Weekly briefing · 27 July 2026

Cyprus AML & Sanctions — this week

EU and Cyprus AML developments, summarised for compliance teams · published by Ioannou & Sharpe LLC
You are reading an archived issue. Read the latest briefing →

The dominant development this week is the EU's 21st sanctions package against Russia, circulated by the CBA (Circular 15/2026) and ICPAC (CC 26/2026) — all obliged entities must update screening lists and review Russian-connected client files. AMLA published three items on its supervisory framework (cooperation standards, risk assessment taxonomy, and provisional entity identification), which are relevant preparation for when AMLA's direct supervision begins. FATF issued two statements on DeFi and virtual asset illicit finance risks, signalling continued regulatory focus on crypto.

Top priorities for obliged entities

EU 21st sanctions package against Russia — CBA Circular 15/2026 & ICPAC CC 26/2026

All obliged entities must update their sanctions screening lists with the new designations immediately and re-screen any client files with Russian, Belarusian, or connected exposure.

EC Q&A on the 21st Russia sanctions package

The Commission's questions-and-answers document provides interpretive guidance on the new package; compliance officers should review it to understand scope changes, new sectoral measures, and any clarifications affecting existing client relationships.

FATF statements on DeFi and virtual asset illicit finance risks

FATF is flagging emerging risks from DeFi and evolving virtual asset threats — relevant for any obliged entity with crypto-exposed clients and indicative of future regulatory expectations for VASP-adjacent CDD.

AMLA supervisory cooperation standards finalised

AMLA has finalised standards for how national supervisors will cooperate in direct supervision of selected entities — obliged entities in sectors due for AMLA oversight (banks, CASPs, certain TCSPs) should monitor how this will affect their supervisory relationships.

AMLA risk assessment taxonomy update for 2027 data collection

Updated taxonomy for the 2027 AMLA risk assessment data collection signals what data national supervisors will require; worth noting for compliance teams preparing for upcoming reporting cycles.

Get this briefing by email, every week

One email a week. No tracking, no spam — unsubscribe with one reply.

By subscribing you consent to receiving the weekly briefing at this address. We use it for nothing else. Unsubscribe anytime: reply or email [email protected].
Subscribed — the next briefing will land in your inbox. ✓
This is the general edition. FIRMCY customers get a sector-tailored briefing inside the app — law firms, accountants & auditors, investment firms and betting operators each see the priorities mapped to their own licence types and supervisor (CySEC, ICPAC, Bar Association, NBA), alongside their screening work.
Start screening — 100 free credits

What we monitor

AMLA — EU Anti-Money Laundering Authority, CySEC — AML/CFT circulars, Cyprus Bar Association — AML announcements, EBA — European Banking Authority, ESMA — European Securities and Markets Authority, European Commission — Sanctions (press), FATF — publications & news, ICPAC — AML circulars & alerts, MOKAS — Cyprus FIU, National Betting Authority — AML directives.

More from FIRMCY

FATF & EU high-risk country lists — current listings · Daily sanctions list updates · Free PEP & sanctions check · Past issues

© 2026 Ioannou & Sharpe LLC · VAT CY60007091D · Griva Digeni, Limassol Center, Block B, 3rd Floor, Office 304, 3095 Limassol, Cyprus · [email protected]
Not legal advice. This briefing summarises public regulatory announcements; verify against the primary source before acting.