Italy: illustrative Rome Tiber and Castel Sant Angelo

Illustrative firm examples

Italy country research brief

Research dated 2026-10-10 · Reviewed 2026-10-10

Version 093d97953e00093d97953e006d1b004a773f96e3f0488271987a867983fca30111faaa1b541b

Scope: Illustrative firm examples. The selector is not an authorisation or legal-applicability determination. Source-check observations concern retrieval/access only and do not establish legal currentness; the research date is the content date boundary. Source health: review-required, checked 2026-10-12T06:05:23.490Z.

1

Framework and authorities

A statutory perimeter with divided authorities

D.Lgs. 231/2007 sets duties for the obliged entities and activities it names; a profile or product label alone does not prove coverage. The Ministry of Economy and Finance / Financial Security Committee coordinates national policy and risk assessment. Banca d'Italia supervises its statutory financial-sector remit; CONSOB has separate functions, including under the MiCAR adaptation decree. UIF is the financial intelligence unit and issues suspicious-transaction instructions. IVASS and professional self-regulatory bodies have allocated sectors. This is not a complete supervisor or provider-authorisation map.

What is current, and what is not established

The three reviewed register rows bind to the complete Normattiva text effective 24 July 2026. A 10 October identity page shows ELI version date 10 October and latest act update 23 July, but is not the complete body. Gazette originals establish D.Lgs. 122/2026 (in force 23 July) and D.Lgs. 129/2024 (in force 14 September 2024), not a full later-amendment audit. Examples describe only the reviewed edition; October wording and applicability remain unverified. The printed Gazette is the authentic enactment; Normattiva is the electronic consolidation and does not prevail on discrepancy.

2

Risk, FATF and sanctions context

National risk and FATF evidence

The 2024 Italian national risk assessment covers money laundering (ML) and terrorist financing (TF), identifying threats, system vulnerabilities and sector exposure and assessing the effectiveness of prevention, investigation and enforcement over 2019-2023. It is dated national context, not a customer rating or a separate proliferation-financing (PF) assessment. No complete original of the 2026 FATF mutual evaluation was retained: the official download was inaccessible and no complete government-hosted mirror was verified. I therefore omit FATF ratings, follow-up status and current-list conclusions rather than infer them from a page or search excerpt.

Sanctions depend on the instrument and nexus

For an Italian case, identify the applicable EU regulation and any national measure; confirm the named persons, territorial and actor scope, ownership/control rules, prohibitions, licences and reporting route in the actual instrument. Banca d'Italia's September 2026 communication is supervisory procedure context for its own perimeter, not a sanctions list. UK or U.S. rules are not assumed to govern every Italian business or euro payment: test the relevant person's, territory's and transaction's nexus under that regime and check ownership/control. No live designation or current list was checked. The complete current D.Lgs. 109/2007 sanctions text and activity-specific reporting routes remain unverified.

3

Selected firm implications

Meaning: Use objective, consistent methods proportionate to activity and size; assess ML/TF risks by customer type, geography, channel and product/service.

Conditions: Follow criteria and methods set by the sector supervisor or self-regulatory body; no fixed interval is set.

Exceptions: Only the sector supervisor may exclude its categories for negligible activity risk or products/services with standardised risk characteristics, informing the Financial Security Committee.

Suggested action: Document and periodically update the assessment; make it available to specified authorities and self-regulatory bodies.

Legislation / Binding · Art. 15

Meaning: Consider customer legal form/activity/conduct/location; transaction or relationship type, method, amount, frequency, volume, duration, reasonableness against activity/resources, destination and subject.

Conditions: Triggers: relationship/engagement; customer-instructed occasional payment EUR 15k+ incl linked/split; funds/crypto transfer >EUR 1k; gaming; any suspicion or identity-data doubt. Existing customers: changed ML/TF risk when due diligence is appropriate, plus Directive 2011/16/EU/national tax-cooperation duties. Art. 17(3): proportionate/current measures; demonstrate adequacy to Art. 21-bis(1)(a) authorities and self-regulatory bodies. Art. 17(5) separately: banks, e-money/payment institutions and Poste Italiane as intermediary/party in cash/bearer transfers between persons totaling EUR 15k+. Art. 17(6): these institutions, including other-Member-State head offices and branches, via Art. 3(3)(c) agents or Art. 1(2)(nn) contracted entities/agents; any-amount occasional payment/e-money; cash withdrawal only >EUR 250/day. Art. 44(3) applies to Art. 1(2)(nn).

Exceptions: Only preparing/submitting, or submitting alone, specified tax returns and personnel-administration filings is excluded; suspicion/data-doubt triggers remain.

Suggested action: Scale due diligence to risk; show adequacy and use current information.

Legislation / Binding · Art. 17

Meaning: Trigger: knowledge, suspicion or reasonable grounds that ML/TF is ongoing, completed or attempted, or funds derive from crime, any amount. Assess transaction characteristics, amount, nature, links/splitting, other known circumstances, the person's economic capacity/activity and information held. Frequent/unjustified cash below Article 49's threshold is an indicator. Report data, transaction description and reasons; answer UIF requests promptly. Good-faith reports are protected.

Conditions: Apply the statutory suspicion test; UIF reporting practice is separately dated and sourced in the framework section.

Exceptions: Three hold exceptions: law requires receipt; normal operations prevent delay; delay may obstruct investigation. Notify UIF immediately after execution/receipt. Professional exception is limited to client information received/obtained during legal-position assessment or defence/representation in/related to judicial proceedings (including assisted negotiation and advice to bring/avoid proceedings), before/during/after.

Suggested action: Report without delay before the transaction; hold until filing unless an exception applies.

Legislation / Binding · Art. 35

Notices and limitations

  • Illustrative bank, payments and crypto examples, not an assessed firm profile.
  • Product/customer exposure alone is not statutory applicability. This is not a licensing guide.
  • Local entity / domestic activity selected.
  • 3 representative obligations; see the full register for other duties.
  • Source observations are unavailable, stale, failed or review-required. This dated brief does not confirm today's legal position.
  • Three examples bind to the reviewed 24 July 2026 edition; October law is unverified.

Evidence sources

Original source documents are not reproduced in this brief. Retained originals are private research evidence; use the official-source links.

  1. Official Legislation Original · Normattiva · Normattiva consolidation through 23 Jul 2026 (reviewed 24 Jul) · Arts. 15, 17, 35
  2. Official Legislation Identity Record · Normattiva · ELI date 10 Oct 2026; update 23 Jul; identity record, not full text · ELI version date and displayed latest-act update only; no substantive current-law claim
  3. Official Gazette Original · Gazzetta Ufficiale della Repubblica Italiana · GU 156, 8 Jul 2026; Arts. 1-3; effective 23 Jul · D.Lgs. 122/2026, Arts. 1-3 (especially Art. 2(1)); printed issue retained in full
  4. Official Legislation Original · Normattiva · Normattiva text, Arts. 1-3; effective 23 Jul 2026 · Official electronic text and commencement identity; no operational register-status claim
  5. Official Gazette Original · Gazzetta Ufficiale (Italy) · Complete GU 215, 13 Sep 2024; effective 14 Sep 2024 · D.Lgs. 129/2024, Arts. 1-5 (MiCAR authorities/powers); full issue
  6. Official Legislation Identity Record · Normattiva · Multi-version page; latest update 23 Jul 2026 · Identity/update only; printed enactment cited separately
  7. Official Fiu Instruction · UIF (Banca d'Italia) · Complete 31-page original; issued 18 Dec 2025; effective 1 Jul 2026 · Parts I/III; Part II has a limited recipient perimeter
  8. Official National Risk Assessment · Comitato di Sicurezza Finanziaria / Dipartimento del Tesoro · Complete official Italian 124-page national risk assessment · Introduction/methodology, pp. 4-5; ML and TF risk analyses; excludes a separate PF assessment
  9. Official Supervisory Guidance · Banca d'Italia · Official supervisory communication dated 7 Sep 2026 · Supervisory perimeter and internal procedure context; not a sanctions list or universal rule
  10. Official Supervisory Information · CONSOB (Italy) · Index captured 27 Sep 2026; not full inventory · Authority navigation; activity-specific rules unverified
  11. Official Sanctions Guidance · European Commission · Official Commission page captured 9 Oct 2026; shared retained original reused · Find and read the EU restrictive-measure instrument applicable to the case
  12. Official Foreign Sanctions Guidance · HM Treasury, Office of Financial Sanctions Implementation · Official guidance updated 12 May 2026; shared retained original reused · Territorial/person scope and ownership/control; assess nexus under the particular regime
  13. Official Foreign Sanctions Guidance · U.S. Department of the Treasury, Office of Foreign Assets Control · Official FAQ page captured 9 Oct 2026; shared retained original reused · FAQ 11, U.S.-person and territorial scope; no automatic Italian nexus

Evidence details