--- title: "Malta (MT) — Financial-Integrity Intelligence · Sentinel" canonical: https://sentinel.gi/jurisdictions/malta-mt/ source_html: /jurisdictions/malta/index.html description: "Financial integrity intelligence for Malta (MT): sanctions, beneficial ownership, enabler jurisdictions, conflict finance, digital assets and compliance technology — with sourced findings." generated_at: 2026-11-08T04:46:02Z content_sha256: 34cbd49a1156d69ec82e25d32b8f350ef9d53c29bf9cdc1374cf8b36f99e8351 generator: "fe-fleet/md-twin@1.0" --- # Malta (MT) — Financial-Integrity Intelligence · Sentinel Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved. Financial Integrity Monitor # Malta MT Domains covered 8 of 8 Sources 157 Role actions 8 Horizon <90d 0 Jurisdiction profile FATF status: Clean (Formerly Grey-Listed June 2021 - June 2022) Tier: B Risk direction: Stable Enablement vs enforcement: Mixed Malta's AML/CFT regime rests on the Prevention of Money Laundering Act and PMLFTR regulations, supervised by FIAU (FIU) and MFSA (financial/VASP licensing). More Malta was FATF/MONEYVAL grey-listed June 2021-June 2022; it retains a bespoke citizenship-by-investment programme (ruled unlawful by the CJEU in April 2025), an active crypto-licensing hub, and a large maritime flag registry exposed to sanctions-evasion shipping. Key deficiencies - Citizenship-by-investment (golden passport) programme ruled contrary to EU law but not yet formally repealed/replaced - ESMA-identified gaps in MFSA's crypto-asset licensing authorisation and supervision process - Maritime flag registry exposure to shadow-fleet reflagging and false-flag practices - Continued reliance on shipping-industry revenue creating political resistance to stricter EU shadow-fleet enforcement Recent developments (18m) - CJEU ruled Malta's investor citizenship scheme illegal (29 April 2025) - FIAU fined OKX's Maltese subsidiary EUR1.1 million for AML failures (April 2025) - ESMA completed a fast-track peer review criticising MFSA's crypto-authorisation process (July 2025) - EU Commission opened infringement procedure against Malta over recognition of judgments against Maltese-licensed gaming companies (June 2025) - Malta publicly resisting tightening of EU crypto-asset regulation (reported April 2026) Law made at European Economic Area level that applies in Malta is covered once, on the [European Economic Area](/jurisdictions/eea/) page. This page covers Malta’s own layer: implementation, national authorities, national options and local enforcement. Brief ## Lead signal #### Lead Signal The principal development bearing on financial-integrity exposure in Malta this period concerns the gambling sector's recognition architecture rather than a core AML/CTF instrument. The Malta Gaming Authority concluded a targeted consultation on proposed enhancements to its Recognition Notice framework on 28 October 2026, and in its own account of that consultation explicitly tied the exercise to Malta's National Risk Assessment and National AML/CFT Strategy 2024-2026. That linkage is the detail that elevates this from a sector-licensing footnote to a matter of structural interest: the Authority is treating the mechanism by which it recognises operators and suppliers licensed elsewhere as an instrument through which national AML strategy is implemented, not merely as a market-access gate. A feedback statement has been circulated to Recognition Notice holders following the consultation's conclusion. Read full brief #### Lead Signal The principal development bearing on financial-integrity exposure in Malta this period concerns the gambling sector's recognition architecture rather than a core AML/CTF instrument. The Malta Gaming Authority concluded a targeted consultation on proposed enhancements to its Recognition Notice framework on 28 October 2026, and in its own account of that consultation explicitly tied the exercise to Malta's National Risk Assessment and National AML/CFT Strategy 2024-2026. That linkage is the detail that elevates this from a sector-licensing footnote to a matter of structural interest: the Authority is treating the mechanism by which it recognises operators and suppliers licensed elsewhere as an instrument through which national AML strategy is implemented, not merely as a market-access gate. A feedback statement has been circulated to Recognition Notice holders following the consultation's conclusion. A separate press account, drawn from a single non-regulator source, has characterised the broader reform effort as having faltered, with several proposed amendments reportedly abandoned after industry pushback. That characterisation is not corroborated by any statement from the Authority itemising what was specifically retained or dropped, and it should be read as an uncorroborated signal to track rather than as an established fact about the framework's final scope. If the press account proves accurate once the Authority's own itemisation becomes available, it would represent the kind of outcome structurally significant to enabler-jurisdiction analysis: a risk-based recognition framework, explicitly linked to national AML strategy, narrowed in response to the lobbying of the firms it is meant to screen. #### Other Developments No material change was identified in sanctions-evasion architecture, beneficial-ownership and corporate-transparency instruments, conflict-finance exposure, crypto and digital-asset integrity, compliance-technology posture, or the core AML/CTF regime for Malta this period. Malta's standing position as a jurisdiction that exited the FATF list of jurisdictions under increased monitoring in 2022, and that is bound directly by the EU's Anti-Money Laundering Regulation as a Member State, is unchanged and was not independently re-verified against primary sources beyond background corroboration this period. No qualifying commercial event in the financial-integrity vendor or firm space tied to Malta was identified. A historical Financial Intelligence Analysis Unit enforcement record remains part of the standing picture of Malta's AML supervisory activity, though it predates this window and is noted here only as context for the enabler-jurisdiction assessment rather than as a new finding: an administrative penalty together with a Follow-Up Directive has previously been issued under Malta's Prevention of Money Laundering and Funding of Terrorism Regulations framework, evidencing that the domestic AML supervisor has an active administrative-penalty track record independent of the gambling-sector Recognition Notice mechanism discussed above. #### Cross-Monitor Connections The Recognition Notice framework's explicit linkage to Malta's National Risk Assessment and National AML/CFT Strategy connects this finding to the broader enabler-jurisdiction architecture question: a state's willingness to calibrate — or recalibrate under industry pressure — the screening mechanism for foreign-licensed operators is a direct signal of how seriously a risk-based national strategy is operationalised in practice, separate from whether any single enforcement action follows. This sits adjacent to conflict-finance and extractive-industry integrity analysis elsewhere in the fleet only insofar as recognition frameworks of this kind are a generic enabler-jurisdiction vector; no Malta-specific conflict-finance nexus was identified this period. No crypto or digital-asset dimension to the Recognition Notice development was evidenced, and the jurisdiction's virtual-asset service provider transition framework is unaffected. #### Outlook The item to track is the Authority's own itemisation of what was retained or dropped from the original Recognition Notice proposal, once published, since that document — rather than the press account — will settle whether the AML-strategy-linked screening mechanism has in fact been narrowed under industry pressure. Absent that itemisation, the enabler-jurisdiction picture for Malta remains one of a procedural conclusion reached, with substantive scope still unconfirmed by primary source. Earlier periodic briefs (9) 3 Nov 2026 · fim-2026-11-03 #### Lead Signal Malta's Gaming Authority has concluded its targeted consultation on the Recognition Notice framework, with the outcome explicitly tied to the countrys National Risk Assessment and National AML/CFT Strategy 2024-2026. The conclusion of the consultation, and its linkage to the national AML strategy, is confirmed by the Authoritys own published material. Press reporting beyond that primary notice has characterised the resulting reform as narrower in scope than originally proposed, following pushback from industry participants, but that characterisation rests on a single lower-tier source and should be read as provisional pending the Authoritys own Feedback Statement. The structural point is that Malta continues to treat its gambling-sector licensing architecture as an AML/CFT lever rather than a purely commercial or conduct one. Recognition Notices sit at the intersection of gaming regulation and financial-crime controls for operators in the jurisdiction, and a consultation that explicitly cross-references the National Risk Assessment signals the Authority is still calibrating how tightly that lever should be turned, not whether it should be turned at all. #### Other Developments No material findings elsewhere. The remaining typology areas tracked for Malta, including sanctions exposure, beneficial-ownership transparency, conflict finance, digital-asset integrity, compliance technology, the broader AML/CTF regime, and commercial activity, returned no change against the prior baseline within the current window and are not addressed further here. #### Cross-Monitor Connections The Recognition Notice review is a licensing-and-controls development inside a sector, gambling, that sits structurally adjacent to payments and financial-services oversight. Where Malta-licensed gambling operators rely on payment or e-money rails for settlement, a tightening or narrowing of AML-linked licensing conditions on the gambling side has a natural read-through to how those operators are treated as counterparties by payment institutions, though no specific payments-side finding is recorded for Malta. No conflict-finance, state-capture, or commodity-flow connection is supported by the current evidence base. #### Outlook The near-term question is factual rather than interpretive: what the Authoritys own Feedback Statement says about which proposed amendments to the Recognition Notice framework were adopted, narrowed, or dropped. Until that document is independently reviewed, the claim that the reform was materially scaled back should be treated as provisional. If confirmed, a narrowing driven by industry pushback would be a structurally significant data point about how much weight an AML-strategy-linked consultation can bear once it meets sector resistance, independent of any single enforcement action. 25 Oct 2026 · fim-2026-10-25 #### Lead Signal Malta's financial-integrity picture turns on a single development: on 19 October 2026 the Malta Financial Services Authority issued a circular clarifying how prediction markets and event contracts should be classified, stating that such products may fall under MiFID II, under the Markets in Crypto-Assets Regulation, or under national gambling law depending on a comprehensive assessment of contract features and operator activity. This is a national-level supervisory clarification rather than a new statutory duty, and it sits squarely in the crypto and digital-asset innovation space rather than in sanctions, beneficial-ownership or core AML/CTF territory. Its significance is architectural rather than incident-driven: it closes a classification gap for a novel product type that had, until this circular, no settled regulatory home in Malta, and it does so by naming the boundary conditions a Malta-based platform must assess for itself rather than drawing a bright line in advance. #### Other Developments Binary-option marketing restriction confirmed for a narrow sub-type. The same circular confirms that binary yes/no event contracts with a fixed payout, where found to be financial instruments, remain subject to the existing prohibition on marketing binary options to retail clients. This restriction predates the circular and is EU-wide in origin; its confirmed application to this specific product structure narrows the retail distribution options for the most bet-like configuration within the event-contract category. No MT-specific sanctions divergence identified. The European Union's Council designated 1,569 individuals and entities linked to Russia's military-industrial complex on 12 October 2026. Malta implements EU sanctions directly as a Member State, and no national-level divergence or additional Maltese measure tied to this listing round was identified. This is recorded as the standing position rather than as a new Maltese development. #### Cross-Monitor Connections The classification question addressed by the MFSA circular connects directly to gambling-sector oversight, since one of the three possible regulatory homes the circular identifies for a given event-contract product is national gambling law; a product an operator structures as a crypto-asset or financial instrument could instead be found to be a gambling product, bringing it within an entirely different supervisory and enforcement perimeter. It also connects to payments oversight, since a product classified as a financial instrument carries settlement and client-money-handling implications distinct from a crypto-asset or gambling classification. No conflict-finance, enabler-jurisdiction, or state-capture dimension was identified in connection with the Malta findings. #### Outlook The open question following is how the MFSA's three-way classification test will be applied in practice to specific, named products, since the circular as retrieved sets out the test without resolving individual cases. A future cycle should watch for the first concrete classification decision, which would meaningfully narrow today's uncertainty for Malta-based platforms. No change is anticipated to Malta's standing sanctions-implementation posture, which continues to track EU Council listings directly without an independently verified national divergence. 18 Oct 2026 · fim-2026-10-18 #### Lead Signal AMLA, the European Union's Anti-Money Laundering Authority, submitted three final regulatory technical standard packages under the AML Regulation to the European Commission on 2 October 2026, covering business-relationship and occasional-transaction thresholds under Article 19(9), customer due diligence information requirements under Article 28(1), and group-wide AML/CFT minimum requirements for third-country subsidiaries and branches under Articles 16(4) and 17(3). Once adopted by the Commission, these technical standards will bind Malta directly as an AML Regulation jurisdiction, since the AMLR is directly applicable EU law rather than a directive requiring national transposition. This submission is the clearest structural signal this cycle of the AML Package architecture moving from design to binding instrument, and it sits squarely within the standing EU AML Package backdrop of the AML Regulation, the sixth AML Directive, and the AMLA Regulation establishing AMLA itself. #### Other Developments Malta's FIAU settlement-agreement transitional window has closed. Legal Notices 82 and 83 of 2026, in force since 1 April 2026, amended the Prevention of Money Laundering and Funding of Terrorism Regulations and the Centralised Bank Account Register Regulations to introduce a settlement-agreement mechanism for administrative penalties, alongside a regulation 23 reprimand and desist power, together with a six-month transitional window permitting subject persons with pending appeals to seek an out-of-court settlement. That transitional window ended around 28 September 2026, following a reminder from the FIAU. The standing settlement regime continues beyond the transitional window, capped at two settlement agreements per subject person or group every two years, and applies to payment institutions as PMLFTR-obliged entities in the same manner as other obliged entities. Malta's crypto-asset integrity basis is now exclusively MiCA/CASP. The Virtual Financial Assets Act, Chapter 590, was formally repealed effective 3 July 2026 under Act XXXVI of 2024, leaving the CASP/MiCA regime as the sole legal basis for crypto-asset services in Malta. No new Malta-specific crypto-integrity enforcement action was identified this cycle; the repeal is carried forward as standing context rather than a new development. Gambling subject persons remain within the standard PMLFTR reporting perimeter. Malta's gambling subject persons file suspicious transaction and suspicious activity reports with the FIAU under the Prevention of Money Laundering Act and its regulations whenever they know, suspect, or have reasonable grounds to suspect money laundering or terrorist financing, applying the general PMLFTR obligation rather than a gambling-specific implementing procedure independently verified this cycle. #### Cross-Monitor Connections The AMLA RTS submission and Malta's FIAU settlement-regime maturation both connect directly to the world-payments monitor's coverage of Malta's EMI and CASP licensing activity, since payment institutions and crypto-asset service providers are obliged entities under the same PMLFTR framework now undergoing settlement-regime and AMLR-direct change. The VFA Act repeal links to the crypto monitor's own coverage of the identical repeal event from a licensing-architecture perspective rather than an AML-integrity one. #### Outlook The AMLA RTS packages submitted 2 October 2026 now await European Commission adoption; once adopted, Malta's obliged entities face a defined implementation timeline under directly applicable AMLR provisions on thresholds, CDD information requirements, and group-wide AML/CFT minimum standards. On the enforcement-architecture side, the closure of the FIAU's settlement-agreement transitional window on 28 September 2026 means the standing twice-per-two-years settlement cap is now the operative rule for all subject persons, including payment institutions, with no further transitional relief available. 12 Oct 2026 · fim-2026-10-12 #### Lead Signal Malta has completed its transition away from a parallel domestic crypto-asset licensing track, with the Virtual Financial Assets Act, Cap. 590, repealed on 3 July 2026 at the end of the maximum eighteen-month MiCA grandfathering period available to Member States. Legacy VFA licences were cancelled on 2 July 2026, leaving the Markets in Crypto-Assets Act, Cap. 647, as the sole domestic framework governing crypto-asset service providers operating from Malta. ESMA has called on any CASPs still unauthorised under MiCA to wind down their EU activity in an orderly manner. This is an architectural completion rather than an enforcement event, and its significance lies in removing an entire category of regulatory-arbitrage question that had existed for as long as the VFA and MiCA regimes ran in parallel. #### Other Developments A new settlement-agreement track for the Financial Intelligence Analysis Unit is reported, under Legal Notice 82 of 2026, which amends the Prevention of Money Laundering and Funding of Terrorism Regulations to let the FIAU enter settlement agreements on administrative penalties, including in cases already under appeal, and which broadens the definition of AML/CTF obligations to cover duties arising under binding guidance, directives or directions. This development rests on secondary legal commentary; the primary Legal Notice text was not independently retrieved this cycle, and the reform should be read with that sourcing caveat in mind. Continuing elevated enforcement activity is also evident at the FIAU this cycle: Stanleybet Malta Limited was fined EUR225,730 plus a recurring EUR2,000-per-day penalty for customer due diligence failures, a matter now under appeal, while BNF Bank p.l.c. was separately fined EUR69,000 for cross-border account and wire reporting failures under Malta's CBAR regime. #### Cross-Monitor Connections The VFA-to-MiCA transition is the same underlying development the crypto monitor is tracking from a licensing-process angle and the world-payments monitor is tracking from a market-structure angle; financial-integrity's interest in it is principally the removal of a parallel, less-harmonised domestic track that could otherwise have functioned as a lower-scrutiny entry point relative to the EU-wide MiCA perimeter. The FIAU's settlement-agreement reform and its continuing fines against a gambling operator and a bank also intersect with the advennt monitor's coverage of Malta's gaming-sector AML exposure, insofar as Stanleybet's penalty concerns a gambling licensee's customer due diligence obligations. #### Outlook The FIAU is reported to be planning a new Enforcement Guide, expected in the fourth quarter of 2026, following a series of constitutional-court challenges to its penalty practice; general industry expectation is for a clearer, more litigation-resistant penalty methodology, though the Guide's publication is not yet confirmed as scheduled rather than delayed. Confirmation of the primary Legal Notice 82/2026 text, and of any further MONEYVAL follow-up reporting on Malta, remain the principal gaps to close in subsequent research. 6 Oct 2026 · fim-2026-10-06 #### Lead Signal Malta's anti-money-laundering architecture recorded a cluster of dated, instrument-level detail this cycle, concentrated entirely in the AML/CTF Regime domain. The Prevention of Money Laundering and Funding of Terrorism Regulations (PMLFTR, S.L. 373.01) apply the European Union's high-risk third-country list through the broader statutory concept of a non-reputable jurisdiction, defined in regs 2 and 11 as any jurisdiction with deficiencies in its national anti-money-laundering and counter-terrorist-financing regime or inappropriate and ineffective preventive measures. The EU list itself moved twice in close succession: Delegated Regulations 2026/46 and 2026/83, published 9 January 2026, added Russia, Bolivia and the British Virgin Islands, with Russia's listing taking effect 29 January 2026, following the earlier Delegated Regulation 2025/1184 of 5 August 2025, which had added Algeria, Angola, Cote d'Ivoire, Kenya, Laos, Lebanon, Monaco, Namibia, Nepal and Venezuela while removing Barbados, Gibraltar, Jamaica, Panama, the Philippines, Senegal, Uganda and the United Arab Emirates. The Financial Intelligence Analysis Unit (FIAU) issued a notice addressing the two 2026 instruments, confirming that Russia-resident customers now trigger mandatory enhanced due diligence for Maltese subject persons under the non-reputable jurisdiction mechanism. Alongside the list update, the PMLFTR's own text yielded two further findings with direct operational consequence for electronic-money issuers. Regulation 7A permits the FIAU, with the concurrence of the relevant supervisory authority and on the basis of a documented low-risk assessment, to exempt e-money issuers from the standard customer due diligence measures in reg. 7(1)(a) to (c), but only where a tight set of criteria is met: the instrument must be non-reloadable or subject to a EUR150 monthly limit usable only in Malta, store no more than EUR150, be usable only for goods or services, and accept no anonymous funding; the exemption is unavailable once cash redemption exceeds EUR50 or a remote payment transaction is involved. Separately, the FIAU's Implementing Procedures Part I, last amended 27 April 2026, exclude e-money payments from the first-payment verification method entirely, since that method presupposes an account with a credit or financial institution. #### Other Developments The non-reputable jurisdiction mechanism diverges from the UK's narrower list. Where the UK's reg. 33(1)(b) enhanced due diligence trigger (as amended by S.I. 2026/621, in force 30 June 2026) is now confined to FATF call-for-action countries, Malta's PMLFTR concept sweeps in the EU's own high-risk third-country determinations, producing a materially wider set of mandatory-EDD counterparties for Maltese subject persons than for their UK counterparts handling the same customer base. The e-money CDD exemption is narrow by design, not a general carve-out. Reg. 7A(2) preserves simplified due diligence under reg. 10 for any e-money issuer that has not been granted the exemption, meaning the default position remains full risk-based due diligence; the exemption is available only on a case-by-case supervisory determination tied to a demonstrated low-risk profile and the specific product-design ceilings set out above. The first-payment verification exclusion narrows an identity-verification route for payment and crypto-asset firms. Because the first-payment verification method under the Implementing Procedures requires an account with a credit or financial institution, and e-money payments are expressly stated not to satisfy that requirement, firms accepting e-money as a funding source must rely on an alternative verification method rather than treating receipt of an e-money payment as equivalent to a bank-account-sourced first payment. #### Cross-Monitor Connections The non-reputable jurisdiction mechanism and its Russia listing intersect directly with sanctions-exposure questions that World Payments Monitor coverage of Maltese payment and e-money institutions would need to track where correspondent or settlement relationships touch EDD-triggering counterparties; the EU list's removal of Gibraltar and the UAE in the 2025 delegated act likewise bears on any enabler-jurisdiction analysis of Mediterranean and Gulf payment corridors, though no such analysis was generated this cycle. The e-money CDD exemption and first-payment verification exclusion both bear on the design of digital-money products that a crypto or stablecoin tracker might separately examine for onboarding-friction implications, but no such cross-reference was substantiated in the material available this cycle. #### Outlook The FIAU's notice on the two 2026 Delegated Regulations suggests continued close tracking of EU list movements by Maltese supervisors, and firms relying on the reg. 7A exemption should expect supervisory attention to the low-risk assessment underpinning any existing exemption grant as the non-reputable jurisdiction list continues to shift. Open questions remain on record-retention duration, reliance conditions under reg. 12, and the reg. 13(2) retention period for electronic-money-institution distributor relationships, none of which were confirmed this cycle for want of a verbatim primary-source quote; these remain flagged for follow-up rather than asserted as findings. 6AMLD transposition status for Malta was not established this cycle and is treated as expected rather than escalated, consistent with Malta's delta-only research posture against the EEA parent layer. 4 Oct 2026 · fim-2026-10-04 #### Lead Signal Malta's Financial Intelligence Analysis Unit amended its enforcement architecture through Legal Notices 82 and 83 of 2026, changes to the Prevention of Money Laundering and Funding of Terrorism Regulations and the Cash Business Account Reporting Regulations that introduce periodic penalty payments aimed at remediation of ongoing deficiencies rather than purely punitive one-off fines. The amendment sits alongside an April 2026 Settlement Process and a planned Enforcement Guide, together signalling a structural shift in the FIAU's supervisory toolkit toward remediation-first supervision. No Tier-1 gazetted text of either Legal Notice was retrieved this cycle, so this architectural finding is carried at probable rather than confirmed confidence. #### Other Developments An institutional appointment reinforces Malta's assessment-body role. FIAU Director Alfred Zammit was appointed Vice-Chair of MONEYVAL for the 2026-2028 term, a position that places a senior Maltese supervisory official in a leadership role within the body responsible for Malta's own mutual evaluation process. The FIAU's own reported 2025 operational metrics show continued volume. According to the regulator's own 2025 annual report, distributed via wire service, the FIAU received 10,721 suspicious transaction reports, conducted 150 supervisory interventions, and issued 71 enforcement measures over the year. Malta's FATF standing remains unchanged. Malta remains off the FATF grey list, having been removed in June 2022, with MONEYVAL follow-up continuing and no plenary action identified this cycle. The administrative fine ceiling under the PMLFTR is reported, though not independently corroborated this cycle, at up to EUR 5,000,000 or 10% of turnover. #### Cross-Monitor Connections The FIAU's enforcement-architecture amendment and its remediation-first orientation are directly relevant to the crypto monitor's coverage of Malta's crypto-asset licensing transition, where grandfathered entities converting from the VFA Act to CASP authorisation under Chapter 647 must continue to meet AML obligations throughout that transition; a remediation-focused FIAU posture is a materially different compliance environment for those converting entities than a purely punitive one. The amendment is also relevant to the world-payments monitor's coverage of payment institutions and crypto-adjacent payment firms licensed in Malta, which fall within the FIAU's cross-sector supervisory remit for AML/CFT purposes. #### Outlook The FIAU's planned Enforcement Guide, expected in the first quarter of 2026 according to reporting available this cycle, is intended to explain the regulator's Sanctions Policy, its Sanctions Calculation Tool, and the procedure and timeframes running from an initial breach letter through to a published determination; industry currently works from the existing Sanctions Policy without that published explanatory guide, a transparency gap the forthcoming Guide is expected to close. Confirmation of the Legal Notices 82 and 83 text from a primary gazetted source, and clarity on whether the reported EUR 5,000,000 or 10% of turnover fine ceiling is accurate, both remain outstanding and would sharpen this module's assessment in the next cycle with new evidence. 28 Sep 2026 · fim-2026-09-28 #### Lead Signal Malta's most structurally significant financial-integrity development this cycle is the repeal of the Virtual Financial Assets Act (Chapter 590, Laws of Malta) on 3 July 2026, completing the jurisdiction's transition to the EU Markets in Crypto-Assets Regulation. The Malta Financial Services Authority now sits as the national competent authority issuing Crypto-Asset Service Provider authorisations in place of the bespoke domestic VFA licence, a shift that moves supervisory perimeter for digital-asset firms from a national bespoke regime toward a directly-applicable EU framework. This is an architecture change, not an enforcement event, and it should be read as such: the underlying supervisory population of digital-asset firms operating from Malta has not necessarily changed, but the legal basis under which they are authorised, examined, and (where necessary) sanctioned has moved wholesale to the MiCA text. Running alongside this transition, both the Malta Financial Services Authority and the Malta Gaming Authority separately flagged crypto-asset internal-control frameworks as a 2026 compliance-review priority, each citing the rapid and often opaque movement of funds through crypto rails as a monitoring challenge. This is a genuine three-pillar signal: it sits at the intersection of anti-money-laundering surveillance capacity and the counter-terrorist-financing exposure that opaque fund movement always raises, without yet manifesting as an enforcement outcome. #### Other Developments Standing AML/CFT architecture unchanged. Malta's anti-money-laundering and counter-terrorist-financing system continues to be assessed under the FATF Global Network via MONEYVAL, with the Financial Intelligence Analysis Unit operating as the national financial intelligence unit under the Prevention of Money Laundering Act (Cap. 373), tasked with generating and disseminating financial intelligence. No new MONEYVAL follow-up report specific to Malta was identified this cycle, and the jurisdiction has not returned to the FATF increased-monitoring list since its removal in June 2022. This is a stable baseline rather than a new finding, and is recorded here for lineage rather than as a signal of change. Sectoral supervisory attention without enforcement. The naming of crypto-asset internal controls as a joint MFSA/MGA priority is notable precisely because it has not yet translated into a public enforcement outcome. Under the enablement-as-signal principle, the absence of a corresponding enforcement action in a jurisdiction actively naming the risk area as a supervisory priority is itself worth tracking: it indicates the regulators see a gap they have not yet closed, rather than a gap they have concluded does not exist. #### Cross-Monitor Connections The crypto-licensing transition and the joint MFSA/MGA crypto-asset surveillance-gap signal connect directly to the crypto monitor's own tracking of Malta's VFA-to-MiCA transition and to the world-payments monitor's operational-resilience tracking, insofar as MiCA-authorised Crypto-Asset Service Providers in Malta become scoped into the EU Digital Operational Resilience Act framework upon receiving their new authorisation. The gambling-sector angle on crypto-funded deposits, flagged by the Malta Gaming Authority as a monitoring challenge citing opaque fund movement, is a natural cross-reference to advennt's enforcement and player-protection tracking of Malta-licensed gambling operators, where the same supervisory priority appears from the gambling-regulatory side. #### Outlook The principal open question is whether Malta's move from a bespoke national VFA framework to direct MiCA application closes or merely relocates the crypto-asset surveillance gap that MFSA and MGA have both named as a 2026 priority. A future MONEYVAL follow-up action, were one to occur, would be the clearest signal of how the transition is being assessed at the multilateral level; none has been identified as pending this cycle. Watch for whether the crypto-asset internal-control review priority produces a public enforcement or guidance outcome in either sector before the next assessment cycle. 5 Sep 2026 · fim-2026-08-21 #### Lead Signal Maltas Financial Intelligence Analysis Unit has materially modernised its enforcement toolkit this cycle. LN 82 of 2026 grants the FIAU power to enter settlement agreements, capped at a fifty percent penalty reduction, and introduces periodic penalty payments for ongoing deficiencies. The same instrument formally defines the terms AML/CTF and immovable property agent, tightening the supervisory perimeter around a recognised enabler category in real estate. This structural expansion of enforcement tooling is corroborated across the FIAU own publications, GTG Legal, Mondaq, Shoulder.mt and Lawyers In Malta, and it sits alongside a live enforcement action: the FIAU issued a remediation directive against a notary public for failure to fully comply with the PMLFTR, a classic gatekeeper-category action reported by ACAMS. Read together, an architecture-over-incident reading favours the statutory reform as the more durable signal, with the notary action serving as early evidence that the new perimeter is being actively applied rather than left dormant. #### Other Developments Sanctions cadence divergence. United States and European Union sanctions posture is diverging in the same window: reported Congressional pressure over a seventeen-month pause in new Russia-related OFAC designations sits against continued EU Council autonomous listings, including Decision (CFSP) 2026/1939 freezing the assets of five Russian defence and military-technology executives. This is a posture gap rather than an architectural change, and it is assessed rather than confirmed given the reliance on a single secondary compliance-blog source for the US side. Lao PDR retained under increased monitoring. The Financial Action Task Force June 2026 statement retains Lao PDR under increased monitoring, naming casino and Special Economic Zone supervisory deficiencies including fit-and-proper checks, a high-confidence finding drawn directly from FATF primary publication. Beneficial ownership register widened. Maltas Centralised Bank Account Register Regulations were amended by LN 83 of 2026 to permit register-data sharing with foreign and supranational bodies, subject to confidentiality and data-protection equivalence checks. This widening of the account-register interconnection layer arrives ahead of the Anti-Money Laundering Authority direct-supervision build-out. DeFi perimeter under study. The Malta Financial Services Authority published a June 2026 discussion paper exploring whether decentralisation should be treated as a spectrum rather than a binary test for MiCAs DeFi exclusion, noting many DeFi projects retain centralised features that could bring them inside the perimeter. Grey-list status stable. Malta remains off the FATF grey list, from which it was removed in June 2022, and is not named in the June 2026 increased-monitoring statement, a status that stands in explicit contrast to comparator Lao PDR. #### Cross-Monitor Connections The standing EU AML Package sits as durable structural backdrop to this cycles Malta findings: the AML Regulation (Regulation (EU) 2024/1624, directly applicable), the sixth AML Directive (transposed per Member State), and the AMLA Regulation (Regulation (EU) 2024/1620) establishing the Anti-Money Laundering Authority together shift supervision from a purely national footing toward a hybrid EU-level regime, with AMLA this cycle opening a data-collection exercise to identify entities eligible for direct supervision and consulting on draft technical standards for suspicion-reporting formats. The Malta Financial Services Authoritys DeFi discussion paper connects directly to the crypto monitors on-chain-activity-regime coverage of the same instrument. The Centralised Bank Account Register widening and the closing of Maltas MiCA grandfathering window both bear on the world-payments monitors correspondent-banking and licensing coverage, where a MiCA-regulated entity recently received a payment-services licence tied to electronic money tokens; that licensing event is a world-payments finding, not re-analysed here. #### Outlook The Anti-Money Laundering Authority build-out through the second half of 2026, including its first work programme and supervisory methodology, is the primary structural item to watch, together with the outcome of the Malta Financial Services Authoritys DeFi-perimeter discussion paper, expected around the fourth quarter of 2026. Maltas own six AML Directive transposition status was not independently verified this cycle and remains an open gap that should be closed before the enforcement-modernisation signal can be read as complete. 11 Aug 2026 · fim-2026-08-05 #### Lead Signal Malta's most significant development this cycle is the entry into force of Legal Notice 184 of 2026, which transposes Articles 11, 12, 13, and 15 of the Sixth EU Anti-Money Laundering Directive into Maltese law and establishes a three-tier beneficial-ownership register access model together with a new BO4 disclosure form, effective 10 July 2026. This is a high-confidence, Tier-1-anchored structural finding, sourced from a primary Malta Business Registry notice and corroborated by multiple independent law-firm analyses, and it anchors this cycle's material-change classification for both the beneficial-ownership domain and the standing Beneficial-Ownership Register Status tracker. For obliged entities and their compliance functions, the practical implication is a revised registry-access workflow effective from 10 July 2026, under which the tier of access available to a given requester now depends on the newly codified three-tier model rather than the prior undifferentiated approach. Running alongside the legislative transposition is a separate, practical development: access to Malta's beneficial-ownership register for journalists and civil-society researchers, which had been restricted since 2022, was reinstated in April 2026. This is an assessed-confidence finding sourced from a single Tier-2 non-governmental organisation source, without independent corroboration located this cycle. Read together, the two developments combine a formal legislative overhaul of registry architecture with a practical restoration of external scrutiny capacity, and they represent Malta's most substantive beneficial-ownership transparency movement identified in recent cycles. #### Other Developments FIAU settlement-mechanism reform. Legal Notice 82 of 2026 amends Malta's Prevention of Money Laundering and Funding of Terrorism Regulations to empower the Financial Intelligence Analysis Unit to enter settlement agreements on administrative anti-money-laundering penalties, while a companion Legal Notice 83 of 2026 opens a six-month out-of-court settlement window, capped at a fifty percent reduction, for pending appeals. This reform follows a pattern of repeated constitutional-court reversals of the FIAU's prior fine-imposition procedure, and its effect is to reduce the regulator's future litigation exposure while preserving its underlying capacity to impose substantial administrative penalties. Neither Legal Notice 82 nor Legal Notice 83 of 2026 alters the substantive AML obligations imposed on subject persons; both operate purely at the level of enforcement procedure. This is an assessed-confidence finding: only Tier 3 and Tier 4 secondary legal commentary was located for Legal Notice 82 of 2026 itself this cycle, and no Tier 1 or Tier 2 primary anchor was retrieved, a gap logged separately this cycle. Continued high-volume enforcement against Malta-based subject persons. The FIAU fined Stanleybet Malta Limited two hundred twenty-five thousand seven hundred thirty euro, plus a two-thousand-euro daily penalty for continuing non-compliance, for customer due diligence failures. Separately, the FIAU fined BNF Bank p.l.c. sixty-nine thousand euro for reporting failures relating to the Central Bank Account Register. Both findings are assessed-confidence and Tier 3 sourced, drawn from secondary enforcement-action reporting services rather than directly retrieved primary FIAU publication notices. Taken together with the settlement-mechanism reform, these enforcement actions indicate an enabler ecosystem under sustained regulatory pressure, in which procedural reform at the regulator is running in parallel with, rather than in place of, continued high-volume administrative sanctions against subject persons across Malta's gaming and banking sectors. #### Cross-Monitor Connections Malta's beneficial-ownership and enabler-jurisdiction developments this cycle connect most directly to the standing EU AML Package / AMLA tracker: Malta's 6AMLD transposition activity through Legal Notice 184 of 2026, and its FIAU procedural reform through Legal Notices 82 and 83 of 2026, both sit within the broader architecture of the directly applicable AML Regulation, the Sixth AML Directive as transposed per Member State, and the AMLA Regulation establishing the Anti-Money Laundering Authority. The gaming-sector enforcement action against Stanleybet Malta Limited also has cross-monitor relevance for any parallel gambling-regulatory monitoring of Malta, since customer due diligence failures at a licensed gaming subject person sit at the direct intersection of financial-integrity supervision and gambling-sector regulatory exposure. Firms with Malta-licensed gaming or banking operations should treat the settlement-mechanism reform and the enforcement actions as jointly informative: the former shapes the procedural pathway by which future findings will be resolved, the latter shows the substantive standard against which conduct continues to be measured. #### Outlook What to watch next cycle is whether Malta's transposition of the remaining 6AMLD provisions beyond Articles 11, 12, 13, and 15 is confirmed, since the full transposition table was not established this cycle. Also relevant is the continued build-out of AMLA's own work programme and supervisory methodology, expected in the fourth quarter of 2026, and the 2027 application date for the directly applicable AML Regulation, both of which will progressively reshape the supervisory perimeter within which Malta's obliged entities operate. Whether any Malta-based obliged entity falls within AMLA's first cohort of direct-supervision candidates from 2028 has not yet been established. Firms operating in or through Malta should also track whether the FIAU publishes primary guidance directly confirming the mechanics of the Legal Notice 82 settlement process, since this cycle's finding rests only on secondary legal commentary. Domain intelligence (D1–D8) #### Sanctions Architecture and Evasion On 14 April 2026 the United States Office of Foreign Assets Control designated Casino Centenario and Diamante Casino, together with their operator CAMSA, as a money-laundering and cash-smuggling vehicle used by Cartel del Noreste. The designation extends beyond the casino entities and cartel leadership to name individual professional enablers, including a defense attorney and a disinformation operative associated with the network, corroborated across Treasury-adjacent and sanctions-law reporting at High confidence. A companion General License 35 authorized wind-down transactions for parties newly captured by the designation, running through 13 May 2026. Continue reading Read through a sanctions-architecture lens, the significance of this action lies less in the individual designation than in what it reveals about the evolving OFAC targeting model. It is assessed at High confidence, with a deteriorating trajectory for the underlying laundering infrastructure, that this action reflects a broadening approach reaching the professional-enabler layer, including legal counsel, and the information-operations layer surrounding cartel finance, rather than confining designations to cartel leadership alone. This is a structural claim about the direction of enforcement design, not merely a report of an individual case: OFAC is treating the casino as connective infrastructure, the cash-smuggling vehicle that converts illicit narcotics proceeds into a form usable within the licit financial system, and is dismantling the professional network around it in the same action rather than in sequence. The casino itself operated within two miles of the United States border with documented United States patronage, a geographic and operational detail that sharpens the state-tolerance question: a laundering vehicle of this visibility operating this close to the border, and drawing cross-border custom, raises the question of what regulatory or enforcement capacity gap on the Mexican side allowed the vehicle to persist prior to the OFAC action. Mexico jurisdiction risk direction moves to increasing this cycle, spanning both the sanctions-architecture domain and the enabler-jurisdiction domain, reflecting mixed enforcement-versus-enablement and structural-versus-episodic characteristics: the OFAC action is itself an enforcement event, but it responds to what the record frames as a structural, persistent vulnerability rather than an isolated incident. This sits usefully alongside Laos casino and Special Economic Zone supervisory deficiencies, tracked separately under the enabler-jurisdiction domain, where the absence of resolved supervisory reform across consecutive 2026 FATF Plenaries is itself analytically significant. The Mexico action demonstrates what enforcement against casino-based laundering infrastructure looks like when a designating authority acts; the Laos case demonstrates what unresolved capacity deficit looks like when no comparable action follows. Reading the two together corrects for a structural bias in sanctions-architecture reporting, which tends to foreground enforcement volume over the absence of enforcement in jurisdictions lacking a foreign designating authority willing to act. Two collection gaps are carried honestly into this cycle rather than papered over. No update was sourced this cycle on Yemen or Houthi sanctions-evasion channels relevant to the standing Russian sanctions-evasion architecture tracker, and a second, distinct trade-based money-laundering corridor beyond the Mexico cartel-casino corridor, such as a United Arab Emirates over- or under-invoicing scheme or a wider Latin American trade-triangle arrangement, could not be sourced this cycle. Both gaps are noted as coverage limitations rather than as findings of absence. The cross-monitor implication runs to WDM, where the state-tolerance question for casino-based laundering infrastructure operating openly near the United States border carries institutional-integrity signal at High confidence: the question of whether the persistence of this vehicle reflects capacity constraint or a form of tolerated financial architecture is squarely within the state-capture remit that WDM tracks. #### Outlook The General License 35 wind-down window closes on 13 May 2026, after which the designation architecture around the Cartel del Noreste casino network closes fully, and the compliance-relevant question becomes whether correspondent banks and remaining counterparties have exited exposure within the authorized window. Whether OFAC continues to expand this enabler-and-disinformation-operative targeting model to other cartel-linked financial infrastructure is the structural question to watch into the next cycle, alongside whether Mexican authorities take any parallel domestic action against the casino network now that the OFAC designation has established the evidentiary record publicly. Continued absence of a sourced Yemen or Houthi channel update, and of a second distinct trade-based money-laundering corridor, remain open collection items rather than closed findings. Judgment: No Malta-specific sanctions-evasion development identified this window. Uncertain #### Beneficial Ownership and Corporate Transparency Malta restored legitimate-interest access to its beneficial-ownership register for journalists and civil-society actors under Legal Notice 127 of 2025, confirmed operative in April 2026. This reverses part of the restriction that followed the 2022 Court of Justice of the European Union ruling that curtailed public access to beneficial-ownership registers across the bloc, replacing blanket public access with a legitimate-interest gateway that journalists and civil-society organizations can now use without seeking per-occasion permission. This is Assessed confidence, corroborated by two independent Tier 2 and Tier 3 sources, though no Tier 1 registry primary confirmation was retrieved this cycle. Continue reading The restoration of legitimate-interest access matters analytically because beneficial-ownership registers function as a primary tool against the use of opaque corporate structures to obscure ultimate control of assets and financial flows. A register that journalists and civil-society investigators cannot query in practice is, for enforcement purposes, closer to a private database than a transparency instrument; restoring a legitimate-interest gateway narrows that gap, though the gateway model, requiring a demonstrated legitimate interest rather than open public access, remains a more restrictive standard than the pre-2022 position across the bloc generally. This sits within a durable structural backdrop that should be read as standing context rather than a single-cycle development. The EU AML Package comprises three distinct instruments: the AML Regulation, Regulation (EU) 2024/1624, directly applicable across the bloc without national transposition; the sixth AML Directive, transposed by each Member State on its own national timetable; and the AMLA Regulation, Regulation (EU) 2024/1620, which establishes the Anti-Money Laundering Authority as a new EU-level supervisory body. Together these instruments are shifting the supervisory perimeter for beneficial-ownership and corporate-transparency obligations away from a purely national-authority model and toward a hybrid regime in which AMLA will exercise direct supervision over a defined population of higher-risk cross-border obliged entities while continuing to coordinate indirect supervision of the remainder through national authorities. This cycle, AMLA opened a public consultation on 6 July 2026 on draft implementing technical standards for suspicion-reporting and transaction-record formats under Article 69(3) of the AML Regulation, an Assessed-confidence, Tier 1 development best read against this three-instrument architecture rather than in isolation. Malta own national track under this architecture continues to move. Legal Notice 82 of 2026 grants FIAU power to enter AML/CFT settlement agreements and to dictate suspicious-transaction-report and reporting formats domestically, Assessed confidence, corroborated this cycle only by Tier 3 commentary on what is otherwise a Tier 1 legal instrument whose text was not directly retrieved. However, full national transposition of the sixth AML Directive for gaming subject persons specifically was not confirmed this cycle: no Official Journal or equivalent primary-text confirmation of Malta complete transposition instrument for the gaming sector was retrieved, so transposition completeness for Malta remains an open question rather than a settled fact in the record. Cross-monitor relevance runs in two directions. WDM should register the Malta beneficial-ownership register reversal as an institutional-integrity signal at Assessed confidence, alongside the separate Mexican cartel-casino state-tolerance question tracked under the sanctions-architecture domain. ESA should register Malta AML Regulation, sixth AML Directive and AMLA-Regulation track national transposition activity, via Legal Notice 82, 83 and 127, as directly relevant to its EU regulatory-gap tracking, also at Assessed confidence. #### Outlook The AMLA implementing technical standards consultation closes ahead of the October 2026 FATF Plenary, and its outcome will determine whether suspicion-reporting and transaction-record formats converge across the AMLA direct-supervision perimeter or remain nationally fragmented pending finalization. Malta gaming-sector sixth AML Directive transposition completeness remains the open question to track into the next cycle: until a primary-source confirmation is retrieved, Malta institutional strengthening should be read as assessed and improving rather than confirmed complete, a distinction that matters for any obliged entity relying on the restored beneficial-ownership access as a settled rather than provisional state of affairs. Judgment: No Malta Business Registry beneficial-ownership instrument change identified this window. Uncertain #### Enabler Jurisdictions Malta's position in the enabler-jurisdiction architecture is shaped this period by movement in the Recognition Notice framework, the mechanism through which the Malta Gaming Authority recognises operators and suppliers licensed by another jurisdiction for dealings with the Maltese market. On 28 October 2026 the Authority concluded a targeted consultation on proposed enhancements to this framework, and critically, its own announcement states the exercise was aligned with Malta's National Risk Assessment and National AML/CFT Strategy 2024-2026. That explicit alignment is the structurally significant fact: it establishes that the Authority treats the Recognition Notice framework not merely as a gambling-licensing convenience but as an instrument that implements national risk-based AML strategy with respect to gambling operators and suppliers who are licensed elsewhere and recognised to operate into or from Malta. Continue reading A feedback statement has been circulated to Recognition Notice holders following the consultation's conclusion. The Authority's own public description characterises the outcome as a set of refinements designed to keep the revised approach proportionate, risk-based and practical — language consistent with a calibration exercise rather than an abandonment of the underlying risk-based posture. Separately, and distinctly, a single press account not originating from the regulator has characterised the broader reform effort as having faltered, with several proposed amendments said to have been abandoned following industry pushback. This characterisation has not been corroborated by any Authority statement itemising what was specifically retained or dropped from the original proposal, and it should be read as an uncorroborated signal rather than an established account of the framework's final scope. The enabler-jurisdiction significance of this development, if the uncorroborated account were ultimately confirmed, would be considerable: a risk-based screening mechanism explicitly tied to national AML strategy, narrowed in response to pressure from the firms it screens, is precisely the kind of structural signal that enabler-jurisdiction analysis is designed to surface, independent of whether any single enforcement action ever follows from it. Absent that confirmation, the honest position is that a procedural stage has concluded — consultation closed, feedback circulated — while the substantive content of what changed in the framework remains attested only by the regulator's own general description of proportionality and risk-basis, not by an itemised account of retained versus dropped provisions. This sits against the unchanged backdrop of Malta's standing financial-integrity posture: direct application of the EU Anti-Money Laundering Regulation as a Member State, and a 2022 exit from the list of jurisdictions subject to increased FATF monitoring, neither of which was independently re-verified against primary sources this period beyond background corroboration. A historical Financial Intelligence Analysis Unit enforcement record, involving an administrative penalty and a Follow-Up Directive under Malta's money-laundering prevention regulations, remains part of the standing supervisory picture but predates this window and is not a new finding. #### Outlook The determinative document to watch is the Malta Gaming Authority's own itemisation, if and when published, of which specific proposed Recognition Notice enhancements were retained and which were dropped. That document, rather than the existing press account, will settle whether the AML-strategy-linked screening mechanism has been materially narrowed under industry pressure or whether the refinements described by the Authority are consistent with the original risk-based ambition. Until that itemisation is available, the enabler-jurisdiction assessment for Malta should record a procedural conclusion with unconfirmed substantive scope, rather than either a confirmed strengthening or a confirmed weakening of the framework. Judgment: MGA's AML-strategy-linked Recognition Notice framework review concluded; press reports narrowed scope, uncorroborated by a primary MGA source itemising what was dropped. Probable Judgment: No Malta-specific conflict-finance development identified this window. Uncertain #### Crypto / Digital Assets / Financial Innovation On 19 October 2026 the Malta Financial Services Authority issued a circular establishing the test by which prediction markets and event contracts are to be classified: such a product may be a MiFID II financial instrument, a Markets in Crypto-Assets Regulation crypto-asset, or a gambling product under national law, with the outcome turning on a comprehensive assessment of the specific contract's features and the operator's activities rather than on the product's label alone. This is a national supervisory clarification rather than a new statutory instrument, and its significance lies in the architecture it establishes for a product category that previously had no settled regulatory home in Malta: a Malta-based platform cannot assume in advance which regime will apply to a given event-contract product, and must instead assess its own offering against all three possible outcomes. The circular also confirms a narrower, consumer-facing point: binary yes/no event contracts carrying a fixed payout, to the extent classified as financial instruments, remain captured by the pre-existing EU prohibition on marketing binary options to retail clients, closing off the most bet-like structural variant from retail distribution regardless of which of the three regimes ultimately governs the broader product family in other configurations. Read against the backdrop of Malta's completed transition away from its domestic Virtual Financial Assets Act framework and toward the Markets in Crypto-Assets Regulation and its implementing Chapter 647 instrument, the circular represents the regulator applying a now-settled crypto-asset framework to a genuinely novel product category rather than revisiting the framework itself. No enforcement action, licensing decision, or penalty tied to this classification question has yet occurred, and none is asserted here; the circular remains, as retrieved this cycle, a statement of the applicable test rather than its application to a named product. Continue reading #### Outlook The practical significance of the classification test established in this circular will only become visible once the MFSA applies it to a specific, named product, whether through further guidance, an individual authorisation or refusal decision, or enforcement action against a platform that has misclassified its own offering. A future cycle should watch for such a concrete application, which would narrow today's classification uncertainty considerably for Malta-based platforms operating or considering entry into the prediction-markets and event-contracts space. No indication of a timeline for further MFSA clarification was identified this cycle, and the full verbatim text of the circular itself was not independently retrieved, limiting the depth of this cycle's assessment to the publication's stated headline position. Judgment: No new Malta-specific crypto AML development identified; VFA-CASP transition deadline predates this window. Uncertain Judgment: No Malta-specific RegTech/compliance-technology development identified this window. Uncertain #### AML/CTF Regime Malta was removed from the FATF grey list in June 2022 and does not appear in the FATFs 19 June 2026 increased-monitoring statement, a high-confidence, Tier 1 finding drawn directly from the Malta Business Registry. This stable grey-list status is the backdrop against which this cycles enforcement-architecture reform, addressed in full under Enabler Jurisdictions, should be read: the FIAU has modernised its settlement and periodic-penalty toolkit and widened its supervisory definitions at the same time as maintaining its clean FATF standing, a combination that reads as regime modernisation from a position of relative strength rather than remediation from a position of deficiency, distinguishing Malta from the comparator case of Lao PDR addressed under Sanctions. Continue reading A specific gap remains open this cycle: Maltas own sixth AML Directive transposition status was not independently verified, and this should not be assumed complete simply because the jurisdiction remains off the grey list. Grey-list status and 6AMLD transposition completeness are related but analytically distinct questions, and the record this cycle only speaks to the former. #### Outlook Closing the 6AMLD transposition-verification gap is the single most valuable research item that would firm up Maltas AML/CTF regime read next cycle. Continued absence from any future FATF monitoring statement would further reinforce the stable-regime reading. Judgment: Malta's standing AML/CTF posture (exited FATF grey list 2022; bound directly by AMLR as EU/EEA member) is unchanged; not independently re-verified beyond background corroboration this cycle. Uncertain Judgment: No qualifying Malta-specific commercial event in the financial-integrity vendor/firm space identified this window. Uncertain Regulatory horizon No dated horizon items this cycle. 4 items tracked without a confirmed date. 4 pending date · baseline financial-integrity-2026-07-05 Role action cards MLRO ### The Malta Gaming Authority has tied a gambling-sector recognition-framework review directly to Malta's national AML/CFT strategy. The Recognition Notice framework, which governs recognition of foreign-licensed gambling operators and suppliers, has been explicitly linked by the Authority to the National Risk Assessment and National AML/CFT Strategy 2024-2026. This signals that recognition-stage due diligence on foreign-licensed counterparties may be subject to revised risk-based expectations once the Authority's practical-application guidance follows. 1 evidence refs Compliance ### A gambling-sector licensing consultation linked to AML strategy has concluded, with practical application still pending. The conclusion of the Recognition Notice framework consultation, with a feedback statement circulated to holders, means the control-framework implications for firms dealing with Malta-recognised foreign-licensed operators are not yet settled. The policy gap is that the Authority has not yet published an itemised account of what changed, so firms cannot yet update onboarding or ongoing-monitoring criteria with certainty. 1 evidence refs Legal ### Press reports of a scaled-back gambling licensing reform in Malta remain uncorroborated by the regulator. A single non-regulator source has characterised the Recognition Notice framework reform as having faltered after industry pushback, but this has not been corroborated by any Authority statement itemising dropped provisions. Counsel assessing client exposure under the recognition regime should treat this as an unconfirmed signal pending the Authority's own account, not as settled fact. 1 evidence refs Risk ### Malta's gambling-sector recognition framework is positioned as an instrument of national AML strategy, with its final scope not yet confirmed. The explicit tie between the Recognition Notice framework review and the National Risk Assessment and AML/CFT Strategy elevates this from a sector-licensing matter to a structural enabler-jurisdiction signal. The uncorroborated press account of scaled-back scope is a concentration risk worth tracking: if confirmed, it would indicate the risk-based screening mechanism narrowed under industry pressure. 1 evidence refs Operations ### No change to screening or monitoring thresholds has been confirmed for Malta-recognised foreign-licensed gambling operators this period. The Recognition Notice framework consultation has concluded procedurally but no itemised change to authorisation-stage or ongoing-monitoring criteria has been published by the Authority. Operational screening workflows involving Malta-recognised counterparties should not yet be updated on the basis of the press characterisation alone. 1 evidence refs Audit ### The evidentiary record on Malta's Recognition Notice framework reform is incomplete pending the regulator's own itemisation. Current documentation supporting the framework's practical scope rests on the Authority's general description of proportionality and risk-basis plus a single uncorroborated press account; an itemised primary-source account of retained versus dropped provisions is not yet available. Audit scope regarding recognition-stage controls for foreign-licensed gambling counterparties should flag this gap pending that publication. 1 evidence refs Standing trackers (T1–T6) Tracker Status Note T1 · Russian Sanctions-Evasion Architecture no_change T2 · EU AML Package / AMLA no_change T3 · FATF Grey List no_change T4 · Beneficial-Ownership Register Status no_change T5 · Crypto & Digital-Asset Integrity no_change T6 · Sanctions Regime Divergence no_change Registers ### Enforcement actions - 6 Mar 2026 - 23 Mar 2026 - 6 Mar 2026 - 23 Mar 2026 - 12 Aug 2026 - 1 Jan 2026 - 6 Mar 2026 - FIAU imposed an administrative fine following an onsite compliance examination in April 2023 that found serious and systematic AML control failures at OKX's Maltese-licensed entity. 3 Apr 2025 - ESMA completed a fast-track peer review of MFSA's licensing and supervisory processes, focused on the authorisation and oversight of a crypto-asset provider, after OKX, Gemini and Crypto.com received Maltese licences since the start of 2025. 10 Jul 2025 - The CJEU ruled in a European Commission infringement case that Malta's investor citizenship ('golden passport') scheme breaches EU law because it commercialises nationality without requiring a genuine link to the Member State. 29 Apr 2025 - The Commission opened an infringement procedure against Malta for imposing on its courts an obligation to systematically refuse recognition and enforcement of other Member States' judgments against Maltese-licensed gaming companies, a practice that shields Malta-domiciled licensees from cross-border civil enforcement. 18 Jun 2025 ### Sanctions changes - 14 Apr 2026 - 14 Apr 2026 - 3 Aug 2026 - 4 Aug 2026 - 18 Aug 2026 - EU 19th sanctions package added 117 shadow-fleet vessel listings (bringing the total to 557), listed maritime registries providing false flags to shadow-fleet vessels, and for the first time sanctioned crypto/stablecoin infrastructure (A7A5) used to finance Russia's war economy; measures bear directly on Malta as a significant flag-state and maritime-services jurisdiction. 23 Oct 2025 - EU Council sanctioned a further 41 shadow-fleet vessels (bringing designated vessels to almost 600) and nine shadow-fleet enablers, alongside a joint EU/Member State declaration on using international law-of-the-sea powers against the shadow fleet threatening undersea infrastructure. 18 Dec 2025 - UK forces (Royal Marines/National Crime Agency) boarded a sanctioned shadow-fleet tanker in the English Channel, the first such UK-led interdiction, treating stateless/falsely-flagged vessels under UNCLOS Article 110 powers rather than relying solely on port-access bans. 14 Jun 2026 ### Regulatory horizon (register) - AMLA Work Programme / build-out - FIAU Enforcement Guide publication - FIAU Enforcement Guide (new) - AML Regulation (AMLR) general application date for Malta - AMLA direct supervision of selected high-risk entities begins - 6th AML Directive transposition deadline for Malta - Malta's legislative response to CJEU golden-passport ruling ### Active schemes - [HIGH] Malta citizenship-by-investment (golden passport) programme - [HIGH] Malta-licensed VASP exposure to laundering flows - Maltese flag reflagging in Russian shadow-fleet chain Sources - [https://fiaumalta.org/](https://fiaumalta.org/) - [https://www.mondaq.com/money-laundering/1807710/how-maltas-amlcft-enforcement-framework-is-changing](https://www.mondaq.com/money-laundering/1807710/how-maltas-amlcft-enforcement-framework-is-changing) - [https://gtg.com.mt/the-new-enforcement-framework-of-the-fiau-an-overview/](https://gtg.com.mt/the-new-enforcement-framework-of-the-fiau-an-overview/) - [https://fiaumalta.org/news/key-aml-updates-explained-training-opportunity-on-settlements-legislative-changes-and-guidance-documents/](https://fiaumalta.org/news/key-aml-updates-explained-training-opportunity-on-settlements-legislative-changes-and-guidance-documents/) - [https://www.lawyersinmalta.com/maltas-aml-regulations-2026/](https://www.lawyersinmalta.com/maltas-aml-regulations-2026/) - [https://shoulder.mt/fiau-strengthens-aml-cft-enforcement-powers-key-changes-to-the-pmlftr-and-cbar-regulations/](https://shoulder.mt/fiau-strengthens-aml-cft-enforcement-powers-key-changes-to-the-pmlftr-and-cbar-regulations/) - [https://www.acams.org/en/enforcement-action/malta-fiau-issues-administrative-measure-against-notary-public-for-aml-ctf-violations](https://www.acams.org/en/enforcement-action/malta-fiau-issues-administrative-measure-against-notary-public-for-aml-ctf-violations) - [https://www.mbr.mt/post/malta-taken-off-the-fatf-greylist](https://www.mbr.mt/post/malta-taken-off-the-fatf-greylist) - [https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html) - [https://www.fatf-gafi.org/en/countries/detail/Cambodia.html](https://www.fatf-gafi.org/en/countries/detail/Cambodia.html) - [https://ofac.treasury.gov/recent-actions](https://ofac.treasury.gov/recent-actions) - [https://www.sanctionsexpert.com/post/last-week-s-major-developments-in-sanctions-august-3-to-august-7-2026](https://www.sanctionsexpert.com/post/last-week-s-major-developments-in-sanctions-august-3-to-august-7-2026) - [https://www.steptoe.com/en/news-publications/international-compliance-blog/weekly-sanctions-update-august-17-2026.html](https://www.steptoe.com/en/news-publications/international-compliance-blog/weekly-sanctions-update-august-17-2026.html) - [https://www.coindesk.com/policy/2026/06/18/malta-s-financial-regulator-explores-bringing-parts-of-defi-under-mica-s-orbit](https://www.coindesk.com/policy/2026/06/18/malta-s-financial-regulator-explores-bringing-parts-of-defi-under-mica-s-orbit) - [FATF](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Mutualevaluationofmalta.html) - [FIAU Malta](https://fiaumalta.org/) - [Malta Gaming Authority](https://www.mga.org.mt/mga-enhances-regulatory-oversight-and-outlines-2026-supervisory-priorities/) - [MFSA](https://www.mfsa.mt/publication/vfa-licence-and-transition-to-casp-under-the-markets-in-crypto-assets-act-mica-act/) - [Wikipedia](https://en.wikipedia.org/wiki/Crime_in_Malta) - [https://www.prnewswire.com/news-releases/maltas-fiau-reports-strengthened-amlcft-preparedness-international-engagement-and-operational-delivery-in-2025-302808139.html](https://www.prnewswire.com/news-releases/maltas-fiau-reports-strengthened-amlcft-preparedness-international-engagement-and-operational-delivery-in-2025-302808139.html) - [https://www.amlintelligence.com/2025/12/insight-malta-fiau-to-launch-new-enforcement-guide-after-court-rulings-on-fines/](https://www.amlintelligence.com/2025/12/insight-malta-fiau-to-launch-new-enforcement-guide-after-court-rulings-on-fines/) - [https://finance.ec.europa.eu/financial-crime/anti-money-laundering-and-countering-financing-terrorism-international-level_en](https://finance.ec.europa.eu/financial-crime/anti-money-laundering-and-countering-financing-terrorism-international-level_en) - [https://eur-lex.europa.eu/eli/reg_del/2025/1184/oj/eng](https://eur-lex.europa.eu/eli/reg_del/2025/1184/oj/eng) - [https://legislation.mt/eli/sl/373.1/eng/pdf](https://legislation.mt/eli/sl/373.1/eng/pdf) - [https://fiaumalta.org/app/uploads/2026/06/Implementing-Procedures-Part-1-2026-1.pdf](https://fiaumalta.org/app/uploads/2026/06/Implementing-Procedures-Part-1-2026-1.pdf) - [https://fiaumalta.org/app/uploads/2026/07/Implementing-Procedures-Part-1-1-1-2026-1.pdf](https://fiaumalta.org/app/uploads/2026/07/Implementing-Procedures-Part-1-1-1-2026-1.pdf) - [GTG Legal](https://gtg.com.mt/the-new-enforcement-framework-of-the-fiau-an-overview/) - [FIAU Malta](https://fiaumalta.org/what-we-do/enforcement/administrative/) - [ACAMS moneylaundering.com](https://www.acams.org/en/enforcement-action/malta-fiau-fines-stanleybet-malta-limited-eu225730-imposes-eu2000-daily-penalty) - [ACAMS moneylaundering.com](https://www.acams.org/en/enforcement-action/malta-fiau-fines-bnf-bank-plc-eu69000-cbar-reporting-failures) - [Complybridge](https://complybridge.xyz/regulators/fiau) - [Council of Europe / MONEYVAL](https://www.coe.int/en/web/moneyval/home/newsroom) - [EUR-Lex / Official Journal of the EU](https://eur-lex.europa.eu/eli/reg/2023/1114/oj/eng) - [FIAU Malta](https://fiaumalta.org/news/amla-updates-october-2026/) - [GTG Legal (law-firm commentary)](https://gtg.com.mt/the-new-enforcement-framework-of-the-fiau-an-overview/) - [MLRO Consulting (vendor commentary)](https://mlroconsulting.com/aml-requirements/aml-requirements-malta/) - [Malta Financial Services Authority](https://www.mfsa.mt/publication/prediction-markets-and-event-contracts/) - [CryptoSlate](https://cryptoslate.com/crypto-laws/malta-virtual-financial-assets-act-chapter-590/) - [Fieldfisher](https://www.fieldfisher.com/en/services/international-trade/trade-sanctions-blog/uk-eu-and-us-sanctions-on-russia) - [Financial Intelligence Analysis Unit (Malta)](https://fiaumalta.org/app/uploads/2026/07/Publication-Notice-16072026.pdf) - [Malta Ministry for Foreign and European Affairs and Trade](https://smb.gov.mt/gua4501/) - [Malta Gaming Authority](https://www.mga.org.mt/mga-issues-targeted-consultation-on-proposed-enhancements-to-the-recognition-notice-framework/) - [KnowYourCountry](https://www.knowyourcountry.com/country-aml-intelligence/country/malta/) - [Financial Intelligence Analysis Unit](https://fiaumalta.org/app/uploads/2026/09/Publication-Notice02092026.pdf) - [Mutual Evaluation of Malta](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Mutualevaluationofmalta.html) - [Malta](https://www.fatf-gafi.org/en/countries/detail/Malta.html) - [Mutual Evaluations](https://www.fatf-gafi.org/en/publications/Mutualevaluations.html) - [Malta's progress in strengthening measures to tackle money laundering and terrorist financing](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Fur-malta-2021.html) - [Committee of Experts on the Evaluation of Anti-Money Laundering Measures (MONEYVAL)](https://www.fatf-gafi.org/en/countries/global-network/committee-of-experts-on-the-evaluation-of-anti-money-laundering-.html) - [News](https://www.fatf-gafi.org/en/the-fatf/news.html) - [Consolidated assessment ratings](https://www.fatf-gafi.org/en/publications/Mutualevaluations/Assessment-ratings.html) - [Assessments](https://www.fatf-gafi.org/en/calendars/assessments.html) - [Malaysia's measures to counter money laundering, terrorist financing and proliferation financing](https://www.fatf-gafi.org/en/publications/Mutualevaluations/mer-malaysia-2025.html) - [Malta - Migration and Home Affairs - European Commission](https://home-affairs.ec.europa.eu/policies/internal-security/organised-crime/together-against-trafficking-human-beings/eu-countries/malta_en) - [June infringements package: key decisions - Representation in Malta](https://malta.representation.ec.europa.eu/news/june-infringements-package-key-decisions-2025-06-18_en) - [Anti-money laundering and countering the financing of terrorism at international level - Finance](https://finance.ec.europa.eu/financial-crime/anti-money-laundering-and-countering-financing-terrorism-international-level_en) - [OKX Fined by Malta for Breaching Anti-Money Laundering Rules - Bloomberg](https://www.bloomberg.com/news/articles/2025-04-04/okx-fined-by-malta-for-breaching-anti-money-laundering-rules) - [Commission partially greenlights Malta's fourth payment request for €51,5 million under NextGenerationEU - Representation in Malta](https://malta.representation.ec.europa.eu/news/commission-partially-greenlights-maltas-fourth-payment-request-eu515-million-under-nextgenerationeu-2026-03-20_en) - [March infringements package: key decisions on energy - European Commission](https://energy.ec.europa.eu/news/march-infringements-package-key-decisions-energy-2026-03-11_en) - [European e-Justice Portal - Enforcement](https://webgate.ec.europa.eu/e-justice/37165/EN/enforcement?MALTA=&member=1) - [goCASE Pre-Deployment Mission to the Financial Intelligence Analysis Unit (FIAU), Malta](https://gocase.unodc.org/gocase/events/MaltaFIAUFebruary2024.html) - [Malta Financial Services Authority (MFSA) | EU Digital Finance Platform](https://digital-finance-platform.ec.europa.eu/cross-border-services/cross-border-testing/participants/malta-financial-services-authority-mfsa) - [Civil Penalties and Enforcement Information | Office of Foreign Assets Control](https://ofac.treasury.gov/civil-penalties-and-enforcement-information) - [Administrative regime for the liquidation of credit institutions - European Commission](https://reform-support.ec.europa.eu/what-we-do/financial-sector-and-access-finance/administrative-regime-liquidation-credit-institutions_en) - [Malta Country Guide | Elliptic](https://www.elliptic.co/country-guides/malta) - [Officials: Poor Financial Crime Laws could hurt Malta’s growth | OCCRP](https://www.occrp.org/en/news/officials-poor-financial-crime-laws-could-hurt-maltas-growth) - [Special Measures | FinCEN.gov](https://www.fincen.gov/resources/statutes-and-regulations/special-measures) - [Fatf-gafi](https://fatf-gafi.org/media/fatf/documents/reports/mer-fsrb/Moneyval-Mutual-Evaluation-Report-Malta-2019.pdf) - [Conformity Assessment of Directive 2009/110/EC MALTA Final Report](https://finance.ec.europa.eu/system/files/2017-01/malta_en_6.pdf) - [Federal Register Notices | FinCEN.gov](https://www.fincen.gov/resources/statutes-regulations/federal-register-notices) - [Investor citizenship scheme: Commission refers MALTA to the Court of Justice](https://ec.europa.eu/commission/presscorner/detail/hr/ip_22_5422) - [EU Court Rules Malta's Golden Passport Program is Illegal | OCCRP](https://www.occrp.org/en/news/eu-court-rules-maltas-golden-passport-program-is-illegal) - [EU Court Ruling Could Open Door to More ‘Golden Passport’ Schemes | OCCRP](https://www.occrp.org/en/news/eu-court-ruling-could-open-door-to-more-golden-passport-schemes) - [EU Bans Sale of 'Golden Passports' as Trump Opens Doors](https://www.bloomberg.com/news/articles/2025-04-29/top-eu-court-bans-golden-passports-sold-to-rich-foreigners) - [Golden Visa Brokers Advise Clients to Hurry After Malta Ruling - Bloomberg](https://www.bloomberg.com/news/articles/2025-05-02/golden-visa-brokers-advise-clients-to-hurry-after-malta-ruling) - [Golden EU Passports for the Rich Get Legal Boost at Bloc’s Highest Court - Bloomberg](https://www.bloomberg.com/news/articles/2024-10-04/golden-eu-passports-for-the-rich-get-legal-boost-at-bloc-s-highest-court) - [Investor citizenship scheme: Commission refers MALTA to the Court of Justice - Representation in Malta](https://malta.representation.ec.europa.eu/news/investor-citizenship-scheme-commission-refers-malta-court-justice-2022-09-29_en) - [‘Golden passport' schemes: Commission proceeds with infringement case against MALTA - Representation in Malta](https://malta.representation.ec.europa.eu/news/golden-passport-schemes-commission-proceeds-infringement-case-against-malta-2022-04-06_en) - [EU Citizenship for Sale: Malta Taken to Court Over Lucrative Golden Passports - Bloomberg](https://www.bloomberg.com/news/articles/2022-09-29/malta-taken-to-eu-s-top-court-over-lucrative-golden-passports) - [New report on golden passport schemes puts Malta back in the spotlight | European Website on Integration](https://ec.europa.eu/migrant-integration/news/new-report-golden-passport-schemes-puts-malta-back-spotlight_en) - [EU Markets Watchdog Criticizes Malta Over Crypto Oversight - Bloomberg](https://www.bloomberg.com/news/articles/2025-07-10/eu-markets-watchdog-criticizes-malta-for-crypto-oversight-lapses) - [OKX EUROPE MARKETS LIMITED - LEI: 984500368874BC14E281](https://lei.bloomberg.com/leis/view/984500368874BC14E281) - [Malta Fights Back Against EU's Crypto Regulation Plans - Bloomberg](https://www.bloomberg.com/news/articles/2026-04-01/malta-fights-back-against-eu-s-crypto-regulation-plans) - [Crypto Firm OKX Launches US Exchange After Settling DOJ Charges - Bloomberg](https://www.bloomberg.com/news/articles/2025-04-16/crypto-firm-okx-launches-us-exchange-after-settling-doj-charges) - [Crypto Exchange OKX Suspends DeFi Service After EU Scrutiny - Bloomberg](https://www.bloomberg.com/news/articles/2025-03-17/crypto-exchange-okx-suspends-defi-service-that-drew-eu-scrutiny) - [OKEx | EU Digital Finance Platform](https://digital-finance-platform.ec.europa.eu/observatory/eu-fintech-map/okex) - [Binance, exchanges moved dirty crypto after crackdown](https://www.icij.org/investigations/coin-laundry/cryptocurrency-exchanges-binance-okx-money-laundering-crime/) - [Andrew Cuomo Advised Crypto Exchange OKX on Its Response to US Probe - Bloomberg](https://www.bloomberg.com/news/articles/2025-04-02/cuomo-advised-crypto-exchange-okx-on-its-response-to-us-probe) - [ICIJ Offshore Leaks Database](https://offshoreleaks.icij.org/pages/faq#not_everyone_guilty) - [Frequently asked questions about the Pandora Papers and ICIJ - ICIJ](https://www.icij.org/investigations/pandora-papers/frequently-asked-questions-about-the-pandora-papers-and-icij/) - [About the Pandora Papers - ICIJ](https://www.icij.org/investigations/pandora-papers/about-pandora-papers-investigation/) - ['Urgent' EU Plan to End Secret Company Ownership Poised to Miss Deadline - ICIJ](https://www.icij.org/investigations/panama-papers/urgent-eu-plan-to-end-secret-company-ownership-poised-to-miss-deadline/) - [Browse by country Malta | ICIJ Offshore Leaks Database](https://offshoreleaks.icij.org/search?c=MLT) - [Pandora Papers - ICIJ](https://www.icij.org/investigations/pandora-papers/) - [Cyprus, Ghana and Kenya join growing list of countries to create beneficial ownership registries - ICIJ](https://www.icij.org/investigations/panama-papers/cyprus-ghana-and-kenya-join-growing-list-of-countries-to-create-beneficial-ownership-registries/) - [ICIJ reveals more than 800 Russians behind secret companies in landmark expansion of public offshore database - ICIJ](https://www.icij.org/investigations/pandora-papers/alpha-offshore-leaks-database-pandora-papers-russia/) - [Pandora Papers: An offshore data tsunami - ICIJ](https://www.icij.org/investigations/pandora-papers/about-pandora-papers-leak-dataset/) - [CUSTOMER SERVICE INTERNATIONAL TRADING | ICIJ Offshore Leaks Database](https://offshoreleaks.icij.org/nodes/55009468) - [European Ships Keep Russia’s Shadow Fleet Afloat | OCCRP](https://www.occrp.org/en/investigation/european-ships-keep-russias-shadow-fleet-afloat) - [Russia's war of aggression against Ukraine: Council sanctions 41 vessels of the Russian shadow fleet - Consilium](https://www.consilium.europa.eu/en/press/press-releases/2025/12/18/russia-s-war-of-aggression-against-ukraine-council-sanctions-41-vessels-of-the-russian-shadow-fleet/) - [EU sanctions against Russia: questions and answers - Consilium](https://www.consilium.europa.eu/en/policies/sanctions-against-russia-explained/) - [European Nations Issue Warning to Russia-Linked Shadow Fleet - Bloomberg](https://www.bloomberg.com/news/articles/2026-01-27/european-nations-issue-warning-to-russia-linked-shadow-fleet) - [Russia Blames Ukraine for First Attack on LNG Shadow Fleet - Bloomberg](https://www.bloomberg.com/news/articles/2026-03-04/russia-blames-ukraine-for-first-attack-on-lng-shadow-fleet) - [UK forces intercept Russian shadow fleet vessel for the first time in blow to Putin's war chest - GOV.UK](https://www.gov.uk/government/news/uk-forces-intercept-russian-shadow-fleet-vessel-for-the-first-time-in-blow-to-putins-war-chest) - [19th package of sanctions against Russia: EU targets Russian energy, third-country banks and crypto providers - Consilium](https://www.consilium.europa.eu/en/press/press-releases/2025/10/23/19th-package-of-sanctions-against-russia-eu-targets-russian-energy-third-country-banks-and-crypto-providers/) - [EU adopts 19th package of sanctions against Russia - Finance](https://finance.ec.europa.eu/news/eu-adopts-19th-package-sanctions-against-russia-2025-10-23_en) - [From Wagner to GRU, Russian Military Men Are Manning Moscow’s Shadow Fleet | OCCRP](https://www.occrp.org/en/investigation/from-wagner-to-gru-russian-military-men-are-manning-moscows-shadow-fleet) - [1 Red ALERT Shadow Fleet Sanctions Evasion and Avoidance Network](https://www.nationalcrimeagency.gov.uk/who-we-are/publications/753-red-alert-shadow-fleet-sanctions-evasion-and-avoidance-network/file) - [Jurisdictions under Increased Monitoring - June 2021](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/Increased-monitoring-june-2021.html) - [Countries / Jurisdictions](http://www.fatf-gafi.org/countries/#Malta) - [Mutual Evaluation of Malta](https://www.fatf-gafi.org/en/countries/j-m/malta/documents/mutualevaluationofmalta.html) - [Fatf-gafi](https://www.fatf-gafi.org/content/dam/fatf-gafi/fsrb-fur/Moneyval-FUR-Malta.pdf.coredownload.inline.pdf) - [On the decline since Panama Papers, Malta punished for dirty money reputation - ICIJ](https://www.icij.org/inside-icij/2021/07/on-the-decline-since-panama-papers-malta-punished-for-dirty-money-reputation/) - [Financial Action Task Force Identifies Jurisdictions with Anti-Money Laundering and Combating the Financing of Terrorism and Counter-Proliferation Deficiencies | FinCEN.gov](https://www.fincen.gov/news/news-releases/financial-action-task-force-identifies-jurisdictions-anti-money-laundering-and) - ["Black and grey" lists](https://www.fatf-gafi.org/en/countries/black-and-grey-lists.html) - [Jurisdictions under Increased Monitoring - June 2022](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/Increased-monitoring-june-2022.html) - [Outcomes FATF Plenary, 14-17 June 2022](https://www.fatf-gafi.org/en/publications/Fatfgeneral/Outcomes-fatf-plenary-june-2022.html) - [Financial Action Task Force Identifies Jurisdictions with Anti-Money Laundering and Combating the Financing of Terrorism and Counter-Proliferation Deficiencies | FinCEN.gov](https://www.fincen.gov/news/news-releases/financial-action-task-force-identifies-jurisdictions-anti-money-laundering-and-2) - [Jurisdictions under Increased Monitoring - March 2022](https://www.fatf-gafi.org/en/publications/high-risk-and-other-monitored-jurisdictions/documents/increased-monitoring-march-2022.html) - [Countries / Jurisdictions](https://www.fatf-gafi.org/countries/) - [Documents - Financial Action Task Force (FATF)](http://search.fatf-gafi.org/publications/fatfgeneral/documents/outcomes-fatf-plenary-june-2022.html) - [FATF changes its grey listing criteria to further focus on risk](https://www.fatf-gafi.org/content/fatf-gafi/en/publications/Fatfgeneral/FATF-grey-listing-criteria.html) - [Timeline: EU action against money laundering and terrorist financing - Consilium](https://www.consilium.europa.eu/en/policies/fight-against-terrorist-financing/timeline/) - [About AMLA - Authority for Anti-Money Laundering and Countering the Financing of Terrorism](https://finance.ec.europa.eu/financial-crime/amla/about-amla_en) - [Frankfurt to host the EU’s new anti-money laundering authority (AMLA) - Consilium](https://www.consilium.europa.eu/en/press/press-releases/2024/02/22/frankfurt-to-host-the-eus-new-anti-money-laundering-authority-amla/) - [Homepage - Authority for Anti-Money Laundering and Countering the Financing of Terrorism](https://finance.ec.europa.eu/financial-crime/amla_en/) - [Anti-money laundering and countering the financing of terrorism at EU level - Finance](https://finance.ec.europa.eu/financial-crime/anti-money-laundering-and-countering-financing-terrorism-eu-level_en) - [Questions and Answers: The new EU Anti-Money Laundering Authority (AMLA)](https://finance.ec.europa.eu/document/download/61cf5a0d-0e5d-43e2-876a-8e68e45c7f1f_en?filename=240424-anti-money-laundering-faqs_en_0.pdf) - [FAQs - Authority for Anti-Money Laundering and Countering the Financing of Terrorism](https://finance.ec.europa.eu/financial-crime/amla/frequently-asked-questions_en) - [Anti-money laundering and countering the financing of terrorism overview - Finance](https://finance.ec.europa.eu/financial-crime/anti-money-laundering-and-countering-financing-terrorism-overview_en) - [Anti-money laundering: Council and Parliament agree to create new authority - Consilium](https://www.consilium.europa.eu/en/press/press-releases/2023/12/13/anti-money-laundering-council-and-parliament-agree-to-create-new-authority/) - [Interinstitutional files: 2025/0381 (COD) 2025/0382 (COD) 2025/0383 (COD)](https://data.consilium.europa.eu/doc/document/WK-7290-2026-INIT/en/pdf) - [Fatf-gafi](https://www.fatf-gafi.org/media/fatf/documents/reports/mer-fsrb/Moneyval-Mutual-Evaluation-Report-Malta-2019.pdf) - [Money laundering and terrorist financing risks](https://www.fatf-gafi.org/en/publications/Methodsandtrends/Ml-tf-risks.html) - [Quick guide on assessing the Money Laundering risks of virtual assets (VA) and virtual asset service providers (VASP)](https://www.fatf-gafi.org/en/publications/Methodsandtrends/quick-guide-on-assessing-ML-risks-of-VA-and-VASPs.html) - [Updated Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers](https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Guidance-rba-virtual-assets-2021.html) - [Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers](https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Guidance-rba-virtual-assets.html) - [Virtual Assets](https://www.fatf-gafi.org/en/topics/virtual-assets.html) - [Jurisdictions under Increased Monitoring - 24 October 2025](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-october-2025.html) - [High-Risk Jurisdictions subject to a Call for Action - 24 October 2025](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/Call-for-action-october-2025.html) - [Outcomes FATF Plenary, 22-24 October 2025](https://www.fatf-gafi.org/en/publications/Fatfgeneral/outcomes-FATF-plenary-october-2025.html) - [High-risk and other monitored jurisdictions](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions.html) - [Jurisdictions under Increased Monitoring - 13 February 2026](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-february-2026.html) - [Jurisdictions under Increased Monitoring - 21 February 2025](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-february-2025.html) - [Jurisdictions under Increased Monitoring - 19 June 2026](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html) - [Vietnam](https://www.fatf-gafi.org/en/countries/detail/Vietnam.html) - [Page 1 of 4 HM Treasury Advisory Notice: Changes to the FATF’s Public Lists](https://assets.publishing.service.gov.uk/media/68f8d5146a52e8a2726dc29d/Advisory_Notice_FATF_list_changes_October_2025.pdf) - [Financial Intelligence Analysis Unit (FIAU) Malta](https://fiaumalta.org/app/uploads/2024/03/PublicNRA_Dec2023.pdf) - [FATF](https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-october-2025.html) - [European Commission / AMLA](https://finance.ec.europa.eu/financial-crime/amla/about-amla_en) - [European Commission Representation in Malta](https://malta.representation.ec.europa.eu/news/june-infringements-package-key-decisions-2025-06-18_en) - [Bloomberg](https://www.bloomberg.com/news/articles/2025-04-04/okx-fined-by-malta-for-breaching-anti-money-laundering-rules) - [Bloomberg](https://www.bloomberg.com/news/articles/2025-07-10/eu-markets-watchdog-criticizes-malta-for-crypto-oversight-lapses) - [OCCRP](https://www.occrp.org/en/news/eu-court-rules-maltas-golden-passport-program-is-illegal) - [OCCRP](https://www.occrp.org/en/investigation/european-ships-keep-russias-shadow-fleet-afloat) - [Council of the European Union](https://www.consilium.europa.eu/en/press/press-releases/2025/10/23/19th-package-of-sanctions-against-russia-eu-targets-russian-energy-third-country-banks-and-crypto-providers/) - [ICIJ](https://www.icij.org/investigations/coin-laundry/cryptocurrency-exchanges-binance-okx-money-laundering-crime/) Coverage gaps fim-int-2026-07-11-G001: No conflict-finance/extractive-indu… fim-int-2026-07-11-G001: No conflict-finance/extractive-industry finding was sourced this cycle; coverage gap for the D4 domain. [resolved] fim-int-2026-07-11-G002: No RegTech/compliance-technology de… fim-int-2026-07-11-G002: No RegTech/compliance-technology development was sourced this cycle for MT or global scope. [resolved] fim-int-2026-07-11-G003: A second distinct TBML corridor (e.… fim-int-2026-07-11-G003: A second distinct TBML corridor (e.g. UAE over/under-invoicing or a LatAm trade-triangle) beyond the Mexico cartel-casino corridor could not be sourced. [resolved] fim-int-2026-07-11-G004: Tier-D Cambodia (KH) casino/remitta… fim-int-2026-07-11-G004: Tier-D Cambodia (KH) casino/remittance check yielded no qualifying material this cycle. [resolved] fim-int-2026-07-11-G005: No Yemen/Houthi sanctions-evasion c… fim-int-2026-07-11-G005: No Yemen/Houthi sanctions-evasion channel update was found this cycle for the T1 tracker. [resolved] fim-int-2026-07-11-G006: EU Official Journal direct-text con… fim-int-2026-07-11-G006: EU Official Journal direct-text confirmation of Malta's full 6AMLD national transposition instrument for gaming subject persons was not retrieved; transposition completeness for Malta remains not established this cycle. [resolved] fim-int-2026-08-05-G001: No Tier-1 primary Government Gazett… fim-int-2026-08-05-G001: No Tier-1 primary Government Gazette or FIAU publication text was retrieved for LN 82/2026 itself this cycle. [resolved] fim-int-2026-08-05-G002: No MX or CO Tier-D signal surfaced … fim-int-2026-08-05-G002: No MX or CO Tier-D signal surfaced despite active search this cycle. [resolved] fim-int-2026-08-05-G003: MT's transposition status for 6AMLD… fim-int-2026-08-05-G003: MT's transposition status for 6AMLD provisions beyond Articles 11-13/15 not established this cycle. [resolved] fim-int-2026-08-21-G001: Malta's MT-specific 6AMLD transposi… fim-int-2026-08-21-G001: Malta's MT-specific 6AMLD transposition status was not independently verified this cycle. [resolved] fim-int-2026-08-21-G002: No fresh Tier D material for Mexico… fim-int-2026-08-21-G002: No fresh Tier D material for Mexico or Colombia was located within the pooled search budget this cycle. [resolved] fim-int-2026-08-21-G003: D4 conflict-finance coverage was th… fim-int-2026-08-21-G003: D4 conflict-finance coverage was thin this cycle; no MT-specific or comparator finding was identified. [resolved] fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): No MT-specific 2026 MONEYVAL follow-up report text was retrieved this pass; D7 status assessed as no-material-change pending a dedicated document-level check next cycle. [resolved] fim-int-2026-09-28-G002: D1-D4 and D6 were not substantively… fim-int-2026-09-28-G002: D1-D4 and D6 were not substantively resolved for Malta specifically within this pass's research budget. [resolved] fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', 'value': 'D2'}): 6AMLD transposition status specific to Malta and any AMLR/AMLA direct-supervision designation touching Malta-domiciled obliged entities were not established this cycle. [resolved] fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): No Tier-1 gazetted text of Legal Notices 82 and 83 of 2026 was retrieved this cycle; finding capped at Probable confidence. [resolved] fim-int-2026-10-04-G002: D1, D3, D4 and D6 produced no MT-sp… fim-int-2026-10-04-G002: D1, D3, D4 and D6 produced no MT-specific qualifying finding this cycle due to source coverage limits. [resolved] fim-int-2026-10-04-G003: Tier D watch jurisdictions (KH/LA/M… fim-int-2026-10-04-G003: Tier D watch jurisdictions (KH/LA/MX/CO) were not re-searched in this MT-bound single-JID dispatch. [resolved] fim-int-2026-10-06-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-06-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): FIAU Implementing Procedures retention/deletion stance (five years, extendable) lacks a verbatim quote this cycle and could not be confirmed; needs primary-source pinpoint on s.9. [resolved] fim-int-2026-10-06-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-10-06-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): PMLFTR reg. 12 reliance conditions and FIAU Implementing Procedures Part I s.4.10 detail lack a verbatim quote this cycle; needs primary-source confirmation. [resolved] fim-int-2026-10-06-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-10-06-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): PMLFTR reg. 13(2) retention-period detail for EMI distributor relationships lacks a verbatim quote this cycle; needs primary-source confirmation. [resolved] fim-int-2026-10-06-G004 ({'scheme': 'financial_integrity', '… fim-int-2026-10-06-G004 ({'scheme': 'financial_integrity', 'value': 'D7'}): 6AMLD transposition status for Malta was not established this cycle; per the canonical jurisdiction edges note, MT research is delta-only against the EEA parent layer, so this is expected and not escalated further. [resolved] fim-int-2026-10-12-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-12-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): The FIAU's primary Legal Notice 82/2026 text was not independently retrieved this cycle; the settlement-agreement framework rests on secondary legal commentary only. [resolved] fim-int-2026-10-12-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-10-12-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): No current-cycle MONEYVAL follow-up report for Malta was located; the most recent located material is from Malta's earlier enhanced follow-up cycle. [resolved] fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): No MT-specific sanctions (D1) development was located this cycle within the single-JID search scope. [resolved] fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): Gambling-specific CDD timing, outsourcing/reliance, tipping-off and payment-account-control provisions were not independently verified against FIAU Implementing Procedures Part II (gaming sector) this cycle. [resolved] fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', 'value': 'D4'}): D3/D4 MT-specific domain updates and Tier D jurisdiction watch (KH/LA/MX/CO) are not applicable to this single-JID periodic pass. [resolved] fim-int-2026-10-25-G001: Tier D watch jurisdictions (KH, LA,… fim-int-2026-10-25-G001: Tier D watch jurisdictions (KH, LA, MX, CO) were not actively searched this cycle; the shared research budget was concentrated on Malta. [resolved] fim-int-2026-10-25-G002: D1-D4 and D6 MT-specific developmen… fim-int-2026-10-25-G002: D1-D4 and D6 MT-specific developments this cycle could not be confirmed or denied beyond standing-position assumption; coverage was thin. [resolved] fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', '… fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', 'value': 'D3'}): Which specific proposed RN-framework amendments were dropped, per the MGA's own Feedback Statement, was not independently confirmed; press characterisation rests on a single T3 source only. [open] fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', '… fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): Whether a Malta-specific AMLR/6AMLD transposition delta exists was not established within this window's narrower search scope. [open] fim-int-2026-11-01-G003 ({'scheme': 'financial_integrity', '… fim-int-2026-11-01-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): Whether a Malta-specific AMLR/6AMLD transposition delta is pending was not confirmed within a narrower search window. [open] FIM-GAP-001 (D2): Malta's citizenship-by-investment programm… FIM-GAP-001 (D2): Malta's citizenship-by-investment programme has been ruled unlawful by the CJEU but had not been formally repealed or replaced with a compliant alternative as of mid-2026, leaving a legal-gap window in which a PEP/opaque-wealth citizenship conduit could persist in modified form. FIM-GAP-002 (D5): ESMA's 2025 peer review found deficiencies… FIM-GAP-002 (D5): ESMA's 2025 peer review found deficiencies in MFSA's crypto-asset authorisation and oversight processes precisely during a period in which major global exchanges (OKX, Gemini, Crypto.com) obtained Maltese licences, indicating supervisory capacity has not kept pace with licensing volume. FIM-GAP-003 (D1): Malta, alongside Greece and Cyprus, has ex… FIM-GAP-003 (D1): Malta, alongside Greece and Cyprus, has expressed concern over stricter EU shadow-fleet enforcement measures given the size of its maritime/shipping sector, constraining the pace and stringency of flag-state accountability reform. FIM-GAP-004 (D3): No specific, dated post-2022 MONEYVAL foll… FIM-GAP-004 (D3): No specific, dated post-2022 MONEYVAL follow-up report confirming Malta's exit from (or continued status within) enhanced follow-up was located during this baseline; the FATF Malta country page shows only a generic 'latest update: June 2025' timestamp on the 2021 Follow-Up Report page. ## Evidence #### Confidence-tiered claims FIAU amended the PMLFTR and CBAR Regulations via Legal Notices 82 and 83 of 2026, introducing periodic penalty payments aimed at remediation of ongoing deficiencies, alongside an April 2026 Settlement Process and a planned Enforcement Guide. [[Source 1]](#sec-sources) Probable · 1 source Appointed Vice-Chair of MONEYVAL for the 2026-2028 term. [[Source 1]](#sec-sources) Probable · 1 source 10,721 suspicious transaction reports received, 150 supervisory interventions conducted, 71 enforcement measures issued in 2025. [[Source 1]](#sec-sources) Probable · 1 source Remains off the FATF grey list (removed June 2022); MONEYVAL follow-up continues with no plenary action found this cycle. [[Source 1]](#sec-sources) Probable · 1 source Administrative fines under the PMLFTR can reach up to EUR 5,000,000 or 10% of turnover. [[Source 1]](#sec-sources) Uncertain · 1 source LN 82/2026 amends the PMLFTR to let the FIAU enter settlement agreements on administrative penalties, including cases already in appeal, and defines AML/CTF more broadly. [[Source 1]](#sec-sources) Probable · 1 source FIAU fined Stanleybet Malta Limited EUR225,730 plus EUR2,000/day recurring penalty for CDD failures; matter under appeal. [[Source 1]](#sec-sources) Probable · 1 source FIAU fined BNF Bank p.l.c. EUR69,000 for CBAR cross-border account/wire reporting failures. [[Source 1]](#sec-sources) Probable · 1 source Malta's VFA Act (Cap. 590) repealed 3 July 2026 at the end of the maximum 18-month MiCA grandfathering period; MiCA/Cap. 647 is now the sole domestic crypto-asset framework. [[Source 1]](#sec-sources) Probable · 1 source Reliance permitted only for reg. 7(1)(a)-(c), relying person ultimately responsible; reg. 12(6) excludes contractual outsourcing/agency; FIAU IP Part I s.4.10 (last amended 27 April 2026) requires documented equivalence assessment, immediate pre-relationship information, written agreement with immediate-copy rights, 5-working-day FIAU-request response capability, no chains of reliance, and the relying firm's own risk assessment and ongoing monitoring Uncertain five years, extendable to a maximum of ten years, measured from the EMI's own obligation rather than from when a distributor's contract ends Uncertain AMLA submitted three final RTS packages under AMLR (Art 19(9) thresholds, Art 28(1) CDD, Arts 16(4)/17(3) group-wide requirements) to the European Commission on 2 October 2026 [[Source 1]](#sec-sources) Probable · 1 source Six-month transitional window (LN 82-83/2026) for subject persons with pending appeals to seek out-of-court settlement ended around 28 September 2026; standing settlement regime (cap of two agreements per subject/group per two years) continues [[Source 1]](#sec-sources) Probable · 1 source Formally repealed effective 3 July 2026 under Act XXXVI of 2024; CASP/MiCA regime now the exclusive basis for crypto-asset services in Malta [[Source 1]](#sec-sources) Probable · 1 source Gambling subject persons file STRs/SARs with the FIAU under the PMLA/PMLFTR whenever they know, suspect or have reasonable grounds to suspect money laundering or terrorist financing [[Source 1]](#sec-sources) Probable · 1 source Legal Notices 82 and 83 of 2026 (entered into force 1 April 2026) amended the PMLFTR and Centralised Bank Account Register Regulations, introducing FIAU settlement agreements and a regulation 23 reprimand/desist power, applying to payment institutions as PMLFTR-obliged entities [[Source 1]](#sec-sources) Probable · 1 source Prediction markets/event contracts may fall under MiFID II, MiCA, or gambling law depending on contract features and operator activity. [[Source 1]](#sec-sources) Probable · 1 source Repealed on 3 July 2026 following expiry of the MiCA Article 143 transitional period on 1 July 2026; superseded by the Markets in Crypto-Assets Act, Chapter 647. [[Source 1]](#sec-sources) Probable · 1 source On 12 October 2026 the EU designated 1,569 individuals and entities linked to Russia's military-industrial complex. [[Source 1]](#sec-sources) Probable · 1 source concluded [[Source 1]](#sec-sources) Probable · 1 source concluded_feedback_statement_circulated [[Source 1]](#sec-sources) Probable · 1 source