Financial Integrity Monitor

Poland PL

Domains (D1–D6)
3
Sources
12
Role actions
8
Jurisdiction profile
Largely CompliantTier BRisk: StableMixed

Poland's AML/CFT regime rests on the 2018 AML/CFT Act (transposing 5AMLD), supervised by GIIF (FIU, Ministry of Finance) and KNF for the financial sector.

MoreMONEYVAL's 2021 MER found largely-compliant technical standing with effectiveness gaps in DNFBP supervision, legal-person risk understanding, and VASP-specific oversight; incremental re-ratings continue through 2023-2025 follow-up reports.

Key deficiencies
  • No supervision of DNFBP sectors not subject to mandatory registration; registered DNFBPs (other than notaries) subject to markedly lower supervisory intensity
  • No VASP-specific AML/CFT legal framework or dedicated regulator; CASPs regulated only via general obliged-institution registry
  • Legal persons (shell companies fronted by 'straw men') identified as a primary ML vector for VAT/excise fraud, with only partial NRA-level assessment
  • No methodological guidelines for TF investigations, limiting integration into national counter-terrorism strategy
Recent developments (18m)
  • MONEYVAL/FATF follow-up report (December 2025) re-rated Recommendation 8 (NPOs) from Partially Compliant to Largely Compliant; Poland now stands at 3 Compliant, 25 Largely Compliant, 12 Partially Compliant
  • Poland held EU Council Presidency H1 2025 and led adoption of the 16th Russia sanctions package, prioritising shadow-fleet enforcement
  • March 2025 Warsaw seminar (GIIF-hosted) on EU AML/CFT package implementation and AMLA's future crypto-asset supervisory role
  • Series of OLAF/EPPO-Poland joint operations (April 2025, April 2026) uncovering shell-company VAT/customs fraud networks exceeding EUR 190 million combined
Weekly brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Poland's domestic crypto-asset supervisory pathway is now structurally absent. The Polish Crypto-Assets Market Act — the legislation that would empower KNF to receive and decide Crypto-Asset Service Provider (CASP) applications under MiCA — was vetoed by the President for a second time on 12 February 2026, leaving KNF without national competence to grant MiCA CASP authorisations. Compounding this, the transitional registration window for existing Polish VASPs expired on 1 July 2026; new VASP register entries have been frozen since 30 December 2024. The result is that Poland currently has no operating domestic crypto-asset licensing or supervisory pathway, even as MiCA applies directly and EU-wide. This is assessed with high confidence, corroborated across two independent Tier-2 Polish legal-practitioner sources describing the same veto sequence and deadline. The gap is structural rather than transitional: with the CASP-designation legislation now twice rejected and the transitional deadline already passed, there is no near-term mechanism by which Poland regains a domestic authorisation pathway short of fresh legislation clearing both the Sejm and a presidential signature. The legislative vacuum sits alongside a fully-applicable EU framework: MiCA's governance obligations under Article 65 already bind crypto-asset operators active in Poland, and the practical effect of the domestic vacuum is to leave no Polish national authority able to grant fresh domestic CASP status while EU-passported CASPs remain able to serve the Polish market. This front-loading of a structural gap ahead of any national remediation is, on the evidence located this cycle, the single most consequential financial-integrity development for Poland this period.

Other Developments

Autonomous sanctions listings continue. Poland added seven entities forming part of a cryptocurrency-linked network to its national Russia sanctions list on 28 May 2026, and two companies linked to EU-sanctioned businessman Rustam Muminov on 28 April 2026. This activity uses Poland's 2022 autonomous Sanctions Act rather than an EU Council designation, adding a layer of divergence within the EU's collective sanctions architecture. The finding is assessed, sourced to a single Tier-3 sanctions-tracking aggregator with no direct Tier-1 Polish Sanctions Act gazette notice retrieved this cycle. The affected customer typology in each case is VASP counterparties, reinforcing the Lead Signal's observation that Poland's crypto-related financial-integrity exposure this cycle sits at the intersection of sanctions enforcement and digital-asset supervision.

Beneficial-ownership transparency shows early regression signals. A draft amendment would extend the evidentiary validity of paper bearer and registered share certificates by two years, effective 28 February 2026, with elimination of the registered/bearer distinction delayed a further twelve months post-promulgation. This creates a parallel-regime period that commentary characterises as running counter to FATF and EU beneficial-ownership transparency trend lines, even as Poland otherwise moves toward the EU AMLR/6AMLD dematerialisation standard. The finding is assessed, resting on a single Tier-2 specialist AML publication with no corroborating Tier-1 legislative text located this cycle.

Cross-Monitor Connections

The crypto-supervisory gap identified under Lead Signal is directly relevant to the crypto monitor's own licensing coverage of Poland, where the same CASP-Act veto and VASP-registration expiry are tracked as a live regulatory-gap condition; the two monitors are describing the same underlying structural fact from complementary angles. The sanctions-nexus finding — Poland's addition of a cryptocurrency-linked network to its autonomous Russia list — connects the sanctions-architecture domain directly to the digital-assets domain, illustrating how a jurisdiction's crypto-supervisory vacuum and its sanctions-enforcement activity can intersect around the same asset class. No world-payments-specific or advennt-specific connection is asserted this cycle beyond what those monitors' own findings independently establish.

Outlook

The near-term question for Poland's crypto and beneficial-ownership tracks is legislative: whether a revised Crypto-Assets Market Act can clear both the Sejm and presidential signature after two vetoes, and whether the share-certificate evidentiary-validity extension is enacted as drafted or amended before its 28 February 2026 effective date. Absent primary-source confirmation, this cycle's evidence does not establish what interim enforcement posture KNF or GIIF is taking toward VASPs whose transitional registration lapsed on 1 July 2026, nor which body would be designated as competent authority under a revised Act. The beneficial-ownership regression signal likewise remains provisional: the draft amendment's evidentiary-validity extension has not been corroborated by a primary legislative text this cycle, and its ultimate scope — whether the twelve-month delay to eliminating the bearer/registered distinction survives the legislative process unchanged — is not yet established. Resolution of either gap would be the clearest signal of whether Poland's structural regulatory vacuum in these two domains is closing or persisting into the next cycle.

weekly_brief_draft · JID PL
Domain intelligence (D1–D6)

D1 Sanctions Architecture and Evasion

Sanctions Architecture and Evasion

Continue reading

Poland added seven entities forming part of a cryptocurrency-linked network to its national Russia sanctions list on 28 May 2026, and two companies linked to EU-sanctioned businessman Rustam Muminov on 28 April 2026. Both designations were made under Poland's 2022 autonomous Sanctions Act (the Act on Counteracting Support for Aggression Against Ukraine) rather than through an EU Council listing, meaning Poland is exercising a national designation power that sits alongside, rather than strictly inside, the EU's collective sanctions architecture. This is assessed with Assessed-tier confidence, sourced to a single Tier-3 sanctions-tracking aggregator; no direct Tier-1 Polish Sanctions Act gazette notice was retrieved this cycle to confirm the specific designations independently.

The cryptocurrency-linked nature of the May 2026 designation is analytically significant beyond the designation itself: it signals that Polish sanctions-screening exposure now explicitly extends to crypto-asset counterparties, at the same time as Poland's domestic crypto-supervisory pathway sits in a structural gap. A jurisdiction using autonomous national sanctions powers against crypto-linked networks while lacking a functioning domestic VASP-authorisation regime presents a coordination question that this cycle's evidence does not resolve: which body is responsible for screening compliance among VASPs whose transitional registration has lapsed.

Outlook

This domain's signal is thin this cycle, resting on a single Tier-3 source without primary-source corroboration. A direct Tier-1 Polish Sanctions Act gazette retrieval would materially improve confidence in the specific designations. The more durable question — how Poland's autonomous sanctions-designation practice interacts with its crypto-supervisory vacuum — is a structural one likely to persist across cycles regardless of any single designation's confirmation status.

D2 Beneficial Ownership and Corporate Transparency

Beneficial Ownership and Corporate Transparency

Continue reading

The EU AML Package sets the durable structural backdrop against which Poland's beneficial-ownership developments are read this cycle. The Package comprises three distinct instruments: the AML Regulation (AMLR, Regulation (EU) 2024/1624), which applies directly across Member States without national transposition; the sixth AML Directive (6AMLD, Directive (EU) 2024/1640), transposed individually by each Member State and carrying the beneficial-ownership register provisions; and the AMLA Regulation (Regulation (EU) 2024/1620), establishing the Anti-Money Laundering Authority. Together these shift supervision from a purely national model toward a hybrid EU-level regime, with AMLA exercising direct supervision over a subset of higher-risk obliged entities and indirect supervision, through coordination with national authorities, over the remainder. For Poland specifically, the AMLR applies directly from 10 July 2027, and 6AMLD beneficial-ownership-register provisions transpose by 10 July 2026, with bulk provisions following by 10 July 2027.

Against this backdrop, a draft amendment in Poland would extend the evidentiary validity of paper bearer and registered share certificates by two years, effective 28 February 2026, and would delay elimination of the registered/bearer distinction by a further twelve months after promulgation. This is a beneficial-ownership-transparency regression signal: it runs counter to the dematerialisation direction that the AMLR/6AMLD trend line otherwise implies, even as Poland's EU-level transposition clock continues to run toward the 2026 and 2027 deadlines above. The finding is assessed, resting on a single Tier-2 specialist AML publication with no corroborating Tier-1 legislative text located this cycle.

Outlook

Poland-specific 6AMLD transposition instrument text was not located this cycle, so transposition status beyond the EU-wide deadline is not established. Whether the share-certificate evidentiary-validity extension survives the legislative process in its current form, and how it interacts with the approaching 10 July 2026 beneficial-ownership-register transposition deadline, are the two open questions most likely to move this domain's assessment next cycle.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto, Digital Assets, and Financial Innovation

Crypto, Digital Assets, and Financial Innovation

Continue reading

Poland's domestic crypto-asset supervisory pathway is now structurally, not merely transitionally, absent. The Polish Crypto-Assets Market Act — the legislation that would empower KNF (the Polish Financial Supervision Authority) to receive and decide Crypto-Asset Service Provider (CASP) applications under MiCA — was vetoed by the President for a second time on 12 February 2026. This followed an earlier veto, leaving no domestic legal basis for KNF to designate CASPs. At the same time, the transitional registration regime that allowed existing Polish VASPs to continue operating under prior national rules expired on 1 July 2026; new VASP register entries have been frozen since 30 December 2024. The combined effect is that Poland has no operating domestic crypto-asset licensing or supervisory pathway as of this cycle. This is assessed with High confidence, corroborated across two independent Tier-2 Polish legal-practitioner sources describing the same veto sequence and deadline structure consistently.

This gap sits alongside, rather than inside, the EU-wide MiCA framework, which continues to apply directly in Poland regardless of the domestic legislative failure. MiCA Article 65 passporting is, on the evidence located this cycle, the only currently functioning route by which a crypto-asset service provider can lawfully serve Polish clients: CASP authorisation obtained in another EU Member State passports into Poland under MiCA governance obligations, while no domestic Polish authorisation route exists. This creates a market-structure asymmetry: entities already authorised elsewhere in the EU retain access to Polish clients through passporting, while Polish-domiciled entities seeking fresh domestic authorisation, or existing VASPs whose transitional registration has now lapsed, face a legal-basis vacuum that this cycle's evidence does not show being addressed by any interim KNF guidance.

The compounding structural nature of this finding — twice-vetoed legislation plus an expired transitional deadline — distinguishes it from an ordinary implementation delay. The affected-firm-type and customer-typology tags attached to this cycle's claims — crypto-asset operators and VASP counterparties respectively — indicate that the practical exposure of this gap falls most heavily on entities seeking to establish or maintain a Polish operating presence, rather than on end-retail crypto users directly, since EU-passported service remains available to Polish clients regardless of the domestic vacuum. This case also illustrates an enablement-as-signal dynamic: Poland's inability to authorise domestic CASPs does not equate to no crypto-asset activity serving Polish clients, but it does mean no Polish national authority currently exercises direct supervisory oversight over Polish-domiciled crypto-asset business models — an absence of enforcement capacity rather than an absence of underlying activity. The recency of the second veto (12 February 2026) relative to the passed transitional deadline (1 July 2026) means the domestic gap has now persisted for several months without legislative resolution as of this cycle's observation date, reinforcing the structural rather than merely transitional characterisation adopted here.

Outlook

Two gaps bear directly on this domain's trajectory. First, this cycle's evidence does not establish which body would be designated as the MiCA competent authority if or when a revised Crypto-Assets Market Act is enacted, nor what interim enforcement posture KNF is taking toward VASPs whose transitional registration lapsed on 1 July 2026 — a primary-source KNF or GIIF communication would resolve this. Second, whether GIIF or KNF has issued any interim guidance for VASPs operating in the post-1-July-2026 legal gap was not established this cycle. Until either gap closes, Poland's crypto-supervisory vacuum should be read as structural rather than transitional, with EU passporting under MiCA Article 65 remaining the only confirmed functioning route to lawfully serve Polish crypto clients.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

Regulatory horizon
No dated horizon items this cycle. 4 items tracked without a confirmed date.
4 pending date · baseline fim-2026-07-08
Role action cards
MLROHigh

Poland's crypto-asset supervisory gap and continued autonomous Russia-sanctions listings both bear directly on AML/CTF screening obligations this cycle.

The absence of a domestic CASP-authorisation pathway means MLRO teams cannot rely on a domestic licensing signal when assessing Polish crypto counterparties, and must instead verify EU-passporting status directly. Poland's addition of a cryptocurrency-linked network and Muminov-affiliated entities to its autonomous national sanctions list is a distinct screening list that sits alongside EU Council designations and should be checked separately.

3 evidence refs
ComplianceAssessed

Poland's twice-vetoed CASP legislation and a beneficial-ownership evidentiary-validity extension both signal control-framework gaps requiring policy attention.

Compliance functions relying on Polish domestic crypto licensing as a control indicator should note that no such licensing currently exists. Separately, a draft amendment extending paper share-certificate evidentiary validity may affect the reliability of Polish beneficial-ownership documentation obtained during this transitional period.

3 evidence refs
LegalAssessed

Poland's autonomous sanctions listings against a cryptocurrency-linked network raise sanctions-nexus questions distinct from EU Council designations.

Legal counsel should treat Poland's national Sanctions Act listings as an independent designation source requiring separate legal review from EU Council sanctions, given the divergence this creates within the EU bloc's sanctions architecture.

1 evidence refs
BoardHigh

Poland's structural crypto-licensing vacuum is a strategic-level regulatory-change signal for any institution with Polish crypto exposure.

The twice-vetoed Crypto-Assets Market Act and the expired VASP transitional window represent a structural, not transitional, regulatory gap with strategic implications for market-entry and counterparty-risk decisions involving Poland.

2 evidence refs
CTOAssessed

No domestic Polish CASP-authorisation pathway exists; EU MiCA passporting remains the only functioning technical-compliance route.

Technology and platform teams supporting crypto-asset services into Poland should confirm reliance on MiCA Article 65 passporting from an EU-authorised entity, since no Polish national authorisation mechanism is currently operative.

2 evidence refs
RiskHigh

Poland's crypto-supervisory vacuum and sanctions-nexus crypto designation together concentrate financial-crime risk at the intersection of digital assets and sanctions evasion.

Risk functions should treat Polish crypto-counterparty exposure as elevated pending resolution of the domestic licensing gap, and should note the cryptocurrency-linked sanctions designation as a concrete instance of this intersection.

3 evidence refs
OperationsPossible

Poland's autonomous sanctions list addition requires a screening-list update for operations teams processing Polish-linked transactions.

Operations teams should confirm that screening lists incorporate Poland's national Sanctions Act designations alongside EU Council lists, given the sourcing gap on primary gazette confirmation this cycle.

1 evidence refs
AuditPossible

The Polish beneficial-ownership evidentiary-validity extension creates a documentation-adequacy question for audit trails relying on share-certificate records.

Internal audit should note that the proposed two-year extension of paper share-certificate evidentiary validity may affect the audit-trail standard for Polish corporate beneficial-ownership documentation during the transitional period, pending confirmation of the draft's final legislative form.

1 evidence refs
Decision lens
MLRO

Poland's crypto-asset supervisory gap and continued autonomous Russia-sanctions listings both bear directly on AML/CTF screening obligations this cycle.

Compliance

Poland's twice-vetoed CASP legislation and a beneficial-ownership evidentiary-validity extension both signal control-framework gaps requiring policy attention.

Legal

Poland's autonomous sanctions listings against a cryptocurrency-linked network raise sanctions-nexus questions distinct from EU Council designations.

Board

Poland's structural crypto-licensing vacuum is a strategic-level regulatory-change signal for any institution with Polish crypto exposure.

CTO

No domestic Polish CASP-authorisation pathway exists; EU MiCA passporting remains the only functioning technical-compliance route.

Risk

Poland's crypto-supervisory vacuum and sanctions-nexus crypto designation together concentrate financial-crime risk at the intersection of digital assets and sanctions evasion.

Operations

Poland's autonomous sanctions list addition requires a screening-list update for operations teams processing Polish-linked transactions.

Audit

The Polish beneficial-ownership evidentiary-validity extension creates a documentation-adequacy question for audit trails relying on share-certificate records.

Shared evidence: 4 refs
Scenario sketches

AMLA Direct/Indirect Supervision Transition — Illustrative Structural Shift

As the AMLA Regulation (Reg (EU) 2024/1620) build-out continues alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-Member-State 6AMLD transposition, the supervisory landscape for cross-border obliged entities could illustratively shift from a purely national model toward a hybrid regime in which AMLA exercises direct supervision over a subset of higher-risk entities and indirect coordination over the remainder. In such a scenario, evasion techniques calibrated to exploit gaps between national supervisory regimes could face a narrower seam as AMLA's direct-supervision perimeter expands, though the pace and scope of that expansion remain a matter of implementation rather than settled fact. This is an illustrative structural sketch, not a prediction of AMLA's actual supervisory allocation.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion ArchitecturestableNo material UN Panel/OFAC/OFSI channel change found in PL-scoped search this cycle; only unverified political allegation of Russian financing behind Zondacrypto.
T2 · EU AML Package / AMLAmaterial_changeAMLA collected provisionally-eligible-obliged-entity data from national supervisors by 15 August 2026 with provisional list due end-September 2026; PL's 6AMLD BO-transposition due 10 July 2026; PL SIGIIF/CRBR reform targets October 2026 entry into force.
T3 · FATF Grey Listno_changeNo PL-specific FATF plenary or MONEYVAL follow-up development surfaced this cycle.
T4 · Beneficial-Ownership Register Statusmaterial_changeDraft UC75 will restrict CRBR public-access scope ahead of the SIGIIF go-live and the EU 6AMLD BO-transposition deadline (10 July 2026).
T5 · Crypto & Digital-Asset IntegrityescalatingZondacrypto collapse plus continued absence of a MiCA-designated competent authority in Poland after a third presidential veto; MF/GIIF Communication No.116 rejects blanket de-risking.
T6 · Sanctions Regime Divergenceno_changeNo PL-specific EU/US/UK autonomous-listing divergence signal surfaced this cycle beyond the standing Polish Sanctions Act (April 2022) framework.
Registers

Enforcement actions

  • KAS imposed a 20 million zloty ($5.5 million) fine for intentional violation of EU sanctions via purchase and re-export of luxury cars to Russia through Poland, Lithuania and Belarus during 2022-2023. 21 Apr 2026
  • Following an OLAF referral, Polish authorities (ABW, KAS, CBŚP, CBZC) arrested four individuals, searched 50 locations, and seized documentation, telephones and nearly 300 company stamps linked to a shell-company VAT fraud network. 8 Apr 2025
  • EPPO opened a criminal investigation, leading to detention of nine suspects, in connection with a scheme importing goods via the Polish-Belarusian border under falsely declared EU transit procedures, evading an estimated EUR 118 million in customs duties and EUR 79 million in VAT. 28 Apr 2026
  • CBA arrested additional suspects, including a deputy director and IT/procurement officials, in the widening Kraków court corruption scandal involving bribery, fraud and money laundering through fictitious consulting/IT contracts and shell companies tied to court insiders. 19 Mar 2026
  • MONEYVAL's enhanced follow-up report re-rated Poland's Recommendation 8 (non-profit organisation oversight) from Partially Compliant to Largely Compliant, reflecting incremental strengthening of NPO-sector AML/CFT controls. 1 Dec 2025

Sanctions changes

  • EU 19th sanctions package (October 2025) designated the developer and Kyrgyz issuer of the ruble-backed stablecoin A7A5, together with third-country banks and oil traders in Tajikistan, Kyrgyzstan, the UAE and Hong Kong, directly binding on Poland as an EU Member State's obliged institutions. 23 Oct 2025
  • EU 20th sanctions package (April 2026) introduced a total sectoral ban on Russian crypto-asset service providers, prohibited the RUBx stablecoin and digital ruble, listed 46 further shadow-fleet vessels (632 total) and activated the EU's anti-circumvention tool against Kyrgyzstan for the first time — all directly applicable in Poland via EU regulation. 23 Apr 2026
  • UK OFSI designated 'Alliance Capital' (address registered in Poland) under the Russia (Sanctions) (EU Exit) Regulations 2019, alongside Abel Logistics Ltd, with asset freeze and trust-services sanctions. 24 Feb 2026

Regulatory horizon (register)

  • AMLR application and 6AMLD transposition deadline
  • AMLA direct-supervision selection cycle for cross-border entities
  • MiCA transitional-window closure for Polish CASPs
  • EU Commission technical assistance to strengthen Polish FIU NRA/SRA methodology

Active schemes

  • [HIGH] Luxury/dual-use goods transshipment to Russia via Poland
  • [HIGH] Poland-Belarus border customs transit-fraud network
  • China-Germany-Poland VAT 'customs procedure 42' fraud
  • Kaliningrad-Poland tobacco smuggling and crypto/property laundering
Sources
  1. MONEYVAL / FATF
  2. FATF / MONEYVAL
  3. European Anti-Fraud Office (OLAF)
  4. European Anti-Fraud Office (OLAF)
  5. Bloomberg
  6. Council of the European Union (Consilium)
  7. UK Office of Financial Sanctions Implementation (OFSI)
  8. OCCRP
  9. European Commission (DG REFORM)
  10. Elliptic
  11. European Commission / AMLA Task Force
  12. ICIJ
Coverage gaps
MONEYVAL's MER found no supervision of DNFBP sectors not sub…
MONEYVAL's MER found no supervision of DNFBP sectors not subject to mandatory registration, and registered DNFBPs (aside from notaries) are subject to markedly lower-intensity, non-risk-rated supervision, leaving professional-enabler gatekeeping structurally weak.
FATF's 2024 follow-up review found no dedicated legal framew…
FATF's 2024 follow-up review found no dedicated legal framework or supervisory guidance addressing VASP-specific AML/CFT risks in Poland beyond general obliged-institution requirements; VASPs are registered but not subject to sector-tailored oversight.
MONEYVAL found Poland's prosecution service and law enforcem…
MONEYVAL found Poland's prosecution service and law enforcement agencies have not adopted methodological guidelines or instructions specific to terrorist-financing investigations, and could not demonstrate that TF investigations are integrated into national counter-terrorism strategy.
No conflict-finance or extractive-industry-integrity enforce…
No conflict-finance or extractive-industry-integrity enforcement action, scheme, or dedicated typology specific to Poland was identified within Tier 1/2 sources during this baseline window; Poland is not a resource-extraction or conflict-commodity transit hub in the reviewed material.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.