Greece GR

The most consequential sanctions-architecture signal in the Greece jurisdiction file this cycle is structural rather than episodic. Greek shipowners have sold aging tankers into shell-company chains registered in the Marshall Islands, the United Arab Emirates and other intermediary jurisdictions that feed the Russian shadow fleet, collectively earning over USD 6.3 billion in the process, according to Follow the Money and OCCRP reporting corroborated by Consilium sanctions context. Indirect resale to buyers in non-sanctioning jurisdictions is not itself illegal under EU rules, which means this architecture functions less as a violation than as a structural loophole at the point of vessel origination. Greece functions here as an enabling origination point of the Russian sanctions-evasion architecture, and not merely as a target of it, given the collective profit Greek shipowners have captured from the resale mechanism.

Enforcement activity has intensified in volume this cycle without closing that origination-point gap. The EU Council added 41 vessels to its shadow-fleet sanctions list in December 2025, lifting the EU-designated total to almost 600, and separately sanctioned nine shadow-fleet enabler shipping companies based in the United Arab Emirates, Vietnam and Russia for owning or managing already-listed tankers. Both actions target downstream intermediary jurisdictions and operators rather than the original Greek sellers who divested the vessels into the shadow fleet in the first place, leaving a structural enforcement gap upstream in the resale chain. The OFAC action of January 2025, sanctioning 155 tankers, remains the largest single shadow-fleet enforcement action to date, and nearly 80 of the designated vessels have since been linked by investigative reporting to Western, including Greek, sellers, underscoring that origination-point exposure is documented but has not yet become the primary target of designation activity in either the EU or the US regime.

The compliance perimeter around this trade has nonetheless tightened in a separate but related respect. The Price Cap Coalition lowered the Russian crude oil price cap from USD 60 to USD 47.6 per barrel effective July 2025, raising the bar Greek-flagged and Greek-owned tankers carrying Russian oil must clear to retain Western insurance, finance and shipping-service access. Cross-regime friction compounds this picture: the scope and timing of OFAC vessel designations diverges from the parallel EU listing process, creating compliance friction for Greek shipowners and insurers who must navigate overlapping but non-identical designation lists across jurisdictions.

This scheme reading engages three FIM analytical filters simultaneously: the sanctions-architecture filter, given the documented evasion scheme; the enabler-jurisdiction filter, given the Greek shipping sector role as an intermediary node; and the conflict-finance filter, given that the same flows directly sustain Russian state revenue during its war of aggression against Ukraine. Together these apply a three-level test, scheme, architecture and strategic consequence, that keeps the analytical register cold and structural rather than incident-specific.

Political economy constrains how far enforcement can plausibly go at the origination point itself. Greece, alongside Cyprus and Malta, has expressed concern over stricter EU sanctions enforcement measures against the Russian shadow fleet, citing the outsized economic weight of its shipping industry, and this has created political resistance that slows disruption of the tanker-resale pipeline. Where enforcement capacity clearly exists, as the volume of EU, US and vessel-level designation activity demonstrates, but political will is constrained by a nationally strategic industry, the sanctions architecture remains structurally permeable at the point of vessel origination rather than merely under-enforced through a lack of capacity. The affected-firm-type footprint of this scheme extends beyond shipbrokers and vessel financiers into correspondent banking and trade finance, since the resale and redeployment of these vessels typically routes through banks and cross-sector intermediaries handling the underlying trade documentation, meaning the compliance exposure is not confined to the maritime sector alone.

Outlook

The trajectory here is assessed as worsening rather than stabilising: designation volume is rising across three regimes simultaneously, yet the underlying resale mechanism that converts Western tanker sales into shadow-fleet capacity has not itself become the direct object of enforcement. Watch points for the coming cycles include whether the EU, US or UK regimes converge on beneficial-ownership due-diligence requirements applied at the point of tanker sale itself, rather than continuing to designate vessels and downstream operators after the fact, and whether the political resistance documented from Greece, Cyprus and Malta produces any negotiated compensation mechanism that could unlock stricter upstream enforcement. Absent either development, the structural role Greece plays as an origination point for shadow-fleet capacity is likely to persist alongside, rather than be resolved by, continued growth in vessel-designation totals.

As a European Union member state, Greece sits squarely inside the direct perimeter of the EU AML Package, and the structural backdrop against which this cycle beneficial-ownership signal should be read is the three-instrument architecture the Package establishes. The AML Regulation, Regulation (EU) 2024/1624, is directly applicable law and becomes binding across Greek obliged entities from 10 July 2027, harmonising customer due-diligence and beneficial-ownership requirements that were previously subject to national transposition variance. Alongside it, the sixth AML Directive, Directive (EU) 2024/1640, must be transposed into Greek domestic law by the same 10 July 2027 date, establishing financial-intelligence-unit powers and supervisory cooperation frameworks, though Greek transposition status has not been independently verified this cycle. The third instrument, the AMLA Regulation, Regulation (EU) 2024/1620, establishes the Anti-Money Laundering Authority and is expected to begin direct supervision of a first cohort of high-risk cross-border obliged entities from around 2027 to 2028, potentially including Greek banks or crypto firms that meet risk thresholds. Together these three instruments shift supervision from a purely national model, run through the Hellenic Anti-Money Laundering Authority and the Bank of Greece, toward a hybrid EU-level regime in which AMLA assumes direct or indirect oversight of the highest-risk obliged entities. This is durable structural context rather than a single-cycle development, and it is the backdrop against which the more immediate Greek signals below should be assessed.

Against that backdrop, the Golden Visa residency-by-investment channel remains an active beneficial-ownership opacity signal. Non-EU nationals may obtain Greek, and by extension EU, residency through real estate or bond investment from around EUR 250,000, with limited due diligence applied to source of wealth. FATF and OECD work on the misuse of citizenship and residency-by-investment programmes more broadly frames this as a structural, cross-jurisdictional channel, spanning Greece, Cyprus, Malta and Portugal, for obscuring beneficial ownership and laundering proceeds of fraud and corruption, rather than as a Greece-specific or single-incident concern.

The other major beneficial-ownership-relevant development this cycle is the escalation of the OPEKEPE agricultural-subsidy fraud prosecution. Thirty-seven people were arrested on 23 October 2025 for defrauding the EU Common Agricultural Policy subsidy system of over EUR 19.6 million through falsified land leases, inflated livestock numbers and fictitious invoices, laundering the proceeds into luxury goods and vehicles; the wider investigation involves at least EUR 23 million since 2018 across 324 identified subsidy recipients. This scheme illustrates how opaque corporate and personal beneficial-ownership arrangements at the domestic level, not only cross-border investment-migration structures, can channel EU public funds into laundered private wealth, and it demonstrates that Greek beneficial-ownership opacity is a live enforcement concern rather than a purely theoretical or historical one.

Underlying supervisory capacity remains a documented structural gap. The FATF 2019 Mutual Evaluation Report found foundational AML and CFT effectiveness in Greece but flagged weak prosecution of money laundering as a standalone offence and inconsistent supervision of lawyers, tax advisors and other designated non-financial businesses and professions, with no fifth-round on-site date yet publicly scheduled. Real estate agents, notaries and investment intermediaries who process Golden Visa applications sit within the same DNFBP supervisory perimeter FATF found inconsistent, meaning the professional-facilitator gap and the residency-investment opacity channel are two faces of the same underlying structural weakness rather than separate risks.

Outlook

The Golden Visa channel and the DNFBP-supervision gap identified by FATF are structural, and the 2027 to 2028 EU AML Package implementation window is the primary lever available to close them, rather than any single Greek domestic reform. The OPEKEPE prosecution trajectory is a near-term watch point: its outcome will indicate whether Greek beneficial-ownership opacity concerns can be pursued to conviction against politically connected defendants, or whether the case stalls in a manner consistent with the documented pattern of prosecutorial interference in prior high-level corruption cases. Over the medium term, the extent to which AMLA direct supervision reaches Greek entities from 2027 to 2028, and whether Greek 6AMLD transposition is confirmed against the European Commission member-state transposition monitor, are the two concrete markers against which the beneficial-ownership assessed direction for Greece should be re-tested next cycle.

Greek professional-facilitator and political-economy exposure this cycle centres on the EPPO investigation into the OPEKEPE agricultural-subsidy fraud network and its escalation into direct political territory. The European Public Prosecutor Office requested on 1 April 2026 that the Hellenic Parliament lift the immunity of 11 current and former lawmakers tied to the probe, a request that was followed within two days, on 3 April 2026, by a cabinet reshuffle in which three implicated ministers departed. Read through the enabler-jurisdiction and professional-facilitator lens, this is a case in which political office itself functioned as a facilitating layer for a financial-crime scheme, and the willingness of the Hellenic Parliament and Greek Council of Ministers to process an immunity-waiver request and a reshuffle is the immediate test of whether that facilitating layer will be dismantled or absorbed.

That test sits against a documented and unresolved history. The former chief anti-corruption prosecutor in Greece was herself prosecuted after investigating the Novartis bribery scandal, and cases against politically connected officials in that matter were subsequently dropped despite evidence of large cash deposits. This is a state-capture signal under FIM analytical framing: it demonstrates that domestic enforcement mechanisms in Greece have, at least once, been directed against the investigators themselves rather than against the underlying politically connected conduct, and it is the precedent against which the current OPEKEPE immunity process should be read. A persistent, unresolved history of prosecutorial interference of this kind can chill future domestic enforcement against politically connected enablers of illicit finance more broadly, extending beyond the specific agricultural-subsidy matter.

The shipping sector supplies a second, distinct enabler-jurisdiction signal. Greece, alongside Cyprus and Malta, has expressed concern over stricter EU sanctions enforcement measures against the Russian shadow fleet, citing the outsized economic weight of its shipping industry. Read through this domain lens rather than the sanctions-architecture lens applied elsewhere, the significant point is that this is not a capacity gap: Greece possesses a sophisticated maritime administrative and financial infrastructure. It is a choice gap, in which a nationally strategic industry generates political resistance to enforcement measures that would otherwise apply. That distinction, between jurisdictions that lack the capacity to enforce and jurisdictions that possess the capacity but choose not to apply it fully, is the central analytical question the enabler-jurisdiction filter is designed to answer, and on the evidence available this cycle, Greece falls into the latter category with respect to shadow-fleet vessel origination. The affected-firm-type footprint of this resistance extends to banks and cross-sector corporate intermediaries servicing the shipping trade-finance chain, since political reluctance to escalate vessel-designation enforcement leaves those institutions exposed to reputational and compliance risk from continued exposure to the resale pipeline.

Underlying professional-facilitator supervision remains structurally weak. The FATF 2019 Mutual Evaluation Report flagged inconsistent supervision of lawyers, tax advisors and other designated non-financial businesses and professions in Greece, a gap that has not been resolved as of this baseline and that intersects with both the Golden Visa beneficial-ownership channel and the corporate structures used in the OPEKEPE scheme.

Outlook

The most immediate marker to watch is the parliamentary handling of the EPPO immunity-waiver request: a swift and complete waiver process would suggest the political system is prepared to allow prosecution to proceed against connected officials, while delay, partial waivers, or a repeat of the Novartis-case pattern would confirm that prosecutorial interference remains a live constraint rather than a historical artefact. Because the EPPO immunity process and the Novartis-era interference pattern both touch the same professional and political facilitator layer, developments in one are likely to inform assessed risk in the other over coming cycles. Over the medium term, the DNFBP-supervision gap identified by FATF and the professional intermediaries who process Golden Visa applications and OPEKEPE-linked corporate structures are the professional-facilitator layer most likely to determine whether Greek enabler-jurisdiction risk trends toward closure or persistence as the EU AML Package implementation window approaches in 2027.

Read through a conflict-finance lens rather than a sanctions-architecture lens, the Greek tanker-resale pipeline is most significant for what it directly sustains: Russian state war-economy revenue. Greek shipowners have sold aging tankers into shell-company chains that feed the Russian shadow fleet, collectively earning over USD 6.3 billion in the process, and the vessels these sales generate carry Russian crude above the price cap, converting Western commercial transactions into a direct revenue stream for a state conducting a war of aggression against Ukraine. This is the conflict-finance reading of the same evidentiary record examined under the sanctions-architecture domain: the financial flow, its source in Western vessel sales, its channel through shell-company intermediaries in the Marshall Islands, the United Arab Emirates and elsewhere, and its deployment into sustained Russian oil-export revenue during an active armed conflict, together satisfy the trace-source, trace-channel, trace-deployment structure the conflict-finance filter applies.

The second conflict-finance-relevant signal this cycle concerns extractive-industry integrity rather than armed-conflict revenue directly. Beny Steinmetz is the subject of contested cross-border extradition litigation tied to an opaque real-estate acquisition scheme; the Athens Court of Appeals ruled in January 2025 that he should be extradited to Romania for a five-year sentence over a fraudulent real-estate acquisition scheme exceeding USD 100 million, a ruling the Greek Supreme Court subsequently blocked. This illustrates Greek function as a contested venue for cross-border asset-recovery and extradition litigation involving opaque corporate structures tied to extractive-industry wealth, a distinct but adjacent integrity concern to armed-conflict financing: both involve the use of jurisdictional friction and opaque corporate vehicles to protect wealth derived from, or connected to, extractive-sector activity from cross-border legal accountability.

Taken together, these two signals show Greece playing a dual role in this domain: an enabling role in the shadow-fleet financing chain that sustains an active armed conflict, and a contested-venue role in extractive-industry asset-recovery litigation that does not itself generate war-economy revenue but reflects the same underlying pattern of opaque corporate structures resisting cross-border legal accountability. Neither signal is resolved. The shadow-fleet financing chain continues to operate notwithstanding intensified EU, US and UK vessel-designation activity, and the Steinmetz extradition ruling remains blocked at the Greek Supreme Court rather than executed. The affected-firm-type footprint spans investment firms and cross-sector intermediaries handling high-net-worth and corporate structures connected to the Steinmetz matter, and banks, correspondent-banking relationships and trade-finance desks connected to the shadow-fleet resale chain, meaning conflict-finance and extractive-industry-integrity exposure in the Greek file is not confined to any single financial sub-sector.

This domain also intersects with political-economy resistance documented separately in the enabler-jurisdiction domain, namely Greek reluctance alongside Cyprus and Malta to accept stricter shadow-fleet enforcement, since the same shipping-sector political weight that generates that resistance is the sector through which the shadow-fleet financing chain operates.

Outlook

The conflict-finance trajectory for Greece is assessed as worsening, since the underlying vessel-resale mechanism sustaining Russian war-economy revenue has not itself been disrupted even as designation volume rises. The extractive-industry asset-recovery question is better characterised as unresolved than as worsening or improving: the Steinmetz case remains in a state of judicial contestation rather than closure, and its ultimate resolution, either through executed extradition or continued blockage, will be a signal of how far Greek courts are prepared to go in cross-border asset-recovery matters involving extractive-sector wealth. Because the same shell-company-intermediary pattern recurs across both the shadow-fleet financing chain and the Steinmetz asset-recovery litigation, developments in the beneficial-ownership and enabler-jurisdiction domains examined elsewhere in this brief should be read as directly informing the conflict-finance and extractive-industry assessed trajectory in coming cycles.

The most significant digital-asset development in the Greek jurisdiction file this cycle is enforcement capability rather than legislative reform. The Hellenic Anti-Money Laundering Authority executed the first-ever cryptocurrency asset freeze in Greece, tracing a tranche of the roughly USD 1.4 to 1.5 billion Bybit exchange theft attributed to the DPRK Lazarus Group, using Chainalysis Reactor blockchain-analytics tooling. Read through the crypto and digital-asset lens, this is significant less as a single asset freeze than as a demonstration that a national AML authority in Greece now possesses a working, technology-enabled capability to trace and act on cross-border, state-linked crypto-laundering proceeds, a capability class that did not previously have a documented precedent in Greece. This scheme also carries a distinct counter-proliferation-financing dimension: the Bybit theft proceeds are attributed to a state-directed actor operating under sanctions, meaning the freeze functions simultaneously as an anti-money-laundering action and as a counter-proliferation-financing action, a pillar of the FIM three-pillar framework that is otherwise less frequently represented in Greek jurisdiction-file findings than the anti-money-laundering pillar.

The second major digital-asset development this cycle is regulatory rather than enforcement-driven, and it reshapes the operating environment for every crypto-asset service provider based in Greece. Crypto-asset service providers operating in Greece under legacy national registration lost their legal basis to serve EU clients once the MiCA Article 143(3) transitional window closed on 1 July 2026, forcing full CASP authorization, group passporting, or wind-down of EU-facing crypto services. Because Greece is a European Union member state, MiCA applies directly rather than through a national transposition choice, meaning Greek crypto-asset service providers face the same binary consolidation pressure documented across the EU, where authorizations under the regime accelerated to 213 entries across 23 jurisdictions by early 2026. For Greek-domiciled providers that have not completed authorization, the practical consequence is a legal cliff-edge rather than a phased transition, with continued EU-facing operation contingent on having secured a CASP authorization or a passporting arrangement from an already-authorized EU entity before the window closed.

Taken together, these two developments describe a mixed trajectory for Greek digital-asset integrity. Enforcement capability has genuinely improved, evidenced by the first-ever crypto asset freeze, while the regulatory perimeter has simultaneously tightened in a way that will consolidate the Greek crypto-asset-service-provider population toward fewer, fully authorized entities. The customer-typology exposure here is narrow but acute, concentrated in VASP-counterparty relationships rather than broader retail crypto exposure, meaning the practical compliance burden falls primarily on virtual-asset service providers with correspondent-style relationships to other exchanges rather than on the wider financial sector.

Outlook

The near-term watch point is whether further Hellenic Anti-Money Laundering Authority blockchain-analytics-enabled enforcement actions follow the Bybit-linked freeze, which would confirm the capability demonstrated this cycle is durable and repeatable rather than a single event. The MiCA transitional closure creates a second, more structural watch point: the post-transitional-period compliance status of Greek-domiciled crypto-asset service providers will be the concrete marker against which the Greek digital-asset regulatory perimeter should be reassessed next cycle. Over the medium term, this domain intersects with the broader EU AML Package horizon, since AMLA is expected to include crypto-asset firms among the first cohort of entities eligible for direct cross-border supervision from around 2027 to 2028, and because Greece sits inside the direct MiCA and future AMLA perimeter as an EU member state, the regulatory trajectory here is less a matter of whether harmonised rules will apply than of how quickly Greek-domiciled entities complete the transition those rules already require.

The single clearest active-defence development in the Greek jurisdiction file this cycle is the demonstrated capability of the Hellenic Anti-Money Laundering Authority to trace and freeze cryptocurrency proceeds using pre-procured blockchain-analytics tooling. The Authority used local technology partner Performance Technologies together with the Chainalysis Reactor platform, both procured in advance of the incident, to trace and freeze a tranche of the Bybit exchange theft proceeds attributed to the DPRK Lazarus Group. The significance of this development, read through the compliance-technology and active-defence lens, lies specifically in the timing of procurement: the tooling was in place before the incident occurred, meaning the resulting freeze reflects a forward-looking, technology-enabled investigative posture rather than an ad hoc response assembled reactively after the fact.

This distinction between proactive and reactive compliance posture is the central analytical point of this domain. A national AML authority that must acquire analytics capability only after an incident has already occurred is structurally behind the threat it is trying to address; a national AML authority that has already procured and integrated blockchain-analytics tooling before an incident occurs is positioned to act within the window in which stolen or laundered crypto assets remain traceable and, in principle, recoverable. The first-ever cryptocurrency asset freeze in Greece is a discrete but genuine RegTech and active-defence milestone precisely because it demonstrates that this proactive posture, rather than remaining aspirational, has now been operationalised at least once by a national authority.

It is important to characterise the scale of this development honestly rather than overstate it. This is a single documented instance, not yet a demonstrated pattern of repeated blockchain-analytics-enabled enforcement, and the underlying Bybit theft itself originated far outside Greek jurisdiction, with the Greek nexus being one point along a much longer international laundering chain. The genuine significance of the development is narrower and more structural than the headline figures involved: it is that the institutional capability now exists and has been proven operational, which is a necessary precondition for any future, more systematic use of blockchain analytics by Greek authorities, rather than a claim that Greek crypto-asset supervision has now reached full maturity. This development also carries a cross-pillar significance rather than sitting neatly within a single AML, CTF or CPF category: it demonstrates active-defence capability applicable across all three pillars, since the same blockchain-analytics tooling that traced Bybit-hack proceeds could in principle be applied to CTF-relevant or CPF-relevant crypto flows in future matters. The affected-firm-type footprint of this capability spans both crypto-asset operators directly and the banks that may ultimately receive off-ramped proceeds, meaning the practical value of this tooling extends beyond the virtual-asset sector into the traditional banking channels crypto-laundering proceeds eventually re-enter.

This honesty-over-coverage framing matters because compliance-technology narratives are prone to overstatement following a single high-profile success, and the FIM analytical register requires that a single instance be labelled as exactly that until a pattern is independently confirmed.

Outlook

The concrete marker to watch across coming cycles is repetition: whether the Hellenic Anti-Money Laundering Authority conducts further blockchain-analytics-enabled enforcement actions beyond the Bybit-linked freeze, which would confirm that the proactive compliance posture demonstrated this cycle has become an operating norm rather than a one-off capability demonstration. This domain also intersects directly with the digital-asset regulatory perimeter discussed elsewhere in this brief, since the same institutional capability that enabled this freeze will likely be tested further as Greek crypto-asset service providers complete MiCA authorization and come under a more structured supervisory regime, and potentially, from around 2027 to 2028, under AMLA direct supervision for the highest-risk cross-border entities. On present evidence, the compliance-technology trajectory for Greece is assessed as improving, though from a narrow evidentiary base of a single demonstrated action.