Panama PA

Lead Signal

Panama's financial-integrity picture is dominated by the collision of two separate forces acting on the same flag registry and the same supervisory perimeter. On 21 October 2026, the US Treasury's Office of Foreign Assets Control designated a Panama City resident and a Panama/Greece-based maritime manager under Executive Order 13902 for facilitating Iranian petroleum exports via a shadow fleet, effective that date. The designation blocks the property of the listed parties. In the days that followed, the Panama Maritime Authority initiated proceedings to cancel the registration of seven Panama-flagged vessels caught up in this and related October 2026 OFAC actions. Read together, these two developments continue a pattern this monitor has tracked for some time: Panama's flag registry responds to US sanctions designations after the fact, cancelling registrations once a vessel has already been named, rather than screening ownership or beneficial control structures in a way that would catch the risk before a listing happens. The architecture question is not whether Panama de-registers sanctioned ships; it does, reliably. It is whether the registry's screening function operates upstream of designation at all, and nothing in the material gathered indicates that it does.

Alongside the sanctions story, Panama's banking supervisor has moved independently to tighten its own obligated-entity perimeter. The Superintendencia de Bancos de Panama issued Acuerdo de Prevencion para Otros Sujetos Obligados Financieros No. 1-2026, dated 20 October 2026, which establishes a registration process bringing MICI-licensed empresas financieras (financial companies licensed by the Ministry of Commerce and Industry rather than by the banking regulator itself) within the SBP's AML-obligated-subject net under the base statute, Law 23 of 2015. Newly licensed firms get nine months to register; firms already operating get six.

Other Developments

A supervisory perimeter closes rather than opens. The SBP's Acuerdo No. 1-2026 is a structural move: it extends registration and AML-obligated-subject status to a category of financial company that previously sat under MICI licensing without a parallel AML registration requirement at the banking supervisor. This is the kind of architecture-level change that matters more than any single enforcement action, because it changes who is inside the regulatory perimeter going forward rather than punishing a single actor after the fact. The full text of the Acuerdo was not independently retrieved; the registration process and its timelines are known through Panamanian press coverage rather than the SBP's own publication, which leaves the precise scope of which empresas financieras fall inside the new requirement less than fully pinned down.

The flag registry keeps reacting, not anticipating. The cancellation of seven vessel registrations in the wake of the October OFAC actions is enforcement-after-the-fact, not pre-emption. Reporting on the de-registrations describes a maritime authority responding to a list it did not generate and could not have anticipated, rather than a screening function that would have flagged the ownership or management links before a vessel was sanctioned. Taken over multiple cycles, this reactive posture is itself the finding: an absence of pre-designation screening in a jurisdiction that otherwise carries one of the world's largest open shipping registries is analytically significant in its own right, not merely a gap in the record.

Panama remains off the FATF grey list, and nothing moved. Panama was removed from the FATF grey list in October 2023 and no plenary action affecting that status was found. This is a standing baseline fact rather than a new development, and it sits in tension with the designation activity above: an AML/CTF regime judged adequate enough to avoid increased monitoring from the FATF is nonetheless the jurisdiction repeatedly named in US sanctions-evasion designations tied to shipping.

Cross-Monitor Connections

The shadow-fleet designation and the related vessel de-registrations sit squarely at the intersection of this monitor's sanctions-architecture work and the conflict-finance and commodity-flow analysis tracked elsewhere in the fleet, given the Iranian petroleum-export nexus underlying the OFAC action. The state-capture angle on Panama's registry governance, and any state-level posture toward flag-of-convenience oversight, is a matter for the separate monitor covering state and institutional capture rather than for restatement here.

Outlook

The SBP's six-to-nine month registration windows under Acuerdo No. 1-2026 put a concrete compliance horizon in front of MICI-licensed empresas financieras, and the next research priority is retrieving the Acuerdo's own text to confirm the precise scope of covered entities rather than relying on secondary press description. On the sanctions side, the question worth continued attention is whether any additional Panama-flagged vessels or Panama-resident facilitators surface in follow-on OFAC or allied-jurisdiction designations tied to the same shadow-fleet network, and whether the Panama Maritime Authority's registration-cancellation response time narrows in future cycles, which would itself be a sign of improved upstream screening rather than pure reaction.

Illustrative scenario for analytical orientation only. Forward motion on either front, were it to occur, would most plausibly show up first as a published SBP circular detailing the empresas financieras registration scope, or as a second wave of vessel cancellations following a subsequent OFAC action. Neither is asserted to be underway; both are offered only to orient what a continuing signal would look like. Not compliance advice, not a prediction, and not a statement of observed fact.

Lead Signal

Panama's two live signals sit on opposite ends of the enforcement spectrum, and both point the same direction: external pressure continues to do more work than domestic initiative in shaping the country's financial-integrity posture. On 21 October 2026, the US Treasury's Office of Foreign Assets Control designated Panama-resident individuals and a Panama/Greece-based maritime manager under Executive Order 13902, for facilitating Iran's petroleum shadow fleet. The designation blocks the property of the listed parties from the effective date. In parallel, Panama's Superintendencia de Bancos (SBP) issued Acuerdo de Prevencion para Otros Sujetos Obligados Financieros No. 1-2026 on 20 October 2026, establishing a registration process requiring MICI-licensed financial companies, empresas financieras, to register with SBP as AML-obligated financial subjects under Law 23 of 2015. Existing firms have six months to comply; newly licensed firms have nine.

The SBP accord is a structural move: it extends the AML-obligated-subject perimeter to a category of firms previously supervised for licensing purposes by the Ministry of Commerce and Industry (MICI) but not formally folded into SBP's AML architecture. No new licence type is created; the accord instead closes a registration gap in an already-existing supervisory population. Read together, the OFAC action and the SBP accord describe a jurisdiction whose integrity architecture is still substantially reactive on the sanctions side and incrementally expanding on the domestic AML side, rather than one undergoing a single comprehensive overhaul.

Other Developments

Vessel de-registration continues on a reactive timetable. Following the OFAC designation, the Panama Maritime Authority has initiated proceedings to remove seven sanctioned vessels from the Panama flag registry. This is consistent with the registry's established pattern of responding to US sanctions action after the fact rather than screening for exposure in advance of designation, and it is the kind of enablement-adjacent signal that is more informative for its timing than for the individual vessels involved.

The AML registration extension sits inside a broader incremental pattern. The Acuerdo No. 1-2026 registration requirement for empresas financieras is best read as the latest in a series of perimeter-tightening steps around newer or previously under-supervised financial-services categories, rather than as part of a single comprehensive legislative package. The instrument's own text was not directly retrieved; the finding rests on secondary Panamanian press coverage, and confidence is held at the probable tier pending primary-source retrieval of the SBP accord itself.

Cross-Monitor Connections

The Iran petroleum shadow-fleet designation and the associated flag-registry de-registrations connect directly to conflict-finance and commodity-flow monitoring: Panama's open registry has long been a structural node in shadow-fleet logistics, and the pattern of reactive de-flagging after each new sanctions round is itself a finding about the registry's screening posture rather than about any single vessel. The SBP registration accord is lower-salience for cross-monitor routing, since it concerns domestic AML-obligated-subject status rather than a cross-border enablement question, but it is relevant to any tracking of how Panama's financial-company licensing population is being folded into AML supervision over time.

Outlook

Two threads are worth holding separately going forward. First, whether the Panama Maritime Authority's vessel de-registrations keep pace with future OFAC rounds, or whether a backlog accumulates, will be a useful indicator of whether the registry's reactive posture is improving or merely continuing. Second, the compliance windows set by Acuerdo No. 1-2026 give a concrete marker: existing empresas financieras face a six-month registration deadline from the accord's entry into force, and newly licensed firms face nine months, so the mid-2027 window is when non-compliance, if any, would first become visible. Separately, Panama's long-pending fintech framework bill, Anteproyecto de Ley No. 314, remains at the proposed stage with an estimated effect date as scheduled for the second quarter of 2027; it would introduce licensing categories for virtual-asset service providers, payment companies and electronic-money issuers where none currently exists, but as a bill still before the National Assembly its passage and final form remain unresolved.

Lead Signal

Panama's anti-money-laundering posture is defined by a sharp divergence between sectors rather than by any single enforcement event. Suspicious transaction reports filed with the Unidad de Analisis Financiera (UAF) show bank-sector reports rising 11 percent year-on-year, from 1,117 to 1,237, across the January-to-September 2026 window, while real-estate-sector reports rose far more steeply, climbing from just 2 to 9 filings, a 350 percent increase off a very small base. At the same time, the national total of suspicious transaction reports fell 9 percent, from 1,603 to 1,462. Read together, these numbers describe a system in which detection intensity is reallocating toward banking and, from an extremely low starting point, toward real estate, even as aggregate volume contracts. The reallocation is structurally significant: a rising banking share suggests the formal financial sector is tightening its own filters, while the real-estate increase, though numerically small, signals the beginning of scrutiny in a sector regional evaluators have long identified as an enabler for layering proceeds through property purchases.

The second structural thread is institutional rather than statistical. Panama now holds the 2026 Pro-Tempore Presidency of GAFILAT, the regional FATF-style body, and its Fifth Round mutual evaluation has been placed on the calendar for May 2028, positioned behind Costa Rica (November 2026), Honduras (May 2027) and Guatemala (November 2027). This round is explicitly effectiveness-weighted rather than built around a technical-compliance checklist, meaning Panama will need to demonstrate operational results on beneficial ownership, virtual assets, non-profit organisations and asset recovery rather than simply show that the relevant statutes exist. Panama's exit from the FATF grey list in October 2023 remains intact, but the leadership role it now holds raises the reputational stakes attached to how it performs under the new methodology.

Other Developments

Judicial enforcement in an organised-crime money-laundering case advanced. The Tribunal Superior de Apelaciones confirmed provisional detention for eleven individuals and house arrest for two more under Operacion Poseidon, a case combining organised-crime and money-laundering elements. The ruling was reported by a single quality press source, and the underlying court decision itself was not independently retrieved, so the finding should be read as a confirmed procedural step rather than a fully documented case history.

The fintech and virtual-asset licensing perimeter remains unsettled. The Anteproyecto de Ley N.314, Panama's draft comprehensive financial-technology framework, together with three separate virtual-asset bills, remains without a scheduled first debate in the National Assembly. In parallel, the Superintendencia del Mercado de Valores has continued to issue non-general opinions concluding that certain non-custodial token schemes fall outside its licensing perimeter, effectively leaving those schemes without a dedicated supervisory home while the legislative process remains stalled. An International Monetary Fund Article IV mission reviewed risk-assessment approaches for virtual assets and virtual-asset service providers with the Superintendencia de Bancos de Panama in mid-October, indicating external interest in how Panama intends to close this gap even before domestic legislation advances.

The obligated-subject registration base held steady at scale. UAF data put the count of registered obligated subjects at 16,805 across five supervisory bodies as of end-September 2026. This is an anti-money-laundering registration figure, not a beneficial-ownership register update, and should not be read as evidence of a parallel corporate-transparency development.

Cross-Monitor Connections

The unsettled fintech and virtual-asset licensing track connects directly to parallel digital-asset-market and payments-sector monitoring: the same Anteproyecto de Ley N.314 and the same Superintendencia del Mercado de Valores non-general opinions that leave token platforms outside a licensing perimeter from an anti-money-laundering perspective also define the commercial and prudential perimeter tracked elsewhere. The absence of a dedicated virtual-asset-service-provider supervisory regime is therefore a shared structural gap rather than a finding isolated to financial-crime risk alone, and the IMF's direct engagement with the banking supervisor on virtual-asset risk assessment is a signal likely to resurface in adjacent coverage of payments and market infrastructure.

Outlook

The most consequential date on the horizon remains May 2028, when Panama's Fifth Round mutual evaluation is expected, per the GAFILAT schedule reported by Panama's own Ministerio de Economia y Finanzas, with its effectiveness-weighted methodology. Between now and then, the diverging sectoral suspicious-transaction-report trend bears watching: whether the modest real-estate increase continues to build from its low base, and whether the national-level decline in total filings reflects genuine risk reduction or reduced reporting discipline outside banking, will matter to how Panama's effectiveness case looks when evaluators arrive. The fintech and virtual-asset legislative track is unlikely to resolve quickly; as scheduled, the Anteproyecto de Ley N.314 has no confirmed date for a first debate, and the regime is likely to remain in a legally permissive but administratively supervised state, anchored only in general AML registration with the UAF, through at least the near term.

Lead Signal

Panama's financial-integrity posture this cycle is defined by a cybersecurity incident at the Unidad de Analisis Financiero (UAF), the countrys financial intelligence unit, which detected an information-security incident and temporarily suspended its technology platforms and services. The suspension disrupted suspicious-transaction-report (STR) intake from roughly 16,727 obligated subjects, with no stated restoration date at the time of reporting. This is probable, corroborated by a second independent outlet, though UAFs own communique confirmed the incident without technical detail. The episode lands against a backdrop in which Panama remains formally off both the FATF grey list (delisted October 2023) and the EU AML/CFT high-risk list (delisted July 2025), so the disruption reads as an operational shock to the reporting pipeline rather than a reversal of the structural delisting trajectory.

Separately, Panama enacted Law No. 526 of 28 May 2026, an Economic Substance Law requiring entities within multinational groups that earn foreign-source passive income (dividends, interest, royalties, capital gains, real estate income) to demonstrate genuine economic substance in Panama or face a 15 percent flat tax on net taxable passive income starting FY2027. Entities supervised by the Superintendencia de Bancos de Panama (SBP), securities and insurance regulators, and the merchant marine sector are excluded. This is confirmed, drawing on a Tier-1 US State Department source corroborated by secondary commentary, and is best read as a transparency-adjacent measure targeted squarely at the separate designation Panama still carries: the EU's non-cooperative tax-jurisdictions list, which is distinct from the AML high-risk list Panama has already exited.

Other Developments

Gambling-sector suspicious-activity reporting rose sharply within the non-financial-sector category. UAF's own H1 2026 statistics recorded 839 STRs; gambling-related reports led the non-financial-sector category with an increase of 58 percent, ahead of lawyers, real estate and car sales. This is probable, drawn from press reporting of UAF's published statistics rather than independently retrieved primary data, and signals a widening AML footprint across non-financial obligated entities where gambling activity is concentrated.

The SBP tightened bank-sanctioning criteria for AML/CFT/CPF non-compliance. The Superintendencia de Bancos approved a new norm setting clearer criteria for sanctioning banks that fail to comply with anti-money-laundering, counter-terrorist-financing and counter-proliferation-financing rules. This arrives alongside continued growth in the International Banking Centre's deposit base, reported at $121.866 billion, up 7.69 percent year on year. This is probable, based on press reporting of an SBP regulatory action whose primary Acuerdo text was not independently retrieved this cycle.

Panama's dedicated VASP/PSP/EMI licensing bill remains unenacted. Draft Law No. 314 (Ley Marco Integral de Tecnologias Financieras), filed 13 January 2026, has not been enacted as of this cycle. This is confirmed via a Tier-1 source. In its absence, crypto-asset firms continue to operate under general AML registration requirements set by Law 23 of 2015, which remains the only binding compliance layer for the sector.

Cross-Monitor Connections

The gambling-sector STR increase documented by UAF's own statistics creates a direct overlap with advennt's gambling-regulation coverage: a 58 percent rise in gambling-related suspicious-activity reports is simultaneously an AML signal and a gambling-sector compliance signal, and the two readings should be held together rather than treated as separate findings. The UAF platform suspension also surfaces on the world-payments side as a sentinel-fed AML/CFT item; the substantive analysis of that incident belongs here, in financial integrity, with world-payments treating it as a cross-reference rather than re-analysing it. The unresolved status of Draft Law 314 is a shared watch item with crypto and world-payments monitors, both of which track the same bill's prospective VASP/PSP/EMI licensing categories; no monitor should treat its non-enactment as a finding specific to its own domain.

Outlook

The UAF's platform suspension is best read as a discrete episodic disruption rather than a structural regime change, but the absence of a stated restoration date means the operational gap in STR processing could persist into the next reporting period; a primary UAF technical statement or restoration confirmation would resolve this uncertainty. On the beneficial-ownership and enabler-jurisdiction tracks, the Economic Substance Law's FY2027 effective date gives Panama roughly a year to operationalise substance-demonstration requirements before the measure is tested in practice, and its stated aim of addressing the EU's non-cooperative tax list designation makes that list, rather than the AML high-risk list, the metric to watch for whether this reform registers externally. On crypto and digital assets, Draft Law 314 remains the single most consequential pending instrument for Panama's financial-integrity architecture; as scheduled for potential movement in Q4 2026, its continued non-enactment leaves VASP activity governed only by general AML registration under Law 23 of 2015.

Lead Signal

Panama's financial-integrity architecture moved on two structural fronts this cycle rather than through a single headline enforcement action. The Superintendencia de Bancos de Panama (SBP) issued Acuerdo No. 1-2026 on 16 January 2026, repealing the decade-old Acuerdo 10-2015 and tightening know-your-customer, ultimate-beneficial-owner and remote-onboarding due diligence for banks and fiduciaries, with explicit risk-based identification duties attaching to holders of 10 percent or more of an entity. In parallel, Panama's economic-substance regime, introduced by Ley 526 of 28 May 2026 and regulated by Decreto Ejecutivo No. 32 of 2 September 2026, now requires multinational-group entities earning foreign-source passive income to demonstrate genuine local substance, including a resident director or staff, Panama-based strategic decision-making and a minimum of two in-person board meetings a year, or face a flat 15 percent tax on the passive income plus penalties. Read together, these are not incident-level findings but a coordinated narrowing of the structuring and onboarding channels that have historically defined Panama's role as an enabler jurisdiction.

The backdrop against which both developments register is a standing AML/CTF regime that has itself been durable rather than reactive. Panama's framework rests on Ley 23 of 27 April 2015, as amended, and Decreto Ejecutivo 35 of 2022, with the SBP as sector supervisor and the Unidad de Analisis Financiero as financial intelligence unit. Panama has remained off the FATF list of jurisdictions under increased monitoring since October 2023 and off the European Union's list of high-risk third countries since 2025, and neither designation moved this cycle. The significance of the new onboarding and substance rules is therefore best read as incremental tightening layered onto an already-exited grey-list posture, not as a jurisdiction responding to renewed external pressure.

Other Developments

Electronic-funds-transfer supervision tightened. SBP Acuerdo No. 8-2026, signed 22 September 2026, imposes a new supervision and validation scheme for the movement of funds through electronic channels within national territory, reported via Panamanian press coverage of the primary regulatory act. The same dated action, Acuerdo No. 9-2026, defers the credit-adequation deadline originally set by Acuerdo 6-2026 to 31 March 2027, indicating the supervisor is sequencing implementation rather than relaxing the underlying standard.

Fintech and virtual-asset licensing bill remains stalled. Anteproyecto de Ley 314, a comprehensive bill that would create dedicated licensing for virtual-asset service providers, payment service providers and electronic-money institutions under joint SBP prudential and UAF anti-money-laundering oversight, had completed its introduction phase in the Asamblea Nacional as of April 2026 reporting. No enactment or plenary-debate movement was found dated within the current research window, and the current legislative posture should be read with that dating gap in mind rather than as confirmed ongoing committee activity.

Compliance-technology engagement continues at the regional level. SBP participated in a regional workshop, convened under the GAFILAT umbrella, on engagement with the private sector covering fintech, emerging technologies and anti-money-laundering and counter-terrorist-financing transaction identification. This is institutional dialogue rather than new supervisory guidance, and no RegTech rule change accompanied it this cycle.

Cross-Monitor Connections

The economic-substance regime under Ley 526/2026 and Decreto 32/2026 sits at the intersection of financial integrity and corporate-transparency policy more broadly watched by data-protection and payments monitors insofar as beneficial-ownership identification increasingly depends on the same digital-onboarding infrastructure SBP's Acuerdo No. 1-2026 now governs. The electronic-funds-transfer supervision introduced by Acuerdo No. 8-2026 also has a direct payments-infrastructure dimension, since the scheme applies to domestic fund movement through electronic channels used by the same bank and non-bank payment actors tracked under the payments-monitor's licensing and conduct modules. Neither connection constitutes a finding in financial integrity's own typology library this cycle; they are flagged here as routing signals for readers following the payments and corporate-transparency threads in parallel.

Outlook

The near-term marker to watch is whether Decreto Ejecutivo No. 32's economic-substance declarations begin producing measurable attrition in Panama's historical shell-structuring base, a question current reporting cannot yet answer because the regime commenced only in September 2026. On the fintech-licensing track, Anteproyecto de Ley 314 remains a multi-year proposition: committee review, two plenary debates and presidential assent would all still need to occur before Panama acquires its first dedicated virtual-asset and payment-institution licensing architecture, and the absence of confirmed movement this cycle means that timeline should be treated as unresolved rather than delayed. On the standing AML/CTF file, Panama's continued absence from both the FATF increased-monitoring list and the EU high-risk list remains the stable backdrop; the newly sequenced electronic-funds-transfer supervision and the deferred credit-adequation deadline under Acuerdos 8-2026 and 9-2026 suggest the supervisor is prioritising orderly phasing over rapid enforcement, a posture worth monitoring as the March 2027 deadline approaches.

Lead Signal

Panama's financial-integrity posture this cycle is defined by a reinforcement of standing supervisory architecture rather than by new primary legislation. The Superintendencia de Bancos de Panama (SBP) issued Acuerdo No. 1-2026 on 27 January 2026, restating and sharpening the customer due diligence and beneficial-owner identification duties that Articles 112 to 114 of the Banking Law already impose on banks and fiduciaries, and tying those duties explicitly to United Nations Security Council freeze-list procedures. This is an architecture-level finding: the rule does not create a new obligation so much as it hardens the documentary and monitoring expectations sitting on an existing one, and it does so for the sector most exposed to correspondent-banking counterparty risk. Alongside this, Panama remains off the FATF grey list, a status unchanged since its October 2023 delisting and confirmed against the 19 June 2026 plenary roster of twenty-two listed jurisdictions.

The second thread this cycle is structural rather than enacted: Draft Law 314, the Ley Marco Integral de Tecnologias Financieras filed on 13 January 2026, would create dedicated licensing categories for virtual-asset service providers, payment-service providers and electronic-money issuers under joint SBP oversight, replacing the current arrangement in which such firms operate under general AML registration alone pursuant to Law 23 of 2015. The bill remains unenacted, and the only support located this cycle for its content and status is Tier-3 legal commentary; no Tier-1 primary legislative text was retrieved, which caps confidence at Probable rather than Confirmed.

Other Developments

Supervisory tightening without new legislation. Acuerdo 1-2026 is best read as compliance-architecture maintenance: it gives banks and fiduciaries a sharper documentary standard for customer and beneficial-owner identification and for maintaining transaction-monitoring capability, including frozen-asset procedures tied to UN Security Council lists, but it operates within the existing Banking Law framework rather than extending it to new entity types.

The VASP/PSP/EMI licensing gap persists. Firms offering virtual-asset, payment, or e-money services in Panama continue to rely on general AML registration under Law 23/2015 rather than any activity-specific licensing regime. Draft Law 314 is the vehicle proposed to close that gap, but its progress through the legislative process has not produced an enacted instrument this cycle, and the evidentiary base behind it remains thin.

FATF status stable. Panama's continued absence from the FATF grey list is a confirmed, Tier-1-sourced fact, cross-checked directly against FATF's own list rather than inferred from commentary. There is no movement to report on EU high-risk-third-country status either, and nothing in this cycle's substrate suggests either list is under near-term review for Panama.

Cross-Monitor Connections

The Draft Law 314 licensing gap sits squarely on the FIM/WPM boundary: a jurisdiction with no activity-specific licensing perimeter for payment and e-money firms is, from a payments-market-access perspective, operating on bare AML registration, which is the same structural fact driving this cycle's World Payments Monitor findings on Panama. The absence of a dedicated VASP supervisory layer is also a standing input to the broader crypto-integrity tracker, since firms handling virtual assets in Panama are currently assessed against general AML registration rather than a sector-calibrated licensing test — a gap that persists until Draft Law 314, or something like it, is enacted.

Outlook

Absent enactment of Draft Law 314, Panama's AML/CTF architecture will likely continue to be reinforced incrementally at the supervisory-rule level — as Acuerdo 1-2026 illustrates — rather than through primary legislation extending licensing perimeters to new entity types. Whether the draft law advances remains uncertain on the evidence available this cycle; as scheduled, legislative movement would need Tier-1 confirmation before the current Probable-confidence assessment of its content and status could be upgraded. Panama's grey-list standing is not expected to shift absent a material change in FATF's own assessment process, which this cycle's sourcing does not indicate.

Lead Signal

Panama presents this cycle as a jurisdiction where the sanctions-architecture picture and the beneficial-ownership picture point in different directions at once. Two 2026 OFAC actions implicate Panama-domiciled corporate officers and a Panama-flagged vessel as passive enabling nodes in foreign-directed illicit-finance networks, even as Panama itself remains off both the FATF grey list and the EU high-risk third-country list. On 26 June 2026, OFAC designated Panama City-based corporate officers, including individuals linked to Talent Bridge, S.A., under Executive Order 14098 for their role in a Sudan war-economy procurement and recruitment network. Separately, on 10 February 2026, OFAC identified the Panama-flagged bulk carrier BRILLIANCE, linked to Brilliance Maritime Ventures S.A., as blocked property under the Hizballah Financial Sanctions Regulations. Neither action designates Panama as a state actor; both illustrate the continued utility of Panama's corporate-registration and flag-registry infrastructure to sanctioned networks based elsewhere.

Other Developments

Beneficial ownership remains structurally non-public. Panama's beneficial-ownership regime under Law 129 of 17 March 2020 continues to operate as a private, non-public system: beneficial ownership is collected by resident agents and filed to the Superintendencia de Sujetos No Financieros (SSNF), with the register itself inaccessible to the public. This resident-agent-mediated, non-public filing structure is a long-standing professional-enablement feature of Panama's corporate-services sector and sits in some tension with the global direction of beneficial-ownership transparency reform. Against that general non-public posture, a narrower and more transparent step occurred in a specific sector: the Autoridad de los Recursos Acuáticos de Panamá (ARAP) published beneficial-ownership data for vessels in Panama's international fishing fleet ahead of the June 2026 Our Ocean Conference, embedding BO disclosure into vessel pre-registration for that fleet specifically. The contrast is instructive: where a sector-specific international commitment created pressure for transparency, Panama moved; where the general corporate-registry regime is concerned, non-public filing under Law 129 remains the operative model.

Crypto and digital-asset oversight advances without a licensing regime yet in force. Panama continues to lack a comprehensive VASP or CASP licensing framework. Draft Law No. 314, a proposed fintech framework under review by the National Assembly, would create dedicated licensing for virtual-asset service providers, crypto-asset service providers, payment service providers and e-money issuers under joint supervision by the Superintendencia de Bancos de Panamá (SBP) and the Unidad de Análisis Financiero (UAF). In the interim, the SBP's Rule (Acuerdo) No. 1-2026, effective 27 January 2026, tightens AML/CFT documentary and customer-due-diligence obligations across all SBP-supervised entities, expressly revoking four prior rules including Rules 10-2015, 1-2013 and 8-2000. This is a general prudential tightening rather than a crypto-specific licensing instrument, and it applies to banks and other SBP-supervised entities pending any eventual enactment of Draft Law No. 314.

Cross-Monitor Connections

The Hizballah-linked, Panama-flagged vessel designation sits at the intersection of sanctions architecture and conflict finance: the same underlying development that anchors the D1 sanctions reading also touches on financing patterns connected to a designated terrorist organisation, though no independent conflict-finance-specific finding beyond this cross-reference was reached this cycle. The absence of a comprehensive VASP licensing regime, combined with an active legislative proposal to create one, is directly relevant to any parallel gambling-sector payment-restriction analysis for Panama, since both threads describe a jurisdiction moving from light-touch, general-registration-based oversight toward more instrument-specific supervision across financial-services verticals simultaneously.

Outlook

The structural question to watch is whether Draft Law No. 314 advances toward enactment or stalls, since Panama and Costa Rica are reported as the last two Central American jurisdictions without a dedicated VASP/PSP/EMI licensing regime. Separately, watch for whether Panama's non-public beneficial-ownership posture under Law 129 comes under renewed international pressure, given the contrast between the general corporate-registry opacity and the narrow transparency advance achieved in the fishing-fleet sector. Panama's stable position off both the FATF grey list and the EU high-risk list provides no near-term signal of listing risk, but continued use of Panama-domiciled entities and the Panama flag registry in OFAC designations is worth monitoring as a recurring enabling-layer pattern rather than an isolated event.

Lead Signal

This cycle's lead signal for Pennsylvania is EagleBank's resolution of a decade-long Bank Secrecy Act and anti-money-laundering program failure through a Department of Justice non-prosecution agreement. EagleBank, operating as Eagle Bancorp, Inc., admitted it willfully failed to establish an AML/CFT program between 2010 and 2021, a period during which a father-son customer pair ran a check-kiting scheme for ten years. The resolution carries a fine of $9,057,821.62 plus forfeiture of $736,515, for a total exceeding $9.7 million. This is a confirmed, Tier 1, high-confidence finding, and it is read here architecturally rather than as an isolated incident: a decade-long absence of a functioning compliance program at a regulated bank, resolved through settlement rather than prosecution, is itself the structural signal, independent of the specific customer scheme it happened to surface. The three-pillar balance principle cautions against reading this only as an AML matter: a program failure of this duration at an institution of this scale carries latent counter-terrorist-financing and counter-proliferation-financing exposure that a settlement resolving only the pleaded AML facts does not fully surface, and that gap in visibility is itself part of the lead signal this cycle.

Other Developments

Pennsylvania closes its virtual-currency licensing gap. Act 7 of 2025 (SB 202) extends Money Transmitter Act licensure to virtual-currency transmission conducted for a fee, effective August 26, 2025, and the state simultaneously rescinded its prior non-binding Virtual Currency Statement of Policy at 10 Pa. Code Section 19.1a as redundant. Both developments are confirmed, high-confidence, Tier 1 findings, and together they represent a structural closure of what had previously been a licensing gap for fee-based virtual-currency transmission in the state.

Deibler Brothers Novelty Company felony forfeiture. The Pennsylvania Office of Attorney General secured a felony conviction against Deibler Brothers Novelty Company for corrupt organizations tied to hundreds of illegal video gambling machines installed across the state, with a $3,000,000 forfeiture ordered. This is an assessed-confidence finding sourced to a single Tier 1 source without independent corroboration this cycle.

Skill-games licensing and tax framework remains unresolved. The Pennsylvania General Assembly did not address skill-games licensing or taxation in the signed FY2026-27 budget, leaving the framework at consultation stage ahead of the October 13, 2026 enforcement-stay deadline. This is an assessed-confidence, cross-pillar finding, and it sustains the cash-intensive unlicensed-gambling exposure identified in the enabler-jurisdiction domain this cycle.

Cross-Monitor Connections

The Deibler Brothers matter and the unresolved skill-games legislative question sit at the intersection of this monitor's enabler-jurisdiction domain and parallel gambling-regulatory tracking maintained elsewhere in the fleet: the same underlying device population and the same October 13, 2026 deadline that drive the gambling-regulatory read are also the facts that sustain this cycle's domestic money-laundering-vector assessment. Similarly, Pennsylvania's virtual-currency licensing closure under Act 7 is a payments-adjacent development with direct relevance to any parallel payments-regulation tracking of the same statute; the licensing perimeter it establishes is the shared factual basis for both readings, even though this monitor's contribution is limited to the AML/enabler-exposure lens rather than a payments-market-structure assessment.

Outlook

Two dates anchor the outlook for Pennsylvania. The nearer-term structural question, Act 7's licensing perimeter, is now settled in text; the open question is whether the Department of Banking and Securities begins bringing enforcement or licensing actions under it, which would convert this cycle's structural finding into an operational track record. The more consequential date is October 13, 2026, when the Pennsylvania Supreme Court's stay on its skill-games ruling expires; whether the General Assembly enacts a licensing and taxation framework before that date will determine whether the domestic unlicensed-gambling enabler exposure identified this cycle persists, narrows, or is formally brought inside a regulatory and AML perimeter.