Italy's Central Bank Mandates Sanctions Screening on All Crypto Transfers

Italy's central bank issued a directive requiring every crypto service provider operating in the country to implement internal controls for sanctions screening across all crypto transfers, regardless of size or origin.

The Banca d'Italia order covers any transfer linked to sanctioned entities, and critically, it applies universally rather than through a risk-based approach that would focus resources on high-value or cross-border activity. That distinction matters. Most compliance frameworks, including the baseline established by the EU's Markets in Crypto Assets Regulation (MiCA, which entered force in December 2023), allow firms to calibrate screening intensity to assessed risk. Italy's mandate skips that flexibility entirely.

"Banca d'Italia ordered crypto service providers to implement internal controls to screen for crypto transfers tied to sanctioned entities."

Banca d'Italia, official directive issued September 9, 2026

The practical weight of this falls hardest on smaller operators. Comprehensive sanctions screening infrastructure, including real-time name matching against OFAC, EU, and UN consolidated lists, transaction monitoring systems, and the compliance staff to manage alerts, represents a significant fixed cost. Large exchanges and custodians already maintain this infrastructure as a matter of course. A startup or niche Italian crypto platform does not. The result is a compliance burden that could consolidate market share toward well-capitalized incumbents while squeezing out smaller competitors.

There is also a structural tension in applying blanket screening to every transfer rather than a tiered, risk-based model. Transaction throughput slows when each transfer must clear a sanctions check, particularly if systems are not purpose-built for the volume. Firms that cannot absorb the latency or the cost may pass both along to users through higher fees and slower settlement, which chips away at the retail accessibility that has driven crypto adoption in Italy and across the EU.

The directive arrives in a specific geopolitical context. Since Russia's 2022 invasion of Ukraine and the subsequent expansion of international sanctions regimes, European regulators have grown increasingly focused on crypto's potential role in sanctions evasion. Italy is not acting alone: other EU member states have layered national-level AML/CFT requirements on top of MiCA's baseline over the past two years, reflecting a view in several finance ministries that EU-wide rules set a floor, not a ceiling. Whether that layering produces coherent, interoperable compliance obligations or a patchwork of conflicting national mandates is a live debate in Brussels.

The industry counterargument is straightforward: MiCA already exists. Requiring Italian-specific controls on top of an EU-wide framework risks fragmenting the single market that MiCA was designed to unify. A firm compliant with MiCA's AML provisions is not, under Italy's new directive, necessarily compliant with Italian law. That gap creates legal uncertainty and duplicates compliance costs without a clear marginal benefit in terms of illicit finance detection.

What the directive does accomplish is signal. Italy is telling crypto firms that national supervisors retain meaningful authority within the MiCA framework, and that operating in the Italian market carries its own regulatory overhead. For firms weighing where to base EU operations, that overhead is now a variable in the calculation. Some activity may migrate toward jurisdictions with lighter national-level overlays, reducing Italian regulators' visibility into exactly the flows they are trying to monitor.

The broader pattern is one regulators across the EU should watch carefully. Tighter compliance mandates, applied without harmonization, can produce the opposite of their intended effect: pushing activity offshore, concentrating it among a handful of large platforms, and ultimately narrowing the regulated perimeter rather than expanding it.