Lithuania LT

Lead Signal

The defining development touching Lithuania is architectural rather than domestic: the European Union Council's sanctions package of 12 October 2026, which designated 743 individuals and 826 entities tied to Russia's military-industrial supply chain, is directly applicable across the bloc and therefore binds Lithuanian obliged entities without any national transposition step. Reporting describes this as the largest single expansion of the EU sanctions list since 2022, targeting suppliers of missile, drone and aircraft components. Lithuania's own implementation mechanism, run through the Ministry of Foreign Affairs, channels proposals into the EU process and carries autonomous Russia-regime measures into national application, but no Lithuania-specific Tier-1 implementing instrument for this particular package was independently retrieved this pass, so the finding rests on secondary sanctions-commentary sourcing layered onto a confirmed description of the standing implementation architecture.

Alongside the new designations, more than 3,000 existing Russia-related individual listings were extended to 22 September 2029, a housekeeping action that nonetheless locks in the EU's current sanctions architecture for a further three years and removes any near-term expiry pressure that might otherwise have prompted a review of individual listings.

Other Developments

A supervisory evaluation opened without a domestic finding attached. MONEYVAL formally launched its sixth-round mutual evaluation of Lithuania on 13-14 October 2026 in Vilnius, with the process reported to run to May 2028. This is a confirmed procedural fact about the evaluation cycle itself rather than a finding about Lithuania's current compliance posture, and it lands ahead of the EU's AML Regulation reaching full application on 10 July 2027 — meaning Lithuania's assessed framework and the bloc's harmonised regime will be in motion simultaneously over the coming evaluation window.

A digital-asset population that did not move. The Bank of Lithuania's authorised population of crypto-asset service providers held steady at four authorisations plus two notifications under the relevant MiCA transitional provision, per the end-September interim register. No new Lithuanian authorisation or crypto-sanctions-evasion finding dated within the window was located, which keeps this a stability read rather than a development.

Cross-Monitor Connections

The EU Council's October designation package, aimed squarely at military-industrial supply chains supporting Russia, sits naturally alongside conflict-finance and state-capture work being tracked elsewhere: a listing of component suppliers is, in substance, a map of where sanctioned procurement networks have been routing money and goods, and that map is of direct interest to monitors tracking extractive-industry and conflict-adjacent financial flows. The sanctions-extension action, by locking in over 3,000 listings to 2029, also sets a multi-year horizon against which any future easing or tightening of the Russia regime elsewhere in the bloc can be measured.

Outlook

The MONEYVAL evaluation running to a reported May 2028 and the EU AML Regulation's full application on 10 July 2027 give Lithuania two overlapping and consequential dates to watch, with the Bank of Lithuania and the Financial Crime Investigation Service (FNTT) as the joint supervisory authorities whose practice will be tested against both. On sanctions, the near-term question is whether a Lithuania-specific Tier-1 implementing instrument for the 12 October package surfaces, which would convert the current probable-confidence, secondary-sourced finding into a confirmed domestic record; absent that, the architecture remains EU-directly-applicable with Lithuania's implementation role understood rather than individually evidenced.

Lead Signal

Lithuania has moved to a national sanctions posture that diverges from the European Union bloc-level position. On 14 October 2026 the Lithuanian government approved national asset freezes against Russian businessmen Alisher Usmanov and Mikhail Fridman, running to end-2027, after both men were removed from the EU sanctions list on 22 September 2026. Lithuania's Foreign Ministry had opposed the EU delisting, and Latvia and Estonia adopted comparable national measures in the same window. Under the FIM designation set, this is Comprehensive sanctions applied at the member-state level rather than the EU level, and it is a clear instance of a member state substituting national-list autonomy for a bloc-level removal it judged premature. Reporting on the decision rests on two Tier-2 outlets (LRT and Hromadske); no Lithuanian gazette text for the decision has been independently retrieved this cycle, so the underlying legal instrument is not yet directly cited here.

Alongside the sanctions move, Lithuania's financial supervisor has been active on the enforcement side of its own regime. Lietuvos bankas revoked the electronic-money institution licence of Paytend Europe, UAB, a Chinese-owned payment firm, after an inspection identified serious and systematic violations in the monitoring of business relationships and transactions, including a failure to file suspicious transaction reports with the Financial Crime Investigation Service (FNTT).

Other Developments

Supervisory findings on recurring control gaps. Separately from the Paytend action, secondary reporting describes a Bank of Lithuania inspection programme for 2026 that prioritised AML/CTF, culminating in an August 2026 letter to heads of financial market participants flagging deficiencies in customer due diligence, record-keeping, internal controls, employee training and suspicious-transaction reporting as recurring enforcement risks. The same reporting states that FNTT recorded more than EUR 6.2 million in fines over the prior year, and that one electronic-money institution was barred from onboarding new customers and serving existing ones while an inspection was still running. This material is sourced to a single Tier-3 commentary synthesis; no Tier-1 publication of the underlying FNTT letter has been independently retrieved this cycle, so the figures and the characterisation of the letter should be read as probable rather than confirmed.

Crypto-asset authorisation pipeline continues. Lietuvos bankas authorised Micar assets, UAB as a crypto-asset service provider under the Markets in Crypto-Assets Regulation, the fourth such authorisation issued in Lithuania. The authorisation permits custody and administration of clients' crypto-assets. This sits within a steady build-out of the supervised crypto perimeter following the full wind-down of Lithuania's pre-MiCA national registration regime from 1 January 2026.

FATF follow-up re-rating. A FATF/MONEYVAL follow-up report shows Lithuania's Recommendation 2 re-rated from Partially Compliant to Compliant. Lithuania remains in enhanced follow-up, with no plenary grey-list action taken this cycle. Under the FIM designation set, Lithuania carries no FATF call-for-action or grey-list status, so neither Countermeasures nor Increased monitoring applies to it.

Cross-Monitor Connections

The Paytend licence revocation is a payments-regulation event with direct relevance to the World Payments Monitor's licensing and market-access tracking: an actively supervised fintech hub revoking a non-bank payment institution's authorisation for AML/CFT failure is a different signal from the same hub granting authorisations, and both are occurring in the same jurisdiction in the same period. The Micar assets authorisation is similarly a crypto/digital-asset event tracked in parallel by the crypto monitor's licensing module; the FIM reading foregrounds the AML/CTF supervisory dimension of that authorisation rather than the commercial or licensing-architecture dimension carried elsewhere. The national Usmanov/Fridman asset freeze, coordinated with Latvia and Estonia, is a sanctions-architecture development with potential relevance to any monitor tracking EU member-state divergence from bloc-level sanctions decisions, since it demonstrates that delisting at the EU level does not guarantee delisting at the national level in all member states.

Outlook

The durability of Lithuania's national sanctions position on Usmanov and Fridman through its stated end-2027 horizon will depend on whether other EU member states beyond Latvia and Estonia adopt parallel measures, and on whether the European Union itself revisits the September 2026 delisting. Confirmation of the underlying gazette text for the national freeze, not yet retrieved this cycle, would raise the evidentiary basis for this finding from Tier-2 corroboration to a primary-source footing. On the supervisory side, the pattern of recurring CDD, record-keeping and reporting deficiencies flagged by Bank of Lithuania's 2026 inspection programme, combined with the Paytend revocation, points to continued active enforcement against payment and e-money institutions rather than a settled baseline; further supervisory action against other obliged entities identified in that inspection round would be consistent with this trajectory. The crypto-asset authorisation pipeline is expected to continue on its current pace absent a change in Lietuvos bankas's posture, which the FATF Recommendation 2 re-rating does not by itself constrain.

Lead Signal

The Bank of Lithuania has publicly clarified a narrow statutory boundary within its Article 73 supervisory architecture, confirming that the mere continuing presence of a Russian banking licence held by a parent group does not, by itself, constitute grounds for supervisory measures against the Lithuanian-incorporated subsidiary. The clarification, reported on 8 October 2026 and concerning SEB bank, speaks to the limits of national sanctions-adjacent supervisory tools when the triggering fact sits at the parent-group level rather than in the conduct of the licensed entity itself. This is best read as architecture, not incident: a central bank articulating where its own enabling statute does and does not reach, rather than any active enforcement step against the institution in question.

The clarification matters less for what it does than for what it withholds. Article 73 is Lithuania's domestic lever for responding to parent-level exposure to sanctioned or adversarial jurisdictions, and a regulator narrowing its own reach is itself a disclosure about the shape of the regime. Absent a parallel EU or national sanctions designation reaching the Russian-licensed entity directly, Lithuanian supervisors are signalling that structural ownership links to Russia-licensed banking operations do not, standing alone, cross the threshold that would compel action against the EU-regulated subsidiary.

Other Developments

No material movement was identified this cycle across beneficial ownership, enabler-jurisdiction exposure, conflict finance, crypto/digital-asset AML perimeter questions, compliance technology, the standing AML/CTF regime, or commercial activity. The standing regime continues to rest on the Law on the Prevention of Money Laundering and Terrorist Financing, with the FNTT as financial intelligence unit and the Bank of Lithuania as supervisor of licensed entities; Lithuania remains in MONEYVAL's enhanced follow-up process after its December 2018 fifth-round mutual evaluation, most recently re-rated in the fourth enhanced follow-up report adopted 15 December 2023.

Cross-Monitor Connections

The Article 73 clarification sits adjacent to payments-sector supervisory activity tracked separately: the Bank of Lithuania's broader posture toward electronic money institutions, including a prior temporary prohibition on an electronic money institution providing services to new and existing customers while an inspection proceeded, reflects a supervisor willing to act on firm-specific conduct even as it declines to extend Article 73 to parent-group ownership facts alone. Where sanctions-exposure questions intersect with licensed payment and banking entities operating in Lithuania, the distinction the Bank of Lithuania has drawn here—between what a parent group does elsewhere and what the supervised entity itself does in Lithuania—will likely recur as a reference point.

Outlook

The durability of this clarification as a precedent depends on whether a Bank of Lithuania primary notice or decision eventually corroborates the press-reported position; at present the sourcing is institutional-quote-via-press rather than a primary regulatory publication, so the finding should be treated as probable rather than confirmed pending fuller substantiation. Should EU-level sanctions architecture evolve to reach parent-group banking licences more directly, this narrow domestic gateway could be narrowed further or bypassed entirely by a supranational designation.

Lead Signal

Lithuania's anti-money-laundering framework illustrates, this cycle, a structural feature of EU-member regimes that is easy to overlook when attention is fixed on domestic legislative calendars: the enhanced due diligence perimeter can expand without any domestic legislative act at all. The Law on the Prevention of Money Laundering and Terrorist Financing (No VIII-275), in its article 14(1)(3), requires enhanced due diligence toward customers and beneficial owners connected to jurisdictions named on the European Commission high-risk third-country list, and because that reference is a live incorporation rather than a fixed schedule, the Commission's own updates propagate directly into Lithuanian obliged-entity obligations. Commission Delegated Regulations 2026/46 and 2026/83 added Russia, Bolivia and the British Virgin Islands to that list, with Russia's listing taking effect from 29 January 2026; the preceding Delegated Regulation 2025/1184 had already reshaped the list's composition, adding ten jurisdictions including Algeria, Kenya, Lebanon and Venezuela while removing eight others, among them Panama, the Philippines and the UAE. Lithuanian obliged entities inherit each of these changes automatically.

The architectural point is sharpened by the fact that Lithuanian law maintains a second, independent EDD trigger. Article 14(1)(4) of the same law requires enhanced due diligence for customers or beneficial owners connected to jurisdictions identified by the Financial Action Task Force as high-risk, a determination that runs on its own track and need not align with the Commission list. A jurisdiction can therefore be high-risk for Lithuanian EDD purposes under one basis and not the other, and firms operating in Lithuania must monitor both lists rather than treating them as a single combined feed.

Other Developments

Remote identification is governed by a closed, exhaustive list of routes. Article 11(1) of the AML Law permits establishing customer and beneficial-owner identity without physical presence only through one of five defined mechanisms: reliance on a third party under article 13, an EU electronic identification scheme at high or substantial assurance level, a qualified electronic signature, live video capturing the original identity document together with an advanced electronic signature or a captured face image, or a first payment from the customer's own account at a qualifying EU or equivalent credit, payment or e-money institution accompanied by a certified paper copy of the identity document. An asynchronous onboarding journey built around document upload plus a selfie check is not independently compliant under Lithuanian law; it must be structurally mapped onto one of these five routes before it can be relied upon. The precise wording of the five limbs rests on an unverified translation, and further local-language confirmation would be needed before this reading is treated as settled in all its particulars.

Low-risk electronic money attracts a bounded customer due diligence derogation. Articles 9(4) and 9(5) of the AML Law permit credit and e-money institutions, where their own risk assessment and management procedures establish low money-laundering or terrorist-financing risk, to depart from the standard identification requirements of articles 10 to 12 for non-reloadable e-money instruments with stored value capped at EUR 150, restricted to goods-and-services use, with no anonymous funding and no cash redemption. Article 9(5) separately permits opening an account on limited data, with full identification completed within one month, subject to ongoing monitoring obligations. Lithuanian law does not carry a separate EUR 50 remote-payment limb that appears in some comparator regimes; the derogation is built around the EUR 150 non-reloadable instrument alone.

Record retention for customer due diligence material runs to eight years. Articles 19(10) and 19(11) require that registration log data, in paper or electronic form, be kept for eight years from the end of the transaction or business relationship, with shorter five-year periods applying to certain correspondence. This retention period sits at the longer end of what comparator jurisdictions apply to equivalent material, with implications for data-minimisation planning by firms operating across multiple EU markets with differing retention floors.

Cross-Monitor Connections

The automatic incorporation mechanism under article 14(1)(3) is the kind of structural finding that routes naturally to other monitors tracking EU-level list governance: any future Commission delegated regulation altering the high-risk third-country list will, by the same mechanism, alter obligations across every EU member state simultaneously, making the Commission's own listing process a more consequential single point of regulatory change than any one member state's domestic legislative calendar. Where other monitors track sanctions-list or conflict-finance exposure tied to jurisdictions newly added to the Commission's high-risk list, the Lithuanian incorporation mechanism demonstrates concretely how such a listing decision converts into binding firm-level EDD obligations across the bloc without further domestic process, a pattern worth cross-referencing wherever a newly-listed jurisdiction's financial exposure through EU-domiciled correspondent or payment channels is being assessed.

Outlook

The most immediate open question for Lithuania is the transposition status of the sixth Anti-Money Laundering Directive and the jurisdiction's alignment timeline with the directly-applicable AML Regulation and the Anti-Money Laundering Authority build-out; this was not established in the present research cycle and remains a gap. Until that timeline is confirmed, Lithuania's AML Law No VIII-275 continues to operate as the operative national instrument, with the Commission high-risk third-country list and FATF findings as its two live external EDD triggers. Firms with Lithuanian exposure should expect the EDD perimeter to continue moving in step with future Commission delegated regulations rather than with any domestic legislative schedule, and should treat the article 11(1) remote-identification list as closed rather than illustrative when designing or auditing onboarding journeys.

Lead Signal

The Bank of Lithuania's own supervisory letter, based on 2025 supervisory data and ten AML/CTF inspections, now characterises Lithuania's dual identity as the EU's leading electronic-money-institution and payment-institution licensing hub, and as a historically high-volume virtual-asset-service-provider registration jurisdiction, as a structural supervisory risk factor rather than a settled strength. The letter flags weak enhanced due diligence, disproportionately low suspicious-transaction-report volume, incomplete sanctions screening, and a need to verify authorisation under MiCAR among obliged entities. This recharacterisation is corroborated by two 2026 AML/CTF enforcement fines against Lithuanian-licensed financial institutions: a €270,000 fine against European Merchant Bank (EMBank) for anti-money-laundering, counter-terrorist-financing and sanctions-control shortcomings, and a €290,000 fine against Walletto UAB, an electronic money institution, for internal-controls failures and inadequate information provision to the regulator.

Other Developments

Verified Payments capital-adequacy restriction. The Bank of Lithuania has ordered electronic money institution Verified Payments to restore capital adequacy by 1 October 2026, and pending a further decision has barred it from taking new clients, encumbering assets, or lending. This sits alongside the two enforcement fines as a third concurrent supervisory action against a Lithuanian-licensed payment entity within 2026, reinforcing the pattern the supervisory letter itself describes.

MiCA VASP-to-CASP transition dating dispute. Secondary sources report conflicting transitional deadlines for Lithuania's virtual-asset-service-provider population converting to full Markets in Crypto-Assets Regulation authorisation: a 1 January 2026 national extension against MiCA Article 143(3)'s EU-wide backstop reported as no later than 1 July 2026. Which date actually governs Lithuania's cut-off has not been reconciled against primary implementing law this cycle, and the Bank of Lithuania's own supervisory letter separately flags the need to verify CASP authorisation among obliged entities, indicating this uncertainty has practical supervisory consequences rather than being a purely academic dating question.

MONEYVAL 6th round evaluation approaching. Lithuania's sixth-round mutual evaluation by MONEYVAL is reported to start in October 2026, arriving at a moment when the country's own supervisory authority has just documented material AML/CTF deficiencies among obliged entities, a timing coincidence that raises the stakes of the evaluation's findings.

Cross-Monitor Connections

The capital-adequacy restriction against Verified Payments and the underlying supervisory-letter findings connect directly to the world-payments monitor's tracking of Lithuania's electronic-money-institution and payment-institution sector, where the same entity and the same Bank of Lithuania supervisory posture are tracked from a market-structure and legal-risk perspective rather than an AML/CTF-compliance perspective; the two monitors are describing the same underlying supervisory tightening from different analytical angles. The MiCA CASP-transition dating dispute similarly connects to the crypto monitor's tracking of Lithuania's crypto-licensing regime, where the same disputed backstop date and the same low legacy-VASP conversion rate are analysed from a licensing-perimeter rather than an AML/CTF-compliance perspective.

Outlook

The MONEYVAL 6th round evaluation, starting October 2026, is the clearest near-term marker of how the international AML/CTF community will assess Lithuania's regime against the backdrop of its own supervisory authority's self-identified deficiencies. Separately, the European Banking Authority's draft reporting framework will determine, via a 31 December 2026 reference date, which Lithuanian payment institutions and electronic money institutions face direct supervision by the EU's Anti-Money Laundering Authority from 2027 rather than purely national Bank of Lithuania supervision — a structural shift in the supervisory perimeter that will interact directly with the deficiencies the Bank of Lithuania has itself just identified.

Lead Signal

Lithuania's crypto-asset supervisory perimeter has completed its migration from light-touch VASP registration to binding MiCA CASP authorisation, with the Bank of Lithuania now the competent authority and actively issuing authorisations to individual applicants. This consolidates an estimated cohort of roughly 370 previously-registered virtual-asset service providers into a single, harmonised EU licensing gateway, closing a grandfathering window that had run into 2026. The transition materially raises the compliance bar for firms that had operated under the prior, lighter FCIS-run VASP regime, since CASP authorisation carries EU-wide passporting rights but also the full weight of MiCA governance, prudential and conduct requirements.

Other Developments

Standardised inspection templates. The Bank of Lithuania's 2026 inspection plan includes, for the first time, standardised AML/CTF inspection templates, an incremental but structurally meaningful supervisory-technology development. This signals a move toward more consistent, comparable supervisory outputs across obliged entities rather than ad hoc examination practice, and it sits alongside continued enhancement of the Bank of Lithuania's broader supervisory toolkit.

AML/CTF regime continuity. Lithuania's AML/CTF framework continues to rest on the Law on the Prevention of Money Laundering and Terrorist Financing, with the Financial Crime Investigation Service (FCIS) as supervisor and financial intelligence unit. Lithuania remains under MONEYVAL's enhanced follow-up procedure since its 2018 mutual evaluation, but this cycle records incremental progress, including a re-rating of the supervision-related recommendation to largely-compliant, evidence of a jurisdiction implementing a risk-based AML/CFT supervision reform rather than standing still under review.

Cross-Monitor Connections

The Bank of Lithuania's interim restriction on an electronic money institution over suspected AML/CFT deficiencies is a matter that touches the payments-supervision perimeter as much as the AML/CFT regime itself; the underlying supervisory action is the same fact set that the World Payments Monitor's licensing and market-access tracking would recognise as part of the Bank of Lithuania's concurrent growth-enabling and risk-based enforcement activity this cycle. Similarly, the completed MiCA CASP transition is the same underlying development that a digital-asset-focused monitor would read primarily through the lens of licensing architecture rather than financial-crime supervision; here the emphasis is on what the CASP gateway means for the integrity of the crypto-asset service-provider population now brought fully within a binding EU authorisation and passporting regime.

Outlook

Watch for the AMLA's finalisation of technical standards on AML/CFT supervisory-college functioning under AMLD6, due by 10 July 2026, which will shape how Lithuania's FCIS cooperates with counterpart supervisors once transposed. Watch also for the resolution of the interim restriction on the affected electronic money institution, since its outcome, whether remediation, further sanction, or licence action, will be the clearest near-term signal of how firmly the Bank of Lithuania is prepared to act on AML/CFT deficiencies identified through its enhanced supervisory posture. The structural direction across both the crypto-asset and payments-adjacent AML/CTF perimeters is toward tighter, more standardised, technology-enabled supervision.

Lead Signal

Lithuania's Bank of Lithuania has concluded a concentrated enforcement wave against the country's electronic-money-institution and payment-institution sector, imposing five separate AML/CTF fines within recent months: UAB ConnectPay (EUR 110,000, for failures in customer identification, PEP identification and risk assessment), MisterTango UAB (EUR 245,000, its third sanction since 2016, with activities restricted as a preventive measure), UAB Pervesk (EUR 244,000, with a mandated remediation plan and a temporary prohibition on serving high-risk customers), Walletto UAB (EUR 290,000, for internal-control and information-provision failures), and European Merchant Bank UAB (EUR 270,000, for AML/CTF shortcomings). Assessed with high confidence, this cluster exposes structural, not merely episodic, weaknesses in customer due-diligence and PEP-screening controls across Lithuania's EMI/PI population. The repeat-offender status of MisterTango, sanctioned three times since 2016, is the most analytically significant element: it signals that supervisory pressure alone has not durably closed the underlying control gap for at least one licensed entity. The concentration of enforcement in this specific sector is plausibly explained by Lithuania's status as one of the EU's largest per-capita EMI/PI licensing hubs, meaning enforcement volume may track population size and supervisory intensity rather than indicating a permissive underlying culture — an enablement-theory reading that must be held alongside the more straightforward reading of a structural control-gap cluster.

Other Developments

Sanctions architecture escalation. Lithuania's Financial Crime Investigation Service (FNTT) reports an assessed EUR 6.2 million in fines and 232 suspicion-of-sanctions-evasion referrals, of which 77 were analysed in detail, concentrated chiefly on vehicle-export and origin-concealment schemes routed toward Russia and Belarus. This is corroborated only by a single tier-three source, though directionally supported by separate reporting on an adjacent Ministry of Foreign Affairs proposal. That Ministry proposal would expand national sanctions to include new restrictions on property purchases near strategic sites and entry bans for Russian and Belarusian cultural, entertainment and sports figures perceived as supporting the war in Ukraine — a national-level layering exercise sitting atop the EU's own Council sanctions packages.

Crypto-asset supervisory transition. Lithuania's VASP-to-CASP transition is now complete: the national VASP registration regime, previously supervised by the Financial Crime Investigation Service on a lighter-touch registration basis, ended on 1 January 2026 and has been replaced by Bank of Lithuania authorisation of crypto-asset service providers under the Law on Markets in Crypto-Assets, implementing MiCA. This is assessed as a clean structural supersession rather than an incremental adjustment, consolidating crypto-asset supervision under a single prudential authority.

Compliance-technology posture. The Bank of Lithuania introduced dedicated fintech supervisory contact points on 7 April 2026, a high-confidence, Tier-1-sourced development that signals a proactive engagement posture running in parallel with the inspection-based enforcement described above. This sits against a backdrop of continued scale growth in CENTROlink, Lithuania's payments infrastructure, which processed 379.7 million payments in 2025, up 28.9 percent year over year, with 68 percent of all Lithuanian payments now processed instantly — scale growth that raises the stakes for supervisory capacity and RegTech adoption alike.

Cross-Monitor Connections

The EMI/PI enforcement wave described above sits squarely at the intersection of financial-integrity and payments-market analysis: the same population of Lithuanian-licensed electronic-money institutions and payment institutions under AML/CTF supervisory pressure here is also the subject of licensing, conduct and market-access tracking in the payments-monitor register, and the two lenses should be read together rather than in isolation. The sanctions-evasion enforcement caseload, concentrated on vehicle-export and origin-concealment schemes toward Russia and Belarus, is a conflict-finance-adjacent signal worth flagging for cross-reference with commodity- and trade-flow monitoring, given the trade-finance customer typology involved. No state-capture or information-operations signal was independently evidenced this cycle.

Outlook

The near-term picture for Lithuania is one of continuing supervisory pressure on the EMI/PI sector, with the open question being whether the Bank of Lithuania's new fintech dialogue mechanism reduces the recurrence of enforcement action or simply runs in parallel with it. The repeat-sanction pattern at MisterTango is the single most important indicator to track next cycle: a fourth sanction would sharpen the read toward a durable, unresolved control gap rather than a converging one. On the sanctions-evasion side, confirmation of the Ministry of Foreign Affairs' proposed national sanctions expansion, and any further detail on the statutory basis for the FNTT's reported EUR 6.2 million enforcement caseload, would materially firm up assessed-confidence judgments currently resting on single-source reporting.