D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
Romania's AML/CFT regime rests on Law 129/2019 (transposing EU AMLD4/5), with NOPCML/ONPCSB as FIU, NBR and FSA as prudential AML/CFT supervisors, and ONRC operating the beneficial ownership register.
Sanctions is not yet covered for this jurisdiction in this report.
Beneficial Ownership is not yet covered for this jurisdiction in this report.
Enabler Jurisdictions is not yet covered for this jurisdiction in this report.
Conflict Finance is not yet covered for this jurisdiction in this report.
Romania's MiCA transitional registration regime for crypto-asset service providers, established under Government Emergency Ordinance 10/2025, closed on 1 July 2026 after an eighteen-month window. From that date, any CASP that had not secured full MiCA authorisation from the Financial Supervisory Authority may no longer lawfully operate for Romanian users. The GEO 10/2025 framework designates the Financial Supervisory Authority as the primary CASP competent authority, with the National Bank of Romania handling e-money-token and payment-related crypto services, and layers on a 0.5% monthly supervisory fee against CASP operating income. No formal enforcement action against an unauthorised platform has yet been publicly identified since the deadline passed, which leaves a near-term supervisory gap between the rule's legal effect and any visible enforcement precedent. This lapse without visible follow-through is itself the material signal: it raises the probability that the coming cycle will produce either a first enforcement precedent against a non-compliant platform, or continued regulatory silence that would itself be worth tracking as an enablement signal.
The next cycle's key marker for this domain is whether the Financial Supervisory Authority acts against any CASP still operating without full MiCA authorisation. Absence of action would not be neutral; it would itself constitute an analytically significant enablement signal given the deadline has already passed.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
MONEYVAL's July 2026 follow-up report is this cycle's standing AML/CTF development for Romania. Published 6 July 2026, the report found Romania had improved technical compliance on two of the Financial Action Task Force's 40 Recommendations since the June 2025 review, moving to fully compliant on seven, largely compliant on twenty, and partially compliant on the remaining thirteen of the 40 Recommendations. The improvement is real but bounded: Romania remains under MONEYVAL's enhanced follow-up procedure, with a further report expected during 2026-2027, so the architecture continues to be treated as a work in progress rather than a settled strong-compliance baseline. The finding is carried at High confidence, resting on a Tier-1 Council of Europe/MONEYVAL primary publication corroborated by the FATF country page, a materially stronger sourcing posture than most other Romania findings this cycle.
The next scheduled MONEYVAL report during 2026-2027 will be the key structural marker of whether this cycle's incremental improvement continues or stalls, and whether Romania's enhanced follow-up status is eventually lifted.
The improvement is incremental; MLROs should treat Romania's AML/CFT baseline as still evolving rather than settled, with a further MONEYVAL report expected during 2026-2027.
Compliance functions overseeing Romanian crypto-asset exposure should confirm counterparty CASPs hold full MiCA authorisation from the Financial Supervisory Authority, given unauthorised platforms may no longer lawfully serve Romanian users.
The absence of a visible enforcement precedent creates near-term legal uncertainty about how strictly the Financial Supervisory Authority will police the newly-closed transitional gap.
Board-level oversight should note the improvement as directional rather than a completed remediation; enhanced follow-up status persists.
Technology and platform architecture decisions for Romanian-facing crypto services should account for ASF's supervisory-fee mechanism and the loss of the pre-registration transitional pathway.
Risk functions should track both threads separately: the MONEYVAL trend is a slower-moving structural indicator, while the MiCA enforcement gap is an episodic event that could resolve suddenly.
No material change for this persona this cycle
Audit functions can use the Recommendation-by-Recommendation compliance ratings as a structured basis for control-testing scope, though the underlying MONEYVAL detail beyond the aggregate rating was not retrieved this cycle.
MONEYVAL's July 2026 follow-up upgraded Romania's technical compliance on two FATF Recommendations while enhanced follow-up continues.
Romania's MiCA transitional window for CASPs closed 1 July 2026 alongside incremental AML/CFT improvement under MONEYVAL.
No formal MiCA enforcement action against an unauthorised Romanian-facing CASP has yet been publicly identified since the 1 July 2026 deadline.
Romania's AML/CFT architecture improved on two FATF Recommendations this cycle but remains under enhanced MONEYVAL follow-up.
Romania's CASP licensing perimeter under GEO 10/2025 now requires full MiCA authorisation with a 0.5% monthly supervisory fee on operating income.
Romania's risk trajectory is assessed as improving overall, with a mixed structural (MONEYVAL) and episodic (MiCA deadline) character this cycle.
No material change this cycle.
MONEYVAL's follow-up findings provide an external, Tier-1-sourced benchmark against which Romania's AML/CFT control environment can be tested.
As the AML Package moves from purely national supervision toward AMLA direct and indirect supervision of cross-border obliged entities under the AMLA Regulation (Reg (EU) 2024/1620), alongside the directly-applicable AML Regulation (Reg (EU) 2024/1624) and per-state sixth Anti-Money Laundering Directive transposition, the supervisory perimeter for large cross-border groups could shift meaningfully away from purely national authorities. One illustrative possibility is that entities currently calibrated to a single national supervisor's interpretive latitude could face a harder, harmonised standard once AMLR removes that latitude in 2027, prompting a temporary compliance scramble in jurisdictions such as Romania that are still building out Level-2/3 implementation. This is architecture-over-incident framing: an illustrative structural mechanism, not an observed fact or a prediction of how any specific entity will respond.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | no_change | No RO-specific development this cycle; positive no-material-change finding. |
| T2 · EU AML Package / AMLA | watch | AMLR (10 July 2027 full application), 6AMLD staggered transposition (BO registers by July 2026), and AMLA's RTS submission deadline (10 July 2026) remain on schedule. |
| T3 · FATF Grey List | improving | Romania not grey-listed; MONEYVAL's 6 July 2026 follow-up upgraded two FATF Recommendations but kept RO under enhanced follow-up. |
| T4 · Beneficial-Ownership Register Status | stable | RO's ONRC-administered RBR mechanism under Law 129/2019 art. 19 unchanged this cycle; ahead of July 2026 6AMLD BO-register milestone. |
| T5 · Crypto & Digital-Asset Integrity | material_change | GEO 10/2025 transposed MiCA; MiCA transitional window for pre-existing ONPCSB-registered entities expired 1 July 2026, affecting an estimated 600,000 RO crypto investors. |
| T6 · Sanctions Regime Divergence | no_change | No RO-specific EU/US/UK autonomous-listing divergence signal this cycle; RO follows the EU Council regime directly. |