Financial Integrity Monitor
Sign in

Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Romania RO

Domains covered
8 of 8
Sources
163
Role actions
8
Horizon <90d
0
Jurisdiction profile
FATF status: Largely Compliant Tier: B Risk direction: Stable Enablement vs enforcement: Mixed

Romania's AML/CFT regime rests on Law 129/2019 (transposing EU AMLD4/5), with NOPCML/ONPCSB as FIU, NBR and FSA as prudential AML/CFT supervisors, and ONRC operating the beneficial ownership register.

MoreMONEYVAL's 2023 MER rated regulation/supervision of financial institutions (R.26) non-compliant and beneficial ownership of legal arrangements (R.25) partially compliant, with a March 2026 follow-up noting only partial progress.

Key deficiencies
  • R.26 (regulation and supervision of financial institutions) rated non-compliant in the 2023 MONEYVAL MER
  • NOPCML/FIU chronically understaffed and lacking technical resources to produce operational financial intelligence
  • Beneficial ownership register (ONRC Register of Real Beneficiaries) is fee-gated/legitimate-interest access rather than fully public, with contested data accuracy
  • No overarching national AML/CFT strategy despite numerous sectoral crime strategies
  • NBR AML/CFT supervision described by assessors as ad hoc, lacking a general strategic direction
  • Large cash-based underground economy (~30% of GDP) and shell-company use for ML linked to tax evasion
Recent developments (18m)
  • MONEYVAL published a follow-up report (23 March 2026) finding Romania made progress on some technical compliance deficiencies identified in its MER
  • Romanian anti-corruption prosecutors opened a probe (reported Feb 2026) into a failed EUR 38 million ONRC (Trade Registry/BO register) IT system that blocked 130,000+ business registrations and exposed personal data of 3,000+ individuals
  • DIICOT conducted a sweeping crypto-laundering crackdown (27 March 2025) against an organised crime network that laundered over $14 million in crypto tied to renewable-energy project embezzlement
  • OLAF and EPPO jointly uncovered a EUR 9.5 million EU-funds fraud and money-laundering scheme spanning Romania, Cyprus, Czechia and the UAE (announced 10 April 2025), leading to 12 indictments
  • Romania adopted a new anti-fraud ordinance (published 30 Jan 2026) strengthening EU-funds fraud prevention under the NRRP/PNRR loan agreement

Law made at European Economic Area level that applies in Romania is covered once, on the European Economic Area page. This page covers Romania’s own layer: implementation, national authorities, national options and local enforcement.

Brief

Lead signal

Lead Signal

Romania's standing in the Council of Europe mutual-evaluation cycle moved this period on two tracks at once. MONEYVAL's second enhanced follow-up report records a confirmed remediation of a FATF Recommendation 24 timeliness deficiency: joint-stock companies are now required to update changes in beneficial ownership within 15 days of a change occurring, closing a gap in Romania's corporate-transparency framework that the original mutual evaluation had flagged. This is a narrow but structural improvement, not an incident; it changes the architecture of how beneficial-ownership data is kept current rather than resolving a single enforcement episode.

Read full brief

Lead Signal

Romania's standing in the Council of Europe mutual-evaluation cycle moved this period on two tracks at once. MONEYVAL's second enhanced follow-up report records a confirmed remediation of a FATF Recommendation 24 timeliness deficiency: joint-stock companies are now required to update changes in beneficial ownership within 15 days of a change occurring, closing a gap in Romania's corporate-transparency framework that the original mutual evaluation had flagged. This is a narrow but structural improvement, not an incident; it changes the architecture of how beneficial-ownership data is kept current rather than resolving a single enforcement episode.

Alongside that improvement, Romania's financial intelligence unit, the Oficiul National de Prevenire si Combatere a Spalarii Banilor, circulated EU Council acts extending Russia-related restrictive measures, including designations against financial entities in third countries said to be offering crypto services that facilitate sanctions evasion, together with a transaction ban affecting a larger set of Russian banks. This is domestic implementation of an EU-level act rather than an autonomous Romanian designation, consistent with the structural fact that Romania's sanctions regime refers only to the EU and UN lists and maintains no independent national list.

Other Developments

Beneficial-ownership timeliness now codified. The 15-day update obligation for joint-stock companies, recorded by MONEYVAL as remediation of the Recommendation 24 deficiency, is probable-confidence and corroborated by a secondary account describing Romania's improved technical compliance with two FATF recommendations. The primary instrument text was not independently paginated this cycle, so the obligation is reported at the confidence the underlying evaluation report supports.

Enhanced follow-up status persists. Romania remains under MONEYVAL's second enhanced follow-up procedure. The beneficial-ownership remediation addresses one deficiency within that procedure; virtual-asset and VASP-related technical-compliance gaps identified in the original mutual evaluation remain open and unresolved, meaning the follow-up procedure itself has not concluded.

Sanctions implementation continues on the EU track. The ONPCSB circular implementing the Russia-related designations is consistent with Romania's established posture of direct, without-amendment application of EU Council acts under its domestic sanctions-implementing legislation. The specific count of newly designated third-country financial entities tied to crypto-facilitated evasion, and the exact date that listing took internal effect, were not independently confirmed from the retrieved excerpt, and that gap is recorded rather than filled by inference.

Cross-Monitor Connections

The crypto-services dimension of the sanctions-evasion designations connects directly to work tracking digital-asset architecture risk: entities in third countries using crypto rails to intermediate sanctioned counterparties are a cross-border payments-and-illicit-finance pattern that correspondent-banking and virtual-asset monitoring should both be watching for exposure through Romanian-linked financial entities. The transaction ban on a larger set of Russian banks also bears on correspondent-banking de-risking dynamics more broadly, since banks implementing the ban must assess indirect exposure through intermediary relationships rather than only direct counterparty screening. Separately, the beneficial-ownership timeliness remediation is the kind of structural transparency improvement that conflict-finance and extractive-industry monitoring typically draws on when assessing whether corporate vehicles registered in a jurisdiction can be traced to ultimate owners within a usable window.

Outlook

The near-term question for Romania's AML/CFT architecture is whether the unresolved virtual-asset and VASP technical-compliance deficiencies receive comparable remediation before the next MONEYVAL follow-up checkpoint. The beneficial-ownership fix demonstrates that Romania can close a discrete technical-compliance gap once identified; whether the same capacity extends to the more structurally complex virtual-asset supervision gap is the open question carried into the next cycle. On sanctions, Romania's posture of pure EU/UN list implementation with no autonomous designation capacity is a stable structural feature, not a transitional one, and should be read as durable rather than as a gap awaiting legislative attention.

Earlier periodic briefs (7)
4 Nov 2026 · fim-2026-11-01

Lead Signal

Romania's standing in the Council of Europe mutual-evaluation cycle moved this period on two tracks at once. MONEYVAL's second enhanced follow-up report records a confirmed remediation of a FATF Recommendation 24 timeliness deficiency: joint-stock companies are now required to update changes in beneficial ownership within 15 days of a change occurring, closing a gap in Romania's corporate-transparency framework that the original mutual evaluation had flagged. This is a narrow but structural improvement, not an incident; it changes the architecture of how beneficial-ownership data is kept current rather than resolving a single enforcement episode.

Alongside that improvement, Romania's financial intelligence unit, the Oficiul National de Prevenire si Combatere a Spalarii Banilor, circulated EU Council acts extending Russia-related restrictive measures, including designations against financial entities in third countries said to be offering crypto services that facilitate sanctions evasion, together with a transaction ban affecting a larger set of Russian banks. This is domestic implementation of an EU-level act rather than an autonomous Romanian designation, consistent with the structural fact that Romania's sanctions regime refers only to the EU and UN lists and maintains no independent national list.

Other Developments

Beneficial-ownership timeliness now codified. The 15-day update obligation for joint-stock companies, recorded by MONEYVAL as remediation of the Recommendation 24 deficiency, is probable-confidence and corroborated by a secondary account describing Romania's improved technical compliance with two FATF recommendations. The primary instrument text was not independently paginated, so the obligation is reported at the confidence the underlying evaluation report supports.

Enhanced follow-up status persists. Romania remains under MONEYVAL's second enhanced follow-up procedure. The beneficial-ownership remediation addresses one deficiency within that procedure; virtual-asset and VASP-related technical-compliance gaps identified in the original mutual evaluation remain open and unresolved, meaning the follow-up procedure itself has not concluded.

Sanctions implementation continues on the EU track. The ONPCSB circular implementing the Russia-related designations is consistent with Romania's established posture of direct, without-amendment application of EU Council acts under its domestic sanctions-implementing legislation. The specific count of newly designated third-country financial entities tied to crypto-facilitated evasion, and the exact date that listing took internal effect, were not independently confirmed from the retrieved excerpt, and that gap is recorded rather than filled by inference.

Cross-Monitor Connections

The crypto-services dimension of the sanctions-evasion designations connects directly to work tracking digital-asset architecture risk: entities in third countries using crypto rails to intermediate sanctioned counterparties are a cross-border payments-and-illicit-finance pattern that correspondent-banking and virtual-asset monitoring should both be watching for exposure through Romanian-linked financial entities. The transaction ban on a larger set of Russian banks also bears on correspondent-banking de-risking dynamics more broadly, since banks implementing the ban must assess indirect exposure through intermediary relationships rather than only direct counterparty screening. Separately, the beneficial-ownership timeliness remediation is the kind of structural transparency improvement that conflict-finance and extractive-industry monitoring typically draws on when assessing whether corporate vehicles registered in a jurisdiction can be traced to ultimate owners within a usable window.

Outlook

The near-term question for Romania's AML/CFT architecture is whether the unresolved virtual-asset and VASP technical-compliance deficiencies receive comparable remediation before the next MONEYVAL follow-up checkpoint. The beneficial-ownership fix demonstrates that Romania can close a discrete technical-compliance gap once identified; whether the same capacity extends to the more structurally complex virtual-asset supervision gap is the open question carried. On sanctions, Romania's posture of pure EU/UN list implementation with no autonomous designation capacity is a stable structural feature, not a transitional one, and should be read as durable rather than as a gap awaiting legislative attention.

3 Nov 2026 · fim-2026-11-03

Lead Signal

Romania enters this cycle with two structural developments running in parallel, both traceable to the same underlying review process. The Council of Europe body that monitors anti-money-laundering performance across member states has recorded that joint stock companies registered in Romania are now required to update changes in beneficial ownership within 15 days of a change occurring, a remediation step tied to the Financial Action Task Force recommendation on beneficial-ownership transparency. At the same time, Romania continues to sit under the second enhanced follow-up procedure of that same monitoring body, meaning the country remains on a heightened reporting track even as individual technical-compliance gaps close. The pairing matters more than either fact alone: a jurisdiction can close a specific gap, such as the 15-day update rule, while the broader architecture problem that put it under enhanced follow-up in the first place persists. The second element of this cycle is the domestic transmission of European Union sanctions instruments, including a batch of designations against third-country financial entities said to be offering crypto-asset services that facilitate evasion of restrictive measures connected to Russia, alongside a transaction ban reaching a larger set of Russian banks. Romania relayed these measures through its financial intelligence unit using the standing national implementing law for international sanctions, rather than through any Romania-specific sanctions list, because Romania does not maintain an autonomous national designation mechanism and refers only to European Union and United Nations lists.

Taken together, these two threads describe a jurisdiction whose sanctions and ownership-transparency architecture is reactive to supranational instruments rather than self-generating. The beneficial-ownership obligation originates in a European-level recommendation framework rather than a domestic policy initiative, and the sanctions transmission is a pass-through of European Union Council decisions rather than an independent listing judgment. That dependency is itself the structural story: Romania's financial integrity posture is substantially a function of how faithfully and how quickly it transmits obligations set elsewhere, not of autonomous rule-making.

Other Developments

The beneficial-ownership update window narrows. The requirement that joint stock companies notify changes in beneficial ownership within 15 days of a change occurring was recorded as part of the remediation record against the Financial Action Task Force's recommendation on beneficial ownership. The obligation sits in the country's anti-money-laundering and countering-the-financing-of-terrorism law, applies across obliged sectors, and represents a tightening of what had previously been a looser notification standard.

Sanctions transmission channel confirmed rather than replaced. The financial intelligence unit's circulation of the Council designations, including the crypto-services evasion batch, used the existing international sanctions implementing framework. No new domestic legal instrument was created to carry this transmission; the architecture that already existed absorbed the new designations without amendment, which is itself informative about how much of the country's sanctions capacity is really European Union capacity routed through a domestic conduit.

Enhanced follow-up status persists alongside incremental technical gains. The improvement on the beneficial-ownership recommendation is real but partial: Romania remains under the heightened monitoring track tied to earlier identified deficiencies, including ones connected to virtual-asset service provider oversight, that have not yet been resolved. A reader should not read the single recommendation improvement as closure of the broader review.

Cross-Monitor Connections

The crypto-services sanctions-evasion designations relayed connect directly to digital-asset and financial-innovation monitoring elsewhere in the fleet: the same entities said to be offering crypto services to third-country counterparts facilitating evasion of Russia-related restrictive measures are a crypto-infrastructure story as much as a sanctions story, and the fact that Romania's domestic transmission mechanism does not distinguish between a conventional banking designation and a crypto-services designation is itself a signal about how undifferentiated the country's sanctions-screening architecture currently is across asset types. The beneficial-ownership tightening also has a bearing on broader conflict-finance and extractive-industry monitoring patterns elsewhere, insofar as faster beneficial-ownership disclosure timelines reduce (without eliminating) the window during which a change in controlling interest in a joint stock company can go unreported to the register.

Outlook

The near-term picture for Romania is one of incremental technical remediation proceeding inside a still-elevated supervisory posture. The 15-day beneficial-ownership update obligation is now in force and should be read as one completed line item within a longer review rather than as evidence the underlying follow-up status is near resolution. On the sanctions side, Romania's posture will continue to track the pace and content of European Union Council decisions rather than diverge from them, given the absence of any autonomous national list; any further batches of third-country or crypto-services designations at the European level should be expected to flow through the same existing implementing framework without requiring new domestic legislation. Readers should treat the enhanced follow-up status as the more durable fact here and the recommendation-specific improvement as one data point within it.

25 Oct 2026 · fim-2026-10-25

Lead Signal

Romania has now passed three months beyond the date on which its transitional arrangement for crypto-asset service providers under the Markets in Crypto-Assets Regulation lapsed, and it still has no national authority empowered to receive or process authorisation applications under that regime. Romania chose the maximum eighteen-month transitional window available under Article 143(3), meaning firms registered under prior national law could keep operating without a Markets in Crypto-Assets authorisation only until 1 July 2026. That date has passed. The European Securities and Markets Authority's own interim register, refreshed on 20 October 2026, still records Romania's supervisor field as not yet designated, with zero home-registered entities. A senior official at the Financial Supervisory Authority publicly confirmed in July 2026 that no Romanian authority is currently designated as competent to receive these applications. The structural fact beneath the delay is a draft Emergency Government Ordinance that would designate the Financial Supervisory Authority for crypto-asset service providers and asset-referenced tokens, and the National Bank of Romania for e-money tokens; that ordinance received only a first government reading on 2 April 2026 and has not advanced to adoption.

This is best read as a capacity gap rather than a single missed deadline. Six months separate the ordinance's first reading and the transitional deadline's lapse, and a further three-plus months have elapsed since, with the supervisory designation still outstanding. Firms that relied on pre-existing Romanian registration now sit in a jurisdiction where the European Union's own direct-effect regulation applies in full, but no national body stands ready to authorise, supervise, or sanction under it.

Other Developments

Romania's standing anti-money-laundering and counter-terrorist-financing posture remains unchanged. The regime continues to rest on Law No. 129/2019, as amended by Emergency Government Ordinance 10/2025, with the National Office for Prevention and Control of Money Laundering as the receiving financial intelligence unit for suspicious transaction reports, including from crypto-asset service providers brought within scope by the 2025 amendment. The Committee of Experts on the Evaluation of Anti-Money Laundering Measures and the Financing of Terrorism, in its second enhanced follow-up report adopted 26-29 May 2026, kept Romania in enhanced follow-up under its fifth-round mutual evaluation, finding the country compliant with seven recommendations, largely compliant with twenty, and partially compliant with thirteen. No Romania-specific delta against this standing position was identified.

Cross-Monitor Connections

The absence of an operative crypto-asset supervisor is a finding with direct read-across to payments-sector market access and to technology-platform exposure, since any firm offering crypto-asset services into Romania sits in a jurisdiction where the licensing route is formally open under European Union law but practically unavailable at the national level. This also bears on the standing anti-money-laundering architecture: obliged-entity status for crypto-asset service providers already attaches under Romanian law via the 2025 amendment to Law No. 129/2019, meaning firms are subject to financial-crime obligations through the national anti-money-laundering authority even while no licensing authority exists to authorise them in the first place. The two tracks, supervisory authorisation and financial-crime obligation, are proceeding on materially different timelines within the same jurisdiction.

Outlook

The draft implementing ordinance is the only visible path to resolution, and it carries a wide uncertainty band, with an estimated impact date as late as the first quarter of 2027. Until it is adopted, the practical effect is that Romania applies the European Union's crypto-asset rulebook directly while withholding the one function, national authorisation, that is supposed to make that rulebook operable for firms. Whether the ordinance advances before the end of 2026 is the development to watch; nothing in the current record points to acceleration, and the gap between the law's requirements and the state's administrative capacity to apply them stands as a structural, not episodic, feature of the jurisdiction as presently evidenced.

18 Oct 2026 · fim-2026-10-18

Lead Signal

Romania enters this cycle carrying two concurrent, structurally distinct EU-level compliance pressure points that both touch the integrity of its beneficial-ownership and digital-asset architecture. First, the European Commission opened an infringement procedure on 28 September 2026 against Romania and seventeen other Member States over failure to notify transposing measures for the sixth Anti-Money Laundering Directive provisions on beneficial-ownership access. Second, Romania remains, alongside Hungary and Poland, one of only three jurisdictions in the European Economic Area with zero MiCA-authorised crypto-asset service providers more than three months after the 1 July 2026 transitional-period deadline, because the Autoritatea de Supraveghere Financiara has not yet been formally designated as competent authority under the pending implementing Government Emergency Ordinance.

Taken together, these are not isolated administrative delays. Both items describe the same underlying pattern: a transposition and implementation gap between an EU-level obligation taking direct or quasi-direct effect and the domestic machinery needed to operationalise it. The beneficial-ownership access question concerns an existing public register whose practical utility for verification purposes has already been narrowed since May 2025 by a legitimate-interest gate; the MiCA question concerns a licensing regime that cannot process a single application because the enabling national instrument has stalled since a first parliamentary reading on 2 April 2026.

Other Developments

MONEYVAL follow-up shows incremental compliance gains. Romania's second enhanced follow-up report, adopted at MONEYVAL's 71st Plenary in late May 2026 and published on 6 July 2026, recorded improved technical compliance on targeted financial sanctions since the first follow-up report, while Romania remains under enhanced follow-up overall pending further remediation across the wider FATF Recommendation set.

The crypto-asset AML perimeter has been extended, even as licensing stalls. Government Emergency Ordinance 10/2025, effective 13 March 2025, amended AML Law 129/2019 to replace the term virtual currency with crypto-asset and to bring crypto-asset service providers within the AML-obliged-entity perimeter on the same footing as financial institutions, while also transposing the EU Funds Transfer Regulation travel-rule requirements. This means the AML-obliged status of crypto firms operating in Romania is more settled than their MiCA licensing status, which remains frozen.

Beneficial-ownership register access remains narrowly gated. The ONRC-administered Registrul Beneficiarilor Reali has restricted public access since May 2025 to parties able to demonstrate a legitimate interest, with no change reported this cycle to the underlying 25-percent-plus-one-share ownership threshold used to identify a beneficial owner.

Cross-Monitor Connections

The MiCA authorisation gap identified here connects directly to parallel World Payments Monitor coverage of Romania's payment-services licensing transition, where the same underlying absence of a designated competent authority is read through a market-access and commercial lens rather than a financial-crime lens. The beneficial-ownership infringement procedure likewise intersects with Crypto Monitor findings on Romania's cross-border passporting blockage, since a jurisdiction that cannot authorise domestic crypto-asset service providers also cannot serve as an EU passporting home state, compounding the integrity-architecture gap with a market-structure one.

Outlook

The implementing Government Emergency Ordinance for MiCA remains in draft as at mid-October 2026, with the regulatory horizon pointing to possible adoption in the first quarter of 2027, though this estimate carries a half-year uncertainty band and should be read as scheduled rather than assured. Until ASF receives formal competent-authority designation, Romania's crypto-asset sector will continue to sit in a licensing vacuum even as its AML-obliged status under GEO 10/2025 remains operative. Similarly, the beneficial-ownership infringement procedure opened in September 2026 is at an early stage, and its trajectory toward a reasoned opinion or further escalation has not yet been established from the material reaching this cycle.

11 Oct 2026 · fim-2026-10-11

Lead Signal

Romania enters October 2026 carrying simultaneous EU infringement exposure on two distinct fronts of its financial-integrity architecture. On 25 September 2026 the European Commission issued a letter of formal notice to a group of 18 member states, Romania among them, over incomplete transposition of the sixth EU Anti-Money Laundering Directive (Directive (EU) 2024/1640), specifically provisions in the Articles 11-15 lineage governing beneficial-ownership register access. The transposition deadline had passed on 10 July 2026, and Romania now has a two-month window to respond before the Commission could escalate to a reasoned opinion. Separately, and on an unrelated instrument, Romania's Financial Supervisory Authority (ASF) remains undesignated as competent authority under the Markets in Crypto-Assets Regulation, more than three months past the transitional deadline that elapsed on 1 July 2026, meaning the jurisdiction has no operative domestic route for authorising crypto-asset service providers. The two exposures sit on different legal instruments and different enforcement clocks, but together they describe a single structural pattern: Romania's domestic implementing capacity has not kept pace with EU-level deadlines across more than one financial-integrity instrument at once.

This capacity deficit is not a comment on enforcement intent. A draft emergency ordinance addressing the MiCA designation gap was reviewed by the Romanian government in first reading on 2 April 2026, and the beneficial-ownership transposition gap is procedural rather than substantive refusal. Read together, though, the two infringement tracks are evidence of a jurisdiction where the legislative and regulatory machinery for converting EU financial-integrity instruments into operative domestic law is under sustained strain.

Other Developments

MONEYVAL's 2nd Enhanced Follow-up Report keeps Romania under enhanced monitoring. The Council of Europe's MONEYVAL mechanism adopted its 2nd Enhanced Follow-up Report on Romania on 29 May 2026 (published 6 July 2026), re-rating two FATF Recommendations relating to targeted financial sanctions for terrorism and proliferation financing as largely compliant. Romania's overall standing across the 40 FATF Recommendations is now 7 rated compliant, 20 largely compliant, and 13 partially compliant, with none rated non-compliant. Romania remains in enhanced follow-up and will continue reporting back to MONEYVAL, meaning the jurisdiction's AML/CTF technical-compliance record, while showing incremental improvement on the sanctions-implementation recommendations, has not yet reached a point where enhanced monitoring is lifted.

ONPCSB's national risk assessment update identifies fraud as the second-ranked predicate offence. Romania's Financial Intelligence Unit, ONPCSB, published an update to its national money-laundering and terrorist-financing risk assessment stating that fraud-related laundering indicators accounted for roughly 14.56% of disseminations to the Prosecutor's Office attached to the High Court of Cassation and Justice (PICCJ), ranking fraud second among predicate-offence categories generating laundered proceeds. This is a baseline risk-typology finding rather than a new development, but it anchors the jurisdiction's own regulator's view of where illicit-proceeds generation concentrates domestically.

EU Council sanctions designations disseminated domestically. ONPCSB disseminated nationally the EU Council's Decision (CFSP) 2026/2164 of 24 September 2026, which added 10 individuals and 17 entities to the list of persons, entities and bodies subject to restrictive measures under the EU's Russia-related human-rights and destabilising-activities regime. No Romania-specific sanctions-evasion case tied to these designations has been identified in the current research window; this is routine domestic implementation of an EU-level listing rather than an independent Romanian finding.

Cross-Monitor Connections

The MiCA designation gap sits at the direct intersection of financial-integrity and crypto/digital-asset monitoring: ASF's inability to authorise crypto-asset service providers domestically is simultaneously a financial-integrity capacity question (can the AML/CTF-relevant gatekeeping function operate at all) and a market-structure question for the crypto monitor (can firms obtain Romanian authorisation). The beneficial-ownership transposition gap under the sixth AML Directive is a candidate for a broader read against the EU AML Package's structural shift of supervision toward the Anti-Money Laundering Authority, insofar as incomplete national transposition of register-access provisions may bear on how AMLA's hybrid supervisory perimeter interacts with Member States still completing their own implementing legislation; however, no AMLA-specific finding for Romania has fed this cycle's input, so that connection is noted as a structural possibility rather than an observed fact.

Outlook

Romania's two-month response window on the 6AMLD infringement letter runs from late September 2026, placing the question of whether a reasoned opinion follows on a horizon in Q4 2026. Whether the draft MiCA implementing ordinance, reviewed in first reading on 2 April 2026, is adopted before year end will determine whether the CASP-authorisation gap persists into 2027 or is resolved. Both tracks are structural rather than episodic: they describe implementation capacity rather than a single enforcement incident, and their resolution will depend on domestic legislative throughput rather than on any further EU-level signal.

29 Sep 2026 · fim-2026-09-28

Lead Signal

Romania this cycle shows two domains moving in opposite directions. On the AML/CFT architecture side, MONEYVAL's July 2026 follow-up report finds Romania compliant with 7 of the 40 FATF Recommendations, largely compliant with 20, and partially compliant with 13, with improvement recorded specifically on Recommendations 6 and 7 covering targeted financial sanctions. Romania nonetheless remains in MONEYVAL's enhanced follow-up process, meaning the incremental improvement has not been sufficient to exit heightened monitoring. Separately, on the digital-asset side, Romania's national MiCA transitional regime closed decisively: the 18-month grandfathering window under GEO 10/2025 for pre-MiCA crypto-asset service providers expired on 1 July 2026, and the Financial Supervisory Authority (ASF) has begun issuing its first coercive sanctioning decisions against digital-asset entities for periodic-reporting failures.

Read together, these signals describe a jurisdiction whose paper compliance architecture is improving gradually while its supervisory posture toward a specific sector, digital assets, has shifted abruptly from permissive to active. The two developments are not contradictory; they describe different clocks. The FATF-recommendation compliance trajectory moves on a multi-year mutual-evaluation cycle, while the MiCA transition was a fixed statutory deadline that simply arrived.

Other Developments

Sanctions screening mechanism unchanged. Romania's exposure to the EU list of high-risk third countries, the 26-country list in force from 29 January 2026, continues to apply via the standard AMLR mechanism, with no Romania-specific autonomous-listing divergence identified this cycle. This is a structural continuity finding rather than a new development, and it confirms Romania has not adopted any national variation from the EU-wide sanctions-screening baseline.

FATF grey-list status confirmed absent. Romania is not on the FATF grey list and continues to be assessed instead through the MONEYVAL fifth-round mutual evaluation process, a status distinct from, and independently confirmed alongside, the enhanced follow-up finding above. This T1-sourced confirmation should not be conflated with the enhanced follow-up status: grey-listing and enhanced follow-up are separate mechanisms, and Romania's exposure runs only through the latter.

Cross-Monitor Connections

The MiCA transitional closure and ASF's new enforcement posture connect directly to the crypto monitor's licensing coverage of the same underlying event, and to the world-payments monitor's structural coverage of BNR's role as banking and payments supervisor outside the MiCA-authorisation perimeter. The enhanced-follow-up AML/CFT finding is architecture-level and has no direct payment-corridor or crypto-licensing analogue this cycle, but it forms part of the same national supervisory backdrop against which both the crypto and payments monitors' Romania coverage should be read.

Outlook

The MiCA transition closure is recent enough that the scale and substance of ASF's coercive sanctioning practice remain unestablished; whether this becomes a sustained enforcement programme or a narrow set of reporting-failure actions will be the key data point to watch. On the AML/CFT side, the improvement on Recommendations 6 and 7 is a positive but partial signal; Romania's continued presence in enhanced follow-up means the compliance architecture is still under active MONEYVAL scrutiny, and the next follow-up report will be the natural checkpoint for whether the partial-compliance items narrow further.

5 Sep 2026 · fim-2026-08-21

Lead Signal

Romania's anti-money-laundering architecture registered a rare positive signal this cycle. MONEYVAL's July 2026 follow-up report, published 6 July 2026, found Romania had improved technical compliance on two of the Financial Action Task Force's 40 Recommendations since the June 2025 review, moving to fully compliant on seven Recommendations, largely compliant on twenty, and partially compliant on the remaining thirteen. The improvement is incremental rather than transformative: Romania remains under MONEYVAL's enhanced follow-up procedure and is expected to report again during 2026-2027, meaning the AML/CFT architecture continues to be assessed as a work in progress rather than a settled strong-compliance baseline. The finding carries High confidence and rests on a Tier-1 Council of Europe/MONEYVAL primary publication, corroborated by the FATF country page, a materially stronger sourcing posture than most of this cycle's other Romania findings. Romania's overall jurisdiction-risk trajectory is assessed as improving with a mixed structural-and-episodic character: the MONEYVAL finding is a structural, institutionally-verified assessment, while other developments this cycle are more episodic in nature.

Other Developments

MiCA transitional window closure. Romania's eighteen-month MiCA transitional registration regime for crypto-asset service providers, established under Government Emergency Ordinance 10/2025, expired on 1 July 2026. From that date, CASPs that had not secured full MiCA authorisation from the Financial Supervisory Authority may no longer lawfully operate for Romanian users. GEO 10/2025 designates the Financial Supervisory Authority as the primary CASP competent authority, with the National Bank of Romania responsible for e-money-token and payment-related crypto services, and the Financial Supervisory Authority additionally imposes a 0.5% monthly supervisory fee on CASP operating income. No formal enforcement action against an unauthorised platform has yet been publicly identified, leaving a near-term supervisory gap between the rule taking effect and any visible enforcement precedent being set; this gap itself raises the probability of a first enforcement precedent surfacing in the coming cycle.

EU AML Package build-out continues. The Anti-Money Laundering Authority's consultation on draft Regulatory Technical Standards for Customer Due Diligence under Article 28(1) of the AML Regulation closed 8 May 2026, one item within a twenty-three-item Level-2/3 package due mostly by 10 July 2026, ahead of the AML Regulation and sixth Anti-Money Laundering Directive's full application on 10 July 2027. Romania is bound directly by the AML Regulation as an EU-27 member, and no Romania-specific transposition text for the sixth Directive has been identified as adopted yet this cycle.

Cross-Monitor Connections

The MiCA transitional-window expiry is a direct architecture-level intersection with the Global Crypto Regulatory Monitor's Romania coverage: the same Government Emergency Ordinance 10/2025 framework, the Financial Supervisory Authority's supervisory-fee structure, and the 1 July 2026 deadline anchor both monitors' findings this cycle, and a first enforcement precedent, if and when it emerges, will be a shared evidentiary event for both. The continued absence of visible enforcement action is itself worth surfacing across both monitors as an open supervisory-credibility question rather than a settled non-issue. Separately, the Anti-Money Laundering Authority's Article 28(1) Customer Due Diligence consultation and the broader 2027 full-application date for the AML Regulation and sixth Directive sit upstream of payments-sector obliged-entity obligations that the World Payments Monitor tracks on its own calendar, though no Romania-specific payments-sector AML finding surfaced on the financial-integrity side this cycle to connect the two more directly.

Outlook

Two horizon events define the coming cycles. The AML Regulation and sixth Anti-Money Laundering Directive reach full application on 10 July 2027, at which point the AML Regulation applies directly and identically across the EU-27 including Romania, removing the national interpretive latitude that obliged entities have previously relied on under the directive-based fourth and fifth Anti-Money Laundering Directive regime. Nearer-term, the absence of a publicly visible MiCA enforcement action against an unauthorised crypto-asset service provider since 1 July 2026 raises the probability of a first enforcement precedent surfacing in the coming cycle; its emergence, or its continued absence, will be the clearest signal of how seriously the Financial Supervisory Authority is prepared to police the newly-closed transitional gap. Romania's continued placement under MONEYVAL's enhanced follow-up procedure means the next scheduled report, expected during 2026-2027, will be the key structural marker of whether this cycle's incremental technical-compliance improvement continues.

Domain intelligence (D1–D8)

D1 Sanctions

stablematerial_change

Sanctions Architecture and Evasion

Romania's sanctions architecture this period is defined by continuity of structure rather than a change to the structure itself. The Oficiul National de Prevenire si Combatere a Spalarii Banilor circulated EU Council acts extending Russia-related restrictive measures, including designations against financial entities in third countries said to be offering crypto services to facilitate sanctions evasion, alongside a transaction ban affecting a larger set of Russian banks. This is implementation of an EU-level act, not an autonomous Romanian listing decision, and it confirms rather than alters the standing structural fact that Romania's sanctions regime refers only to the EU and UN lists, with no independent national designation capacity of its own.

Continue reading

The crypto-services angle of the new designations is the analytically significant part of this development, because it names a specific evasion typology: third-country financial entities acting as intermediaries using digital-asset rails to route value around direct sanctions screening. Where such entities have any correspondent, custodial, or settlement relationship touching Romanian-regulated institutions, the designation creates an immediate screening obligation under Romania's sanctions-implementing legislation. The transaction ban on a wider set of Russian banks similarly raises the bar for indirect-exposure assessment: institutions with historical correspondent relationships into the Russian banking sector, even where those relationships are now dormant or wound down, face a renewed obligation to confirm that no residual exposure persists through intermediary chains.

What this cycle does not show is any shift in Romania's own designation architecture. Romania continues to operate as a pure transmission point for EU and UN decisions rather than as an independent sanctions-policy actor, a posture that has held stable across prior cycles and is reaffirmed rather than tested by this round of designations. The precise scale of the new crypto-services designation batch, and its exact internal effective date within Romania's implementing framework, were not independently confirmed from the material available this cycle, a gap that is recorded as outstanding rather than inferred.

Outlook

The durable feature to track is less the content of any individual EU designation batch and more whether Romania's screening and reporting obligations keep pace with a sanctions environment that is increasingly naming crypto-facilitated evasion as a distinct typology rather than treating it as a subset of conventional correspondent-banking risk. Romania's posture of EU/UN-list-only implementation is stable and should be read as a structural baseline rather than a developing position.

Judgment: ONPCSB continues rolling EU-sanctions implementation; no autonomous designation capacity. Probable
Cumulative analysis

Sanctions Architecture and Evasion

Romania criminalised sanctions-breach conduct this cycle through Law 224/2025, effective 19 December 2025, which amends Government Emergency Ordinance 202/2008 and elevates conduct that was previously handled administratively into a criminal offence. The law transposes EU Directive 2024/1226, the directive establishing EU-wide minimum criminal-law standards for sanctions violations, and covers twelve distinct categories of criminalised conduct, including making funds or economic resources available to designated persons and circumventing asset freezes. This is assessed as a structural architectural strengthening of the domestic sanctions-enforcement capacity of Romania, moving the enforcement posture of the country from a purely administrative-penalty model toward one carrying custodial and criminal-record consequences for sanctions breaches, in line with the minimum-harmonisation direction of the EU under the Directive. This finding rests on a single tier-3 legal-advisory source; no tier-1 Official Gazette text of Law 224/2025 was retrieved directly this cycle, and the finding is accordingly held at an Assessed rather than High confidence tier.

Separately, the standing sanctions-compliance posture of Romania, as reflected in the FATF relationship, remains stable: Romania is not on the FATF grey list, and the most recent FATF follow-up statement, dated 23 March 2026, reports continued progress addressing technical-compliance deficiencies identified in the Mutual Evaluation Report of Romania. No Romania-specific autonomous sanctions designation diverging from EU Council listings was identified this cycle, and the corridor-level signal from the Black Sea, including the expulsion by Romania of the Russian consul to Constanta following a projectile-strike incident near Galati, remains a tangential, low-confidence data point rather than a dedicated sanctions-evasion finding for this cycle.

Outlook

The practical significance of Law 224/2025 will depend on whether Romanian prosecutors bring cases under the new criminal provisions in the coming cycles; a first prosecution would be a strong corroborating signal for the operative strength of the architecture. Watch also for whether a tier-1 Official Gazette text becomes available to firm up the current Assessed-tier finding, and whether the Black Sea corridor exposure of Romania develops into a dedicated sanctions-evasion finding as opposed to a tangential diplomatic signal. This is illustrative orientation, not a prediction.

domain_sub_briefs · D1 · Cumulative analysis
Standing baseline position

ONPCSB continues rolling domestic implementation of EU Russia-sanctions acts under GEO 202/2008; latest circular includes designations against 17 third-country financial entities facilitating sanctions evasion via crypto services and a transaction ban on 33 Russian banks.

Periodic updates (1)
3 Nov 2026 · fim-2026-11-03

Sanctions

Romania's sanctions architecture is defined less by what it designs than by what it transmits. The country's financial intelligence unit circulated European Union Council instruments covering a batch of third-country financial entities said to be offering crypto-asset services that facilitate evasion of restrictive measures connected to Russia, together with a transaction ban extending to a larger set of Russian banks. This transmission ran through the existing national law implementing international sanctions, with no new domestic instrument created to accommodate the designations. That detail is the structural finding: Romania's sanctions capacity at the national level is substantially a conduit function, moving European Union and United Nations decisions into domestic effect rather than generating independent listing judgments. Consistent with that posture, Romania maintains no autonomous national sanctions list of its own, referring only to the European Union and United Nations lists as its designation sources. For firms operating in Romania, this means sanctions screening obligations are, in practice, European Union obligations with a domestic transmission layer rather than a separate Romanian compliance regime requiring distinct list management.

The crypto-services dimension of the designations deserves separate emphasis within the sanctions frame, because the entities named were flagged not for conventional correspondent-banking exposure but for offering crypto-asset services to parties seeking to evade existing restrictive measures. That the domestic transmission mechanism absorbed this designation batch through the same channel used for conventional banking sanctions, without any differentiated treatment for the crypto-services angle, suggests that Romania's sanctions-screening architecture does not yet distinguish meaningfully between asset classes at the point of domestic implementation. Whether that absence of differentiation reflects adequate coverage because the underlying legal instrument is asset-neutral, or a gap because specialist crypto-sector screening capacity has not caught up with the designations it is required to apply, is not resolved by what was retrieved, and the point is noted as an open question rather than a finding either way.

The broader three-pillar balance is worth stating plainly. The sanctions-related signal sits squarely in the counter-proliferation and restrictive-measures space rather than in conventional anti-money-laundering enforcement, and the absence of any parallel domestic enforcement action is itself consistent with a jurisdiction whose sanctions function is primarily administrative transmission rather than independent investigation and sanction. That is not evidence of a gap by itself; a transmission-based model can be entirely sound if the underlying European Union designations are comprehensive and the domestic channel is reliable and timely. What the record does establish is that Romania's sanctions exposure and sanctions capability are now, for practical purposes, bound tightly to the pace and content of decisions made at the European Union Council level, with the domestic layer functioning as execution rather than policy.

Outlook

Going forward, the expectation is that further European Union Council sanctions packages concerning Russia, including any additional crypto-services evasion designations, will continue to be relayed through the same implementing framework without requiring new Romanian legislation. The absence of an autonomous national list is a stable structural feature, not a transitional state, and should be treated as a durable characteristic of the jurisdiction's sanctions posture rather than as a gap likely to close. The open question around whether Romania's domestic screening infrastructure differentiates adequately between conventional and crypto-asset designations at the point of implementation is one worth revisiting as more such designation batches are transmitted, since a single cycle's evidence cannot settle whether this is adequate asset-neutral coverage or an under-resourced area of screening capacity.

D2 Beneficial Ownership

improvingmaterial_change

Beneficial Ownership and Corporate Transparency

MONEYVAL's second enhanced follow-up report records a confirmed remediation of a Financial Action Task Force Recommendation 24 technical-compliance deficiency in Romania's beneficial-ownership framework: joint-stock companies are now required to update changes in beneficial ownership within 15 days of a change occurring. This is a structural fix to the timeliness of Romania's beneficial-ownership data, not a single enforcement event, and it is corroborated at a secondary level by reporting describing Romania's improved technical compliance with two Financial Action Task Force recommendations in the same evaluation cycle.

Continue reading

The durable backdrop against which this cycle's development should be read is the architecture of the European Union's Anti-Money Laundering Package, which separates into three distinct instruments: the directly applicable Anti-Money Laundering Regulation, the sixth Anti-Money Laundering Directive which each Member State transposes into its own law, and the Anti-Money Laundering Authority Regulation, which establishes a dedicated European Union authority. Together these instruments shift supervision of beneficial-ownership and wider anti-money-laundering compliance from a purely national model toward a hybrid regime in which the new Authority holds direct supervisory responsibility for a defined set of higher-risk obliged entities and an indirect, coordinating role over the remainder supervised nationally. No Romania-specific anchor for this horizon architecture was carried in the material available this cycle, so this paragraph states the architecture from standing context rather than from a fresh Romanian development, and the absence of a fresh anchor is recorded honestly rather than papered over.

Within that backdrop, Romania's own remediation is narrow in scope, applying specifically to joint-stock companies, but it is the kind of discrete technical-compliance fix that mutual-evaluation processes are designed to surface and that, once surfaced, a jurisdiction can close relatively quickly compared with more structurally complex deficiencies. The fact that this fix came via mutual-evaluation follow-up rather than through a freestanding domestic transparency initiative is itself informative: it suggests Romania's corporate-transparency architecture evolves substantially in response to external evaluation pressure.

Outlook

The open question is whether Romania extends the same remediation discipline to its virtual-asset and VASP-related technical-compliance deficiencies, which remain unresolved within the same enhanced follow-up procedure and are structurally more complex than a reporting-timeliness fix. Progress on beneficial-ownership timeliness does not by itself indicate progress on that separate and harder deficiency.

Judgment: 15-day BO update obligation for joint-stock companies remediates a R.24 deficiency. Probable
Cumulative analysis

Beneficial Ownership and Corporate Transparency

The durable structural backdrop for beneficial-ownership and corporate-transparency work across the EU is the AML Package, which comprises three distinct instruments: the AML Regulation (Regulation (EU) 2024/1624, the AMLR), directly applicable across all Member States without need for national transposition; the sixth AML Directive (6AMLD, Directive (EU) 2024/1640), which each Member State must transpose into national law; and the AMLA Regulation (Regulation (EU) 2024/1620), establishing the Anti-Money Laundering Authority and shifting supervision of cross-border and higher-risk obliged entities from a purely national model toward a hybrid EU-level regime of direct and indirect supervision. This architecture is a structural fact of EU financial-integrity governance, not a single-cycle development, and it is the frame against which Romania's current signal should be read.

Against that backdrop, Romania's live development this cycle is national: on 25 September 2026 the European Commission sent letters of formal notice to 18 member states, including Romania, for failing to fully transpose certain 6AMLD provisions in the Articles 11-15 lineage, which govern beneficial-ownership register access. The transposition deadline for these provisions had passed on 10 July 2026. Romania now has a two-month window in which to respond to the Commission before a reasoned opinion could follow if transposition remains incomplete. No further detail on which specific register-access provisions remain outstanding, nor on Romania's substantive response, has surfaced in the current research window; the finding is procedural at this stage - a formal notice, not yet an escalated infringement action.

No RO-specific beneficial-ownership register operational finding (functioning status, access-request volumes, data-quality issues) has been located this cycle beyond the transposition-gap signal itself. The absence of a separate operational finding should not be read as confirmation that the register itself functions without issue; it reflects the scope of sourcing reached this cycle.

Outlook

The two-month response window attached to the 25 September 2026 letter of formal notice places the next decision point for Romania's 6AMLD transposition status within Q4 2026 to early Q1 2027. Whether Romania's response satisfies the Commission, or whether the matter escalates to a reasoned opinion, will depend on domestic legislative action that has not yet been observed in the sourcing available this cycle. Given that this is one of 18 member states receiving the same category of notice, it is also a signal about EU-wide transposition timelines for the 6AMLD's beneficial-ownership provisions more broadly, not a Romania-specific failure in isolation. The AMLA supervisory perimeter does not yet have a Romania-specific direct-supervision designation surfaced in this cycle's sourcing; that remains a gap for future monitoring as AMLA's operational rollout proceeds.

domain_sub_briefs · D2 · Cumulative analysis
Standing baseline position

Romania's AML/CFT Law (129/2019) Art. 19 now requires joint-stock companies to update beneficial-ownership changes within 15 days, per MONEYVAL's second enhanced follow-up (2026).

Periodic updates (2)
3 Nov 2026 · fim-2026-11-03

Beneficial Ownership

Globally, the European Union's anti-money-laundering package sets the structural direction for beneficial-ownership and corporate-transparency rules across the bloc: three distinct instruments, the directly applicable Anti-Money Laundering Regulation, the sixth Anti-Money Laundering Directive transposed individually by each member state, and the Anti-Money Laundering Authority Regulation establishing a dedicated European Union-level authority, together shift supervision from a purely national model toward a hybrid arrangement in which the new Authority exercises direct supervision over a defined set of higher-risk obliged entities and indirect, coordinating supervision over the remainder. For Romania, a member state inside that perimeter, this architecture is the durable backdrop against which the own development should be read, even though the specific development recorded is a national-law change rather than a transposition step tied to that European Union package.

The directly relevant development for Romania is the tightening of the beneficial-ownership update obligation under the country's own anti-money-laundering and countering-the-financing-of-terrorism law: joint stock companies are now required to notify changes in beneficial ownership within 15 days of a change occurring. This was recorded as a remediation step against the Financial Action Task Force recommendation on beneficial-ownership transparency, following review by the Council of Europe's monitoring body. A 15-day notification window is a materially tighter standard than open-ended or infrequent-update regimes, and it narrows the period during which a change in controlling interest in a joint stock company can exist unreported on the register. For compliance functions handling Romanian corporate structures, this means the currency of beneficial-ownership data obtained from the Romanian register should improve, though the obligation as recorded applies specifically to joint stock companies and the retrieved record does not establish whether an equivalent 15-day standard extends to other corporate forms such as limited liability companies.

This gain needs to be read against the wider review status Romania still carries. The jurisdiction remains under the Council of Europe monitoring body's second enhanced follow-up procedure, the heightened reporting track applied where multiple technical-compliance deficiencies were identified across a review cycle. The beneficial-ownership recommendation improvement is one component of that broader review closing, not evidence that the enhanced follow-up status itself has been lifted; deficiencies connected to areas such as virtual-asset service provider oversight were noted as unresolved in the same material. Readers should therefore treat the 15-day update rule as a genuine, in-force tightening of the ownership-transparency regime, while treating Romania's overall standing on the monitoring body's heightened track as the more durable and still-open fact.

Set against the European Union-level architecture described above, Romania's own beneficial-ownership regime is consequently operating on two tracks simultaneously: incremental domestic remediation driven by the Financial Action Task Force recommendation process, and the longer eventual alignment that the Anti-Money Laundering Regulation and the sixth Directive will require as their implementation timelines progress across the bloc, with the Anti-Money Laundering Authority's supervisory perimeter eventually bearing on how Romanian obliged entities in cross-border structures are supervised. The retrieved record does not contain a Romania-specific Anti-Money Laundering Authority or transposition development, so that broader architecture is stated here as standing context rather than as a finding of movement.

Outlook

The 15-day beneficial-ownership update obligation is now in force for joint stock companies and represents a concrete, measurable tightening of Romania's ownership-transparency regime. The more significant open question is whether Romania's remaining technical-compliance deficiencies, including those connected to virtual-asset oversight, are resolved in a subsequent review, which would determine whether the enhanced follow-up status itself can be lifted. Separately, as the European Union's Anti-Money Laundering Authority supervisory perimeter and the Regulation's direct-applicability provisions continue to take effect across the bloc, Romanian obliged entities operating in cross-border structures should expect the eventual supervisory architecture to shift in ways not yet reflected in the record.

18 Oct 2026 · fim-2026-10-18

Beneficial Ownership and Corporate Transparency

Romania's beneficial-ownership transparency architecture sits within the durable structural backdrop of the EU AML Package, which comprises three distinct instruments: the AML Regulation (Regulation (EU) 2024/1624), directly applicable across Member States without need for domestic transposition; the sixth AML Directive, which each Member State must transpose through its own national legislation; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and shifts supervision of certain obliged entities from purely national authorities toward a hybrid EU-level regime combining AMLA direct supervision of select cross-border entities with indirect oversight of the remainder through national supervisors. This architecture is the standing frame against which this cycle's Romania-specific beneficial-ownership signal should be read, even though the material reaching this cycle does not itself describe AMLA's direct-supervision perimeter being applied to any named Romanian entity.

Against that backdrop, two concrete developments define Romania's current beneficial-ownership position. The European Commission opened an infringement procedure on 28 September 2026 against Romania, together with seventeen other Member States, over failure to notify the Commission of measures transposing the sixth AML Directive's beneficial-ownership-access provisions. This is a notification-failure procedure rather than a finding that Romania's substantive transposition is deficient, but it nonetheless places Romania among the largest cohort of Member States currently out of step with the Commission's notification timetable on this specific obligation. Separately, and on a track that predates the infringement action, the ONRC-administered Registrul Beneficiarilor Reali has since May 2025 restricted public access to beneficial-ownership information to parties who can demonstrate a legitimate interest, a gating mechanism that narrows who may verify ownership information without necessarily affecting what is recorded. No change to the underlying ownership-identification threshold, set at twenty-five percent plus one share, was reported this cycle.

The analytical significance of pairing these two findings is that they describe access and notification problems rather than a registration or recording gap. Romania maintains a functioning beneficial-ownership register; the open questions concern who may reach it and whether Brussels has been told what domestic rules govern that reach. This is a materially different profile from a jurisdiction with no operative register at all, and the architecture-over-incident framing favoured by this monitor treats the notification gap as the more durable signal: a one-off access dispute would not by itself draw a seventeen-country-plus-Romania infringement cohort, whereas a notification-procedure gap of this breadth suggests a more systemic timing mismatch between the 6AMLD transposition deadline and Member States' administrative capacity to certify compliance.

What the available material does not establish is Romania's underlying transposition status beyond the general infringement notice. It is not possible from this cycle's sourcing to determine whether Romania's substantive 6AMLD beneficial-ownership rules are fully transposed, partly transposed, or awaiting further domestic legislative action; the infringement procedure concerns notification of measures, which could in principle exist domestically without having been formally communicated to the Commission. This gap matters because enabler-jurisdiction analysis depends on knowing whether a legal gap or merely an administrative one is in play, and the current evidence base cannot resolve that distinction for Romania.

Outlook

The trajectory to watch is whether the September 2026 infringement procedure escalates toward a reasoned opinion or is resolved through late notification, since the Commission's typical sequencing offers Member States a window to remedy notification failures before more consequential steps follow. If Romania's notification is supplied and accepted, this item would likely close as a procedural footnote; if it persists, Romania's position within the EU AML Package's hybrid supervisory architecture, and AMLA's eventual visibility into which national registers meet transparency expectations, would come under greater scrutiny. Separately, the legitimate-interest gate on public register access is a standing feature of Romania's regime rather than a cycle-specific development, and nothing in this cycle's material points to it changing in the near term. As scheduled, further clarity on Romania's substantive 6AMLD transposition status would be expected to surface either through the Commission's infringement-procedure correspondence becoming public or through a subsequent domestic legislative act, neither of which had occurred as at the material reaching this cycle.

D3 Enabler Jurisdictions

no_changeno_changestanding position

Enabler Jurisdictions and Professional Facilitators

The most significant financial-integrity signal from Romania this cycle is not a change in law but a disclosure of apparent regulatory capture inside its own designated AML authority for the gambling sector. On 29 July 2026, the deputy director-general of ONJN, Ana-Maria Badea, was made subject to a sought 30-day preventive arrest warrant by the National Anticorruption Directorate of Romania, over allegations that she received bribes of approximately EUR2,500 to expedite gambling-game approvals during a period running from 23 December 2025 to 21 May 2026. Romanian authorities have reportedly placed four further ONJN control and authorisation-department employees under investigation in connection with the same matter, suggesting the alleged conduct was not confined to a single official but potentially reflects a pattern within the licensing-approval function.

Continue reading

A second, separate allegation reaches further back and further up the institutional hierarchy. Odeta Nestor, a former president of ONJN who also headed the industry trade body AOJND, was arrested in June 2026 over an alleged facilitation of a EUR100,000 bribe between an ONJN official and a Bulgarian national representing a gambling company. Critically, this bribe is alleged to have been intended specifically to cover up money-laundering violations committed by that company. If substantiated, this allegation would represent a direct instance of an enabler figure, in this case a former head of the designated AML supervisory authority itself, facilitating the concealment of a predicate AML failure rather than merely accepting payment for administrative convenience. Both findings are held at the Assessed confidence tier, reflecting corroboration across multiple tier-3 Romanian-language and English-language outlets, but the absence of a retrieved tier-1 prosecutorial or court document this cycle.

The enabler-jurisdiction reading of this pattern is that gambling-sector AML supervision in Romania has, on the evidence available this cycle, a demonstrated internal vulnerability at both the working-approval level and, allegedly, at the former-leadership level, to inducement. This is analytically distinct from, and arguably more significant than, a single enforcement action against an external facilitator, because it implicates the credibility of the institution that other jurisdictions and counterparties would rely upon when assessing the gambling-sector AML controls of Romania as a matter of correspondent or counterparty due diligence. Architecture-over-incident framing suggests this should be read as a potential institutional-integrity finding pending the outcome of both prosecutions, rather than as an isolated incident confined to the two named individuals.

From a professional-facilitator lens, the AOJND industry-trade-body role held concurrently by the former ONJN president is a structurally interesting detail: it places a single individual at the intersection of industry representation and regulatory leadership, a dual-hat arrangement that, if the allegations are substantiated, would illustrate exactly the kind of structural conflict-of-interest vulnerability that enabler-jurisdiction analysis is designed to surface, independent of whether any individual transaction was itself illicit.

This sits against a backdrop of continued political instability in Romania, including multiple stalled prime-ministerial candidacies since the collapse of the government in May 2026, which is separately delaying both a draft amendment to Law 129/2019 intended to strengthen the national-risk-assessment coordination powers of ONPCSB (submitted to the Senate on 19 December 2024, addressing deficiencies identified in the 2023 Moneyval evaluation of Romania) and the full MiCA crypto-asset licensing framework. The coincidence of institutional-integrity questions at ONJN with stalled legislative remediation of Moneyval-identified deficiencies elsewhere in the AML architecture of Romania is a pattern worth monitoring as a potential broader signal about the current capacity of Romanian AML institutions to execute reform under sustained political instability.

For compliance teams conducting third-party or correspondent due diligence on Romanian gambling-sector counterparties, the finding this cycle is a reason to place incrementally less reliance on ONJN licensing status alone as a proxy for AML control quality, and to seek independent verification of the AML programme of a counterparty, at least until the outcome of both prosecutions is known. This is a due-diligence-weighting observation, not a recommendation to disengage, and it should be read alongside the otherwise stable FATF standing of Romania.

The pattern also illustrates a recurring typology in enabler-jurisdiction analysis: a licensing or approvals function within a regulator becomes a point of leverage precisely because its decisions carry direct commercial value to regulated entities, and the incentive for inducement rises in proportion to the fees, taxes, and approval delays those entities face. The parallel fiscal tightening in Romania this cycle, which raised authorisation and winnings taxes materially for the same gambling sector, arguably increases rather than decreases the commercial incentive for regulated entities to seek expedited or favourable treatment from ONJN officials, a dynamic worth monitoring as the scandal develops.

Outlook

Watch for whether the ONJN investigation widens to implicate additional officials or, more significantly, whether prosecutors establish and pursue the alleged money-laundering-cover-up dimension of the Nestor case, which would be the more consequential outcome from an enabler-jurisdiction perspective. Also watch whether the stalled Law 129/2019 Moneyval-remediation amendment advances once a new government forms, since continued delay would compound the credibility questions raised by the ONJN scandal. This is illustrative orientation for analytical purposes only, not a prediction or a statement of confirmed fact beyond what is recorded in the underlying assessed-tier claims.

Judgment: No Romania-specific D3 development this cycle. Uncertain

D4 Conflict Finance

no_changeno_change
Judgment: No Romania-specific D4 development this cycle. Uncertain

D5 Crypto / Digital Assets / Financial Innovation

no_changeno_changestanding position

Crypto / Digital Assets / Financial Innovation

Romania presents, as at this cycle, a sharp divergence between the formal applicability of European Union crypto-asset law and the practical availability of a national authorisation route to operate under it. The Markets in Crypto-Assets Regulation applies directly across the European Union, and Romania's transitional accommodation for firms that were registered under pre-existing national law, the maximum eighteen-month window permitted by Article 143(3), expired on 1 July 2026. More than three months beyond that date, no Romanian authority has been designated to receive or process authorisation applications. The European Securities and Markets Authority's own interim register, refreshed 20 October 2026, lists Romania's supervisor as not yet designated and records zero home-registered crypto-asset service providers. This is not an inference from silence: a senior official of the Financial Supervisory Authority stated publicly, in an interview reported in July 2026, that no authority in Romania is currently designated as the competent authority for the regulation.

Continue reading

The mechanism behind the gap is identifiable and single-threaded. A draft Emergency Government Ordinance, which would designate the Financial Supervisory Authority as competent for crypto-asset service providers and asset-referenced tokens and the National Bank of Romania as competent for e-money token issuance, was reviewed by the Romanian government in first reading on 2 April 2026. It has not been adopted. The six months between that first reading and the transitional deadline's lapse, followed by a further three-plus months of continued non-designation, point toward a structural administrative gap rather than a short administrative lag. For firms and counterparties, the consequence is concrete: the regulatory content of Markets in Crypto-Assets, token classification, disclosure, governance and prudential requirements, applies in Romania as directly-effective European Union law regardless of the designation gap, but the authorisation function that lets a firm demonstrate compliance and operate lawfully as a home-supervised entity does not yet exist nationally.

This finding carries weight because of what it implies for enforcement capacity more broadly. A jurisdiction without a designated competent authority cannot meaningfully supervise, inspect, or sanction crypto-asset service providers under the regulation's own terms, even where the underlying law criminalises or restricts the same conduct that a designated authority elsewhere in the European Union would actively police. The gap is therefore a supervisory vacuum with potential downstream financial-integrity consequences: obliged-entity anti-money-laundering obligations for crypto-asset service providers in Romania continue to run through the national financial intelligence unit under Law No. 129/2019 as amended, independent of the Markets in Crypto-Assets designation question, which means firms face financial-crime compliance duties on one track while facing no live prudential or conduct authorisation on another.

Outlook

The draft ordinance remains the only identified mechanism capable of closing this gap, and its own estimated timeline, treated with appropriately wide uncertainty, points toward the first quarter of 2027 at the earliest for resolution, with no evidence in the current record of accelerated movement. Watch for any further government reading or adoption step beyond the 2 April 2026 first reading; absent that, Romania's crypto-asset regime should be read as formally in force under European Union law but administratively non-operative at the national level for as long as the designation question remains open. The precise penalty schedule that would apply once the ordinance is adopted has not yet been located and remains a gap in the present evidence base.

Judgment: No Romania-specific AML-adjacent crypto development beyond the standing MiCA/AML registration gap, already held. Uncertain
Cumulative analysis

Crypto, Digital Assets, and Financial Innovation

The crypto-asset AML perimeter of Romania advanced structurally this cycle through GEO 10/2025, which has been in force since 13 March 2025. The ordinance amends Law 129/2019 to designate the Financial Supervisory Authority of Romania, the ASF, as the primary AML supervisor for crypto-asset service providers, and transposes the EU Funds Transfer Regulation, which extends travel-rule-style originator and beneficiary information requirements to crypto-asset transfers. A 0.5 percent monthly supervisory fee is levied on CASP operating revenue under the ordinance, indicating that the AML-supervisory relationship between the ASF and regulated crypto firms is already operative on a funded, ongoing basis, independent of the separate licensing question addressed below. For context, MiCA itself has applied EU-wide since December 2024, meaning Romanian entities have operated for well over a year within a regime where EU-level rules are directly applicable even as domestic implementing detail lags.

That said, the crypto-regulatory build-out of Romania remains structurally incomplete. The full MiCA CASP-authorisation implementing GEO, which would formalise the licensing procedure and detailed compliance obligations for crypto-asset service providers beyond the AML-integration layer already effected by GEO 10/2025, remains unenacted as of March 2026, more than a year after its draft was published in May 2025. In the interim, the Markets in Crypto-Assets Regulation of the EU applies directly, but the domestic implementing detail of Romania, including the specific procedural and supervisory mechanics the ASF would apply under a national licensing regime, has not been finalised. This creates a gap between the AML-obligation layer, which is in force and funded, and the licensing-clarity layer, which is not, a structurally significant distinction for any crypto-asset service provider assessing its regulatory exposure in Romania. No Romania-specific CASP enforcement action, market-access refusal, or supervisory sanction was evidenced this cycle.

This incompleteness is, on the evidence available this cycle, plausibly linked to the same political instability affecting other areas of the AML architecture of Romania: multiple stalled prime-ministerial candidacies since the collapse of the government in May 2026 have coincided with delay on both the MiCA licensing GEO and the separate Law 129/2019 Moneyval-remediation amendment. Both instruments have been in a holding pattern for over a year, and there is no confirmed date by which either is expected to be finalised.

From a financial-innovation-integrity perspective, the practical consequence for a crypto-asset service provider operating in or into Romania is a two-track compliance reality: AML obligations, including CDD and the information-accompanying-transfer requirements of the Funds Transfer Regulation, are already enforceable and supervised by the ASF, while the entity-level licensing and authorisation framework that would eventually govern market access under MiCA is not yet finalised domestically. This is a structurally coherent, if incomplete, sequencing choice by Romanian authorities, prioritising AML-obligation coverage ahead of full licensing infrastructure, and is broadly consistent with the sequencing many EU member states have adopted during the transition period of MiCA.

This dynamic is relevant beyond Romania: it illustrates a broader pattern across EU member states transitioning into the MiCA regime, in which AML-integration obligations, often transposed via faster-moving emergency-ordinance or equivalent instruments, arrive ahead of the more procedurally involved primary licensing framework. The sequencing in Romania is not itself an integrity finding, but it does mean that counterparties conducting due diligence on a Romania-domiciled crypto-asset service provider should distinguish carefully between the AML-compliance status of a provider, which is verifiable against GEO 10/2025 and ASF supervision, and its eventual MiCA licensing status, which cannot yet be verified because the licensing instrument itself does not exist.

The persistence of this gap also has a bearing on the enabler-jurisdiction reading elsewhere in Romania coverage this cycle: a supervisory authority operating an AML-obligation regime without the backing of a finalised licensing framework has less procedural leverage to compel remediation from a non-compliant CASP than one operating under a complete regime, a structural vulnerability distinct from, but potentially compounding, the ONJN institutional-integrity questions raised separately this cycle.

Outlook

Watch for enactment of the full MiCA CASP-authorisation GEO, expected in the fourth quarter of 2026 per the current regulatory horizon estimate, though this remains an uncertainty-banded, half-year-range estimate given the history of delay of the instrument. A further enactment slip, tied to continued government-formation instability, would extend the current AML-obligation-without-full-licensing gap into a second year. This is illustrative orientation for analytical purposes only, not a prediction of enactment timing.

domain_sub_briefs · D5 · Cumulative analysis
Standing baseline position

expired

2026-07-01

ASF

As of mid-October 2026, Romania has zero MiCA-authorised crypto-asset service providers, alongside Hungary and Poland; ASF cannot process authorisation applications because the national MiCA-implementing GEO remains unadopted (first reading 2 April 2026), and the European Commission has reportedly opened an infringement procedure against Romania over non-adoption.

Periodic updates (5)
25 Oct 2026 · fim-2026-10-25

Crypto / Digital Assets / Financial Innovation

Romania presents, as, a sharp divergence between the formal applicability of European Union crypto-asset law and the practical availability of a national authorisation route to operate under it. The Markets in Crypto-Assets Regulation applies directly across the European Union, and Romania's transitional accommodation for firms that were registered under pre-existing national law, the maximum eighteen-month window permitted by Article 143(3), expired on 1 July 2026. More than three months beyond that date, no Romanian authority has been designated to receive or process authorisation applications. The European Securities and Markets Authority's own interim register, refreshed 20 October 2026, lists Romania's supervisor as not yet designated and records zero home-registered crypto-asset service providers. This is not an inference from silence: a senior official of the Financial Supervisory Authority stated publicly, in an interview reported in July 2026, that no authority in Romania is currently designated as the competent authority for the regulation.

The mechanism behind the gap is identifiable and single-threaded. A draft Emergency Government Ordinance, which would designate the Financial Supervisory Authority as competent for crypto-asset service providers and asset-referenced tokens and the National Bank of Romania as competent for e-money token issuance, was reviewed by the Romanian government in first reading on 2 April 2026. It has not been adopted. The six months between that first reading and the transitional deadline's lapse, followed by a further three-plus months of continued non-designation, point toward a structural administrative gap rather than a short administrative lag. For firms and counterparties, the consequence is concrete: the regulatory content of Markets in Crypto-Assets, token classification, disclosure, governance and prudential requirements, applies in Romania as directly-effective European Union law regardless of the designation gap, but the authorisation function that lets a firm demonstrate compliance and operate lawfully as a home-supervised entity does not yet exist nationally.

This finding carries weight because of what it implies for enforcement capacity more broadly. A jurisdiction without a designated competent authority cannot meaningfully supervise, inspect, or sanction crypto-asset service providers under the regulation's own terms, even where the underlying law criminalises or restricts the same conduct that a designated authority elsewhere in the European Union would actively police. The gap is therefore a supervisory vacuum with potential downstream financial-integrity consequences: obliged-entity anti-money-laundering obligations for crypto-asset service providers in Romania continue to run through the national financial intelligence unit under Law No. 129/2019 as amended, independent of the Markets in Crypto-Assets designation question, which means firms face financial-crime compliance duties on one track while facing no live prudential or conduct authorisation on another.

Outlook

The draft ordinance remains the only identified mechanism capable of closing this gap, and its own estimated timeline, treated with appropriately wide uncertainty, points toward the first quarter of 2027 at the earliest for resolution, with no evidence in the current record of accelerated movement. Watch for any further government reading or adoption step beyond the 2 April 2026 first reading; absent that, Romania's crypto-asset regime should be read as formally in force under European Union law but administratively non-operative at the national level for as long as the designation question remains open. The precise penalty schedule that would apply once the ordinance is adopted has not yet been located and remains a gap in the present evidence base.

18 Oct 2026 · fim-2026-10-18

Crypto / Digital Assets / Financial Innovation

Romania's digital-asset regulatory architecture presents a structural anomaly worth foregrounding in its own right: more than three months after the 1 July 2026 expiry of the Markets in Crypto-Assets Regulation's transitional period, Romania has zero MiCA-authorised crypto-asset service providers, a position it shares with only Hungary and Poland among the twenty-seven Member States of the European Economic Area. This is not a case of low industry demand or a quiet market; it is a case of a licensing route that is structurally unavailable because the Autoritatea de Supraveghere Financiara has not been formally designated as the national MiCA competent authority, a designation that itself depends on adoption of a national implementing Government Emergency Ordinance that remains in draft form as at mid-October 2026, having passed only a first parliamentary reading on 2 April 2026.

The financial-integrity reading of this gap differs from a pure market-access reading in an important respect: the absence of enforcement is itself analytically significant here, not because Romanian authorities are declining to act against non-compliant operators, but because ASF is structurally unable to process any authorisation request at all, regardless of an applicant's compliance posture. A permissive jurisdiction that chooses not to enforce invites a different inference than a jurisdiction whose licensing machinery has simply not been built; Romania sits in the latter category, and the distinction matters for assessing whether crypto-asset service providers operating from or into Romania face a genuine compliance vacuum or merely a slow administrative queue. In principle, continuing to provide crypto-asset services without a valid MiCA authorisation is unlawful now that the transitional period under MiCA's Article 143(3) has lapsed for entities that were registered with the national AML registry before 30 December 2024; in practice, no authorisation can be granted because the competent authority itself has not been constituted.

What has moved, even as licensing has stalled, is the AML-obliged status of crypto-asset service providers. Government Emergency Ordinance 10/2025, effective since 13 March 2025, integrated crypto-asset service providers into Romania's AML-obliged-entity perimeter under AML Law 129/2019 on the same basis as financial institutions, and separately transposed the EU Funds Transfer Regulation's travel-rule requirements. This means that even an entity unable to obtain MiCA authorisation in Romania is nonetheless bound by AML reporting, customer due diligence, and travel-rule obligations where it is in scope of GEO 10/2025 — a bifurcation between prudential licensing status and AML-obliged status that is itself worth tracking, since it creates a regime where crypto-asset operators face AML exposure without a corresponding prudential authorisation pathway.

Outlook

The regulatory horizon places possible adoption of the implementing Government Emergency Ordinance in the first quarter of 2027, carrying a half-year uncertainty band that should be read as an estimate rather than a commitment; the ordinance's fate depends on domestic legislative prioritisation that this cycle's material does not illuminate further. Until ASF receives competent-authority designation, the structural gap between an in-force AML obligation and an unavailable prudential licence is likely to persist, and firms seeking to use Romania as an EU passporting home state will remain unable to do so, a consequence explored further in this monitor's crypto cross-border coverage. A gap remains in this cycle's evidence base regarding whether the Commission has opened, alongside the beneficial-ownership notification procedure, any parallel or connected infringement track specifically concerning Romania's non-adoption of MiCA implementing legislation; that question was not resolved by the material reaching this cycle and should be treated as an open item for subsequent monitoring.

11 Oct 2026 · fim-2026-10-11

Crypto / Digital Assets / Financial Innovation

Romania's crypto-asset regulatory architecture carries a structural gap that has now persisted more than three months past its triggering deadline. The Markets in Crypto-Assets Regulation (Regulation (EU) 2023/1114, MiCA) is directly applicable EU law, but ASF, Romania's Financial Supervisory Authority, has stated it is not currently designated as competent authority for applying the Regulation, meaning it cannot receive or process authorisation applications from crypto-asset service providers (CASPs). Because Romania did not adopt implementing legislation ahead of the transitional deadline, there is presently no domestic route by which a CASP can obtain authorisation to operate from Romania.

The practical remedy under consideration is a draft emergency ordinance, which the Romanian government reviewed in first reading on 2 April 2026. That ordinance, as reported, would designate ASF as the competent authority for CASP and asset-referenced-token (ART) matters and the National Bank of Romania (BNR) for e-money-token (EMT) issuance oversight, and would establish a national sanctions regime for MiCA breaches. As of the most recent reporting located this cycle, the ordinance had not been adopted. This is a financial-integrity-relevant gap as much as a market-access one: the absence of a designated competent authority means the gatekeeping and ongoing-supervision functions that MiCA assigns to national regulators - including AML/CTF-adjacent fit-and-proper and governance checks on CASP applicants - are not currently operative in Romania.

Reports reviewed this cycle also indicate the European Commission has begun requesting explanations from Romania regarding this gap, which raises the prospect of a further EU-level infringement track running in parallel with the separate 6AMLD transposition matter, though no formal notice specific to the MiCA designation gap has been confirmed in the sourcing available this cycle.

Outlook

The near-term question is whether the draft emergency ordinance is adopted before the end of 2026; absent an EU-level deadline specific to this remedial step, resolution depends entirely on Romania's domestic legislative calendar. Until the ordinance passes and ASF receives formal designation, the jurisdiction will continue to present a combination of market-access gap (no domestic CASP authorisation route) and financial-integrity gap (no operative national supervisory touchpoint for CASP governance and controls). Any further communication from the European Commission specifically addressing the MiCA designation gap, rather than the separate 6AMLD matter, would be a material development to track going into Q4 2026.

29 Sep 2026 · fim-2026-09-28

Crypto / Digital Assets / Financial Innovation

Romania's digital-asset supervisory perimeter tightened decisively this cycle. The 18-month transitional grandfathering window established under GEO 10/2025 for pre-MiCA crypto-asset service providers expired on 1 July 2026. From that date, no crypto-asset service provider may serve Romanian or EU clients without full MiCA authorisation from the Financial Supervisory Authority (ASF); the prior national ONPCSB-registration route that had allowed continued operation during the transition is now closed. This is a structural finding, not an incident: it marks the end of a permissive posture that had persisted since MiCA's phased rollout began, and it converts Romania's digital-asset market overnight from a transitional regime into a fully MiCA-governed one.

The practical consequence is already visible in supervisory behaviour. ASF has begun issuing its first coercive sanctioning decisions against digital-asset entities, specifically for periodic-reporting failures. The scale and substance of these actions have not yet been established in the evidence available this cycle, and the confidence on this specific enforcement-pattern claim is accordingly held at the uncertain tier pending further detail. What can be said with more confidence is the structural fact of the deadline itself and its binding effect on market access from 1 July 2026 onward.

This development should be read architecture-over-incident: the significant fact is not any single sanctioning decision but the transition from a permissive to an active supervisory posture. A regulator that has spent eighteen months administering a grandfathering window and then begins issuing coercive sanctions in the same quarter the window closes is signalling a change in enforcement philosophy, not merely processing a backlog. For institutions with correspondent or counterparty exposure to Romanian digital-asset entities, the relevant question going into the next cycle is whether ASF's enforcement activity remains confined to reporting-failure cases or expands to substantive licensing-perimeter violations.

The absence of a comparable finding on Romania's beneficial-ownership registry mechanics, sanctions-evasion architecture, or enabler-jurisdiction exposure this cycle should not be read as reassurance; it reflects the scope of what was researched, not a finding of clean status in those domains.

Outlook

The immediate watch item is whether ASF's coercive sanctioning activity broadens beyond reporting-failure cases into substantive MiCA-authorisation enforcement, and whether the still-pending national MiCA-implementing draft ordinance (allocating supervisory powers between ASF and the National Bank of Romania) reaches final adoption. Until that ordinance is adopted, some ambiguity in the dual-authority supervisory model persists even as the core authorisation deadline has already taken effect.

5 Sep 2026 · fim-2026-08-21

Crypto / Digital Assets / Financial Innovation

Romania's MiCA transitional registration regime for crypto-asset service providers, established under Government Emergency Ordinance 10/2025, closed on 1 July 2026 after an eighteen-month window. From that date, any CASP that had not secured full MiCA authorisation from the Financial Supervisory Authority may no longer lawfully operate for Romanian users. The GEO 10/2025 framework designates the Financial Supervisory Authority as the primary CASP competent authority, with the National Bank of Romania handling e-money-token and payment-related crypto services, and layers on a 0.5% monthly supervisory fee against CASP operating income. No formal enforcement action against an unauthorised platform has yet been publicly identified since the deadline passed, which leaves a near-term supervisory gap between the rule's legal effect and any visible enforcement precedent. This lapse without visible follow-through is itself the material signal: it raises the probability that the coming cycle will produce either a first enforcement precedent against a non-compliant platform, or continued regulatory silence that would itself be worth tracking as an enablement signal.

Outlook

The next cycle's key marker for this domain is whether the Financial Supervisory Authority acts against any CASP still operating without full MiCA authorisation. Absence of action would not be neutral; it would itself constitute an analytically significant enablement signal given the deadline has already passed.

D6 Compliance Technology & Active Defence

no_changeno_change
Judgment: No RegTech/active-defence development for Romania this cycle. Uncertain

D7 AML/CTF Regime

stableno_changestanding position

AML/CTF Regime

MONEYVAL's July 2026 follow-up report is this cycle's standing AML/CTF development for Romania. Published 6 July 2026, the report found Romania had improved technical compliance on two of the Financial Action Task Force's 40 Recommendations since the June 2025 review, moving to fully compliant on seven, largely compliant on twenty, and partially compliant on the remaining thirteen of the 40 Recommendations. The improvement is real but bounded: Romania remains under MONEYVAL's enhanced follow-up procedure, with a further report expected during 2026-2027, so the architecture continues to be treated as a work in progress rather than a settled strong-compliance baseline. The finding is carried at High confidence, resting on a Tier-1 Council of Europe/MONEYVAL primary publication corroborated by the FATF country page, a materially stronger sourcing posture than most other Romania findings this cycle.

Continue reading

Outlook

The next scheduled MONEYVAL report during 2026-2027 will be the key structural marker of whether this cycle's incremental improvement continues or stalls, and whether Romania's enhanced follow-up status is eventually lifted.

Judgment: Romania remains under MONEYVAL enhanced follow-up; VASP deficiencies unresolved. Probable
Standing baseline position

enhanced_follow_up

2026-07-06

2027

MONEYVAL's July 2026 follow-up report finds Romania compliant with 7 of the FATF 40 Recommendations, largely compliant with 20, and partially compliant with 13, with improvement on R.6/R.7 since the prior June 2025 report; Romania remains under MONEYVAL's enhanced follow-up process.

Periodic updates (1)
29 Sep 2026 · fim-2026-09-28

AML/CTF Regime

MONEYVAL's follow-up report, published 6 July 2026, assessed Romania as compliant with 7 of the FATF 40 Recommendations, largely compliant with 20, and partially compliant with 13, recording specific improvement on Recommendations 6 and 7, which cover targeted financial sanctions, since the prior June 2025 report. Despite this incremental improvement, Romania remains under MONEYVAL's enhanced follow-up process. This is the architecture-level finding for the cycle: Romania's AML/CTF technical-compliance position is moving in the right direction on a subset of recommendations without yet reaching the threshold that would remove it from heightened monitoring.

This finding sits separately from Romania's FATF grey-list status. Romania is not on the FATF grey list; it is assessed instead through the MONEYVAL fifth-round mutual evaluation mechanism, a Council of Europe process rather than the FATF's own International Co-operation Review Group process that produces grey-listing. The two mechanisms should not be conflated: enhanced follow-up under MONEYVAL is a form of continued technical-compliance monitoring, while grey-listing carries its own distinct international signalling and correspondent-banking consequences. Romania's exposure runs only through the former.

On sanctions-list mechanics, Romania's exposure to the EU list of high-risk third countries, the 26-country list in force from 29 January 2026, continues to apply through the standard AMLR mechanism, with no Romania-specific autonomous divergence identified. This is a continuity finding confirming Romania has not diverged from the EU-wide baseline on high-risk-country screening obligations.

No Romania-specific finding on beneficial-ownership registry mechanics beyond MONEYVAL's general transparency commentary, sanctions-evasion architecture, enabler-jurisdiction exposure, or conflict-finance nexus was located this cycle. These gaps reflect the scope of research conducted, not a finding of clean status.

Outlook

The next MONEYVAL follow-up report will be the natural checkpoint for whether Romania's partial-compliance items on the remaining 13 Recommendations narrow further, and whether continued improvement is sufficient to support eventual exit from enhanced follow-up. In the interim, the improvement on Recommendations 6 and 7 specifically reinforces the targeted-financial-sanctions screening infrastructure that also underpins Romania's EU high-risk-third-country list application noted above.

D8 Commercial Activity

no_changeno_change
Judgment: No financial-integrity-sector commercial event located for Romania this cycle. Uncertain
Regulatory horizon
Proposed2027-Q1 · ±half_year

MiCA national implementing Government Emergency Ordinance (ASF/BNR competent-authority designation)

Once adopted, ASF becomes the formally designated MiCA competent authority able to accept and process CASP authorisation applications.
Ministry of Finance / Romanian Government Source
In Force Pending2027-Q3 · ±year

AMLR direct application to Romania as EU-27 member

A harmonised 25% beneficial-ownership threshold and EUR 10,000 cash-payment limit become directly applicable.
European Union Source
2 dated · 4 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

Romania closed a beneficial-ownership timeliness gap while its sanctions screening obligations widened on crypto-facilitated evasion.

The 15-day beneficial-ownership update rule reduces one source of stale-data risk in customer due diligence, while the new third-country crypto-services designations and the expanded Russian-bank transaction ban add fresh counterparties and intermediaries to screen for, particularly where correspondent or VASP-counterparty relationships exist.

2 evidence refs
Compliance

A confirmed Recommendation 24 remediation narrows one technical-compliance gap, but the virtual-asset deficiency underlying Romania's enhanced follow-up remains open.

Policy frameworks keyed to Romania's mutual-evaluation status should reflect the closed beneficial-ownership timeliness gap, but should not treat Romania's enhanced follow-up status as resolved given the unresolved VASP-related deficiency.

2 evidence refs
Legal

Romania continues to implement sanctions purely as an EU/UN transmission point, with new designations touching crypto-facilitated evasion and a widened Russian-bank transaction ban.

Liability exposure for Romanian-regulated entities tracks EU Council designations directly, since Romania maintains no autonomous national list; the new crypto-services designations are relevant wherever counterparties may be intermediating sanctioned flows through digital-asset rails.

2 evidence refs
Board

Romania recorded a confirmed structural improvement in corporate-transparency timeliness this cycle, against a backdrop of continuing EU-driven sanctions implementation.

The beneficial-ownership fix is a positive, narrow structural development; it does not resolve the broader virtual-asset deficiency that keeps Romania under enhanced international follow-up, which remains the more significant open item for institutional reputational exposure.

2 evidence refs
CTO

New sanctions designations specifically name crypto-facilitated sanctions evasion by third-country financial entities.

Platforms and screening systems with any exposure to third-country crypto-services counterparties should treat this designation batch as a direct technical-screening update requirement, given the explicit crypto-services framing of the evasion typology.

1 evidence refs
Risk

Beneficial-ownership timeliness improved structurally, while sanctions-evasion exposure through crypto-facilitated third-country entities and a wider Russian-bank transaction ban both increased.

Exposure concentration analysis should reflect the expanded Russian-bank transaction ban as a widened indirect-exposure surface, distinct from the narrower beneficial-ownership improvement which reduces a different category of data-currency risk.

2 evidence refs
Operations

Screening lists require an update to reflect new EU Council designations covering crypto-facilitated sanctions evasion and an expanded Russian-bank transaction ban.

Transaction-monitoring and screening workflows should incorporate the newly designated third-country financial entities and the widened Russian-bank list as implemented by Romania's financial intelligence unit under the existing EU/UN-list-only framework.

2 evidence refs
Audit

A mutual-evaluation body has independently confirmed remediation of a beneficial-ownership timeliness control; the virtual-asset control gap remains documented as open.

Audit evidence of the 15-day beneficial-ownership update control can now cite external confirmation of remediation, while control-testing scope for virtual-asset-related obligations should continue to reflect the deficiency as unresolved.

2 evidence refs
Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architecturematerial_changeONPCSB circulated crypto-services evasion designations (17 entities) and a 33-bank transaction ban.
T2 · EU AML Package / AMLAno_changeNo Romania-specific AMLR/6AMLD transposition development this cycle.
T3 · FATF Grey Listno_changeRomania not on the FATF grey list; remains under MONEYVAL enhanced follow-up.
T4 · Beneficial-Ownership Register Statusimproving15-day BO update obligation recorded as R.24 remediation.
T5 · Crypto / VASP Regulatory Frameworkno_changeNo new Romania-specific MiCA-adjacent AML development this cycle.
T6 · Sanctions Regime Divergenceno_changeRomania implements EU/UN lists only; no autonomous national list.
Registers

Enforcement actions

  • 27 Mar 2025
  • 10 Apr 2025
  • 25 Jan 2025
  • 17 Feb 2026
  • DIICOT conducted 66 searches nationwide and detained 15 suspects, including legal representatives of several companies, accused of embezzlement, misuse of company assets and laundering over $14 million in cryptocurrency tied to a renewable-energy project, including false claims of crypto-trading profits. 27 Mar 2025
  • Following on-the-spot checks in Cyprus and Czechia and analysis of seized IT servers, OLAF and EPPO uncovered a EUR 9.5 million fraud and money-laundering scheme involving EU Regional Development Fund resources for an IT platform, with funds diverted through fictitious contracts. 10 Apr 2025
  • EPPO's Romania office indicted 10 individuals and 4 companies for orchestrating a EUR 1.6 million fraud scheme exploiting subsidies meant to help unemployed people gain job skills, using close to 200 false claims via a network of fictitious companies operating 2019-2021. 25 Jan 2025
  • Prosecutors opened an investigation into the ONRC's failed IT platform (launched summer 2024), which blocked over 130,000 business registrations for weeks, exposed personal data of 3,000+ individuals, and was signed off nine months before launch without adequate testing per draft audits. 17 Feb 2026

Sanctions changes

  • 23 Apr 2026
  • 23 Oct 2025
  • 24 Sep 2026
  • 1 Oct 2026
  • 2026-10
  • The EU's 20th sanctions package (adopted 23 April 2026) added 46 shadow-fleet vessels (total 632 listed), 36 Russian energy-sector designations, a first-ever activation of the EU anti-circumvention tool against a third country, and new tanker-sale/scrapping safeguards. As an EU member and Black Sea port state, Romania directly applies and enforces these measures at Constanta and other national ports. 23 Apr 2026
  • The EU's 19th sanctions package (23 October 2025) introduced sanctions on the developer of the Russian state-linked stablecoin A7A5, its Kyrgyz issuer, and a platform operator, plus a ban on reinsuring shadow-fleet vessels and further shadow-fleet vessel listings (bringing the total to 557 at the time). These crypto and maritime-insurance measures are directly applicable in Romania as an EU member state with a materially large VASP/crypto sector. 23 Oct 2025

Regulatory horizon (register)

  • 6AMLD beneficial-ownership register transposition milestone
  • AMLA RTS package submission to the European Commission
  • 6AMLD beneficial-ownership register transposition milestone
  • National MiCA implementing Government Emergency Ordinance (dual ASF/BNR authority model)
  • MONEYVAL 5th-round enhanced follow-up - Romania's next progress report
  • AMLR direct application to Romania as EU-27 member
  • 6th AML Directive (2024/1640) transposition in Romania
  • Romania MiCA implementing emergency ordinance
  • MiCA national implementing Government Emergency Ordinance (ASF/BNR competent-authority designation)
  • Draft Emergency Government Ordinance implementing MiCA in Romania
  • AMLR (Reg 2024/1624) direct application in Romania
  • 6AMLD transposition deadline for Romania
  • AMLA supervisory perimeter and standards build-out affecting Romania
  • MONEYVAL next enhanced follow-up report on Romania

Active schemes

  • [HIGH] EU-funds fraud layered through Romania-Cyprus-Czechia-United Arab Emirates network
  • Crypto-ATM cash-out pipeline for embezzled renewable-energy funds
  • Black Sea shadow-fleet transit exposure via the Constanta corridor
  • [HIGH] Restricted, low-integrity beneficial-ownership register exploitation
Sources
  1. https://www.deloitte.com/ro/en/our-thinking/articles/incriminarea-nerespectarii-sanctiunilor-internationale-impuse-de-uniunea-europeana-sanctiuni-derogatorii-de-la-codul-penal-pentru-persoane-juridice.html
  2. https://www.wall-street.ro/articol/justitie/director-din-onjn-retinut-pentru-mita.html
  3. https://www.amcham.ro/business-intelligence/amendment-of-law-no.-1292019-reinforced-measures-to-combat-money-laundering-and-terrorist-financing
  4. https://www.legal500.com/guides/chapter/romania-fintech/
  5. https://en.wikipedia.org/wiki/2026_in_Romania
  6. https://www.fatf-gafi.org/en/countries/detail/Romania.html
  7. https://www.coe.int/en/web/moneyval/-/moneyval-romania-has-made-limited-progress-in-enhancing-its-framework-against-money-laundering-terrorist-financing-and-proliferation-financing
  8. https://www.romania-insider.com/council-europe-romania-anti-money-laundering-measures-2026
  9. https://www.licentium.io/hub/romania
  10. https://practiceguides.chambers.com/practice-guides/blockchain-crypto-assets-2026/romania/trends-and-developments
  11. https://finconduit.com/resources/amla-rts-deadline-july-2026
  12. https://ezine.eversheds-sutherland.com/global-aml-guide/romania
  13. https://www.coe.int/en/web/moneyval/-/romania-should-step-up-efforts-to-investigate-and-prosecute-money-laundering-and-strengthen-supervision
  14. https://www.onrc.ro/documente/ghidAccesFIRBR.pdf
  15. https://www.regpulse.io/blog/eu-aml-package-2026
  16. https://www.moodys.com/web/en/us/kyc/resources/insights/a-review-of-amla-and-amlr-2026.html
  17. https://baciupartners.ro/wp-content/uploads/2025/03/OUG-10-2025-AML.pdf
  18. https://studiifinanciare.ro/de-la-1-iulie-2026-nicio-firma-crypto-fara-licenta-mica-nu-mai-poate-opera-in-romania-momentul-zero-in-care-piata-crypto-din-uniunea-europeana-iese-din-zona-gri-l/
  19. https://www.coe.int/en/web/portal/-/the-council-of-europe-s-anti-money-laundering-body-will-publish-evaluation-reports
  20. https://www.topograph.co/guides/trade-register-in-romania
  21. https://www.moodys.com/web/en/us/kyc/resources/insights/understanding-the-6th-anti-money-laundering-directive-6amld-key-changes-and-compliance.html
  22. https://rm.coe.int/moneyval-2026-5-ro-5th-round-2nd-enhanced-fur/48802c6fae
  23. https://www.coe.int/en/web/moneyval/-/romania-makes-progress-in-technical-compliance-on-targeted-financial-sanctions-related-to-terrorism-and-proliferation-financing
  24. https://www.radioromania.ro/Actualitate/romania-printre-tarile-carora-comisia-europeana-le-a-trimis-scrisori-de-punere-in-intarziere-pe-tema-combaterii-spalarii-banilor-id221878.html
  25. https://startupcafe.ro/platforme-crypto-autorizate-asf-romania-functiona-regulament-european-mica-lege-interna-102828
  26. https://www.unpir.ro/actualizare-onpcsb-acte-normative-privind-regimuri-sanctionatorii-internationale
  27. https://onpcsb.ro/ro/info/69e0ceafd6520536874694.pdf
  28. https://www.ifcreview.com/news/2026/october/eu-eu-member-states-told-to-comply-with-6amld-beneficial-ownership-access-rules/
  29. https://www.openownership.org/en/map/country/romania/
  30. https://practiceguides.chambers.com/practice-guides/joint-ventures-2026/romania
  31. https://legalbison.com/casp-license/romania/
  32. Unknown Gravity
  33. Bursa.ro (interview with ASF Prim-vicepreședinte)
  34. Chambers Practice Guides
  35. MONEYVAL / Council of Europe
  36. Capital.ro
  37. govnet.ro (law firm commentary)
  38. ONPCSB (Romanian FIU)
  39. Council of Europe (MONEYVAL)
  40. Romania-Insider
  41. ONPCSB
  42. Eversheds Sutherland
  43. Mutual Evaluation Report of Romania
  44. Romania
  45. Committee of Experts on the Evaluation of Anti-Money Laundering Measures (MONEYVAL)
  46. Mutual Evaluation of Romania
  47. Assessments
  48. Consolidated assessment ratings
  49. Mutual Evaluations
  50. Consolidated Processes and Procedures for Mutual Evaluations and Follow-Up Universal Procedures
  51. Anti-money laundering and counter-terrorist financing measures Romania
  52. Publications
  53. Fighting money laundering and terrorist financing in Romania - Reforms and Investments
  54. Fighting money laundering and terrorist financing in Romania - Reform Support
  55. Romania Cracks Down on Crypto Laundering Scheme | OCCRP
  56. Romania strengthens its fraud prevention and control system with European funds - European Anti-Fraud Office
  57. OLAF and EPPO jointly uncover 9.5 million fraud and money laundering scheme - European Anti-Fraud Office
  58. 1 Financial Crimes Enforcement Network (FinCEN)
  59. Jurisdictions under Increased Monitoring - 19 June 2026
  60. "Black and grey" lists
  61. Jurisdictions under Increased Monitoring - 13 February 2026
  62. Countries / Jurisdictions
  63. High-risk and other monitored jurisdictions
  64. High-Risk Jurisdictions subject to a Call for Action - 13 February 2026
  65. FATF changes its grey listing criteria to further focus on risk
  66. Jurisdictions under Increased Monitoring - 13 June 2025
  67. Russia's war of aggression against Ukraine: Council sanctions 41 vessels of the Russian shadow fleet - Consilium
  68. Russia's war of aggression against Ukraine: Council sanctions 9 shadow fleet enablers - Consilium
  69. EU sanctions against Russia: questions and answers - Consilium
  70. Timeline - EU sanctions against Russia - Consilium
  71. Daily News 18 / 12 / 2025
  72. 1 Red ALERT Shadow Fleet Sanctions Evasion and Avoidance Network
  73. Sanctions adopted following Russia’s military aggression against Ukraine - Finance
  74. SANCTIONS ADVISORY - Guidance for Shipping and ...
  75. Updated Price Cap Coalition Advisory for the Maritime Oil ...
  76. EU adopts 20th package of sanctions against Russia - Finance
  77. 19th package of sanctions against Russia: EU targets Russian energy, third-country banks and crypto providers - Consilium
  78. Russia’s war of aggression against Ukraine: 20th round of stern EU sanctions hits energy revenues, military-industrial complex, trade and financial services, including crypto - Consilium
  79. Sanctions on transport - European Commission
  80. Russian Harmful Foreign Activities Sanctions | Office of Foreign Assets Control
  81. 1 IMPORT BAN ON REFINED PRODUCTS OBTAINED FROM RUSSIAN CRUDE OIL
  82. Gheorghe Bosinceanu | OCCRP
  83. Oil imports - Finance - European Commission
  84. Russia's war against Ukraine: EU sanctions - Consilium
  85. European e-Justice Portal - Business registers in EU countries
  86. Information on Romania national BOR - European Union
  87. Anti-Corruption Probe Launched Into Romanian Business Registry’s Failed IT System | OCCRP
  88. Directory of Open-Source Registries: Romania
  89. TI Report: EU Beneficial Ownership Registers Limited and Restricted | OCCRP
  90. Guidance on Beneficial Ownership and Transparency of Legal Arrangements
  91. Patchy progress in beneficial ownership registers in the EU | Global Witness
  92. Treasury Department won’t enforce beneficial ownership rule under the Corporate Transparency Act - ICIJ
  93. Annex I - Tools and Resources for Anti-Corruption Knowledge
  94. Key Changes in FinCEN’s Proposed Rule to Refocus AML/CFT Programs on
  95. FinCEN Proposes Rule to Fundamentally Reform Financial Institution Programs Designed to Fight Illicit Finance | FinCEN.gov
  96. Special Measures | FinCEN.gov
  97. Global Crypto Policy Review Outlook 2025/26 Report | TRM Labs
  98. GUIDANCE FOR A RISK-BASED APPROACH THE BANKING SECTOR OCTOBER 2014
  99. Enforcement Actions | FinCEN.gov
  100. MONEY LAUNDERING NATIONAL RISK ASSESSMENT TOOLKIT – ANNEXES A-C
  101. FATF publishes new Guidance on Financial Inclusion and Anti-Money Laundering and Terrorist Financing Measures
  102. Anti-money laundering and countering the financing of terrorism at EU level - Finance
  103. Romania’s Parliament – Law no. 129/2019 from 11 July 2019
  104. Anti-money laundering and countering the financing of terrorism legislative package - Finance
  105. Mutual Evaluation Report of Romania
  106. Anti-money laundering directive V (AMLD V) - transposition status | European Commission
  107. EU Fines Romania, Ireland for Gaps in Anti-Money Laundering Measures | OCCRP
  108. Homepage - Authority for Anti-Money Laundering and Countering the Financing of Terrorism
  109. Sanctions Programs and Country Information | Office of Foreign Assets Control
  110. Sanctions List Service | Office of Foreign Assets Control
  111. Where is OFAC's Country List? What countries do I need to worry about in terms of U.S. sanctions? | Office of Foreign Assets Control
  112. Program Tag Definitions for OFAC Sanctions Lists | Office of Foreign Assets Control
  113. OFAC Specially Designated Nationals List
  114. Archive of Changes to OFAC's Sanctions Lists | Office of Foreign Assets Control
  115. What are OFAC crypto sanctions?
  116. Home | Office of Foreign Assets Control
  117. Sanctions List Search Tool | Office of Foreign Assets Control
  118. Additional Sanctions Lists | Office of Foreign Assets Control
  119. DIICOT | OCCRP
  120. OLAF and EPPO jointly uncover 9.5 million fraud and money laundering scheme - European Anti-Fraud Office
  121. Ευρωπαϊκή Εισαγγελία - consilium.europa.eu
  122. Romania - Migration and Home Affairs - European Commission
  123. OLAF and EPPO investigate alleged fraud and money laundering in Romania - European Anti-Fraud Office
  124. Romania: Prosecutors Overwhelmed | OCCRP
  125. Romania: 14 Indicted in Employment Fraud Scheme | OCCRP
  126. Searches Conducted into EU funds Fraud, Money Laundering Investigation | OCCRP
  127. European Public Prosecutor's Office - European Anti-Fraud Office
  128. Home
  129. Economic forecast for Romania - Economy and Finance - European Commission
  130. 1 Anti-money laundering and counter-terrorist financing measures Ukraine
  131. Romania
  132. Global crypto regulation review 2025
  133. Commission approves ANCOM’s plan to reintroduce regulation in fixed wholesale local access in Romania
  134. FATF urges stronger global action to address Illicit Finance Risks in Virtual Assets
  135. Virtual Asset Service Provider (VASP): Definition, Compliance & Examples
  136. The Road to Crypto Regulation Series
  137. What Is a VASP? Virtual Asset Service Provider - Chainalysis
  138. JUNE 2019 GUIDANCE FOR A RISK-BASED APPROACH VIRTUAL ASSETS AND VIRTUAL
  139. Targeted Update on Implementation of the FATF Standards on Virtual Assets and
  140. GUIDANCE FOR A RISK-BASED APPROACH EFFECTIVE SUPERVISION AND ENFORCEMENT BY
  141. Financial Action Task Force Identifies Jurisdictions with Anti-Money Laundering, Countering the Financing of Terrorism, and Counter-Proliferation Finance Deficiencies | FinCEN.gov
  142. Financial Action Task Force Identifies Jurisdictions with Anti-Money Laundering, Combating the Financing of Terrorism, and Counter-Proliferation Finance Deficiencies | FinCEN.gov
  143. Cross-Border Information Sharing by Financial Institutions ...
  144. Guidance | FinCEN.gov
  145. The EU's 20th sanctions package targets the architecture of crypto sanctions evasion
  146. Alerts/Advisories/Notices/Bulletins/Fact Sheets | FinCEN.gov
  147. FINANCIAL ACTION TASK FORCE Mutual Evaluation Report
  148. Transposition of directives - European Commission
  149. Anti-money laundering directive IV (AMLD IV) - transposition status | European Commission
  150. NIS2 Directive Implementation in Romania | Shaping Europe’s digital future
  151. February infringements package: key decisions
  152. Timeline for the Implementation of the EU AI Act | AI Act Service Desk
  153. Commission takes action to ensure complete and timely transposition of EU directives
  154. Country report - Romania - Economy and Finance - European Commission
  155. MONEYVAL / FATF
  156. Romania's Parliament / UNODC hosted
  157. OCCRP
  158. European Anti-Fraud Office (OLAF)
  159. Council of the European Union
  160. Global Witness
  161. European e-Justice Portal / Romanian Ministry of Justice submission
  162. OCCRP / Public Record
  163. FATF
Coverage gaps
fim-int-2026-07-05-G001: Evidence on the specific national v…
fim-int-2026-07-05-G001: Evidence on the specific national vehicle and drafting status for Romania 6AMLD transposition (Directive EU 2024/1640) would improve confidence beyond the current default-adopted-stage horizon assessment. [resolved]
fim-int-2026-07-05-G002: Vessel-level or shipment-level evid…
fim-int-2026-07-05-G002: Vessel-level or shipment-level evidence placing a documented shadow-fleet ship-to-ship transfer inside Romanian territorial waters or the Constanta port itself would upgrade the current structural-proximity assessment to a direct finding. [resolved]
fim-int-2026-07-05-G003: The Court of Accounts final audit c…
fim-int-2026-07-05-G003: The Court of Accounts final audit conclusion on the ONRC information-technology contract would allow a firmer resolution status for the associated beneficial-ownership infrastructure gap. [resolved]
fim-int-2026-07-05-G004: A published NBR/FSA supervisory ref…
fim-int-2026-07-05-G004: A published NBR/FSA supervisory reform roadmap addressing the non-compliant R.26 rating would allow the risk-direction assessment for the FATF Grey List tracker to move beyond stable/uncertain. [resolved]
fim-int-2026-08-05-G001: No Romania-specific dedicated FATF …
fim-int-2026-08-05-G001: No Romania-specific dedicated FATF grey-list statement beyond the country page was retrieved this cycle. [resolved]
fim-int-2026-08-05-G002: No Romania-specific dedicated D4 co…
fim-int-2026-08-05-G002: No Romania-specific dedicated D4 conflict-finance primary-source finding was identified this cycle beyond the tangential Black Sea corridor signal. [resolved]
fim-int-2026-08-05-G003: Enactment status and timeline of th…
fim-int-2026-08-05-G003: Enactment status and timeline of the Law 129/2019 Moneyval-driven amendment remain unconfirmed since its December 2024 Senate submission. [resolved]
fim-int-2026-08-20-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-20-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): No Romania-specific OFAC/OFSI/EU-Council sanctions designation was researched this cycle; D1 search budget was concentrated on RO-scoped gambling/AML/payments/crypto/data-protection queries. [resolved]
fim-int-2026-08-20-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-20-G002 ({'scheme': 'financial_integrity', 'value': 'D3'}): No Romania-specific enabler-jurisdiction finding was researched this cycle. [resolved]
fim-int-2026-08-20-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-20-G003 ({'scheme': 'financial_integrity', 'value': 'D6'}): No RO-specific FCA/JMLSG-equivalent guidance calibrating AI/ML transaction-monitoring supervisory expectations against documented Romanian practice was identified this cycle. [resolved]
fim-int-2026-08-20-G004 ({'scheme': 'financial_integrity', '…
fim-int-2026-08-20-G004 ({'scheme': 'financial_integrity', 'value': 'D5'}): No T1 ASF/BNR primary source page was directly retrieved corroborating the MiCA transitional-window expiry; reliance is on T2/T3/T4 legal-advisory commentary. [resolved]
fim-int-2026-09-05-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-05-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): No RO-specific D1 (Russian sanctions-evasion) primary-source development located this cycle; recorded as a genuine no-material-change finding rather than a coverage gap, but no direct search corroboration beyond the standing collection note. [resolved]
fim-int-2026-09-05-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-05-G002 ({'scheme': 'financial_integrity', 'value': 'D3'}): No RO-specific D3 enabler-jurisdiction or D4 conflict-finance signal located this cycle; the pooled web-search budget was allocated to the RO-scoped union sweep, leaving Tier-D jurisdiction watch (KH/LA/MX/CO) unsearched. [resolved]
fim-int-2026-09-05-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-05-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): No T1 EU Official Journal text was re-fetched this cycle to independently verify the AMLR/6AMLD/AMLA timeline beyond two T3 vendor explainers. [resolved]
fim-int-2026-09-05-G004 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-05-G004 ({'scheme': 'financial_integrity', 'value': 'D6'}): No RO-specific D6 RegTech/compliance-technology development was located this cycle; the field is recorded as awaiting_primary_source. [resolved]
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): No D1 Sanctions Architecture substantive finding for Romania was located this cycle. [resolved]
fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', 'value': 'D2'}): D2 Beneficial Ownership registry mechanics for Romania were not established this cycle beyond MONEYVAL's general transparency comment. [resolved]
fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', 'value': 'D3'}): D3 Enabler Jurisdictions finding for Romania was not located this cycle. [resolved]
fim-int-2026-09-28-G004 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G004 ({'scheme': 'financial_integrity', 'value': 'D4'}): D4 Conflict Finance finding for Romania was not located this cycle. [resolved]
fim-int-2026-09-28-G005 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G005 ({'scheme': 'financial_integrity', 'value': 'D6'}): D6 mandatory enforcement-gap-log entry was not populated this cycle pending primary-source research. [resolved]
fim-int-2026-09-28-G006: TBML minimum coverage (2 distinct-c…
fim-int-2026-09-28-G006: TBML minimum coverage (2 distinct-corridor entries) was not met this cycle for Romania. [resolved]
fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): Romania's 6AMLD first-tranche transposition status (communicated vs. facing infringement) could not be established against the Commission's August 2026 monitoring update. [resolved]
fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): No ASF or BNR primary-source confirmation of the MiCA transitional deadline end date was retrieved this cycle; reliance is on two T3 commentary sources. [resolved]
fim-int-2026-10-04-G003: Tier-D mandatory watch jurisdiction…
fim-int-2026-10-04-G003: Tier-D mandatory watch jurisdictions (KH, LA, MX, CO) were not researched this cycle due to the single-JID scope binding. [resolved]
fim-int-2026-10-11-G001: Tier D jurisdictions (Cambodia, Lao…
fim-int-2026-10-11-G001: Tier D jurisdictions (Cambodia, Laos, Mexico, Colombia) were not reached this cycle owing to pooled search budget; recorded as awaiting_primary_source. [resolved]
fim-int-2026-10-11-G002: No D3 enabler-jurisdiction finding …
fim-int-2026-10-11-G002: No D3 enabler-jurisdiction finding for Romania located this cycle. [resolved]
fim-int-2026-10-11-G003: No D8 commercial activity (financia…
fim-int-2026-10-11-G003: No D8 commercial activity (financial-sector M&A) finding for Romania located this cycle. [resolved]
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', 'value': 'D5'}): No T1 primary ASF/BNR document on MiCA non-implementation was directly retrieved this cycle; findings rest on T3 commentary. [resolved]
fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', 'value': 'D1'}): No Tier D jurisdiction, Russian sanctions-evasion/Houthi-Yemen channel, or TBML corridor finding specific to Romania was located this cycle due to search-budget prioritisation. [resolved]
fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', 'value': 'D2'}): 6AMLD transposition status for Romania specifically (not yet transposed / partly transposed / fully transposed) was not established this cycle beyond the general EU infringement notice. [resolved]
fim-int-2026-10-25-G001: No Tier D jurisdiction cross-check …
fim-int-2026-10-25-G001: No Tier D jurisdiction cross-check (KH, LA, MX, CO) was performed for Romania this cycle within the pooled search budget. [resolved]
fim-int-2026-10-25-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-25-G002 ({'scheme': 'financial_integrity', 'value': 'D5'}): No source located for the precise national penalty schedule under the still-unadopted MiCA implementing ordinance. [resolved]
fim-int-2026-11-01-G001: Tier D watch jurisdictions (KH, LA,…
fim-int-2026-11-01-G001: Tier D watch jurisdictions (KH, LA, MX, CO) were not actively re-searched this cycle; this is a coverage gap, not a confirmed no-change. [open]
fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', 'value': 'D3'}): Pinpoint date of the specific 17-entity crypto-services sanctions-evasion listing within the ONPCSB circular was not confirmed from the retrieved excerpt. [open]
FIM-GAP-001 (D2): MONEYVAL's 2023 MER rated Romania non-comp…
FIM-GAP-001 (D2): MONEYVAL's 2023 MER rated Romania non-compliant (NC) on R.26 (regulation and supervision of financial institutions), the only Recommendation to receive the lowest rating; the March 2026 follow-up confirmed only partial progress on such technical compliance deficiencies.
FIM-GAP-002 (D2): MONEYVAL assessors found that a lack of te…
FIM-GAP-002 (D2): MONEYVAL assessors found that a lack of technical and human resources at NOPCML (the FIU) hampers the quantity and quality of financial intelligence it can provide to law enforcement and other partners, compounded by a shortage of financial investigators more broadly.
FIM-GAP-003 (D2): The ONRC's beneficial-ownership register i…
FIM-GAP-003 (D2): The ONRC's beneficial-ownership register infrastructure suffered a EUR 38 million IT-platform failure (launched summer 2024) that blocked over 130,000 registrations and exposed personal data of more than 3,000 individuals; auditors found the system was signed off nine months before launch without adequate testing.
FIM-GAP-004 (D1): MONEYVAL found no overarching AML/CFT stra…
FIM-GAP-004 (D1): MONEYVAL found no overarching AML/CFT strategy exists in Romania; while numerous sector-specific strategies address corruption, trafficking and organised crime, information on the level of risk mitigation actually achieved is not comprehensive.

Evidence

Confidence-tiered claims

Romania rated compliant on 7, largely compliant on 18, partially compliant on 15 of the 40 FATF Recommendations per MONEYVAL's 6 July 2026 follow-up report; under 5th-round enhanced follow-up procedure [Source 1]
Probable · 1 source
RBR remains publicly searchable; draft 2025 legislation may restrict access to parties demonstrating a legitimate interest, mirroring post-2022 CJEU trend; new ONRC filing fees (RON 200) took effect 1 January 2026 [Source 1]
Uncertain · 1 source
18-month Article 143(3) grandfathering window for legacy crypto-asset providers ended 1 July 2026; unauthorised crypto-asset service provision after that date is unlawful [Source 1]
Probable · 1 source
Romania directly bound by AMLR (Reg (EU) 2024/1624) from 10 July 2027 as an EU-27 member; harmonised 25% BO threshold (15% for higher-risk sectors) and EUR 10,000 cash-payment limit become directly applicable [Source 1]
Probable · 1 source
Targeted-financial-sanctions technical compliance remains only partially compliant per MONEYVAL's 6 July 2026 follow-up report, an architecture-level gap [Source 1]
Probable · 1 source
EU Commission letter of formal notice (25 Sept 2026) for incomplete 6AMLD transposition [Source 1]
Probable · 1 source
MiCA (Regulation (EU) 2023/1114); ASF (Autoritatea de Supraveghere Financiară) is designated as principal competent authority for CASPs in Romania, issuing official operating licences and supervising exchanges, brokers, crypto ATMs, and ART issuers (unlicensed firms barred from operating from 1 July 2026). [Source 1]
Probable · 1 source
2nd Enhanced Follow-up Report: 7 of 40 Recommendations compliant, 20 largely compliant, 13 partially compliant, remains under enhanced follow-up [Source 1]
Probable · 1 source
fraud is the #2 predicate offence by laundered-proceeds disseminations (14.56% of PICCJ disseminations) [Source 1]
Probable · 1 source
10 individuals and 17 entities under Russia human-rights restrictive measures regime (Council Decision (CFSP) 2026/2164) [Source 1]
Probable · 1 source
Zero MiCA-authorised CASPs as of mid-October 2026 [Source 1]
Probable · 1 source
Public access restricted to parties demonstrating 'legitimate interest' since May 2025; EU Commission infringement procedure opened Sept 2026 over 6AMLD BO-access transposition notification [Source 1]
Probable · 1 source
2nd Enhanced Follow-up Report adopted at 71st Plenary (May 2026), published 6 July 2026; improved technical compliance on targeted financial sanctions since 1st FUR, remains in enhanced follow-up [Source 1]
Probable · 1 source
CASPs integrated as AML-obliged entities under Law 129/2019; EU Funds Transfer (travel rule) Regulation transposed, effective 13 March 2025 [Source 1]
Probable · 1 source
mica_competent_authority_designated [Source 1]
Probable · 1 source
Romania remains in MONEYVAL enhanced follow-up under the 5th Round mutual evaluation; compliant with 7 Recommendations, largely compliant with 20, partially compliant with 13. [Source 1]
Probable · 1 source
Joint stock companies must update changes in beneficial ownership within 15 days of a change occurring. [Source 1]
Probable · 1 source
ONPCSB relayed EU Council designations including sanctions against 17 third-country financial entities offering crypto services to evade Russia sanctions, and a transaction ban covering 33 Russian banks. [Source 1]
Probable · 1 source
Romania remains under MONEYVAL's second enhanced follow-up procedure, with virtual-asset/VASP technical-compliance deficiencies unresolved. [Source 1]
Probable · 1 source
Romania maintains no independent national sanctions list, referring only to EU and UN designations. [Source 1]
Probable · 1 source
Joint-stock companies must update changes in beneficial ownership within 15 days of a change occurring [Source 1]
Probable · 1 source
Second enhanced follow-up procedure, with virtual-asset/VASP technical-compliance deficiencies from the original mutual evaluation still unresolved [Source 1]
Probable · 1 source
Circulated EU Council acts extending Russia-related restrictive measures, including designations against 17 third-country financial entities offering crypto services to facilitate sanctions evasion and a transaction ban on 33 Russian banks [Source 1]
Probable · 1 source
EU and UN sanctions lists; no autonomous national designation list [Source 1]
Probable · 1 source