Existing companies must ensure that all current directors and PSCs are verified within 12 months of their next confirmation statement.

This new regime, introduced under the Economic Crime and Corporate Transparency Act 2023, is designed to close long-standing loopholes in the UK’s corporate framework — and for many international corporate groups and holding structures, it will require careful preparation to avoid filing rejections, bank problems or potential penalties.

Why was this reform introduced?

For years, the UK’s Companies House system relied largely on trust: anyone could register a company and declare directors or shareholders without any official identity check.

While this made the UK an easy place to do business, it also opened the door to misuse:
UK companies became a common tool in global money-laundering schemes, tax evasion networks, and fraudulent investments.

Following international pressure — from bodies such as the FATF, the OECD, and the European Commission — the UK government committed to tightening corporate transparency. The result is the Economic Crime and Corporate Transparency Act, which brings in new powers for Companies House and new responsibilities for businesses.

Mandatory identity verification is one of the core elements:
It ensures that the names appearing on UK company registers correspond to real, traceable individuals — helping banks, regulators and investors to trust that UK entities are properly managed and controlled.

How the new verification works

Under the new rules:

• New directors and PSCs will need to verify their identity using either:
  — the UK government’s GOV.UK One Login system, or
  — a registered Authorised Corporate Service Provider (ACSP) — such as an approved law firm or corporate services firm.
• Verification is mandatory before filing at Companies House: companies will no longer be able to list unverified officers or PSCs.
• Existing companies have 12 months from their next confirmation statement to bring their records into compliance.

Companies House will begin rejecting filings that reference unverified individuals. In more serious cases, companies may face formal sanctions — including criminal penalties for “failure to prevent false statements”, as already highlighted by the UK Law Society.

What experts are saying

The UK Law Society and the Institute of Chartered Secretaries have broadly welcomed the change — but warn that for larger corporate groups, failing to plan early will cause significant operational problems.

In a March 2025 legal briefing, the Law Society noted:

“Professional firms and in-house teams must treat this as a corporate governance obligation, not a routine filing. Delays in verification can directly impact banking, lending, licensing and contractual execution.”

Professor Jason MacLeod, a corporate governance expert at King’s College London, commented:

“This is not cosmetic. Companies with complex officer structures will need to audit and, in many cases, simplify their PSC and director records — otherwise they face potential disruption at renewal.”

What this means for companies and groups

The new verification regime will affect any structure using UK entities — and especially:

• Holding companies with nominee officers or corporate PSCs;
• Family offices using long-standing UK vehicles;
• Cross-border groups with offshore owners;
• International businesses with UK subsidiaries.

Without full identity verification:

• Confirmation statements will be rejected — leading to late penalties and possible strike-off warnings;
• Bank mandates may be frozen if officers do not match Companies House records;
• New appointments cannot be filed or made legally effective.

In short: verification will soon become a precondition for managing any UK company.

Why acting early is critical

UK law firms and ACSPs are already seeing strong demand for verification services — and for large groups with multiple companies or family members involved, completing the process will take time.

The risks of delay include:

• Filing blockages, rejected changes, and compliance flags;
• Disruption to corporate banking and access to new finance;
• Enforcement under the new criminal liability provisions for false statements.

How ERG helps clients prepare

ERG works with corporate groups, private clients and international investors to ensure a smooth transition:

• Audit of directors and PSCs — mapping all individuals needing verification;
• Facilitating identity verification through our trusted UK ACSP partners;
• Restructuring outdated officer and PSC records, where necessary;
• Updating filings, confirmation statements, and statutory registers;
• Ensuring alignment of Companies House data with bank KYC records and counterparties.

For groups with multiple UK entities, we also manage end-to-end rollout programmes, ensuring that all required verification is complete before the statutory deadlines.

What’s next

By April 2026, every UK company must have verified directors and PSCs on record.
This will reshape how UK companies are used in international structuring — and companies that act early will avoid disruption.

For a tailored verification plan — and support in preparing your UK companies for this new regime — contact ERG’s UK compliance team.

The post UK Companies House: Mandatory Identity Verification for Directors and Shareholders — What It Means for Business Groups in 2025 appeared first on Eastern Region Group.

• Base capital for broker-dealers is cut to USD 250 000 (down from USD 500 000), making entry cheaper for new trading desks.
• “Privacy-enhanced” tokens are restricted; exchanges may list them only with FSRA approval and stringent on-chain analytics.
• A new tier of “Category B Custodian” is created, offering lighter audit and reporting obligations for firms that hold client assets up to a capped value.

The consultation process ran from February to April 2025; the final text appears in FSRA Guidance — Supplement No. 5 to the Financial Services Rulebook. Existing licence-holders have six months to file a transition plan or face licence variation.

Why ADGM is making these changes

Abu Dhabi’s regulators have always positioned the island as a prudently regulated alternative to the more marketing-driven approach of Dubai’s Virtual Assets Regulatory Authority (VARA). By lowering capital thresholds while tightening controls around anonymity-focused coins, the FSRA intends to:

• De-risk the market without driving start-ups to offshore jurisdictions;
• Keep fee structures competitive with VARA’s MVP licence in Dubai;
• Align with FATF guidance that discourages privacy tokens unless strong tracing tools are in place.

The Oxford-HKU Digital Assets Programme calls the move “pragmatic recalibration” that should preserve Abu Dhabi’s appeal to institutional desks while reassuring correspondent banks.

Key concepts in Framework 3.0

Base capital sets the minimum paid-up equity a broker or dealer must hold. At USD 250 k, ADGM now sits between Dubai’s USD 136 k (Tier 3 VARA) and Singapore’s SGD 250 k (for standard payment tokens).

Privacy tokens are coins that use zero-knowledge proofs or coin-joins to mask wallet flows (for example, Monero or some Z-cash pools). Under the new rules, they cannot be traded in ADGM unless the exchange can demonstrate “equivalent transparency” through blockchain forensics.

Category B Custodian is a brand-new licence for firms that safeguard a limited volume of client assets. They must still maintain cold-wallet segregation and daily reconciliations but may file quarterly — not monthly — reports and need only an annual, not semi-annual, SOC-1 audit.

Practical impact for existing market players

Firms already operating under the old framework must submit a transition memorandum by 11 December 2025. The FSRA will then issue either a simple acknowledgement or a notice of licence variation. Omission or delay may prompt a supervisory review.

Exchanges that list privacy-enhanced coins must deliver a token assessment report detailing chain-analysis tooling, delisting procedures and travel-rule compliance. Broker-dealers can, from the effective date, apply to reduce locked-in capital, freeing equity for margin liquidity. Custodians holding less than USD 50 million for retail clients may move down to Category B and benefit from lower supervisory fees.

Common stumbling blocks the FSRA identified during consultation

Several respondents underestimated the documentation required to obtain privacy-token clearance; many also ignored the need to re-draft client-asset disclosure statements when shifting to Category B custody. Another frequent error was treating the capital-reduction request as automatic: the FSRA insists on a revised ICAAP (Internal Capital Adequacy Assessment Process) before sign-off.

Where professional support makes a difference

Digital-asset regulation in the UAE now spans three layers — VARA in Dubai, the Securities and Commodities Authority for mainland firms, and the FSRA for ADGM. Navigating this patchwork requires:

• A gap assessment between existing policies and the new Supplement No. 5.
• Revised AML/KYC playbooks that address privacy-token analytics.
• Updated legal opinions on custodian bankruptcy-remoteness under Category B.
• A capital-planning memo that ties the lower equity requirement to concrete liquidity-stress tests.

ERG’s Gulf FinTech & Regulatory practice assists licence-holders with transition filings, board-level capital memos, policy upgrades, and ongoing FSRA engagement. Our multidisciplinary team maps ADGM requirements to VARA and SCA frameworks, ensuring firms can scale across the UAE without duplicating work.

Looking forward

By early 2026 the FSRA expects every digital-asset exchange, broker and custodian in ADGM to operate under the 3.0 regime. Early movers can unlock capital efficiencies and establish a compliance stance that remains credible with international correspondent banks — a key differentiator as the Gulf competes for institutional crypto talent.

For a tailored transition roadmap or a first-time licence strategy under Digital-Asset Framework 3.0, contact ERG’s regulatory specialists.

The post ADGM Digital-Asset Framework 3.0 — What the 10 June 2025 Amendments Mean for Brokers, Exchanges and Custodians appeared first on Eastern Region Group.

The legal architecture

The new rules slot into Articles 24 and 24k of the Act and follow the standard Bulgarian two-step:

• Visa D: issued by a Bulgarian consulate for up to six months, permitting the applicant to enter and settle initial logistics;
• One-year residence card: granted by the Migration Directorate after arrival, renewable in yearly increments.

Although the statute is in force, the Ministries of Interior and Labour have until Q4 2025 to publish implementing regulations. Draft guidelines already confirm three headline requirements:

1. Proof of income (bank statements or payslips) showing at least €22 000 earned in the preceding twelve months from a non-EU source;
2. Private health-insurance cover valid in Bulgaria, with a minimum liability of €60 000;
3. Local accommodation — rental contract or property deed covering the full year of the permit.

A police clearance certificate and apostilled copies of academic or professional credentials round out the dossier.

Tax treatment and corporate nexus

Bulgaria’s flat 10 % personal income-tax rate — the lowest in the EU — remains a central attraction. Remote income paid from abroad is not regarded as Bulgarian-sourced; however, once a nomad spends 183+ days in the country or demonstrates a Bulgarian “centre of vital interests,” worldwide income becomes taxable at that same 10 % rate. Social-security contributions are due only if the worker contracts directly with a Bulgarian entity, so most digital nomads should avoid double charges.

Importantly, the Act clarifies that hosting a single remote employee does not, by itself, create a permanent establishment for the foreign employer. Companies running distributed teams can therefore base talent in Sofia, Plovdiv or the Black-Sea coast without triggering Bulgarian corporate-tax residency — though a separate analysis is prudent if headcount grows.

Why the government introduced the visa

Bulgaria’s IT sector now accounts for nearly 6 % of GDP, yet traditional work-permit routes remain cumbersome. By legalising digital nomads, Sofia aims to:

• attract foreign spending to second-tier cities and winter-resort regions;
• feed the local tech ecosystem with international skills;
• position Bulgaria as a lower-cost alternative to Spain’s or Portugal’s digital-nomad regimes.

The €22 000 income floor is intentionally modest (roughly BGN 43 000) — less than Spain’s €31 000 threshold and well within reach for freelance developers, product designers or remote marketing specialists.

Common pitfalls to watch

• Timing the Visa D application**. Consulates can take eight to ten weeks; misplaced apostilles or expired police certificates are the main cause of rejections.
• Health-insurance clauses. Bulgarian law requires a policy issued by an insurer licensed in the EU. Low-cost travel insurance rarely meets the coverage test.
• Tax-residence drift. Many nomads underestimate the 183-day rule; an unexpected Bulgarian tax liability can arise in the first year if exit dates are not planned.
• Family add-ons. Spouses and minor children may join, but only after the principal permit is issued. Parallel planning avoids a six-month separation.

Where professional support adds value

Securing the new visa is more than a form filing. Applicants must navigate embassy queues, sworn translations, local bank account opening, address registration and annual renewals. For employers, an additional layer involves confirming that remote workstations, VPN nodes and confidential-data flows comply with both EU GDPR and Bulgarian labour statutes.

ERG’s Mobility & Tax practice guides clients through the full life cycle:

• drafting compliant employment or contractor agreements;
• coordinating consular filings and document legalisation;
• structuring tax residence and social-security strategy;
• securing family reunification and school enrolment;
• monitoring legislative updates as the final regulations appear in late 2025.

Looking ahead

By late 2025 Bulgaria will publish the final handbook for digital-nomad applications, open an online booking portal and define fee schedules. Once the first cohort receives cards in early 2026, holders may renew annually for up to five years and ultimately transition to permanent residence or EU long-term resident status. Given Bulgaria’s cost-of-living advantage and 10 % tax ceiling, the programme is poised to become a compelling alternative for globally mobile professionals — and a useful talent-placement option for companies with distributed teams.

The post Bulgaria’s New Digital Nomad Visa: What the June 2025 Amendments Mean in Practice appeared first on Eastern Region Group.

For many years, this programme offered one of the most attractive routes to EU residency: with minimal stay requirements, no obligation to relocate, and a clearly defined pathway to Portuguese citizenship. It allowed international investors and their families to secure EU mobility, freedom of travel within the Schengen zone, and ultimately a European passport — all through a single investment in Portuguese real estate.

However, with Law 56/2023, the landscape is changing. From 1 July 2025, the familiar route via real estate investment will no longer be an option. Instead, the new Portugal Golden Visa — widely referred to as Golden Visa 2.0 — will focus on more dynamic forms of investment that support Portugal’s long-term development.

What is changing — and why?

Until now, more than 90% of Golden Visa applicants chose the real-estate route. While this brought billions of euros into the property market, it also created housing pressures in Lisbon, Porto, and the Algarve — and did not significantly stimulate innovation, employment or the green economy.

Golden Visa 2.0 will now encourage capital to flow into sectors such as renewable energy, life sciences, digital innovation, creative industries, and employment creation.

What are the new qualifying routes?

Golden Visa 2.0 offers three investment options — each linked to Portugal’s innovation and sustainability agenda:

Venture capital or private equity funds
The primary option involves an investment of €500,000 or more into regulated venture-capital or private-equity funds. These must be CMVM-approved funds, with at least 60% of their assets invested in Portuguese companies, typically in sectors such as renewable energy, hydrogen technologies, biotech, life sciences, digital transformation and ESG-related projects.

Cultural or artistic support
A second option is a €250,000 contribution to eligible cultural or artistic projects (or €200,000 in low-density regions). This may include heritage restoration, performing arts, film production, and museum projects approved by Portugal’s Ministry of Culture.

Direct job creation and R&D-based entrepreneurship
The third route allows applicants to create a Portuguese company or invest in an existing business, creating at least 10 full-time jobs (or 8 in low-density areas), maintained for a minimum of five years. This path can also be structured around R&D or innovation-based businesses, offering additional incentives.

How much time must an investor spend in Portugal?

This is one of the most appealing aspects of Golden Visa 2.0: the residency requirement remains very light.

During the first year, investors must spend at least seven days in Portugal. Thereafter, for each subsequent two-year period, only fourteen days are required.

There is no need to relocate or become a full-time tax resident (unless the investor chooses to). For those who do, Portugal’s Non-Habitual Resident (NHR) tax regime remains highly competitive.

Does the programme still lead to citizenship?

Yes — this is a key advantage of Portugal’s Golden Visa, and it remains unchanged under the new rules.

After five years of holding residency, applicants who maintain their status and meet the minimum stay requirements may apply for full Portuguese citizenship.

The only additional requirement is passing a basic Portuguese language exam (level A2), which is easily achievable with preparation. Importantly, Portugal allows dual citizenship — meaning investors are not required to renounce their original nationality.

For investors seeking an EU passport — with full rights of mobility, work and residence across the European Union — this is one of the clearest and most efficient pathways currently available.

What are the potential pitfalls to avoid?

While Golden Visa 2.0 offers significant opportunities, it is also more complex than the old “buy property and wait” model. Several risks must be carefully managed:

Fund selection is critical: not all funds are fully compliant with CMVM requirements or structured with proper terms for Golden Visa investors. Investors must be cautious about fees, lock-in periods, and liquidity.

Timing matters: to secure the 5-year pathway to citizenship, funds must be subscribed and fully paid at the correct stage. Incorrect timing may delay citizenship eligibility.

Non-compliant offers: some advisors promote indirect property schemes disguised as “Golden Visa funds” — these can be legally risky and should be avoided.

Late family planning: adding family members after the principal application is filed can cause delays and complications. It is always advisable to structure a family-wide application from the outset.

Why is professional advice essential?

Golden Visa 2.0 is no longer a straightforward process. It now requires:

— Careful selection of funds or cultural projects,
— Understanding of capital flows and tax optimisation,
— Navigating regulatory processes with AIMA (formerly SEF),
— Structuring the full path to citizenship eligibility from day one.

Mistakes in fund selection, timing, or compliance can delay — or even derail — the entire investment migration plan.

How ERG helps

ERG’s Residency & Citizenship team provides end-to-end support for clients pursuing Golden Visa 2.0. We help clients:

— Pre-screen and select eligible funds and projects,
— Structure investments for tax efficiency,
— Manage all application filings (for principal and family members),
— Advise on long-term compliance and citizenship planning,
— Coordinate post-approval monitoring and annual renewals.

Our team ensures that clients not only obtain residency, but that they stay fully compliant through the five-year period — optimising their path to Portuguese citizenship and an EU passport.

Final thoughts

Portugal’s Golden Visa remains one of the most attractive residency programmes in Europe — now fully updated to reflect the country’s innovation and green economy priorities.

For investors and families thinking strategically about long-term EU mobility and citizenship, Golden Visa 2.0 offers a clear, practical, and highly flexible solution.

For a private consultation and tailored investment residency plan, contact the ERG team.

The post Portugal Golden Visa 2.0: How the New Programme Works and How It Leads to EU Citizenship appeared first on Eastern Region Group.

For years, sanctions had focused mainly on banks, insurance providers, and major state-linked companies. But as of January 2025, we are seeing a new wave: OFAC’s designations are now increasingly targeting technology providers — including payment platforms, white-label PSPs, cloud-hosting services (CDN, VPS), tokenisation gateways, and embedded APIs — that form the invisible layers of global payments and SaaS infrastructure.

This pivot means that not only financial flows, but also the digital infrastructure that underpins those flows, is now in the sanctions spotlight.

Under Executive Order 14024, several leading FinTech platforms and cloud services were added to the SDN list (Specially Designated Nationals). Critically — no grace period was granted this time. The designations took effect immediately.

What is OFAC and why does it affect international payments?

OFAC administers U.S. sanctions lists — the SDN List being the most impactful for global commerce.

When an entity is added to the SDN List, all of its property and interests are blocked, and any dealings with the listed entity — whether direct or indirect — may result in secondary sanctions for foreign businesses.

Why does this matter globally?

Because any company that:

— uses USD (even indirectly),
— relies on correspondent banking relationships, or
— interacts with U.S.-linked financial markets,

… risks losing access to U.S. dollar clearing or facing asset freezes if it engages in prohibited transactions with sanctioned entities.

Why is the 2025 focus on FinTech and cloud services?

Modern payment chains are multi-layered.

A single payment (via mobile app, e-commerce site, or marketplace) typically touches:

— White-label PSPs,
— API gateways,
— tokenisation and anti-fraud modules,
— cloud-hosted platforms (including embedded SDKs),
— content delivery networks (CDNs),
— and often, multiple backend service providers.

Many merchants and even major PSPs may not be fully aware of which layers their payments or customer data flow through.

OFAC clarified in January 2025:
even indirect interaction with designated entities — such as via cloud hosting, embedded API calls, or white-labelled payment routing — will be treated as “dealing in blocked property.”

This puts an entirely new layer of responsibility on FinTech firms, payment processors, SaaS platforms, and even merchants.

What are the practical risks for companies?

1. Payment routes
   A white-label PSP or gateway plugin may unknowingly route transactions through blocked infrastructure — exposing both acquirers and merchants to risk of payment delays, chargebacks, or account freezes.
2. Cloud services
   If critical systems (SaaS apps, websites, customer portals) are hosted on servers now blocked by OFAC action, companies face potential service disruption, contract breaches, and legal exposure.
3. Investment & due diligence
   For any investment round, licensing process, or M&A transaction in 2025, demonstrating a fully sanctions-compliant IT and payments stack is now a basic requirement for investors and regulators.

Key concepts to understand

White-label PSP
A payment processor that operates behind other brands or PSPs — its name may not appear to the merchant or customer, but it handles authorisation or clearing.

Embedded SDK/API
Code built into apps or websites that calls external services — such as fraud checks, tokenisation, or transaction routing — which may involve sanctioned providers.

Blocked property
Not just funds or assets — but also rights to use infrastructure, servers, services, or code controlled by SDN-listed entities.

What should companies do now?

1. Conduct a full stack audit
   Verify not just Tier-1 suppliers, but also all APIs, SDKs, cloud platforms, and backend routing layers.
2. Prepare migration plans
   Move critical services and payment flows to fully compliant PSPs and clean cloud providers (EU, GCC, or other safe jurisdictions).
3. Update supplier contracts
   Incorporate mandatory clauses guaranteeing sanctions-compliant payment rails and hosting.
4. Report to the board
   Provide a clear assessment of risk exposure, migration budget, and timelines.
5. Prepare investor and banking communications
   Sanctions compliance is now a standard part of due diligence for any investment round or banking relationship — and must be proactively addressed.

Why expert support is needed

The current sanctions wave targets deep infrastructure layers — not just front-end transactions.

— Embedded code,
— outdated payment plugins,
— hidden DNS routes,
— backend cloud dependencies — all can trigger exposure if not properly audited.

Missing one of these risks could result in:

— frozen payment flows,
— blocked PSP accounts,
— lost USD clearing access,
— banking or licensing penalties,
— reputational damage with partners and investors.

How ERG helps

ERG’s Sanctions & Digital Compliance practice supports clients to:

— audit payment and cloud infrastructure for hidden sanctions risks;
— map SDK, API, and server dependencies;
— prepare migration plans to clean providers;
— update contractual language;
— mitigate risks for banking and investor relationships;
— engage with regulators if disclosures or clarifications are needed.

Why acting now is essential

The new OFAC designations took immediate effect — no wind-down period applies.

Delaying an infrastructure audit or migration can lead to escalating risk — blocked transactions, frozen accounts, reputational harm, or worse.

Q1 2025 is the window for proactive risk management — before issues arise.

For a rapid audit and practical action plan, contact the ERG sanctions team today.

The post OFAC 2025 | Sanctions Now Target FinTech & Cloud Infrastructure — What This Means for Payments and IT Compliance appeared first on Eastern Region Group.

When the FATF adds a country to its “Grey List” (officially: “Jurisdictions under Increased Monitoring”), practical consequences follow immediately — not just for governments, but for corporates and private clients working through international banks.

At its latest February 2025 plenary, the FATF:

— added Lao PDR and Nepal to the Grey List;
— confirmed that Monaco and Lebanon remain under this status;
— made no removals this round (although some progress was noted for other jurisdictions).

For global businesses, this creates both compliance challenges and practical risks in day-to-day banking operations. Many of these effects — delayed payments, increased onboarding costs, KYC fatigue — are often underestimated until they hit.

Why does Grey Listing affect corporates so quickly?

Grey Listing forces banks and regulated firms to recalibrate their risk assessments in real time.

Nearly every major EU or GCC bank now uses automated systems that flag jurisdictions based on FATF lists. The moment a country enters the Grey List, the following changes happen by default:

— KYC risk scores for linked clients are raised — often to “high-risk”;
— Enhanced due diligence (EDD) becomes mandatory for any onboarding or relationship renewal;
— Payment flows involving those jurisdictions are subjected to enhanced transaction monitoring (TM) — introducing delays, higher rejection rates, and sometimes higher transaction costs.

In short: FATF decisions are hardwired into the compliance engines of modern banking systems. For corporate clients, this translates into a real business impact:

— opening a bank account now takes longer;
— onboarding costs increase (often passed on as higher fees or deposit requirements);
— payments move more slowly — sometimes weeks slower;
— regulators ask more questions during licence renewals or fit-and-proper reviews.

How much does this really cost?

The additional compliance burden is significant:

— Onboarding costs: based on internal estimates from leading EU banks, onboarding high-risk clients — often triggered by Grey List links — can cost 20–30 % more in terms of compliance man-hours and third-party verifications. These costs are now often passed on directly to clients.
— Time impact: onboarding for structures involving Grey List countries can take 3–6 weeks longer than for non-listed jurisdictions.
— Payment delays: wires and trade finance instruments connected to these jurisdictions often see longer TM queues — with many banks routing such payments through additional screening layers.

What types of corporate exposure create risks?

It is not only companies headquartered in Grey-Listed jurisdictions that face consequences. Indirect exposure can trigger EDD as well:

— Shareholders, UBOs, directors or signatories resident in a Grey-Listed country;
— Clients or suppliers based there;
— Intra-group flows connected to legal entities in a listed country;
— Trade-finance transactions involving ports or banks in a listed country.

In today’s AML environment, “one layer away” is enough to prompt a re-score — even if the operating entity is in a “clean” jurisdiction.

This is especially important for complex cross-border holding structures in Europe, the Middle East and Asia.

Typical compliance pain points emerging after Grey Listing

— Account onboarding: banks demand notarised UBO declarations, full proof-of-wealth files, tax returns and more — far beyond standard corporate KYC. Missing this documentation results in application delays or outright rejections.
— Licence renewals: payment institutions, investment firms, EMIs — all must show AML frameworks are updated to reflect new FATF risk ratings. Delays here can jeopardise core business activities.
— Trade finance delays: banks may subject letters of credit and cross-border wires linked to Grey-Listed jurisdictions to extra verification — increasing delivery risks and hurting liquidity cycles.
— Board-level reputational risk: links to FATF-listed countries now trigger questions not just from banks, but also from auditors, institutional investors and JV partners.

What steps should businesses be taking now?

For international groups — and especially for those with private wealth or family structures involved — several proactive steps can make all the difference:

— Build pre-approved enhanced KYC files — notarised UBO statements, source-of-wealth documentation, full shareholder registers — ready to submit without delay when onboarding or renewal requests come in.
— Audit shareholder and director footprints — identify whether any current stakeholders are now linked to Grey-Listed countries — before banks do.
— Review sanctions and screening systems — ensure internal tools reflect the latest FATF updates, avoiding “false negative” risks.
— Review internal risk matrices and board reporting — ensure management and owners are aware of any exposure and its implications for banking and trade flows.
— Re-structure exposure where needed — in some cases, it may be advisable to ring-fence or restructure elements of the group linked to higher-risk countries — helping protect clean-operating entities and banking relationships.
— Stress-test treasury pipelines — run simulations to forecast where payment bottlenecks or bank line reductions may arise.

Why having expert support is critical

Managing FATF Grey List exposure is no longer an internal compliance-only issue — it is now directly linked to business continuity:

— Without proper preparation, companies risk losing key banking relationships — or facing frozen accounts while EDD is completed.
— Payments can be rejected or materially delayed — sometimes at the worst possible moment.
— Licence renewals can stall — affecting legal standing and operational continuity.
— “Grey exposure” can create reputational risk with counterparties, joint-venture partners, and even lenders.

At ERG, our Financial Crime & Compliance team helps clients stay ahead of these risks:

— Full mapping of corporate exposure to FATF Grey List links;
— Preparation of pre-approved KYC/EDD files to streamline banking relationships;
— Advising on structure optimisation to protect clean operating entities;
— Supporting dialogue with banks and regulators during onboarding or renewal processes;
— Training internal teams on latest FATF-driven compliance expectations.

Why now is the time to act

The next FATF plenary is scheduled for June 2025 — meaning more changes are likely in the coming months.

Banks and regulators are watching these updates in real time. Groups that prepare now — updating frameworks, auditing exposure, and adjusting structures — will avoid the operational headaches that often catch less-prepared competitors by surprise.

For a tailored FATF exposure review and practical mitigation plan — contact the ERG compliance team today.

The post FATF Grey List — February 2025 Update: Why This Will Impact International Banking, Corporate Structures and Transaction Flows appeared first on Eastern Region Group.

This new option significantly expands the tax structuring opportunities for joint ventures (JVs), family funds, and partnership-based SPVs operating within DIFC and ADGM.

Until this Decision, UPs were treated as tax-transparent: profits were taxed at the level of each individual partner. In practice, this led to numerous legal and tax complications:

— difficulty in applying double tax treaties (DTTs) in many counterpart jurisdictions;

— multiple tax declarations required for each partner;

— risk of double taxation on cross-border distributions to foreign partners.

With the new regime, UPs can now obtain the status of corporate taxpayer, streamlining reporting, improving tax efficiency, and facilitating international transactions.

How the new regime works

In order to elect the opaque regime, all partners must unanimously approve the decision and appoint a “Responsible Partner” to communicate with the UAE Federal Tax Authority (FTA). The election must be submitted online to the FTA prior to the first tax period.

Once approved, the UP will be required to:

— maintain financial statements in accordance with IFRS;

— provide audited accounts if turnover exceeds AED 50 million;

— report any change in the composition of partners;

— retain tax and financial documentation for a minimum of five years.

It is essential to note that this election is effectively irreversible — cancellation is only possible with FTA approval and in exceptional circumstances, such as liquidation.

According to PwC Middle East, this option will “fill the gap” between the flexibility of partnership structures and the benefits of corporate residency. Andersen UAE highlights that this change will significantly enhance the attractiveness of the UAE as a jurisdiction for international funds and private equity. PhillipCapital DIFC experts note that for real estate and energy projects, the new regime will allow more efficient deal structuring and reduce registration costs.

Who benefits the most

The opaque regime is particularly useful for:

— family funds seeking unified tax treatment rather than reporting obligations for each beneficiary;

— joint ventures, especially in capital-intensive sectors such as construction, real estate, energy and logistics — the ability to benefit from DTTs and reduce cross-border tax leakage is key;

— private equity partnerships based in DIFC and ADGM that aim to claim treaty benefits on dividends and capital gains at the corporate level.

Key risks to consider

Before making this election, partners should carefully assess the potential risks:

— reversal of the opaque status is extremely difficult;

— not all foreign jurisdictions will automatically recognise the new tax status (double taxation risk may persist);

— groups with global revenues above €750 million will be subject to OECD Pillar Two minimum tax, and the 15 % top-up will apply at the level of the partnership.

Why you need expert tax advisors

Electing for the opaque regime is not simply “filing a form” — it requires detailed financial modelling, proper drafting of the updated partnership agreement, compliance with transfer pricing rules, and consideration of cross-border tax implications.

Errors at this stage could lead to loss of tax benefits or even blocked operations.

The ERG tax team can assist you with:

— full scenario modelling (pre- and post-election);

— drafting updated partnership agreements aligned with the new regime;

— preparing documentation for FTA approval and external audit;

— liaising with foreign tax authorities to ensure recognition of the new status.

If you are considering the “Partnership Election” for your business, JV or family fund — contact our team. We will provide a full assessment and guide you safely through every step of implementation.

The post UAE Corporate Tax: What Is the “Partnership Election” and Why It Matters for International Business appeared first on Eastern Region Group.

At the centre of this reform is the new Anti-Money-Laundering Authority (AMLA) — an EU-level regulator that from 2026 will directly supervise large banks, payment institutions, and crypto service providers operating across the EU.

For the first time, cross-border financial institutions will face a single AML “rulebook” and a single EU supervisor with powers to impose penalties of up to 10 % of global turnover.

Understanding these changes is essential for any business operating in the European financial sector.

What is AMLA?

AMLA is an independent EU agency, created by Regulation (EU) 2024/1665 and headquartered in Frankfurt.

It was formally established in June 2024 and will begin operational work on 1 July 2025. The agency will start exercising direct supervisory powers from 2026, following a one-year preparatory phase.

AMLA has broad authority to:

— license and supervise systemically important institutions active in at least seven Member States;

— overrule national supervisors in cases of AML/CFT failings;

— resolve cross-border supervisory disputes;

— and impose significant fines — up to 10 % of a group’s global annual turnover.

This penalty level is comparable to the GDPR’s maximum sanctions, but applied to AML violations.

Why has the EU created AMLA?

A series of major AML failures — including the Danske Bank and Wirecard cases — and inconsistencies exposed by the 2022 Luxembourg Business Registers ruling highlighted the need for stronger, centralised AML supervision in Europe.

The European Commission opted for a regulation-first approach with a single EU agency to ensure:

— harmonised AML rules across 27 Member States;

— real-time access to transaction and beneficial ownership data for FIUs;

— more effective enforcement and prevention of “regulatory arbitrage.”

Which firms will be supervised by AMLA?

Initial expectations suggest that 40 to 50 cross-border groups will be included in AMLA’s first wave of direct supervision.

This group is likely to include:

— major pan-European banking groups;

— large e-money and payment institutions;

— key crypto-asset service providers (CASPs) under MiCAR.

Academic experts, such as those from Bocconi University, further expect that future cross-border licence applications (for example, under MiCAR or for e-money passports) will be subject to more detailed reviews under AMLA oversight, providing stronger and more consistent EU-wide licensing outcomes.

Anticipated impact on operations (2025–2026)

The introduction of AMLA supervision will bring material changes for many financial groups:

— Adoption of a single, EU-wide AML “rulebook” for all policies and procedures, including CDD checklists and definitions of PEPs.

— Implementation of new data submission requirements via secure APIs to AMLA.

— Updates to outsourcing and cloud service contracts, ensuring that AMLA has appropriate access and audit rights.

— Closer integration with EU sanctions enforcement mechanisms.

— Requirement to produce “equivalent measures reports” for non-EU branches.

For many firms, this will involve a significant programme of internal change, including IT upgrades, policy revisions, governance updates, and staff training.

Key questions for boards and senior management

— Are any entities within the group likely to be classified as “systemically important” under AMLA criteria?

— Is the group’s AML platform capable of meeting AMLA’s technical and supervisory requirements?

— Do current outsourcing and cloud contracts meet the new audit and data access standards?

— What are the financial and operational implications of potential 10 % global turnover penalties?

Why early preparation with specialist support is essential

Transitioning to AMLA supervision will be a complex process. It will require mapping affected entities, redesigning AML frameworks, upgrading technology platforms, updating governance arrangements, and managing engagement with both national supervisors and the new EU authority.

Any gaps or delays may expose firms to enforcement action — including substantial financial penalties and reputational risks.

The Financial Crime & Regulatory team at ERG provides expert support to clients preparing for these changes, including:

— AMLA readiness assessments;

— development of new, compliant AML frameworks;

— preparation of board-level transition plans;

— support for IT and cloud contract alignment;

— representation during AMLA onboarding and review processes.

With the first phase of AMLA supervision commencing in 2026, the time to prepare is now.

Contact ERG for an initial assessment and transition roadmap.

The post EU AML Package 2025: What is AMLA and Why it Will Change Compliance in Europe appeared first on Eastern Region Group.

Known as OECD Pillar Two or the Global Anti-Base-Erosion (GloBE) Rules, this framework sets a new global standard: multinational groups with consolidated revenue above € 750 million must ensure that in every country where they operate, their effective tax rate (ETR) is at least 15 %.

If this is not the case, a so-called “top-up tax” will apply — either paid by the parent company (under the Income Inclusion Rule, or IIR) or collected through other entities in the group (under the Under-Taxed Profits Rule, or UTPR).

In other words: the days of 0 % jurisdictions for large international groups are effectively over.

Why was Pillar Two introduced?

The aim is clear — to reduce the use of low- or no-tax jurisdictions and limit aggressive tax planning by large corporate groups. The OECD designed this system to ensure a fairer global tax environment, where profits cannot simply be shifted to avoid taxation.

More than 60 countries — including the entire EU, the UK, Canada, Australia, and Japan — have already adopted these new rules.

In the Gulf region, the UAE is leading the way, introducing a 9 % corporate tax and a Domestic Minimum Top-up Tax (DMTT) that aligns with the OECD’s global standard. Other GCC countries are still in consultation, but this does not protect regional groups from having top-up taxes applied elsewhere if their ETR remains below 15 %.

What will this mean for international businesses?

This is not just another rate increase — it fundamentally changes how corporate profits are taxed globally.

Top-up taxes will now apply wherever effective tax rates fall below 15 % — even in free zones or in jurisdictions previously considered “tax neutral.”

For typical holding structures in the region, early modelling shows an additional tax burden of 3 to 6 percentage pointscompared to the pre-Pillar Two world.

In response, many corporate groups are already taking action:

— relocating intellectual property (IP) and financing entities from zero-tax hubs to the UAE mainland, where a 9 % rate narrows the gap before top-ups apply;
— looking at how the UAE’s new DMTT can help reduce exposure to foreign UTPR charges;
— reassessing mixed-use structures that combine free zone and mainland income, which now need much more detailed tax calculations.

Some transitional carve-outs (such as deductions linked to payroll and depreciation) can soften the impact — but these reliefs will phase out by 2030.

The key concepts to understand

At the heart of Pillar Two is the Effective Tax Rate (ETR) — calculated for each country, based on financial (not tax) accounts.

If the ETR for a jurisdiction is below 15 %, then top-up tax is due.

Countries like the UAE that introduce their own Domestic Minimum Top-up Tax (DMTT) — if it meets OECD standards — can “neutralise” foreign UTPR exposure.

There are also some temporary safe harbours (for the first three years), which offer relief if companies can show high ETRs or low profits. But after 2026, those disappear — and the full rules apply.

What should boards and CFOs be asking?

First and foremost — which entities within the group will now trigger a top-up, and in which jurisdictions? Having a clear entity map, overlaid with local ETRs, is essential.

Second — can existing finance and tax systems generate GloBE-compliant data? Most ERP systems were never built for this level of jurisdiction-by-jurisdiction reporting. Many groups are discovering major gaps and the need for rapid upgrades.

Third — how will intra-group financing and treasury structures be affected? Arrangements that used to lower tax could now attract penalties under UTPR. Treasury models need to be re-tested.

Fourth — where is IP located, and is it still optimally placed? A zero-tax IP hub might now create a significant tax cost under Pillar Two — moving IP into a 9 % UAE structure could be a more sustainable choice.

And finally — what will the 15 % minimum mean for cash flows, dividend policies, leverage ratios, and executive compensation? Many corporate metrics will be impacted — boards need to run scenario planning now, not later.

Why is expert advice essential?

Pillar Two is not “just another tax law” — it requires a whole new layer of tax and financial modelling, and most companies are discovering they are not fully prepared.

Unlike traditional tax returns, this regime is based on consolidated financial data and formula-driven adjustments. Errors in classifying deferred taxes, missing carve-out opportunities, or getting filing wrong can easily result in permanent tax leakage — or even enforcement from multiple jurisdictions.

The compliance burden is also very high — and most finance systems will need upgrades to handle the new reporting. There is not much time: many groups with calendar fiscal years are already under the new rules as of January 2025.

How ERG can help

The International Tax & Structuring team at ERG supports clients with all aspects of the Pillar Two transition:

— running detailed simulations to identify where top-up taxes are likely to arise;
— reviewing IP, treasury, and holding structures to optimise outcomes under the new 15 % floor;
— advising on how the UAE’s DMTT can be used to manage exposure to foreign tax rules;
— integrating new data points into finance systems and compliance processes;
— preparing board-level reports and roadmaps to manage the transition smoothly.

Why acting now is critical

The new global minimum tax is already in force for many groups — and the longer businesses delay, the greater the risk of both tax costs and compliance penalties.

Early preparation is the key to managing both financial impact and operational burden.

For a clear readiness assessment and practical transition plan — contact the ERG team today.

The post OECD Pillar Two: the 15 % Global Minimum Tax is Now a Reality — What This Means for International Structures appeared first on Eastern Region Group.

A “beneficial owner” is any natural person who directly or indirectly holds at least 25 % of the shares, voting rights, or economic interests in a company—or an equivalent degree of control in a partnership, foundation, or trust. The 25 % threshold is now legally fixed across all Member States, which may only choose to set a lower, but not higher, threshold.

Additionally, the new EU AML Regulation requires banks, legal firms, auditors, corporate service providers, and crypto platforms to actively verify the entries in the register against independent documents and to report any discrepancies to the national Financial Intelligence Unit (FIU).

This package follows the 2022 Luxembourg Business Registers decision, which had briefly disrupted public access to BO data. The EU’s goal is now clear: to enforce uniform transparency and verification standards across all Member States. As Hogan Lovells notes, this new regime moves the EU “from light-touch reporting to active verification of ownership chains,” with regulators required to audit at least 10 % of register entries annually.

In practice, this will have a clear and immediate effect on day-to-day corporate compliance and banking operations.

From July 2025, banks across the EU must classify any corporate structure that cannot produce a valid register extract as “high risk.” This will trigger enhanced due diligence, require approval by senior management, and mandate annual refreshes.

As DLA Piper warns, passive holding companies and layered nominee structures will face the greatest compliance burden, as banks will now be required to fully document and “pierce” all intermediary layers. Changes in beneficial ownership must be updated in most national registers within 14 days—non-compliance may result in civil fines or even criminal charges for directors. Norway’s new UBO registry, for instance, will begin imposing daily penalties for late filings from 31 July 2025.

Freshfields’ latest AML Navigator predicts growing pressure on businesses to simplify complex multi-layer holdings or move shareholder vehicles to more digitally efficient jurisdictions. Compliance costs will rise and personal liability for board members will become a growing concern.

As Matthias Lehmann, Partner at Freshfields, notes: “The days of a once-a-year shareholder declaration are over; boards will need live dashboards of beneficial-owner changes.” Samantha Brown, Global AML Lead at Hogan Lovells, adds: “Expect more questions on ‘control by other means’—veto rights, golden shares, family agreements—even where no one hits 25 %.”

In short, boards and compliance teams will need to adapt quickly. Already, compliance technology providers report strong demand for automated tools that monitor BO registers in real time and trigger alerts when an extract expires.

For the coming 12–18 months, businesses should consider four key actions:

First, review nominee layers—multi-jurisdictional chains will trigger more frequent KYC queries. Where possible, consider streamlining ownership structures.

Second, align shareholder agreements—partners must now accept faster disclosure requirements and new audit rights.

Third, update onboarding procedures—adding “verified BO extract” as a precondition for new accounts or loan facilities.

Finally, prepare for AMLA oversight—systemically important banks and selected crypto exchanges will fall under AMLA’s direct supervision starting July 2025.

Even with this harmonisation, 27 national registers will remain, with 27 slightly different procedures, timelines, and penalties. A single missed update could lead to frozen bank accounts or disrupted cross-border dividend payments.

This is why working with expert advisors remains essential. ERG’s regulatory team helps clients map discrepancies across jurisdictions, calibrate risk ratings, and implement automated BO monitoring—keeping beneficial ownership data accurate and timely in every market where you operate.

If your business is preparing for July 2025, now is the time to act. Contact us for a full audit of your corporate structure and a roadmap for simplifying nominee layers and automating compliance with the new 25 % beneficial-owner rule.

The post EU 6AMLD: the 25 % Beneficial-Owner Rule Goes Pan-European appeared first on Eastern Region Group.