Illustrative firm examples
Portugal country research brief
Research dated 2026-10-11 · Reviewed 2026-10-11
Version 8d880e011fb4
8d880e011fb4c68ebbca04593c0eb7a2870c8807dd3d62343fa5e2f66923f582Scope: Illustrative firm examples. The selector is not an authorisation or legal-applicability determination. Source-check observations concern retrieval/access only and do not establish legal currentness; the research date is the content date boundary. Source health: dated-research.
Framework and authorities
A dated financial-sector foundation
Lei 83/2017 establishes preventive AML/CFT duties. Lei 58/2020 republishes it in outer Annex II and enters into force on 1 September 2020. This draft completes the 2020 financial-sector Chapter V, including Article 62-A, and the three annexes; the rest of the Act is extracted and inventoried, not fully translated or mapped. Article 62 makes Chapter IV general duties and applicable sectoral rules additional requirements, not optional alternatives.
Supervisors and the FIU
In the 2020 text, ASF has insurance/pension competences, CMVM has specified investment-sector competences, and Banco de Portugal covers specified credit, payment and e-money entities. Some credit institutions have shared BdP/CMVM competences. Check the actual entity and service, not just a sector label. Article 43 requires obliged entities to report immediately to BOTH DCIAP and Unidade de Informação Financeira on knowledge, suspicion or sufficient grounds, regardless of amount; proposed, attempted, ongoing and executed operations are included. Reporting channels and actual submissions are Not yet covered.
Later changes are not incorporated
Lei 70/2025 changes correspondent Articles 70–71 and Annex I and adds Article 71-A on self-hosted cryptoasset transfers to Chapter V. Those changes are retained separately: the affected 2020 units are unresolved, not current-duty examples. Its commencement refers to Lei 69/2025; the default commencement basis and complete post-2020 chain remain pending. Lei 69 Article 30 limits the qualifying incumbent crypto transition to 1 July 2026 or an earlier authorisation decision, with lapse conditions. That date has passed; no firm permission is established.
Risk and sanctions context
National risk evidence is a public summary
The retained December 2019 NRA is a 31-page public summary, mainly using 2015–2018 data. Its executive summary identifies tax crime, drug trafficking and corruption as major threats, and cash, cross-border operations and unknown beneficial owners as financial-sector concerns. These dated findings help frame evidence questions; they are not a current country score or a rating of every customer. The underlying full assessment and a verified later NRA are Not yet covered.
Sanctions are not AML risk scores
The original Lei 97/2017 governs implementation and enforcement of UN/EU restrictive measures. Articles 6 and 11 distinguish direct execution from cases requiring a national act to specify recipients; Article 16 concerns freezing funds/resources. Lei 83 Article 21 separately requires mechanisms for designated-target terrorism/proliferation freezing measures. Neither an annex risk indicator nor an AML report establishes a sanctions match. Later sanctions amendments, live designations, underlying measures and permissions must be checked separately.
FATF: dated publication only
FATF’s official publication page dates the Portugal evaluation to 11 December 2017 and says it was adopted at the November 2017 Plenary. A generated page observation is retained, not a native report. The precollection PDF request returned 403; that failure supports no ratings or findings. No current monitoring classification, sanctions classification or later follow-up status is asserted.
Selected firm implications
Meaning: Under the dated Article 65 account-opening rule, the deferred-verification possibilities do not allow customer transactions, payment instruments or ownership changes until customer AND beneficial-owner identity is verified.
Conditions: Financial entity opening an account using Articles 26(3) and 32(5); applicable legal/regulatory verification rules.
Exceptions: No other release exception is stated in Article 65; later law remains unverified.
Suggested action: Check the account hold covers all three activities and releases only after both identity checks are complete.
National Legislation / Legislation / Retained legislation edition; current legal effect unverified · Artigo 65.ºMeaning: Article 72 makes the EU-headquartered payment/e-money institution responsible for Portuguese agent/distributor compliance, fitness checks, training and an updated list. A paragraph 3 criterion or BdP notification triggers immediate central-contact-point appointment and contact notification within 30 days.
Conditions: Head office in another EU Member State; agents/distributors operating in Portugal. Contact-point duties depend on paragraph 3.
Exceptions: Not every foreign firm or branch is automatically covered; loss of quantitative criteria does not permit removal without considering BdP opposition and other triggers.
Suggested action: Test agent controls and each appointment trigger separately; retain the trigger date, appointment and BdP notification evidence.
National Legislation / Legislation / Retained legislation edition; current legal effect unverified · Artigo 72.ºMeaning: Article 63 extends preventive duties to own-account transactions and dealings for third parties who are not customers, including intragroup dealings outside a customer relationship.
Conditions: Actual financial entity carrying out the specified dealings; terms and extent are set by sectoral regulation.
Exceptions: No automatic intragroup exemption; investment-product exposure alone does not establish the statutory actor.
Suggested action: Check the control inventory includes own-book counterparties and noncustomer/intragroup transactions, then verify the sectoral execution terms.
National Legislation / Legislation / Retained legislation edition; current legal effect unverified · Artigo 63.ºNotices and limitations
- Illustrative firm examples, not an assessed firm profile.
- Product/customer exposure alone is not statutory applicability. This is not a licensing guide.
- Local entity / domestic activity selected.
- 3 representative dated legislation examples; see the full register for other duties.
- Legislation from a retained reviewed edition; later amendments, commencement and current legal effect are not verified. These are dated examples, not confirmed current obligations.
- Source observations are unavailable, stale, failed or review-required. This dated brief does not confirm today's legal position.
- Independent review accepts this dated brief and all 16 authored own-analysis units, including ten mapped duties. Three later legal-effect questions remain unresolved; 183 extracted units remain unanalysed. Originals and full translations remain private analysis-only pending rights review.
- Not yet covered: current consolidation, full Chapter IV analysis, later Article 71-A, other national/sectoral instruments, reporting channels and live sanctions.
- Next action: identify the entity, service and trigger, verify the applicable edition and sectoral exceptions, then compare controls. The public register distinguishes reviewed dated explanations from unresolved and unanalysed material; it is not current-law approval.
Evidence sources
Original source documents are not reproduced in this brief. Retained originals are private research evidence; use the official-source links.
- Official Legislation Republication Original · Assembleia da República / DR · 1 September 2020 dated republication; currentness unverified · Outer Annex II; Chapter V/Annexes I–III; contextual Articles 21, 43, 85–88
- Official Legislation Publication Original · Assembleia da República / DR · 22 December 2025 publication; commencement linked to Lei 69/2025, not separately certified here · Articles 2–7 and Annex; relevant pages 7–8, 22–24
- Official Legislation Publication Original · Assembleia da República / DR · 22 December 2025 publication; Article 30 transitional terms · Article 30, pages 17–18; not a firm authorisation record
- Official Nra Public Summary Original · GT ANR / Comissão de Coordenação · December 2019 summary, mainly 2015–2018 data; underlying whole assessment not retained · PDF pages 1–4 (printed cover and pages 1–3); selected claims only
- Official Legislation Publication Original · Assembleia da República / DR · 23 August 2017 original publication; later amendments unverified · Act starts on PDF page 20, printed 4928; Articles 1, 6, 9–11, 16
- Generated Primary Page Observation Not Native Original · FATF · 11 December 2017 publication; observed 11 October 2026 · Opening publication date and November adoption statement; no retained report
Lei 83/2017 / 2020
1 September 2020 dated republication; currentness unverified · Outer Annex II; Chapter V/Annexes I–III; contextual Articles 21, 43, 85–88
Source record
Retrieved 2026-10-11T02:06:03Z. SHA-256: 362fb55b4224ac09335fb99685eb5d7f9697d3f701f1ba25c24d735d89537686
Source retrieval check
not-checked · No source check time recorded
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Lei 70/2025
22 December 2025 publication; commencement linked to Lei 69/2025, not separately certified here · Articles 2–7 and Annex; relevant pages 7–8, 22–24
Source record
Retrieved 2026-10-11. SHA-256: 3e6b5e36a3f2bb927334694df3d5930a9cb80f8225266043d0b6d1359068c3b8
Source retrieval check
not-checked · No source check time recorded
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Lei 69/2025
22 December 2025 publication; Article 30 transitional terms · Article 30, pages 17–18; not a firm authorisation record
Source record
Retrieved 2026-10-11. SHA-256: cfcfe31de2acfa3e61e86feac4c7a113f13c9bb063fdc55230eceb36224d5d2f
Source retrieval check
not-checked · No source check time recorded
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
NRA 2019 summary
December 2019 summary, mainly 2015–2018 data; underlying whole assessment not retained · PDF pages 1–4 (printed cover and pages 1–3); selected claims only
Source record
Retrieved 2026-10-11. SHA-256: 74415de636f31afda5d95fcd3f9423b13855a564e990e31746e552cb37401c14
Source retrieval check
not-checked · No source check time recorded
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Lei 97/2017
23 August 2017 original publication; later amendments unverified · Act starts on PDF page 20, printed 4928; Articles 1, 6, 9–11, 16
Source record
Retrieved 2026-10-11. SHA-256: 87c1490f8d14cce7c97a74340a61f3d8bbb27b1aff25658c87bd2c083c22fb67
Source retrieval check
not-checked · No source check time recorded
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
FATF 2017 publication
11 December 2017 publication; observed 11 October 2026 · Opening publication date and November adoption statement; no retained report
Source record
Retrieved 2026-10-11. SHA-256: 52200d1bd594b6712fc9e7c3f4744d3266f42e6ccf8b938f2b7eb1815d6e1488
Source retrieval check
not-checked · No source check time recorded
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-11.
This brief relies on the identified official source edition. Open it using the official-source control.
Retail bank
Meaning
Under the dated Article 65 account-opening rule, the deferred-verification possibilities do not allow customer transactions, payment instruments or ownership changes until customer AND beneficial-owner identity is verified.
Full public provision explanation
If a financial entity opens an account using the deferred-verification possibilities in Articles 26(3) and 32(5), it must keep transactions, payment instruments and ownership changes blocked until both customer and beneficial-owner identity checks are complete under the applicable rules. Opening an account is not permission to let it operate while verification remains outstanding.
Suggested action
Check the account hold covers all three activities and releases only after both identity checks are complete.
Conditions
Financial entity opening an account using Articles 26(3) and 32(5); applicable legal/regulatory verification rules.
- Use of Article 26(3) and Article 32(5) possibilities when opening an account; verification of both identities remains outstanding.
Exceptions
No other release exception is stated in Article 65; later law remains unverified.
- The block ends only once identity is verified under the applicable law or regulation; this unit states no other exception.
Payments and e-money
Meaning
Article 72 makes the EU-headquartered payment/e-money institution responsible for Portuguese agent/distributor compliance, fitness checks, training and an updated list. A paragraph 3 criterion or BdP notification triggers immediate central-contact-point appointment and contact notification within 30 days.
Full public provision explanation
An EU-headquartered payment or electronic-money institution using Portuguese agents or distributors must ensure their full preventive-duty compliance, check fitness/reputation, train them and keep an updated list available immediately on request. Central-contact-point appointment is conditional: quantitative EU criteria or Banco de Portugal notifications can trigger immediate appointment, followed by identification/contact notification within 30 days. Loss of quantitative criteria must be reported and removal can be opposed within 30 days. Mandatory functions start on appointment; extra reporting functions require the risk-based supervisory determination and notified deadline. This is not an automatic contact-point requirement for every foreign firm or every branch.
Suggested action
Test agent controls and each appointment trigger separately; retain the trigger date, appointment and BdP notification evidence.
Conditions
Head office in another EU Member State; agents/distributors operating in Portugal. Contact-point duties depend on paragraph 3.
- Head office in another EU Member State and agents/distributors operating in Portugal; central contact point on any paragraph 3 criterion/notification.
Exceptions
Not every foreign firm or branch is automatically covered; loss of quantitative criteria does not permit removal without considering BdP opposition and other triggers.
- Contact-point appointment is conditional under paragraph 3; removal after loss of quantitative criteria remains subject to supervisory opposition and other triggers; extra functions require paragraph 7–8 action.
Investment firm
Meaning
Article 63 extends preventive duties to own-account transactions and dealings for third parties who are not customers, including intragroup dealings outside a customer relationship.
Full public provision explanation
A financial entity cannot confine its preventive-duty controls to customer business: own-account deals and dealings for noncustomer third parties are covered on the terms and extent set by sectoral rules. Intragroup transactions outside a customer relationship are expressly included. The article does not fix all procedural detail independently of that regulation.
Suggested action
Check the control inventory includes own-book counterparties and noncustomer/intragroup transactions, then verify the sectoral execution terms.
Conditions
Actual financial entity carrying out the specified dealings; terms and extent are set by sectoral regulation.
- Transactions and counterparties described in paragraphs 1–2, including intragroup dealings outside customer relationships; extent fixed by sectoral regulation.
Exceptions
No automatic intragroup exemption; investment-product exposure alone does not establish the statutory actor.
- No intragroup exemption is stated; procedural terms and extent depend on the applicable sectoral rules.