Lithuania LT

The position of Lithuania in the Russia and Belarus sanctions-evasion architecture is best read through the lens of a frontline transit state whose enforcement capacity is escalating in direct proportion to the scale of the evasion attempts it faces. OLAF intelligence supported a raid by the Lithuanian Customs Criminal Service on a Lithuania-based exporting company allegedly rerouting EU-origin sanctioned goods to Russia and Belarus via Central Asian transshipment, with the firm suspected of facilitating similar schemes for other exporters, a structural finding rather than an isolated seizure, since it points to an organised rerouting capability rather than a single opportunistic actor. That structural reading is reinforced by the disclosure from Lithuanian customs that 28,854 export requests attempting to exploit a medical exemption classification to bypass EU sanctions on Russia- and Belarus-bound goods were rejected: a volume of that scale evidences a systemic evasion tactic operating at industrial scale against the export-control perimeter, not a marginal compliance failure. The active-scheme inventory records this trade-evasion architecture through two concrete red-flag indicators: the use of a medical exemption customs classification to bypass EU export restrictions on sanctioned goods, and the rerouting of EU-origin goods through Central Asian third countries before final delivery into Russia or Belarus. Both indicators are trade-document observable, meaning they fall within existing trade-finance and export-control compliance workflows rather than requiring novel detection capability; the gap is one of enforcement intensity and document-level scrutiny rather than a capability gap in what firms can observe.

This transit exposure was formally recognised at the EU architectural level in December 2025, when the Council broadened the Belarus sanctions regime to add hybrid-activity listing grounds, disinformation and foreign information manipulation, critical-infrastructure disruption, migrant instrumentalisation and unauthorised entry, explicitly citing meteorological-balloon airspace incursions into Lithuania. This is assessed as a strategic shift in EU sanctions design: hybrid destabilisation is now treated as sanctionable conduct in its own right, expanding the perimeter of the sanctions architecture beyond financial and trade measures into a hybrid-warfare register that directly concerns a frontline state such as Lithuania. The broadening sits within a wider sequence of EU escalation: the 16th package mirroring Russia trade sanctions into the Belarus regime and prolonging it to 28 February 2026, the 18th package upgrading the SWIFT-only ban to a full transaction ban for listed Belarusian and Russian banks, and the 19th package extending measures to Russian energy, third-country banks facilitating circumvention, and crypto-asset providers connected to the Russian financial messaging system. Each successive package widens the compliance perimeter that Lithuania-domiciled and Lithuania-transiting entities must navigate, and each also widens the divergence between the third-country reach of the EU and equivalent US and UK secondary-sanctions tools, a divergence itself tracked as a standing architectural watch item given the arbitrage surface it creates for evasion intermediaries.

The regulatory-compliance baseline of Lithuania complicates a simple frontline-enforcer reading. The December 2024 MONEYVAL enhanced follow-up report upgraded Recommendation 2 to Compliant but left Recommendations 6, 7 and 28, covering targeted financial sanctions implementation and DNFBP supervision, rated Partially Compliant. This is a high-confidence, primary-sourced finding that anchors the assessment that the sanctions-evasion posture of Lithuania is best characterised as mixed: genuine, escalating enforcement activity running structurally parallel to persistent implementation gaps in the targeted-financial-sanctions freezing mechanism itself. That said, Lithuania is not listed on the FATF grey list or blacklist as of the June 2026 plenary cycle, a clean headline status that coexists with the enhanced-follow-up findings rather than superseding them, a distinction the architecture-over-incident principle requires holding onto rather than collapsing into a single risk label.

Outlook

The next MONEYVAL enhanced follow-up report on Lithuania, expected within 2026, is the most immediate forward-watch item for the sanctions-architecture domain: it will assess whether the Recommendation 6, 7 and 28 deficiencies identified in December 2024 have been resolved, and the outcome will materially affect whether the mixed enabler-enforcer characterisation of Lithuania shifts toward the enforcement end of the spectrum. Layered against this is the multi-year AMLR, 6AMLD and AMLA transition, which is assessed as improving structural oversight in aggregate but does not itself target the targeted-financial-sanctions implementation gap directly, since that gap sits within Recommendation 6 and 7 territory rather than the CDD and beneficial-ownership perimeter the AML Package chiefly addresses. Absent confirmation that the freezing-mechanism deficiencies have been closed, the frontline transit exposure of Lithuania to Russia and Belarus sanctions evasion is likely to remain a persistent structural feature of the domain rather than a resolved one, even as enforcement volume against individual schemes continues to escalate.

The beneficial-ownership registry of Lithuania exists as a matter of law but functions, in practice, as a semi-closed system: access is restricted to parties demonstrating a legitimate interest, a standard that has remained undefined since the fourth EU AML Directive and was reinforced rather than clarified by the 2022 ruling of the Court of Justice of the European Union in the joined Sovim and W.M. cases, which struck down mandatory general public access to beneficial-ownership data across the bloc. Journalists and researchers report being able to obtain access by citing public interest, but the absence of a defined, enforceable legitimate-interest standard leaves the practical accessibility of ownership data dependent on administrative discretion rather than a codified right, a structural condition assessed at moderate-to-high confidence as a durable transparency gap rather than a transitional one.

That gap is not merely theoretical. Kaunas-based Ukio Bankas held at least 35 of approximately 75 BVI and Panama shell companies used in the multi-billion-dollar Troika Laundromat scheme before its 2013 closure by the Bank of Lithuania, a legacy episode that demonstrates how opaque corporate-ownership structures, once embedded in a licensed EU credit institution, can sustain laundering architecture at scale for years before detection. More recently, a Lithuania-registered financial institution established in 2016 by an Italy-linked organised-crime group allegedly laundered approximately EUR2 billion since 2017 through a global shell-company network, before a 2024 Europol and Eurojust joint operation dismantled it, though the precise date of that dismantling has not been independently confirmed this cycle. Read together, these two episodes, a decade apart, indicate that the corporate and beneficial-ownership transparency architecture of Lithuania has a recurring, rather than one-off, vulnerability to shell-company layering conducted through licensed domestic financial institutions.

The durable structural backdrop against which the beneficial-ownership signal of Lithuania should be read is the standing EU AML Package architecture, which comprises three legally distinct instruments rather than a single reform. The AML Regulation, Regulation (EU) 2024/1624, is directly applicable across the EU without national transposition and is confirmed to take effect from 10 July 2027, replacing the current AMLD-based transposed rulebook of Lithuania with a single harmonised customer-due-diligence, beneficial-ownership and crypto-asset-service-provider framework. The sixth AML Directive is a separate instrument requiring Member State transposition of national-level provisions, financial-intelligence-unit powers, national supervisory architecture, and register-coordination duties, on a broadly parallel timeline; the specific transposition vehicle and confirmed date for Lithuania have not yet been published, a gap honestly recorded rather than assumed away. The third instrument, the AMLA Regulation, Regulation (EU) 2024/1620, establishes the EU Anti-Money Laundering Authority, which is planned to begin direct supervision of approximately 40 high-risk cross-border obliged entities from 2028, potentially including Lithuania-domiciled EMI and VASP firms, shifting the supervisory perimeter for the largest cross-border groups from purely national oversight by the Bank of Lithuania and the Financial Crime Investigation Service toward a hybrid EU-level regime. This three-instrument architecture is the structural context, not a resolved outcome: it establishes a harmonisation trajectory rather than an immediate fix to the current legitimate-interest access standard of Lithuania, which the AMLR is expected to only partially address absent a revised EU-wide public-access standard responsive to the Sovim and W.M. ruling.

Outlook

The forward trajectory for the beneficial-ownership and corporate-transparency posture of Lithuania runs through the 10 July 2027 application date of the AMLR and the still-unconfirmed 6AMLD national transposition, both expected in the same window. Because the access-standard question turns on the balancing by the CJEU of privacy rights against transparency objectives rather than solely on the harmonised CDD baseline of the AMLR, resolution of the legitimate-interest ambiguity is not guaranteed by the entry into force of the AMLR alone, and this is assessed as the single most consequential open question for the D2 posture of Lithuania through the 2027-2028 window. The 2028 direct-supervision start of AMLA, while primarily a supervisory-perimeter change, will also determine whether the largest Lithuania-domiciled cross-border EMI and VASP groups face harmonised beneficial-ownership verification standards ahead of, or only upon, wider national implementation. This durable AMLA-era backdrop frames every subsequent read of the transparency posture of Lithuania across future cycles.

The enabler-jurisdiction profile of Lithuania centres on a specific and well-evidenced structural gap: the absence of a registration framework for accountants and real estate agents as designated non-financial businesses and professions, combined with historically low suspicious-transaction-report filing from notaries, company-service providers, MVTS providers and real estate agents. This is a high-confidence, MONEYVAL-sourced finding, and it is significant because it identifies a design gap in the legal framework itself rather than merely a supervisory-capacity or enforcement-intensity problem: professionals who structurally intermediate corporate formation, property transactions and cash-intensive value transfer are not brought within a registration perimeter that would allow supervisors to monitor their compliance in the first place. Under the four-dimension test of the enabler-jurisdiction filter, legal framework, enforcement, capacity versus choice, and systemic significance, this reads as a legal-framework-level gap that predates and is somewhat independent of the otherwise escalating enforcement activity of Lithuania against sanctions evasion and licensed-sector AML failures.

The professional-facilitator dimension of the enabler profile of Lithuania is also visible in its legacy banking history. Kaunas-based Ukio Bankas served as a structural node in the multi-billion-dollar Troika Laundromat, holding at least 35 of approximately 75 BVI and Panama shell companies used in the scheme before the Bank of Lithuania closed it in 2013, illustrating how a single licensed domestic institution, rather than an unregulated intermediary, can function as critical facilitation infrastructure for offshore layering at scale. The more recent case of a Lithuania-registered institution established in 2016 by an Italy-linked organised-crime group, which allegedly laundered approximately EUR2 billion since 2017 via a global shell-company network before a 2024 Europol and Eurojust dismantling operation, indicates this facilitation risk is not confined to a single historical episode but recurs across licensed Lithuanian financial infrastructure over more than a decade. The active-scheme inventory frames this facilitation risk in observable terms: the red-flag indicator of layering offshore proceeds through a large network of BVI and Panama shell companies domiciled via a single licensed EU bank is captured as an onboarding-stage observable, meaning the vulnerability is, in principle, detectable through enhanced corporate-structure due diligence at the point of client onboarding rather than only through ex-post investigation of already-established shell networks.

Set against this, the enforcement trajectory of Lithuania shows genuine escalation: the OLAF-backed customs raid on a sanctions-evasion export scheme and the disclosure of 28,854 rejected medical exemption export requests demonstrate active, resourced enforcement against trade-based facilitation of Russia and Belarus sanctions evasion, and the EU-funded 2022-2024 Financial Crime Investigation Service supervisory-capacity project specifically targeted risk-based AML/CFT supervision, including a VASP sectoral risk methodology. The enabler-jurisdiction assessment is therefore one of genuine capacity investment coexisting with an unaddressed legal-framework gap in the DNFBP perimeter, a pattern the architecture-over-incident principle treats as more analytically significant than either fact read in isolation, because it indicates the professional-facilitator vulnerability is a matter of unclosed legal design rather than mere resource constraint.

Outlook

Resolution of the DNFBP registration and STR-filing gap is not currently scheduled to a specific date in the available regulatory horizon; the next MONEYVAL enhanced follow-up report, expected within 2026, is the nearest forward-watch item likely to record whether Recommendation 28, which covers DNFBP supervision, has moved from its December 2024 Partially Compliant rating. The 2027 transposition window of the AMLR and 6AMLD is also relevant, since 6AMLD national-level provisions extend to supervisory architecture and could, depending on the as-yet-unspecified transposition vehicle for Lithuania, address the DNFBP registration gap as part of broader national implementation, though this is not yet confirmed and should not be assumed. Absent that confirmation, the professional-facilitator gap identified in the DNFBP perimeter is assessed as likely to persist as a structural vulnerability through at least the 2026 MONEYVAL review cycle.

The conflict-finance exposure of Lithuania this cycle is indirect and watch-level rather than direct: no Lithuania-domiciled war-financing flow or extractive-industry corruption channel was identified in the evidence gathered. The relevant signal is the sanctioned dual-use and petrochemical goods, fertilizers, petrochemicals and dual-use items, intercepted in transit through Lithuania toward Russia and Belarus as part of the broader sanctioned-goods evasion scheme uncovered by the OLAF-backed customs raid and the disclosure of 28,854 rejected medical exemption export requests. Under the architecture-over-incident principle, this transit exposure is treated as a potential conflict-finance channel because it concerns inputs that materially sustain the war economy of Russia, even though the flow is one of goods rather than direct financial transfers, and even though no Lithuania-based entity has been identified as a direct financier of conflict activity. This connection has been flagged for SCEM, whose commodity-flow data could corroborate the volumes and routes involved and thereby convert this currently assessed, indirect signal into a more precisely quantified one.

Outlook

Because the D4 signal for Lithuania this cycle is limited to an indirect transit-goods channel rather than a direct financing flow, the forward-watch item is less a specific regulatory horizon date than the outcome of the SCEM cross-referral: confirmation of volumes and routing patterns would materially strengthen or narrow the conflict-finance characterisation. No dedicated conflict-finance regulatory instrument specific to Lithuania was identified in the horizon scan for this cycle, and this domain is assessed as remaining at watch status pending either further trade-flow corroboration or a direct Lithuania-domiciled financing nexus emerging in a future cycle.

The licensed electronic-money-institution and crypto-asset sector of Lithuania is the locus of this cycle clearest financial-innovation signal, and it is a mixed one: recurring supervisory enforcement against genuine control failures, running alongside a structural pattern of repeated failure across multiple licensed firms. The Bank of Lithuania fined Pervesk UAB, a Bankera-affiliated entity, EUR130,000 and imposed heightened supervision after finding the firm had failed to properly assess high-risk client and institutional risk, had not adapted its transaction-monitoring scenarios to its actual risk profile, and had provided insufficient AML training to staff. This sits within a wider pattern described as gross, systematic compliance failures recurring across Payeer, Transactive Systems and Payrnet, a pattern that persisted despite a 2022-2024 EU-funded Technical Support Instrument project specifically intended to strengthen the risk-based AML/CFT supervisory capacity of Lithuania, including development of a VASP sectoral risk methodology. This is assessed at moderate confidence as evidence that the fintech and VASP licensing growth of Lithuania continues to outpace supervisory capacity despite genuine reform investment, a structural rather than merely episodic control gap.

The sanctions-evasion dimension of this sector is separately significant. Payeer, a Lithuania-licensed crypto firm, received a record fine in 2024 for enabling transfers from EU-sanctioned Russian banks to be converted into ruble-denominated crypto-wallet transactions, a scheme the active-scheme inventory captures through an on-chain-observable red-flag indicator: transfers from EU-sanctioned Russian banks converted into ruble-denominated crypto-wallet transactions. This finding sits at the intersection of the licensed-sector supervisory strain of Lithuania and the broader EU sanctions-architecture perimeter, since the 19th EU sanctions package specifically extended measures to crypto-asset providers connected to the Russian financial messaging system, meaning Lithuania-licensed VASPs sit squarely within an expanding compliance perimeter that both EU sanctions design and domestic AML supervision are converging on simultaneously.

Structural mitigants are in motion but not yet realised. The EU Anti-Money Laundering Authority is planned to begin direct supervision of approximately 40 high-risk cross-border obliged entities from 2028, a cohort assessed as potentially including Lithuania-domiciled EMI and VASP firms given their cross-border footprint, which would shift the supervisory perimeter for the largest firms from purely national Bank of Lithuania oversight toward a hybrid EU-level regime. Ahead of that transition, the Financial Crime Investigation Service of Lithuania has already completed its own EU-funded capacity-building project, indicating domestic supervisory investment is running in parallel with, rather than waiting for, the EU-level build-out. This period also brackets the point at which the EU Markets in Crypto-Assets Regulation reached full application from January 2025, reshaping licensing expectations for crypto-asset service providers ahead of the crypto-priority supervisory plans of AMLA; for Lithuania-domiciled CASPs, the MiCA licensing baseline and the forthcoming direct-supervision perimeter of AMLA are converging obligations rather than sequential ones, meaning firms already navigating MiCA authorisation should not treat the 2028 horizon of AMLA as a separate, later compliance event.

An open evidentiary question remains: independent corroboration, beyond the single OCCRP source, of the Pervesk and Bankera enforcement narrative and its current remediation status has not been obtained this cycle, and this gap is recorded rather than resolved by assumption, a caveat that matters because it determines whether the heightened-supervision order of the Bank of Lithuania should be read as an ongoing containment measure or a closed matter. The recurrence of enforcement action across four separate licensed entities, Pervesk and Bankera, Payeer, Transactive Systems, and Payrnet, over a period spanning the very years the EU-funded supervisory-capacity project was active, is itself a data point about the pace at which reform can outstrip a rapidly growing licensing population, rather than a simple indictment of the reform effort.

Outlook

The near-term forward-watch items for the digital-asset sector of Lithuania are the continued institutional build-out of AMLA, including a July 2026 public hearing on ongoing-monitoring guidelines directly relevant to VASP and EMI supervisory expectations, and the 2028 direct-supervision start date, whose entity-selection methodology has not yet been published. Until that methodology clarifies which Lithuania-domiciled firms fall within the initial cohort of approximately forty entities, the domestic enforcement pattern of repeated fines against individual licensed firms is assessed as likely to continue as the primary visible signal of control weakness in this sector, even as the structural AMLA transition proceeds in parallel.

The compliance-technology and active-defence posture of Lithuania this cycle is the most structurally clear of the six domains: a completed domestic capacity-building project sits directly ahead of an EU-level supervisory build-out that will eventually reach the same firms. The Financial Crime Investigation Service completed a 2022-2024 EU-funded Technical Support Instrument project that strengthened risk-based AML/CFT supervision domestically, including the development of a VASP sectoral risk methodology, a concrete deliverable directly relevant to the recurring EMI and crypto control failures identified elsewhere in the evidence for this cycle, since a sectoral risk methodology is precisely the kind of supervisory tool that could, if applied consistently, have identified the risk-assessment and monitoring-scenario deficiencies later found at Pervesk UAB.

At the EU level, the Anti-Money Laundering Authority continues its institutional build-out, including a scheduled July 2026 public hearing on ongoing-monitoring guidelines, a near-term signal on supervisory expectations that will directly affect Lithuania-domiciled obliged entities once finalised. This sits ahead of the planned 2028 direct-supervision start of AMLA for approximately 40 high-risk cross-border obliged entities, a cohort assessed as potentially including Lithuania-domiciled EMI and VASP firms given their cross-border footprint. The structural significance here is that the domestic supervisory-capacity investment of Lithuania, the completed FCIS project, and the EU-level build-out of AMLA are proceeding as parallel, complementary tracks rather than a single national reform sequence, meaning the compliance-technology posture of Lithuania is currently strengthening on two fronts simultaneously, national and supranational, even though neither track has yet fully closed the control gaps visible in the enforcement record.

This dual-track build-out should be read against the backdrop of the three-instrument EU AML Package: the directly applicable AML Regulation, Regulation (EU) 2024/1624, effective 10 July 2027, the sixth AML Directive requiring national transposition, with the transposition vehicle and date for Lithuania not yet specified, and the AMLA Regulation, Regulation (EU) 2024/1620, establishing the Authority itself. The supervisory perimeter of AMLA is a hybrid one by design: it will not replace national supervision by the Bank of Lithuania and the Financial Crime Investigation Service wholesale, but will instead directly supervise a defined high-risk cross-border cohort while national authorities retain supervision of the remainder, a structural bifurcation that active-defence and compliance-technology functions at Lithuania-domiciled firms will need to navigate as a dual-reporting-line reality rather than a simple handover.

Whether this domestic and supranational investment translates into resolved MONEYVAL ratings will become visible at the next enhanced follow-up report, expected within 2026, which will test whether the Recommendation 6, 7 and 28 deficiencies, covering targeted financial sanctions and DNFBP supervision, have been addressed by the supervisory tools the FCIS has developed. A sectoral risk methodology built for VASPs does not, on its own, extend to the DNFBP registration gap for accountants and real estate agents identified elsewhere in the evidence for this cycle; closing that separate gap would require either an extension of the FCIS methodology to a currently unregistered population of obliged entities, or a distinct legislative fix delivered through the still-unspecified 6AMLD transposition vehicle. This combination of national technical capacity-building and supranational institutional design is, at this stage, better characterised as promising infrastructure than as a resolved control environment: the enforcement record from the EMI and crypto sector this cycle demonstrates that risk-based supervisory tools existed in principle before the most recent failures were identified, indicating implementation and enforcement follow-through remain the binding constraint rather than tool availability alone.

Outlook

The nearest forward-watch item is the July 2026 public hearing of AMLA on ongoing-monitoring guidelines, which will provide the first concrete signal of how AMLA supervisory expectations will interact with the already-completed sectoral risk methodology of the FCIS. The more consequential horizon item is the entity-selection methodology for the initial cohort of approximately forty entities under AMLA direct supervision, not yet published but expected ahead of the 2028 start date; until it is published, Lithuania-domiciled EMI and VASP firms cannot determine with confidence whether they will fall within the direct-supervision perimeter of AMLA or remain under purely national oversight, a genuine planning uncertainty for compliance-technology investment decisions at the firm level.