Illustrative firm examples
Spain country research brief
Research dated 2026-10-11 · Reviewed 2026-10-10
Version 1c84dbb096c8
1c84dbb096c820a0d407bc907471f6921024c2399f85f8ae8b15d5a0b7803ffdScope: Illustrative firm examples. The selector is not an authorisation or legal-applicability determination. Source-check observations concern retrieval/access only and do not establish legal currentness; the research date is the content date boundary. Source health: dated-research, checked 2026-10-12T06:20:10.436Z.
Framework and authorities
A bounded view of Ley 10/2010
Selected identity, examination and reporting duties attach to statutory obliged entities and activities, not every company or customer. Article 42 financial sanctions have a wider actor scope. The complete Spanish consolidation published in the Official State Gazette (Boletín Oficial del Estado, BOE), updated 30 September 2026, is informative and has no legal force; the original Act and cited amendments are the promulgated evidence. This is not a complete amendment, sector-rule or permissions map.
Three selected provisions, not a full rule inventory
Examples cover identity checks, special examination and reporting to the Executive Service of the Commission (SEPBLAC), Spain's financial intelligence service. A profile label alone does not prove a firm is obliged; confirm its legal form, activity, role and sector rules.
Risk, assessment and sanctions context
National risk assessment, not a customer score
Spain's 2026 national risk assessment names organised crime and drug trafficking as leading money-laundering threats, alongside growing fraud, large value-added-tax schemes and corruption. Terrorist-financing methods combine cash or informal transfer with digital channels. The report highlights electronic-money and remittance exposure but gives conflicting residual grades in its summary and detailed sections; this brief assigns no single grade. These are national/sector findings, not customer or firm scores. Assess the actual customer, service, geography and controls.
Sanctions: apply the relevant measure, not a static country list
Ley 10/2010 Article 42, replaced by Royal Decree-Law 7/2026, applies specified financial sanctions to any natural or legal person, immediately on designation. Covered European Union (EU) measures and United Nations Security Council terrorism/proliferation measures require freezing/blocking and prohibit making funds, assets, economic resources or financial services available. The stated UN humanitarian exception applies. If no EU designation transposes the UN measure within one month, continued freezing/blocking requires an express Treasury decision; this is not a grace period. Third-country countermeasures require the competent Council of Ministers decision. Check the actual measure and scope; no designation or match was checked.
Selected firm implications
Meaning: An obliged entity identifies parties and verifies identity with reliable documents before a relationship or operation proceeds. It must not deal with unidentified persons or keep anonymous/fictitious-name accounts.
Conditions: Applies to statutory obliged entities before a relationship or operation. Article 12 permits delayed checks only where reliable documents are initially unavailable and there are no risk indicators.
Exceptions: Article 12 is a conditional route, not a general waiver.
Suggested action: Before covered business, identify each party and verify identity; escalate inability to verify.
Legislation / Binding · Artículo 3Meaning: An obliged entity records the examination. Scrutinise complex or unusual patterns, those with no apparent economic or lawful purpose, and signs of simulation or fraud. Internal controls set the process, circulate and periodically review red flags, and provide suitable tools.
Conditions: Any potential connection triggers the duty; no minimum amount. It applies to the obliged entity.
Exceptions: No amount exception. A red flag prompts examination; it does not alone meet Article 18's reporting test.
Suggested action: Document a special examination of any potentially linked fact or transaction, regardless of value.
Legislation / Binding · Artículo 17Meaning: An obliged entity reports a qualifying suspicion or indication after special examination, including attempted operations and marked unexplained mismatches with known activity. Give the prescribed parties, activity, linked transactions, amounts, dates, payment means, investigative steps and reasons; record attempts as unexecuted and report available information.
Conditions: Requires prior structured examination and a statutory trigger; use the prescribed format without delay.
Exceptions: No monetary threshold or general safe harbour is stated here. Check Article 22 professional secrecy and sector-specific limits separately.
Suggested action: If Article 18's test is met after examination, report to SEPBLAC without delay.
Legislation / Binding · Artículo 18Notices and limitations
- Illustrative bank, payments and crypto examples, not an assessed firm profile.
- Product/customer exposure alone is not statutory applicability. This is not a licensing guide.
- Local entity / domestic activity selected.
- 3 representative obligations; see the full register for other duties.
- Source observations are unavailable, stale, failed or review-required. This dated brief does not confirm today's legal position.
- Currentness is bounded to the complete BOE consolidation updated 30 September 2026 and the selected promulgated originals. BOE labels that consolidation informative and without legal force; this is not a provision-by-provision audit of all amendments, commencement, repeals, transitional rules or sector overlays.
- The 284-page national risk assessment is sector context, not a customer score or perimeter decision; cited passages were text-checked, not every page visually inspected.
- Financial Action Task Force (FATF) report/schedule and a fresh Treasury PDF requests returned HTTP 403. Outcomes and headers are recorded individually. No FATF rating, membership or list status is asserted.
- No live sanctions designation, match, licence, operational report workflow or firm permissions were checked; case decisions need current instrument-specific review.
- English is a research paraphrase checked against Spanish originals, not an official translation or legal advice.
Evidence sources
Original source documents are not reproduced in this brief. Retained originals are private research evidence; use the official-source links.
- Official Informative Consolidation · BOE · 30 Sep 2026; informative, no legal force · Full consolidation; Arts. 2-3, 10, 17-18, 42
- Official Legislation Original · Boletín Oficial del Estado (BOE) · Original Spanish promulgation; full retained PDF · Original Act; Arts. 2-3, 17-18, 22
- Official Legislation Original · Boletín Oficial del Estado (BOE) · Original Spanish amendment; full retained PDF · Arts. 3.3 and 3.11 amending Ley Arts. 3 and 18
- Official National Risk Assessment · Tesoro Público / Comisión de Prevención del Blanqueo de Capitales e Infracciones Monetarias · Public report approved 12 Jun 2026; complete 284-page PDF · Summary paras. 3-7 (PDF pp. 4-5); method 15-23 (pp. 7-8); remittance 256-257 (pp. 96-97); e-money 302-303 (pp. 114-115); conclusions 675-679
- Official Legislation Original · Boletín Oficial del Estado (BOE) · Original Spanish amendment; published 21 Mar, in force 22 Mar 2026 · Final provision 6; Ley 10/2010 Art. 42(1)-(6)
Ley 10/2010 consolidation, 30 Sep 2026
30 Sep 2026; informative, no legal force · Full consolidation; Arts. 2-3, 10, 17-18, 42
Source record
Retrieved 2026-10-10T23:16:52Z. SHA-256: 10611f1942f61c89da516bb0087a7917e30ec5e00380fa6f85567e7c34140cdd
Source retrieval check
observed · Checked 2026-10-12T06:20:06.828Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Ley 10/2010, BOE-A-2010-6737
Original Spanish promulgation; full retained PDF · Original Act; Arts. 2-3, 17-18, 22
Source record
Retrieved 2026-09-27T00:00:00.000Z. SHA-256: 3987a184d074283fa58748134adbd2ba38611e541ca8e4e73c0255e7da5f0e20
Source retrieval check
observed · Checked 2026-10-12T06:20:08.720Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Real Decreto-ley 7/2021, BOE-A-2021-6872
Original Spanish amendment; full retained PDF · Arts. 3.3 and 3.11 amending Ley Arts. 3 and 18
Source record
Retrieved 2026-09-27T00:00:00.000Z. SHA-256: 0ce74f56bb792410c5f72a7dca1649a55ee5be15b5fdc1bd2969037e6dfeed21
Source retrieval check
observed · Checked 2026-10-12T06:20:09.320Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Spain national risk assessment, 2026
Public report approved 12 Jun 2026; complete 284-page PDF · Summary paras. 3-7 (PDF pp. 4-5); method 15-23 (pp. 7-8); remittance 256-257 (pp. 96-97); e-money 302-303 (pp. 114-115); conclusions 675-679
Source record
Retrieved 2026-09-27T00:00:00.000Z. SHA-256: b35cb15757475ea408c3728a81713f32ee98afde5957ac2fa3d6e85933be0968
Source retrieval check
failed · Checked 2026-10-12T06:20:10.057Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Real Decreto-ley 7/2026, BOE-A-2026-6544
Original Spanish amendment; published 21 Mar, in force 22 Mar 2026 · Final provision 6; Ley 10/2010 Art. 42(1)-(6)
Source record
Retrieved 2026-09-27T00:00:00.000Z. SHA-256: 15b197d9ff9d22dbbc35474b6b6278e3843e7f77fb878f956106eaf4ee565750
Source retrieval check
observed · Checked 2026-10-12T06:20:10.436Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Retail bank
Meaning
An obliged entity identifies parties and verifies identity with reliable documents before a relationship or operation proceeds. It must not deal with unidentified persons or keep anonymous/fictitious-name accounts.
Full public provision explanation
Every obliged entity must identify each natural or legal person who seeks to establish a business relationship or take part in a transaction, and must never maintain a relationship or carry out a transaction with anyone not duly identified. Numbered, coded, anonymous or fictitious-name accounts, savings books, safe-deposit boxes, assets and instruments are prohibited. Identity must be verified with reliable documents (listed in Royal Decree 304/2014, Article 6) before the relationship or any transaction; if that is not possible at the outset, the Article 12 rules may be applied unless the transaction shows risk factors. In life insurance, the policyholder must be verified before the contract is concluded, and the beneficiary in all cases before any benefit is paid or any surrender, advance or pledge right is exercised.
Suggested action
Before covered business, identify each party and verify identity; escalate inability to verify.
Conditions
Applies to statutory obliged entities before a relationship or operation. Article 12 permits delayed checks only where reliable documents are initially unavailable and there are no risk indicators.
- Applies before any business relationship is established or any transaction executed; life-insurance beneficiaries are verified before payout or exercise of policy rights.
Exceptions
Article 12 is a conditional route, not a general waiver.
- Where reliable documents cannot be obtained at the outset, Article 12 may be applied unless the transaction shows risk factors.
Payments and e-money
Meaning
An obliged entity records the examination. Scrutinise complex or unusual patterns, those with no apparent economic or lawful purpose, and signs of simulation or fraud. Internal controls set the process, circulate and periodically review red flags, and provide suitable tools.
Full public provision explanation
Creates the core "look harder" duty: scrutinise any fact or transaction that could, by nature, relate to money laundering or terrorist financing, regardless of amount, and record the examination result in writing. Give particular attention to complex or unusual transactions or behaviour, those with no apparent economic or lawful purpose, and signs of simulation or fraud. Embed the examination process in internal controls through a circulated and periodically reviewed red-flag list and appropriate computer applications, calibrated to operations, sector, geography and information volume.
Suggested action
Document a special examination of any potentially linked fact or transaction, regardless of value.
Conditions
Any potential connection triggers the duty; no minimum amount. It applies to the obliged entity.
Exceptions
No amount exception. A red flag prompts examination; it does not alone meet Article 18's reporting test.
Crypto and digital assets
Meaning
An obliged entity reports a qualifying suspicion or indication after special examination, including attempted operations and marked unexplained mismatches with known activity. Give the prescribed parties, activity, linked transactions, amounts, dates, payment means, investigative steps and reasons; record attempts as unexecuted and report available information.
Full public provision explanation
After the Article 17 special examination, an obliged entity must report to SEPBLAC (the Executive Service of the Commission), on its own initiative and without delay, any fact or transaction, including mere attempts, where there is an indication or certainty of a link with money laundering, its predicate offences or terrorist financing, i.e. where it knows, suspects or has reasonable grounds to suspect such a link, including obvious mismatches with the client's nature, volume of activity or history with no economic, professional or business justification. The report follows the Article 26 procedures and must include: the parties and their roles; their known activity and its fit with the transaction; the related transactions (dates, nature, currency, amount, places, purpose, payment instruments); the steps taken to investigate; the circumstances supporting the indication or the lack of justification; and any data set by regulation. It must be preceded by a structured special examination; SEPBLAC may return an insufficient report for deeper examination. Attempted transactions are recorded as not executed and the information obtained is reported. Reports use SEPBLAC's medium and format. A manager or employee who raised a case internally and was not told what happened to it may report directly to SEPBLAC.
Suggested action
If Article 18's test is met after examination, report to SEPBLAC without delay.
Conditions
Requires prior structured examination and a statutory trigger; use the prescribed format without delay.
Exceptions
No monetary threshold or general safe harbour is stated here. Check Article 22 professional secrecy and sector-specific limits separately.