Financial Crime 2026

Last Updated June 03, 2026

Italy

Law and Practice

Authors



Herbert Smith Freehills Kramer LLP operates through a global network of 26 offices across the UK, EMEA, Asia, Australia and North America, providing premium legal advice on dispute resolution, projects and transactions to the world’s most important organisations. The Italian corporate crime and investigations (CC&I) team is part of the firm’s global disputes and investigations practice and specialises in white‑collar and corporate crime defence, internal investigations and compliance matters, assisting Italian and international companies and their senior executives. The team’s lawyers combine a strong practical and academic background and assist clients on highly sensitive criminal matters, including proceedings before all Italian courts, up to the court of appeals and the Supreme Court. The team’s expertise spans the full range of corporate crime matters, including bribery and corruption, tax and financial crimes, public procurement offences, bankruptcy, fraud, health and safety offences, environmental crimes, cybercrimes and corporate liability. The team also has long‑standing experience in compliance advisory work and in conducting sophisticated corporate internal investigations, including multi‑jurisdictional matters.

Definition of Financial Crimes

Italian law does not provide a single statutory definition of “financial crime”. Criminal offences are distributed across multiple sources – the Italian Criminal Code (Codice Penale; ICC), the Consolidated Finance Act (Testo Unico della Finanza (TUF), Legislative Decree No 58/1998), the Banking Act (Testo Unico Bancario (TUB), Legislative Decree No 385/1993), the Insolvency and Business Crisis Code and various standalone statutes.

Notwithstanding the absence of a unified statutory framework, the descriptive umbrella concept of reati economici (financial crimes) is commonly employed to group offences committed in an economic or commercial context and primarily affecting economic interests, the proper functioning of markets or public finances – including fraud, bribery and corruption, money laundering, market abuse, tax evasion and cyber-enabled financial crimes.

Constituent Elements of the Offence

Under the ICC, any criminal offence, including financial crimes, requires the presence of three essential constituent elements.

Objective element

This element broadly corresponds to the common law concept of actus reus, comprising the defendant’s conduct and, in the case of a result crime, the prohibited result together with the causal connection between the conduct and that result. It also comprises attendant circumstances – ie, factual conditions that must already exist at the time of the conduct (eg, in the offence of insider dealing, the possession of inside information at the moment of the relevant transaction).

Lack of justification

An offence is punishable only where no justification applies. Recognised justifications – such as self-defence or the victim’s valid consent – exclude criminal liability by negating the unlawfulness of the conduct.

Subjective element

The subjective element broadly corresponds to the common law concept of mens rea. The ICC recognises two principal categories of fault: dolo (intent) and colpa (negligence).

Dolo is the default requirement and governs the vast majority of financial crimes. Italian scholars distinguish three forms.

  • Dolo intenzionale (direct intent): the prohibited result is the agent’s direct purpose.
  • Dolo diretto (oblique intent): the agent foresees the result as a virtually certain consequence of their conduct, even if it is not the primary objective.
  • Dolo eventuale: the agent foresees the prohibited result as a real possibility and accepts the risk. Dolo eventuale represents the lower threshold of dolo, occupying a conceptual space between the common law concepts of “intent” and “recklessness”.

Colpa refers to unintentional conduct resulting alternatively from:

  • carelessness (failure to adopt the precautions required by the applicable rules of conduct, distraction, lack of due care);
  • imprudence (unjustified risk-taking);
  • failure to comply with the leges artis governing a professional activity; or
  • violation of rules aimed at preventing specific harmful events.

Colpa cosciente arises where the agent foresees the possibility of the harmful event but proceeds believing it will not occur – distinguished from dolo eventuale in that the agent does not accept the risk. Criminal liability based on colpa is exceptional, arising only where expressly provided for by statute.

Attempt

A criminal offence may be punished as attempted crime where the defendant has performed acts both suitable and unequivocally directed towards the commission of the offence but fails to complete it. The applicable penalty is reduced by one-third to two-thirds.

Conspiracy

Mere conspiracy is generally not punishable, as criminal liability requires that the co‑conspirators go beyond the agreement by attempting or committing the intended criminal offence.

Nevertheless, Italian law provides for specific statutory exceptions, most notably Article 416 ICC, establishing a standalone offence for the creation of, or participation in, an association of three or more persons aimed at committing an indeterminate number of criminal offences – a charge frequently brought in large-scale fraud, money laundering and tax crime prosecutions.

Corporate criminal liability

Criminal liability of legal entities, including companies, was introduced into the Italian legal system by Legislative Decree No 231/2001 (“Decree 231”). Under Decree 231, a company may be held liable where a predicate offence is committed in its interest or for its benefit by senior managers or persons subject to their direction or supervision.

Predicate offences include a broad range of financial crimes, such as fraud against the state or the EU, unlawful receipt of public disbursements, money laundering, self-laundering, fraudulent use of non-cash payment instruments, tax fraud, smuggling, market manipulation and insider trading.

Liability may be avoided if the company adopted and implemented an adequate organisational model designed to prevent such offences. The conditions for exclusion differ depending on the offender’s status. Where the offence is committed by a senior manager, the company must also prove that:

  • it appointed a supervisory body with autonomous monitoring powers; and
  • the offence was carried out through fraudulent circumvention of the organisational model.

Where committed by a subordinate, liability may be excluded by demonstrating that the offence was not made possible by failures in management, organisation or supervision. Sanctions include:

  • financial penalties;
  • disqualification measures (including suspension or revocation of licences and authorisations, bans on contracting with public authorities, exclusion from public grants and incentives, and prohibitions on advertising);
  • confiscation of the proceeds of the offence; and
  • publication of the conviction judgment.

The burden of proof in all criminal proceedings against individuals, including those relating to financial crimes, bears on the public prosecutor. The existence of the crime must be proven beyond any reasonable doubt.

By contrast, in corporate criminal proceedings under Decree 231, while the standard of proof remains the same, the allocation of the burden of proof differs depending on the status of the offender. Specifically, for the public prosecutor to establish corporate liability where the offence is committed by:

  • a senior manager, it is sufficient to demonstrate that the offence was committed by that individual in the interest or for the benefit of the legal entity; or
  • an individual subject to their supervision, it is necessary to additionally demonstrate that the offence was made possible by the senior managers’ failure to fulfil their obligations of direction and supervision.

In Italy, a person can be held criminally liable if they conspire with or assist the principal offender, but this liability generally does not take the form of a separate or secondary offence. Italian criminal law adopts a unified model of participation: anyone who knowingly contributes to the commission of an offence – by assisting, facilitating, instigating or encouraging it – is liable for the same offence committed by the principal. There is no distinct concept of accessory or aiding‑and‑abetting liability; all participants are charged with the underlying offence itself, with differences in their respective roles considered only at the sentencing stage.

Criminal limitation periods determine how long the state has to prosecute an offence and are governed by the ICC. Civil recovery actions are instead governed by the Civil Code and follow separate, generally shorter, timeframes.

Criminal Limitation

Criminal limitation periods are tied to the maximum statutory penalty for each offence, subject to a minimum of six years for felonies (delitti) and four years for misdemeanours (contravvenzioni). The period begins on the date the offence is completed and may be interrupted by procedural acts, but may not be extended beyond the original period by more than one-quarter to twice the original period (depending on the offence and the offender’s criminal record). Following the first-instance judgment, the limitation period ceases to run permanently.

Italian law contains no general discovery rule: the clock runs from the date of commission regardless of concealment (or when it is revealed). For permanent and continuing offences, the limitation period begins when the conduct ceases. No special rule applies to transnational offences.

Civil Limitation

Claims for damages arising from a criminal offence are subject to a five-year limitation period from the date of the offence, unless the applicable criminal statute of limitations is longer.

Where the offence is extinguished on grounds other than limitation, or where a final criminal judgment has been issued, the five-year period runs from the date on which the offence was extinguished or the judgment became final and binding. Damages may be claimed either within the criminal proceedings or before a civil court.

The civil limitation period is interrupted by, inter alia: (i) the service or filing of any relevant petition to court or claim raised within an ongoing judicial proceeding, (ii) any formal notice putting the defendant in default, (iii) the commencement of arbitral proceedings, or (iv) any acknowledgment of the debt by the debtor. Upon interruption, a new limitation period starts; if interruption occurs through the acts under (i), the limitation period remains suspended until the judgment becomes final.

Extraterritorial Application

Italian criminal law is primarily territorial: any individual who commits an offence on Italian territory is subject to Italian law. An offence is deemed committed in Italy where either the conduct or the resulting event occurs there, even if only in part.

Extraterritorial jurisdiction arises in exceptional cases, including:

  • certain serious offences committed abroad by nationals and foreigners alike – eg, counterfeiting of the state seal or legal tender, stamp duty instruments or public credit securities, offences by public officials abusing their functions and offences for which international conventions expressly provide for the application of Italian law;
  • offences committed abroad by Italian nationals carrying a minimum penalty of three years (with additional procedural conditions for lesser penalties, though no such conditions are required for money laundering and corruption-related offences); and
  • offences committed abroad by foreigners (i) against Italy or an Italian national carrying a minimum penalty of one year, provided the defendant is present on Italian territory and the procedural conditions are met; or (ii) against the EU, a foreign state or foreign national carrying a minimum penalty of three years, provided the defendant is present on Italian territory and extradition was not granted or accepted.

Note that no procedural condition is required for corruption-related offences.

International Letters Rogatory and European Investigation Order

International letters rogatory enable one state to request another to perform specific investigative acts (eg, evidence-gathering, search and seizure, witness interviews) (see Legislative Decree No 149/2017 and Articles 723–729-quinquies of the Italian Code of Criminal Procedure (ICCP)):

  • passive rogatory requests (addressed from other states to Italy) are subject to an administrative phase (review by the Minister of Justice), a jurisdictional phase (the district prosecutor must refuse execution in certain cases) and an executive phase; and
  • active rogatory requests (addressed from Italy to other states) are forwarded by the Minister of Justice, who retains a power to stop them in specific cases.

Within EU member states, international letters rogatory have largely been replaced by the European Investigation Order (EIO), applicable to a wide range of investigative acts (Legislative Decree No 108/2017). The EIO is transmitted directly between judicial authorities, and transposed and executed according to the law of the requested state.

Information Sharing Among Police Forces and Administrative Authorities

On the administrative side, the Italian Financial Intelligence Unit (FIU), established within the Italian Central Bank (Banca d’Italia), exchanges financial intelligence with foreign counterparts through the Egmont Group network and pursuant to EU law, including suspicious transaction reports relevant to money laundering and terrorist financing (see 3.3 Money Laundering). Italy’s securities market regulator (Commissione Nazionale per le Società e la Borsa; CONSOB) participates in the Multilateral Memorandum of Understanding of the International Organization of Securities Commissions (IOSCO), while the Banca d’Italia co-operates within the Single Supervisory Mechanism and EU-level AML supervisory colleges.

As to law enforcement, the Financial Police (Guardia di Finanza – GdF) and the National Police (Polizia di Stato) co-operate internationally through Europol and Interpol channels.

Extradition

See 1.6 Extradition and Prohibited Destinations.

Legal Requirements and Procedure for Extradition of Financial Crime Suspects

The legal framework governing extradition is primarily based on the applicable bilateral or multilateral treaty between Italy and the foreign state concerned; in the absence of specific treaty provisions, Articles 697–722-bis ICCP apply on a residual basis.

Procedure for extradition

Passive extradition (surrender requested by a foreign state) follows three phases.

  • An initial administrative review by the Minister of Justice, who then forwards the request to the prosecutor before the competent court of appeal.
  • A jurisdictional phase, in which the person sought is identified and questioned with defence counsel – if consent is given, the judicial procedure is bypassed; otherwise, the court of appeal decides on the basis of serious indicia of guilt (pre-trial) or an irrevocable conviction consistent with Italy’s fundamental legal principles (enforcement), subject to appeal before the Supreme Court.
  • A final administrative decision by the Minister of Justice.

Precautionary measures, including arrest, may be applied throughout.

Active extradition (surrender requested by Italy) is initiated by the Minister of Justice (on his or her own initiative or at the request of the public prosecutor), who files the request with the competent foreign authority; the remainder of the proceedings is governed by the law of the requested state.

Legal bars for extradition

Italian law establishes the following mandatory and discretionary bars to extradition:

  • double criminality (Article 13(2) ICC): the conduct must constitute an offence under both Italian law and the law of the requesting state – unless the applicable treaty provides for specific limitations, financial crimes generally satisfy this condition;
  • the speciality principle – the extradited person may not be prosecuted for acts other than those for which extradition was granted;
  • ne bis in idem (a final judgment has already been rendered in respect of the same conduct);
  • political offences;
  • risk of persecution, discrimination, cruel or inhuman treatment, or violation of fundamental rights;
  • risk of application of death penalty, unless a different sentence has been irrevocably imposed or the death sentence commuted;
  • insufficient fair trial guarantees or risk of consequences of exceptional gravity due to the person’s health or age;
  • pending criminal proceedings or sentences to be served in Italy; and
  • foreign convictions conflicting with Italy’s fundamental legal principles.

The European Arrest Warrant

The European Arrest Warrant (EAW; Law No 69/2005) is a simplified surrender mechanism between EU member states based on the principle of mutual trust. Key features include:

  • the elimination of the political filter (the Minister of Justice retains a purely administrative role);
  • judicial authorities (public prosecutor and courts) of the involved states issue the EAW and decide on execution;
  • the inapplicability of the double criminality requirement for 32 categories of serious offences – including some white-collar crimes – provided the maximum sentence in the issuing state is at least three years; and
  • uniformly established grounds for refusal.

Extradition of Italian Nationals

Under Article 26(1) of the Italian Constitution, Italy may surrender its own citizens only where an applicable bilateral treaty expressly permits it; nationality remains a relevant element that the Minister may consider as a ground to refuse or defer extradition. In the context of the EAW, the Court of Appeal may refuse to surrender an Italian citizen (or an EU citizen lawfully resident in Italy for at least five years) pursuant to an EAW issued for enforcement purposes, on condition that the sentence be served in Italy.

Country-Specific Restrictions

Italy does not maintain a list of specific countries to which extradition is prohibited; refusal is assessed on a case-by-case basis by reference to the legal bars described in the foregoing.

Principal Authorities

Financial crime in Italy is investigated and prosecuted by a network of authorities:

  • the GdF, Italy’s specialised economic and financial law enforcement agency;
  • the Procura della Repubblica (Public Prosecutor’s Office), Italy’s criminal prosecution authority, vested with the exclusive power and constitutional duty to initiate criminal investigations and proceedings;
  • CONSOB, Italy’s securities market regulator, vested with administrative enforcement powers;
  • the Banca d’Italia, vested with prudential supervisory authority over banks and financial intermediaries, including oversight of regulatory compliance and financial stability;
  • the FIU, responsible for receiving and analysing suspicious transaction reports;
  • the Agenzia delle Entrate, Italy’s revenue agency, responsible for tax assessment and collection; and
  • the Autorità Nazionale Anticorruzione (ANAC), Italy’s anti-corruption authority, vested with supervisory and regulatory powers over public procurement and the integrity of public administration.

Parallel Criminal, Civil and Administrative Regimes

Italy operates a parallel enforcement regime: a single financial offence may give rise simultaneously to criminal prosecution, administrative proceedings before CONSOB or the Banca d’Italia, tax proceedings before the Agenzia delle Entrate, and civil recovery actions. Co-ordination is ensured through:

  • mandatory reporting obligations (CONSOB, the Banca d’Italia, the FIU and the Agenzia delle Entrate must refer suspected criminal conduct to the Public Prosecutor’s office);
  • information-sharing protocols between the GdF and regulatory authorities; and
  • the enforcement of the ne bis in idem principle.

Italian financial crime investigations may be initiated through multiple channels, including:

  • whistle-blower reports (protected under Legislative Decree No 24/2023);
  • victim complaints;
  • suspicious transaction reports filed with the FIU under AML obligations (see 3.3 Money Laundering);
  • tax audit referrals by the Agenzia delle Entrate and GdF;
  • regulatory referrals by CONSOB, Banca d’Italia and ANAC; and
  • referrals or direct investigations by the European Public Prosecution Office for offences affecting EU financial interests.

Public prosecutors are bound by the constitutional principle of mandatory prosecution and thus have no formal discretion to decline prosecution once sufficient evidence of a criminal offence exists. In practice, however, due to resource constraints and priority criteria defined by each Public Prosecutor’s Office, not all reported matters result in active investigation

Documents and Information Requests

The public prosecutor, judges and judicial police may issue requests for documents and information (RFIs). However, save for specific exceptions, there is no legal obligation to comply with RFIs. Non-compliance may nonetheless trigger a search and seizure and expose company directors to criminal liability for aiding and abetting.

Searches and Seizures

Searches may be ordered by the public prosecutor or, in cases of urgency, carried out by the judicial police on their own initiative. Searches may concern persons, premises, vehicles or computer systems. Seizure of relevant items may follow.

Interviewing Suspects and Witnesses

Witnesses may be summoned to give statements before the judicial police or the public prosecutor; only statements given in this formal context may be used in court. Suspects may be interviewed only in the presence of defence counsel and cannot be compelled to self-incriminate. Information gathered without counsel in urgent on-scene circumstances cannot be used in proceedings.

Tracing, Freezing and Confiscating Assets (including Digital and Crypto-Assets)

Assets – including digital assets and crypto-assets – may be seized as instruments or proceeds of crime, or frozen preventively by a judge. Confiscation may be applied following a conviction, or without a conviction in exceptional circumstances – such as where the suspect is linked to organised crime or mafia-type associations, and the assets are presumed to be of illicit origin due to a disproportion between the suspect’s declared income and their actual wealth (see 6.3 Proceeds of Crime Recovery).

Italian authorities primarily use data analytics and AI to detect money laundering and tax fraud patterns, blockchain analysis tools to trace crypto-asset transactions and identify wallet holders, and court-authorised malware for covert automated device surveillance.

Personal data collected through these tools is subject to the General Data Protection Regulation (GDPR; EU Regulation No 2016/679) and Legislative Decree No 51/2018, while digital evidence must comply with the rules on admissibility and preservation set forth by the ICCP. No domestic statutory framework specifically governs the use of AI or blockchain analysis in criminal investigations.

Role of Internal Investigations

Internal investigations play an increasingly significant role in Italian financial crime practice. Companies that discover potential misconduct through internal audit, compliance reviews or whistle-blower reports will typically commission an internal investigation to assess exposure, contain the conduct and determine whether voluntary disclosure is appropriate. Findings are also central to the companies’ defence in criminal proceedings.

Legal Privilege

Italian law provides two layers of protection:

  • professional secrecy, entitling defence counsel to refuse to testify and to oppose the production of covered documents (to ensure effective legal representation); and
  • “guarantees of criminal defence freedom”, imposing specific procedural limits on inspections, searches, seizures and interceptions connected to defence activity, aimed at preserving the confidentiality of communications between counsel and client.

In-house counsel benefit from neither protection, as they lack the requisite independence; communications between a company and its in-house lawyers are therefore fully exposed to investigative powers.

Data Protection and Employment Law

Internal investigations involving employee data must comply with limits derived from constitutional and statutory provisions, including the GDPR, Legislative Decree No 196/2003 and Law No 300/1970 (the “Workers’ Statute”).

Principal constraints include:

  • a prohibition on covert or remote employee monitoring;
  • a requirement that disciplinary measures comply with procedural guarantees, including the employee’s right to be heard; and
  • protection against compelled self-incrimination.

Voluntary Disclosure and Co-Operation

In criminal proceedings against individuals, active co-operation by the defendant may be the ground for sentence reductions, including mandatory ones.

Under Decree 231, post-offence remediation, restitution of profits and co-operation with the judicial authority are expressly listed as grounds for reduction of corporate sanctions.

Financial crime investigations regularly involve arrests and questioning of suspects. Suspects enjoy robust protections against self-incrimination: they are entitled to remain silent, and no adverse inference may be drawn from the exercise of that right. Counsel must be present at all stages of formal questioning (see 2.3 Investigatory Powers).

Witnesses, by contrast, may be compelled to testify; refusal without lawful justification constitutes a criminal offence.

As regards document production, the ICCP does not impose a general obligation to comply with RFIs – however, non-compliance is likely to trigger searches and seizures (see 2.3 Investigatory Powers).

Italian law provides extensive pre-charge and pre-trial powers to seize and restrain assets through two main tools: preventive seizure under the ICCP (a precautionary measure within criminal proceedings) and preventive confiscation under the Anti-Mafia Code (applicable even outside criminal proceedings; see 6.3 Proceeds of Crime Recovery).

Seizure as a Precautionary Measure

Under the ICCP, the judge may order preventive seizure at the public prosecutor’s request, including before formal charges, provided that:

  • there are reasonable grounds to believe that a criminal offence has been committed (fumus commissi delicti); and
  • there is a risk that the free availability of the asset would aggravate or perpetuate the consequences of the offence or facilitate the commission of further offences (periculum in mora).

Preventive seizure may also extend to assets liable to confiscation, including assets of equivalent value (where the direct proceeds of the crime cannot be specifically identified).

Preventive Confiscation

Under Legislative Decree No 159/2011 (the “Anti-Mafia Code”), assets may be seized and ultimately confiscated outside criminal proceedings and independently of any charge or conviction. These measures may be applied against individuals deemed socially dangerous, including on the basis of a presumed connection to organised crime or mafia-type associations (see 6.3 Proceeds of Crime Recovery).

Extension to Third Parties

Both regimes may be extended to assets held by third parties – including nominees, beneficial owners, family members, associates and corporate vehicles – where the interposition is deemed fictitious or the third party is considered a mere nominee of the suspect.

Cross-Border Reach

Italian authorities may seek the freezing of assets located abroad through EU or multilateral co-operation.

Italian criminal law does not have a single general fraud statute. The principal offences are the following.

  • Fraud (Article 640 ICC): deception or artifice inducing error in the victim, resulting in unjust profit and corresponding harm – fines and imprisonment from six months to three years (aggravated to one to five years in case of fraud against the state).
  • Computer fraud (Article 640-ter ICC): fraud through unauthorised interference with computer systems or data manipulation – fines and imprisonment from six months to three years.
  • Embezzlement (Article 646 ICC): misappropriation of entrusted assets – fines and imprisonment from two to five years.
  • Fraudulent bankruptcy (Articles 216 et seq. Law No 267/1942 and Articles 322 et seq Legislative Decree No 14/2019): asset dissipation, preferential payments and false accounting by directors of insolvent companies – imprisonment from three to ten years.
  • Misappropriation of public funds (Article 316-bis ICC): misuse of public grants or subsidies, including EU funds – imprisonment from six months to four years.

All principal fraud offences require intentional conduct, a causal connection between the deceptive conduct and the harm or unjust enrichment, and – in most cases – actual economic prejudice to the victim.

Public Sector Bribery

Italian law provides a detailed and graduated framework of public sector corruption offences.

The principal crimes are the following.

  • Bribery through acts conflicting with official duties (Article 319 ICC): a public official receives money or other benefits, or accepts a promise thereof in exchange for performing (or having performed) an act conflicting with the duties of their office, or in exchange for omitting or delaying (or having omitted or delayed) an act of their office – imprisonment from six to ten years.
  • Bribery for the exercise of a function (Article 318 ICC): a public official receives money or other benefits either in exchange for carrying out a specific act not conflicting with their duties or for making themselves potentially available to the briber, even without reference to a specific act – imprisonment from three to eight years.
  • Bribery in judicial acts (Article 319-ter ICC): the offences under the foregoing bullet points are committed to benefit or damage a party in a civil, criminal or administrative proceeding – imprisonment of six to 12 years.
  • Unlawful inducement to give or promise anything of value (Article 319-quater ICC): a public official induces someone to unlawfully give or promise them, or a third party, money or other benefits by abusing their position or powers – imprisonment from six years to ten years and six months.
  • Extortion by a public official (Article 317 ICC): a public official forces another person to give or promise a bribe – imprisonment of six to 12 years.

The same offences also apply to persons in charge of public services.

Liability extends to bribe payers or promisors as well, except for the extortion by a public official, where the private party is regarded as a victim. Furthermore, Article 322 ICC extends the corruption framework to inchoate conduct, criminalising instigation to bribery in certain scenarios.

Article 322-bis ICC extends all corruption offences to foreign public officials and officials of international organisations.

Private Sector Bribery

Article 2635 of the Italian Civil Code makes directors, managers, statutory auditors and liquidators of a company liable for soliciting or accepting undue advantages in exchange for acts or omissions in breach of their corporate duties that cause harm to the company. Liability extends equally to the bribe-giver. The penalty is imprisonment from one to three years, increased for listed companies.

Failure to Prevent – No Direct Equivalent

Italy does not have a general failure-to-prevent bribery offence. However, Decree 231 achieves a comparable outcome: where a company’s organisational model is inadequate to prevent bribery committed by its officers or employees, the company faces direct corporate liability.

Principal Money Laundering Offences

Italian law provides for three principal money laundering offences:

  • money laundering (Article 648-bis ICC), punishing those who (without having contributed to a criminal offence) substitute, transfer or handle money, property or other assets of criminal origin so as to obstruct the identification of their provenance – imprisonment of four to 12 years and a fine of EUR5,000–25,000;
  • use of money, property or assets of illicit origin (Article 648-ter ICC), punishing those who (without having contributed to a criminal offence) employ in economic or financial activities money, property or other assets derived from said criminal offence in such a manner as to obstruct the identification of their criminal origin – imprisonment of four to 12 years and a fine of EUR5,000–25,000 (the offence is applicable only where the perpetrator is not liable for money laundering); and
  • self-laundering (Article 648-ter.1 ICC), punishing those who, having committed or participated in the predicate offence, employ, substitute or transfer the resulting money, property or assets in economic, financial, entrepreneurial or speculative activities so as to concretely obstruct the identification of their criminal origin – imprisonment from two to eight years and a fine of EUR5,000–25,000.

Upon conviction or plea bargain, confiscation of the assets of criminal origin (or, where not possible, confiscation of equivalent value) is mandatory.

Predicate Offences

Following a 2021 legislative reform, all criminal offences may serve as predicate offences for money laundering crimes (with reduced penalties where the predicate offence is less severe). The link is the illicit origin of the money, property or assets, which may consist of the product (the immediate result of the offence), the profit (the economic advantage gained) or – according to some – the price paid to the perpetrator.

AML Compliance Obligations

The principal regulatory framework is Legislative Decree No 231/2007. AML obligations apply to banking and financial intermediaries, other financial operators (eg, credit brokers, currency exchange dealers), professionals (eg, chartered accountants, notaries and lawyers – limited to extrajudicial assistance aimed at financial or real estate transactions, not to judicial assistance or defence activities) and other non-financial operators (eg, dealers in works of art, real estate agents).

The main obligations include:

  • customer due diligence;
  • suspicious transaction reporting to the competent authorities;
  • record-keeping of due diligence and transactional documentation;
  • refraining from carrying out risky transactions or entering into risky business relationships; and
  • internal controls, including AML compliance, staff training and internal reporting procedures.

Sanctions for Non-Compliance

Most sanctions are administrative: fines of up to EUR5 million (or 10% of turnover or double the illicit gain) for serious and systematic breaches, as well as manager disqualification. Criminal sanctions apply in limited cases.

In addition, failure to maintain adequate AML compliance may ground corporate criminal liability under Decree 231 (see 1.1 Scope of Financial Crime and General Criminal Law Principles) where the entity’s compliance framework is deemed inadequate to prevent money laundering offences that subsequently occurred.

Italian criminal law does not have single statutes exclusively dedicated to each category of financial market misconduct. The principal offences are as follows.

  • Insider dealing (Article 184 TUF), punishing any qualified individual who, in possession of inside information, knowingly trades, discloses it outside the normal exercise of their function, or recommends or induces a third party to trade on its basis; secondary insiders (tippees) are equally liable. The penalty is imprisonment of two to 12 years and fines from EUR20,000 to EUR3 million, subject to upward multipliers; the penalty is lower for tippees.
  • Market manipulation (Article 185 TUF), punishing anyone who knowingly disseminates false information, carries out fictitious transactions, or employs any other artifice or device apt to cause a material alteration in the price of financial instruments. The penalty is imprisonment from one to six years and fines from EUR20,000 to EUR5 million, aggravated where AI systems are used; all penalties are subject to upward multipliers.
  • False corporate communications (Articles 2621–2622 of the Italian Civil Code), punishing qualified individuals (including directors, general managers, auditors and liquidators) who, for the purpose of obtaining an unjust profit, knowingly make materially false statements or omit material facts in financial statements and other relevant corporate communications in a manner apt to mislead. The penalty is imprisonment from one to five years (non-listed companies) or three to eight years (listed companies).
  • Obstruction of supervisory authorities (Article 2638 of the Italian Civil Code), punishing qualified individuals (including directors, general managers, auditors and liquidators) who misrepresent material facts in mandatory communications to supervisory authorities or conceal facts with the aim of obstructing the exercise of supervisory functions. The penalty is imprisonment from one to four years, doubled for listed companies.
  • Unauthorised exercise of financial services or activities (Article 166 TUF) and unauthorised banking activity (Article 131 TUB), both punishable with fines and imprisonment from one to eight years.

Tax crimes are governed by Legislative Decree No 74/2000 (the “Tax Crimes Act”). The main offences are as follows.

  • Fraudulent tax return by use of false invoices (Article 2): imprisonment from four to eight years (reduced to one year and six months to six years where fictitious deductions are below EUR100,000).
  • Fraudulent tax return by other deceptive means (Article 3): punishable only where the tax evaded exceeds EUR30,000 and undisclosed income exceeds 5% of that declared or EUR1,500,000 – imprisonment from three to eight years.
  • False tax return (Article 4): where the tax evaded exceeds EUR100,000 and undisclosed elements exceed 10% of those declared or EUR2 million – imprisonment from two years to four years and six months.
  • Failure to file a tax return (Article 5): where the tax evaded exceeds EUR50,000 – imprisonment from two to five years.
  • Issuance of false invoices (Article 8): no minimum threshold – imprisonment from four to eight years (reduced to one year and six months to six years where the amount does not exceed EUR100,000).
  • Concealment or destruction of accounting records (Article 10): imprisonment from three to seven years.
  • Fraudulent concealment of assets to defeat tax collection (Article 11): where the total amount exceeds EUR50,000 – imprisonment from six months to four years (aggravated to one to six years where it exceeds EUR200,000).

Italy does not have a standalone corporate offence of failure to prevent tax evasion equivalent to that under the UK Criminal Finances Act 2017. However, Decree 231 achieves a comparable outcome: a company incurs corporate criminal liability where the tax offences listed as predicate offences under Decree 231 are committed, in the company’s interest or to its advantage, by individuals acting on its behalf, provided that such offences were made possible by the absence or inadequacy of the company’s organisational model.

Italy only provides for administrative penalties to punish cartel and other competition law violations. Under Law No 287/1990, the Italian antitrust authority (Autorità Garante della Concorrenza e del Mercato; AGCM) is empowered to investigate and punish anti-competitive conduct such as agreements restricting competition, abuses of dominant position and unlawful concentrations. The AGCM may impose fines of up to 10% of the undertaking’s worldwide turnover, order the cessation of the infringement and accept binding commitments. Failure to comply with AGCM decisions or to provide requested information may result in further administrative sanctions.

However, certain conduct related to competition law infringements may give rise to criminal liability. In particular, bid rigging in public procurement may constitute a criminal offence under Articles 353 and 353-bis ICC, carrying custodial sentences. Article 513 ICC may also apply to interference with free market competition through violence against property or fraudulent means.

Italian law provides a comprehensive framework of criminal offences relating to counterfeiting and IP violations.

The main offences set out in the ICC include:

  • counterfeiting or use of trade marks, distinctive signs, patents, industrial designs or models (Article 473 ICC) – fines and imprisonment from six months to four years, depending on the counterfeited item;
  • introduction and commercialisation of products bearing false trade marks or distinctive signs (Article 474 ICC) – fines and imprisonment from one to four years;
  • sale of products with misleading names, trade marks and distinctive signs (Article 517 ICC) – fines and imprisonment up to two years;
  • manufacturing and commercialisation of goods usurping industrial property rights (Article 517-ter ICC) – fines and imprisonment up to two years; and
  • counterfeiting of geographical indications and designations of origin (Article 517-quater ICC) – fines and imprisonment up to two years;

The main offences under the Copyright Act (Law No 633/1941) include:

  • basic copyright violations (Article 171) – fines, aggravated to imprisonment up to one year;
  • software and database piracy (Article 171-bis) – fines and imprisonment from six months to three years with further aggravating circumstances;
  • other serious copyright violations (Article 171-ter), including unauthorised reproduction and dissemination of protected works – fines and imprisonment up to four years; and
  • unlawful dealing in conditional-access decoding devices (Article 171-octies) – fines and imprisonment from six months to three years with further aggravating circumstances.

In Italy, both greenwashing and environmental pollution violations are recognised as civil, administrative and (in certain cases) criminal wrongdoing. Greenwashing is not a standalone offence but is addressed as an unfair commercial practice under the Consumer Code (Legislative Decree No 206/2005), enforced by the AGCM through administrative fines and corrective orders.

Environmental pollution constitutes a criminal offence under Articles 452-bis and 452-quater ICC, carrying imprisonment and significant fines for individuals and corporate criminal liability under Decree 231. The Environmental Code (Legislative Decree No 152/2006) provides for additional administrative sanctions and civil liability.

Enforcement is multilayered:

  • criminal prosecution by public prosecutors supported by environmental police units;
  • administrative enforcement by local environmental authorities; and
  • civil claims for damages and restoration by state authorities and private parties.

In Italy, financial crime prosecutions are initiated once the public prosecutor receives notice of a crime through law enforcement investigations, regulatory referrals or complaints. The prosecutor then opens a formal criminal investigation.

Prosecutions can be initiated without arrest. The system does not rely on summons or postal requisitions. Instead, individuals may be notified that they are under investigation and may be summoned for questioning. Arrests are possible but are not required to start proceedings.

The decision to prosecute is made by the public prosecutor, who acts independently under the principle of mandatory prosecution. In practice, however, due to resource constraints and priority criteria defined by each Public Prosecutor’s Office, not all reported matters result in active investigation.

Duration of Financial Crime Prosecutions

Financial crime cases generally take longer to prosecute due to multiple defendants, complex corporate structures, large volumes of evidence, cross-border mutual legal assistance and parallel administrative proceedings.

Bail and Pre-Trial Detention

The default rule is liberty pending trial. Pre-trial detention is used only if strict legal conditions are met (risk of flight, evidence tampering, or repetition of offences). Alternatives to custody (eg, house arrest, reporting obligations, asset restrictions) are commonly used in white-collar cases.

Italy provides for statutory limits on pre-trial detention, including phase-based time limits; if exceeded, the defendant must be released.

Legal aid is available in criminal proceedings, including financial crime cases, covering legal fees and essential defence costs. Eligibility for criminal legal aid in Italy is primarily based on a means test (income below a statutory threshold, generally assessed on household income), without a merits test.

If granted, legal aid is generally fully funded by the state with no upfront legal costs for the defendant. However, the state retains the right to recover all sums paid where admission is revoked – in particular where the income conditions were found to have been originally or subsequently absent, or where the applicant provided false declarations in their application – which also constitutes a criminal offence.

The defendant has no right to elect the court of jurisdiction (which is determined by law according to the nature and seriousness of the offence) nor venue (which is determined by law according to the place where the offence was committed, with subsidiary criteria applying where that place is unknown). However, the defendant does have significant choice over the mode of trial (see 6.1 Prosecution and Resolution Mechanisms).

Financial crime cases are not allocated to specialised courts. However, certain bigger courts – eg, the Milan or Rome courts – have specialised criminal sections concentrating economic and financial crime prosecutions, though this is an organisational rather than statutory designation.

Italy does not have jury trials in the common law sense. Financial crime cases are tried exclusively by professional judges – either a single judge or a collegiate panel of professional judges, depending on the seriousness of the offence.

The only Italian institution involving lay participation is the Corte d’Assise, which sits with two professional judges and six lay judges. However, its jurisdiction is limited to very serious offences – principally those carrying life imprisonment or a maximum sentence exceeding 24 years – and financial crime cases do not fall within its authority.

Legal entities (companies and other organisations) may be held concurrently liable alongside the individual who committed the offence. Proceedings are typically conducted before the same criminal court, but liability is legally distinct: a conviction or acquittal of the individual does not automatically determine the same outcome for the entity. Corporate liability may arise even where the individual perpetrator is not identified or is not prosecutable.

There is no general concept of group liability. A parent company may be held liable only where the requirements of Decree 231 are independently satisfied – for instance, where the offence was committed in the parent’s interest or to its advantage by individuals functionally linked to it, including in cases of overlapping management, integrated organisational structures, or where the parent exercises de facto direction and control over the subsidiary and is concretely involved in the unlawful conduct.

There is no direct equivalent to US-style successor liability. However, pursuant to Decree 231, in cases of mergers, demergers or corporate transformations, liability may transfer to the successor legal entity.

In Italy, companies are not formally required to adopt financial crime compliance programmes, but they are strongly incentivised to do so, as the existence of an effective compliance programme is required for mounting a defence against corporate liability (see 1.1 Scope of Financial Crime and General Criminal Law Principles).

In Italy, financial crime offences are subject to the general criminal law defences under the ICC. In practice, the most relevant defence is the absence of the required mental element. Defendants may also rely on evidentiary defences, procedural defences or the expiry of the statute of limitations.

For legal entities, a key defence is the adoption and effective implementation of adequate organisational models prior to the offence (see 1.1 Scope of Financial Crime and General Criminal Law Principles).

Italian law does not generally provide broad thresholds (de minimis defences), though certain offences include statutory thresholds (particularly in tax crimes; see 3.5 Tax Evasion and Financial Reporting).

In some regulated sectors, compliance with specific legal obligations may exclude liability – for instance, in market manipulation under Article 185 TUF, conduct carried out for legitimate reasons and in accordance with accepted market practices is not punishable.

Under Legislative Decree No 24/2023 (implementing EU Directive No 2019/1937), whistle-blowers reporting financial crime benefit from strong legal protections but no financial incentives.

Key protections include:

  • prohibition of retaliation (eg, dismissal, demotion, discrimination) with reversal of the burden of proof;
  • strict confidentiality of identity;
  • exemption from liability for breaches of secrecy, copyright or data protection rules where the report is made in good faith;
  • protection extended to related persons (eg, facilitators, colleagues, family members); and
  • support measures through ANAC-accredited organisations.

Anonymous reports may be admissible where the company reporting system allows for them. Statutory protections extend to anonymous whistle-blowers only where their identity is subsequently established and they have suffered retaliation.

The prosecutor is legally obliged to bring charges whenever there is sufficient evidence. There is no general discretion to decline prosecution on policy or public interest grounds.

The ICCP provides for the following alternative routes to resolution:

  • abbreviated trial – decision on the investigation file without a full evidentiary hearing (mandatory one-third sentence reduction);
  • plea agreement – agreed sentence approved by the court, carrying the effects of a conviction without implying an admission of guilt;
  • by the defendant; and
  • probation for offences carrying a penalty of up to four years – proceedings are extinguished upon successful completion of community service and remediation.

For corporate defendants, a company may settle by paying a reduced fine and disgorging illicit proceeds, subject to judicial approval.

Individuals face imprisonment, fines and accessory penalties, such as disqualification from public office, regulated professions or directorships in companies, and publication of the conviction judgment.

Courts determine the precise sentence within the ranges prescribed by law for each offence, having regard to:

  • the seriousness of the offence, assessed under the criteria under Article 133 ICC, such as the nature and circumstances of the act, the means employed, the gravity of the harm or danger caused to the victim, and the intensity of criminal intent; and
  • the balance of any aggravating circumstances (such as recidivism, abuse of powers or violation of duties inherent in a public function or public service, commission of the offence for the purpose of executing or concealing another offence, or of securing its profit or impunity) and mitigating circumstances (such as damage or gain of special tenuity, full reparation of the damage before trial or participation in a restorative justice programme with a reparative outcome).

Italian law provides for the recovery of financial benefit derived from criminal activity primarily through criminal confiscation under the ICC (upon conviction or plea agreement) and through preventive confiscation under the Anti-Mafia Code (independently of any conviction).

Criminal Confiscation

There are three types of criminal confiscation:

  • standard confiscation (Article 240 ICC) of instruments, price, proceeds or profit of the offence (including assets derived from reinvestment or transformation of net proceeds);
  • confiscation of equivalent value (where standard confiscation is not possible), available for certain crimes; and
  • extended confiscation (Article 240-bis ICC), applying where the defendant holds assets disproportionate to their declared income and cannot justify a lawful source – with a reversal of the burden of proof (provided only for certain crimes).

For legal entities convicted under Decree 231, confiscation of the price or profits (or equivalent value) is mandatory. Confiscation is ordered by the criminal court in the judgment or plea agreement.

Prior to judgment, preventive seizure may be ordered at any stage; in urgent cases, the public prosecutor or judicial police may act, subject to judicial validation. Any interested party may petition the court to set aside the seizure order. Confiscation orders may be challenged before the court of appeal and the Supreme Court.

Third parties who did not participate in the criminal proceedings may seek restitution of confiscated property: before the judge having control of the proceedings until the confiscation order becomes final (where a preventive seizure had previously been executed), and before the enforcement judge after the confiscation becomes final.

Preventive Confiscation

Under the Anti-Mafia Code, assets may be seized and ultimately confiscated outside criminal proceedings and independently of any charge or conviction. These measures apply against individuals deemed socially dangerous – including on the basis of habitual criminal activity, previous convictions for certain offences, a presumed connection to organised crime or the attempted commission of crimes of particular social danger.

Confiscation generally applies to (i) assets of illicit origin, including their reinvestment (or equivalent value), and (ii) assets presumed to be of illicit origin where there is a discrepancy between the subject’s declared income and actual wealth.

A key feature of this regime is the reversal of the burden of proof: once the requisite social dangerousness is established, assets are presumed to be of illicit origin where the above disproportion exists.

A proposal for preventive patrimonial measures may be advanced by the public prosecutor, the National Anti-Mafia Prosecutor, the local police chief or the director of the Anti-Mafia Investigation Division. Courts decide after a hearing in camera and may order anticipatory seizure, which lapses if not confirmed within 30 days.

Third parties holding rights over seized assets are called to intervene within 30 days of the execution of the seizure. The same applies to third parties holding rights in rem or personal rights of enjoyment or security over the seized assets. The confiscation order is subject to appeal; once final, any interested party may apply for its revocation on the ground that the statutory conditions were not met.

Civil Recovery

Civil recovery proceedings may run in parallel with criminal cases. Victims may obtain a civil damages award within the criminal judgment, and criminal judgments carry significant persuasive weight in parallel civil proceedings.

Victims may obtain compensation for damages arising from a criminal offence either by bringing a claim before the civil courts or by joining the criminal proceedings as a civil claimant. Where the original misappropriated assets remain identifiable in the hands of the defendant or a third party, the victim is entitled to restitution of those specific assets – a remedy that operates in rem over the asset itself.

Furthermore, by way of security for their civil claim, civil claimants may apply for a conservatory seizure over the defendant’s assets, a measure broadly equivalent to a freezing injunction, the purpose of which is to preserve the enforceability of any future damages award.

Enforcement priorities in financial crime currently include the following.

  • Fraud and corruption in the use of EU recovery funds: particular focus is placed on fraud, misappropriation and corruption schemes connected to the allocation and execution of projects financed under the Piano Nazionale di Ripresa e Resilienza (PNRR), given the substantial inflow of EU funds and related audit and control obligations.
  • VAT fraud and tax crimes: carousel fraud and broader forms of cross-border VAT fraud, as well as international tax evasion schemes, continue to represent key enforcement priorities. These are increasingly addressed through the use of data analytics tools and strengthened international co-operation mechanisms.
  • Crypto-assets and digital finance: enforcement has significantly intensified in relation to crypto-asset activities, with particular attention to unauthorised provision of investment services, market abuse and money laundering risks associated with digital assets.
  • Compliance with EU restrictive measures: enforcement efforts have increasingly focused on violations and circumvention of EU restrictive measures.

Recent Legislative Developments

These include:

  • transposition of EU Directive No 2024/1226 on sanctions enforcement (Legislative Decree No 211/2025), expanding predicate offences under Decree 231 and introducing turnover-based corporate fines;
  • strengthened whistle-blower protections (Legislative Decree No 24/2023);
  • implementation of the EU Markets in Crypto-Assets Regulation (MiCA) framework for crypto-asset regulation (Legislative Decree No 129/2024);
  • transposition of the Corporate Sustainability Reporting Directive (CSRD; EU Directive No 2022/2464) expanding mandatory environmental, social and governance disclosure obligations (Legislative Decree No 125/2024); and
  • abolition of the crime of abuse of office (Law No 114/2024), narrowing criminal liability for public officials.

Significant Recent Case Law

Supreme Court, Criminal Section, No 23401/2022 on corporate liability clarified that:

  • the adequacy of an organisational model must be assessed ex ante based on the “acceptable risk threshold”;
  • the supervisory body’s effectiveness must be assessed in terms of causal relevance to the offence; and
  • for offences committed by top managers, fraudulent circumvention of the organisational model must be specifically proven.

Supreme Court, Criminal Section, No 23438/2025 further clarified that the probation regime (Article 168-bis ICC) may not be applied to legal entities under Decree 231, as it is limited to natural persons. Any extension to corporate entities would require an express legislative intervention.

The decision reinforces the formal separation between individual criminal liability and corporate liability, and has prompted discussion on a potential reform of Decree 231 currently under scrutiny by Parliament.

Herbert Smith Freehills Kramer LLP

Via Rovello 1
20121 Milano
Italy

+39 023 602 1371

+39 023 601 9535

milan.info@hsfkramer.com www.hsfkramer.com
Author Business Card

Trends and Developments


Authors



Herbert Smith Freehills Kramer LLP operates through a global network of 26 offices across the UK, EMEA, Asia, Australia and North America, providing premium legal advice on dispute resolution, projects and transactions to the world’s most important organisations. The Italian corporate crime and investigations (CC&I) team is part of the firm’s global disputes and investigations practice and specialises in white‑collar and corporate crime defence, internal investigations and compliance matters, assisting Italian and international companies and their senior executives. The team’s lawyers combine a strong practical and academic background and assist clients on highly sensitive criminal matters, including proceedings before all Italian courts, up to the court of appeals and the Supreme Court. The team’s expertise spans the full range of corporate crime matters, including bribery and corruption, tax and financial crimes, public procurement offences, bankruptcy, fraud, health and safety offences, environmental crimes, cybercrimes and corporate liability. The team also has long‑standing experience in compliance advisory work and in conducting sophisticated corporate internal investigations, including multi‑jurisdictional matters.

A New Architecture for European Anti-Corruption Law: Italy at the Crossroads of Directive (UE) 2026/1021

On 11 May 2026, the Directive (EU) 2026/1021 was published in the Official Journal of the European Union (Directive (EU) 2026/1021 of the European Parliament and of the Council of 29 April 2026 on combatting corruption, replacing Council Framework Decision 2003/568/JHA and the Convention on the fight against corruption involving officials of the European Communities or officials of Member States of the European Union and amending Directive (EU) 2017/1371 of the European Parliament and of the Council (hereinafter, the “Directive”).

The issuing of the EU’s first dedicated anti-corruption Directive represents the most significant development in European criminal law in the financial crime sphere since the adoption of the PIF Directive (No 2017/1371).

Built on the Commission’s proposal of 3 May 2023 (COM(2023) 234) and refined through two years of often contentious negotiations, the Directive establishes a harmonised criminal law framework for corruption across the EU’s 27 member states.

The Directive will enter into force on 31 May 2026. Member states must transpose the Directive by 1 June 2028, except for the provisions of Article 20(5) (measures to prevent corruption) and Article 21 (national strategy against corruption), which may be transposed by 1 June 2029.

For Italy, the timing and content of this instrument are significant. The Italian government voted in favour of the Directive in the Council of the EU, and its parliamentary delegation – including members of the Italian parliamentary majority coalition – voted in favour in Strasbourg.

Yet the provisions of the Directive on the criminalisation of the “unlawful exercise of public functions” appear to be in contrast to one of the current Italian government’s most prominent criminal justice reforms: the abolition of the offence of “abuse of office” (abuso d’ufficio; formerly Article 323 of the Italian Criminal Code, hereinafter ICC) enacted in July 2024.

The EU Anti-Corruption Directive

The Commission’s vision and the legislative journey

The Commission’s May 2023 proposal aimed to replace the fragmented pre-existing framework (Council Framework Decision 2003/568/JHA on private-sector bribery and the 1997 Convention on corruption involving EU officials) with a comprehensive minimum-standards instrument.

The original proposal was particularly bold, since it:

  • required member states to criminalise various corruption offences (including the “abuse of functions”);
  • proposed minimum and maximum sanctions, limitation period rules and prevention obligations, including independent anti-corruption bodies; and
  • enhanced cross-border co-operation mechanisms.

The Council’s general approach of June 2024 significantly watered down the abuse of functions provision, removing any explicit reference to “abuse of office” as a labelled offence. Trilogue negotiations (among the Council of the EU, the Parliament and the Commission) between December 2024 and December 2025 were dominated by the abuse of functions issue, ultimately producing the compromise reflected in the final text.

The adopted text: key provisions

The adopted Directive introduces a number of provisions that will reshape the anti-corruption landscape across the EU.

I) Harmonised offence definitions

These are common minimum definitions for the following offences:

  • bribery in the public sector (active and passive);
  • bribery in the private sector (active and passive);
  • misappropriation;
  • trading in influence (Article 6 of the Directive);
  • unlawful exercise of public functions (Article 7 of the Directive) – the renamed version of the original “abuse of functions” provision;
  • obstruction of justice;
  • enrichment from corruption offences; and
  • concealment.

II) Minimum and maximum penalties

The Directive requires effective, proportionate and dissuasive sanctions, with maximum imprisonment terms of at least five years for the most serious corruption offences and at least three years for less serious offences.

III) Prevention obligations

Member states must:

  • adopt and publish national anti-corruption strategies developed in consultation with civil society;
  • establish independent specialised anti-corruption bodies; and
  • publish annual comparable data on corruption enforcement.

The Directive further requires member states to introduce rules on the declaration and management of conflicts of interest in the public sector, transparency in the financing of political parties and electoral candidates, asset declarations by public officials and “revolving door” disclosures.

IV) Cross-border co-operation

The Directive reinforces co-operation between national authorities and EU bodies including the European Anti-Fraud Office (Office européen de lutte antifraude – OLAF), the European Public Prosecutor’s Office (EPPO), Europol and the European Union Agency for Criminal Justice Cooperation (Eurojust), building on and extending existing frameworks.

V) Corporate liability

The Directive introduces a type of corporate liability under which a legal person may be held responsible for a corruption offence committed for its benefit by a person in a leading position, or by any member of the organisation acting under another subject’s authority.

This represents a significant extension of corporate liability beyond the classical principal-agent model in at least some member states. In addition, the Directive provides for corporate fines of up to 5% of worldwide annual turnover or, alternatively, fixed maximum amounts of up to EUR40 million for the most serious offences. The Directive expressly recognises a number of mitigating factors that may support reduced sanctions for legal entities, including the implementation of effective internal controls and compliance programmes before or after the misconduct, voluntary disclosure upon discovery of the offence and co-operation with the investigating authorities.

VI) Limitation periods

The act calls for minimum limitation periods, which must be sufficient to allow effective investigation, prosecution and enforcement following the offence.

VII) Amendment of the PIF Directive (Directive (EU) 2017/1371)

The Directive aligns the financial interests’ protection framework with the new minimum standards on penalties and limitation periods.

Abolition of the abuse of office offence and reform of the trading in influence offence

The abuse of office offence (abuso d’ufficio, pursuant to Article 323 ICC) used to criminalise public officials who, in the exercise of their functions, intentionally breached a specific rule of law or failed to abstain in the presence of an interest conflict, thereby procuring an unjust advantage or causing an unjust harm.

In July 2024, the offence was abrogated with Law No 114 of 9 August 2024. The grounds for reform were:

  • empirical – conviction rates for this offence were strikingly low in comparison to the number of investigations, with the vast majority of proceedings ending in acquittal or dismissal; and
  • structural – the provision allegedly generated pervasive “fear of the signature” among public officials, particularly at local government and procurement level, where administrators delayed or avoided decisions to minimise exposure to criminal investigation.

The reform was controversial from the outset. According to critics, the removal of Article 323 left a category of harmful official conduct – notably, discriminatory exercise of discretionary powers in public procurement and competitive procedures – without any criminal sanction.

However, the reform simultaneously introduced a new offence – Article 314-bis ICC – criminalising the unlawful appropriation of money or moveable property entrusted to a public official by reason of his or her office or service (indebita destinazione di denaro o cose mobili). According to scholars, certain conduct formerly prosecutable under Article 323 ICC may fall within the scope of Article 314-bis ICC. However, the new provision is materially narrower:

  • it applies only to moveable property and money held by virtue of office; and
  • it does not extend to immoveable (real) property or professional services, nor to the broader category of discretionary administrative conduct.

In Judgment No 95 of 3 July 2025, the Constitutional Court declined to strike down the abolition of Article 323 ICC on constitutional grounds – both because such a ruling would produce an unconstitutional effect of further criminalisation, and because the 2003 United Nations Convention Against Corruption’s provision on abuse of functions was found to be recommendatory rather than strictly mandatory: hence, no binding international obligation existed at the time. However, the Court explicitly acknowledged the existence of “clear gaps” in the criminal law framework after the reform.

The reform also significantly restricted the trading in influence offence under Article 346-bis ICC (traffico di influenze illecite). Under the previous formulation, the offence criminalised mediation aimed at inducing a public official to perform any unlawful act in the exercise of his or her functions. The 2024 reform:

  • restricted the relevant mediation to only real relationships with public officials, thus excluding alleged ones; and
  • narrowed the definition of “illicit mediation” to require that the pact between the parties be directed at inducing the public official to commit a specific criminal offence.

The Constitutional Court, in Judgment No 185 of 16 December 2025, upheld the constitutionality of the reformed Article 346-bis ICC while explicitly acknowledging that the restriction leaves certain serious forms of undue influence-peddling without criminal sanction. The Court further called on the legislature to introduce an organic regulation of lobbying activities to draw a clear line between lawful representation and criminal mediation.

Is a reform needed in light of the Directive?

Article 7 of the Directive and its implications

Article 7 of the Directive – titled “Unlawful exercise of public functions” – requires member states “to ensure that, where intentional, at least certain serious violations of law in the performance of or failure to perform an act by a public official in the exercise of that official’s functions constitute criminal offences. Member States may limit the application of this Article to certain categories of public officials”.

The recitals cite as indicative examples violations of procurement rules guaranteeing free access and equality of conditions for candidates, and the deliberate misapplication of the law by judges or arbitrators.

A significant concession to national discretion allows member states to limit the offence’s application to “certain categories” of public officials – a compromise secured during trilogue negotiations to obtain Italian and German support – though no further specification is provided, with a wide range of implementation being possible.

The provision immediately triggered a sharp political confrontation, and a debate among scholars is likely to follow.

At first glance, Article 7 imposes a genuine minimum harmonisation obligation, and the Italian lawmaker is likely to have to ensure criminal liability for at least the most serious forms of unlawful official conduct, particularly discriminatory breaches of procurement rules.

However, the Directive does not require the reintroduction of the former Article 323 ICC: the Italian lawmaker is free to design a new, more precisely defined offence calibrated to the Directive’s minimum standards (such as requiring a “serious breach of law” and the causation of substantial damage).

Article 6 of the Directive and its implications

Article 6 of the Directive – on trading in influence – creates another pressing, if less politically visible, compliance challenge.

The current post-reform formulation of Article 346-bis ICC appears to be narrower than the Directive’s Article 6 standard in at least two material respects:

  • it implies a requirement of an existing relationship or specific connection, whereas the Directive covers both genuine and merely asserted influence; and
  • it requires that the illicit mediation be directed at inducing the public official to commit a specific criminal offence, whereas the Directive extends to any “improper influence” over the exercise of official functions.

The Italian lawmaker will need to assess whether a legislative adjustment to Article 346-bis ICC – potentially including the introduction of a lobbying regulation framework, as urged by the Constitutional Court in Judgment No 185/2025 – is required to achieve compliance with Article 6.

Articles 13 and 14 – corporate criminal liability

The Directive’s requirements on corporate liability – that legal persons be liable for corruption offences committed for their benefit – are broadly consistent with the framework of Italy’s existing Legislative Decree No 231 of 8 June 2001.

The principal area requiring attention is the calibration of financial penalties. According to the Directive, fines for the legal entity can amount to up to 5% of worldwide annual turnover (or EUR40 million) for the most serious offences. This amount significantly exceeds the existing maxima, and will require a structural recalibration of the pecuniary sanction regime for at least the catalogue offences covered by the Directive.

In addition, the Italian regime structures the entity’s compliance models and preventive measures as an exemption from liability, rather than as a constitutive element of a “failure to prevent” offence. The lawmaker may need to confirm, as part of transposition, that its framework is substantively equivalent to the Directive’s standard, or risk a technical non-compliance finding.

The Directive’s further potential impact on prevention obligations

The Directive’s requirement for independent specialised anti-corruption bodies will place Italy’s existing institutional architecture under scrutiny. The Italian National Anti-Corruption Agency (Agenzia Nazionale Anti-Corruzione – ANAC) currently performs the designated functions for the public sector, though its operational independence and resources have been subject to recurring criticism.

The Directive’s requirement that such bodies be adequately resourced and genuinely independent is likely to require a strengthening of ANAC’s statutory mandate and budgetary guarantees. The requirement to publish annual EU-format comparable data on corruption enforcement will also require co-ordination between the Prosecution Office, the Ministry of Justice, ANAC and statisticians. Finally, the Directive’s prevention obligations include the introduction of rules on lobbying transparency – an area where Italy currently lacks comprehensive legislation.

Italian Legislative Decree 30 December 2025, No 211, Implementing Directive (EU) 2024/1226 on Sanctions Violations

Background and context

In recent years, EU restrictive measures – encompassing economic, commercial and financial sanctions – have taken on a central role in the EU’s response to geopolitical crises. However, the absence of uniform rules and effective deterrent mechanisms has often made it difficult to ensure compliance and, above all, prevent circumvention.

To fill this gap, Directive (EU) 2024/1226, approved in April 2024 (the “Sanctions Directive”), introduced common minimum rules on the definition of offences and penalties for violations of restrictive measures. Behind schedule with respect to the 20 May 2025 transposition deadline, the Italian government presented a draft legislative decree to Parliament on 10 October 2025, thereby initiating the formal transposition process.

The text was finally approved as Legislative Decree 30 December 2025, No 211 (the “Decree”).

The Decree intervenes on two principal fronts:

  • the definition of new criminal offences and related penalties for both natural and legal persons; and
  • the strengthening of corporate compliance obligations, in particular by extending the scope of Legislative Decree No 231/2001 and the rules on whistle-blowing.

New criminal offences

The Decree introduces new crimes “against the foreign policy and common security of the European Union” into the ICC, relating to conduct that in various ways undermines EU restrictive measures, with particular regard to economic and commercial relations with third countries and sanctioned natural or legal persons.

The new Article 275-bis ICC contains a broad and nearly comprehensive list of prohibited conduct contrary to EU sanctions legislation, including:

  • the provision of funds and economic resources to designated persons;
  • the failure to freeze funds and resources attributable to such persons;
  • the conclusion of economic, commercial or financial transactions prohibited for the import, export, marketing and transport of listed products; and
  • the provision of financial, intermediation, technical assistance or other services related to listed or independently prohibited products.

Notably, and in line with the guidelines provided by the Sanctions Directive, the same provision punishes not only the direct violation but also the circumvention of European restrictive measures – for example, through the transfer or fictitious (or in any case instrumental) registration of assets, as well as the use of false declarations or documents aimed at concealing their actual ownership.

Subsequent provisions – Articles 275-ter, 275-quater and 275-quinquies ICC – also criminalise:

  • the violation of specific information obligations imposed by EU restrictive measures;
  • the violation of any authorisations granted by the competent authorities; and
  • the negligent commission of certain more serious cases involving the marketing of listed products, particularly those concerning military equipment or so-called dual-use goods.

Penalties for natural persons

In terms of penalties, the government – consistent with the Sanctions Directive – introduced fairly strict measures, calibrated according to the seriousness of the individual violations.

For the most serious cases governed by Article 275-bis, imprisonment of up to six years is envisaged. This maximum becomes, respectively:

  • five years for violations of authorisations granted by competent authorities;
  • three years for serious negligent conduct; and
  • two years for violations of information obligations.

Imprisonment is always accompanied by severe financial penalties, ranging from EUR15,000 to EUR250,000.

The penalties are further increased – by one third to one half – in a broad range of aggravated circumstances, including cases of significant illegal profit, violations committed in the exercise of professional or commercial activities, the instrumental use of false statements or documents and the destruction of potential evidence.

Conversely, there is only one mitigating circumstance, available to those who effectively strive to limit the harmful impact of the violation, contribute to the collection of evidence, identify any other responsible parties and facilitate the seizure of assets, funds and economic resources linked to the offence.

Mandatory confiscation of “the things that were used or intended to be used to commit the offence and the things that are the price, product, or profit” thereof is ordered in all cases of conviction or plea bargaining, including confiscation of assets of equivalent value, unless they belong to a person unrelated to the case.

The Decree also extends Italian jurisdiction to acts committed by Italian citizens abroad, and introduces procedural changes concerning the functional jurisdiction of district prosecutors’ offices and the maximum duration of preliminary investigations, set at two years in line with other serious or complex crimes.

Corporate liability under Legislative Decree No 231/2001

The Decree also has a significant impact on the system of criminal liability of entities. All new types of offences, with the sole exception of negligent offences, are included in the list of predicate offences provided for by Legislative Decree No 231/2001.

Of particular relevance to companies is the introduction of a new method for calculating financial penalties: rather than the ordinary system of fixed amounts (with a maximum financial penalty of approximately EUR1.5 million), a different system is proposed based on percentages ranging from 0.5% to 5% of the entity’s total turnover in the financial year preceding the offence (or, if lower, the financial year preceding the application of the penalty).

Where it is not possible to establish the entity’s total annual turnover, a range of between EUR3 million and EUR40 million is to be applied for the most serious violations, and between EUR1 million and EUR8 million for the less serious case of violation of disclosure obligations.

There is also a derogation from the ordinary two-year cap on disqualification penalties: for the most serious offences, the duration ranges from two to six years, while for breaches of disclosure obligations, it ranges from one to three years.

Overall, the penalty system has been significantly strengthened compared to the standard system, which was often criticised for its lack of effectiveness. The new financial penalties are based on the global turnover of the entity in question and are therefore potentially capable of reaching billions of euros in the case of violations committed within large business groups.

Compliance implications

The inclusion of the new offences in Legislative Decree No 231/2001, combined with the introduction of an entirely new penalty mechanism in terms of magnitude, represents one of the most significant developments in the field of corporate criminal liability in recent years. Both the catalogue of potentially relevant unlawful conduct and the range of economic operators concerned are particularly extensive – including, above all, the banking and financial sector, international trade and service providers operating in relation to activities or goods subject to restrictive measures.

In terms of corporate compliance, the new measures require a prompt and careful update of organisational models and internal control systems, following a meticulous identification and assessment of the corporate activities most exposed to the risk of committing the new types of offences.

In this context, the severity of the penalties shifts the balance of the regulatory framework more towards risk prevention than damage repair. The incentive rewards that, for other violations, may be sufficient to reduce penalties to manageable levels are considerably less effective here, as they do not prevent the application of financial penalties that – although reduced – could still be of a magnitude hitherto unknown in relation to corporate criminal liability in Italy.

Furthermore, the extension of the whistle-blowing regulations under Legislative Decree No 24 of 10 March 2023 to cover reports of violations of EU restrictive measures requires companies to adapt their existing reporting systems accordingly.

Concluding Remarks

Although significantly expanded since the onset of the Russian-Ukrainian conflict, EU restrictive measures have suffered – at least in Italy – from a fragmented and ineffective sanctions framework, particularly given the disproportion between the economic interests at stake and the deterrent effect of existing measures. Directive (EU) 2024/1226 aimed to address these shortcomings by harmonising member state rules and raising standards of effectiveness and deterrence.

The Decree faithfully transposes the European guidelines without introducing unexpected changes, but nevertheless has a significant impact on the Italian legal system and on the economic operators concerned.

In particular, the catalogue of European restrictive measures, which retains an integrative function with respect to national criminal law, is governed by numerous supranational sources, often of highly technical content and in constant evolution, on whose interpretation there is little case law and only partial regulatory guidance from European institutions.

In light of the new piece of legislation, companies now need to:

  • carry out a comprehensive functional risk assessment to identify the restrictive measures relevant to their business activities;
  • urgently integrate organisational models and related procedures with requirements aimed at ensuring compliance; and
  • continuously review and update organisational safeguards in light of the rapid evolution of EU measures – an unprecedented challenge in the Italian system of corporate liability.
Herbert Smith Freehills Kramer LLP

Via Rovello 1
20121 Milano
Italy

+39 023 602 1371

+39 023 601 9535

milan.info@hsfkramer.com www.hsfkramer.com
Author Business Card

Law and Practice

Authors



Herbert Smith Freehills Kramer LLP operates through a global network of 26 offices across the UK, EMEA, Asia, Australia and North America, providing premium legal advice on dispute resolution, projects and transactions to the world’s most important organisations. The Italian corporate crime and investigations (CC&I) team is part of the firm’s global disputes and investigations practice and specialises in white‑collar and corporate crime defence, internal investigations and compliance matters, assisting Italian and international companies and their senior executives. The team’s lawyers combine a strong practical and academic background and assist clients on highly sensitive criminal matters, including proceedings before all Italian courts, up to the court of appeals and the Supreme Court. The team’s expertise spans the full range of corporate crime matters, including bribery and corruption, tax and financial crimes, public procurement offences, bankruptcy, fraud, health and safety offences, environmental crimes, cybercrimes and corporate liability. The team also has long‑standing experience in compliance advisory work and in conducting sophisticated corporate internal investigations, including multi‑jurisdictional matters.

Trends and Developments

Authors



Herbert Smith Freehills Kramer LLP operates through a global network of 26 offices across the UK, EMEA, Asia, Australia and North America, providing premium legal advice on dispute resolution, projects and transactions to the world’s most important organisations. The Italian corporate crime and investigations (CC&I) team is part of the firm’s global disputes and investigations practice and specialises in white‑collar and corporate crime defence, internal investigations and compliance matters, assisting Italian and international companies and their senior executives. The team’s lawyers combine a strong practical and academic background and assist clients on highly sensitive criminal matters, including proceedings before all Italian courts, up to the court of appeals and the Supreme Court. The team’s expertise spans the full range of corporate crime matters, including bribery and corruption, tax and financial crimes, public procurement offences, bankruptcy, fraud, health and safety offences, environmental crimes, cybercrimes and corporate liability. The team also has long‑standing experience in compliance advisory work and in conducting sophisticated corporate internal investigations, including multi‑jurisdictional matters.

Compare law and practice by selecting locations and topic(s)

{{searchBoxHeader}}

Select Topic(s)

loading ...
{{topic.title}}

Please select at least one chapter and one topic to use the compare functionality.