Illustrative firm examples
Poland country research brief
Research dated 2026-10-09 · Reviewed 2026-10-09
Version 73b701aab32c
73b701aab32c203185aba76d48d6581a6c1ede80e9352ef65c32240f97cf6404Scope: Illustrative firm examples. The selector is not an authorisation or legal-applicability determination. Source-check observations concern retrieval/access only and do not establish legal currentness; the research date is the content date boundary. Source health: review-required, checked 2026-10-12T05:30:52.370Z.
Legal and supervisory framework
Scope and authorities
Poland's Act of 1 March 2018 on Counteracting Money Laundering and Financing of Terrorism applies to defined obliged institutions and activities, not every company. The General Inspector of Financial Information (GIIF) is the financial intelligence unit. Sector supervisors are named in the Act; this brief does not map them all. The retained Sejm text was prepared 8 October 2026. Selected rules are read as in force on 9 October 2026; this is not a complete amendment audit.
Risk-based controls, customer checks and reporting
An obliged institution assesses and documents money-laundering (ML) and terrorist-financing (TF) risk for each relationship or occasional transaction, then scales customer due diligence (CDD) to that risk. CDD starts at relationship formation and specified transaction, suspicion or identity-doubt triggers; thresholds depend on transaction and actor. Article 74 suspicion reporting is distinct from Article 86 transaction restraint. Article 75 preserves confidentiality for specified legal professionals and listed legal-service contexts. Guidance and national risk assessments inform context; they are not separate duties.
Risk, monitoring and sanctions context
Dated national and FATF evidence
The Ministry lists Poland's 2023 ML/TF national risk assessment (NRA), following the 2019 edition; GIIF's 2025 report records work toward another. The 2023 model rated overall ML risk 2.59 (medium), residual ML risk about 2.66 (high) and TF risk about 2.11 (medium). Its sector annex rated ML risk high for banking, non-bank payments, currency exchange and virtual-currency services; TF risk high for non-bank payments and physical cross-border asset carriage. These are dated national estimates, not customer scores. No separate Polish proliferation-financing (PF) assessment was retained or located. FATF/MONEYVAL technical ratings, effectiveness and current monitoring status are unverified: report/list originals were not retained; web-reader observations are not evidence.
Domestic, UN, EU and foreign sanctions nexus
AML Act Articles 117-120 require asset-freezing/non-availability measures for Article 118-listed persons: specified UN Security Council counter-terrorism lists published by GIIF and Poland's Article 120 national list. The Ministry of Foreign Affairs coordinates sanctions policy; the Head of the National Revenue Administration handles financial sanctions and GIIF counter-terrorism aspects. The Interior Minister maintains a separate list under the 13 April 2022 Act. EU restrictions turn on each regulation's scope, ownership/control, prohibitions, licences and exceptions. UK/U.S. measures apply only where their own nexus is met; Polish presence or a foreign customer alone is insufficient. No live list was checked.
Selected firm implications
Meaning: An obliged institution assesses and documents ML/TF risk for each relationship or occasional transaction, then scales CDD accordingly.
Conditions: Only obliged institutions; assess each relationship or occasional transaction.
Exceptions: No uniform customer score is prescribed.
Suggested action: Record risk factors and link CDD intensity to the relationship or occasional transaction.
Legislation / Binding · Art. 33Meaning: CDD applies at relationship start and for occasional transactions >=EUR 15,000; funds transfers >EUR 1,000; virtual-currency transactions >=EUR 1,000 (Article 2(1)(12)); cash >=EUR 10,000 (Article 2(1)(21)-(23)); gambling stakes/winnings >=EUR 2,000 (Article 2(1)(20)); any ML/TF suspicion; or doubt about identity data.
Conditions: General occasional-transaction/funds-transfer branches apply to obliged institutions; virtual-currency, cash and gambling branches use the stated Article 2 actors. Linked aggregation is express for general EUR 15,000, cash and gambling branches.
Exceptions: Threshold branches differ; suspicion and identity-doubt have no minimum amount.
Suggested action: Match the trigger, transaction type and actor; aggregate linked transactions where stated.
Legislation / Binding · Art. 35Meaning: An obliged institution reports circumstances indicating a possible ML/TF offence. The clock runs from its confirmation of suspicion.
Conditions: Confirmed suspicion; this Article 74 notice is separate from Article 86 restraint.
Exceptions: Article 75 protects specified information held by listed legal professionals in defined legal-service contexts.
Suggested action: Report confirmed suspicious circumstances to GIIF immediately, no later than two working days.
Legislation / Binding · Art. 74Notices and limitations
- Illustrative bank, payments and crypto examples, not an assessed firm profile.
- Product/customer exposure alone is not statutory applicability. This is not a licensing guide.
- Local entity / domestic activity selected.
- 3 representative obligations from 5 editorial matches; see the full register for other duties.
- Source observations are unavailable, stale, failed or review-required. This dated brief does not confirm today's legal position.
- Selected provisions only; no full amendment audit.
- FATF/MONEYVAL ratings, effectiveness and monitoring status unverified; originals inaccessible.
- ML/TF NRA: 2023. GIIF's 2025 report notes update work; no separate PF assessment found.
- No live sanctions list or regime audit; full 2022 domestic sanctions Act not retained.
- Mappings are selective, not legal determinations. No reproduction rights or approval implied.
Evidence sources
Original source documents are not reproduced in this brief. Retained originals are private research evidence; use the official-source links.
- Official Legislation Original · Sejm / ELI · Sejm consolidated text prepared 2026-10-08; header lists Dz.U. 2025 poz. 644, 1669 and Dz.U. 2026 poz. 875, 1206; provisions with future commencement are not treated as in force · Arts. 2, 10, 12, 27, 33-35, 58-61, 74-75, 86, 90, 92, 117-120 and 130
- Official Legislation Original · Sejm / ELI · Official promulgated Act; AML Act Article 72 amendment effective 2026-06-30 · Art. 6 amends AML Act Art. 72; Art. 9 commencement
- Official Legislation Original · Sejm / ELI · Official promulgated Act; AML company/trust-services register changes commence 2027-01-01 · Art. 15 amends AML Act Arts. 129f and 129h; Art. 22 commencement
- Official Legislation Original · Sejm / ELI · Official promulgated Act; AML Act Arts. 2 and 89 amendments commence 2027-01-11 · Art. 33 amends AML Act Arts. 2 and 89; Art. 57 commencement
- Official Publication Index · Ministry of Finance / GIIF · Full official response captured 2026-10-09; lists the 2023 and 2019 assessments · 2023 assessment and its linked full report / Annex 2
- Official National Risk Assessment · Ministry of Finance / GIIF · Full Polish original, Warsaw 2023; national estimates are the report's modelled results, not customer ratings · Printed pp. 314-320, 322; paras. 855, 902-903, 912, 922-928
- Official National Sector Risk Assessment · Ministry of Finance / GIIF · Full Polish original Annex 2 to the 2023 assessment; scores follow the methodology in Annex 1 · Printed pp. 1-2, table of sector ML and TF risk estimates
- Official Annual Report · Ministry of Finance / GIIF · Full Polish annual report for 2025; section 10.1 says the prior national assessment was prepared in 2023 and describes 2025 update work · Section 10.1, printed pp. 93-94
- Official Sanctions Authority Guidance · Ministry of Foreign Affairs of Poland · Full official Polish response captured 2026-10-09; live page, not a regime-by-regime legal text · Headings: implementation in Poland; international sanctions; national sanctions
- Official Commission Sanctions Guidance · European Commission · Official Commission page captured 2026-10-09; each restrictive measure has its own scope and terms · Heading: Where do EU sanctions apply?
- Official UK Sanctions Guidance · HM Treasury, Office of Financial Sanctions Implementation · Guidance updated 2026-05-12; captured 2026-10-09 · Sections 1-2 and 4: territorial/person scope and ownership/control
- Official U.S. Sanctions Guidance · U.S. Treasury, Office of Foreign Assets Control · FAQ 11 updated 2024-08-21; full page captured 2026-10-09 · FAQ 11: U.S.-person and U.S.-territory scope; other programme-specific restrictions vary
Polish AML Act, 8 Oct 2026 text
Sejm consolidated text prepared 2026-10-08; header lists Dz.U. 2025 poz. 644, 1669 and Dz.U. 2026 poz. 875, 1206; provisions with future commencement are not treated as in force · Arts. 2, 10, 12, 27, 33-35, 58-61, 74-75, 86, 90, 92, 117-120 and 130
Source record
Retrieved 2026-10-09T23:15:01Z. SHA-256: d80952d9fe693d65e7f9147c79305bc11004dddbc32e25d563ed0f8dbbec5916
Source retrieval check
observed · Checked 2026-10-12T05:30:41.207Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
Dz.U. 2025 poz. 1669, Art. 6
Official promulgated Act; AML Act Article 72 amendment effective 2026-06-30 · Art. 6 amends AML Act Art. 72; Art. 9 commencement
Source record
Retrieved 2026-10-09T23:15:01Z. SHA-256: fbc4541e53b31244edd1e62622455611064b7b8ba8fd39b8a4ae0ed5022d3d3e
Source retrieval check
observed · Checked 2026-10-12T05:30:42.419Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
Dz.U. 2026 poz. 875, Art. 15
Official promulgated Act; AML company/trust-services register changes commence 2027-01-01 · Art. 15 amends AML Act Arts. 129f and 129h; Art. 22 commencement
Source record
Retrieved 2026-10-09T23:15:03Z. SHA-256: 4fd1512a8df1c2334dc4a15040892eb724fe640a844ff1cead27e8a53c6fdf8e
Source retrieval check
observed · Checked 2026-10-12T05:30:43.159Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
Dz.U. 2026 poz. 1206, Art. 33
Official promulgated Act; AML Act Arts. 2 and 89 amendments commence 2027-01-11 · Art. 33 amends AML Act Arts. 2 and 89; Art. 57 commencement
Source record
Retrieved 2026-10-09T23:15:04Z. SHA-256: 9b1cefbd26b7fdf95542dd9287e2bbb51c08df9c432450ed58e2853b2937c655
Source retrieval check
observed · Checked 2026-10-12T05:30:43.939Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
GIIF NRA publication page, 9 Oct 2026 capture
Full official response captured 2026-10-09; lists the 2023 and 2019 assessments · 2023 assessment and its linked full report / Annex 2
Source record
Retrieved 2026-10-09T23:15:04Z. SHA-256: 68532ee14306fd4d55b1a914bace037961fdcd020c038e1706e367b4838686bb
Source retrieval check
observed · Checked 2026-10-12T05:30:45.056Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
Poland ML/TF NRA, 2023
Full Polish original, Warsaw 2023; national estimates are the report's modelled results, not customer ratings · Printed pp. 314-320, 322; paras. 855, 902-903, 912, 922-928
Source record
Retrieved 2026-10-09T23:15:06Z. SHA-256: 9937034a4296ffff6ee0d05fe5d215c926475a62e5af105ec679c584dd2b91c1
Source retrieval check
observed · Checked 2026-10-12T05:30:46.131Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
Poland NRA Annex 2, 2023 sectors
Full Polish original Annex 2 to the 2023 assessment; scores follow the methodology in Annex 1 · Printed pp. 1-2, table of sector ML and TF risk estimates
Source record
Retrieved 2026-10-09T23:15:07Z. SHA-256: c6019b1fb4bf29031402af47ada4d2aea87a9b9d5ef8ff94f023e6737ffaea8c
Source retrieval check
observed · Checked 2026-10-12T05:30:47.414Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
GIIF annual report, 2025 activity
Full Polish annual report for 2025; section 10.1 says the prior national assessment was prepared in 2023 and describes 2025 update work · Section 10.1, printed pp. 93-94
Source record
Retrieved 2026-10-09T23:15:08Z. SHA-256: e631ef3ca3005cb04f83d38ac20c64ddca9a6b948f967c476bb504ac5ea08b3e
Source retrieval check
observed · Checked 2026-10-12T05:30:48.338Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
Polish MFA sanctions allocation, 9 Oct 2026 capture
Full official Polish response captured 2026-10-09; live page, not a regime-by-regime legal text · Headings: implementation in Poland; international sanctions; national sanctions
Source record
Retrieved 2026-10-09T23:15:09Z. SHA-256: 40c0af3fad5133ffe938c6c224e6661b62884418b8ffb091830ea821594cfd01
Source retrieval check
observed · Checked 2026-10-12T05:30:49.768Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
EU sanctions scope, 9 Oct 2026 capture
Official Commission page captured 2026-10-09; each restrictive measure has its own scope and terms · Heading: Where do EU sanctions apply?
Source record
Retrieved 2026-10-09T19:54:30Z. SHA-256: 84d90e3b6d3d7ca27c33d98783660ea6e86c7f837a8006418763b4e96dab98c4
Source retrieval check
observed · Checked 2026-10-12T05:30:50.555Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
UK OFSI scope, 12 May 2026
Guidance updated 2026-05-12; captured 2026-10-09 · Sections 1-2 and 4: territorial/person scope and ownership/control
Source record
Retrieved 2026-10-09T19:54:40Z. SHA-256: 254c2891db0f511d40d8bf862d92954c08469ae8c7f720dbd9b613b551e9c230
Source retrieval check
review-required · Checked 2026-10-12T05:30:51.367Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
OFAC FAQ 11, 21 Aug 2024
FAQ 11 updated 2024-08-21; full page captured 2026-10-09 · FAQ 11: U.S.-person and U.S.-territory scope; other programme-specific restrictions vary
Source record
Retrieved 2026-10-09T19:54:40Z. SHA-256: 92cfe8932dd817a5c2371d265ae1ecbaf62970f798c0d5c6ab77fd96897e0e99
Source retrieval check
review-required · Checked 2026-10-12T05:30:52.370Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
Retail bank
Meaning
An obliged institution assesses and documents ML/TF risk for each relationship or occasional transaction, then scales CDD accordingly.
Full public provision explanation
States the core risk-based CDD duty: obliged institutions must apply customer due diligence measures to every customer, identify and assess the ML/TF risk of each business relationship or occasional transaction (by customer type, geography, account purpose, product/service type, value, and relationship purpose/duration/regularity), document that risk and assessment, and scale the intensity of the due diligence measures to the risk found.
Suggested action
Record risk factors and link CDD intensity to the relationship or occasional transaction.
Conditions
Only obliged institutions; assess each relationship or occasional transaction.
- Every obliged institution in Art. 2(1). The financial-sector points are 1 (domestic banks, branches of foreign banks and credit institutions, financial institutions), 2 (SKOK credit unions), 3 (payment and e-money institutions, payment services bureaus, settlement agents), 4 (investment firms, custodian banks), 5 (foreign brokerage firms, commodity brokerage houses), 6 (regulated-market auction platform), 7 (investment funds and their managers), 8 (life insurers), 9 (insurance intermediaries), 10 and 10a (KDPW, DLT operators), 11 (currency exchange), 12 (virtual-currency service providers), 24 (safe-deposit boxes), 25 (loan institutions), 26 (pawnbrokers) and 27 (credit servicers). The duty also binds the non-financial points 13 to 23 and 24a.
Exceptions
No uniform customer score is prescribed.
Payments and e-money
Meaning
CDD applies at relationship start and for occasional transactions >=EUR 15,000; funds transfers >EUR 1,000; virtual-currency transactions >=EUR 1,000 (Article 2(1)(12)); cash >=EUR 10,000 (Article 2(1)(21)-(23)); gambling stakes/winnings >=EUR 2,000 (Article 2(1)(20)); any ML/TF suspicion; or doubt about identity data.
Full public provision explanation
Sets when CDD must be applied: on establishing a business relationship; on an occasional transaction of EUR 15,000 or more (single or linked), a funds transfer over EUR 1,000, or, for virtual-currency providers, a virtual-currency transaction of EUR 1,000 or more; on cash transactions of EUR 10,000 or more for foundations, associations and traders in goods; on stakes or winnings of EUR 2,000 or more for gambling operators; on any suspicion of ML/TF; and on doubt about identification data already held. CDD must also be reapplied, on a risk basis, to existing customers when the nature or circumstances of the relationship or the customer or beneficial-owner data change, or when the institution was legally required that year to contact the customer to verify beneficial-owner information (for example under the tax-information exchange Act). Access to an anonymous safe-deposit box requires CDD first.
Suggested action
Match the trigger, transaction type and actor; aggregate linked transactions where stated.
Conditions
General occasional-transaction/funds-transfer branches apply to obliged institutions; virtual-currency, cash and gambling branches use the stated Article 2 actors. Linked aggregation is express for general EUR 15,000, cash and gambling branches.
- Every obliged institution in Art. 2(1). The financial-sector points are 1 (domestic banks, branches of foreign banks and credit institutions, financial institutions), 2 (SKOK credit unions), 3 (payment and e-money institutions, payment services bureaus, settlement agents), 4 (investment firms, custodian banks), 5 (foreign brokerage firms, commodity brokerage houses), 6 (regulated-market auction platform), 7 (investment funds and their managers), 8 (life insurers), 9 (insurance intermediaries), 10 and 10a (KDPW, DLT operators), 11 (currency exchange), 12 (virtual-currency service providers), 24 (safe-deposit boxes), 25 (loan institutions), 26 (pawnbrokers) and 27 (credit servicers). The duty also binds the non-financial points 13 to 23 and 24a. Occasional-transaction thresholds: EUR 15,000 generally; a funds transfer over EUR 1,000; EUR 1,000 in virtual currency for pt 12 providers; EUR 10,000 in cash for pts 21-23; EUR 2,000 in stakes or winnings for gambling operators (pt 20). Suspicion or doubt about identification data triggers CDD at any value.
Exceptions
Threshold branches differ; suspicion and identity-doubt have no minimum amount.
Crypto and digital assets
Meaning
An obliged institution reports circumstances indicating a possible ML/TF offence. The clock runs from its confirmation of suspicion.
Full public provision explanation
Requires an obliged institution to send the GIIF a suspicious-activity report (SAR) on any circumstances that may indicate ML/TF, within 2 working days of confirming the suspicion, containing customer and (where known) counterparty identification data, asset type/amount/location, account number, the transaction data from Art. 72(6), the relevant EEA country for cross-border transactions, the institution's risk/predicate-offence assessment, and its reasons for reporting.
Suggested action
Report confirmed suspicious circumstances to GIIF immediately, no later than two working days.
Conditions
Confirmed suspicion; this Article 74 notice is separate from Article 86 restraint.
- Every obliged institution in Art. 2(1). The financial-sector points are 1 (domestic banks, branches of foreign banks and credit institutions, financial institutions), 2 (SKOK credit unions), 3 (payment and e-money institutions, payment services bureaus, settlement agents), 4 (investment firms, custodian banks), 5 (foreign brokerage firms, commodity brokerage houses), 6 (regulated-market auction platform), 7 (investment funds and their managers), 8 (life insurers), 9 (insurance intermediaries), 10 and 10a (KDPW, DLT operators), 11 (currency exchange), 12 (virtual-currency service providers), 24 (safe-deposit boxes), 25 (loan institutions), 26 (pawnbrokers) and 27 (credit servicers). The duty also binds the non-financial points 13 to 23 and 24a.
Exceptions
Article 75 protects specified information held by listed legal professionals in defined legal-service contexts.
- Art. 2(1) pt 14 lawyers/tax advisers are exempted for information obtained in litigation-related work (Art. 75).