Gibraltar GIB

Gibraltar's sanctions architecture layers a general recognition mechanism with a specific compliance obligation on regulated financial businesses. The Sanctions Act 2019 automatically recognises United Nations, European Union, and United Kingdom sanctions designations, and the Sanctions (Amendment) Act 2024, enacted 23 December 2024, added a mandatory screening layer: relevant financial businesses must now conduct sanctions screening as part of customer due diligence, maintain supporting policies and controls, and report matches or freeze assets, with non-compliance a criminal offence.

No designation deltas and no enforcement actions tied to this architecture were identified this cycle. From an enablement perspective, that absence is itself worth noting: a formalised screening obligation exists on the books, but the evidence base for this cycle does not show it being tested through an actual enforcement action, meaning the operational rigour of the obligation in practice remains unverified from public sourcing. The finding this cycle is best read as confirmation that the architecture is now formally complete rather than as evidence of active supervisory testing.

Sourcing for the screening-obligation description rests on a single Tier 3 secondary source (a law-firm country update); the underlying Sanctions (Amendment) Act 2024 text was not independently retrieved this cycle, so this finding should be treated as assessed rather than confirmed pending direct verification of the amending Act's text.

Outlook

Continued monitoring should watch for any designation delta affecting Gibraltar-linked persons or entities, and for the first enforcement action testing the 2024 screening-obligation amendment. No specific regulatory horizon item was identified for D1 this cycle; the 2027 MONEYVAL mutual evaluation is the nearest scheduled event with potential D1 relevance, given its assessment of the broader AML/CFT and sanctions-compliance architecture.

Gibraltar's beneficial-ownership transparency regime has undergone the most significant bifurcation identified this cycle. Following an eighteen-month programme culminating in free, open access to the beneficial-ownership register (announced February 2026), two legal notices, LN 147/2026 and LN 220/2026, restored open access to the register for corporate and legal-entity beneficial ownership while carving express trusts out of public inspection entirely. Gibraltar remains one of three UK Overseas Territories that maintains a fully public beneficial-ownership register for corporate entities, a status that continues to distinguish it from many comparable small international finance centres. The express-trust carve-out, however, creates a residual channel through which beneficial ownership held via Gibraltar trust structures now sits outside public inspection even as corporate transparency is reaffirmed. This is a material bifurcation of the transparency regime: the jurisdiction is simultaneously deepening transparency for one class of legal vehicle while withdrawing it for another.

The rapid enactment-then-partial-reversal pattern, open register announced, then narrowed by LN 147 and LN 220, signals a jurisdiction actively calibrating its transparency commitments against a preserved secrecy channel for trusts, a bifurcation that is likely to attract scrutiny at Gibraltar's next MONEYVAL mutual evaluation, scheduled for 2027. Sourcing for the precise legal text of LN 147 and LN 220 was not independently retrieved this cycle; the finding rests on Tier 3 secondary commentary corroborated by a Tier 1 Gibraltar Government press release confirming the underlying register programme. The specific carve-out mechanics should therefore be treated as assessed pending direct retrieval of the legal notices themselves.

Standing architecturally, the durable backdrop against which any Gibraltar beneficial-ownership finding should be read is the European Union's AML Package, even though Gibraltar itself sits outside its direct perimeter as an autonomous, non-EU jurisdiction post-Brexit. That package comprises three distinct instruments: the AML Regulation, or AMLR (Regulation (EU) 2024/1624), which is directly applicable across EU member states without domestic transposition; the sixth AML Directive, or 6AMLD, which each EU member state transposes individually into national law; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and progressively shifts supervision of higher-risk obliged entities from purely national authorities toward a hybrid EU-level regime combining AMLA direct supervision with continued national supervision for the remainder of the sector. Gibraltar is not bound by the AMLR, 6AMLD, or the AMLA Regulation; the 2026 UK-EU Gibraltar Treaty, provisionally applied from 15 July 2026, carries AML/CTF and tax-transparency commitments but explicitly does not extend EU financial-services single-market instruments, including the AML Package, to Gibraltar. This structural autonomy means Gibraltar's own beneficial-ownership calibration proceeds independently of the EU's parallel move toward centralised AML supervision, even as both are likely to be read by evaluators as part of the same global transparency conversation.

Outlook

The 2027 MONEYVAL mutual evaluation is the clearest forthcoming test of Gibraltar's beneficial-ownership bifurcation, and the trust carve-out specifically is likely to draw evaluator attention given the residual opacity channel it preserves. Closing the sourcing gap around the precise text of LN 147 and LN 220 would allow a more confident assessment of exactly which trust structures and disclosures are affected. No indication of further beneficial-ownership legislative activity beyond this bifurcation was identified this cycle.

Gibraltar's financial-services perimeter was extended this cycle to bring Virtual Asset Arrangements, meaning fiat-to-crypto and crypto-to-crypto exchange services, within scope. The Financial Services (Regulated Activities) (Amendment) Regulations 2025 inserted this coverage into Part 16 Schedule 2 of the Financial Services Act 2019 with effect from 27 October 2025, requiring firms carrying on Virtual Asset Arrangements to hold explicit permission under Part 7 of the Act, in addition to any legacy DLT Provider status they already hold. Read architecturally, this closes what had been a gap in Gibraltar's AML/CFT perimeter for exchange-type crypto activity that fell outside the scope of the original DLT Provider licensing regime, which was framed around custody and transmission of value belonging to others rather than exchange services specifically.

This finding rests on a single Tier 4 vendor source; no primary Gibraltar Financial Services Commission publication describing the Virtual Asset Arrangements permission regime was retrieved this cycle. Confidence is accordingly capped at low, and the finding should be treated as a signal to verify rather than a confirmed structural fact pending GFSC primary-source confirmation. No Gibraltar-specific stablecoin, staking, or DeFi-specific finding was identified this cycle within this domain; the Virtual Asset Arrangements extension is the sole D5-relevant development.

Outlook

Primary-source confirmation from the Gibraltar Financial Services Commission of the Virtual Asset Arrangements permission regime, its precise scope, and its relationship to legacy DLT Provider status is the single highest-value close-out item for this domain. Until that confirmation is obtained, this finding should be treated as provisional.

Gibraltar's anti-money-laundering and counter-terrorist-financing regime of record is the Proceeds of Crime Act 2015. The Gibraltar Financial Services Commission is the supervisory authority for the financial sector, and the Gibraltar Financial Intelligence Unit is the designated financial intelligence unit responsible for receiving and analysing suspicious activity reports. Customer due diligence obligations apply above a threshold of EUR 15,000. MONEYVAL is the assessment body responsible for evaluating Gibraltar's AML/CFT effectiveness against the FATF Standards, and Gibraltar was removed from the FATF grey list in February 2024, with the jurisdiction's next MONEYVAL mutual evaluation scheduled for 2027 under the revised FATF Standards.

As an autonomous jurisdiction, Gibraltar's AML/CFT framework is not derived from, and is not bound by, any supranational EU legislative competence; this remains the position following the UK's departure from the European Union, and the 2026 UK-EU Gibraltar Treaty's AML/CTF commitments, provisionally applied from 15 July 2026, do not alter this autonomous status.

Outlook

The 2027 MONEYVAL mutual evaluation is the principal forthcoming assessment of this regime, and will test Gibraltar's supervisory effectiveness against the revised FATF Standards. No change to the underlying statutory basis is expected before that evaluation.