Portugal PT

The sanctions-enforcement architecture in Portugal received two touches this cycle, one structural and one episodic. Structurally, Laws 70/2025 and 72/2025 amended Law 97/2017 so that breach of EU restrictive measures now constitutes a predicate offence for money laundering under an expanded Article 28 catalogue. This closes a specific enforcement gap: previously, proceeds of sanctions evasion could sit outside the money-laundering prosecutorial toolkit even where the underlying sanctions breach was established. The amendment is assessed at moderate confidence, resting on a single Tier-3 legal-commentary source, with the primary Diario da Republica legislative text not independently verified this cycle.

Episodically, Portuguese prosecutors reportedly opened proceedings, as of 20 January 2026, against the football club Casa Pia and an executive manager for an alleged breach of EU sanctions against Russia. This is a rare domestic sanctions-enforcement data point for Portugal, where such cases are infrequently reported, but the finding carries low confidence: it rests on a single vendor-aggregator source, and the underlying prosecutorial filing has not been independently confirmed. No material change was found this cycle in UN Panel of Experts, OFAC, or OFSI channels bearing on Portugal specifically.

Outlook

The Casa Pia case is the item most likely to move the confidence rating of this domain next cycle, in either direction: independent confirmation of the prosecutorial filing would upgrade the signal from low to assessed confidence, while continued silence from primary Portuguese judicial sources would leave it an unresolved, low-confidence watch item. The Article 28 predicate-offence amendment is a durable structural change and does not require further confirmation to stand as assessed, but its practical enforcement effect will only become visible once a sanctions-evasion-linked money-laundering prosecution actually tests it.

As an EU member state, the beneficial-ownership and corporate-transparency landscape in Portugal sits within a durable three-instrument EU architecture: the AML Regulation (AMLR, Regulation (EU) 2024/1624), which is directly applicable and requires no domestic transposition; the sixth AML Directive (6AMLD), which each member state including Portugal must transpose, with a general deadline of 10 July 2027 and some elements due earlier; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and is progressively shifting supervision of higher-risk obliged entities from purely national authorities toward a hybrid EU-level regime. AMLA began most of its tasks in 2025, starts IT-services build-out in 2026, and will select an initial cohort of 40 directly-supervised obliged entities in 2027 ahead of full operation from 1 January 2028. This is the durable structural backdrop against which the beneficial-ownership signal in Portugal this cycle should be read, and it is standing context rather than a single-cycle development.

Against that backdrop, the material domestic development this cycle is narrower and more specific: the Central Register of Beneficial Owners (RCBE) in Portugal has moved from unrestricted public access to a model gated by demonstrated legitimate interest, under Decree-Law 115/2025. This follows the 2022 privacy rulings of the Court of Justice of the EU against unrestricted public access to beneficial-ownership data, and the move places Portugal alongside a broader EU-wide pivot, including Italy, the Netherlands, Austria and Belgium, toward controlled register access. The assessed reading is that this is a privacy-driven transparency recalibration consistent with EU-wide post-CJEU practice, not an indicator of weakening AML controls. Supervisors are expected to require obliged entities to maintain alternative UBO-verification sources now that unrestricted public lookups are no longer available, which shifts due-diligence burden from public-register reliance toward direct customer engagement and alternative verification channels.

The practical consequence of the access-model change falls hardest on third parties, journalists, NGOs, and other researchers, who previously relied on open RCBE access for screening and now face a legitimate-interest threshold. For obliged entities conducting customer due diligence, the effect is more procedural than substantive: alternative verification sources should already form part of a risk-based CDD programme, and the RCBE was never intended to be the sole verification channel. No direct RCBE or gov.pt primary-source confirmation of the Decree-Law 115/2025 restriction has been independently reached this cycle; the finding rests on two Tier-3/4 secondary sources.

The shift from a purely national supervisory model toward the hybrid EU-level perimeter of AMLA matters specifically for beneficial-ownership enforcement because the direct-supervision remit of AMLA is expected to prioritise entities assessed as higher-risk for money laundering and terrorist financing, which typically includes cross-border corporate and fund structures whose ownership transparency has historically depended on register access rather than supervisory examination. Where AMLA assumes direct supervision, beneficial-ownership verification becomes a supervisory examination point rather than a self-certified compliance obligation, changing the practical stakes of the RCBE access question for any Portuguese obliged entity that falls within the eventual direct-supervision perimeter of AMLA.

Outlook

The most consequential open question for this domain is whether 6AMLD transposition in Portugal, due by 10 July 2027 with some elements due earlier, will alter the RCBE access model further or introduce new UBO-verification obligations on obliged entities. The 2027 selection by AMLA of its first 40 directly-supervised entities is also worth monitoring for inclusion of any Portuguese institution, which would signal a shift of at least part of the higher-risk obliged-entity population in Portugal toward direct EU-level supervision.

The crypto-asset AML perimeter in Portugal tightened on two fronts this cycle. First, Laws 70/2025 and 72/2025 amended Law 83/2017 to extend the EU Travel Rule to crypto-asset transfers involving self-hosted addresses, with no minimum value threshold, under a new Article 71-A. This is a materially strict posture relative to jurisdictions that apply phased or de-minimis thresholds to self-hosted-address transfers, and it places compliance weight on Portuguese crypto-asset service providers (CASPs) and financial institutions to identify and verify counterparties even for the smallest self-hosted-wallet transactions. Second, and separately, the transitional licensing regime for crypto-asset activity is approaching a hard deadline: entities registered with Banco de Portugal for virtual-asset activity as of 30 December 2024 may continue operating under transitional arrangements only until 1 July 2026, or until MiCA authorisation is granted or refused, whichever occurs first. This is a primary Banco de Portugal source and is the most concrete near-term compliance deadline facing the crypto sector in Portugal.

The two developments compound each other operationally. A CASP navigating the MiCA transitional-to-full-authorisation transition by 1 July 2026 must simultaneously build or upgrade Travel Rule compliance to the zero-threshold standard, rather than treating the two as sequential compliance projects. The Laws 70/2025 and 72/2025 amendments also map CASP and financial-institution obligations to AMLA and EBA coordination mechanisms under Article 141, tying the domestic crypto-AML regime in Portugal explicitly into the emerging EU-level supervisory architecture rather than leaving it as a purely national construct.

Both the Travel Rule extension and the sanctions-predicate-offence amendment noted elsewhere this cycle originate from the same legislative package, underscoring that the 2026 AML amendments in Portugal are best read as a coordinated strengthening exercise rather than piecemeal fixes. Sourcing for the Travel Rule claim rests on a single Tier-3 law-firm summary, with the primary Diario da Republica legislative text not independently verified this cycle; the MiCA transitional-deadline claim, by contrast, is anchored directly to a Banco de Portugal primary source.

The zero-threshold approach in Portugal also has cross-border implications: CASPs facing Portugal and serving customers or counterparties in jurisdictions with materially looser Travel Rule thresholds will need to apply the stricter Portuguese standard to any transaction touching Portuguese infrastructure, effectively exporting the zero-threshold requirement to counterparties whose home jurisdictions have not adopted an equivalent standard.

Outlook

The 1 July 2026 transitional-deadline cutover is the single date most likely to generate observable market effects next cycle, whether through a wave of CASP authorisation grants, refusals, or market exits among previously BdP-registered virtual-asset entities. Independent verification of the statutory text of Laws 70/2025 and 72/2025, currently resting on secondary legal commentary, would also materially raise confidence in the zero-threshold Travel Rule finding.

The AML/CTF regime of record in Portugal, Law 83/2017 as amended, is undergoing incremental strengthening this cycle, layered onto the directly-applicable AML Regulation (AMLR) of the EU AML Package and the pending 6AMLD transposition and AMLA supervisory build-out. As an EU-27 member, Portugal is directly bound by the AMLR (Regulation (EU) 2024/1624) without need for domestic transposition, and must transpose 6AMLD by 10 July 2027, with some elements due by 31 December 2025. The Anti-Money Laundering Authority, headquartered in Frankfurt, began most of its tasks in 2025, starts IT-services build-out in 2026, and will select an initial cohort of 40 directly-supervised obliged entities in 2027 ahead of reaching full operation by 1 January 2028.

Domestically, Laws 70/2025 and 72/2025 amend the core AML statute of Portugal (Law 83/2017) and its sanctions statute (Law 97/2017) in the same legislative package, extending the crypto Travel Rule to a zero threshold for self-hosted-address transfers and making sanctions breach a money-laundering predicate offence. Both amendments read as incremental strengthening of an already-amended domestic framework rather than a wholesale regime overhaul, consistent with a jurisdiction bringing its statute progressively into line with an evolving EU standard ahead of the harder 2027 and 2028 supranational deadlines.

The standing of Portugal on the primary international benchmark remains unchanged and favourable: Portugal does not appear on the FATF Jurisdictions under Increased Monitoring or Call for Action lists as of the 19 June 2026 and 13 February 2026 FATF plenary statements, a direct FATF primary-source confirmation. This stability is a useful counterweight to the domestic and supranational change described above: none of this cycle development reflects a deteriorating baseline; the developments describe a regime being built up ahead of stricter future requirements rather than one responding to an identified deficiency.

A refreshed national ML/TF risk assessment is expected in the fourth quarter of 2026, per IMF sourcing, which will re-baseline the risk priorities of Portugal for legal persons and virtual assets and is likely to be the next primary-source anchor for the assessed judgments in this domain.

Outlook

The three dates that matter most for this domain over the coming cycles are 1 July 2026 (MiCA transitional-licensing cutover), 10 July 2027 (AMLR/6AMLD full application, with earlier elements due 31 December 2025), and 1 January 2028 (AMLA full operation). The fourth-quarter 2026 national risk assessment refresh is the nearest-term item likely to generate new primary-source material for this domain.