Contributed By Rogério Alves & Associados
The sanctions landscape in Portugal remains highly complex and is driven almost entirely by developments at EU level. EU restrictive measures have continued to expand and be refined – particularly in relation to Russia/Ukraine and other geopolitical hotspots – with frequent amendments to listings and sectoral restrictions.
Law No 97/2017 of 23 August, as amended by Law No 58/2020 of 31 August, regulates the application and enforcement of restrictive measures adopted by the United Nations or the European Union and establishes the system of penalties applicable to breaches of those measures.
In 2024, the EU adopted Directive (EU) 2024/1226 on the definition of criminal offences and penalties for the violation of Union restrictive measures. The Directive harmonises the criminalisation of sanctions breaches and establishes minimum rules on penalties, which member states, including Portugal, must transpose, further raising the compliance bar for companies and financial institutions. The European Commission opened infringement procedures against 18 member states, including Portugal, for failing to transpose Directive (EU) 2024/1226 within the prescribed timeframe, underscoring the importance attached to the effective application of Union restrictive measures.
Finally, in December 2025, Portugal transposed Directive (EU) 2024/1226 through Law No 72/2025 of 23 December. The sanctions environment in Portugal is now more demanding than a year ago, particularly for regulated financial and capital markets entities. Before Law No 72/2025, breaches of the Union’s restrictive measures were punished mainly as administrative offences; nowadays, criminal penalties have become the predominant form of sanction for this type of conduct, in a clear move to strengthen the coercive nature of these measures.
Under Law No 72/2025 of 23 December, the Portuguese Penal Code has been amended so that breaches of the restrictive measures set out in Article 28 of Law No 97/2017 of 23 August now constitute predicate offences for the crime of money laundering.
At EU level, sanctions enforcement is being strengthened through criminal law. Directive (EU) 2024/1226 was transposed by Law No 72/2025 of 23 December. It sets out minimum rules on the criminalisation of sanctions violations and on the level of penalties. It seeks to prevent the circumvention of EU sanctions, including those adopted following the Russian aggression against Ukraine. Harmonising national criminal law in this field will facilitate the investigation and prosecution of violations of EU sanctions in all member states, making EU restrictive measures more effective.
Law No 83/2017 of 18 August sets out the Portuguese framework on the prevention of money laundering and terrorist financing. In 2025 it was amended by Law No 70/2025 of 22 December to implement measures under Regulation (EU) 2023/1113 on information accompanying transfers of funds and certain crypto‑assets.
Sanctions compliance affects the entire economy, but some sectors are particularly exposed. Banking and financial services are at the forefront, given their central role in implementing asset freezes, blocking payments and monitoring transactions; credit and financial institutions are subject to detailed screening obligations under the AML/CTF framework.
Capital‑markets participants – including investment firms, fund managers and custodians – are also heavily impacted, notably by restrictions on dealing in certain securities, on new debt and equity issues and on providing investment services to listed persons.
Insurance and pensions, as well as sectors engaged in international trade in sensitive goods – such as energy, commodities, shipping/logistics and dual‑use or high‑technology products – are likewise significantly affected by trade and sectoral measures in the EU regimes.
Other entities affected by sanctions regulations include, in particular, entities engaged in the import, export, purchase, sale, transfer, transit or transport of goods, auditors, statutory auditors and accountants, estate agents, traders dealing in high-value goods, gambling operators and crypto-asset service providers, amongst others.
Portugal applies the full range of restrictive measures adopted at UN and, in particular, EU level. These include targeted financial sanctions – primarily asset freezes and prohibitions on making funds or economic resources available, directly or indirectly, to listed individuals and entities – as well as travel bans on designated persons.
Failure to comply with “restrictive measures” is punishable. The penalties provided for by law range from administrative offences to imprisonment, depending on the seriousness of the conduct and its potential to cause harm to those whom the “restrictive measure” in question is intended to protect.
A ruling may also be made to publish the conviction of natural or legal persons.
“Restrictive measures” are intended to achieve at least one of the following objectives:
“The restrictive measures” provided for in Portuguese law apply to natural persons as well as to legal persons, whether public or private, and also to property, funds and economic resources located within national territory, regardless of the nationality, residence or registered office of their owners, beneficiaries or parties involved.
Sanctions applicable in Portugal are predominantly supranational in origin. UN Security Council measures are implemented via EU law and, where necessary, through national acts, while EU restrictive measures take the form of regulations and decisions that are directly applicable and binding in Portugal.
At a domestic level, Law No 97/2017 of 23 August, regulates the implementation and enforcement of restrictive measures adopted by the UN or the EU and establishes the system of penalties applicable to breaches of these measures.
To ensure the effective investigation and prosecution of violations of Union restrictive measures, member states’ competent authorities are required to co-operate with each other through and with Europol, Eurojust and the European Public Prosecutor’s Office, by sharing information.
The authorities with regulatory, supervisory and/or enforcement powers as well as the aim to promote good practices include the following:
Supervision of compliance by obliged entities is primarily carried out through the AML/CTF framework. Banco de Portugal supervises banks, payment institutions and other financial intermediaries; the CMVM (Portuguese Securities Market Commission) oversees investment firms, fund managers and capital markets participants; and the ASF (Insurance and Pension Funds Supervisory Authority) is responsible for insurers, reinsurers and pension fund entities. Other bodies, such as the Tax and Customs Authority and ASAE, have roles in enforcing trade and customs-related aspects of sanctions. Where breaches amount to criminal offences under national law, investigations and prosecutions are carried out by the Public Prosecution Service (Ministério Público) before the criminal courts.
Created in 2015, the Committee for the Co-Ordination of Policies to Prevent and Combat Money Laundering and the Financing of Terrorism is under the supervision of the Ministry of Finance. Its main mission is to assess and propose the adoption of preventive measures on fighting AML/CTF.
The Directorate-General for Foreign Policy of the Ministry of Foreign Affairs and the Office for Planning, Strategy, Evaluation and International Relations of the Ministry of Finance jointly exercise the powers of the competent national authorities in relation to restrictive measures.
It is the responsibility of these authorities to:
In Portugal, overall co‑ordination of restrictive measures rests with the Directorate‑General for Foreign Policy of the Ministry of Foreign Affairs and the Office for Planning, Strategy, Evaluation and International Relations of the Ministry of Finance, which act as the national competent authorities and work with other public bodies to implement and clarify sanctions.
Day‑to‑day monitoring and administrative enforcement is largely carried out through the AML/CTF framework by sectoral supervisors (such as Banco de Portugal, CMVM and ASF), which verify that “obliged entities” have appropriate systems and controls in place and may impose administrative sanctions where they fail to do so.
Where facts suggest a breach of restrictive measures, executing entities and supervisors must report them to the Prosecutor General of the Republic, who directs criminal investigations and prosecutions before the criminal courts based on the criminal offence of “violation of restrictive measures” set out in Law No 97/2017.
Under the republished Law No 97/2017, as amended by Law No 72/2025, a deliberate breach of UN or EU restrictive measures – for example by making funds or economic resources available to a designated person, failing to freeze assets, violating travel bans or entering into prohibited legal relationships – constitutes the criminal offence of “violation of restrictive measures”.
For individuals, this offence is punishable by imprisonment from one to five years, rising to five to eight years where military or dual‑use items are involved, while negligent breaches are punishable with imprisonment from six months to two years and six months.
Legal persons can be held criminally liable under the general corporate liability regime and face turnover‑based fines of up to 1% or, for more serious conduct, up to 5% of worldwide turnover, or up to EUR8 million/EUR40 million, where turnover cannot be established, with these maxima halved in cases of negligence.
The law also provides for aggravation where offences are committed by public officials or in the context of criminal organisations, as well as special mitigation where the offender co‑operates in establishing the truth, and it classifies violations of restrictive measures as predicate offences for money laundering and as serious crimes for the purposes of enhanced investigative and confiscation tools.
Sanctions‑related conduct by financial and certain non‑financial intermediaries is primarily enforced through the administrative sanctioning powers of sectoral supervisors under the AML/CTF regime, which requires “obliged entities” to implement screening, monitoring and internal controls to give effect to asset‑freezing and other restrictive measures.
Breaches of these organisational duties – including failures connected to the implementation of sanctions – may give rise to administrative offences and fines, corrective measures and other supervisory interventions. However, publicly available information on enforcement specifically framed as administrative penalties for breaches of restrictive measures (as opposed to broader AML or sectoral compliance failures) remains limited, and supervisory practice tends to be reflected in non‑public decisions and remedial programmes rather than in reported case law.
In recent years, criminal enforcement has focused on financial flows linked to EU sanctions regimes, particularly those targeting Russia and Iran. In a 24 May 2023 decision, the Lisbon Court of Appeal confirmed that facilitating deposits above EUR100,000 for certain Russian nationals without residence permits may amount to the crime of “violation of restrictive measures” under Law No 97/2017 when read together with Article 5‑B of Regulation (EU) No 833/2014 and stressed that the EU regulation creates direct obligations for private parties without the need for additional national implementing acts.
These appellate decisions illustrate a growing willingness by the criminal courts to rely on Article 28 Law 97/2017 alongside EU regulations to pursue sanctions-related misconduct, often in tandem with money laundering and related financial offences.
Portuguese law allows for both general and specific mechanisms to attenuate penalties for sanctions breaches. Article 29‑B of Law No 97/2017 provides for special mitigation of the penalty where the offender actively co-operates in establishing the truth before the close of the first instance trial, by reference to the general rules on mitigation in the Penal Code.
Courts also have considerable discretion within the wide ranges of imprisonment and turnover-based fines laid down in Articles 28 and 29 to calibrate sanctions according to the gravity of the conduct, the degree of fault and the preventive needs of the case.
In practice, early internal detection and remediation, voluntary disclosure to competent authorities, robust sanctions and AML compliance frameworks and full co-operation during investigations are important factors when authorities and courts decide how to apply these mitigation tools in individual cases.
The Portuguese sanctions regime does not operate based on pure strict liability for criminal offences. The offence of “violation of restrictive measures” expressly requires either intentional conduct or, in a separate provision, negligent conduct; there is no criminal liability in the absence of at least negligence.
That said, the combination of criminalisation of negligence and the stringent organisational duties imposed on “obliged entities” under the AML/CTF framework means that entities may face liability where they ought reasonably to have known of, or prevented, a breach. Administrative enforcement by supervisors can also sanction failures in systems and controls without the need to prove individual intent, but this remains within the administrative offence regime rather than constituting strict criminal liability.
It is possible to obtain authorisations or derogations from certain sanctions obligations, but only to the extent that the underlying UN or EU restrictive measures themselves provide for exceptions.
Law No 97/2017 allocates competence for deciding such requests to the national competent authorities and sets procedural rules and deadlines for the authorisation of specified fund transfers and certain operations, while making clear that the substantive conditions and grounds for derogation are those laid down in the relevant EU regulations or UN measures.
In practice, parties seeking to rely on derogations must therefore demonstrate that their proposed transaction or activity falls within an exception expressly allowed in the applicable sanctions programme and submit a duly documented request to the competent authorities.
Portugal does not operate a standalone national “general licence” regime specifically authorising the provision of legal services to all designated persons. Whether legal services can be provided in each case depends primarily on the terms of the applicable EU restrictive measures, which may allow or restrict certain professional services in particular regimes, and on the general prohibitions on making funds or economic resources available to designated persons. At national level, Law No 97/2017 expressly exempts lawyers and solicitors from reporting obligations concerning breaches of restrictive measures when they provide legal advice or represent clients in judicial proceedings, thereby safeguarding the right of defence and access to legal representation, but this is not a general authorisation to ignore EU‑level service restrictions.
The entities mentioned in Law 97/2017 must co-operate with the national competent authorities – namely the Directorate General for Foreign Policy of the Ministry of Foreign Affairs and the Office for Planning, Strategy, Evaluation and International Relations of the Ministry of Finance – by providing any information that facilitates the application of restrictive measures and must immediately inform those authorities whenever they execute a measure, such as freezing funds or economic resources.
When an executing entity becomes aware of, or suspects, any act or omission that may constitute a breach of a restrictive measure, it must immediately report this to the Prosecutor General and to the national competent authorities (a formal criminal denunciation).
Supervisory bodies, such as, for example, the Bank of Portugal, have a parallel duty whenever, in the course of supervision, they detect facts that may amount to such violations, and failure to comply with certain communication obligations that form part of a restrictive measure can itself constitute a criminal offence.
In addition, under Law 83/2017, all obliged entities (financial and specified non-financial) must immediately report to the Public Prosecutor’s Office whenever they know, suspect or have reasonable grounds to suspect that funds or assets are proceeds of crime or related to terrorist financing, abstaining from executing suspicious operations and following the suspension and reporting procedure in Articles 43, 44 and 47, while sector-specific notices from the Bank of Portugal and the Authority for Food and Economic Safety further detail and reinforce these duties, including the obligations to communicate and denounce under Articles 23 and 24 of Law 97/2017 and to act as interlocutors with the national competent authorities.
In the past three years, notable sanctions related developments in Portugal have included:
The main “forward-looking” change has in effect already occurred: Law 72/2025 of 23 December, substantially strengthens the criminal framework for enforcing EU restrictive measures in Portugal, by broadening and detailing the offence of violation of restrictive measures, introducing high turnover-based fines for legal persons, adding specific aggravating and mitigating circumstances and whistle-blower protection, and republishing the national sanctions regime in consolidated form.
In parallel, Portuguese authorities have publicly intensified their enforcement activity. The Public Prosecutor’s Office and the Tax and Customs Authority are reportedly conducting investigations into suspected breaches and circumvention of EU Russia-related sanctions, including scrutiny of trade flows through third countries. These investigations may result in the first significant Portuguese enforcement precedents in this area.
Because Portugal implements UN and EU restrictive measures primarily through EU law and Law 97/2017, the procedure depends on whether the person challenges the EU listing itself or a Portuguese implementing act.
For listings adopted by the European Union (for example, under Regulations 269/2014, 833/2014, etc), the person or entity is informed of the decision and the reasons, either directly or by notice in the Official Journal, and is given the opportunity to submit observations and a request for reconsideration to the Council. The Council must review the listing considering any observations or new evidence and may amend or remove the name. In parallel, the listed person can bring an action for annulment before the General Court of the European Union under Article 263 of Treaty on the Functioning of the European Union within two months of the communication or, failing that, of publication.
At national level, Articles 20 and 21 of Law 97/2017 provide that any act of a Portuguese public entity that applies or executes restrictive measures is subject to judicial challenge “under the general terms”, meaning that the person must use the ordinary Portuguese rules on judicial review of administrative acts rather than a special sanctions appeal body.
Where the complaint actually concerns the underlying UN or EU act (for example, the inclusion in a UN or EU list) but is submitted to the Portuguese competent authorities, those authorities must forward it within ten working days to the body competent to decide at UN or EU level, without this implying any support by the Portuguese state for the complaint.
Under the sanctions framework applicable in Portugal, a successful delisting challenge may result in the removal of the individual or entity from the relevant sanctions list, the lifting of the associated restrictive measures (including asset freezes and prohibitions on making funds or economic resources available), and the release of frozen assets. It may also lead to a judicial finding that the listing was unlawful, for example due to insufficient evidence, inadequate reasoning, or procedural defects. While damages may in principle be sought, particularly in the context of unlawful EU sanctions listings, compensation is exceptional and requires proof of an unlawful act, actual loss and a causal link between the two. Consequently, the primary and most common outcome of a delisting challenge is the annulment of the listing and the cessation of the sanctions measures.
The timeframe for obtaining delisting varies depending on the sanctions regime and the route pursued, as there is no statutory deadline for obtaining delisting.
Proceedings before the General Court of the European Union typically take around 18 months on average, although the duration of sanctions cases may vary depending on their complexity and any subsequent appeal.
Portugal does not have an autonomous, across-the-board prohibition on the export or import of services, but a number of sector-specific service bans apply in Portugal because they are laid down in directly applicable EU sanctions regulations.
The most extensive restrictions currently concern Russia and Belarus. Under Council Regulation (EU) No 833/2014, as amended, EU persons are prohibited from providing a broad range of services to the Russian government and persons established in Russia, including accounting, auditing, bookkeeping, tax consulting, business and management consulting, public relations, architectural and engineering, IT consultancy, legal advisory (subject to exceptions), advertising, market research, product testing, technical inspection, software, cloud computing and certain technology-related services. Additional restrictions apply in sectors such as financial services, transport, energy and telecommunications. Similar service restrictions exist under other EU sanctions regimes where applicable. Portugal has not adopted separate national prohibitions on the export or import of services beyond those established under EU law.
Similar to the position regarding services, Portugal has not adopted separate national prohibitions on the export or import of goods beyond those established under EU sanctions legislation.
There are extensive EU sanctions prohibiting or restricting the export, sale, supply, transfer, purchase or import of certain goods to or from specific countries, sectors, governments, entities and individuals. The most significant example concerns Russia and Belarus. Under Council Regulation (EU) No 833/2014 and Council Regulation (EC) No 765/2006, as amended, EU persons are prohibited from exporting or importing a wide range of goods, including military and dual-use items, advanced technology products, industrial goods, aviation and maritime-related products, energy-related equipment, luxury goods, certain machinery and electronics, and various raw materials and commodities. Additional restrictions apply to goods used in strategic sectors such as defence, energy, transport and telecommunications. Similar trade restrictions exist under other EU sanctions regimes, where applicable.
In Portugal, there is no specific case law on the impact of international sanctions on the performance of contractual obligations. However, the relevant legal framework is set out in Law No 97/2017 of 23 August, which states that acts carried out in breach of restrictive measures adopted by the UN or the EU are null and void and that the entities responsible for implementing those measures are not liable to pay compensation in respect of contracts whose performance has been affected, directly or indirectly, in whole or in part, by those sanctions. In practice, when the performance of a contract requires an act prohibited by the regime of restrictive measures, fulfilment of that obligation is no longer enforceable.
In Portugal, there is no case law that directly addresses the enforcement of judgments when issues related to international sanctions arise, but judicial practice shows that the courts block or restrict acts whenever they conflict with restrictive measures. This approach is particularly clear in proceedings linked to sanctions against Russia, in which the Lisbon Court of Appeal affirmed the direct application of Regulation (EU) No 833/2014, upholding account freezes and blocks on funds and refusing transactions that would deprive the restrictive measures of their useful effect. Regarding the matters concerning sanctions against Iran, the Évora Court of Appeal kept the suspension of banking operations and refused to release funds when the route of inheritance through intermediaries suggested an attempt to circumvent the sanctions regime. Therefore, although there is no case law that specifically deals with the enforcement of judgments when sanctions issues arise, the practice of the Portuguese courts shows that acts are restricted or blocked whenever there is a conflict with restrictive measures, thereby ensuring the effectiveness of the sanctions.
Designation decisions are taken at international level: by the United Nations Security Council and, in the case of European Union sanctions, by the Council of the European Union, which places the persons concerned on the lists set out in the annexes to the sanctions regulations.
At a domestic level, Portugal does not have autonomous designation lists. However, the implementation of restrictive measures falls within the joint competence of the Minister for Foreign Affairs and the member of the government responsible for the relevant sector, through acts that identify the addressees of the measures. This is supported by the Directorate-General for Foreign Policy of the Ministry of Foreign Affairs and the Office for Planning, Strategy, Evaluation and International Relations (GPEARI) of the Ministry of Finance, which co-ordinates the implementation of the measures and performs the functions assigned to them by the acts adopting those measures.
Although the legislation does not formally provide for an “indirect designation” of entities by virtue of being owned or controlled by designated persons, in practice they are treated as falling within the scope of the restrictive measures whenever they constitute property, whenever they are in the possession of, or are owned or controlled by designated persons.
The concepts of “ownership” and “control” are clarified in various EU regulations whereby: “owned” means, in practical terms, that the designated person holds 50% or more of the property rights or a majority shareholding in the entity; and “controlled” means that, even without holding a majority shareholding, the designated person has decisive powers over the entity, namely to appoint or remove most of the members of the management, director or supervisory bodies, to use all or part of its assets, to manage its activities on a unified basis, or otherwise to exercise a dominant influence over that entity.
The circumvention of restrictive measures is expressly prohibited under Portuguese law. Article 28(2) of Law No 97/2017 criminalises conduct carried out with the intention of preventing a restrictive measure from producing its effects. This includes, in particular, using or transferring funds or economic resources that are directly or indirectly owned, held or controlled by a designated person, entity or body – and that should be frozen – in order to conceal those assets; providing false or misleading information to hide the identity of the owner or ultimate beneficiary of funds or economic resources that must be frozen; failing to comply with obligations to notify the competent administrative authorities of relevant funds or economic resources located in Portugal; and failing to provide information to those authorities on frozen assets or on assets that should have been frozen but were not, where such information is obtained in the course of a professional activity. In all these cases, the focus is on preventing schemes that would undermine or neutralise the practical effectiveness of the restrictive measures.
In Portugal, a direct breach of sanctions constitutes a criminal offence as do attempts to circumvent those measures. Such conduct is punishable by a term of imprisonment from one to five years. When these offences are committed with negligence, the offender is liable to a term of imprisonment from six months to two years and six months.
In the case of legal entities, the entity itself may incur criminal liability. In addition to the usual criminal measures applicable to legal entities, the law provides for very substantial fines. In broad terms, offences linked to failures in reporting and disclosure may result in fines of up to 1% of the company’s worldwide turnover in the preceding year, or up to EUR8 million when such turnover cannot be determined; offences in which the company actively contributes to the circumvention of sanctions (for example, transferring funds which should be frozen to other group entities, or providing false information as to the ownership or beneficial ownership of such funds) may be punishable by fines of up to 5% of that worldwide turnover, or up to EUR40 million when it cannot be determined. When the conduct is negligent, these maximum limits are reduced by half, allowing the court to tailor the sanction to the seriousness of the offence and the internal organisation of the entity. The law also provides for an increase of one third in the penalties, at both their minimum and maximum limits, when the offence is committed by an employee in the exercise of their duties or within the framework of a criminal association, as well as for special mitigation when, up to the close of the trial hearing at first instance, the offender has provided significant co-operation in establishing the truth.
Avenida Álvares Cabral 61
4 piso 1250-017
Lisboa
Portugal
+351 21 391 10 40
+351 21 391 10 41
geral@raassociados.pt www.raassociados.pt