Financial Integrity Monitor

Romania RO

Domains (D1–D6)
2
Sources
9
Role actions
8
Horizon <90d
2
Jurisdiction profile
Largely CompliantTier BRisk: StableMixed

Romania's AML/CFT regime rests on Law 129/2019 (transposing EU AMLD4/5), with NOPCML/ONPCSB as FIU, NBR and FSA as prudential AML/CFT supervisors, and ONRC operating the beneficial ownership register.

MoreMONEYVAL's 2023 MER rated regulation/supervision of financial institutions (R.26) non-compliant and beneficial ownership of legal arrangements (R.25) partially compliant, with a March 2026 follow-up noting only partial progress.

Key deficiencies
  • R.26 (regulation and supervision of financial institutions) rated non-compliant in the 2023 MONEYVAL MER
  • NOPCML/FIU chronically understaffed and lacking technical resources to produce operational financial intelligence
  • Beneficial ownership register (ONRC Register of Real Beneficiaries) is fee-gated/legitimate-interest access rather than fully public, with contested data accuracy
  • No overarching national AML/CFT strategy despite numerous sectoral crime strategies
  • NBR AML/CFT supervision described by assessors as ad hoc, lacking a general strategic direction
  • Large cash-based underground economy (~30% of GDP) and shell-company use for ML linked to tax evasion
Recent developments (18m)
  • MONEYVAL published a follow-up report (23 March 2026) finding Romania made progress on some technical compliance deficiencies identified in its MER
  • Romanian anti-corruption prosecutors opened a probe (reported Feb 2026) into a failed EUR 38 million ONRC (Trade Registry/BO register) IT system that blocked 130,000+ business registrations and exposed personal data of 3,000+ individuals
  • DIICOT conducted a sweeping crypto-laundering crackdown (27 March 2025) against an organised crime network that laundered over $14 million in crypto tied to renewable-energy project embezzlement
  • OLAF and EPPO jointly uncovered a EUR 9.5 million EU-funds fraud and money-laundering scheme spanning Romania, Cyprus, Czechia and the UAE (announced 10 April 2025), leading to 12 indictments
  • Romania adopted a new anti-fraud ordinance (published 30 Jan 2026) strengthening EU-funds fraud prevention under the NRRP/PNRR loan agreement
Weekly brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Romania's anti-money-laundering architecture registered a rare positive signal this cycle. MONEYVAL's July 2026 follow-up report, published 6 July 2026, found Romania had improved technical compliance on two of the Financial Action Task Force's 40 Recommendations since the June 2025 review, moving to fully compliant on seven Recommendations, largely compliant on twenty, and partially compliant on the remaining thirteen. The improvement is incremental rather than transformative: Romania remains under MONEYVAL's enhanced follow-up procedure and is expected to report again during 2026-2027, meaning the AML/CFT architecture continues to be assessed as a work in progress rather than a settled strong-compliance baseline. The finding carries High confidence and rests on a Tier-1 Council of Europe/MONEYVAL primary publication, corroborated by the FATF country page, a materially stronger sourcing posture than most of this cycle's other Romania findings. Romania's overall jurisdiction-risk trajectory is assessed as improving with a mixed structural-and-episodic character: the MONEYVAL finding is a structural, institutionally-verified assessment, while other developments this cycle are more episodic in nature.

Other Developments

MiCA transitional window closure. Romania's eighteen-month MiCA transitional registration regime for crypto-asset service providers, established under Government Emergency Ordinance 10/2025, expired on 1 July 2026. From that date, CASPs that had not secured full MiCA authorisation from the Financial Supervisory Authority may no longer lawfully operate for Romanian users. GEO 10/2025 designates the Financial Supervisory Authority as the primary CASP competent authority, with the National Bank of Romania responsible for e-money-token and payment-related crypto services, and the Financial Supervisory Authority additionally imposes a 0.5% monthly supervisory fee on CASP operating income. No formal enforcement action against an unauthorised platform has yet been publicly identified, leaving a near-term supervisory gap between the rule taking effect and any visible enforcement precedent being set; this gap itself raises the probability of a first enforcement precedent surfacing in the coming cycle.

EU AML Package build-out continues. The Anti-Money Laundering Authority's consultation on draft Regulatory Technical Standards for Customer Due Diligence under Article 28(1) of the AML Regulation closed 8 May 2026, one item within a twenty-three-item Level-2/3 package due mostly by 10 July 2026, ahead of the AML Regulation and sixth Anti-Money Laundering Directive's full application on 10 July 2027. Romania is bound directly by the AML Regulation as an EU-27 member, and no Romania-specific transposition text for the sixth Directive has been identified as adopted yet this cycle.

Cross-Monitor Connections

The MiCA transitional-window expiry is a direct architecture-level intersection with the Global Crypto Regulatory Monitor's Romania coverage: the same Government Emergency Ordinance 10/2025 framework, the Financial Supervisory Authority's supervisory-fee structure, and the 1 July 2026 deadline anchor both monitors' findings this cycle, and a first enforcement precedent, if and when it emerges, will be a shared evidentiary event for both. The continued absence of visible enforcement action is itself worth surfacing across both monitors as an open supervisory-credibility question rather than a settled non-issue. Separately, the Anti-Money Laundering Authority's Article 28(1) Customer Due Diligence consultation and the broader 2027 full-application date for the AML Regulation and sixth Directive sit upstream of payments-sector obliged-entity obligations that the World Payments Monitor tracks on its own calendar, though no Romania-specific payments-sector AML finding surfaced on the financial-integrity side this cycle to connect the two more directly.

Outlook

Two horizon events define the coming cycles. The AML Regulation and sixth Anti-Money Laundering Directive reach full application on 10 July 2027, at which point the AML Regulation applies directly and identically across the EU-27 including Romania, removing the national interpretive latitude that obliged entities have previously relied on under the directive-based fourth and fifth Anti-Money Laundering Directive regime. Nearer-term, the absence of a publicly visible MiCA enforcement action against an unauthorised crypto-asset service provider since 1 July 2026 raises the probability of a first enforcement precedent surfacing in the coming cycle; its emergence, or its continued absence, will be the clearest signal of how seriously the Financial Supervisory Authority is prepared to police the newly-closed transitional gap. Romania's continued placement under MONEYVAL's enhanced follow-up procedure means the next scheduled report, expected during 2026-2027, will be the key structural marker of whether this cycle's incremental technical-compliance improvement continues.

weekly_brief_draft · JID RO
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto / Digital Assets / Financial Innovation

Continue reading

Romania's MiCA transitional registration regime for crypto-asset service providers, established under Government Emergency Ordinance 10/2025, closed on 1 July 2026 after an eighteen-month window. From that date, any CASP that had not secured full MiCA authorisation from the Financial Supervisory Authority may no longer lawfully operate for Romanian users. The GEO 10/2025 framework designates the Financial Supervisory Authority as the primary CASP competent authority, with the National Bank of Romania handling e-money-token and payment-related crypto services, and layers on a 0.5% monthly supervisory fee against CASP operating income. No formal enforcement action against an unauthorised platform has yet been publicly identified since the deadline passed, which leaves a near-term supervisory gap between the rule's legal effect and any visible enforcement precedent. This lapse without visible follow-through is itself the material signal: it raises the probability that the coming cycle will produce either a first enforcement precedent against a non-compliant platform, or continued regulatory silence that would itself be worth tracking as an enablement signal.

Outlook

The next cycle's key marker for this domain is whether the Financial Supervisory Authority acts against any CASP still operating without full MiCA authorisation. Absence of action would not be neutral; it would itself constitute an analytically significant enablement signal given the deadline has already passed.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

AML/CTF Regime

Continue reading

MONEYVAL's July 2026 follow-up report is this cycle's standing AML/CTF development for Romania. Published 6 July 2026, the report found Romania had improved technical compliance on two of the Financial Action Task Force's 40 Recommendations since the June 2025 review, moving to fully compliant on seven, largely compliant on twenty, and partially compliant on the remaining thirteen of the 40 Recommendations. The improvement is real but bounded: Romania remains under MONEYVAL's enhanced follow-up procedure, with a further report expected during 2026-2027, so the architecture continues to be treated as a work in progress rather than a settled strong-compliance baseline. The finding is carried at High confidence, resting on a Tier-1 Council of Europe/MONEYVAL primary publication corroborated by the FATF country page, a materially stronger sourcing posture than most other Romania findings this cycle.

Outlook

The next scheduled MONEYVAL report during 2026-2027 will be the key structural marker of whether this cycle's incremental improvement continues or stalls, and whether Romania's enhanced follow-up status is eventually lifted.

Regulatory horizon
In Force2026-Q3 · ±quarter

MiCA CASP transitional-regime expiry (Romania)

As of 1 July 2026, unauthorised CASPs may no longer operate for Romanian users; formal enforcement expected to begin.
Adopted2027-Q3 · ±quarter

AMLR / 6AMLD full application

From 10 July 2027, AMLR applies directly and identically across the EU-27 including Romania without national transposition, while 6AMLD's institutional provisions require national transposition by the same date.
2 dated · 4 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLROHigh

MONEYVAL's July 2026 follow-up upgraded Romania's technical compliance on two FATF Recommendations while enhanced follow-up continues.

The improvement is incremental; MLROs should treat Romania's AML/CFT baseline as still evolving rather than settled, with a further MONEYVAL report expected during 2026-2027.

1 evidence refs
ComplianceAssessed

Romania's MiCA transitional window for CASPs closed 1 July 2026 alongside incremental AML/CFT improvement under MONEYVAL.

Compliance functions overseeing Romanian crypto-asset exposure should confirm counterparty CASPs hold full MiCA authorisation from the Financial Supervisory Authority, given unauthorised platforms may no longer lawfully serve Romanian users.

2 evidence refs
LegalAssessed

No formal MiCA enforcement action against an unauthorised Romanian-facing CASP has yet been publicly identified since the 1 July 2026 deadline.

The absence of a visible enforcement precedent creates near-term legal uncertainty about how strictly the Financial Supervisory Authority will police the newly-closed transitional gap.

1 evidence refs
BoardAssessed

Romania's AML/CFT architecture improved on two FATF Recommendations this cycle but remains under enhanced MONEYVAL follow-up.

Board-level oversight should note the improvement as directional rather than a completed remediation; enhanced follow-up status persists.

1 evidence refs
CTOAssessed

Romania's CASP licensing perimeter under GEO 10/2025 now requires full MiCA authorisation with a 0.5% monthly supervisory fee on operating income.

Technology and platform architecture decisions for Romanian-facing crypto services should account for ASF's supervisory-fee mechanism and the loss of the pre-registration transitional pathway.

1 evidence refs
RiskAssessed

Romania's risk trajectory is assessed as improving overall, with a mixed structural (MONEYVAL) and episodic (MiCA deadline) character this cycle.

Risk functions should track both threads separately: the MONEYVAL trend is a slower-moving structural indicator, while the MiCA enforcement gap is an episodic event that could resolve suddenly.

2 evidence refs
OperationsPossible

No material change this cycle.

No material change for this persona this cycle

AuditPossible

MONEYVAL's follow-up findings provide an external, Tier-1-sourced benchmark against which Romania's AML/CFT control environment can be tested.

Audit functions can use the Recommendation-by-Recommendation compliance ratings as a structured basis for control-testing scope, though the underlying MONEYVAL detail beyond the aggregate rating was not retrieved this cycle.

1 evidence refs
Decision lens
MLRO

MONEYVAL's July 2026 follow-up upgraded Romania's technical compliance on two FATF Recommendations while enhanced follow-up continues.

Compliance

Romania's MiCA transitional window for CASPs closed 1 July 2026 alongside incremental AML/CFT improvement under MONEYVAL.

Legal

No formal MiCA enforcement action against an unauthorised Romanian-facing CASP has yet been publicly identified since the 1 July 2026 deadline.

Board

Romania's AML/CFT architecture improved on two FATF Recommendations this cycle but remains under enhanced MONEYVAL follow-up.

CTO

Romania's CASP licensing perimeter under GEO 10/2025 now requires full MiCA authorisation with a 0.5% monthly supervisory fee on operating income.

Risk

Romania's risk trajectory is assessed as improving overall, with a mixed structural (MONEYVAL) and episodic (MiCA deadline) character this cycle.

Operations

No material change this cycle.

Audit

MONEYVAL's follow-up findings provide an external, Tier-1-sourced benchmark against which Romania's AML/CFT control environment can be tested.

Shared evidence: 2 refs
Typology observations
Exposure: {'total_matched_typologies': 0, 'by_typology': {}, 'top_indicators': [], 'exposure_note': None}
Scenario sketches

AMLA direct-supervision transition and cross-border obliged-entity evasion pathways

As the AML Package moves from purely national supervision toward AMLA direct and indirect supervision of cross-border obliged entities under the AMLA Regulation (Reg (EU) 2024/1620), alongside the directly-applicable AML Regulation (Reg (EU) 2024/1624) and per-state sixth Anti-Money Laundering Directive transposition, the supervisory perimeter for large cross-border groups could shift meaningfully away from purely national authorities. One illustrative possibility is that entities currently calibrated to a single national supervisor's interpretive latitude could face a harder, harmonised standard once AMLR removes that latitude in 2027, prompting a temporary compliance scramble in jurisdictions such as Romania that are still building out Level-2/3 implementation. This is architecture-over-incident framing: an illustrative structural mechanism, not an observed fact or a prediction of how any specific entity will respond.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo RO-specific development this cycle; positive no-material-change finding.
T2 · EU AML Package / AMLAwatchAMLR (10 July 2027 full application), 6AMLD staggered transposition (BO registers by July 2026), and AMLA's RTS submission deadline (10 July 2026) remain on schedule.
T3 · FATF Grey ListimprovingRomania not grey-listed; MONEYVAL's 6 July 2026 follow-up upgraded two FATF Recommendations but kept RO under enhanced follow-up.
T4 · Beneficial-Ownership Register StatusstableRO's ONRC-administered RBR mechanism under Law 129/2019 art. 19 unchanged this cycle; ahead of July 2026 6AMLD BO-register milestone.
T5 · Crypto & Digital-Asset Integritymaterial_changeGEO 10/2025 transposed MiCA; MiCA transitional window for pre-existing ONPCSB-registered entities expired 1 July 2026, affecting an estimated 600,000 RO crypto investors.
T6 · Sanctions Regime Divergenceno_changeNo RO-specific EU/US/UK autonomous-listing divergence signal this cycle; RO follows the EU Council regime directly.
Registers

Enforcement actions

  • DIICOT conducted 66 searches nationwide and detained 15 suspects, including legal representatives of several companies, accused of embezzlement, misuse of company assets and laundering over $14 million in cryptocurrency tied to a renewable-energy project, including false claims of crypto-trading profits. 27 Mar 2025
  • Following on-the-spot checks in Cyprus and Czechia and analysis of seized IT servers, OLAF and EPPO uncovered a EUR 9.5 million fraud and money-laundering scheme involving EU Regional Development Fund resources for an IT platform, with funds diverted through fictitious contracts. 10 Apr 2025
  • EPPO's Romania office indicted 10 individuals and 4 companies for orchestrating a EUR 1.6 million fraud scheme exploiting subsidies meant to help unemployed people gain job skills, using close to 200 false claims via a network of fictitious companies operating 2019-2021. 25 Jan 2025
  • Prosecutors opened an investigation into the ONRC's failed IT platform (launched summer 2024), which blocked over 130,000 business registrations for weeks, exposed personal data of 3,000+ individuals, and was signed off nine months before launch without adequate testing per draft audits. 17 Feb 2026

Sanctions changes

  • The EU's 20th sanctions package (adopted 23 April 2026) added 46 shadow-fleet vessels (total 632 listed), 36 Russian energy-sector designations, a first-ever activation of the EU anti-circumvention tool against a third country, and new tanker-sale/scrapping safeguards. As an EU member and Black Sea port state, Romania directly applies and enforces these measures at Constanta and other national ports. 23 Apr 2026
  • The EU's 19th sanctions package (23 October 2025) introduced sanctions on the developer of the Russian state-linked stablecoin A7A5, its Kyrgyz issuer, and a platform operator, plus a ban on reinsuring shadow-fleet vessels and further shadow-fleet vessel listings (bringing the total to 557 at the time). These crypto and maritime-insurance measures are directly applicable in Romania as an EU member state with a materially large VASP/crypto sector. 23 Oct 2025

Regulatory horizon (register)

  • AMLR (Reg 2024/1624) direct application in Romania
  • 6AMLD transposition deadline for Romania
  • AMLA supervisory perimeter and standards build-out affecting Romania
  • MONEYVAL next enhanced follow-up report on Romania

Active schemes

  • [HIGH] EU-funds fraud layered through Romania-Cyprus-Czechia-UAE network
  • Crypto-ATM cash-out pipeline for embezzled renewable-energy funds
  • Black Sea shadow-fleet transit exposure via Constanta corridor
  • [HIGH] Restricted, low-integrity beneficial ownership register exploitation
Sources
  1. MONEYVAL / FATF
  2. Romania's Parliament / UNODC hosted
  3. OCCRP
  4. European Anti-Fraud Office (OLAF)
  5. Council of the European Union
  6. Global Witness
  7. European e-Justice Portal / Romanian Ministry of Justice submission
  8. OCCRP / Public Record
  9. FATF
Coverage gaps
MONEYVAL's 2023 MER rated Romania non-compliant (NC) on R.26…
MONEYVAL's 2023 MER rated Romania non-compliant (NC) on R.26 (regulation and supervision of financial institutions), the only Recommendation to receive the lowest rating; the March 2026 follow-up confirmed only partial progress on such technical compliance deficiencies.
MONEYVAL assessors found that a lack of technical and human …
MONEYVAL assessors found that a lack of technical and human resources at NOPCML (the FIU) hampers the quantity and quality of financial intelligence it can provide to law enforcement and other partners, compounded by a shortage of financial investigators more broadly.
The ONRC's beneficial-ownership register infrastructure suff…
The ONRC's beneficial-ownership register infrastructure suffered a EUR 38 million IT-platform failure (launched summer 2024) that blocked over 130,000 registrations and exposed personal data of more than 3,000 individuals; auditors found the system was signed off nine months before launch without adequate testing.
MONEYVAL found no overarching AML/CFT strategy exists in Rom…
MONEYVAL found no overarching AML/CFT strategy exists in Romania; while numerous sector-specific strategies address corruption, trafficking and organised crime, information on the level of risk mitigation actually achieved is not comprehensive.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.