Financial Integrity Monitor
Sign in

Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Croatia HR

Domains covered
8 of 8
Sources
162
Role actions
8
Horizon <90d
0
Jurisdiction profile
FATF status: Compliant Tier: B Risk direction: Decreasing Enablement vs enforcement: Mixed

Croatia's AML/CFT regime rests on the Anti-Money Laundering and Terrorist Financing Law (AMLTFL, 2017, amended 2023), supervised by the Ministry of Finance's Anti-Money Laundering Office (AMLO/FIU), HNB (banking) and HANFA/CFSSA (capital markets).

MoreCroatia was FATF grey-listed June 2023-June 2025; MONEYVAL rates the regime as improving but with residual gaps in VASP supervision, ML prosecutions, and confiscation capacity.

Key deficiencies
  • Beneficial ownership register nominally public but gated by e-identification restricted to Croatian citizens and residents of a small number of EU states, blocking genuine public/investigative access
  • VASP framework rated partially compliant (R.15): virtual-asset transfer services fall outside the formal VASP definition despite CDD applying in substance
  • Persistent shortage of financial investigators and State Attorney's Office (SAO) capacity limiting complex ML prosecutions and asset confiscation
  • Demonstrated gap in monitoring/enforcement of sanctioned assets physically present in Croatian territory (yacht escape from Adriatic marina despite active US/UK/EU sanctions)
Recent developments (18m)
  • FATF/MONEYVAL removed Croatia from the Jurisdictions Under Increased Monitoring list on 13 June 2025 after completing its action plan
  • MONEYVAL 2nd Enhanced Follow-Up Report (October 2024) re-rated Croatia on 8 Recommendations
  • MONEYVAL further follow-up report (23 March 2026) recorded continued technical-compliance progress
  • Completion of Croatia's 2023 National Risk Assessment covering legal-persons misuse and real-estate cash risk

Law made at European Economic Area level that applies in Croatia is covered once, on the European Economic Area page. This page covers Croatia’s own layer: implementation, national authorities, national options and local enforcement.

Brief

Lead signal

Lead Signal

Croatia enters this cycle bound directly to a new round of European Union sanctions architecture. Council Decision (CFSP) 2026/2332, adopted 15 October 2026, lists three individuals and nine entities for involvement in importing sanctioned goods to Russia and in circumventing restrictions on energy and financial transactions. As an EU Member State, Croatia implements this listing without any domestic legislative step: the designations take effect through the Law on Restrictive Measures (Official Gazette 133/23), the national instrument that lays down the procedure for applying restrictive measures in the country. This is the clearest expression of how Croatia's sanctions exposure works in practice: the substantive designation decision is made in Brussels, and Zagreb's role is procedural implementation rather than autonomous listing. There is no evidence this cycle of any Croatian divergence from the EU course, nor of any gap between the Council's decision date and domestic applicability.

Read full brief

Lead Signal

Croatia enters this cycle bound directly to a new round of European Union sanctions architecture. Council Decision (CFSP) 2026/2332, adopted 15 October 2026, lists three individuals and nine entities for involvement in importing sanctioned goods to Russia and in circumventing restrictions on energy and financial transactions. As an EU Member State, Croatia implements this listing without any domestic legislative step: the designations take effect through the Law on Restrictive Measures (Official Gazette 133/23), the national instrument that lays down the procedure for applying restrictive measures in the country. This is the clearest expression of how Croatia's sanctions exposure works in practice: the substantive designation decision is made in Brussels, and Zagreb's role is procedural implementation rather than autonomous listing. There is no evidence this cycle of any Croatian divergence from the EU course, nor of any gap between the Council's decision date and domestic applicability.

Other Developments

A transposition gap surfaces on beneficial ownership. Croatia has been named, alongside seventeen other Member States, in a European Commission infringement procedure concerning incomplete notification of transposition measures for the sixth Anti-Money Laundering Directive. The provisions in question, Articles 11, 12, 13 and 15, govern access to beneficial-ownership information, and the notification deadline that was missed fell on 10 July 2026. This finding rests on secondary reporting of a Commission action rather than a primary infringement decision naming Croatia individually, so it is carried as probable rather than confirmed. It nonetheless marks a structural signal worth tracking: a Member State can be fully compliant with the sanctions-implementation architecture while lagging on the transparency architecture that underpins beneficial-ownership access for obliged entities and competent authorities alike.

The mutual evaluation record stands, unchanged and favourable. Croatia's standing position under the Council of Europe's MONEYVAL mechanism remains what it was set to be by the third enhanced follow-up report, adopted 10 November 2025: compliant on seven of the Financial Action Task Force's recommendations, largely compliant on twenty-seven, and partially compliant on three, with no recommendation rated non-compliant. That rating profile keeps Croatia outside the active follow-up cycle pending a sixth-round onsite evaluation scheduled for April 2030. Nothing in this cycle's evidence disturbs that position; it is reported here because it remains the governing reference point against which any future enforcement or transposition finding will be read.

The compliance architecture ahead is already dated. From 10 July 2027, the Anti-Money Laundering Regulation becomes directly applicable in Croatia, replacing the current structure of national law layered under the sixth Directive with a single EU rulebook that requires no national transposing act for its substantive obligations. General industry practice has not yet adjusted obliged-entity customer due diligence and reporting workflows to this shift, which sets up a transition period during which the current infringement-procedure gap on beneficial-ownership access and the incoming direct-applicability regime will need to be reconciled.

Cross-Monitor Connections

The beneficial-ownership transposition gap sits at the intersection of sanctions screening and corporate transparency: incomplete access to ownership registers degrades the quality of screening against the newly listed individuals and entities, even where the sanctions-implementation mechanism itself is functioning correctly. The pattern of a well-implemented sanctions regime running alongside an incompletely transposed transparency regime is one worth watching across other Member States named in the same infringement action, since the structural gap is EU-wide rather than Croatia-specific.

Outlook

The near-term marker to watch is whether Croatia resolves the Commission's transposition concern ahead of the Anti-Money Laundering Regulation's direct-applicability date of 10 July 2027, since that date will subsume much of the current Directive-based national architecture regardless of whether the notification gap is cured beforehand. The sanctions-implementation channel, by contrast, is operating as designed and is not a near-term source of divergence risk. As scheduled, the shift to direct applicability in mid-2027 is the structural event most likely to generate renewed findings in subsequent cycles.

Earlier periodic briefs (4)
25 Oct 2026 · fim-2026-10-25

Lead Signal

Croatia enters this cycle bound directly to a new round of European Union sanctions architecture. Council Decision (CFSP) 2026/2332, adopted 15 October 2026, lists three individuals and nine entities for involvement in importing sanctioned goods to Russia and in circumventing restrictions on energy and financial transactions. As an EU Member State, Croatia implements this listing without any domestic legislative step: the designations take effect through the Law on Restrictive Measures (Official Gazette 133/23), the national instrument that lays down the procedure for applying restrictive measures in the country. This is the clearest expression of how Croatia's sanctions exposure works in practice: the substantive designation decision is made in Brussels, and Zagreb's role is procedural implementation rather than autonomous listing. There is no evidence of any Croatian divergence from the EU course, nor of any gap between the Council's decision date and domestic applicability.

Other Developments

A transposition gap surfaces on beneficial ownership. Croatia has been named, alongside seventeen other Member States, in a European Commission infringement procedure concerning incomplete notification of transposition measures for the sixth Anti-Money Laundering Directive. The provisions in question, Articles 11, 12, 13 and 15, govern access to beneficial-ownership information, and the notification deadline that was missed fell on 10 July 2026. This finding rests on secondary reporting of a Commission action rather than a primary infringement decision naming Croatia individually, so it is carried as probable rather than confirmed. It nonetheless marks a structural signal worth tracking: a Member State can be fully compliant with the sanctions-implementation architecture while lagging on the transparency architecture that underpins beneficial-ownership access for obliged entities and competent authorities alike.

The mutual evaluation record stands, unchanged and favourable. Croatia's standing position under the Council of Europe's MONEYVAL mechanism remains what it was set to be by the third enhanced follow-up report, adopted 10 November 2025: compliant on seven of the Financial Action Task Force's recommendations, largely compliant on twenty-seven, and partially compliant on three, with no recommendation rated non-compliant. That rating profile keeps Croatia outside the active follow-up cycle pending a sixth-round onsite evaluation scheduled for April 2030. Nothing in the evidence disturbs that position; it is reported here because it remains the governing reference point against which any future enforcement or transposition finding will be read.

The compliance architecture ahead is already dated. From 10 July 2027, the Anti-Money Laundering Regulation becomes directly applicable in Croatia, replacing the current structure of national law layered under the sixth Directive with a single EU rulebook that requires no national transposing act for its substantive obligations. General industry practice has not yet adjusted obliged-entity customer due diligence and reporting workflows to this shift, which sets up a transition period during which the current infringement-procedure gap on beneficial-ownership access and the incoming direct-applicability regime will need to be reconciled.

Cross-Monitor Connections

The beneficial-ownership transposition gap sits at the intersection of sanctions screening and corporate transparency: incomplete access to ownership registers degrades the quality of screening against the newly listed individuals and entities, even where the sanctions-implementation mechanism itself is functioning correctly. The pattern of a well-implemented sanctions regime running alongside an incompletely transposed transparency regime is one worth watching across other Member States named in the same infringement action, since the structural gap is EU-wide rather than Croatia-specific.

Outlook

The near-term marker to watch is whether Croatia resolves the Commission's transposition concern ahead of the Anti-Money Laundering Regulation's direct-applicability date of 10 July 2027, since that date will subsume much of the current Directive-based national architecture regardless of whether the notification gap is cured beforehand. The sanctions-implementation channel, by contrast, is operating as designed and is not a near-term source of divergence risk. As scheduled, the shift to direct applicability in mid-2027 is the structural event most likely to generate renewed findings in subsequent cycles.

19 Oct 2026 · fim-2026-10-18

Lead Signal

Hrvatska postanska banka (HPB) completed its merger by acquisition of Croatia Banka this cycle, closing a consolidation pathway that ran from a signed share-purchase agreement in March 2026 through clearances from the Croatian Competition Agency, the European Central Bank, and final approval from Hrvatska narodna banka (HNB) on 30 September 2026. The transaction, valued at EUR 15 million for 100 percent of Croatia Banka, was funded through the Croatian Deposit Insurance Agency as seller. This is a structural development in the domestic banking architecture rather than an isolated incident: a multi-regulator clearance sequence running through a competition authority, a supranational prudential supervisor, and a national central bank is the kind of layered approval chain that signals an orderly, supervised consolidation rather than a distressed or opportunistic one.

Alongside this, Croatia's digital-asset regulatory perimeter tightened as the national transitional period for legacy virtual asset service providers under the Markets in Crypto-Assets framework ended on 1 July 2026. From that date, all crypto-asset service provision in Croatia required MiCA authorisation from the Croatian Financial Services Supervisory Agency (HANFA), a confirmed structural milestone drawn directly from HANFA's own notice.

Other Developments

An enforcement signal in the crypto sector remains thinly sourced. HANFA reportedly ordered Fima Plus d.o.o. to cease unauthorised crypto-asset custody and execution services and to return client assets, with the action dated 29 July 2026. This rests on a single secondary source and has not been corroborated against HANFA's own enforcement notice, so it is carried here as an uncertain development rather than a confirmed enforcement action. Its significance, if corroborated, would lie in demonstrating that the end of the MiCA transitional window is being paired with active supervisory follow-through rather than a purely administrative deadline.

Croatia's mutual evaluation standing has formally closed out. The Council of Europe's Committee of Ministers confirmed in a September 2026 report that Croatia's fifth-round enhanced follow-up process under MONEYVAL has ended, with the country rated Compliant or Largely Compliant on 34 of 40 FATF Recommendations and none rated Non-Compliant. This is a durable, confirmed baseline fact about Croatia's AML/CTF standing rather than a new development in substance, but its formal closure this cycle is itself notable: it removes a standing procedural overhang from Croatia's FATF-aligned compliance record.

Cross-Monitor Connections

The HPB/Croatia Banka consolidation is the same underlying commercial event tracked by the World Payments Monitor under industry structure and commercial intelligence, reflecting the shared multi-regulator clearance chain (competition authority, ECB, HNB) as a cross-sector banking-structure signal rather than a payments-specific or AML-specific one. The MiCA transitional-period closure and the associated HANFA licensing and enforcement posture also sit squarely on the Crypto Monitor's licensing and commercial-activity tracks; the same underlying facts are read here through a financial-integrity lens (supervisory follow-through on an unauthorised-provider order) rather than a market-structure lens.

Outlook

With the transitional MiCA period closed and HANFA continuing to process CASP authorisations, the coming cycles are likely to surface further authorisation decisions and, if the Fima Plus matter is corroborated through a primary HANFA notice, a clearer enforcement record for unauthorised crypto-asset activity in Croatia. On the banking-consolidation front, the HPB/Croatia Banka merger is now complete at every regulatory layer, so further developments would most plausibly take the form of integration-related disclosures rather than additional approval milestones. Croatia's AML/CTF standing, having closed its enhanced follow-up process, is not expected to generate near-term FATF-driven developments absent a new mutual evaluation cycle.

28 Sep 2026 · fim-2026-09-28

Lead Signal

Croatia's crypto-asset supervisory perimeter closed a structural gap on 1 July 2026, when the MiCA transitional period ended EU-wide and, in Croatia specifically, HANFA's AML-only supervision of virtual-asset service providers under the national AML/CFT Act was retired. Firms previously permitted to operate subject only to AML/CFT scrutiny must now hold full Crypto-Asset Service Provider authorisation to continue operating, folding crypto-asset AML/CFT obligations directly into the harmonised MiCA perimeter rather than leaving them in a parallel national track. This is a structural finding, not an incident: it is the closure of a supervisory architecture gap rather than the outcome of an enforcement case, and it is confirmed directly by HANFA's own regulator publication.

The closure sits alongside a second structural development in Croatia's broader AML/CFT standing. MONEYVAL's January 2026 follow-up assessment re-rated Croatia as Largely Compliant on FATF Recommendation 8, governing non-profit organisations, bringing Croatia's overall standing across the 40 FATF Recommendations to 7 rated Compliant, 27 rated Largely Compliant, and 3 rated Partially Compliant, with none rated Non-Compliant. This places Croatia's technical-compliance trajectory as structurally improving even as the beneficial-ownership dimension, addressed below, remains an outstanding gap.

Other Developments

Beneficial-ownership transparency remains unresolved. Croatia's Recommendation 24 rating, covering beneficial-ownership transparency, remains Partially Compliant and was not actioned in this follow-up round; MONEYVAL's reporting confirms the item stays outstanding rather than resolved, an absence of movement that is itself analytically significant against the backdrop of improvement on other Recommendations.

AMLR binding mechanism confirmed structurally unchanged. Croatia, as an EU-27 member state, is bound directly by the EU Anti-Money Laundering Regulation once it takes effect, a direct-application mechanism rather than a transposition requirement; no Croatia-specific 6AMLD transposition delta or AMLA supervisory-perimeter development surfaced this cycle beyond this structural confirmation.

Cross-Monitor Connections

The MiCA transitional closure recorded here is the same underlying development the crypto monitor is tracking under its own crypto_licensing and consumer_protection modules, where HANFA's newly-issued CASP authorisation to Electrocoin and its parallel consumer warning about unauthorised VASPs sit as the licensing-and-consumer-facing counterpart to this AML/CFT-perimeter reading of the same fact. World-payments' own W2 (Stablecoins and Digital Money) slot, where populated, rests on the same underlying HANFA and HNB regulator split that this brief's D5 framing depends on. Readers should treat the closure of the AML-only VASP route as a single fact viewed through three lenses across the three monitors, not three separate developments.

Outlook

The open question following the MiCA transitional closure is whether HANFA takes or has taken enforcement action against any VASP that failed to secure CASP authorisation by 1 July 2026; no such action is established in the evidence reaching this cycle. On the broader AML/CFT trajectory, watch for whether Croatia's beneficial-ownership registry work produces a fresh MONEYVAL rating movement on Recommendation 24 in a future follow-up round, and for whether any Croatia-specific 6AMLD transposition or AMLA supervisory-perimeter development surfaces as the EU AML Package's implementation phase advances.

21 Sep 2026 · fim-2026-08-05

Lead Signal

The coordinated FinCEN-OFAC action against Cartel de Jalisco Nueva Generacion this cycle is the clearest sanctions-architecture signal of the period. OFAC designated two Mexican nationals and nine entities tied to CJNG fuel-smuggling and tax-evasion schemes, while FinCEN issued a supplemental alert flagging over seven billion dollars in reported suspicious activity connected to the network since 2025. Read alongside SDNY charges against a sitting Mexican state governor, the development signals that cartel finance in Mexico now carries an explicit state-capture dimension rather than representing purely private criminal infiltration of the financial system — a structural characterisation that should reframe how obliged entities calibrate correspondent-banking and trade-finance exposure to Mexican counterparties, not merely how they screen named designees.

This is architecture, not incident: the designation itself is a single enforcement action, but the pattern it sits within — sustained FinCEN-OFAC coordination, a parallel prosecutorial track reaching into state government, and a persistent multi-year suspicious-activity volume — indicates a durable illicit-finance channel rather than an episodic one. Firms with correspondent or trade-finance exposure to Mexican counterparties, particularly in fuel and bulk-commodity trades, should treat this as reason to revisit customer-due-diligence depth on that corridor generally, not only to screen the newly designated names.

Other Developments

Continued Houthi-network designations. OFAC added two individuals to the SDN list on 16 January 2026 and sanctioned three vessels and their owners for supplying refined petroleum to Houthi-controlled Yemeni ports, building on the 2025 FTO re-designation. The refined-petroleum channel is a sustained revenue stream rather than a one-off shipment, and continuing designation cadence against it indicates the architecture remains open despite prior sanctions rounds.

Cambodia's own regulator flags grey-list risk. National Bank of Cambodia Governor Chea Serey has publicly warned of renewed risk of a third FATF grey-list placement, tied to scam-hub and casino/DNFBP-linked laundering. Casinos and DNFBPs remain the identified weak point per FATF's own 2023 follow-up reporting. A jurisdiction's own supervisor volunteering this risk assessment is a stronger enforcement-urgency signal than an externally-sourced risk assessment would be, and it sits alongside a second national risk assessment and intensified licence revocations.

Continuing SDN designations under E.O. 13224. OFAC added Ahmad Idriss and Adil Mutahhar Abdallah Al Muayyad to the SDN list on 16 January 2026, extending the post-FTO-redesignation designation cadence tied to the broader Yemen-conflict financing architecture.

Cross-Monitor Connections

The Mexico thread connects directly to WDM's state-capture tracking: SDNY charges against a sitting state governor, read alongside the CJNG fuel-smuggling designation, describe a financial-crime architecture in which state office and cartel finance are not clearly separable functions. The Houthi refined-petroleum channel is simultaneously a sanctions-evasion finding and a conflict-finance finding: the same vessel and facilitator designations fund missile, uncrewed-aerial-vehicle, and naval-mine operations, which is the natural hand-off point to ERM's commodity-flow tracking and SCEM's conflict-finance work. Cambodia's casino/DNFBP laundering exposure is an enabler-jurisdiction finding with an obvious FCW-adjacent dimension where scam-hub operations blend financial fraud with the broader information-operations space FCW tracks, though that connection is not evidenced in this cycle's sourcing and is noted here only as a routing signal for further monitoring.

Outlook

The near-term question for the Mexico thread is whether the state-capture dimension broadens beyond the single SDNY prosecution already in train; any additional designations naming Mexican public officials would confirm rather than merely suggest a systemic pattern. For Cambodia, the second national risk assessment and intensified licence-revocation activity are the developments to watch for concrete evidence that the casino/DNFBP weak point identified by FATF in 2023 is closing rather than persisting into a third grey-list placement. On the conflict-finance side, further OFAC vessel or facilitator designations against the Houthi refined-petroleum channel would indicate the revenue stream remains open despite the current designation round; their absence over the coming cycle would be a modestly positive signal worth surfacing explicitly under the enablement-as-signal principle. Each of these three threads — Mexico, Cambodia, and the Houthi network — represents a distinct pillar of exposure (state-capture-adjacent AML, enabler-jurisdiction CDD, and CTF/CPF conflict finance), and the three-pillar balance argues against reading any single thread as more urgent than the others this cycle.

Domain intelligence (D1–D8)

D1 Sanctions

material_change

Sanctions Architecture and Evasion

Croatia's sanctions posture this cycle is defined by a single, clean data point: Council Decision (CFSP) 2026/2332, adopted 15 October 2026, which lists three individuals and nine entities for their role in importing sanctioned goods to Russia and in circumventing restrictions on energy and financial transactions. The decision's substance was made at the EU Council level; its effect in Croatia flows automatically through the Law on Restrictive Measures (Official Gazette 133/23), the standing domestic instrument that lays down the procedure for applying restrictive measures in the Republic. There is no evidence of a gap, delay, or divergence between the Council's action and Croatia's implementation channel. This is the architecture-over-incident reading that matters: Croatia is not a jurisdiction where sanctions exposure arises from autonomous listing decisions or enforcement gaps, it is one where exposure is a direct function of whatever the Council decides collectively, applied through a stable procedural mechanism that has not changed this cycle.

Continue reading

The analytically significant point is less the listing itself, which is one of a steady stream of EU designations targeting Russia-sanctions circumvention, and more the confirmation that the implementation channel continues to function without friction. Where an enabler jurisdiction's sanctions architecture shows strain, it typically appears first as delay between EU-level designation and domestic applicability, or as carve-outs in national implementing law. Neither is present here. This is worth stating explicitly precisely because absence of friction is itself a finding: it indicates Croatia's correspondent banking and cross-sector screening obligations update on the same clock as the EU sanctions list itself, without a domestically-created interim exposure window.

The listing touches energy and financial-transaction circumvention specifically, which places it within the broader pattern of EU designations aimed at closing loopholes used to route sanctioned Russian trade through third countries or financial intermediaries. For firms with cross-sector or correspondent-banking exposure operating in or through Croatia, the designation is immediately binding screening content from its EU effective date, with no additional Croatian-specific transposition step required or expected.

Outlook

The sanctions-implementation channel in Croatia is not currently a source of expected change. The structural question worth tracking going forward is not whether Croatia will diverge from EU listings, which this cycle gives no reason to expect, but whether the parallel beneficial-ownership transparency gap identified elsewhere this cycle could, over time, degrade the practical effectiveness of screening against designations like this one, since ownership opacity is a known enabler of sanctions circumvention through corporate structures. As scheduled, no near-term change to the implementation architecture itself is anticipated.

Cumulative analysis

Sanctions Architecture and Evasion — Cumulative Analysis

This is the initial baseline synthesis of the sanctions-architecture posture of Croatia, established at issue W27, and it will be integrated with subsequent cycles rather than appended to. The posture rests on two connected structural findings rather than a single episode. First, an individual-level laundering architecture: Mihajlo Perencevic, president of Velesstroy, and associate Kresimir Filipovic used fictitious Croatian real-estate sale contracts, a Hong Kong-administered trust known as PNP Trust, Cypriot holding vehicles, and personal Austrian bank accounts to move tens of millions of euros in Russia-sourced funds, intersecting with the wider Troika Laundromat architecture and exercising control over Croatian developer Jadranka through layered offshore ownership. OFAC designated Velesstroy in September 2023 on the basis that it was carrying on business in sectors of strategic significance to the Government of Russia; the United Kingdom designated Perencevic and Filipovic separately and at different times. This asynchronous designation timing across OFAC, OFSI and EU regimes for an identical underlying entity and individual set is a durable structural feature of the current multi-regime sanctions landscape, not a one-off anomaly, and it creates an exploitable window in correspondent-banking screening.

Second, a jurisdiction-level structural transit exposure: the Adriatic ports of Croatia, including Rijeka, Ploce, Split and Dubrovnik, sit within the EU shadow-fleet exposure corridor that has expanded materially through 2025. The 19th EU sanctions package, adopted 23 October 2025, eliminated the Rosneft and Gazprom Neft transaction exemption, imposed a phased LNG import ban, designated 117 additional shadow-fleet vessels bringing the total to 557, and extended sanctions measures to crypto infrastructure for the first time; a further 41 vessels were designated in December 2025, pushing the total toward 600, alongside a new EU declaration on shadow-fleet risks to critical undersea infrastructure. Both packages are directly applicable to Croatia as an EU member state. Set against this expanding corridor, Croatia holds an EU-granted temporary derogation permitting import of Russian vacuum gas oil, a narrow, product-specific carve-out inside an otherwise harmonised architecture, and one other member states with comparable energy dependencies could plausibly seek to replicate.

A third, lower-confidence but pattern-consistent finding rounds out the baseline: in 2023, a sanctioned oligarch-linked luxury yacht docked in a Croatian Adriatic marina departed Croatian territorial waters for Turkey despite active US, UK and EU sanctions restricting its movement, passing police, customs and harbour-master controls undetected until reported by local media. Taken together, these three findings describe a jurisdiction whose formal sanctions-compliance obligations under EU law are substantial and directly applicable, but whose practical enforcement-coordination capacity at the point of individual vessel or vehicle movement has at least once demonstrably failed, and whose corporate and real-estate sector has been used as a laundering conduit for Russia-sourced funds by a Croatian-national PEP.

Outlook

Going forward, this domain should be read as converging EU-level formal architecture layered onto unresolved domestic enforcement-capacity and enablement questions. Continued shadow-fleet vessel-list expansion is the most probable near-term development, given the trajectory across the 19th package and the December 2025 designations; whether Croatia retains, narrows or loses its vacuum-gas-oil derogation is an open and directly observable data point for future cycles. No confirmed prosecutorial or asset-recovery outcome has yet been reported for the Perencevic and Filipovic case beyond the original designations, and no update on the 2023 yacht-escape investigation has surfaced; both gaps should be treated as open until closed by future reporting rather than assumed resolved.

domain_sub_briefs · D1 · Cumulative analysis
Standing baseline position

Council Decision (CFSP) 2026/2332 of 15 October 2026, three individuals and nine entities for Russia-sanctions circumvention.

Periodic updates (2)
25 Oct 2026 · fim-2026-10-25

Sanctions Architecture and Evasion

Croatia's sanctions posture is defined by a single, clean data point: Council Decision (CFSP) 2026/2332, adopted 15 October 2026, which lists three individuals and nine entities for their role in importing sanctioned goods to Russia and in circumventing restrictions on energy and financial transactions. The decision's substance was made at the EU Council level; its effect in Croatia flows automatically through the Law on Restrictive Measures (Official Gazette 133/23), the standing domestic instrument that lays down the procedure for applying restrictive measures in the Republic. There is no evidence of a gap, delay, or divergence between the Council's action and Croatia's implementation channel. This is the architecture-over-incident reading that matters: Croatia is not a jurisdiction where sanctions exposure arises from autonomous listing decisions or enforcement gaps, it is one where exposure is a direct function of whatever the Council decides collectively, applied through a stable procedural mechanism that has not changed.

The analytically significant point is less the listing itself, which is one of a steady stream of EU designations targeting Russia-sanctions circumvention, and more the confirmation that the implementation channel continues to function without friction. Where an enabler jurisdiction's sanctions architecture shows strain, it typically appears first as delay between EU-level designation and domestic applicability, or as carve-outs in national implementing law. Neither is present here. This is worth stating explicitly precisely because absence of friction is itself a finding: it indicates Croatia's correspondent banking and cross-sector screening obligations update on the same clock as the EU sanctions list itself, without a domestically-created interim exposure window.

The listing touches energy and financial-transaction circumvention specifically, which places it within the broader pattern of EU designations aimed at closing loopholes used to route sanctioned Russian trade through third countries or financial intermediaries. For firms with cross-sector or correspondent-banking exposure operating in or through Croatia, the designation is immediately binding screening content from its EU effective date, with no additional Croatian-specific transposition step required or expected.

Outlook

The sanctions-implementation channel in Croatia is not currently a source of expected change. The structural question worth tracking going forward is not whether Croatia will diverge from EU listings, which this cycle gives no reason to expect, but whether the parallel beneficial-ownership transparency gap identified elsewhere could, over time, degrade the practical effectiveness of screening against designations like this one, since ownership opacity is a known enabler of sanctions circumvention through corporate structures. As scheduled, no near-term change to the implementation architecture itself is anticipated.

21 Sep 2026 · fim-2026-08-05

Sanctions

This cycle's sanctions-architecture signal centres on two parallel threads: a coordinated FinCEN-OFAC action against Cartel de Jalisco Nueva Generacion fuel-smuggling and tax-evasion networks, and continuing OFAC designations against the Houthi war-economy's refined-petroleum revenue channel. OFAC designated two Mexican nationals and nine entities tied to CJNG, and FinCEN issued a supplemental alert identifying over seven billion dollars in suspicious activity reported since 2025 connected to the network. The scale of that reported-activity figure is the more analytically significant data point: a single designation action names discrete individuals and entities, but a multi-year, multi-billion-dollar suspicious-activity volume describes an entrenched laundering architecture that outlives any individual designee. Read alongside SDNY charges against a sitting Mexican state governor, the finding indicates that cartel finance in this corridor now carries an explicit state-capture dimension, meaning the evasion architecture likely extends into functions of formal government rather than operating solely through private criminal infrastructure.

On the Houthi thread, OFAC's 16 January 2026 action added two individuals to the SDN list under Executive Order 13224 and sanctioned three vessels and their owners for supplying refined petroleum to Houthi-controlled Yemeni ports. This is architecture rather than incident: the designation builds directly on the 2025 FTO re-designation and a running cadence of vessel, owner, and facilitator designations, indicating that the underlying revenue channel — petroleum discharge at controlled ports — has not been closed by prior sanctions rounds and continues to require fresh designation action to disrupt. The persistence of the channel despite repeated enforcement is itself the sanctions-evasion story: designation of individual vessels and owners is a necessary but evidently not sufficient control against a revenue stream built on physical commodity logistics rather than formal financial-system rails.

Both threads share a common evasion-architecture lesson for compliance functions: screening against the SDN list catches named parties, but neither the Mexican fuel-smuggling network nor the Houthi petroleum channel is disrupted by list-screening alone, because the underlying value transfer occurs through physical commodity movement and correspondent-banking relationships that persist independently of any single designated entity. The BSA-grounded reporting obligation underpinning FinCEN's supplemental alert (31 U.S.C. §5318) is directed specifically at trade-finance and correspondent-banking customer typologies, the two channels through which fuel-smuggling proceeds are most likely to intersect the formal financial system; this identifies the specific customer-typology surface area where institutions should expect exposure, a materially more actionable signal than the designation list alone.

Neither thread in this cycle's signal originates from an EU or UK autonomous listing; both are US Treasury actions (OFAC/FinCEN), consistent with a sanctions-regime-convergence pattern rather than divergence between the major sanctioning authorities. For firms operating dual US and EU/UK sanctions programs, this reduces near-term reconciliation risk between regimes on these two specific threads, though it does not reduce the underlying due-diligence burden the designations themselves create. The three-pillar balance is worth stating explicitly here: both threads generate primarily AML/sanctions enforcement volume, but the Houthi channel is simultaneously a CTF matter given its direct funding of Houthi weapons and naval-mine capability, a dimension addressed further under the conflict-finance domain read this cycle.

Outlook

The Mexico thread's near-term trajectory turns on whether additional designations extend the state-capture dimension beyond the single SDNY prosecution currently in train; a broadening pattern would confirm rather than merely suggest systemic cartel penetration of state office, with material implications for any institution maintaining correspondent relationships with Mexican regional financial institutions. On the Houthi thread, the test is whether the refined-petroleum channel closes or simply relocates to new vessels and owners following this designation round — prior cycles' designation cadence suggests the latter is the more probable near-term outcome. Absence of further designation activity against either corridor over the coming cycle would itself be a notable data point, consistent with the enablement-as-signal principle, and should prompt inquiry into whether enforcement attention has genuinely closed the channel or simply moved on.

D2 Beneficial Ownership

watch

Beneficial Ownership and Corporate Transparency

The durable structural backdrop against which any Member State's beneficial-ownership signal should be read is the European Union's Anti-Money Laundering Package, which is built from three distinct instruments rather than one. The Anti-Money Laundering Regulation is directly applicable across Member States without need for domestic transposition; the sixth Anti-Money Laundering Directive is transposed individually by each Member State into its own national law; and the Anti-Money Laundering Authority Regulation establishes a new EU-level supervisory body whose direct and indirect supervision perimeter is intended to shift oversight of cross-border and higher-risk obliged entities away from purely national competent authorities and toward a hybrid EU-level regime. This architecture is a structural fact of the current compliance landscape, not a single-cycle development, and it frames how any national-level transparency finding should be understood going forward.

Continue reading

Against that backdrop, this cycle's Croatia-specific signal is a probable one: Croatia has been named among eighteen Member States subject to a European Commission infringement procedure for incomplete notification of transposition measures implementing Articles 11, 12, 13 and 15 of the sixth Directive, the provisions governing access to beneficial-ownership information. The missed notification deadline was 10 July 2026. This finding is carried at probable confidence because it rests on secondary reporting of a Commission action rather than on a primary infringement decision document naming Croatia individually; no primary Commission text confirming Croatia's specific inclusion was independently retrieved this cycle. The structural reading, however, does not depend on resolving that confidence gap: being one of eighteen Member States flagged for the same notification shortfall indicates a EU-wide transposition lag on beneficial-ownership access provisions, not a Croatia-specific enforcement failure.

The timing of this gap is also notable in light of the Anti-Money Laundering Regulation's direct-applicability date of 10 July 2027, exactly one year after the missed 6AMLD notification deadline. From that date, large parts of the current national-law-plus-Directive structure for substantive AML obligations will be superseded by the directly-applicable Regulation, though the Directive's beneficial-ownership access provisions remain a distinct transposition obligation running on its own track. General industry practice has not yet adjusted obliged-entity customer due diligence and reporting workflows to the incoming single rulebook, which means the current transposition gap and the forthcoming direct-applicability shift are, for now, running on parallel but not yet reconciled timelines.

Outlook

The marker to watch is whether Croatia notifies complete transposition of the Articles 11, 12, 13 and 15 access provisions before the Anti-Money Laundering Authority's supervisory perimeter becomes operationally significant, and before the Anti-Money Laundering Regulation's 10 July 2027 direct-applicability date arrives. Given that the current finding rests on probable-confidence secondary reporting, a primary Commission decision naming Croatia specifically, if and when it surfaces, would sharpen this picture considerably. As scheduled, the structural shift toward hybrid EU-level supervision continues regardless of how quickly this specific notification gap is resolved.

Cumulative analysis

Beneficial Ownership and Corporate Transparency — Cumulative Analysis

This is the initial baseline synthesis of the beneficial-ownership and corporate-transparency posture of Croatia, established at issue W27. Croatia, as an EU and EEA member state, sits directly inside the perimeter of the EU AML Package, and the Package is the durable structural backdrop against which every cycle of Croatian beneficial-ownership signal should be read going forward. The Package comprises three distinct instruments. The AML Regulation, or AMLR, under Regulation (EU) 2024/1624, is directly applicable law across all EU member states including Croatia from 10 July 2027, replacing the current AMLTFL private-sector rulebook with a single harmonised rulebook covering customer due diligence, beneficial ownership and cash-payment limits. The sixth AML Directive, or 6AMLD, under Directive (EU) 2024/1640, requires national transposition by the same 10 July 2027 deadline, restructuring the FIU functions and supervisory architecture of AMLO. The AMLA Regulation, under Regulation (EU) 2024/1620, established the Anti-Money Laundering Authority, operational in Frankfurt since mid-2025 under confirmed chair Bruna Szego, which is building out a direct and indirect supervision perimeter shifting financial-crime supervision from a purely national model toward a hybrid EU-level regime, with EBA and ESMA technical-standards development continuing through 2025 and 2026.

Against that structural backdrop, the standing domestic finding for Croatia is that the centralised beneficial-ownership register, nominally public under 5AMLD transposition, is gated by an e-identification requirement available only to Croatian citizens and residents of a small number of other EU states, blocking genuine public and investigative access. Global Witness and Transparency International both independently rate this a structural red failure, and the restriction is not abstract: it featured directly in the Perencevic, Velesstroy and Jadranka ownership-layering case, where foreign investigators and journalists could not verify true Croatian corporate ownership without local intermediaries holding the required access credential. No Croatian national 6AMLD transposition legislation has been identified to date, and the EU high-risk third-country list was separately amended this cycle via Delegated Regulations (EU) 2026/46 and (EU) 2026/83, an obligation Croatia must apply through enhanced due diligence under national AMLTFL rules, alongside a continuing divergence between the EU list and the separate UK advisory list.

The integrated reading across this baseline cycle is that the formal EU-level architecture, AMLR, 6AMLD and AMLA together, is well specified and on a fixed 10 July 2027 timeline, while the domestic Croatian implementation of beneficial-ownership transparency remains gated by a design choice, the e-identification restriction, that predates and is not automatically resolved by the incoming EU rulebook.

Outlook

The single most consequential structural date for this domain remains 10 July 2027, when the AMLR becomes directly applicable and the 6AMLD transposition deadline falls due simultaneously. General EU member-state practice suggests draft transposition legislation typically appears twelve to eighteen months ahead of deadline; no Croatian text has yet been identified, and future cycles should track whether one emerges within that window. The central open question carried forward from this baseline cycle is whether the 6AMLD transposition process is used to reform the e-identification gate on beneficial-ownership register access, since the AMLR and BORIS interconnection standards will require a functioning cross-border verification mechanism that the current access model does not support.

domain_sub_briefs · D2 · Cumulative analysis
Standing baseline position

Infringement procedure open; 6AMLD Arts 11/12/13/15 BO-access transposition incomplete as at 28 Sept 2026 reporting.

Periodic updates (1)
25 Oct 2026 · fim-2026-10-25

Beneficial Ownership and Corporate Transparency

The durable structural backdrop against which any Member State's beneficial-ownership signal should be read is the European Union's Anti-Money Laundering Package, which is built from three distinct instruments rather than one. The Anti-Money Laundering Regulation is directly applicable across Member States without need for domestic transposition; the sixth Anti-Money Laundering Directive is transposed individually by each Member State into its own national law; and the Anti-Money Laundering Authority Regulation establishes a new EU-level supervisory body whose direct and indirect supervision perimeter is intended to shift oversight of cross-border and higher-risk obliged entities away from purely national competent authorities and toward a hybrid EU-level regime. This architecture is a structural fact of the current compliance landscape, not a single-cycle development, and it frames how any national-level transparency finding should be understood going forward.

Against that backdrop, the Croatia-specific signal is a probable one: Croatia has been named among eighteen Member States subject to a European Commission infringement procedure for incomplete notification of transposition measures implementing Articles 11, 12, 13 and 15 of the sixth Directive, the provisions governing access to beneficial-ownership information. The missed notification deadline was 10 July 2026. This finding is carried at probable confidence because it rests on secondary reporting of a Commission action rather than on a primary infringement decision document naming Croatia individually; no primary Commission text confirming Croatia's specific inclusion was independently retrieved. The structural reading, however, does not depend on resolving that confidence gap: being one of eighteen Member States flagged for the same notification shortfall indicates a EU-wide transposition lag on beneficial-ownership access provisions, not a Croatia-specific enforcement failure.

The timing of this gap is also notable in light of the Anti-Money Laundering Regulation's direct-applicability date of 10 July 2027, exactly one year after the missed 6AMLD notification deadline. From that date, large parts of the current national-law-plus-Directive structure for substantive AML obligations will be superseded by the directly-applicable Regulation, though the Directive's beneficial-ownership access provisions remain a distinct transposition obligation running on its own track. General industry practice has not yet adjusted obliged-entity customer due diligence and reporting workflows to the incoming single rulebook, which means the current transposition gap and the forthcoming direct-applicability shift are, for now, running on parallel but not yet reconciled timelines.

Outlook

The marker to watch is whether Croatia notifies complete transposition of the Articles 11, 12, 13 and 15 access provisions before the Anti-Money Laundering Authority's supervisory perimeter becomes operationally significant, and before the Anti-Money Laundering Regulation's 10 July 2027 direct-applicability date arrives. Given that the current finding rests on probable-confidence secondary reporting, a primary Commission decision naming Croatia specifically, if and when it surfaces, would sharpen this picture considerably. As scheduled, the structural shift toward hybrid EU-level supervision continues regardless of how quickly this specific notification gap is resolved.

D3 Enabler Jurisdictions

no_changestanding position

Enabler Jurisdictions and Professional Facilitators

Croatia functions this cycle as a mixed enabler and target jurisdiction rather than a clean example of either category. The Perencevic and Filipovic laundering network relied on a genuinely cross-jurisdictional enabling architecture: Croatian real-estate sale contracts provided the layering instrument, a Hong Kong-administered trust and Cypriot holding vehicles provided the offshore ownership structure, and personal Austrian bank accounts provided the payment rail for Russia-sourced funds. No single jurisdiction in this chain was solely responsible for the scheme functioning; each contributed a distinct enabling function, and the architecture depended on the professional intermediaries, notary services, and corporate-formation agents needed to establish and maintain the Cypriot and Hong Kong vehicles and to execute the fictitious Croatian real-estate contracts.

Continue reading

The restricted-access beneficial-ownership register of Croatia compounds this enabler dynamic by removing a natural verification check on cross-border ownership. Foreign investigators, journalists and non-resident counterparties cannot verify true Croatian corporate ownership without engaging a local intermediary who holds the required e-identification credentials, sustaining a structural opacity gap that professional facilitators can exploit in cross-border ownership layering. This is not a case of Croatia deliberately choosing permissiveness as a competitive strategy in the way some enabler jurisdictions do; the restriction originates in an identity-verification design choice within 5AMLD transposition rather than in a deliberate low-transparency policy, but the practical effect on investigative access is materially similar regardless of intent.

Outlook

The enabler-jurisdiction assessment for Croatia should track two developments over the coming cycles: whether 6AMLD transposition, due by 10 July 2027, reforms the e-identification access restriction on the beneficial-ownership register, and whether any prosecutorial or asset-recovery outcome emerges from the Perencevic and Filipovic case beyond the original UK and US designations. No such outcome has been reported to date, and the absence of confirmed enforcement follow-through is itself an analytically significant enablement signal distinct from the formal technical-compliance improvements recorded by MONEYVAL.

Cumulative analysis

Enabler Jurisdictions and Professional Facilitators — Cumulative Analysis

This is the initial baseline synthesis of the enabler-jurisdiction posture of Croatia, established at issue W27. The standing characterisation is that Croatia functions as a mixed enabler and target jurisdiction rather than a clean example of either category. The evidentiary anchor for this baseline is the Perencevic and Filipovic laundering network, which relied on a genuinely cross-jurisdictional enabling architecture: Croatian real-estate sale contracts provided the layering instrument, a Hong Kong-administered trust and Cypriot holding vehicles provided the offshore ownership structure, and personal Austrian bank accounts provided the payment rail for Russia-sourced funds. No single jurisdiction in this chain was solely responsible for the scheme functioning; each contributed a distinct enabling function, and the architecture depended on the professional intermediaries, notary services, and corporate-formation agents needed to establish and maintain the Cypriot and Hong Kong vehicles and to execute the fictitious Croatian real-estate contracts.

A second, structurally reinforcing baseline finding is that the restricted-access beneficial-ownership register of Croatia compounds the enabler dynamic by removing a natural verification check on cross-border ownership. Foreign investigators, journalists and non-resident counterparties cannot verify true Croatian corporate ownership without engaging a local intermediary who holds the required e-identification credentials, sustaining a structural opacity gap that professional facilitators can exploit in cross-border ownership layering. This is distinct from a deliberate low-transparency policy choice of the kind associated with some enabler jurisdictions; the restriction originates in an identity-verification design choice within 5AMLD transposition, but the practical effect on investigative access is materially similar regardless of intent, and this distinction between capacity-driven and choice-driven enablement is the analytical frame this domain will carry into future cycles.

Outlook

Two developments should be tracked across coming cycles to update this baseline: whether 6AMLD transposition, due by 10 July 2027, reforms the e-identification access restriction on the beneficial-ownership register, and whether any prosecutorial or asset-recovery outcome emerges from the Perencevic and Filipovic case beyond the original UK and US designations. Neither has occurred as of this baseline cycle, and the absence of confirmed enforcement follow-through is itself an analytically significant enablement signal, distinct from and running counter to the formal technical-compliance improvements recorded by MONEYVAL over the same period.

domain_sub_briefs · D3 · Cumulative analysis
Periodic updates (1)
21 Sep 2026 · fim-2026-08-05

Enabler Jurisdictions

Cambodia is this cycle's enabler-jurisdiction signal, and the notable feature is its source: National Bank of Cambodia Governor Chea Serey has publicly warned of renewed risk of a third FATF grey-list placement, tied to scam-hub and casino- and DNFBP-linked laundering. A jurisdiction's own central-bank governor volunteering this risk assessment is a stronger enforcement-urgency signal than an externally-sourced risk assessment, and it indicates the domestic authorities themselves now assess the casino/DNFBP weak point identified in FATF's 2023 follow-up report as unresolved. The Governor's warning is paired with a second national risk assessment and intensified licence revocations, suggesting the domestic supervisory response is escalating ahead of any formal FATF re-listing decision rather than only in reaction to one.

The professional-facilitator dimension here runs through the casino and DNFBP sector specifically — the same sector FATF flagged as the structural weak point in 2023 — rather than through banks or other regulated financial institutions, which is consistent with Cambodia's broader risk profile as an enabler jurisdiction for scam-hub-adjacent laundering rather than for traditional correspondent-banking abuse.

Outlook

The decisive near-term marker is whether Cambodia's second national risk assessment and licence-revocation activity produce visible structural change in the casino/DNFBP sector before any FATF plenary re-listing decision; a purely administrative national risk assessment without accompanying revocation follow-through would leave the underlying weak point unresolved. This sub-brief is flagged as limited-signal this cycle: the finding rests on a single, high-confidence Tier-1 development rather than a broader corroborated pattern, and further primary-source reporting on the national risk assessment's substantive findings would materially strengthen next cycle's read.

D4 Conflict Finance

no_changestanding position

Conflict Finance and Extractive-Industry Integrity

Croatia carries only a secondary and indirect conflict-finance signal this cycle, and this sub-brief is accordingly thinner than the other five domains, consistent with the honesty-over-coverage principle rather than an invented narrative. The commercial ports of Croatia, including Rijeka, Ploce, Split and Dubrovnik, sit within the broader EU shadow-fleet exposure corridor that is implicated in sustaining Russian war-economy oil-revenue flows, following the designation of 117 additional shadow-fleet vessels in the 19th EU sanctions package adopted 23 October 2025 and a further 41 vessels designated in December 2025, pushing the total toward 600. This is a transit-conduit exposure rather than a direct extractive-industry or conflict-finance finding specific to Croatia; the vacuum-gas-oil import derogation held by Croatia is a narrow, product-specific exception within this wider architecture rather than an independent conflict-finance channel in its own right. No Croatia-specific extractive-industry integrity finding, such as a mining-sector or commodity-trading corruption case, has been identified this cycle, and no direct evidence connects Croatian financial institutions to armed-conflict financing beyond this secondary transit-exposure reading.

Continue reading

Outlook

Because the Croatian conflict-finance signal this cycle is entirely derivative of the broader EU shadow-fleet architecture tracked under the sanctions-architecture domain, no independent Croatia-specific conflict-finance trajectory can be projected at this time. Future cycles should watch whether Croatian ports register any direct vessel-detention or cargo-inspection action connected to shadow-fleet transit, which would elevate this domain from a watch-status secondary exposure to an active domain carrying its own enforcement record and a corresponding upgrade in signal strength.

Cumulative analysis

Conflict Finance and Extractive-Industry Integrity — Cumulative Analysis

This is the initial baseline synthesis of the conflict-finance and extractive-industry posture of Croatia, established at issue W27, and it remains a thin baseline reflecting genuinely limited signal rather than an invented narrative. The standing finding is that Croatia carries a secondary and indirect conflict-finance exposure through its commercial port network, including Rijeka, Ploce, Split and Dubrovnik, which sits within the broader EU shadow-fleet exposure corridor implicated in sustaining Russian war-economy oil-revenue flows. This corridor expanded materially through 2025, with 117 additional shadow-fleet vessels designated in the 19th EU sanctions package adopted 23 October 2025 and a further 41 vessels designated in December 2025, pushing the total toward 600. Croatia additionally holds an EU-granted vacuum-gas-oil import derogation, which is best characterised as a narrow, product-specific exception within this wider transit-exposure architecture rather than an independent conflict-finance channel. No Croatia-specific extractive-industry integrity finding, such as a mining-sector or commodity-trading corruption case, has been identified in this baseline cycle, and this domain will carry forward as a watch-status domain, derivative of the sanctions-architecture domain, unless and until independent Croatia-specific findings emerge.

Outlook

Because this baseline signal is entirely derivative of the broader EU shadow-fleet architecture, no independent Croatia-specific conflict-finance trajectory can be projected. The domain should be re-assessed for elevation from watch to active status if Croatian ports register any direct vessel-detention or cargo-inspection action connected to shadow-fleet transit, or if any extractive-industry-specific finding emerges in future cycles.

domain_sub_briefs · D4 · Cumulative analysis
Periodic updates (1)
21 Sep 2026 · fim-2026-08-05

Conflict Finance

The Houthi war-economy's refined-petroleum revenue channel is the conflict-finance signal of this cycle. OFAC sanctioned three vessels and their owners on 16 January 2026 for supplying refined petroleum to Houthi-controlled Yemeni ports, building directly on the 2025 FTO re-designation of Ansarallah and a preceding round of Yemen-bank designations. The petroleum discharge revenue is described in the underlying Treasury materials as funding, in particular, the Houthi movement's missile, uncrewed-aerial-vehicle, and naval-mine capability — placing this squarely in conflict-finance rather than general sanctions-evasion territory, since the analytical question is not merely who moved value but what that value purchased operationally.

Two independent Tier-1 US Treasury press releases corroborate the channel directly, a materially stronger evidentiary basis than the single-source findings that dominate several other threads this cycle. The customer-typology tag attached to this finding — correspondent banking — indicates that, notwithstanding the physical-commodity character of the underlying trade, value ultimately intersects the formal financial system through correspondent relationships, the control point most relevant to institutions assessing their own exposure to this conflict-finance architecture.

Read architecture-over-incident, the significant fact is not this single designation round but its place in a sustained cadence: repeated vessel and facilitator designations against the same revenue channel since the 2025 FTO re-designation indicate that petroleum-discharge revenue has proven durable and adaptive under sanctions pressure. The CTF pillar is the operative frame here rather than AML, deliberately weighted to correct for the structural AML-volume bias the three-pillar-balance principle flags: sanctions-designation volume against this channel is real, but the underlying analytical significance is the conflict-financing outcome the revenue purchases, not the designation count itself.

Outlook

The test for the coming cycle is whether the refined-petroleum channel contracts in volume following this designation round or whether new vessels and owners simply substitute for those now designated. Continued OFAC designation activity against this channel should be read as evidence the channel remains open and adaptive rather than as evidence of diminishing enforcement priority. This sub-brief is flagged limited-signal this cycle pending further Treasury reporting on channel volume.

D5 Crypto / Digital Assets / Financial Innovation

stablestanding position

Crypto, Digital Assets, and Financial Innovation

The domestic regulatory perimeter for virtual-asset service providers in Croatia carries an unresolved definitional gap. Croatian VASPs are registered and subject to AML and CFT obligations under the national AMLTFL, and customer due diligence applies in substance, but the transfer of virtual assets as a discrete service is not captured within the formal VASP definition of Croatia. This leaves FATF Recommendation 15 rated only partially compliant by MONEYVAL and creates an exploitable seam for crypto-to-fiat laundering pipelines that structure activity to fall outside the discrete transfer-service definition.

Continue reading

Set against that definitional gap, Croatian law enforcement demonstrated a concrete operational advance in active-defence capability. Ministry of Interior investigators used commercial blockchain forensic tooling to trace a seed-phrase theft and the subsequent cross-chain laundering of approximately EUR 154,525.71 in Bitcoin. The stolen cryptocurrency was fragmented into numerous smaller transactions and moved across multiple blockchain addresses before consolidation and cash-out, and the investigation resulted in searches, seizure of digital evidence, and investigative custody of an Austrian suspect, with a criminal complaint filed against a Croatian accomplice.

These domestic developments sit inside a wider EU-level shift in the regulatory perimeter that Croatia, as an EU member state, must apply directly. The EU-wide MiCA transitional period closed on 1 July 2026, ending national grandfathering for virtual-asset and crypto-asset service providers; any Croatia-domiciled or Croatia-serving crypto firm without a granted Crypto-Asset Service Provider authorization must cease EU-facing services. DAC8 crypto-asset tax-reporting rules became applicable from 1 January 2026, adding a parallel tax-transparency obligation layer onto the AML perimeter. No HANFA or HNB CASP authorization decision data for Croatia-domiciled crypto firms following the 1 July 2026 transitional closure has been identified this cycle.

Outlook

The near-term question for the Croatian crypto and digital-asset perimeter is whether the domestic VASP definitional gap on Recommendation 15 is closed through the AMLR transposition process ahead of the 10 July 2027 application date, since the harmonised single rulebook is expected to capture virtual-asset transfer services more comprehensively than the current AMLTFL definition. Separately, the CASP authorization outcomes for Croatia-domiciled firms following the MiCA transitional closure remain an open and directly observable near-term data point for the coming cycle.

Cumulative analysis

Crypto, Digital Assets, and Financial Innovation — Cumulative Analysis

This is the initial baseline synthesis of the crypto and digital-asset posture of Croatia, established at issue W27. The standing structural finding is that the domestic VASP regulatory perimeter in Croatia carries an unresolved definitional gap: Croatian VASPs are registered and subject to AML and CFT obligations under the national AMLTFL, and customer due diligence applies in substance, but the transfer of virtual assets as a discrete service is not captured within the formal VASP definition. This leaves FATF Recommendation 15 rated only partially compliant by MONEYVAL and creates an exploitable seam for crypto-to-fiat laundering pipelines structured to fall outside the discrete transfer-service definition.

Against that structural gap, this baseline cycle records a concrete operational counterweight. Ministry of Interior investigators used commercial blockchain forensic tooling to trace a seed-phrase theft and the subsequent cross-chain laundering of approximately EUR 154,525.71 in Bitcoin, fragmented into numerous smaller transactions and moved across multiple blockchain addresses before consolidation and cash-out. The investigation resulted in searches, seizure of digital evidence, and investigative custody of an Austrian suspect, with a criminal complaint filed against a Croatian accomplice, establishing a durable evidentiary point that Croatian law enforcement is adopting modern forensic capability even where the underlying legal definition has not yet closed.

These domestic findings sit inside a wider EU-level perimeter shift that Croatia, as an EU member state, must apply directly rather than at its own discretion. The EU-wide MiCA transitional period closed on 1 July 2026, ending national grandfathering for virtual-asset and crypto-asset service providers, so that any Croatia-domiciled or Croatia-serving crypto firm without a granted Crypto-Asset Service Provider authorization must cease EU-facing services. DAC8 crypto-asset tax-reporting rules became applicable from 1 January 2026, layering a parallel tax-transparency obligation onto the AML perimeter. No HANFA or HNB CASP authorization decision data for Croatia-domiciled crypto firms following the transitional closure has been identified in this baseline cycle, which is an open data gap rather than a confirmed negative finding.

Outlook

The central open question carried forward from this baseline is whether the domestic VASP definitional gap on Recommendation 15 is closed through the AMLR transposition process ahead of the 10 July 2027 application date, since the harmonised single EU rulebook is expected to capture virtual-asset transfer services more comprehensively than the current AMLTFL definition. The CASP authorization outcomes for Croatia-domiciled firms following the MiCA transitional closure remain an open and directly observable data point that future cycles should resolve.

domain_sub_briefs · D5 · Cumulative analysis
Standing baseline position

Full MiCA CASP authorisation mandatory from 1 July 2026; AML-only VASP route closed

MiCA transitional period for legacy VASPs in HR ended 2026-07-01; only MiCA-authorised CASPs may now provide crypto-asset services. HANFA ordered Fima Plus d.o.o. to cease unauthorised crypto-asset services on 2026-07-29.

Periodic updates (2)
19 Oct 2026 · fim-2026-10-18

Crypto, Digital Assets, and Financial Innovation

Croatia's digital-asset regulatory perimeter completed a structural transition this cycle as the national transitional period for legacy virtual asset service providers under the Markets in Crypto-Assets Regulation ended on 1 July 2026. From that date forward, provision of crypto-asset services in Croatia requires authorisation from, and registration with, the Croatian Financial Services Supervisory Agency (HANFA). This is a confirmed, durable structural fact drawn directly from HANFA's own public notice: the transitional regime that had allowed legacy providers to continue operating without full MiCA authorisation has closed, and the regime is now a fully licensed one rather than one with a grandfathering carve-out.

Against this backdrop, a reported enforcement action illustrates what active supervision under the new regime may look like, though it is not yet confirmed to the same evidentiary standard. HANFA is said to have ordered Fima Plus d.o.o., on 29 July 2026, to cease unauthorised crypto-asset custody and execution services and to return client assets. This account rests on a single secondary press source and has not been corroborated against a primary HANFA enforcement notice, so it is carried as an uncertain development. If corroborated, it would be the first visible enforcement action following the close of the transitional window, pairing the regulatory deadline with a concrete supervisory consequence for a provider operating outside the authorised perimeter. Until a primary source is located, the action should be read as indicative of HANFA's posture rather than as an established precedent.

The architecture-over-incident reading here is that Croatia has moved from a permissive transitional posture to a licensing-only regime, and the Fima Plus matter, if confirmed, would be early evidence of enforcement follow-through rather than a one-off action in isolation. The absence of further enforcement signal this cycle beyond this single uncorroborated case is itself informative: it suggests either that the bulk of legacy providers are migrating to authorisation without incident, or that HANFA's broader enforcement activity has not yet surfaced in available sourcing.

Outlook

The near-term signal to watch is whether a primary HANFA enforcement notice for the Fima Plus matter emerges, which would convert an uncertain development into a confirmed one and establish a clearer enforcement baseline for the post-transitional regime. Beyond that single case, the closure of the transitional period makes further HANFA authorisation decisions the most likely source of continuing signal, as remaining legacy providers either obtain MiCA authorisation or exit the Croatian market.

28 Sep 2026 · fim-2026-09-28

Crypto, Digital Assets, and Financial Innovation

Croatia's crypto-asset AML/CFT perimeter tightened structurally on 1 July 2026 with the end of the MiCA transitional period. Prior to that date, virtual-asset service providers in Croatia could operate under a partial supervisory arrangement, subject to AML/CFT-Act oversight by HANFA without holding full MiCA Crypto-Asset Service Provider authorisation. That partial route has now closed: HANFA's own publication confirms that provision of crypto-asset services in Croatia is now mandatory-authorisation-only, meaning any AML/CFT gap that existed under the prior AML-only supervisory track has been folded into the harmonised, EU-wide MiCA licensing perimeter rather than persisting as a national side-channel.

From an AML/CFT architecture standpoint, this is significant precisely because it eliminates a structural seam rather than because it responds to a specific illicit-finance incident. A firm operating under AML/CFT-Act-only supervision was, by definition, outside the full prudential and conduct requirements MiCA CASP authorisation imposes, even while remaining inside HANFA's AML/CFT monitoring scope. Closing that seam means every crypto-asset firm still operating in Croatia now sits inside the same harmonised authorisation-and-supervision perimeter, which is the kind of structural tightening that a purely incident-driven enforcement narrative would miss entirely.

No HANFA enforcement action against a specific VASP that failed to transition by the 1 July 2026 deadline has been located in the evidence reaching this cycle. This absence is itself worth noting under an enablement-as-signal framing: whether the absence reflects full market compliance by the deadline or simply reflects that no enforcement action has yet been reported cannot be determined from the evidence available, and should not be read as evidence of either outcome specifically.

Outlook

The structural question to track is whether any firm that operated under the prior AML-only route has continued operating without securing CASP authorisation, and if so, whether HANFA takes a formal enforcement action. A second item to track is whether Croatia's crypto-asset AML/CFT perimeter interacts distinctly with the broader EU AML Package as AMLR implementation advances, given that crypto-asset service providers are among the obliged-entity categories the AMLR framework is designed to capture.

D6 Compliance Technology & Active Defence

no_changestanding position

Compliance Technology and Active Defence

The technical-compliance trajectory of Croatia is improving on paper across multiple sequential milestones. FATF formally removed Croatia from the Jurisdictions Under Increased Monitoring list on 13 June 2025 after the country completed its action plan, which included national risk-assessment completion, increased FIU capacity, improvements in law-enforcement detection, investigation and prosecution, application of provisional measures, terrorist-financing detection capability, and a national framework for UN targeted financial sanctions. MONEYVAL follow-up reports in October 2024 and March 2026 recorded successive re-ratings across the Recommendations 1, 2, 6, 7, 15, 33, 35 and 36, with Croatia directed to report back to MONEYVAL within one year of the March 2026 review, setting the next formal checkpoint for around the first quarter of 2027.

Continue reading

This improving formal trajectory sits alongside a persistent and structural capacity constraint. MONEYVAL follow-up reporting continues to flag insufficient State Attorney Office and financial-investigator staffing, hampering complex money-laundering prosecutions and the application of provisional measures needed to secure proceeds of crime. This is not a new or episodic finding; it recurs across the 2016, 2020 and 2023 National Risk Assessments of Croatia, indicating a structural rather than transitory resourcing gap.

A concrete active-defence adoption signal emerged this cycle when Ministry of Interior investigators used commercial blockchain forensic tooling to dismantle a cross-chain crypto-theft laundering ring, demonstrating that Croatian law enforcement is adopting modern forensic technology even while broader prosecutorial capacity remains constrained. At the EU level, the Anti-Money Laundering Authority became operational in Frankfurt in mid-2025 under confirmed chair Bruna Szego and continues building out its direct and indirect supervisory perimeter, with EBA and ESMA technical-standards development ongoing through 2025 and 2026, ahead of the Croatian AMLR application and 6AMLD transposition deadline of 10 July 2027.

Outlook

The compliance-technology trajectory for Croatia over the coming cycles will be tested by two converging pressures: whether the State Attorney Office and financial-investigator capacity deficit is addressed with concrete staffing commitments ahead of the next MONEYVAL checkpoint in around the first quarter of 2027, and whether AMLA begins to establish a direct-supervision perimeter, expected to select its first cohort of high-risk cross-border obliged entities in 2028, that could include a Croatia-domiciled or Croatia-exposed entity. The formal-versus-structural divergence identified this cycle, namely improving technical-compliance ratings against a persistent enforcement-capacity constraint, is the central active-defence question for Croatia going forward.

Cumulative analysis

Compliance Technology and Active Defence — Cumulative Analysis

This is the initial baseline synthesis of the compliance-technology and active-defence posture of Croatia, established at issue W27. The standing trajectory is one of improving formal compliance across multiple sequential milestones set against a persistent structural capacity constraint. FATF formally removed Croatia from the Jurisdictions Under Increased Monitoring list on 13 June 2025 after the country completed its action plan, covering national risk-assessment completion, increased FIU capacity, improvements in law-enforcement detection, investigation and prosecution, application of provisional measures, terrorist-financing detection capability, and a national framework for UN targeted financial sanctions. MONEYVAL follow-up reports in October 2024 and March 2026 recorded successive re-ratings across Recommendations 1, 2, 6, 7, 15, 33, 35 and 36, with Croatia directed to report back within one year of the March 2026 review, setting the next formal checkpoint for around the first quarter of 2027.

Running alongside this improving formal trajectory, and unresolved by it, is a persistent and structural capacity constraint: MONEYVAL follow-up reporting continues to flag insufficient State Attorney Office and financial-investigator staffing, hampering complex money-laundering prosecutions and the application of provisional measures needed to secure proceeds of crime. This finding recurs across the 2016, 2020 and 2023 National Risk Assessments of Croatia, establishing it as a structural rather than transitory resourcing gap that this baseline carries forward as the central unresolved question for the domain.

A concrete active-defence adoption signal in this baseline cycle is the use by Ministry of Interior investigators of commercial blockchain forensic tooling to dismantle a cross-chain crypto-theft laundering ring, demonstrating that Croatian law enforcement is adopting modern forensic technology even while broader prosecutorial capacity remains constrained. At the EU level, the Anti-Money Laundering Authority became operational in Frankfurt in mid-2025 under confirmed chair Bruna Szego and continues building its direct and indirect supervisory perimeter, with EBA and ESMA technical-standards development ongoing through 2025 and 2026, ahead of the Croatian AMLR application and 6AMLD transposition deadline of 10 July 2027.

Outlook

The compliance-technology trajectory for Croatia will be tested over coming cycles by two converging pressures carried forward from this baseline: whether the State Attorney Office and financial-investigator capacity deficit is addressed with concrete staffing commitments ahead of the next MONEYVAL checkpoint around the first quarter of 2027, and whether AMLA begins to establish a direct-supervision perimeter, expected to select its first cohort of high-risk cross-border obliged entities in 2028, that could include a Croatia-domiciled or Croatia-exposed entity. The formal-versus-structural divergence established in this baseline, improving technical-compliance ratings against a persistent enforcement-capacity constraint, remains the central active-defence question for Croatia going forward.

domain_sub_briefs · D6 · Cumulative analysis

D7 AML/CTF Regime

stablestanding position

AML/CTF Regime

Croatia's technical-compliance trajectory against the FATF 40 Recommendations moved structurally forward this cycle. MONEYVAL's January 2026 follow-up assessment re-rated Croatia Largely Compliant on Recommendation 8, which governs the AML/CFT treatment of non-profit organisations, correcting technical-compliance deficiencies that had previously constrained Croatia's standing on this Recommendation. The re-rating brings Croatia's overall standing across all 40 FATF Recommendations to 7 rated Compliant, 27 rated Largely Compliant, and 3 rated Partially Compliant, with none rated Non-Compliant, a distribution that places Croatia comfortably within a technically well-regarded AML/CFT jurisdiction by FATF's own assessment architecture, even as specific gaps remain.

Continue reading

The most significant of those remaining gaps sits on Recommendation 24, covering beneficial-ownership transparency, which MONEYVAL's follow-up confirms remains rated Partially Compliant and was not actioned in this particular follow-up round. The architecture-over-incident framing here matters: an outstanding Partially Compliant rating that persists unchanged across a follow-up round is not a null finding, it is a structural signal that Croatia's beneficial-ownership registry or verification mechanism has not yet closed the specific deficiency FATF identified, even while adjacent Recommendations have moved favourably.

Structurally, Croatia's binding relationship to the EU AML Package is also worth stating plainly: as an EU-27 member state, Croatia will be bound directly by the AML Regulation (AMLR) once it takes effect, through direct application rather than national transposition, distinguishing it from the sixth AML Directive (6AMLD), which Member States transpose individually. No Croatia-specific 6AMLD transposition status or AMLA direct/indirect supervisory-perimeter development for Croatia specifically was located this cycle; this structural fact is stated as backdrop rather than as evidence of any Croatia-specific movement this cycle.

Outlook

The principal item to track is whether a future MONEYVAL follow-up round actions Croatia's outstanding Recommendation 24 rating on beneficial-ownership transparency, which would close the last remaining substantive gap in an otherwise strong technical-compliance record. A second item is whether Croatia's national implementing measures for 6AMLD transposition, or its engagement with AMLA's emerging supervisory perimeter, surface as distinct developments in a subsequent cycle.

Standing baseline position

7 Compliant, 27 Largely Compliant (incl. R.8 upgraded), 3 Partially Compliant of 40 Recommendations

D8 Commercial Activity

no_changestanding position

Commercial Activity

The principal commercial-activity development this cycle is the completed merger by acquisition of Croatia Banka by Hrvatska postanska banka (HPB), a domestic bank-consolidation event that closed out a regulatory approval sequence spanning roughly seven months. HPB signed a share-purchase agreement for 100 percent of Croatia Banka, valued at EUR 15 million, on 4 March 2026, with the Croatian Deposit Insurance Agency as seller. The Croatian Competition Agency cleared the concentration in Phase I, the European Central Bank approved the associated qualifying holding, the purchase itself closed on 1 September 2026, and Hrvatska narodna banka issued final approval of the merger by acquisition on 30 September 2026. Each stage of this sequence is confirmed directly from HPB's own issuer disclosures and the associated Zagreb Stock Exchange filing.

Continue reading

The analytical significance of this transaction lies in its structure rather than its size: a EUR 15 million deal is modest in absolute terms, but the layered clearance chain running through a national competition authority, a supranational prudential supervisor, and the national central bank is characteristic of an orderly, closely supervised consolidation in a banking sector where regulators are actively shaping structure through formal review processes rather than through informal pressure or distressed resolution. The completion of this chain, culminating in HNB's September 2026 approval, represents the final removal of regulatory uncertainty around the transaction and effectively concludes a multi-institution integration process that has been visible in Croatian banking-sector reporting since the initial signing in March.

No other HR-specific commercial-activity development met the materiality bar this cycle; the HPB/Croatia Banka transaction stands as the sole confirmed signal in this domain.

Outlook

With every regulatory clearance now obtained and the merger legally completed, subsequent developments relating to this transaction are likely to take the form of post-merger integration disclosures (branch consolidation, staffing, or balance-sheet reporting) rather than further approval milestones. Beyond this transaction, continued consolidation among smaller domestic lenders remains a plausible pattern to monitor, though no further HR-specific signal of this kind was identified this cycle.

Regulatory horizon
Adopted2027-Q3 · ±half_year

AMLR / 6AMLD application date

From 10 July 2027, the Anti-Money Laundering Regulation (Reg 2024/1624) becomes directly applicable in Croatia without a national transposing act, replacing the current national-law-plus-directive structure for substantive AML obligations.
Source
1 dated · 4 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

A new EU Council sanctions listing is directly binding and a beneficial-ownership transposition gap has been flagged at EU level.

Screening systems should already reflect Council Decision (CFSP) 2026/2332 as it is automatically binding via the national restrictive-measures law. Separately, the probable 6AMLD transposition gap on beneficial-ownership access provisions may affect the completeness of ownership information available for customer due diligence purposes, pending resolution.

2 evidence refs
Compliance

Croatia is named among eighteen Member States in a Commission infringement procedure over incomplete 6AMLD beneficial-ownership transposition.

The gap concerns notification of transposition measures for Articles 11, 12, 13 and 15 of the sixth Directive, missed against a 10 July 2026 deadline. This sits alongside the 10 July 2027 direct-applicability date for the Anti-Money Laundering Regulation, creating a compliance landscape in transition.

1 evidence refs
Legal

Croatia implements the new EU Council sanctions listing directly through its Law on Restrictive Measures with no autonomous divergence.

Council Decision (CFSP) 2026/2332 of 15 October 2026 is binding on Croatia as an EU Member State without a separate domestic legislative act, via Official Gazette 133/23.

2 evidence refs
Board

Croatia's mutual evaluation standing remains favourable while a transparency-transposition gap has surfaced at EU level.

The MONEYVAL third enhanced follow-up report leaves Croatia compliant or largely compliant on 34 of 37 Recommendations, a stable reputational position. The infringement procedure naming Croatia among eighteen states is a probable-confidence signal of administrative lag rather than a substantive enforcement finding against Croatia specifically.

2 evidence refs
CTO

No material change for this persona this cycle.

No material change for this persona this cycle

Risk

A structural gap between sanctions-implementation efficiency and beneficial-ownership transparency has emerged in Croatia's risk profile.

Sanctions screening against the newly designated individuals and entities operates on a functioning implementation channel, while the parallel beneficial-ownership access gap may, if unresolved, weaken the quality of ownership information underpinning that same screening over time.

2 evidence refs
Operations

No material change for this persona this cycle.

No material change for this persona this cycle

Audit

The beneficial-ownership transposition finding currently rests on secondary reporting rather than a primary Commission decision document.

Audit trail documentation for this finding should note that no primary infringement decision naming Croatia specifically was retrieved this cycle; the finding is carried at probable confidence pending that primary source.

1 evidence refs
Scenario sketches

Transition from national transposition to hybrid EU-level supervision of beneficial ownership

Illustrative scenario for analytical orientation only. As the Anti-Money Laundering Authority's direct and indirect supervision perimeter takes shape alongside the directly-applicable Anti-Money Laundering Regulation, a Member State currently working through a sixth Directive beneficial-ownership transposition gap could find itself navigating two supervisory tracks simultaneously: closing the existing national notification gap under the old Directive-based structure, while adjusting obliged-entity workflows to a new single rulebook that in parallel removes the need for national transposition on substantive obligations. The friction point, illustratively, is the handover period during which a notification gap on the old track coexists with direct applicability on the new one, with no guarantee the two are reconciled on the same timetable. This is architecture-over-incident framing of a structural possibility, not an observed fact or a prediction.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architecturematerial_changeEU Council designations (15 Oct 2026) against Russia-sanctions-circumvention intermediaries, directly binding on Croatia.
T2 · EU AML Package / AMLAmaterial_changeCroatia named among 18 Member States subject to Commission infringement procedure for incomplete 6AMLD Arts 11/12/13/15 transposition.
T3 · FATF Grey Listno_changeCroatia is not on the FATF grey list; no new plenary or MER action found this cycle.
T4 · Beneficial-Ownership Register StatuswatchCroatia's BO-register-access transposition under 6AMLD is incomplete per the Commission's infringement action.
T5 · Crypto & Digital-Asset IntegritystableCroatia's MiCA transitional period for legacy VASPs ended 1 July 2026 with 5 of 17 VASPs completing CASP authorisation in time.
T6 · Sanctions Regime Divergenceno_changeNo EU/US/UK autonomous-listing divergence event found this cycle; Croatia continues direct EU-listing implementation.
Registers

Enforcement actions

  • 25 Oct 2024
  • 13 Jun 2025
  • 23 Mar 2026
  • 14 Dec 2025
  • Second Enhanced Follow-Up Report on Croatia found progress addressing MER technical-compliance deficiencies, re-rating the country on multiple FATF Recommendations following the 2021 Mutual Evaluation. 25 Oct 2024
  • The FATF, following joint FATF-MONEYVAL plenary review, formally removed Croatia from the list of Jurisdictions Under Increased Monitoring after determining it had substantially completed its action plan. 13 Jun 2025
  • Further MONEYVAL follow-up report on Croatia recorded continued technical-compliance progress and additional Recommendation re-ratings since the 2024 FUR. 23 Mar 2026
  • MUP investigators used blockchain forensic tooling to trace a seed-phrase theft and subsequent cross-chain laundering of approximately EUR 154,525.71 in Bitcoin, resulting in searches, seizure of digital evidence, and investigative custody of a suspect. 14 Dec 2025

Sanctions changes

  • 23 Oct 2025
  • 18 Dec 2025
  • 4 Dec 2025
  • 16 Jan 2026
  • 30 Jun 2026
  • 15 Oct 2026
  • EU's 19th sanctions package against Russia eliminated the transaction exemption for Rosneft and Gazprom Neft oil/gas imports, imposed a phased LNG import ban, added 117 vessels to the shadow-fleet list (total 557), and for the first time extended measures to crypto infrastructure; directly applicable to Croatia as an EU member state. 23 Oct 2025
  • EU Council designated 41 additional shadow-fleet vessels (bringing the EU total to almost 600) subject to port-access and maritime-services bans, alongside a new EU declaration on shadow-fleet risks to critical undersea infrastructure, applicable across all EU member states including Croatia's Adriatic ports. 18 Dec 2025
  • European Commission adopted Delegated Regulations (EU) 2026/46 and (EU) 2026/83 amending the EU list of third countries with strategic AML/CFT deficiencies (the EU high-risk third-country list), which Croatia, as an EU member, must apply via enhanced due diligence obligations on its obliged entities under national AMLTFL rules. 4 Dec 2025

Regulatory horizon (register)

  • AMLA Work Programme / build-out
  • UK Economic Crime and Corporate Transparency Act 2023 — failure-to-prevent-fraud offence (s.199)
  • EU AML Package — AMLR/6AMLD/AMLA phased application and transposition
  • AMLA Work Programme / build-out
  • AMLR / 6AMLD application date
  • EU AML Regulation (AMLR) becomes directly applicable
  • 6AMLD transposition deadline for Croatia
  • AMLA direct-supervision perimeter expansion
  • Next MONEYVAL follow-up report on Croatia

Active schemes

  • PEP-linked Russia-tied laundering via Croatian real estate/trusts
  • Adriatic port/shadow-fleet exposure and product-specific derogation
  • Seed-phrase theft to cross-chain cash-out pipeline
  • Restricted-access beneficial ownership register exploitation
Sources
  1. HANFA
  2. FinCEN
  3. FATF
  4. OFAC
  5. U.S. Department of the Treasury
  6. UK Home Office
  7. Central Banking
  8. eucrim
  9. Coinfomania
  10. Eversheds Sutherland
  11. HANFA
  12. Croatian National Bank (HNB)
  13. Coinfomania
  14. Central Banking
  15. AML Compliance Unit (Ireland)
  16. eucrim
  17. SiGMA
  18. FATF
  19. FinCEN
  20. Miller & Chevalier
  21. OFAC
  22. U.S. Department of the Treasury
  23. U.S. Department of the Treasury
  24. UK Home Office
  25. Practical Law (Thomson Reuters)
  26. https://www.fatf-gafi.org/en/countries/detail/Croatia.html
  27. https://www.fatf-gafi.org/en/publications/Mutualevaluations/Croatia-FUR-MONEYVAL-2024.html
  28. https://www.coe.int/en/web/moneyval/-/croatia-has-improved-its-compliance-with-the-fatf%C2%B4s-recommendation-on-non-profit-organisations-says-council-of-europe-moneyval-committee
  29. https://www.coe.int/en/web/moneyval/-/croatia-has-improved-its-preventive-framework-to-combat-money-laundering
  30. https://www.hanfa.hr/news/provision-of-crypto-asset-services-from-1-july-2026-crypto-licence-and-registration-in-hanfa-registers-mandatory-for-providers-consumers-urged-to-exercise-caution/
  31. https://rm.coe.int/cm-2026-144-en/48802e01cb
  32. https://fintelegram.com/binance-croatia-google-play-mica-app-restrictions/
  33. https://www.hpb.hr/en/publicly-disclosed-information/326
  34. https://eho.zse.hr/fileadmin/issuers/HPB/COI-HPB-f798e33dee6d53404377435c59c77da1.pdf
  35. https://www.concurrences.com/en/bulletin/news-issues/july-2026-v/the-croatian-competition-authority-clears-in-phase-i-the-acquisition-of-sole
  36. https://visioncompliance.eu/hr/blog/sprecavanje-pranja-novca-aml-vodic
  37. https://www.consilium.europa.eu/en/press/press-releases/2026/10/15/closing-loopholes-council-lists-individuals-and-entities-for-circumventing-eu-sanctions/
  38. https://www.ifcreview.com/news/2026/october/eu-eu-member-states-told-to-comply-with-6amld-beneficial-ownership-access-rules/
  39. https://www.coe.int/en/web/moneyval/-/outcome-of-moneyval-70th-plenary-meeting
  40. https://www.coe.int/en/web/portal/-/money-laundering-and-terrorist-financing-progress-reports-on-azerbaijan-croatia-and-estonia
  41. https://mvep.gov.hr/foreign-policy/restrictive-measures/271988
  42. https://rm.coe.int/moneyval-2025-17-hr-5th-round-3rd-enhanced-fur/48802a5864
  43. Mutual Evaluation of Croatia
  44. Croatia's progress in strengthening measures to tackle money laundering and terrorist financing
  45. Croatia
  46. Committee of Experts on the Evaluation of Anti-Money Laundering Measures (MONEYVAL)
  47. 1 Anti-money laundering and counter-terrorist financing measures Croatia
  48. Croatia's measures to combat money laundering and terrorist financing
  49. Jurisdictions under Increased Monitoring - 13 June 2025
  50. Consolidated assessment ratings
  51. Assessments
  52. Mutual Evaluations
  53. Croatia's progress in strengthening measures to tackle money laundering and terrorist financing
  54. Anti-money laundering and counter-terrorist financing measures Croatia
  55. Mutual Evaluation of Croatia
  56. Financial Action Task Force Identifies Jurisdictions with Anti-Money Laundering, Countering the Financing of Terrorism, and Counter-Proliferation Finance Deficiencies | FinCEN.gov
  57. Croatian Ministry of Interior Dismantles Cryptocurrency Fraud Ring | TRM Blog
  58. The FATF Recommendations
  59. Patchy progress in beneficial ownership registers in the EU | Global Witness
  60. Catalogue of Research Databases | OCCRP ID
  61. European e-Justice Portal - Beneficial Ownership Registers – search for beneficial ownership information
  62. Patchy Progress in Setting Up Public Beneficial Ownership Registers in the EU | Global Witness
  63. Guidance on Beneficial Ownership of Legal Persons
  64. European e-Justice Portal - Beneficial ownership registers interconnection system (BORIS)
  65. GO CROATIA LIMITED overview - Companies House - GOV.UK
  66. TI Report: EU Beneficial Ownership Registers Limited and Restricted | OCCRP
  67. Sanctioned Croatian Businessman Secretly Bankrolled Croatian Tourist Developer | OCCRP
  68. Beneficial Ownership Registers Interconnection System
  69. Cocaine and Bananas: How Balkan Traffickers Used Fruit Shipments From the Ecuadorian President's Family Firm to Smuggle Drugs | OCCRP
  70. Croatia Acts on Corruption | OCCRP
  71. Croatia: Leading Political Party Under Investigation for Corruption | OCCRP
  72. Businesses that have not complied with the money laundering regulations (2025 to 2026) - GOV.UK
  73. Corruption in Croatia: BRIBERY AS EXPERIENCED BY THE POPULATION
  74. Croatia: Football Bosses Jailed for Alleged Multi-Million Dollar Corruption | OCCRP
  75. Fight against money laundering and terrorist financing - Consilium
  76. Croatia's progress in strengthening measures to tackle money laundering and terrorist financing
  77. Sprečavanje pranja novca: Vijeće i Parlament postigli dogovor ...
  78. Sprečavanje pranja novca: Vijeće donijelo paket pravila
  79. Timeline: EU action against money laundering and terrorist financing - Consilium
  80. What the end of MiCA's transitional period means for crypto businesses
  81. Global Crypto Policy Review Outlook 2025/26 Report | TRM Labs
  82. What Is a VASP? Virtual Asset Service Provider - Chainalysis
  83. Virtual Asset Service Provider (VASP): Definition, Compliance & Examples
  84. Crypto-assets - Finance - European Commission
  85. MiCA's global reach: Why every crypto company needs a strategy
  86. DAC8 - Taxation and Customs Union - European Commission
  87. Crypto Adoption in Europe: The World’s Largest Crypto Market
  88. Crypto regulatory affairs: As MiCA takes effect, ESMA releases final guidance
  89. 2025 Crypto Regulatory Round-Up
  90. Croatian National Bank | EU Digital Finance Platform
  91. Anti-money laundering and countering the financing of terrorism at international level - Finance
  92. Special Measures | FinCEN.gov
  93. Russia's war of aggression against Ukraine: Council sanctions 41 vessels of the Russian shadow fleet - Consilium
  94. Daily News 18 / 12 / 2025
  95. 1 Red ALERT Shadow Fleet Sanctions Evasion and Avoidance Network
  96. EU sanctions against Russia: questions and answers - Consilium
  97. Croatia Investigates Disappearance of Yacht Linked to Russian Oligarch | OCCRP
  98. Council sanctions 41 vessels of the Russian shadow fleet
  99. Sanctions Programs and Country Information | Office of Foreign Assets Control
  100. EU adopts 19th package of sanctions against Russia - Finance
  101. 19th package of sanctions against Russia: EU targets Russian energy, third-country banks and crypto providers - Consilium
  102. Russia's war of aggression against Ukraine: Council sanctions 9 shadow fleet enablers - Consilium
  103. Croatian Oil Company Hit by Record Financial Embezzlement | OCCRP
  104. STATEMENT OF THE MINISTRY OF JUSTICE, ADMINISTRATION AND LOCAL SELF-GOVERNMENT OF THE REPUBLIC OF CROATIA, MS INGRID ANTI CEVI
  105. Croatian, Serbian Police Arrest Suspected Drug Lords | OCCRP
  106. Money Laundering and Tax Fraud - European Commission
  107. The EC Report Card on Corruption | OCCRP
  108. Croatia: Former Mayor Charged with Corruption | OCCRP
  109. A Vehicle for Fraud | OCCRP
  110. Komisija pozdravlja politički dogovor o prvoj uredbi o suzbijanju pranja novca i novoj Direktivi o suzbijanju pranja novca
  111. Zaključci Vijeća o sprječavanju pranja novca i borbi protiv ...
  112. Preprečevanje pranja denarja: Svet in Parlament dosegla ...
  113. Sprečavanje pranja novca: Vijeće postiglo dogovor o stajalištu o poboljšanim pravilima - Consilium
  114. NATJEČAJ U PODRUČJU SUZBIJANJA PRANJA NOVCA
  115. Nova direktiva o borbi protiv pranja novca - Europska komisija
  116. Anti-money laundering and countering the financing of terrorism at EU level - Finance
  117. Anti-money laundering directive V (AMLD V) - transposition status | European Commission
  118. NIS2 Directive implementation in Croatia | Shaping Europe’s digital future
  119. Anti-money laundering directive IV (AMLD IV) - transposition status | European Commission
  120. Single Market Scoreboard Croatia Transposition (Croatia)
  121. Commission asks Member States to transpose into national laws the EU-wide legislation on cybersecurity | Shaping Europe’s digital future
  122. Croatia - Enlargement and Eastern Neighbourhood - European Commission
  123. The Commission calls on 23 Member States to fully transpose the NIS2 Directive | Shaping Europe’s digital future
  124. Croatia - HR4 - Mobility & Transport - Road Safety
  125. Timeline for the Implementation of the EU AI Act | AI Act Service Desk
  126. UK Designates Croatian Businessman for Supporting Russia | OCCRP
  127. Unreal Estate | OCCRP
  128. A Tale of Two Brothers and A Croatian Island | OCCRP
  129. Velesstroy | OCCRP
  130. Parties to the Transactions | OCCRP
  131. Russian Bank Was at Heart of Major Money Laundering Operation | OCCRP
  132. Vast Offshore Network Moved Billions With Help From Major Russian Bank | OCCRP
  133. About the Collaboration | OCCRP
  134. ICIJ
  135. Russia-related Designations, Designations Updates, and Designations Removals; Issuance of Russia-related General Licenses | Office of Foreign Assets Control
  136. Balkans-related Designation Removals; Issuance of New Russia-related General License and Amended Russia-related Frequently Asked Question | Office of Foreign Assets Control
  137. Balkans-Related Sanctions | Office of Foreign Assets Control
  138. Counter Terrorism Designations; Balkans-related Designation Removals | Office of Foreign Assets Control
  139. Recent Actions | Office of Foreign Assets Control
  140. Balkans-related, Counter Terrorism, and Cyber-related Designations; Issuance of Counter Terrorism General License; Settlement Agreement between the U.S. Department of the Treasury’s Office of Foreign Assets Control and Haas Automation, Inc. | Office of Foreign Assets Control
  141. Sanctions List Service | Office of Foreign Assets Control
  142. The UK Sanctions List - GOV.UK
  143. Russia-related and Russia-/Ukraine-related Designations; Venezuela-related Designations; Publication of Russia-related Determinations; Issuance of Russia-related General Licenses and Frequently Asked Questions | Office of Foreign Assets Control
  144. OFSI Consolidated List Search
  145. FCDO - UK Sanctions List Search - GOV.UK
  146. [Withdrawn] [Withdrawn] Who is subject to financial sanctions in the UK? - GOV.UK
  147. UK sanctions - GOV.UK
  148. Moving to a Single List for UK Sanctions Designations
  149. Format guide for the UK Sanctions List - GOV.UK
  150. 1 Financial Sanctions Notice 11/09/2025 Frozen Assets Reporting (2025)
  151. Office of Financial Sanctions Implementation – News and updates from the Office of Financial Sanctions Implementation
  152. HM Treasury: Office of Financial Sanctions Implementation (OFSI): OFSI Consolidated List Search Website | The National Archives
  153. FATF / MONEYVAL
  154. FATF
  155. FATF / MONEYVAL
  156. Republic of Croatia Ministry of Finance
  157. Council of the European Union
  158. European Commission
  159. OCCRP
  160. Global Witness
  161. TRM Labs
  162. ICIJ
Coverage gaps
fim-int-2026-07-05-G001: No sector-specific risk assessment …
fim-int-2026-07-05-G001: No sector-specific risk assessment (RNA) URLs have been identified for Croatia, limiting sector-level (e.g., real estate, DNFBP) risk granularity. [resolved]
fim-int-2026-07-05-G002: No Croatian national 6AMLD transpos…
fim-int-2026-07-05-G002: No Croatian national 6AMLD transposition bill or legislative timeline has been identified, leaving the transposition-readiness assessment Assessed rather than High. [resolved]
fim-int-2026-07-05-G003: No confirmed prosecutorial or asset…
fim-int-2026-07-05-G003: No confirmed prosecutorial or asset-recovery outcome has been reported for the Perencevic/Filipovic sanctions-evasion network beyond the original UK/US designations, limiting confidence in enforcement follow-through. [resolved]
fim-int-2026-07-05-G004: No updated status is available on t…
fim-int-2026-07-05-G004: No updated status is available on the 2023 sanctioned-oligarch yacht escape investigation, leaving the enforcement-coordination gap unresolved and unverified for closure. [resolved]
fim-int-2026-07-05-G005: No HANFA/HNB CASP authorization dec…
fim-int-2026-07-05-G005: No HANFA/HNB CASP authorization decision data is available for Croatia-domiciled crypto firms following the MiCA transitional-period closure on 1 July 2026. [resolved]
fim-int-2026-08-05-G001: No Croatia-specific 6AMLD transposi…
fim-int-2026-08-05-G001: No Croatia-specific 6AMLD transposition text or HANFA/HNB primary bulletin was retrieved this cycle for the BO-register-development deadline. [resolved]
fim-int-2026-08-05-G002: The HNB/INA Russian-divestment sign…
fim-int-2026-08-05-G002: The HNB/INA Russian-divestment signal rests on a single Tier-3 headline with no primary HNB statement retrieved. [resolved]
fim-int-2026-08-05-G003: Colombia (CO) and Laos (LA) Tier-D …
fim-int-2026-08-05-G003: Colombia (CO) and Laos (LA) Tier-D sweep yielded no material findings this cycle. [resolved]
fim-int-2026-08-05-G004: No Tier-1 EU Official Journal citat…
fim-int-2026-08-05-G004: No Tier-1 EU Official Journal citation was directly retrieved for the AMLR/6AMLD/AMLA timeline; reliance is on Tier-3 secondary legal commentary. [resolved]
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): No HR-specific dark-fleet, sanctions-evasion or D1-D4 material surfaced this cycle beyond structural carry-forward. [resolved]
fim-int-2026-09-28-G002: Tier D jurisdiction watch (KH, LA, …
fim-int-2026-09-28-G002: Tier D jurisdiction watch (KH, LA, MX, CO) not researched this cycle; dispatch is bound exclusively to HR under the DR-station's jurisdiction-binding contract. [resolved]
fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): No HR-specific 6AMLD transposition status or AMLA supervisory-perimeter development located this cycle. [resolved]
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): No HR-specific 6AMLD national transposition instrument or date was located this cycle. [open]
fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): No AMLA direct-supervision Selected Obliged Entity designation status for any HR obliged entity was located this cycle. [open]
fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', 'value': 'D5'}): HANFA's own enforcement notice for the Fima Plus d.o.o. action of 2026-07-29 was not located this cycle; reporting rests on a single T3 secondary source. [open]
fim-int-2026-10-25-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-25-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No primary Commission infringement decision document was independently retrieved naming Croatia specifically on the 6AMLD transposition gap; reliant on T3 secondary reporting. [open]
fim-int-2026-10-25-G002: No dedicated Houthi/Yemen-channel o…
fim-int-2026-10-25-G002: No dedicated Houthi/Yemen-channel or Tier-D (KH/LA/MX/CO) query was run for Croatia this cycle given the pooled union search budget. [open]
FIM-GAP-001 (D2): Croatia's beneficial ownership register re…
FIM-GAP-001 (D2): Croatia's beneficial ownership register requires e-identification restricted to Croatian citizens and residents of a handful of other EU states, preventing genuine public/investigative access required under the 5th AML Directive and obstructing cross-border verification of ownership structures.
FIM-GAP-002 (D1): A sanctioned oligarch-linked luxury yacht …
FIM-GAP-002 (D1): A sanctioned oligarch-linked luxury yacht docked in a Croatian Adriatic marina was able to depart Croatian territorial waters and sail to Turkey despite active US, UK and EU sanctions restricting its movement, passing police, customs and harbour-master controls undetected until reported by local media.
FIM-GAP-003 (D5): MONEYVAL's technical-compliance review fou…
FIM-GAP-003 (D5): MONEYVAL's technical-compliance review found that while VASPs are subject to AML/CFT registration obligations, the transfer of virtual assets as a discrete service is not captured within Croatia's formal VASP definition, leaving Recommendation 15 rated only partially compliant.
FIM-GAP-004 (D6): MONEYVAL follow-up reporting continues to …
FIM-GAP-004 (D6): MONEYVAL follow-up reporting continues to flag insufficient State Attorney's Office (SAO) and financial-investigator staffing, hampering complex money-laundering prosecutions and the application of provisional measures to secure proceeds of crime.

Evidence

Confidence-tiered claims

Croatia Banka (CROBA), 100% acquisition, EUR 15m [Source 1]
Probable · 1 source
Fima Plus d.o.o. ordered to cease unauthorised crypto-asset custody/execution services [Source 1]
Uncertain · 1 source
HR bound directly by EU AMLR on phased 2025-2027 timetable; no HR-specific 6AMLD transposition instrument located; national AML Act remains operative pending transposition [Source 1]
Probable · 1 source
HR 5th-round enhanced follow-up process formally ended; rated Compliant/Largely Compliant on 34 of 40 FATF Recommendations, none Non-Compliant [Source 1]
Probable · 1 source
MiCA transitional period for legacy VASPs in HR ended 2026-07-01, requiring MiCA authorisation for all crypto-asset service provision thereafter [Source 1]
Probable · 1 source
Named among 18 EU Member States subject to a Commission infringement procedure for incomplete transposition notification of 6AMLD Articles 11, 12, 13 and 15 (beneficial-ownership access provisions), due 10 July 2026. [Source 1]
Probable · 1 source
EU Council Decision (CFSP) 2026/2332 of 15 October 2026 lists three individuals and nine entities for Russia-sanctions circumvention (energy and financial transactions); directly binding on Croatia as an EU Member State. [Source 1]
Probable · 1 source
MONEYVAL 5th-round 3rd Enhanced Follow-up Report (adopted 10 November 2025) rates Croatia compliant on 7 Recommendations, largely compliant on 27, partially compliant on 3, with no non-compliant ratings; Croatia is now outside the 5th-round follow-up process pending its 6th-round onsite scheduled for April 2030. [Source 1]
Probable · 1 source
Croatia implements EU sanctions regimes directly through the Law on Restrictive Measures (Official Gazette 133/23), which lays down the procedure for applying restrictive measures implemented by the Republic of Croatia. [Source 1]
Probable · 1 source
Croatia's MiCA transitional period for legacy VASPs ended 1 July 2026; 5 of 17 transitional VASPs completed CASP authorisation in time (per HANFA). [Source 1]
Probable · 1 source
Croatia exited the MONEYVAL 5th-round enhanced follow-up process in January 2026, with the next on-site evaluation scheduled for spring 2030. [Source 1]
Probable · 1 source
HANFA has authorised at least five MiCA CASPs since April 2026, including Electrocoin d.o.o. (first, 2026-04-09), ahead of the 1 July 2026 end of the Art 143(3) transitional period for legacy VASPs. [Source 1]
Probable · 1 source
AMLR applies directly in Croatia from 10 July 2027; AMLD6 national transposition is due the same date, with select BO-register-access articles (11,12,13,15) carrying an earlier 10 July 2026 deadline. [Source 1]
Probable · 1 source
Select AMLD6 beneficial-ownership-register-access articles (11,12,13,15) carry a 10 July 2026 transposition deadline, ahead of the main 2027 date. [Source 1]
Probable · 1 source
As an EU member state, Croatia is bound by the EU list of high-risk third countries (26 countries in force from 29 January 2026) rather than maintaining an autonomous national list. [Source 1]
Uncertain · 1 source