Server-rendered tracker page for aml regulation in EU. This page is built for Google and LLM crawlers: every event below links to a permanent policy-event URL with source data and APAC FINSTAB analysis.
Jurisdiction: EU. Regulator: Financial regulator. Topic: AML. Latest event: July 25, 2026 — EU Expands Russia Sanctions To Fourteen Crypto Platforms And Entities.
Use this page to compare rule changes, licensing signals, enforcement posture, and market-access implications for exchanges, stablecoin issuers, protocols, custodians and institutional teams operating across APAC.
The EU's 21st Russia sanctions package expanded transaction bans to 14 offshore crypto platforms and related entities, including names such as Rapira, BitPapa, HTX and EXMO. The action increases sanctions-screening, Travel Rule and counterparty blacklist obligations for exchanges with Russia-linked exposure.
ESMA warned that fraudsters are abusing the end of the MiCA transition period to target crypto-asset service providers with phishing emails and fake urgent fee demands. CASPs need stronger verification controls around regulator communications during the post-transition licensing window.
French police arrested a mother and son accused of stealing EUR1.5 million in crypto during a fake luxury-villa sale, after investigators alleged hidden cameras were used to capture wallet credentials. The case highlights growing European enforcement focus on crypto-enabled social engineering and high-value fraud.
Ireland's Criminal Assets Bureau reportedly recovered another 500 BTC tied to the Clifton Collins criminal-assets case, bringing 2026 recoveries in the matter to 1,500 BTC. The recovery underscores exchange and custody obligations when large historical crime proceeds move into regulated infrastructure.
Europol said Operation Endgame disrupted SocGholish, Amadey and StealC infrastructure while identifying, freezing or restricting more than EUR41 million in criminal cryptocurrency assets. The action reinforces AML and KYT expectations around malware, credential theft and ransomware-linked flows.
Regulation (EU) 2024/1624 will apply from July 2027 and creates a single AML rulebook for obliged entities, including crypto-asset service providers. CASPs face harmonized customer due diligence expectations as EU AML supervision tightens around crypto transfers and occasional transactions.
The European Commission proposed a 21st Russia sanctions package covering energy, financial services and crypto networks. The package would extend restrictions to crypto platforms and third-country facilitators alleged to help Russia evade Western measures, raising sanctions-screening pressure on exchanges and payment intermediaries.
ESMA's MiCA transition guidance and AMF's France reminder confirm that crypto asset service providers without MiCA authorization must cease services after the July 1, 2026 cutoff. The deadline raises licensing and wind-down pressure for EU CASPs, especially firms still relying on legacy national registrations.
StablR-linked EURR and USDR stablecoin contracts were reportedly exploited after privileged minting controls were compromised, with losses reported above $3 million and market confidence hit. The incident highlights that stablecoin compliance review must cover on-chain mint authority, multisig thresholds, admin-key custody and depeg response in addition to reserve disclosures.