Financial Integrity Monitor
Sign in

Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Portugal PT

Domains covered
8 of 8
Sources
189
Role actions
8
Horizon <90d
2
Jurisdiction profile
FATF status: Largely Compliant Tier: B Risk direction: Stable Enablement vs enforcement: Mixed

Portugal has a technically sound AML/CFT legal framework (Law 83/2017 transposing EU AMLDs; RCBE beneficial-ownership register since 2018) supervised by Banco de Portugal (financial sector, incl.

MoreVASPs) and CMVM (securities). FATF's 2017 MER found the regime sound but flagged weak DNFBP implementation, low conviction rates and real-estate/legal-person vulnerabilities that persist structurally.

Key deficiencies
  • Weak historical implementation of AML obligations among DNFBPs (real estate agents, lawyers, auditors) despite adequate legal basis
  • RCBE beneficial-ownership register access restricted by legitimate-interest tests, EU-only e-ID authentication and mandatory TIN-based search, undermining public transparency
  • Golden Visa residency-by-investment scheme remains structurally exposed to real-estate-based laundering and PEP capital inflows despite 2023 property-investment route restriction
  • Historically low STR volumes and asset confiscation statistics relative to Portugal's exposure to foreign predicate-offence proceeds (esp. Lusophone-Africa PEP wealth)
Recent developments (18m)
  • MiCA (Markets in Crypto-Assets Regulation) became fully applicable across the EU from the start of 2025, requiring Portuguese CASPs to transition from the Banco de Portugal Notice 3/2021 VASP registration regime to MiCA authorisation
  • Portugal considered sweetening Golden Visa and NHR-successor tax incentives in mid-2025 even as Spain scrapped its equivalent scheme
  • EU adopted its 19th (Oct 2025) and 20th (Apr 2026) Russia sanctions packages, both directly applicable in Portugal as an EU member state, including first-ever activation of the EU anti-circumvention tool
  • AMLA became operational and began ramping up supervisory build-out (Frankfurt seat), with Portugal's national supervisors (Banco de Portugal, CMVM) remaining the frontline AML/CFT authorities pending 2027-28 direct-supervision selection

Law made at European Economic Area level that applies in Portugal is covered once, on the European Economic Area page. This page covers Portugal’s own layer: implementation, national authorities, national options and local enforcement.

Brief

Lead signal

Lead Signal

Portugal's financial-crime standing posture is quiet on sanctions, enablement, conflict finance and compliance technology this cycle, but a digital-asset authorisation bottleneck is the one development worth foregrounding. The ESMA interim register of crypto-asset service providers, carrying a file dated 7 October 2026, shows only a single Portugal-supervised entity authorised under the Markets in Crypto-Assets framework, against a far larger population of authorisations recorded elsewhere in the bloc. Portugal's transitional regime for pre-existing virtual-asset operators ended on 1 July 2026, which means firms that had been trading under transitional cover now face a hard choice between completed authorisation and discontinuation, and the thin authorisation count suggests the supervisory pipeline at Banco de Portugal and the Comissão do Mercado de Valores Mobiliários has not yet cleared the backlog that transition point created.

Read full brief

Lead Signal

Portugal's financial-crime standing posture is quiet on sanctions, enablement, conflict finance and compliance technology this cycle, but a digital-asset authorisation bottleneck is the one development worth foregrounding. The ESMA interim register of crypto-asset service providers, carrying a file dated 7 October 2026, shows only a single Portugal-supervised entity authorised under the Markets in Crypto-Assets framework, against a far larger population of authorisations recorded elsewhere in the bloc. Portugal's transitional regime for pre-existing virtual-asset operators ended on 1 July 2026, which means firms that had been trading under transitional cover now face a hard choice between completed authorisation and discontinuation, and the thin authorisation count suggests the supervisory pipeline at Banco de Portugal and the Comissão do Mercado de Valores Mobiliários has not yet cleared the backlog that transition point created.

This is a structural throughput question rather than an enforcement story: no revocation, no sanction, and no adverse finding has been identified against any Portuguese-supervised entity this cycle. The signal is about capacity and pacing of the licensing gateway itself, which is the more durable kind of finding for an architecture-over-incident lens than any single case would be.

Other Developments

Beneficial-ownership reporting continues under reported supervisory pressure. Commentary dated through the first three quarters of 2026 describes the national registry authority intensifying cross-checks between the Central Register of Beneficial Owners and the commercial register, with the existing 30-day window for reporting a change in beneficial ownership, and the more-than-25%-control threshold for identifying a beneficial owner, continuing to apply without amendment. No new statutory instrument altering this architecture has been identified this cycle, and the claim rests on a single commentary source rather than a primary statement from the registry authority itself, so it is carried as an uncertain rather than confirmed data point.

The core AML/CTF architecture remains unchanged. Portugal's obliged-entity regime continues to run on Law No. 83/2017, which transposed the EU's fourth anti-money-laundering directive, together with the beneficial-ownership register created by Law No. 89/2017, with the Unidade de Informação Financeira acting as the financial intelligence unit. No amending domestic instrument has been identified this cycle. Portugal's standing as a European Economic Area member also means two further obligations sit on the horizon: direct application of the EU's new Anti-Money Laundering Regulation and a national transposition deadline for the accompanying sixth Anti-Money Laundering Directive, both dated to July 2027. The domestic transposition bill for the sixth directive has not been confirmed as either underway or overdue this cycle.

Portugal is not named in the Financial Action Task Force's most recent increased-monitoring list. The Task Force's 19 June 2026 plenary outcomes statement, a primary-source document, removed Algeria and Namibia from the list of jurisdictions under increased monitoring; Portugal does not and has not appeared on that list.

Cross-Monitor Connections

The crypto-authorisation bottleneck identified here connects directly to payments-system oversight of stablecoin and digital-money service providers operating in the same jurisdiction, where the same ESMA register and the same end of the transitional window are the operative facts. The beneficial-ownership enforcement posture, while not independently confirmed this cycle, is relevant to any downstream monitor tracking corporate-transparency exposure for entities incorporated or re-domiciled through Portugal. Neither connection rests on a confirmed cross-border illicit-finance nexus this cycle; both are structural adjacency points rather than active investigative threads.

Outlook

The immediate question to track is whether the Portuguese authorisation pipeline accelerates following the end of the transitional period, or whether the single-authorisation count persists into the next reporting window, which would sharpen the supervisory-capacity reading. On the standing AML/CTF architecture, the July 2027 dual deadline for direct application of the new EU Anti-Money Laundering Regulation and national transposition of the sixth directive remains on the horizon as scheduled; whether Portugal's transposition bill has been introduced is a gap to close in a future cycle. The beneficial-ownership enforcement claim, currently resting on a single commentary source, would benefit from a primary statement from the registry authority to move it beyond an uncertain rating.

Earlier periodic briefs (5)
25 Oct 2026 · fim-2026-10-25

Lead Signal

Portugal's financial-crime standing posture is quiet on sanctions, enablement, conflict finance and compliance technology, but a digital-asset authorisation bottleneck is the one development worth foregrounding. The ESMA interim register of crypto-asset service providers, carrying a file dated 7 October 2026, shows only a single Portugal-supervised entity authorised under the Markets in Crypto-Assets framework, against a far larger population of authorisations recorded elsewhere in the bloc. Portugal's transitional regime for pre-existing virtual-asset operators ended on 1 July 2026, which means firms that had been trading under transitional cover now face a hard choice between completed authorisation and discontinuation, and the thin authorisation count suggests the supervisory pipeline at Banco de Portugal and the Comissão do Mercado de Valores Mobiliários has not yet cleared the backlog that transition point created.

This is a structural throughput question rather than an enforcement story: no revocation, no sanction, and no adverse finding has been identified against any Portuguese-supervised entity. The signal is about capacity and pacing of the licensing gateway itself, which is the more durable kind of finding for an architecture-over-incident lens than any single case would be.

Other Developments

Beneficial-ownership reporting continues under reported supervisory pressure. Commentary dated through the first three quarters of 2026 describes the national registry authority intensifying cross-checks between the Central Register of Beneficial Owners and the commercial register, with the existing 30-day window for reporting a change in beneficial ownership, and the more-than-25%-control threshold for identifying a beneficial owner, continuing to apply without amendment. No new statutory instrument altering this architecture has been identified, and the claim rests on a single commentary source rather than a primary statement from the registry authority itself, so it is carried as an uncertain rather than confirmed data point.

The core AML/CTF architecture remains unchanged. Portugal's obliged-entity regime continues to run on Law No. 83/2017, which transposed the EU's fourth anti-money-laundering directive, together with the beneficial-ownership register created by Law No. 89/2017, with the Unidade de Informação Financeira acting as the financial intelligence unit. No amending domestic instrument has been identified. Portugal's standing as a European Economic Area member also means two further obligations sit on the horizon: direct application of the EU's new Anti-Money Laundering Regulation and a national transposition deadline for the accompanying sixth Anti-Money Laundering Directive, both dated to July 2027. The domestic transposition bill for the sixth directive has not been confirmed as either underway or overdue.

Portugal is not named in the Financial Action Task Force's most recent increased-monitoring list. The Task Force's 19 June 2026 plenary outcomes statement, a primary-source document, removed Algeria and Namibia from the list of jurisdictions under increased monitoring; Portugal does not and has not appeared on that list.

Cross-Monitor Connections

The crypto-authorisation bottleneck identified here connects directly to payments-system oversight of stablecoin and digital-money service providers operating in the same jurisdiction, where the same ESMA register and the same end of the transitional window are the operative facts. The beneficial-ownership enforcement posture, while not independently confirmed, is relevant to any downstream monitor tracking corporate-transparency exposure for entities incorporated or re-domiciled through Portugal. Neither connection rests on a confirmed cross-border illicit-finance nexus; both are structural adjacency points rather than active investigative threads.

Outlook

The immediate question to track is whether the Portuguese authorisation pipeline accelerates following the end of the transitional period, or whether the single-authorisation count persists into the next reporting window, which would sharpen the supervisory-capacity reading. On the standing AML/CTF architecture, the July 2027 dual deadline for direct application of the new EU Anti-Money Laundering Regulation and national transposition of the sixth directive remains on the horizon as scheduled; whether Portugal's transposition bill has been introduced is a gap to close in a future cycle. The beneficial-ownership enforcement claim, currently resting on a single commentary source, would benefit from a primary statement from the registry authority to move it beyond an uncertain rating.

18 Oct 2026 · fim-2026-10-18

Lead Signal

Portugal sits among the eighteen Member States named in a September 2026 European Commission infringement action for failing to complete transposition of the sixth Anti-Money Laundering Directive, Directive (EU) 2024/1640, by the 10 July 2026 deadline. The specific provisions at issue, Articles 11, 12, 13 and 15, govern access to beneficial-ownership registers for competent authorities, self-regulatory bodies, obliged entities and persons demonstrating a legitimate interest. Two independent Portuguese press sources corroborate the formal notice and the two-month response window that runs from late September 2026, though no Tier-1 Commission primary text, such as the Official Journal notice itself, has yet been retrieved to confirm the exact scope of the gap. The probable reading, consistent with the European Commission naming seventeen other states in the same action, is that this reflects a shared transposition-capacity deficit across the bloc rather than an isolated Portuguese regression. Architecturally, the finding is significant less for what Portugal has done than for what the European Union's beneficial-ownership-transparency architecture now requires of every Member State simultaneously, and for how unevenly that requirement has been absorbed.

A second, structurally distinct development concerns Portugal's financial-intelligence-unit reporting channel. The PortalCOS goAML platform, operated jointly by the Polícia Judiciária and the Portuguese financial intelligence unit, went live on 13 April 2026 with a six-month parallel-submission transition. That transition period ended on 13 October 2026, after which PortalCOS goAML became the principal channel for suspicious-transaction-report filings across the financial and non-financial sectors. This is reported only through vendor commentary at this stage; no direct primary notice from the financial intelligence unit confirming the transition's close has been located.

Other Developments

Portugal's FATF mutual-evaluation calendar remains unchanged. The last mutual evaluation was adopted in December 2017, and the FATF calendar lists a possible onsite period of June 2028 with a possible plenary discussion in February 2029. No evaluation activity occurred this cycle, and Portugal does not appear on any FATF increased-monitoring or call-for-action list. This is a stable baseline fact rather than a new development, included here because it frames the infringement finding: Portugal's domestic AML architecture has not faced a fresh multilateral assessment in close to a decade, even as the European Union layer above it accelerates its own harmonisation timetable.

The directly-applicable AML Regulation remains on its separate track. Commentary reviewed this cycle reaffirms that Regulation (EU) 2024/1624, the AML Regulation, is scheduled to apply directly across all Member States from 10 July 2027, independent of the Sixth Directive transposition process currently generating the infringement action. The two instruments proceed on different legal mechanisms, directly applicable regulation versus nationally transposed directive, and a delay in one does not excuse or extend the other.

Cross-Monitor Connections

The beneficial-ownership-register-access gap identified in the infringement proceeding has a direct bearing on corporate-transparency questions tracked elsewhere in the fleet: register-access provisions under Articles 11 through 13 and 15 are the same mechanism by which obliged entities and persons with a legitimate interest establish ultimate beneficial ownership for due-diligence purposes, so any clarification or amendment Portugal makes in response to the Commission's notice will have direct relevance for corporate-structuring and transparency findings tracked under data-protection and company-law surfaces. The STR-channel transition at the financial intelligence unit is an operational, rather than legislative, development, and its downstream relevance lies in whether reporting continuity across the migration affects the volume or quality of suspicious-activity reporting reaching Portuguese authorities during the final months of 2026.

Outlook

Portugal's formal response window on the infringement notice runs for two months from the September 2026 letter, placing a decision point in approximately November 2026. Whether that response results in confirmed completion of transposition, a referral to the Court of Justice of the European Union, or further Commission correspondence is not yet determinable from the material available this cycle. Separately, the PortalCOS goAML transition having reached its scheduled close as of 13 October 2026 means the next material question is whether reporting entities across the banking, payment, crypto-asset and investment sectors experience any disruption in the shift away from dual-channel submission; no primary confirmation of smooth continuity has yet been located. Both threads are better characterised as scheduled milestones working through their designed processes than as emerging risks, and the architecture-level signal, a shared EU-wide transposition deficit rather than a Portugal-specific failure, should continue to be read against the broader AMLA/AMLR rollout trajectory running toward July 2027.

11 Oct 2026 · fim-2026-10-11

Lead Signal

The European Commission sent a letter of formal notice to Portugal on 25 September 2026, together with 17 other Member States, for incomplete transposition of the sixth Anti-Money Laundering Directive, Directive (EU) 2024/1640, specifically Articles 11, 12, 13 and 15, which govern access to central beneficial-ownership registers for competent authorities, self-regulatory bodies, obliged entities, and persons able to show a legitimate interest. The transposition deadline was 10 July 2026, and Portugal has a two-month window to reply, running to approximately late November 2026. This is an organisational and administrative transposition gap in the interoperable-register-access model rather than a signal of deliberate evasion, and it sits against a Portuguese AML regime, built on Lei 83/2017, otherwise described in the record as solid.

Other Developments

The MiCA transitional regime for Portugal's pre-existing crypto-asset service providers, established under Lei 69/2025 and run to the full eighteen-month maximum permitted by Article 143(3) of the Markets in Crypto-Assets Regulation, ended 1 July 2026. At that deadline, only Bison Bank held a full Crypto-Asset Service Provider authorisation, and Banco de Portugal itself warned that several significant pre-existing providers risked lapsing into unauthorised status. The supervisory split under Lei 69/2025 places Banco de Portugal as the competent authority for Titles III and IV of MiCA, covering asset-referenced and e-money token issuance, while CMVM supervises Chapter 3 of Title V and Articles 66 and 70 to 72, the conduct-facing provisions.

A trilateral supervisory cooperation protocol was signed on 25 September 2026 by Portugal's three financial supervisors, ASF, Banco de Portugal and CMVM, covering crisis-management cooperation, alongside three new bilateral protocols. The signing is explicitly aligned with IMF Financial Sector Assessment Program recommendations and is intended to strengthen confidential-information-sharing mechanisms between the supervisors.

Banco de Portugal's first-quarter 2026 sanctions bulletin recorded 37 administrative-offence proceedings opened and 82 concluded, comprising 19 prudential matters, 11 illicit-financial-activity matters, 6 AML/CFT matters and 1 cash-recirculation matter, with total fines of EUR 545,000, of which EUR 46,750 was suspended.

Cross-Monitor Connections

The MiCA authorisation bottleneck connects directly to the crypto and world-payments monitors' tracking of Portugal's digital-asset supervisory architecture this period; the financial-integrity reading of the same facts centres on the AML/CFT-adjacent consequence of a concentrated, single-authorisation-holder market, where fewer licensed entities can mean a narrower but more concentrated compliance-monitoring task for Banco de Portugal. The 6AMLD transposition gap is a structural finding shared in substance with the world-payments monitor's AML/CFT tracking, which draws on the same European Commission action.

Outlook

Portugal's reply to the European Commission's letter of formal notice is due within the two-month window, running to approximately late November 2026, and its content will determine whether the beneficial-ownership-register-access gap is resolved administratively or becomes a more protracted infringement matter. Separately, the Anti-Money Laundering Regulation, Regulation (EU) 2024/1624, applies directly across the EU from 10 July 2027 without need for national transposition, which will in time supersede much of the substantive content of Portugal's Lei 83/2017-based regime regardless of how the current 6AMLD matter resolves.

28 Sep 2026 · fim-2026-09-28

Lead Signal

Portugal closed a defined chapter in its digital-asset supervisory architecture this cycle. The transitional registration regime that had allowed virtual-asset service providers registered with Banco de Portugal as of 30 December 2024 to keep operating under a lighter, AML-only bar ended on 1 July 2026, per Law 69/2025. From that date, crypto-asset service providers operating in or serving Portugal fall fully under the Markets in Crypto-Assets Regulation authorisation structure, with Banco de Portugal and CMVM operating as joint supervisors of what was previously a single-regulator, lower-compliance-bar register. This is an architecture shift rather than an incident: the legal basis for operating a crypto business in Portugal has changed category, not merely tightened in degree.

The closure sits alongside two December 2025 statutory transpositions that reinforce the same direction. Law 70/2025 transposed Article 38 of Regulation (EU) 2023/1113, the crypto-asset Travel Rule, into Portuguese law by amending the core AML statute, Law 83/2017. Law 72/2025 transposed Directive (EU) 2024/1226 on criminal offences and penalties for violating EU restrictive measures, amending Law 97/2017. Read together, these three instruments describe a coordinated December 2025 to July 2026 tightening across the AML/CFT and digital-asset perimeter, arriving ahead of the July 2027 full application date of the EU AML Regulation and the Anti-Money Laundering Authority framework.

Other Developments

Beneficial ownership disclosure remains EU-timeline-dependent. Portugal's Central Register of Beneficial Owners, established under Law 89/2017, remains the operative national instrument, but the EU AML Package requires disclosure-regime improvements due 10 July 2026, including a lowered ownership threshold, new aggregation rules, a legitimate-interest access model, and a 14-day discrepancy-reporting requirement for obliged entities. Portugal's independent capacity to implement this tightened window has not been verified this cycle; the finding rests on a Tier-2 source rather than a primary Portuguese instrument, and should be read as a EU-level obligation landing on Portugal rather than confirmation of domestic delivery.

FATF standing is unchanged. Portugal is not named on FATF's current call-for-action or increased-monitoring lists. Its last full mutual evaluation dates to the third-round cycle under the 2004 methodology, meaning the jurisdiction's most recent authoritative assessment predates a substantial portion of the AML/CFT architecture described above. This is worth stating plainly rather than assuming: a jurisdiction can tighten its statute book considerably between mutual evaluations without that tightening yet being tested against the FATF's current methodology.

Cross-Monitor Connections

The MiCA CASP transition closure and the Travel Rule transposition both touch the crypto monitor's licensing and cross-border-transfer coverage for Portugal, and the advertising and product-rules tightening tracked on the gambling monitor sits in the same December 2025 to mid-2026 window without any evidenced statutory overlap between the two regimes. The payments monitor's tracking of PSD3/PSR at EU level is architecturally adjacent to the AML Package timeline described here, since both instruments move toward EU-level direct application on broadly overlapping horizons, though no single source connects the two regimes for Portugal specifically this cycle.

Outlook

The next dispositive date is 10 July 2026, when the AMLR and 6AMLD beneficial-ownership register provisions and AMLA technical standards fall due; whether Portugal's RCBE reform lands on schedule is the open question raised by this cycle's Tier-2 sourcing gap. The second dispositive date is 10 July 2027, full AMLR application, which will convert several of this cycle's transposition steps from national implementing measures into directly applicable EU law. Absent an updated fourth-round mutual evaluation, Portugal's FATF standing should be treated as stable rather than re-tested.

21 Sep 2026 · fim-2026-08-21

Lead Signal

The anti-money-laundering architecture in Portugal is being reshaped less by a single national event than by the layered arrival of the new EU AML Package onto an already-amending domestic statute. The AML Regulation (AMLR) is directly applicable across the bloc, the sixth AML Directive (6AMLD) carries a transposition deadline of 10 July 2027, and the Anti-Money Laundering Authority (AMLA) began IT-services build-out in 2026 ahead of selecting an initial cohort of 40 directly-supervised obliged entities in 2027 and reaching full operation by 1 January 2028. Onto this supranational scaffolding, Portugal has layered its own domestic amendments: Laws 70/2025 and 72/2025 extend the Travel Rule in Portugal to crypto-asset transfers involving self-hosted addresses with no minimum threshold, under Article 71-A of Law 83/2017, and separately make breach of restrictive measures a predicate offence for money laundering under an expanded Article 28 catalogue of Law 97/2017. The architecture read is one of incremental national tightening arriving just ahead of supranational harmonisation, rather than a single discrete enforcement event.

Other Developments

Beneficial-ownership access narrows. The Central Register of Beneficial Owners in Portugal has moved from unrestricted public access to a model gated by demonstrated legitimate interest, under Decree-Law 115/2025, following the 2022 privacy rulings of the Court of Justice of the EU against unlimited public beneficial-ownership access. This is a privacy-architecture recalibration rather than an AML-control weakening, but it materially reduces the screening capacity available to journalists, NGOs and other third-party researchers who previously relied on open register access, and it places Portugal alongside a broader EU pivot toward controlled beneficial-ownership register access.

Crypto-asset transitional licensing approaches its deadline. Entities registered with Banco de Portugal for virtual-asset activity as of 30 December 2024 may continue operating under transitional arrangements only until 1 July 2026, or until MiCA authorisation is granted or refused, whichever occurs first. This is the most concrete near-term compliance deadline facing the crypto-asset sector in Portugal this cycle, and it sits alongside the zero-threshold Travel Rule extension noted above as a second, distinct strengthening of the crypto-AML perimeter. The same Laws 70/2025 and 72/2025 amendments also map Portuguese CASP and financial-institution obligations to AMLA and EBA coordination mechanisms under Article 141, a structural link between the domestic statute and the emerging EU-level supervisory architecture described in the Lead Signal above.

A rare domestic sanctions case surfaces. Portuguese prosecutors reportedly opened proceedings, as of 20 January 2026, against the football club Casa Pia and an executive manager for an alleged breach of EU sanctions against Russia. This is assessed at low confidence, resting on a single vendor-aggregator source with no independent confirmation of the underlying prosecutorial filing reached this cycle, but it is nonetheless a rare data point of domestic sanctions enforcement in a jurisdiction where such cases are infrequently reported.

Portugal remains off the FATF grey list. Portugal does not appear on the FATF Jurisdictions under Increased Monitoring or Call for Action lists as of the 19 June 2026 and 13 February 2026 FATF plenary statements, a stable, primary-sourced data point against which the domestic tightening described above should be read.

Cross-Monitor Connections

The MiCA transitional-licensing deadline and the zero-threshold Travel Rule extension both intersect directly with World Payments Monitor tracking of stablecoin and digital-money developments for Portugal, where the dual role of Banco de Portugal as PSD2 and CASP-adjacent supervisor creates a single institutional chokepoint worth watching across both monitors. The beneficial-ownership access narrowing under Decree-Law 115/2025 is relevant to Advennt gambling-monitor coverage of Portuguese licensing to the extent that gambling-sector beneficial-ownership verification now depends more heavily on obliged-entity internal sources rather than open-register lookups. The Casa Pia sanctions case, though thinly sourced, is the kind of episodic enforcement signal that World Payments Monitor payment-corridor and correspondent-banking tracking should flag if any payment-flow nexus emerges.

Outlook

Three dates anchor the near-term AML/CTF trajectory for Portugal: 1 July 2026 for the MiCA transitional-licensing cutover, 10 July 2027 for 6AMLD transposition, with some elements due by 31 December 2025, and 1 January 2028 for full AMLA operation. A refreshed national ML/TF risk assessment is also expected in the fourth quarter of 2026. What would most change this picture is either a primary-source confirmation of the Casa Pia prosecutorial filing, which would upgrade a currently low-confidence signal to an assessed one, or independent verification of the statutory text of Laws 70/2025 and 72/2025, which currently rests on a single Tier-3 legal-commentary source. None of these developments individually signals deterioration in the AML/CTF standing of Portugal; taken together, they describe a jurisdiction whose domestic statute is being incrementally strengthened ahead of, and in coordination with, a supranational architecture that is itself still under construction.

Domain intelligence (D1–D8)

D1 Sanctions

no_changeno_changestanding position

Sanctions Architecture and Evasion

The dominant sanctions-architecture development this cycle is a coordinated US enforcement action against Cartel de Jalisco Nueva Generacion trade-based money-laundering infrastructure. On 30 June 2026, FinCEN issued a supplemental alert to financial institutions describing fuel-smuggling and tax-evasion schemes connected to CJNG, timed alongside an Office of Foreign Assets Control designation of two individuals and nine entities. This is a high-confidence, Tier-1-sourced finding, corroborated by secondary reporting, and it reflects the architecture-over-incident principle in a specific way: the alert is explicitly structured as sector-wide guidance to financial institutions on typology recognition, not merely an incident announcement, which gives it durability beyond the designations themselves.

Continue reading

A related but analytically distinct thread concerns Chinese money-laundering networks assessed to be laundering cartel proceeds through mirror transactions, money mules, and trade-based schemes involving US electronics and luxury-goods purchases. This finding is corroborated across two independent secondary sources referencing the same underlying FinCEN advisory baseline, and is assessed rather than confirmed pending stronger primary-source anchoring. Read together, the CJNG alert and the CMLN typology point to a converging laundering architecture in which cartel-linked TBML increasingly depends on third-country intermediary networks rather than direct correspondent-banking exposure, a structural feature that raises the compliance burden for institutions with exposure to US-Mexico trade corridors and electronics/luxury-goods retail sectors specifically.

Outlook

The near-term signal to watch is whether the FinCEN alert generates a measurable increase in suspicious-activity-report volume tied to the named typologies, and whether OFAC follows the initial designation with further entities identified through the CMLN laundering channel. A widening of the designation list, or a parallel FinCEN advisory targeting the electronics/luxury-goods retail sector specifically, would mark an escalation from the current sanctions-and-guidance posture toward a more systemic enforcement campaign.

Judgment: No PT-specific sanctions-evasion development located this cycle. Uncertain
Periodic updates (1)
21 Sep 2026 · fim-2026-08-21

Sanctions Architecture and Evasion

The sanctions-enforcement architecture in Portugal received two touches this cycle, one structural and one episodic. Structurally, Laws 70/2025 and 72/2025 amended Law 97/2017 so that breach of EU restrictive measures now constitutes a predicate offence for money laundering under an expanded Article 28 catalogue. This closes a specific enforcement gap: previously, proceeds of sanctions evasion could sit outside the money-laundering prosecutorial toolkit even where the underlying sanctions breach was established. The amendment is assessed at moderate confidence, resting on a single Tier-3 legal-commentary source, with the primary Diario da Republica legislative text not independently verified this cycle.

Episodically, Portuguese prosecutors reportedly opened proceedings, as of 20 January 2026, against the football club Casa Pia and an executive manager for an alleged breach of EU sanctions against Russia. This is a rare domestic sanctions-enforcement data point for Portugal, where such cases are infrequently reported, but the finding carries low confidence: it rests on a single vendor-aggregator source, and the underlying prosecutorial filing has not been independently confirmed. No material change was found this cycle in UN Panel of Experts, OFAC, or OFSI channels bearing on Portugal specifically.

Outlook

The Casa Pia case is the item most likely to move the confidence rating of this domain next cycle, in either direction: independent confirmation of the prosecutorial filing would upgrade the signal from low to assessed confidence, while continued silence from primary Portuguese judicial sources would leave it an unresolved, low-confidence watch item. The Article 28 predicate-offence amendment is a durable structural change and does not require further confirmation to stand as assessed, but its practical enforcement effect will only become visible once a sanctions-evasion-linked money-laundering prosecution actually tests it.

D2 Beneficial Ownership

stableactivestanding position

Beneficial Ownership and Corporate Transparency

The European Union's beneficial-ownership and corporate-transparency architecture is best understood as three distinct instruments layered together: the AML Regulation (Regulation (EU) 2024/1624, the AMLR), which is directly applicable across Member States without national transposition; the sixth AML Directive (6AMLD), which each Member State transposes into domestic law on its own timeline; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and progressively shifts supervision of higher-risk obliged entities from purely national authorities toward a hybrid EU-level regime. This structural backdrop is durable and not itself a single-cycle development, but it is the frame against which this cycle's concrete signal should be read.

Continue reading

This cycle's concrete signal is AMLA's advancing direct-supervision selection methodology: its public consultation on regulatory and implementing technical standards closed 27 January 2026, national competent authorities submitted preliminary eligible-institution lists between December 2025 and February 2026, and approximately forty high-risk cross-border institutions are slated for direct AMLA supervision from 2028, ahead of the AMLR and 6AMLD becoming fully applicable on 10 July 2027. This is a high-confidence, Tier-1-sourced finding corroborated by legal-analysis reporting.

Against that backdrop, Portugal's own beneficial-ownership mechanism, the RCBE established under Law No. 83/2017, remains a live and operating register, but one the same EU architecture requires to be upgraded to AMLD6/AMLR legitimate-interest-access standards within the 2026-27 window. No fresh Portuguese transposition text was located this cycle, so the transposition status is assessed rather than confirmed, and the gap between a functioning register and a fully AMLD6/AMLR-aligned one remains open.

Outlook

The next dateable milestone is AMLA's first work programme and supervisory methodology, expected in the fourth quarter of 2026, followed by full AMLR/6AMLD application on 10 July 2027 and the start of direct supervision in 2028. Whether Portugal closes its RCBE upgrade gap ahead of that sequence, and whether other Member States face comparable gaps, will determine whether the AMLA transition delivers genuine harmonisation or simply exposes uneven national starting points.

Judgment: RCBE (Law 89/2017) enforcement continues under reported IRN cross-check pressure with a 30-day update window and >25% control threshold; no new statutory amendment confirmed this cycle. Uncertain
Standing baseline position

PT's RCBE (Law 89/2017) faces mandated disclosure-regime improvements (lowered ownership threshold, new aggregation rules, legitimate-interest access model, 14-day discrepancy-reporting duty) due 10 July 2026 under the EU AML Package.

Portugal subject to European Commission infringement proceedings (September 2026) for incomplete transposition of 6AMLD Arts 11-13 and 15 (BO-register access); two-month response window running from late September 2026.

Periodic updates (4)
18 Oct 2026 · fim-2026-10-18

Beneficial Ownership and Corporate Transparency

The standing structural backdrop to any Portuguese beneficial-ownership development is the European Union's AML Package, which separates three distinct instruments: the AML Regulation (AMLR, Regulation (EU) 2024/1624), directly applicable across Member States without domestic transposition and currently on track to apply from 10 July 2027; the sixth AML Directive (6AMLD, Directive (EU) 2024/1640), which each Member State must transpose into national law on its own timetable; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and shifts supervision from a purely national model toward a hybrid regime combining direct AMLA supervision of designated cross-border obliged entities with indirect AMLA oversight of national supervisors for the remainder. This cycle's Portuguese signal sits squarely inside the transposition leg of that architecture: Portugal is one of eighteen Member States named in a September 2026 European Commission infringement action for not completing transposition, by the 10 July 2026 deadline, of Articles 11, 12, 13 and 15 of the sixth Directive. Those provisions govern who may access beneficial-ownership registers, specifically competent authorities, self-regulatory bodies, obliged entities conducting customer due diligence, and persons able to demonstrate a legitimate interest, which is precisely the register-access layer that determines whether the transparency architecture functions in practice rather than only on paper.

The finding is corroborated by two independent Portuguese press sources, both reporting the same formal notice and the same two-month response window running from late September 2026, but no Tier-1 primary source, such as the Commission's own press release or Official Journal notice, has yet been retrieved to confirm the precise scope or legal characterisation of the gap. That absence of a primary anchor is worth stating plainly rather than papering over: the finding should be read as probable rather than confirmed, and the exact deficiency, whether it concerns the breadth of legitimate-interest access, the mechanics of self-regulatory-body access, or something narrower, remains unspecified in the material reaching this cycle. What is better established is the comparative context: Portugal is one of eighteen states named together, which points toward a shared capacity or implementation-timing problem across the bloc rather than a Portugal-specific regulatory failure or policy choice. Member States transposing a directive on individualised national legislative timetables while a parallel directly-applicable regulation proceeds on its own EU-wide clock is a structural feature of exactly this kind of multi-instrument package, and partial, staggered compliance across different provisions and different states is the expected shape of that structure working as designed, not evidence of exceptional failure in any single jurisdiction.

No additional Portuguese-specific beneficial-ownership development, such as a register-operator announcement, a domestic implementing decree, or litigation over register access, reached this cycle's research beyond the infringement notice itself. The gaps register for this cycle flags the absence of a primary European Commission source as the main evidentiary limitation, and any assessment of Portugal's substantive compliance position should be treated as provisional pending that primary confirmation.

Outlook

Portugal's formal window to respond to the Commission's notice runs two months from the September 2026 letter, which places a likely decision point around November 2026. The available paths from there are a Commission-satisfied resolution following confirmed transposition, continued correspondence if the response is judged incomplete, or, in a more escalated but not yet indicated scenario, referral toward the Court of Justice of the European Union if the deficiency persists. None of these outcomes is signalled in the material reaching this cycle, and the appropriate posture is to treat the infringement notice as the opening move in a process whose resolution has not yet occurred. Separately, the AML Regulation's 10 July 2027 direct-application date continues to approach on its own track regardless of how the 6AMLD transposition dispute resolves, since the two instruments are legally independent; firms operating in Portugal should expect the register-access question raised by this infringement action to be substantively settled, one way or another, well before that 2027 date arrives, given the two-month administrative clock already running.

11 Oct 2026 · fim-2026-10-11

Beneficial Ownership and Corporate Transparency

Portugal was among 18 Member States to receive a European Commission letter of formal notice on 25 September 2026 for incomplete transposition of Directive (EU) 2024/1640, the sixth Anti-Money Laundering Directive, specifically Articles 11, 12, 13 and 15, which govern access to central beneficial-ownership registers for competent authorities, self-regulatory bodies, obliged entities, and persons able to show a legitimate interest. The transposition deadline had been 10 July 2026, and Portugal now has a two-month reply window running to approximately late November 2026. The gap concerns the organisational mechanics of the interoperable-register-access model rather than any finding of deliberate evasion or concealment.

This sits against the durable structural backdrop of the EU AML Package, which comprises three distinct instruments: the directly applicable AML Regulation, Regulation (EU) 2024/1624, which will apply across the EU from 10 July 2027 without need for national transposition; the sixth AML Directive, Directive (EU) 2024/1640, which each Member State transposes individually and under which Portugal's current gap arises; and the AMLA Regulation, Regulation (EU) 2024/1620, which establishes the Anti-Money Laundering Authority and is progressively shifting supervision of cross-border and higher-risk obliged entities from purely national authorities toward a hybrid EU-level regime. Portugal's beneficial-ownership-register-access gap is best read against this architecture as a transitional friction point in a system that is itself still being assembled, rather than as an isolated national failing.

No PT-specific finding on beneficial-ownership registration thresholds, nominee-structure disclosure, or register-quality auditing beyond the access-provisions gap was identified this period.

Outlook

Portugal's reply to the European Commission, due within the two-month window to approximately late November 2026, is the item to watch. Its content, whether a swift remediation timetable or a more contested response, will indicate how quickly the access-provisions gap closes and whether the matter escalates toward a reasoned opinion stage of the infringement procedure. The broader AMLA transition continues in parallel and will progressively affect how beneficial-ownership supervision is exercised for cross-border obliged entities touching Portugal regardless of how this specific matter resolves.

28 Sep 2026 · fim-2026-09-28

Beneficial Ownership and Corporate Transparency

Structurally, the EU AML Package is three distinct instruments: the directly applicable AML Regulation (Reg (EU) 2024/1624), the sixth AML Directive transposed per Member State, and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority. Together they shift supervision from purely national authorities toward a hybrid EU-level regime, with AMLA taking on direct and indirect supervisory functions over a defined perimeter of obliged entities across the bloc. This structural backdrop is durable and applies to Portugal regardless of this cycle's specific developments, and it is the frame against which Portugal's own beneficial-ownership picture should be read this cycle.

Against that backdrop, the directly relevant Portuguese development is that the Central Register of Beneficial Owners, established under Law 89/2017, remains the operative national mechanism, but the EU AML Package requires disclosure-regime improvements due 10 July 2026. These include a lowered ownership threshold for reportable beneficial owners, new aggregation rules for indirect ownership chains, a legitimate-interest access model likely replacing the prior broader public-access provisions, and a 14-day discrepancy-reporting requirement for obliged entities that identify inconsistencies between register data and their own customer due-diligence findings.

The evidentiary basis for Portugal's readiness against this deadline is thin: the finding rests on a single Tier-2 source, and Portugal's independent implementing capacity for the tightened window has not been separately verified this cycle. This matters because the deadline sits ahead of the full AMLR application date of 10 July 2027, meaning Portugal has a defined, near-term interval in which to demonstrate whether its RCBE reform keeps pace with the EU timetable or lags it. A lag would be architecturally significant, not merely an administrative delay, because it would leave Portuguese obliged entities relying on beneficial-ownership data that has not yet absorbed the lowered-threshold and aggregation-rule changes that peer Member States are expected to have implemented by the same date.

From a corporate-transparency perspective, the coincidence of Portugal's BO-register reform deadline with its broader December 2025 AML/CFT tightening (the Travel Rule and sanctions-offence transpositions) suggests a jurisdiction moving in a coordinated direction across multiple AML pillars simultaneously, even where individual components, like the BO register, remain EU-timeline-dependent rather than autonomously driven. Enabler-jurisdiction and professional-facilitator dynamics that often attach to weak beneficial-ownership regimes were not separately evidenced for Portugal this cycle and should not be inferred from the register-timing gap alone.

Outlook

The determinative date is 10 July 2026, when the AMLR and 6AMLD beneficial-ownership provisions and AMLA technical standards fall due. Whether Portugal's RCBE reform is confirmed as delivered on that date, or slips, is the single most consequential open question for this domain heading into the following cycle. The second marker, 10 July 2027, is when full AMLR application converts these national implementing steps into directly applicable EU law across the bloc, at which point any residual Portuguese gap would become considerably more visible against a harmonised EU baseline.

21 Sep 2026 · fim-2026-08-21

Beneficial Ownership and Corporate Transparency

As an EU member state, the beneficial-ownership and corporate-transparency landscape in Portugal sits within a durable three-instrument EU architecture: the AML Regulation (AMLR, Regulation (EU) 2024/1624), which is directly applicable and requires no domestic transposition; the sixth AML Directive (6AMLD), which each member state including Portugal must transpose, with a general deadline of 10 July 2027 and some elements due earlier; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and is progressively shifting supervision of higher-risk obliged entities from purely national authorities toward a hybrid EU-level regime. AMLA began most of its tasks in 2025, starts IT-services build-out in 2026, and will select an initial cohort of 40 directly-supervised obliged entities in 2027 ahead of full operation from 1 January 2028. This is the durable structural backdrop against which the beneficial-ownership signal in Portugal this cycle should be read, and it is standing context rather than a single-cycle development.

Against that backdrop, the material domestic development this cycle is narrower and more specific: the Central Register of Beneficial Owners (RCBE) in Portugal has moved from unrestricted public access to a model gated by demonstrated legitimate interest, under Decree-Law 115/2025. This follows the 2022 privacy rulings of the Court of Justice of the EU against unrestricted public access to beneficial-ownership data, and the move places Portugal alongside a broader EU-wide pivot, including Italy, the Netherlands, Austria and Belgium, toward controlled register access. The assessed reading is that this is a privacy-driven transparency recalibration consistent with EU-wide post-CJEU practice, not an indicator of weakening AML controls. Supervisors are expected to require obliged entities to maintain alternative UBO-verification sources now that unrestricted public lookups are no longer available, which shifts due-diligence burden from public-register reliance toward direct customer engagement and alternative verification channels.

The practical consequence of the access-model change falls hardest on third parties, journalists, NGOs, and other researchers, who previously relied on open RCBE access for screening and now face a legitimate-interest threshold. For obliged entities conducting customer due diligence, the effect is more procedural than substantive: alternative verification sources should already form part of a risk-based CDD programme, and the RCBE was never intended to be the sole verification channel. No direct RCBE or gov.pt primary-source confirmation of the Decree-Law 115/2025 restriction has been independently reached this cycle; the finding rests on two Tier-3/4 secondary sources.

The shift from a purely national supervisory model toward the hybrid EU-level perimeter of AMLA matters specifically for beneficial-ownership enforcement because the direct-supervision remit of AMLA is expected to prioritise entities assessed as higher-risk for money laundering and terrorist financing, which typically includes cross-border corporate and fund structures whose ownership transparency has historically depended on register access rather than supervisory examination. Where AMLA assumes direct supervision, beneficial-ownership verification becomes a supervisory examination point rather than a self-certified compliance obligation, changing the practical stakes of the RCBE access question for any Portuguese obliged entity that falls within the eventual direct-supervision perimeter of AMLA.

Outlook

The most consequential open question for this domain is whether 6AMLD transposition in Portugal, due by 10 July 2027 with some elements due earlier, will alter the RCBE access model further or introduce new UBO-verification obligations on obliged entities. The 2027 selection by AMLA of its first 40 directly-supervised entities is also worth monitoring for inclusion of any Portuguese institution, which would signal a shift of at least part of the higher-risk obliged-entity population in Portugal toward direct EU-level supervision.

D3 Enabler Jurisdictions

no_changeno_changestanding position

Enabler Jurisdictions and Professional Facilitators

Two enabler-jurisdiction signals point in a worsening direction this cycle. Cambodia faces renewed risk of a third FATF grey-list placement, driven by scam-centre and casino-linked laundering exposure, with Prince Group entities forced into liquidation. This finding is assessed rather than confirmed: it rests on two independent secondary sources without a FATF plenary decision or other Tier-1/Tier-2 anchor this cycle, so confidence is capped below High pending an actual grey-list determination. Laos remains on FATF's increased-monitoring list as of the 19 June 2026 update, a Tier-1-confirmed status, with the Golden Triangle Special Economic Zone casino continuing to be cited structurally as a laundering conduit for the surrounding region.

Continue reading

Both cases illustrate a capacity-deficit rather than a pure-enforcement dynamic: the jurisdiction risk tracker classifies both Cambodia and Laos under enforcement-versus-enablement as capacity_deficit, meaning the exposure reflects weak institutional capacity to prevent laundering through casino and scam-centre channels rather than a deliberate permissive policy stance. That distinction matters for how the risk should be read: it is a facilitator-jurisdiction risk arising from enforcement gaps, not from an articulated enablement doctrine.

Outlook

The determinative event for Cambodia is whether FATF's plenary process produces an actual grey-list decision; absent that, the current assessed-confidence finding remains a directional signal rather than a status change. For Laos, continuity of the Golden Triangle SEZ casino conduit under increased monitoring is the baseline case; any fresh multilateral action targeting that specific conduit would mark an escalation from the current structural-citation pattern to active intervention.

Judgment: No PT enabler-jurisdiction development located this cycle. Uncertain

D4 Conflict Finance

no_changeno_changestanding position

Conflict Finance and Extractive-Industry Integrity

This cycle's conflict-finance signal is narrow but directionally significant: the US State Department's FY2026 determination records that coca cultivation and cocaine production in Colombia have reached record levels. This is a Tier-1-sourced finding, but it rests on a single source this cycle without independent corroboration, and the jurisdiction risk tracker explicitly notes the source floor is not met for Colombia at this time. No corresponding FATF status change was identified this cycle. The finding is treated as an assessed narco-finance risk driver rather than a confirmed structural shift, consistent with the honesty-over-coverage principle for a thinly sourced signal. Colombia's classification in the jurisdiction risk tracker as structural rather than episodic signals that this is a long-running production dynamic rather than a new event, even though the FY2026 figure itself is newly recorded this cycle.

Continue reading

Outlook

The gap to close next cycle is independent corroboration: an updated FATF mutual evaluation, a UNODC production report, or a second primary source would allow this signal to move beyond a single-source assessment. Absent that, the appropriate posture is to treat the FY2026 determination as a watch-list input to conflict-finance monitoring rather than a basis for an escalated risk rating.

Judgment: No PT-linked conflict-finance development located this cycle. Uncertain

D5 Crypto / Digital Assets / Financial Innovation

watchwatch

Crypto / Digital Assets / Financial Innovation

Portugal's digital-asset regulatory architecture reached a structural milestone this cycle, not through a new instrument but through the quiet closing of a transitional window. The transitional regime that had allowed virtual-asset operators registered with Banco de Portugal before 30 December 2024 to continue trading pending full Markets in Crypto-Assets authorisation ended on 1 July 2026. What happened after that date is the material finding: the ESMA interim register of crypto-asset service providers, carrying a file dated 7 October 2026, shows only one Portugal-supervised entity holding full authorisation, against a far larger population of completed authorisations recorded across the rest of the European Union. Industry commentary has flagged this count as an authorisation-pipeline risk rather than a reflection of market size or appetite.

Continue reading

For financial-integrity purposes, the significance of this finding is less about the completeness of the applicant pool and more about the state of the supervisory gateway at exactly the point where gatekeeping matters most. A jurisdiction in which the formal licensing architecture is clear and binding but the throughput of the two competent authorities, Banco de Portugal and the Comissão do Mercado de Valores Mobiliários, lags behind the volume of firms seeking authorisation, is a jurisdiction where the population of entities operating in a grey zone between the end of transitional cover and the grant of full authorisation deserves closer attention. That grey zone is not evidence of illicit activity, but it is exactly the kind of structural condition that this monitor's framing treats as analytically significant in its own right, independent of any individual enforcement case. No enforcement action, sanction, or adverse finding against any Portugal-supervised crypto entity has been identified this cycle; the finding is entirely about capacity and pacing, not about misconduct.

This also bears on the cross-border dimension of financial integrity work. A completed Markets in Crypto-Assets authorisation carries a European Union passport, meaning a Portugal-authorised entity can in principle offer services bloc-wide, and an entity still unauthorised after 1 July 2026 cannot lawfully do so from Portugal regardless of its prior transitional registration. The low authorisation count therefore has a double reading: either genuine applicant volume in Portugal is itself modest, or a meaningful population of previously-registered operators now sits outside the lawful perimeter while applications remain pending, continue trading unlawfully, or have exited the market altogether. The evidence available this cycle does not distinguish between these readings, and no primary statement from either competent authority addressing the backlog or its causes has been located.

Outlook

The question worth tracking into the next reporting window is directional: does the Portugal-supervised authorisation count move meaningfully from one, or does it stay flat while applications continue to be disclosed as pending. A persistently flat count across multiple reporting cycles would strengthen the supervisory-capacity reading considerably; a sharp rise would suggest the October figure reflected a processing lag rather than a durable constraint. Either way, this is a single-source, Tier 3-sourced finding at this point, and a primary statement from Banco de Portugal or the Comissão do Mercado de Valores Mobiliários on authorisation throughput would materially improve confidence in whichever reading proves correct. As scheduled, no change to the underlying Markets in Crypto-Assets legal architecture itself is anticipated before the broader EU AML Regulation and sixth AML Directive deadlines land in July 2027, which sit adjacent to but are legally distinct from the crypto-specific authorisation question tracked here.

Judgment: PT's MiCA transitional period ended 1 July 2026; ESMA's interim CASP register (updated 2026-10-07) shows only one Portugal-supervised entity authorised so far, an under-capacity signal for the BdP/CMVM authorisation pipeline. Probable
Cumulative analysis

Crypto, Digital Assets, and Financial Innovation

Portugal transposed the Markets in Crypto-Assets Regulation via Law 69/2025, in force since January 2026, with a transitional window for pre-MiCA-registered crypto operators closing 1 July 2026. Supervisory responsibility for crypto-asset service providers is split between the CMVM and Banco de Portugal depending on service type. This finding rests on a single Tier-4 practitioner-guide source; no primary Portuguese gazette text was located this cycle, so the transposition detail is assessed rather than confirmed, consistent with honest handling of a thinly sourced signal.

Outlook

The transitional window closing 1 July 2026 is the concrete date to track: pre-MiCA-registered Portuguese operators must complete full MiCAR authorisation before that date or lose their operating basis. Locating a primary-source confirmation of Law 69/2025's text, and of the CMVM/Banco de Portugal supervisory split in practice, remains the priority gap for next cycle.

domain_sub_briefs · D5 · Cumulative analysis
Standing baseline position

MiCA CASP transitional-registration regime for legacy Banco de Portugal-registered VASPs closed 1 July 2026; Banco de Portugal and CMVM now operate as dual CASP-authorisation/conduct supervisors.

PT's MiCA transitional period ended 1 July 2026; ESMA's interim CASP register (updated 2026-10-07) records only one Portugal-supervised CASP authorisation, an authorisation-pipeline bottleneck flagged by industry.

Periodic updates (4)
25 Oct 2026 · fim-2026-10-25

Crypto / Digital Assets / Financial Innovation

Portugal's digital-asset regulatory architecture reached a structural milestone, not through a new instrument but through the quiet closing of a transitional window. The transitional regime that had allowed virtual-asset operators registered with Banco de Portugal before 30 December 2024 to continue trading pending full Markets in Crypto-Assets authorisation ended on 1 July 2026. What happened after that date is the material finding: the ESMA interim register of crypto-asset service providers, carrying a file dated 7 October 2026, shows only one Portugal-supervised entity holding full authorisation, against a far larger population of completed authorisations recorded across the rest of the European Union. Industry commentary has flagged this count as an authorisation-pipeline risk rather than a reflection of market size or appetite.

For financial-integrity purposes, the significance of this finding is less about the completeness of the applicant pool and more about the state of the supervisory gateway at exactly the point where gatekeeping matters most. A jurisdiction in which the formal licensing architecture is clear and binding but the throughput of the two competent authorities, Banco de Portugal and the Comissão do Mercado de Valores Mobiliários, lags behind the volume of firms seeking authorisation, is a jurisdiction where the population of entities operating in a grey zone between the end of transitional cover and the grant of full authorisation deserves closer attention. That grey zone is not evidence of illicit activity, but it is exactly the kind of structural condition that this monitor's framing treats as analytically significant in its own right, independent of any individual enforcement case. No enforcement action, sanction, or adverse finding against any Portugal-supervised crypto entity has been identified; the finding is entirely about capacity and pacing, not about misconduct.

This also bears on the cross-border dimension of financial integrity work. A completed Markets in Crypto-Assets authorisation carries a European Union passport, meaning a Portugal-authorised entity can in principle offer services bloc-wide, and an entity still unauthorised after 1 July 2026 cannot lawfully do so from Portugal regardless of its prior transitional registration. The low authorisation count therefore has a double reading: either genuine applicant volume in Portugal is itself modest, or a meaningful population of previously-registered operators now sits outside the lawful perimeter while applications remain pending, continue trading unlawfully, or have exited the market altogether. The evidence available does not distinguish between these readings, and no primary statement from either competent authority addressing the backlog or its causes has been located.

Outlook

The question worth tracking into the next reporting window is directional: does the Portugal-supervised authorisation count move meaningfully from one, or does it stay flat while applications continue to be disclosed as pending. A persistently flat count across multiple reporting cycles would strengthen the supervisory-capacity reading considerably; a sharp rise would suggest the October figure reflected a processing lag rather than a durable constraint. Either way, this is a single-source, Tier 3-sourced finding at this point, and a primary statement from Banco de Portugal or the Comissão do Mercado de Valores Mobiliários on authorisation throughput would materially improve confidence in whichever reading proves correct. As scheduled, no change to the underlying Markets in Crypto-Assets legal architecture itself is anticipated before the broader EU AML Regulation and sixth AML Directive deadlines land in July 2027, which sit adjacent to but are legally distinct from the crypto-specific authorisation question tracked here.

11 Oct 2026 · fim-2026-10-11

Crypto, Digital Assets, and Financial Innovation

Portugal's MiCA transitional regime for pre-existing crypto-asset service providers, established under Lei 69/2025 and run to the full eighteen-month maximum permitted by Article 143(3) of the Markets in Crypto-Assets Regulation, ended 1 July 2026. At that deadline only Bison Bank held a full Crypto-Asset Service Provider authorisation; Banco de Portugal itself warned that several significant pre-existing providers risked lapsing into unauthorised status. Read through a financial-integrity lens, this authorisation bottleneck is significant less for the licensing mechanics themselves than for what it implies about AML/CFT monitoring capacity: a concentrated, single-authorisation-holder market during the transition period narrows the field of entities Banco de Portugal must actively supervise for AML/CFT compliance, but also raises the question of where firms that lapsed into unauthorised status are now transacting, and under what, if any, financial-crime oversight.

The supervisory split under Lei 69/2025 places Banco de Portugal as competent authority for Titles III and IV of MiCA, covering asset-referenced and e-money token issuance, while CMVM supervises Chapter 3 of Title V and Articles 66 and 70 to 72, the conduct-facing provisions. This division of prudential from conduct supervision is structurally significant for financial-integrity purposes because AML/CFT obligations typically attach to the issuance and service-provision functions under Banco de Portugal's remit rather than the conduct functions under CMVM's.

No PT-specific finding of crypto-asset-related illicit-finance enforcement, sanctions-evasion typology, or suspicious-activity-reporting volume specific to the crypto sector was identified this period beyond the authorisation-transition facts above.

Outlook

Whether Banco de Portugal grants further full CASP authorisations beyond Bison Bank, and what becomes of pre-existing registrants that lapsed into unauthorised status at the 1 July 2026 deadline, are the items to watch. The resolution of this bottleneck will determine how much of Portugal's crypto-asset sector operates under active AML/CFT supervision versus outside the regulated perimeter in the near term.

28 Sep 2026 · fim-2026-09-28

Crypto, Digital Assets, and Financial Innovation

Portugal's digital-asset supervisory perimeter completed a structural transition this cycle. The transitional registration regime under Law 69/2025, which had permitted virtual-asset service providers registered with Banco de Portugal as of 30 December 2024 to continue operating under a lighter, AML-only compliance bar, closed on 1 July 2026. From that date, entities providing crypto-asset services in or into Portugal fall under the full Markets in Crypto-Assets Regulation authorisation framework, supervised jointly by Banco de Portugal and CMVM. This is the kind of architecture-level finding that outweighs any single enforcement action: an entire category of previously lower-bar registrants has now been folded into the dual-supervisor MiCA structure, with materially higher governance, capital and conduct expectations attached.

The closure did not happen in isolation. Law 70/2025, in force since December 2025, transposed Article 38 of Regulation (EU) 2023/1113, the crypto-asset Travel Rule, into Portuguese law by amending the core AML statute, Law 83/2017. This gives Portuguese authorities a statutory basis for originator and beneficiary information requirements on crypto-asset transfers, closing a gap that had previously allowed crypto transfers to move with materially less identifying information attached than equivalent fiat wire transfers. Taken together with the MiCA transition, Portugal's digital-asset perimeter moved on two fronts simultaneously within a seven-month window: market-entry authorisation (MiCA CASP) and transaction-level traceability (Travel Rule).

The evidentiary basis for both findings is Tier-3 secondary legal commentary rather than a directly retrieved Diário da República primary text, a genuine sourcing gap for this cycle rather than a substantive weakness in the finding itself; both laws are cited by number and are consistent with the EU-level instruments they implement. A reported instance of a Portuguese bank obtaining MiCA CASP status through a subsidiary merger, effective late July 2026, would represent the traditional banking sector's first direct entry into the licensed digital-asset space in Portugal, but this specific claim rests on a single Tier-4 newswire source and has not been independently corroborated.

Three-pillar balance is worth noting here: this cycle's crypto findings are entirely AML/CFT-pillar in character (Travel Rule, authorisation regime), with no CPF-specific or sanctions-nexus crypto finding surfacing for Portugal this cycle. That absence is itself worth registering rather than assuming coverage, since CFT and CPF signals are structurally under-represented relative to AML enforcement volume across the fleet.

Outlook

The near-term question for this domain is whether Banco de Portugal and CMVM publish a consolidated post-1-July-2026 register of MiCA-authorised CASPs, which would allow a clearer read on how many of the pre-existing VASP registrants converted successfully versus exited the market. The broader question is how Portugal's now-completed MiCA transition and Travel Rule transposition interact with the AMLR/AMLA timeline landing in July 2026 and July 2027, since crypto-asset service providers are explicitly named obliged entities under the incoming EU AML architecture.

21 Sep 2026 · fim-2026-08-21

Crypto, Digital Assets, and Financial Innovation

The crypto-asset AML perimeter in Portugal tightened on two fronts this cycle. First, Laws 70/2025 and 72/2025 amended Law 83/2017 to extend the EU Travel Rule to crypto-asset transfers involving self-hosted addresses, with no minimum value threshold, under a new Article 71-A. This is a materially strict posture relative to jurisdictions that apply phased or de-minimis thresholds to self-hosted-address transfers, and it places compliance weight on Portuguese crypto-asset service providers (CASPs) and financial institutions to identify and verify counterparties even for the smallest self-hosted-wallet transactions. Second, and separately, the transitional licensing regime for crypto-asset activity is approaching a hard deadline: entities registered with Banco de Portugal for virtual-asset activity as of 30 December 2024 may continue operating under transitional arrangements only until 1 July 2026, or until MiCA authorisation is granted or refused, whichever occurs first. This is a primary Banco de Portugal source and is the most concrete near-term compliance deadline facing the crypto sector in Portugal.

The two developments compound each other operationally. A CASP navigating the MiCA transitional-to-full-authorisation transition by 1 July 2026 must simultaneously build or upgrade Travel Rule compliance to the zero-threshold standard, rather than treating the two as sequential compliance projects. The Laws 70/2025 and 72/2025 amendments also map CASP and financial-institution obligations to AMLA and EBA coordination mechanisms under Article 141, tying the domestic crypto-AML regime in Portugal explicitly into the emerging EU-level supervisory architecture rather than leaving it as a purely national construct.

Both the Travel Rule extension and the sanctions-predicate-offence amendment noted elsewhere this cycle originate from the same legislative package, underscoring that the 2026 AML amendments in Portugal are best read as a coordinated strengthening exercise rather than piecemeal fixes. Sourcing for the Travel Rule claim rests on a single Tier-3 law-firm summary, with the primary Diario da Republica legislative text not independently verified this cycle; the MiCA transitional-deadline claim, by contrast, is anchored directly to a Banco de Portugal primary source.

The zero-threshold approach in Portugal also has cross-border implications: CASPs facing Portugal and serving customers or counterparties in jurisdictions with materially looser Travel Rule thresholds will need to apply the stricter Portuguese standard to any transaction touching Portuguese infrastructure, effectively exporting the zero-threshold requirement to counterparties whose home jurisdictions have not adopted an equivalent standard.

Outlook

The 1 July 2026 transitional-deadline cutover is the single date most likely to generate observable market effects next cycle, whether through a wave of CASP authorisation grants, refusals, or market exits among previously BdP-registered virtual-asset entities. Independent verification of the statutory text of Laws 70/2025 and 72/2025, currently resting on secondary legal commentary, would also materially raise confidence in the zero-threshold Travel Rule finding.

D6 Compliance Technology & Active Defence

no_changeno_changestanding position

Compliance Technology and Active Defence

On 25 September 2026 Portugal's three financial supervisors, ASF, Banco de Portugal and CMVM, signed a trilateral crisis-management cooperation protocol together with three new bilateral protocols. The signing is explicitly aligned with IMF Financial Sector Assessment Program recommendations and is described as intended to strengthen confidential-information-sharing mechanisms between the three supervisors. This is a structural development in Portugal's supervisory-coordination architecture: formalised information-sharing channels between prudential, securities and insurance supervisors are a precondition for effective cross-sectoral financial-crime detection, particularly where a single typology, such as a crypto-asset or payments-sector scheme, could otherwise fall between separate supervisory silos.

Continue reading

The timing of this protocol, on the same date as the European Commission's letter of formal notice concerning Portugal's beneficial-ownership-register-access transposition gap, is coincidental in the record rather than causally connected, but the two developments together describe a period in which Portugal's supervisory architecture is undergoing active adjustment on multiple fronts: external pressure to complete EU-level transposition obligations, and internal moves to strengthen domestic cross-supervisor coordination.

No PT-specific finding on the deployment of a particular compliance technology, transaction-monitoring system upgrade, or active-defence tooling was identified this period; the development here is organisational and procedural rather than technological.

Outlook

The practical test of the new protocols will come when the supervisors are called on to actually exchange confidential information in response to a cross-sectoral issue; no such test is recorded in this period. The alignment with IMF FSAP recommendations suggests continued external monitoring of whether these mechanisms are substantively exercised, not merely formally signed.

Judgment: No PT-specific RegTech/compliance-technology development located this cycle. Uncertain

D7 AML/CTF Regime

stableactivestanding position

AML/CTF Regime

The AML/CTF regime of record in Portugal, Law 83/2017 as amended, is undergoing incremental strengthening this cycle, layered onto the directly-applicable AML Regulation (AMLR) of the EU AML Package and the pending 6AMLD transposition and AMLA supervisory build-out. As an EU-27 member, Portugal is directly bound by the AMLR (Regulation (EU) 2024/1624) without need for domestic transposition, and must transpose 6AMLD by 10 July 2027, with some elements due by 31 December 2025. The Anti-Money Laundering Authority, headquartered in Frankfurt, began most of its tasks in 2025, starts IT-services build-out in 2026, and will select an initial cohort of 40 directly-supervised obliged entities in 2027 ahead of reaching full operation by 1 January 2028.

Continue reading

Domestically, Laws 70/2025 and 72/2025 amend the core AML statute of Portugal (Law 83/2017) and its sanctions statute (Law 97/2017) in the same legislative package, extending the crypto Travel Rule to a zero threshold for self-hosted-address transfers and making sanctions breach a money-laundering predicate offence. Both amendments read as incremental strengthening of an already-amended domestic framework rather than a wholesale regime overhaul, consistent with a jurisdiction bringing its statute progressively into line with an evolving EU standard ahead of the harder 2027 and 2028 supranational deadlines.

The standing of Portugal on the primary international benchmark remains unchanged and favourable: Portugal does not appear on the FATF Jurisdictions under Increased Monitoring or Call for Action lists as of the 19 June 2026 and 13 February 2026 FATF plenary statements, a direct FATF primary-source confirmation. This stability is a useful counterweight to the domestic and supranational change described above: none of this cycle development reflects a deteriorating baseline; the developments describe a regime being built up ahead of stricter future requirements rather than one responding to an identified deficiency.

A refreshed national ML/TF risk assessment is expected in the fourth quarter of 2026, per IMF sourcing, which will re-baseline the risk priorities of Portugal for legal persons and virtual assets and is likely to be the next primary-source anchor for the assessed judgments in this domain.

Outlook

The three dates that matter most for this domain over the coming cycles are 1 July 2026 (MiCA transitional-licensing cutover), 10 July 2027 (AMLR/6AMLD full application, with earlier elements due 31 December 2025), and 1 January 2028 (AMLA full operation). The fourth-quarter 2026 national risk assessment refresh is the nearest-term item likely to generate new primary-source material for this domain.

Judgment: PT's AML/CTF regime of record remains Law 83/2017 (4AMLD transposition) and the RCBE (Law 89/2017), with the UIF as FIU; EEA membership binds PT directly to AMLR (Reg 2024/1624) and requires 6AMLD (Dir 2024/1640) transposition by July 2027. Probable
Standing baseline position

Law 83/2017 amended by Law 70/2025 (Travel Rule transposition, Reg. (EU) 2023/1113 Art.38); Law 97/2017 amended by Law 72/2025 (Directive (EU) 2024/1226 transposition), both in force December 2025.

PortalCOS goAML is now the principal channel for suspicious-transaction reports (COS) in Portugal, following the end of its six-month dual-submission transition on 13 October 2026.

Periodic updates (3)
18 Oct 2026 · fim-2026-10-18

AML/CTF Regime

The operationally significant development in Portugal's AML/CTF regime this cycle concerns the channel through which suspicious-transaction reports reach the authorities, rather than any change to the underlying reporting obligation itself. PortalCOS goAML, the shared suspicious-transaction-reporting platform operated jointly by the Polícia Judiciária and the Portuguese financial intelligence unit, went live on 13 April 2026 with a scheduled six-month transition period during which reporting entities could submit through either the legacy channel or the new platform in parallel. That transition window closed on 13 October 2026, after which PortalCOS goAML became the principal channel for suspicious-transaction-report, or COS, filings. The obligation to file reaches across the financial and non-financial sectors, including banks, payment companies, crypto-asset operators, investment firms, and other obliged entities subject to Recommendation 29 of the FATF standards, which concerns financial-intelligence-unit reporting infrastructure.

This finding currently rests on a single Tier-3 vendor-commentary source rather than a direct primary notice from the financial intelligence unit or the Polícia Judiciária confirming the transition's close, and that evidentiary gap is recorded explicitly in this cycle's gaps register. The practical significance of a reporting-channel migration, as distinct from a substantive rule change, lies in continuity: whether obliged entities that had been filing through the legacy channel completed their migration to PortalCOS goAML without disruption to reporting volume or timeliness during the transition's final weeks. No evidence either confirming or contradicting smooth continuity has been located this cycle, which means the operational impact of the migration on actual suspicious-activity reporting flow is, for now, unknown rather than assessed as either successful or troubled.

Against this operational development, Portugal's broader AML/CTF institutional standing remains unchanged and stable. The FATF calendar shows Portugal's last mutual evaluation was adopted in December 2017, with a possible onsite assessment period listed for June 2028 and a possible plenary discussion in February 2029; no evaluation activity occurred this cycle, and Portugal does not appear on the FATF's increased-monitoring or call-for-action lists. That multi-year gap since the last substantive multilateral assessment is a durable baseline fact rather than a new development, but it frames how long it has been since Portugal's domestic AML/CTF architecture, including now its FIU-reporting infrastructure, has faced external multilateral scrutiny, even as that infrastructure itself continues to evolve domestically through initiatives like the PortalCOS goAML migration.

The European-level transposition dimension of Portugal's AML/CTF regime, specifically the infringement proceedings concerning sixth-Directive beneficial-ownership-register-access provisions, is a related but analytically distinct thread tracked separately; it bears on the supervisory and transparency architecture above the reporting-channel level addressed here, and the two should be read as parallel developments within the same broader AML/CTF modernisation period rather than as a single event.

Outlook

The immediate open question is whether the PortalCOS goAML transition, having reached its scheduled close, produces any measurable disruption to suspicious-activity reporting volumes or timeliness in the weeks following 13 October 2026, a question this cycle's material cannot yet answer given reliance on a single non-primary source. A primary confirmation from the financial intelligence unit or Polícia Judiciária, if and when it surfaces, would materially strengthen confidence in this finding and should be the first thing sought in the following cycle. Separately, Portugal's multi-year gap since its last FATF mutual evaluation continues on its own track toward the possible 2028 onsite window; no near-term change to that schedule is indicated. The directly-applicable AML Regulation's 10 July 2027 application date remains the next major scheduled milestone bearing on Portugal's overall AML/CTF architecture, running in parallel with, but legally independent of, both the reporting-channel migration and the ongoing sixth-Directive transposition dispute.

11 Oct 2026 · fim-2026-10-11

AML/CTF Regime

Portugal's standing AML/CTF regime, grounded in Lei 83/2017, remains in force, but the European Commission's 25 September 2026 letter of formal notice identifies a specific transposition gap concerning Directive (EU) 2024/1640, the sixth AML Directive, Articles 11, 12, 13 and 15, governing access to the central beneficial-ownership register. The transposition deadline was 10 July 2026, and Portugal's reply is due within two months, to approximately late November 2026. This gap is organisational, concerning who may access the register and under what interoperable-register model, rather than a finding against the substance of Portugal's underlying AML controls, which are otherwise described in the record as solid.

Looking beyond the current 6AMLD matter, the Anti-Money Laundering Regulation, Regulation (EU) 2024/1624, applies directly across the EU from 10 July 2027 without requiring national transposition; Portuguese obliged entities will need to align their customer-due-diligence, beneficial-ownership-identification and record-keeping practices to this single EU rulebook, which will in time supersede much of the substantive content currently carried by Lei 83/2017. The Anti-Money Laundering Authority, established under Regulation (EU) 2024/1620 and operational in Frankfurt since July 2025, has not been recorded this period as having made any Portugal-specific direct-supervision designation.

Banco de Portugal's first-quarter 2026 sanctions bulletin recorded 6 AML/CFT-specific proceedings among the 37 opened in that quarter, alongside 19 prudential, 11 illicit-financial-activity and 1 cash-recirculation matter, out of 82 proceedings concluded with EUR 545,000 in total fines, EUR 46,750 of which was suspended.

Outlook

Portugal's response to the European Commission within the two-month reply window is the immediate item to watch. On a longer horizon, the direct application of the AML Regulation from 10 July 2027 will reshape the substantive content of Portugal's AML/CTF obligations independent of how the current transposition matter resolves.

28 Sep 2026 · fim-2026-09-28

AML/CTF Regime

Portugal's standing AML/CTF architecture rests on Law 83/2017, supervised by Banco de Portugal through its sectoral notices and by CMVM through its own regulatory framework, with the UIF, housed within the Polícia Judiciária, as the designated financial intelligence unit. This cycle saw two December 2025 statutory amendments to that base framework. Law 70/2025 transposed Article 38 of Regulation (EU) 2023/1113, the crypto-asset Travel Rule, amending Law 83/2017 directly. Law 72/2025 transposed Directive (EU) 2024/1226 on criminal offences and penalties for violating EU restrictive measures, amending the separate sanctions-implementation statute, Law 97/2017. Neither instrument replaces Law 83/2017 as the governing AML statute; both extend and tighten it in specific, named respects.

The practical effect is a coordinated broadening of the regime's reach along two axes simultaneously: crypto-asset transfer traceability, through the Travel Rule, and criminal accountability for sanctions violations, through the new offences-and-penalties framework. Both amendments arrived in the same month, December 2025, and both took effect ahead of the mid-2026 MiCA transition closure described under the crypto and digital-assets domain, suggesting a deliberate sequencing by Portuguese authorities to have the AML statutory base updated before the digital-asset supervisory perimeter itself changed category.

On FATF standing, Portugal is not named on the current call-for-action or increased-monitoring lists, a Tier-1 finding drawn directly from FATF's own country page. That same source notes Portugal's last full mutual evaluation dates to the third-round cycle under the 2004 methodology, meaning the authoritative external assessment of Portugal's AML/CFT effectiveness has not been refreshed against the current FATF methodology despite the domestic statutory activity described above. This is a meaningful qualifier: statutory tightening and externally-verified effectiveness are two different things, and only the former is evidenced here for this cycle.

Three-pillar balance: this cycle's D7 findings are predominantly AML- and CFT-adjacent (Travel Rule, sanctions-offence criminalisation) rather than CPF-specific; no standalone counter-proliferation-financing development was evidenced for Portugal this cycle, and that absence should be read as a coverage gap rather than a finding of CPF-regime adequacy or inadequacy.

Outlook

The open question for this domain is whether an updated FATF mutual evaluation, beyond the third-round 2004-methodology assessment currently on record, will be scheduled, which would provide the first externally verified read on how Portugal's December 2025 to July 2026 statutory tightening translates into practice. In the interim, primary Diário da República text for both Law 70/2025 and Law 72/2025 remains unretrieved this cycle and should be prioritised for direct verification ahead of the next reporting window.

D8 Commercial Activity

no_changeno_change
Judgment: No in-window PT financial-integrity-sector commercial event located this cycle. Uncertain
Regulatory horizon
Consultation2026-Q4 · ±half_year

Portugal national ML/TF risk assessment (NRA) refresh 2026

A refreshed national risk assessment will re-baseline PT's ML/TF risk priorities for legal persons and virtual assets.
Source
In Force Pending2026-Q4 · ±quarter

Portugal's outstanding 6AMLD transposition following EC infringement notice

Portugal has two months from the formal notice to complete transposition and notify its measures to the Commission.
European Commission / Portuguese Parliament Source
In Force Pending2027-Q3 · ±quarter

AMLR direct application

Portugal's Lei 83/2017-based AML regime will largely be superseded in its substantive-obligation content by directly-applicable EU rules.
European Union (directly applicable) Source
3 dated · 5 pending date · baseline fim-2026-07-08
Role action cards
Compliance

Portugal's crypto-asset authorisation pipeline shows only one completed authorisation on the ESMA interim register as of 7 October 2026, against the backdrop of the 1 July 2026 end of the transitional regime.

A control framework built on the assumption that counterparties holding themselves out as MiCA-authorised in Portugal are in fact fully authorised should account for the possibility that some such counterparties remain in a post-transitional grey zone pending authorisation.

1 evidence refs
Board

The end of Portugal's crypto transitional regime on 1 July 2026 has produced a supervisory-throughput signal worth board-level awareness ahead of the broader EU AML architecture deadlines in July 2027.

The low Portuguese crypto-authorisation count is a structural, not reputational, signal at this stage, but it sits upstream of exposure for any institution with Portuguese digital-asset counterparties.

2 evidence refs
CTO

Only a single Portugal-supervised crypto-asset service provider holds full Markets in Crypto-Assets authorisation as of the 7 October 2026 ESMA interim register.

Technical integrations or screening logic keyed to a Portuguese MiCA-authorised-entity list should expect that list to remain very short in the near term, and should not assume breadth of lawful counterparty options in that jurisdiction.

1 evidence refs
Risk

Portugal's crypto-authorisation bottleneck is a structural exposure-concentration signal rather than an enforcement one.

Concentration of lawful Portuguese crypto-asset activity in a single authorised entity, against an unknown-sized population of post-transitional applicants, is a risk-typology variable for exposure models keyed to jurisdictional authorisation breadth.

1 evidence refs
Scenario sketches

Illustrative scenario: supervisory capacity gaps during a licensing-architecture transition

Illustrative scenario for analytical orientation only. Consider a jurisdiction where a sector-wide authorisation deadline closes a transitional window for a population of previously-registered operators, and the formal supervisory gateway processes completed authorisations more slowly than the deadline anticipated. In such a structural setting, a population of entities could, in principle, persist in continuing client-facing activity in the interval between the end of transitional cover and the grant or refusal of full authorisation, relying on the ambiguity of pending-application status rather than any deliberate evasion. This is a structural mechanism worth watching for, not an observed fact about any specific entity, and it illustrates why authorisation throughput, not just the existence of a licensing requirement, is itself a financial-integrity-relevant variable.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Illustrative scenario: the AMLA supervisory-architecture transition

Illustrative scenario for analytical orientation only. As the European Union's new Anti-Money Laundering Authority assumes direct supervision of a defined population of higher-risk cross-border obliged entities, while the great majority of obliged entities remain under national supervisors applying the directly-applicable AML Regulation and the nationally-transposed sixth AML Directive, a hybrid supervisory landscape could emerge in which entities positioned near the threshold for direct AMLA supervision have an incentive to structure their cross-border footprint to remain within national-supervisor scope. This is an illustrative structural possibility arising from the architecture itself, not an observed strategy by any identified entity, and not a prediction that it will occur in Portugal or elsewhere.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo PT-specific dark-fleet, tech-procurement or commodity-rerouting development located this cycle.
T2 · EU AML Package / AMLAstablePT remains an EU-27 EEA member bound directly by AMLR (Reg 2024/1624) and must transpose 6AMLD (Dir 2024/1640) by July 2027.
T3 · FATF Grey Listno_changePortugal is not named in FATF's 19 June 2026 Jurisdictions under Increased Monitoring outcomes statement.
T4 · Beneficial-Ownership Register StatusstableRCBE (Law 89/2017) enforcement reported as intensifying via IRN cross-checks through 2026; no new statutory amendment confirmed this cycle.
T5 · Crypto & Digital-Asset IntegritywatchPT's MiCA regime (Law 69/2025) ended its transitional period 1 July 2026; ESMA's interim register shows only one PT-supervised CASP authorisation so far.
T6 · Sanctions Regime Divergenceno_changeNo PT-specific autonomous-listing divergence or delisting-asymmetry development located this cycle.
Registers

Enforcement actions

  • 1 Mar 2025
  • 1 Jan 2025
  • 1 Oct 2025
  • 30 Jun 2026
  • 7 May 2026
  • Portugal co-led (with Austria and Spain) a multi-month Europol-coordinated sweep against counterfeit-currency distribution hubs spanning Asia, the Americas and the Middle East, seizing large quantities of fake notes including 'movie money' props exploited by criminals. 1 Mar 2025
  • Portugal's parallel national VASP registration regime (Banco de Portugal Notice 3/2021) was superseded by the EU-wide MiCA authorisation requirement upon MiCA's full application, forcing incumbent Portuguese crypto firms into a harmonised EU licensing perimeter or cessation of regulated activity. 1 Jan 2025
  • A Eurojust-coordinated joint action day executed searches, arrests and asset freezes in Portugal alongside Spain, Italy, Romania and Bulgaria against a cryptocurrency investment fraud scheme active across 23 countries since at least 2018; Europol deployed a cryptocurrency specialist to Portugal to assist with asset seizures. 1 Oct 2025

Sanctions changes

  • 23 Oct 2025
  • 23 Apr 2026
  • 30 Jun 2026
  • The EU's 19th Russia sanctions package added 69 new listings (oligarchs, energy companies, shadow-fleet managers, third-country banks and oil traders) and, for the first time, sanctioned crypto/stablecoin infrastructure (the A7A5 stablecoin ecosystem); directly applicable in Portugal as an EU member state. 23 Oct 2025
  • The EU's 20th Russia sanctions package added 120 new listings (37 individuals, 83 entities), 36 additional energy-sector listings, further shadow-fleet and maritime-insurer designations, and activated the EU's anti-circumvention instrument for the first time to block exports of critical EU goods to a third country used to undermine sanctions; directly applicable in Portugal. 23 Apr 2026

Regulatory horizon (register)

  • Portugal national ML/TF risk assessment (NRA) refresh 2026
  • AMLA Work Programme / build-out
  • AMLR / 6AMLD application date
  • MiCA transitional-regime expiry for pre-existing PT VASPs
  • Portugal national ML/TF risk assessment (NRA) refresh 2026
  • AMLR/6AMLD beneficial-ownership register provisions and AMLA technical standards
  • Portugal's outstanding 6AMLD transposition following EC infringement notice
  • 6AMLD full transposition in Portugal
  • AMLR direct application
  • 6AMLD transposition completion (post-infringement remediation)
  • AML Regulation (AMLR, Reg 2024/1624) becomes directly applicable in Portugal
  • 6AMLD transposition deadline for Portugal as EU member state
  • AMLA first harmonised-methodology direct-supervision selection round
  • Portugal's next FATF mutual evaluation (5th round) scheduling

Active schemes

  • [HIGH] Golden Visa real-estate laundering pipeline
  • [HIGH] Angola-linked PEP capital structuring via Portuguese enablers
  • VASP-to-CASP transition supervisory gap
  • Iberian hawala-based organised-crime layering network
Sources
  1. Scam Network Crackdown Takes Aim At Firms Behind Fraudulent Ads | OCCRP
  2. https://www.aoshearman.com/en/insights/aml-playbook-eu-edition-1-the-new-eu-aml-ctf-package
  3. https://abreuadvogados.com/wp-content/uploads/2026/05/Country-Update-Portugal-AML-2026.pdf
  4. https://www.fatf-gafi.org/en/countries/detail/Portugal.html
  5. https://www.dlapiper.com/en-us/insights/publications/2026/03/aml-cft-and-sanctions-in-2026
  6. https://www.zango.ai/blog-post/how-portugals-new-rules-reshape-customer-due-diligence
  7. https://schmidt-export.com/news/portugal-aligns-access-beneficial-ownership-register-eu-court-ruling-and-eu-directives
  8. https://www.bportugal.pt/en/page/application-authorisation-crypto-asset-service-provider
  9. https://www.macedovitorino.com/en/knowledge/insights/New-rules-for-the-crypto-asset-market/6865/
  10. https://globalsanctions.com/sanctioning-state/portugal/
  11. https://www.imf.org/-/media/files/publications/cr/2026/english/1prtea2026003.pdf
  12. https://www.openownership.org/en/map/country/portugal/
  13. https://pt.euronews.com/2026/09/25/portugal-entre-18-paises-sob-processo-por-falhas-na-transposicao-de-regras-contra-branquea
  14. https://eco.sapo.pt/2026/09/25/bruxelas-processa-portugal-por-falhas-na-legislacao-contra-branqueamento-de-capitais/
  15. https://www.fatf-gafi.org/en/calendars/assessments.html
  16. https://files.diariodarepublica.pt/1s/2025/12/24500/0001300031.pdf
  17. https://www.sanctionscanner.com/blog/fatf-plenary-june-2026-grey-list-changes-and-key-outcomes-1391
  18. https://www.yogonet.com/international/news/2026/09/09/126293-cambodia-tightens-casino-rules-with-new-license-standards-and-october-proxy-betting-ban
  19. https://www.fincen.gov/news/news-releases/fincen-issues-supplemental-alert-fuel-smuggling-and-tax-evasion-schemes-southern
  20. European Commission DG FISMA
  21. Euronews (Portuguese)
  22. Banco de Portugal
  23. Jornal Económico
  24. ECO (Sapo)
  25. https://sapo.pt/artigo/comissao-europeia-abre-processo-contra-portugal-por-nao-aplicar-as-novas-regras-contra-o-branqueamento-de-capitais-6ab77262bf983daebc2c21cc
  26. https://pt.nttdata.com/insights/blog/da-amla-ao-goaml-uma-nova-era-no-combate-ao-branqueamento-de-capitais
  27. https://ofac.treasury.gov/recent-actions/20260701
  28. https://www.steptoe.com/en/news-publications/stepwise-risk-outlook/sanctions-update-october-13-2026.html
  29. https://www.checkfile.ai/pt-PT/blog/conformidade-kyc-aml-neobancos-bancos-digitais-2026
  30. Abreu Advogados / Thomson Reuters
  31. VLO Law Firm
  32. FATF
  33. The Portugal Post
  34. Unknown Gravity
  35. Mutual Evaluation of Portugal
  36. Mutual Evaluations
  37. Consolidated assessment ratings
  38. Portugal
  39. The 2022 and 2013 Methodologies for Assessing Technical Compliance with the FATF Recommendations and the Effectiveness of AML/CFT/CPF Systems
  40. Second Biennial Update to the Mutual Evaluation of Portugal
  41. Countries / Jurisdictions
  42. Consolidated Processes and Procedures for Mutual Evaluations and Follow-Up Universal Procedures
  43. Assessments
  44. The FATF Recommendations
  45. Sanctions Programs and Country Information | Office of Foreign Assets Control
  46. Civil Penalties and Enforcement Information | Office of Foreign Assets Control
  47. European e-Justice Portal - Enforcement
  48. Recent Actions | Office of Foreign Assets Control
  49. Anti-money laundering and countering the financing of terrorism at international level - Finance
  50. April infringements package: key decisions
  51. Sanctions | Security Council
  52. Overview of sanctions and related resources - Finance - European Commission
  53. A Portuguese Crusader Seeks to Tap the Brakes on Golden Visas | OCCRP
  54. Portugal Continues Refusal to Abolish Golden Visa Scheme | OCCRP
  55. Europe's Golden Doors: Lack of progress in stopping the criminal and corrupt accessing Europe via golden passports and visas | Global Witness
  56. EU member states in race to the bottom to sell Golden Visas to the super-rich | Global Witness
  57. What’s a Golden Visa and Where Can You Still Get One?
  58. Portugal Considers Sweetening Incentives for Golden Visa Program - Bloomberg
  59. Video: Why the 'Golden Visa' May Be on Borrowed Time
  60. Trump's Gold Card, and Golden Visas: What to Know - Bloomberg
  61. Portugal to End Golden Visa Program After Surge in Home Prices - Bloomberg
  62. Portugal’s Golden Visa Program Boosts Classic Cars, Almonds and Equities - Bloomberg
  63. Developing a risk-based methodology for an automatic anti-money laundering/counter terrorist financing (AML/CTF) risk categorization for supervised entities in Portugal - Reform Support
  64. December 2017 Anti-money laundering and counter-terrorist financing measures
  65. Economic forecast for Portugal - Economy and Finance - European Commission
  66. Portugal's measures to combat money laundering and the financing of terrorism and proliferation
  67. Financial assistance to Portugal - Economy and Finance
  68. Public Consultation on AML/CFT and Financial Inclusion - Updated FATF Guidance on AML/CFT Measures and Financial Inclusion
  69. 1 Information on Portugal national BOR
  70. Treasury Department won’t enforce beneficial ownership rule under the Corporate Transparency Act - ICIJ
  71. questionnaire on beneficial ownership information
  72. Patchy progress in beneficial ownership registers in the EU | Global Witness
  73. U.S. Beneficial Ownership Information Registry Now Accepting Reports | FinCEN.gov
  74. Portugal - Reform Support - European Commission
  75. Guidance on Beneficial Ownership of Legal Persons
  76. Patchy Progress in Setting Up Public Beneficial Ownership Registers in the EU | Global Witness
  77. Beneficial Ownership Registers Interconnection System
  78. FinCEN Removes Beneficial Ownership Reporting Requirements for U.S. Companies and U.S. Persons, Sets New Deadlines for Foreign Companies | FinCEN.gov
  79. Portugal Country Guide | Elliptic
  80. Banco de Portugal | EU Digital Finance Platform
  81. Crypto-assets - Finance - European Commission
  82. Virtual Asset Service Provider (VASP): Definition, Compliance & Examples
  83. 2025 Crypto Regulatory Round-Up
  84. What Is a VASP? Virtual Asset Service Provider - Chainalysis
  85. FIN-NET members in Portugal - Finance - European Commission
  86. Portuguese Crypto Exchanges Dealt a Blow as Banks Close Accounts
  87. Global Crypto Policy Review Outlook 2025/26 Report | TRM Labs
  88. Breaking Down Brazil’s New Crypto Framework
  89. Isabel dos Santos blames asset freeze for Lisbon retreat and failure to pay staff - ICIJ
  90. Angola’s Isabel dos Santos loses appeal to overturn $733M global asset freeze - ICIJ
  91. Court ties dos Santos to 'fraudulent' diamond deal as Portugal further freezes out billionaire - ICIJ
  92. UK sanctions Angola’s Isabel dos Santos and associates for ‘stealing country’s wealth for personal gain’ - ICIJ
  93. Isabel dos Santos claims ‘justice denied’ after rejection of assets appeal - ICIJ
  94. Portuguese ‘super judge’ orders total seizure of dos Santos assets - ICIJ
  95. Portugal likely to freeze proceeds from Isabel dos Santos bank sale - ICIJ
  96. Isabel dos Santos condemns 'abusive' seizure of $442m stake - ICIJ
  97. Dutch launch criminal probe, freeze assets of Isabel dos Santos-linked firm - ICIJ
  98. Luanda Leaks’ Isabel dos Santos loses fight against $733 million asset freeze - ICIJ
  99. December 2017 Anti-money laundering and counter-terrorist financing measures
  100. Mutual Evaluation of Portugal
  101. Spain, Portugal Bust Russian-Led Money Laundering Ring | OCCRP
  102. Portuguese regulator calls for criminal prosecution of auditors following Luanda Leaks - ICIJ
  103. FATF VIII
  104. Quick guide on assessing the Money Laundering risks of corruption
  105. Page 1 of 199 Country Review Report of Portugal
  106. International arrest warrant issued for Angolan billionaire Isabel dos Santos - ICIJ
  107. Isabel dos Santos charged with embezzlement, will sell Portuguese bank stake - ICIJ
  108. Police search PwC, Boston Consulting Group offices in Angolan corruption probe against Isabel dos Santos - ICIJ
  109. Portugal seizes Isabel dos Santos' bank accounts - ICIJ
  110. Angola’s Isabel dos Santos Denies Press Report of Arrest Warrant - Bloomberg
  111. Angolan civil society groups demand answers on dos Santos assets - ICIJ
  112. Isabel dos Santos charged with 12 crimes in Angola over her dealings as Sonangol chair - ICIJ
  113. Anti-money laundering and countering the financing of terrorism at EU level - Finance
  114. About AMLA - Authority for Anti-Money Laundering and Countering the Financing of Terrorism
  115. Questions and Answers: The new EU Anti-Money Laundering Authority (AMLA)
  116. Anti-money laundering and countering the financing of terrorism legislative package - Finance
  117. Homepage - Authority for Anti-Money Laundering and Countering the Financing of Terrorism
  118. Anti-money laundering and countering the financing of terrorism overview - Finance
  119. Timeline: EU action against money laundering and terrorist financing - Consilium
  120. Anti-money laundering directive V (AMLD V) - transposition status | European Commission
  121. FAQs - Authority for Anti-Money Laundering and Countering the Financing of Terrorism
  122. EU adopts 19th package of sanctions against Russia - Finance
  123. EU sanctions against Russia: questions and answers - Consilium
  124. Questions and answers on the 20th package of sanctions against Russia
  125. Timeline - EU sanctions against Russia - Consilium
  126. Russian Harmful Foreign Activities Sanctions | Office of Foreign Assets Control
  127. EU adopts 20th package of sanctions against Russia - Finance
  128. 19th package of sanctions against Russia: EU targets Russian energy, third-country banks and crypto providers - Consilium
  129. Statement by President von der Leyen on the 20th package of sanctions against Russia
  130. EU Weighs New Sanctions on Russia to Hit Banks and Oil Trade - Bloomberg
  131. PADRÕES INTERNACIONAIS DE COMBATE AO BRANQUEAMENTO DE CAPITAIS
  132. Portugal Delays Decision on Central Bank Chief to Next Week - Bloomberg
  133. Portugal and the euro - Economy and Finance - European Commission
  134. Speech by the Eurogroup President on Portugal's growth and reforms within the euro area (in Portuguese), 25 March 2019 - Consilium
  135. Portugal and the euro - Economy and Finance - European Commission
  136. Spain: Russian Money Laundering Ring Dismantled | OCCRP
  137. Spanish Police Arrest Son of Russian Defense Executive in Money Laundering Probe | OCCRP
  138. Police Arrest 5 in €100M Cross-Border Cryptocurrency Fraud Case | OCCRP
  139. Europe’s Biggest ’Ndrangheta Drug Ring Sentenced | OCCRP
  140. Spain: Crackdown on Russian/Ukrainian Money Launderers | OCCRP
  141. ‘Ndrangheta Drug Ring Busted in Italy, Spain, Albania | OCCRP
  142. Panama Papers: ICIJ To Release Searchable Online Database of Data | OCCRP
  143. NGO: Transnational Organized Crime Groups Make US$ 2.2 trillion a Year | OCCRP
  144. Hundreds Arrested in Largest Ever Child Pornography Bust | OCCRP
  145. "Black and grey" lists
  146. Jurisdictions under Increased Monitoring - 19 June 2026
  147. Jurisdictions under Increased Monitoring - 13 February 2026
  148. Outcomes FATF Plenary, 17-19 June 2026
  149. High-risk and other monitored jurisdictions
  150. High-Risk Jurisdictions subject to a Call for Action - 19 June 2026
  151. Jurisdictions under Increased Monitoring - 24 October 2025
  152. News
  153. Money Laundering Advisory Notice: June 2026 - GOV.UK
  154. Jurisdictions under Increased Monitoring - 21 February 2025
  155. Portugal: Authorities Dismantle Russian Football Money Laundering Ring
  156. Portugal: Authorities Dismantle Russian Football Money Laundering Ring | OCCRP
  157. Massive Global Raids Target 'Ndrangheta | OCCRP
  158. Pan-Continental Operation Busts Money Launderers for Europe’s Cybercriminals | OCCRP
  159. Europol Seizes $72M in Counterfeit Cash, Props | OCCRP
  160. Portugal - Migration and Home Affairs - European Commission
  161. FATF REPORT Money Laundering and the Illegal Wildlife Trade June 2020
  162. Europe-Wide Crackdown Targets Crypto Fraud, 600M Euros Stolen | OCCRP
  163. Eurojust Coordinates Global Crackdown on €600 Million Crypto Investment Fraud Network | TRM Blog
  164. Eurojust | OCCRP
  165. Cybercrime Crackdown Nets 18 Suspects, 300M Euros in Credit Card Fraud | OCCRP
  166. What Is a Darknet Market? Definition, How They Work & Law Enforcement Guide- Chainalysis
  167. Eurojust-Backed Raids Uncover $364 Million Cross-Border Money Laundering Network | OCCRP
  168. EU-Backed Raids Dismantle Online Fraud Network | OCCRP
  169. Eurojust-Backed Operation Takes Down Ukrainian Scam Call Center | OCCRP
  170. Scam Network Crackdown Takes Aim At Firms Behind Fraudulent Ads | OCCRP
  171. FATF
  172. FATF
  173. Banco de Portugal
  174. European Commission
  175. Council of the European Union
  176. ICIJ
  177. ICIJ
  178. Global Witness
  179. OCCRP
  180. OCCRP
  181. Elliptic
  182. Bloomberg
  183. OCCRP
  184. OCCRP
  185. European Commission
  186. Global Witness
  187. FATF
  188. HM Treasury (UK)
  189. European Commission
Coverage gaps
fim-int-2026-07-07-G001: Portugal's 5th-round FATF mutual ev…
fim-int-2026-07-07-G001: Portugal's 5th-round FATF mutual evaluation has no scheduled on-site date, leaving current DNFBP and real-estate effectiveness ratings dependent on a 2017 baseline that has not been independently re-tested. [resolved]
fim-int-2026-07-07-G002: The exact status of the October 202…
fim-int-2026-07-07-G002: The exact status of the October 2025 RCBE legitimate-interest access decree (whether it is operationally live as of mid-2026) is not independently confirmed beyond a single T3 source. [resolved]
fim-int-2026-07-07-G003: The precise Portuguese criminal-pro…
fim-int-2026-07-07-G003: The precise Portuguese criminal-procedure mechanism and timeline for converting the dos Santos-network preventive-seizure orders into an actual asset-repatriation outcome to Angola is not documented in a T1/T2 source this cycle. [resolved]
fim-int-2026-07-07-G004: No direct source URL was located fo…
fim-int-2026-07-07-G004: No direct source URL was located for Portugal's specific absence from the June 2026 UK MLR high-risk-third-country advisory notice update. [resolved]
fim-int-2026-07-07-G005: Independent T2 verification of Banc…
fim-int-2026-07-07-G005: Independent T2 verification of Banco de Portugal's EU Technical Support Instrument-backed automatic AML/CFT risk-categorisation project implementation progress is absent. [resolved]
fim-int-2026-07-07-G006: No Portugal-specific armed-conflict…
fim-int-2026-07-07-G006: No Portugal-specific armed-conflict financing case (as distinct from extractive-industry corruption proceeds) was identified this cycle, leaving the D4 assessment reliant on the Angola PEP-network adjacency alone. [resolved]
fim-int-2026-07-07-G007: Post-2023 enforcement data, STR vol…
fim-int-2026-07-07-G007: Post-2023 enforcement data, STR volumes, or supervisory follow-through documenting whether Golden Visa substitute investment categories (funds, green projects) are in fact less scrutinised than the former real-estate route is not available this cycle. [resolved]
fim-int-2026-08-05-G001: No fresh T1 Portuguese 6AMLD transp…
fim-int-2026-08-05-G001: No fresh T1 Portuguese 6AMLD transposition text located this cycle; PT transposition status recorded as not fully established beyond the general 2026-27 EU deadline. [resolved]
fim-int-2026-08-05-G002: No T1/T2 anchor available for Cambo…
fim-int-2026-08-05-G002: No T1/T2 anchor available for Cambodia's re-listing risk; confidence capped at Assessed pending a FATF plenary decision. [resolved]
fim-int-2026-08-05-G003: No updated FATF mutual evaluation o…
fim-int-2026-08-05-G003: No updated FATF mutual evaluation or UNODC report located for Colombia this cycle beyond the US State Department determination. [resolved]
fim-int-2026-08-05-G004: D6 (Compliance Technology and Activ…
fim-int-2026-08-05-G004: D6 (Compliance Technology and Active Defence) coverage remains thin; no material AI/ML transaction-monitoring guidance update located this cycle. [resolved]
fim-int-2026-08-21-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-21-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No direct RCBE/gov.pt primary-source confirmation reached this cycle for the Decree-Law 115/2025 access-restriction claim; relies on two Tier-3/4 secondary sources. [resolved]
fim-int-2026-08-21-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-21-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): Primary DRE (Diário da República) legislative text for Laws 70/2025 and 72/2025 not independently verified this cycle; relies on a single Tier-3 law-firm summary. [resolved]
fim-int-2026-08-21-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-21-G003 ({'scheme': 'financial_integrity', 'value': 'D1'}): PT prosecutorial (DCIAP/PGR) primary confirmation of the Casa Pia sanctions-breach case not reached this cycle; single vendor-aggregator source only. [resolved]
fim-int-2026-08-21-G004 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-21-G004 ({'scheme': 'financial_integrity', 'value': 'D3'}): D3 (enabler jurisdictions) and D4 (conflict finance) yielded no PT-specific material this cycle; a coverage gap rather than an asserted absence. [resolved]
fim-int-2026-08-21-G005: Tier-D jurisdictions (Cambodia, Lao…
fim-int-2026-08-21-G005: Tier-D jurisdictions (Cambodia, Laos, Mexico, Colombia) not independently re-swept this cycle given the PT-scoped union dispatch. [resolved]
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', 'value': 'D5'}): No T1 Diario da Republica primary text was retrieved this cycle for Laws 70/2025 or 72/2025; both rest on T3 secondary reporting only. [resolved]
fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', 'value': 'D3'}): D1, D3, D4 and D6 returned thin or no PT-specific coverage this cycle within the pooled search budget; Tier D watch jurisdictions (KH, LA, MX, CO) were not actively re-run within this PT-bound dispatch. [resolved]
fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): Portugal's current FATF mutual-evaluation follow-up status could not be confirmed via an updated 4th-round MER this cycle. [resolved]
fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): The European Commission's own infringement-notice press release/text was not directly retrieved this cycle; the legal characterisation rests on multiple T2/T3 press reports describing the same action. [resolved]
fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): No primary source located this cycle confirming whether any CASP-specific enforcement action has occurred under Portugal's new Banco de Portugal/CMVM crypto-AML architecture. [resolved]
fim-int-2026-10-04-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G003 ({'scheme': 'financial_integrity', 'value': 'D1'}): D1 (sanctions), D3 (enabler jurisdictions beyond Cambodia), D4 (Laos, Colombia) and D6 (compliance technology) produced no Portugal-specific or qualifying tier-D finding this cycle despite active searching. [resolved]
fim-int-2026-10-11-G001: Tier D jurisdictions (KH, LA, MX, C…
fim-int-2026-10-11-G001: Tier D jurisdictions (KH, LA, MX, CO) were not actively searched this cycle because the dispatch's search budget was allocated to the bound jurisdiction PT; this is an under-collection, not a no-material-change finding for those jurisdictions. [resolved]
fim-int-2026-10-11-G002: D1 (Sanctions), D3 (Enabler Jurisdi…
fim-int-2026-10-11-G002: D1 (Sanctions), D3 (Enabler Jurisdictions) and D4 (Conflict Finance) carried no PT-specific substantive finding this cycle; D8 (Commercial Activity) likewise carried no PT-specific financial-integrity-sector commercial transaction. [resolved]
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No T1 European Commission primary notice (press release or Official Journal text) for the PT 6AMLD infringement action was reached this cycle; only two T2 press sources corroborate it. [open]
fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): No T1 UIF/PJ primary notice confirming the PortalCOS goAML transition-period end was located; only vendor commentary (T3) supports this milestone. [open]
fim-int-2026-10-18-G003: Tier D jurisdiction watch (KH, LA, …
fim-int-2026-10-18-G003: Tier D jurisdiction watch (KH, LA, MX, CO) could not be actively refreshed this cycle given the pooled union search budget concentrated on PT-specific D2/D7 developments. [open]
fim-int-2026-10-18-G004: No PT-specific D1 (sanctions-evasio…
fim-int-2026-10-18-G004: No PT-specific D1 (sanctions-evasion), D3 (enabler jurisdiction), D4 (conflict finance), D5 (crypto/digital assets) or D6 (compliance technology) development was located this cycle. [open]
fim-int-2026-10-25-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-25-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): No T1 Portuguese gazette text for Law 83/2017 itself was directly retrieved this cycle; current Probable confidence is capped pending a T1 anchor. [open]
fim-int-2026-10-25-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-25-G002 ({'scheme': 'financial_integrity', 'value': 'D2'}): No T1 IRN/RCBE statement confirming current enforcement intensity for the RCBE 30-day update window was retrieved this cycle. [open]
fim-int-2026-10-25-G003: Tier D jurisdictions (KH/LA/MX/CO) …
fim-int-2026-10-25-G003: Tier D jurisdictions (KH/LA/MX/CO) were not separately queried given the PT-bound single-jurisdiction scope of this pass. [open]
FIM-GAP-001 (D2): Golden Visa and broader real-estate sector…
FIM-GAP-001 (D2): Golden Visa and broader real-estate sector AML supervision remains structurally weak: FATF's 2017 MER found DNFBP obligations 'need to be more comprehensively applied,' and the 2023 property-route restriction did not retroactively address the existing stock of property-linked residencies or extend equivalent scrutiny to substitute investment categories.
FIM-GAP-002 (D2): Portugal's RCBE beneficial-ownership regis…
FIM-GAP-002 (D2): Portugal's RCBE beneficial-ownership register, while nominally public, imposes practical access barriers: authentication limited to a small set of EU electronic-ID systems, mandatory prior knowledge of a company's tax identification number to search, and legitimate-interest gating, all of which Global Witness graded 'red' for failing genuine public-access standards.
FIM-GAP-003 (D3): Seized Isabel dos Santos-linked assets in …
FIM-GAP-003 (D3): Seized Isabel dos Santos-linked assets in Portugal (NOS/ZOPT stakes, Efacec, EuroBic proceeds, real estate) have not been repatriated to Angola years after freezing orders, prompting Angolan civil-society organisations to publicly demand explanation from both governments; the matter remained unresolved into the current reporting period.
FIM-GAP-004 (D1): No confirmed jihadist-financing, hawala-ba…
FIM-GAP-004 (D1): No confirmed jihadist-financing, hawala-based terrorist-financing, or DPRK/Iran proliferation-corridor case specifically implicating Portugal was identified in open-source Tier 1/2 reporting within the 18-month window; the last substantive CPF effectiveness assessment (2017 MER) found Portuguese CPF coordination capacity sound but this has not been re-tested under the FATF 2022 methodology.
FIM-GAP-005 (D6): Open-source reporting on Banco de Portugal…
FIM-GAP-005 (D6): Open-source reporting on Banco de Portugal's RegTech/SupTech modernisation (the EU Commission-backed project to build an automatic risk-based AML/CFT categorisation methodology) is limited to a single EU Technical Support Instrument project page, with no independent T2 verification of implementation progress or supervisory outcomes located.

Evidence

Confidence-tiered claims

European Commission opened infringement proceedings against Portugal and 17 other Member States for incomplete transposition of four articles of the 6th AML Directive (Directive (EU) 2024/1640), specifically beneficial-ownership-register access provisions. [Source 1]
Probable · 1 source
Portugal's MiCA transitional regime for legacy Banco de Portugal-registered virtual-asset providers closed on 1 July 2026; crypto-asset service providers now treated as financial entities supervised by Banco de Portugal for AML/CFT purposes. [Source 1]
Probable · 1 source
Cambodia revoked 20 casino licences and suspended 29 of 195 inspected licensees in August 2026; proxy/live-dealer streaming to be suspended from October 2026, framed around money-laundering and scam-compound risk. [Source 1]
Probable · 1 source
At the June 2026 Plenary, FATF added Bosnia and Herzegovina and Iraq to the grey list and removed Algeria and Namibia, leaving 22 jurisdictions under increased monitoring; blacklist (Iran, North Korea, Myanmar) unchanged. [Source 1]
Probable · 1 source
FinCEN's 30 June 2026 supplemental alert on fiscal fuel-smuggling schemes tied to CJNG, Sinaloa and Gulf Cartel networks, issued alongside an OFAC sanctions action against two Mexican nationals and nine entities; no newer update found this cycle. [Source 1]
Probable · 1 source
European Commission sent letter of formal notice to Portugal on 25 September 2026 for incomplete transposition of 6AMLD (Directive (EU) 2024/1640) Articles 11, 12, 13 and 15 (beneficial-ownership-register access); deadline was 10 July 2026; two-month reply window applies. [Source 1]
Probable · 1 source
On 25 September 2026 Portugal's three financial supervisors signed a trilateral crisis-management cooperation protocol plus three new bilateral protocols, aligned with IMF FSAP recommendations, strengthening confidential-information-sharing mechanisms. [Source 1]
Probable · 1 source
Q1 2026 Banco de Portugal sanctions report: 37 proceedings opened (19 prudential, 11 illicit-financial-activity, 6 AML/CFT, 1 cash-recirculation), 82 concluded, total fines EUR 545,000 (EUR 46,750 suspended). [Source 1]
Probable · 1 source
Portugal's MiCA transitional (grandfathering) regime for VASPs registered with Banco de Portugal as of 30 December 2024 ended 1 July 2026 under Lei 69/2025, using the full 18-month Art.143(3) maximum; as of the deadline only Bison Bank held a full CASP authorisation. [Source 1]
Probable · 1 source
European Commission opened infringement proceedings against Portugal (and 17 other Member States) in September 2026 for incomplete transposition of 6AMLD Arts 11-13 and 15 (BO-register access) by the 10 July 2026 deadline [Source 1]
Probable · 1 source
PortalCOS goAML became the principal channel for suspicious-transaction reports (COS) from 13 October 2026, ending the six-month dual-submission transition begun 13 April 2026 [Source 1]
Probable · 1 source
Portugal's last FATF mutual evaluation was adopted December 2017; FATF calendar lists a possible onsite period of June 2028 and possible Plenary discussion February 2029, with no evaluation activity this cycle [Source 1]
Probable · 1 source
Law No. 83/2017 (4AMLD transposition) and the RCBE (Law No. 89/2017), with the UIF as FIU [Source 1]
Probable · 1 source
IRN cross-checks between RCBE and commercial register reported increasing; 30-day update window and >25% control threshold enforced [Source 1]
Uncertain · 1 source
Not named in FATF's 19 June 2026 Jurisdictions under Increased Monitoring outcomes statement [Source 1]
Probable · 1 source
PT bound directly by AMLR (Reg 2024/1624) from July 2027 and must separately transpose 6AMLD (Dir 2024/1640) by same date [Source 1]
Probable · 1 source
ESMA interim CASP register (updated 2026-10-07) shows only one Portugal-supervised entity authorised [Source 1]
Probable · 1 source
Named among 18 Member States receiving a European Commission letter of formal notice (25 September 2026) for incomplete transposition of AMLD6 (Directive (EU) 2024/1640) beneficial-ownership register-access provisions by the 10 July 2026 deadline. [Source 1]
Probable · 1 source
Beneficial ownership disclosure threshold set at more than 25%, under Lei n.º 89/2017 [Source 1]
Probable · 1 source
Unidade de Informação Financeira (UIF) is the designated FIU; Banco de Portugal is prudential AML/CTF supervisor for the financial sector, under Lei n.º 83/2017 (as amended) and related Banco de Portugal regulatory instruments (including Aviso/Instrução 1/2022) [Source 1]
Probable · 1 source