS sanction sits at the intersection of sector-specific gambling regulation and the standing AML/CTF obliged-entity framework: a licensed gambling operator is treated as a reporting entity subject to asset-freeze screening and ministerial notification duties, and the enforcement outcome here demonstrates those duties are now being tested through a formal sanctions process rather than supervisory correspondence. The new fund-freeze power under article 42 parallels sanctions-list freezing mechanisms in its procedural logic, five days' notice followed by a renewable freeze, even though it is addressed at illegal operators rather than designated persons, and it illustrates how a non-financial sector regulator can be equipped with a financial-flow tool that previously sat with sanctions-implementation authorities.

Outlook

The immediate question is whether ANJ's willingness to carry an AML/CFT failure to a CNS sanctions outcome signals a broader shift toward formal referrals, or remains an isolated first case. A second referral, or publication of the sanctioned operator's identity and the sanction amount, would be the clearest confirming signal. On the fund-freeze power, confirmation of the gazetted statutory text, and any public record of its use against a named illegal operator since 5 August 2026, would move this from a provisional, secondary-sourced mechanism to a confirmed enforcement tool worth tracking as a template for other sector regulators.

Lead Signal

France closed its national crypto-asset registration route on 1 July 2026, when the PSAN-to-MiCA transitional regime expired. Only MiCA-authorised crypto-asset service providers, or eligible Article 60 notifiers, may now provide crypto-asset services in France, a structural shift confirmed directly by the AMF. This is best read as a structural tightening of the crypto-asset enabler surface rather than an episodic enforcement action, consistent with the EU-wide MiCA harmonisation architecture that France now sits fully inside. Secondary reporting places Binance France SAS among the firms that did not obtain MiCA authorisation and ceased onboarding and deposits for French clients from the same date, though this specific claim is not yet independently corroborated against the AMF's own public register of authorised providers.

Other Developments

Beneficial-ownership transposition deadline approaches. France, as an EEA member, is bound by the EU AML Package's harmonised legitimate-interest standard for beneficial-ownership register access, with a July 2026 implementation deadline under the AMLR and 6AMLD. France's own transposition status against this deadline has not yet been independently confirmed this cycle against Legifrance, and the underlying claim rests on a lower-tier vendor-analytics source rather than a primary legal text.

Cross-Monitor Connections

The closure of France's national PSAN crypto-registration route is directly relevant to the crypto monitor's own tracking of France's licensing perimeter, and to the world-payments monitor's tracking of digital-asset market structure, since the same MiCA CASP authorisation requirement now governs market access for both consumer-facing crypto-asset services and any payments-adjacent crypto activity. The beneficial-ownership transposition question connects to the broader EU AML Package architecture that also touches obliged entities across the banking and payments sectors that world-payments and advennt separately track.

Outlook

The clearest near-term development to watch is whether the AMF names a confirmed enforcement action against any provider, including Binance France, that continued unauthorised crypto-asset service provision past the 1 July 2026 deadline; no such T1-confirmed action was identified this cycle. On beneficial ownership, confirmation of France's transposition status ahead of the July 2026 EU harmonisation deadline, ideally against a primary Legifrance text, is the key gap to close in the coming cycle.

Lead Signal

The EU Council's 21st Russia sanctions package, adopted 23 July 2026, is the defining architecture event of this cycle for France. The package adds 48 individuals and roughly 168 to 170 entities to the asset-freeze list, reaching third-country enablers in shipping and technical management, and it applies directly in France as an EU Council Regulation with no domestic transposition step required. This is a structural expansion of the sanctions net rather than an isolated enforcement action: it extends the EU's asset-freeze architecture into adjacent facilitation layers, which is precisely the kind of enabler-side reach that determines whether a sanctions regime bites or is circumvented.

Thirty-three additional Russian credit and financial institutions were added to Annex XIV effective 13 August 2026, deepening the correspondent-banking exposure that French financial institutions must screen against. The direct-applicability feature is significant in its own right: because the instrument is a Council Regulation rather than a Directive, France carries no transposition gap and no domestic legislative lag between EU adoption and enforceable obligation.

Other Developments

Beneficial ownership access has tightened, but a transparency gap persists. France now limits public access to its UBO register, administered by INPI, to holders of a three-year certificate demonstrating a recognised legitimate interest, consistent with the AMLD6/AMLR shift away from unrestricted public access following the relevant CJEU jurisprudence. UBO citizenship data continues to be withheld from disclosure. This finding rests on a single Tier-4 source without Tier-1/2 corroboration this cycle, so it is carried at Assessed rather than High confidence.

A Eurojust-coordinated takedown exposed domestic enabler exposure. A joint investigation team led to 13 arrests across France and Romania in a network suspected of laundering at least EUR 306 million in drug-trafficking and other illicit proceeds between 2018 and 2024, using multiple French legal entities to channel funds. This is a Tier-1, High-confidence finding illustrating that France's own corporate-formation architecture, and not only offshore enabler jurisdictions, is being used as a laundering conduit.

The MiCA cutover has become an active supervisory chokepoint. The AMF's enforcement of the 1 July 2026 hard cutover from the national PSAN/DASP registration regime to MiCA CASP authorisation is now in an active enforcement phase. Roughly 90 legacy PSAN/DASP firms faced the deadline, and the AMF has begun withdrawing registrations of non-compliant firms, including AUTOMATA France SAS, withdrawn effective 30 June 2026. Unauthorised post-cutover activity is a criminal offence carrying up to two years' imprisonment and a EUR 30,000 fine, making this a genuine AML/CFT-relevant supervisory event rather than a purely prudential transition.

AMF enforcement continued against a standing AML/CFT baseline. On 30 June 2026 the AMF Enforcement Committee fined an investment services provider and its director a combined EUR 850,000 for AML/CFT-adjacent failings, and the AMF separately published a summary of its 2026 AML/CFT inspection findings, continuing supervisory pressure on obliged entities' STR and TRACFIN alignment.

Cross-Monitor Connections

The MiCA cutover enforcement phase is directly relevant to the crypto monitor's licensing coverage of the same transition, and the sanctions package's crypto-specific measures against instruments such as the A7A5 stablecoin and RUBx, and the EU-wide ban on support for the digital ruble, sit at the intersection of this monitor's D1 and D5 domains and the crypto monitor's cross-border and stablecoin coverage. The Eurojust-coordinated laundering network's use of French legal entities also intersects with any advennt-tracked payment or corporate-structuring exposure in adjacent regulated sectors, though no such overlap was independently confirmed this cycle.

Outlook

The AMLA build-out is the pipeline item most likely to reshape France's AML architecture next cycle: AMLA was due to publish its first Regulatory Technical Standards package by 10 July 2026, a deadline now passed without independent confirmation of publication, alongside the AMLD6 beneficial-ownership transposition deadline of 10 July 2026 that France appears to have pre-empted via its certificated access model. Confirmation of France's specific domestic transposition instrument, and of AMLA's RTS publication status, are the two gaps most likely to sharpen next cycle's D2 and D7 pictures.