Netherlands NL

The Netherlands occupies a dual position in the EU sanctions architecture against Russia: it is a frontline enforcement node for the measures the Council adopts, and it has repeatedly been the physical host for infrastructure those same measures are designed to disrupt. The EU 19th sanctions package, adopted 23 October 2025, introduced the first-ever EU sanctions on crypto providers, targeting the Russian state-linked A7A5 stablecoin ecosystem, alongside a phased LNG import ban, closed exemptions for Rosneft and Gazprom Neft, and 117 additional shadow-fleet vessel listings bringing the total to 557. The EU 20th sanctions package, adopted 23 April 2026, added 46 further vessel listings for a total of 632, delisted 11 vessels assessed as compliant, introduced a mandatory no-Russia resale clause and a scrapping clause for shadow-fleet exit, and listed Murmansk, Tuapse and the Karimun Oil Terminal in Indonesia as circumvention-linked ports. Both instruments are Council regulations, directly applicable in the Netherlands with no national transposition step, meaning the full designation set takes immediate domestic effect. Rotterdam, as the largest port in Europe, functions as a frontline node for the resulting port-access enforcement, giving the Netherlands an outsized operational role in implementing an architecture set at EU level.

The reverse side of this frontline role is enablement. Russian-linked no-KYC exchanges, Cryptex and PM2BTC, and a DPRK Lazarus-linked mixer successor, Sinbad.io, repeatedly located servers and hosting infrastructure physically in the Netherlands despite offshore beneficial ownership and predicate criminality disconnected from Dutch soil. Disruption of the Cryptex and PM2BTC infrastructure occurred through a coordinated action on 26 September 2024 involving OFAC designation, a FinCEN finding naming PM2BTC a primary money-laundering concern, and a joint seizure operation by the US Secret Service, Netherlands Police and FIOD. The pattern is reactive rather than proactive: Dutch enforcement acted once foreign partners, principally US authorities, had already identified the infrastructure and its criminal nexus. Whether successor hosting has since emerged in the Netherlands is not established this cycle, an explicit gap for forward monitoring.

A further architectural signal is the divergence exposed by the Karimun, Indonesia port listing, which has no direct OFAC or OFSI equivalent. Dutch trading houses and Rotterdam-based shipping and insurance intermediaries face compliance friction from operating across EU, US and UK sanctions lists that do not fully align on port-level and crypto-provider designations, a structural feature of the current sanctions landscape rather than a one-off gap, and one that creates an arbitrage surface for intermediaries structuring transactions to fall between regimes.

Outlook

The sanctions architecture affecting the Netherlands will continue to expand through further EU packages, each taking immediate direct effect domestically, while the crypto-hosting enablement pattern is structural and unlikely to resolve through designation activity alone. Whether Dutch authorities develop independent detection capability for illicit infrastructure hosted on national soil, rather than continuing to rely on foreign-partner referral, is the central forward-looking question for this domain, alongside whether the EU-US-UK divergence on port and crypto-provider listings will widen or narrow in subsequent packages.

The standing structural backdrop against which any Netherlands beneficial-ownership signal must be read is the three-instrument EU AML Package. The AML Regulation, Regulation (EU) 2024/1624, is directly applicable and does not require national transposition, and is expected to become applicable from 2027, progressively superseding parts of the Dutch Wwft framework, including its customer due diligence, beneficial-ownership and enhanced due diligence provisions. The sixth Anti-Money Laundering Directive is a separate instrument requiring transposition by each member state into national law, and the Anti-Money Laundering Authority Regulation, Regulation (EU) 2024/1620, established the Anti-Money Laundering Authority itself, which has been operational since mid-2025 from its Frankfurt seat under chair Bruna Szego. AMLA is expected to progressively select a first cohort of high-risk cross-border obliged entities for direct supervision, shifting the supervisory perimeter from purely national authorities toward a hybrid EU-level regime in which national supervisors such as DNB and AFM continue to operate alongside a centralised authority. This three-instrument architecture is the durable frame within which this cycle should be read, and it is structurally improving, though the Netherlands transposition status, vehicle and deadline for the sixth directive specifically are not established this cycle and are flagged as an open item rather than assumed complete.

Against that backdrop, the Netherlands rating from the Financial Action Task Force stands at 10 Compliant, 29 Largely Compliant and 1 Partially Compliant following a September 2025 enhanced follow-up report that upgraded Recommendation 15 on virtual-asset service providers. That upgrade did not touch the Netherlands beneficial-ownership definition, which the 2022 mutual evaluation found does not capture persons exercising ultimate effective control, a gap that continues to enable the use of Dutch conduit and mailbox companies with no genuine operational presence to access favourable tax-treaty terms and layer ownership. The Netherlands is not, and has never been, listed by the Financial Action Task Force, the European Union or the United Kingdom as a high-risk jurisdiction, a status re-confirmed as of June 2026. Domestic pre-positioning ahead of AMLR harmonisation includes a EUR 3,000 national cash-payment limit that entered into force on 1 January 2025 and additional capacity added to FIU-Nederland, though the scale and timing detail on the latter is thin.

Outlook

The Netherlands beneficial-ownership posture through this cycle is one of a technically compliant framework carrying an unresolved definitional gap that predates and will likely outlast the current follow-up cycle absent a dedicated re-rating exercise. The 2027 AMLR application date and the prospective AMLA direct-supervision cohort around 2028 create the structural opportunity to close the conduit-company misuse pattern, but whether the shift from national to hybrid EU-level supervision resolves the underlying definitional gap, or merely relocates the same structural weakness to a different supervisory layer, remains an open assessment question, compounded by the unresolved 6AMLD transposition status for the Netherlands specifically.

The Netherlands operates a twin-peaks AML/CFT supervisory architecture in which De Nederlandsche Bank handles prudential supervision and the Autoriteit Financiele Markten handles conduct supervision under the Wwft, with FIU-Nederland as the national financial intelligence unit. This structural description is foundational to assessing the Netherlands as an enabler jurisdiction under the Enabler Jurisdiction Filter, because the question is not whether a supervisory framework exists, but whether its capacity and intensity match the risk profile of the entities it oversees. On that question, the Financial Action Task Force continues to assess supervisory intensity for trust offices and corporate lawyers as insufficiently robust relative to identified risk, with unresolved legal ambiguity preventing effective implementation of preventive measures for corporate lawyers specifically. This finding predates and was not touched by the September 2025 follow-up report, which addressed only the virtual-asset recommendation.

The clearest illustration of the professional-facilitator and corporate-domicile dimension of Dutch enabler exposure is the Trafigura case. Trafigura Group, the Singapore-domiciled parent, and its Netherlands subsidiary, Trafigura Beheer B.V., together with former chief operating officer Mike Wainwright, were convicted by the Swiss Federal Criminal Court of bribery of an Angolan official spanning 2009 to 2011, with the conviction under appeal. The corporate structure sits in Amsterdam, yet criminal jeopardy, prosecution and enforcement resources were concentrated in Switzerland, Brazil and the United States, leaving Dutch authorities structurally peripheral to a bribery pattern channelled through a Dutch corporate wrapper. This is a capacity-versus-choice question in enabler-jurisdiction terms: the Netherlands functions as a low-friction domicile hub for global commodity-trading structures without itself directing or substantially detecting the underlying corruption, and enforcement action has occurred almost entirely through third-country referral rather than domestic-first investigation.

Outlook

The systemic significance of the Dutch enabler role in this domain lies less in any single case and more in the recurring pattern of corporate-domicile convenience combined with under-matched gatekeeper supervision. Whether the twin-peaks DNB/AFM model, as it is progressively absorbed into the AMLA supervisory perimeter, closes the DNFBP supervisory-intensity gap identified by the Financial Action Task Force, or whether legal ambiguity for corporate lawyers persists as a standing structural weakness independent of EU-level architecture change, is the key forward question for this domain.

The extractive-industry integrity signal for the Netherlands this cycle is channelled entirely through the Trafigura corporate structure, which is domiciled in Amsterdam as Trafigura Beheer B.V. while its underlying parent, Trafigura Group, sits in Singapore. The Swiss Federal Criminal Court convicted Trafigura Group, Trafigura Beheer B.V. and former chief operating officer Mike Wainwright of bribery of an Angolan official over conduct spanning 2009 to 2011, a conviction under appeal as of the most recent reporting available. In parallel, Trafigura Beheer B.V. pleaded guilty on 6 February 2025 in the United States District Court for the Southern District of Florida to conspiracy to violate the Foreign Corrupt Practices Act, arising from a decade of bribery, from 2003 to 2014, of officials at the Brazilian state oil company Petrobras, agreeing to pay over USD 126 million to the Department of Justice. A separate Brazilian civil settlement of USD 75.8 million was agreed on 31 March 2025 to resolve related civil claims, with partial credit applied against the US fine.

Read through the Conflict Finance Filter, tracing source, channel and deployment, the Angola and Brazil episodes together illustrate an extractive-sector corruption channel in which oil-sector contracts in producer states generated illicit proceeds that moved through a Dutch corporate wrapper without material Dutch-based detection or enforcement. This is a structural extractive-industry finding rather than an episodic one: three separate enforcement actions across three years, in three jurisdictions, arising from a single underlying decade-long pattern of conduct connected through one corporate structure domiciled in the Netherlands. The absence of a Dutch-led enforcement action in this sequence is itself an analytically significant data point regarding domestic detection capacity for extractive-sector corruption channelled through Dutch corporate vehicles.

Outlook

The Trafigura sequence closes out across Switzerland, Brazil and the United States with the appeal of the Swiss conviction as the only open procedural matter, but the broader question for this domain is whether the Netherlands develops any domestic-facing mechanism for detecting extractive-sector corruption laundered through Dutch corporate domiciles, given that none of the three 2025 enforcement actions originated from Dutch authorities.

The Netherlands combines an active crypto-enforcement track record with a constructive supervisory posture toward the sector, and this cycle marks the closure of a significant transitional milestone. Under MiCA Article 143(3), Dutch crypto-asset service providers operating under national grandfathering had to be fully MiCA-authorised by 1 July 2026, ending the transitional legal basis under which many previously operated and shifting full AML/CFT supervisory responsibility onto AFM and DNB under the harmonised EU regime. Ahead of that deadline, the AFM published a dedicated Wwft guidance annex for crypto-asset service providers on 2 May 2025, formalising continuous customer due diligence, transaction monitoring, beneficial-ownership verification and suspicious-activity-report filing expectations for the sector, placing crypto-asset service providers on the same supervisory footing as the rest of the regulated financial sector.

This constructive regulatory posture is corroborated at the international level: the Financial Action Task Force upgraded the Netherlands Recommendation 15 rating, which specifically addresses virtual-asset service providers, from Partially Compliant to Largely Compliant in its September 2025 enhanced follow-up report, directly tied to supervisory improvements in this area. At the same time, the digital-asset channel remains a live enabler exposure. Russian-linked no-KYC exchanges, Cryptex and PM2BTC, and the DPRK Lazarus-linked mixer successor Sinbad.io repeatedly located hosting infrastructure physically in the Netherlands notwithstanding offshore beneficial ownership and predicate criminality with no genuine Dutch nexus, disrupted through a coordinated OFAC, FinCEN and FIOD action on 26 September 2024. Whether successor hosting infrastructure has since emerged is unconfirmed this cycle.

Outlook

The Netherlands crypto posture through this cycle is best read as regulatory improvement running ahead of infrastructural risk resolution: MiCA authorisation and AFM guidance close the supervisory gap for licensed entities operating openly in the Netherlands, while the physical-hosting enabler dynamic for offshore-controlled illicit infrastructure remains a distinct and unresolved exposure that operates largely outside the licensed-entity perimeter that MiCA and the Wwft guidance annex are designed to govern.

The clearest active-defence signal in the Netherlands this cycle is the AFM Wwft guidance annex for crypto-asset service providers, published 2 May 2025, which embeds continuous customer due diligence, transaction monitoring, beneficial-ownership verification and suspicious-activity-report filing expectations for the sector ahead of the 1 July 2026 MiCA transitional-window closure. This is a first-party supervisory action, distinguishing it from generic industry guidance, and it places crypto-asset service providers on a proactive, perpetual-KYC-oriented supervisory footing comparable to that already applied to the rest of the regulated financial sector under the twin-peaks DNB/AFM model. Alongside this, FIU-Nederland has added capacity as part of the broader national AML strengthening programme, and a EUR 3,000 national cash-payment limit entered into force on 1 January 2025, both framed as operational and control-technology pre-positioning ahead of the 2027 AMLR harmonisation date, though the specific scale and timing detail on the FIU capacity increase remains thinly evidenced.

Read against the Netherlands twin-peaks supervisory architecture, in which De Nederlandsche Bank handles prudential supervision and the AFM handles conduct supervision under the Wwft, the AFM guidance annex represents an example of a national supervisor moving proactively to extend an existing control-technology and monitoring framework onto a newly regulated sector ahead of a hard compliance deadline, rather than waiting for a deficiency to be identified through a mutual evaluation or enforcement action. This contrasts with the more reactive detection posture evident in the Netherlands D1 and D5 crypto-hosting enabler findings, where disruption has depended on foreign-partner referral.

Outlook

Whether the AFM Wwft guidance annex translates into measurable improvement in domestic detection of illicit crypto-hosting activity, closing the gap between proactive supervisory guidance for licensed entities and reactive detection of unlicensed or offshore-controlled infrastructure, is the key question to track for this domain in subsequent cycles, alongside how FIU-Nederland capacity gains are deployed operationally.