White-Collar Crime 2026

Last Updated October 22, 2026

Portugal

Law and Practice

Author



Rogério Alves & Associados (RA) is a full-service law firm, with national and international reach, established in 2013 in Lisbon, Portugal. The firm consists of several lawyers, each of whom has a love for the profession and a track record of success. Today, RA is a recognised and well-known law firm experienced in criminal law. The six lawyers in the criminal law team have amassed a great deal of experience covering most types of proceedings commonly found in criminal law. They vigorously represent clients in the context of so-called economic and financial crimes (white-collar crimes), in crimes against honour and against property, as well as in regulatory offences litigation (the scope, importance and intensity of which continues to grow). The connection between the lawyer and the court is historical and traditional, and RA does justice to this tradition.

Under Portuguese law, the principal distinction is between crimes (crimes) and administrative offences (contraordenações). The latter form a separate, autonomous regime and are generally sanctioned by an administrative fine (coima), rather than by a criminal penalty. A contraordenação is defined as an unlawful and censurable act falling within a statutory provision that provides for a coima. A crime must be established by reference to a statutory offence definition. The principle of legality requires that the conduct has been described as criminal and made punishable by a law in force before the conduct occurred; analogy may not be used to classify conduct as a crime or to determine the applicable penalty.

Crimes

In general terms, the constituent requirements for criminal liability are:

  • conduct attributable to the defendant and corresponding to the objective elements of a statutory offence;
  • unlawfulness, unless a justification applies, such as self-defence, the exercise of a right, the performance of a legal duty or the consent of the relevant right-holder; and
  • guilt, in the form of intent or, where expressly provided by law, negligence.

Administrative Offences

An offence requires a legally defined act or omission, unlawfulness and culpability; liability is personal and normally requires intent, although negligence is punishable where the statute expressly provides for this. Motive is generally irrelevant, except where it forms part of the offence. Generally, an attempt is punishable where the completed offence carries a maximum prison sentence of more than three years, unless the law provides otherwise. The penalty for attempt is the penalty applicable to the completed offence, specially mitigated. An attempt is not punishable where the means used were manifestly unsuitable or the essential object of the offence did not exist; voluntary abandonment may exclude or reduce liability. Participation rules cover co-perpetration, instigation and assistance.

In Portuguese white-collar criminal proceedings, the burden of proving the facts supporting the charge rests principally with the prosecution, ordinarily the Public Prosecutor’s Office, although the criminal process also follows an official-investigation principle and the court may order additional evidence where necessary to establish the truth. The defendant benefits from the constitutional presumption of innocence until a final conviction. Portuguese law does not formulate the standard expressly as “beyond reasonable doubt”; instead, evidence is assessed by the court according to the rules of experience and its reasoned free conviction. In practice, a conviction requires the court to be satisfied with the defendant’s guilt on the basis of sufficient, reliable evidence; unresolved reasonable doubt must operate in the defendant’s favour.

Portuguese law distinguishes between limitation of criminal proceedings and limitation of the execution of a penalty or administrative fine.

The general limitation periods for criminal proceedings are:

  • 15 years for crimes punishable by a maximum prison sentence exceeding ten years, and for certain offences expressly listed in the Penal Code and special legislation;
  • ten years where the maximum prison sentence is at least five years but does not exceed ten years;
  • five years where the maximum prison sentence is at least one year but less than five years; and
  • two years in all other cases.

The period begins when the offence is completed, or, for continuing or repeated offences, when the conduct ends. It may be interrupted by specified procedural acts, after which a new period runs, and it may be suspended in cases defined by law; an absolute long stop also applies. Concealment does not create one universal limitation rule, but the starting point depends on the completed offence and any continuing conduct. Special statutes, including tax legislation and corruption-related laws, may contain specific periods or rules (Penal Code, Articles 118–121).

Portuguese authorities and courts may prosecute conduct occurring wholly or partly abroad, but only where a statutory or treaty basis exists. Under Article 5 of the Portuguese Penal Code, this includes specified offences; offences committed by Portuguese nationals or against Portuguese nationals, in defined circumstances; cases where the suspect is present in Portugal but cannot be extradited; and offences that Portugal is internationally bound to prosecute. Article 6 limits this jurisdiction where the person has already been tried abroad and the more favourable foreign law needs to be applied.

Statutes Extending Reach

Specific statutes extend this reach. Law 20/2008, concerning corruption in international trade and the private sector, applies to certain bribery offences irrespective of where the conduct occurred, including when the offender is Portuguese or is found in Portugal. Portuguese courts also prosecute money laundering committed in Portugal even if the predicate offence occurred abroad. The appellate courts have treated money laundering as autonomous from the underlying offence, provided that the laundering conduct falls within Portuguese territorial jurisdiction.

Legal Assistance and Cross-Border Co-Operation

Regarding mutual legal assistance and cross-border co-operation, the main domestic framework is Law 144/99 on International Judicial Cooperation in Criminal Matters, covering extradition, transfer of proceedings, enforcement of sentences, transfer of prisoners, supervision of offenders and mutual legal assistance. Assistance may include evidence gathering, searches, seizures, examinations, witness interviews, information exchange and joint investigation teams.

Portugal relies on the 1959 European Mutual Assistance Convention and its protocols, the Schengen Convention, the 2000 EU Mutual Assistance Convention, bilateral treaties, the CPLP Mutual Assistance Convention, and relevant UN and Council of Europe conventions, including those on corruption, organised crime and money laundering. Within the EU, requests may be transmitted directly between judicial authorities, and urgent requests may be channelled through INTERPOL.

Portugal does not operate a general blocking statute preventing co-operation with foreign investigations. Co-operation may nevertheless be refused or restricted on human-rights grounds, including political persecution; the power of exceptional courts; or the threat of the death penalty, irreversible bodily harm, life imprisonment or indefinite detention. Requests must also satisfy applicable procedural requirements and, generally, the principle of double criminality.

Regarding extradition for white-collar offences, including fraud, corruption, tax offences and money laundering, this is possible when the conduct is criminal in both states and normally carries a maximum custodial penalty of at least one year.

Extradition is generally excluded for Portuguese nationals, although the Constitution permits it for terrorism or organised international crime where an applicable convention provides reciprocity and fair-trial guarantees. Extradition is also barred for political offences, death-penalty offences and cases involving serious human-rights risks. Within the EU, extradition has largely been replaced by the European Arrest Warrant. Corruption, fraud, money laundering and cybercrime are among the offences for which surrender may occur without verification of double criminality, subject to the statutory thresholds.

Portuguese authorities interact with liaison officers from other police services through the PJ’s National INTERPOL Bureau and Europol National Unit. Portugal also co-operates through Eurojust, joint investigation teams and the European Public Prosecutor’s Office for offences affecting the EU’s financial interests.

Portuguese law follows a limited attribution model. Other than the state, legal entities exercising public powers and public international organisations may be criminally liable for the offences expressly listed in Article 11(2) of the Penal Code. The list includes several relevant white-collar offences, including fraud, tax-related offences, money laundering and corruption. Liability requires that the offence was committed in the entity’s name, on its behalf or in its direct or indirect interest by a person in a leadership position, or by a subordinate whose conduct was enabled by a breach of supervisory or control duties. Individuals and the company may be prosecuted and convicted for the same offence. Corporate liability is autonomous and does not depend on the prosecution or conviction of the individual offender. Managers are personally liable when their own conduct satisfies the offence or participation rules; leadership may also trigger subsidiary liability for fines and compensation in statutory circumstances. Mergers and demergers do not extinguish corporate criminal liability. Parent or group liability is not automatic and requires the statutory attribution criteria. Portugal recognises compliance-programme failures as an attribution route in limited form, rather than as a general autonomous failure-to-prevent offence (Penal Code, Article 11).

There are no sentencing guidelines equivalent to those used in some common-law jurisdictions. The court applies the statutory penalty range and determines the concrete sentence according to the offender’s culpability and the requirements of general and special prevention. It must expressly give reasons for the sentence. Relevant factors include the seriousness and consequences of the offence, method of execution, degree of intent or negligence, motives, the offender’s personal and financial circumstances, previous conduct, and post-offence conduct. The court may apply special mitigation where circumstances substantially reduce the unlawfulness, culpability or need for punishment. Sincere remorse, reparation of the damage and the passage of time, accompanied by good conduct, are expressly recognised factors.

Legal entities may receive a fine or, in exceptional cases, may be dissolved. Ancillary penalties include judicial injunctions, prohibition of activities or contracts, loss of public subsidies, closure of establishments and publication of the conviction.

Corporate compliance is expressly relevant. A compliance programme adopted and implemented before the offence may support special mitigation. A programme adopted or implemented after the offence, but before the trial, may also be considered in setting or replacing a corporate fine, if it is suitable to prevent similar offences or materially reduce the risk of recurrence. Corporate culture is not a separately defined sentencing factor, but it may be relevant indirectly through the adequacy of supervision, controls and compliance systems.

Portugal does not have a general US-style deferred prosecution agreement or non-prosecution agreement regime. The closest mechanism is “suspensão provisória do processo” (provisional suspension of the proceedings), available principally for offences punishable by up to five years’ imprisonment or by a non-custodial sanction, subject to the defendant’s consent and judicial approval. The process is archived if the imposed conditions are fulfilled; it is not a conviction.

A full and unconditional confession may lead directly to the sentencing stage and produce a 50% reduction in the court fee, but it does not create an automatic entitlement to a specific sentence reduction.

Victims may claim compensation where they can establish an unlawful act, intentionally or negligently attributable to the offender, actual loss, and a causal link between the offence and the loss. The general legal basis is tort liability under the Portuguese Civil Code; strict liability applies only where specifically provided by law. Portuguese law seeks to restore the victim’s financial position. Monetary compensation is awarded where restitution is impossible, inadequate or excessively burdensome, and the court may assess the amount equitably where the loss cannot be precisely quantified. Under Article 129 of the Penal Code, compensation arising from a criminal offence is governed by civil-law principles. The claim must concern loss resulting from the criminal conduct; a purely contractual claim normally falls outside the criminal court’s jurisdiction.

Portugal follows the principle of adhesion: the civil compensation claim should generally be brought within the criminal proceedings. A separate civil action may be brought before the civil courts in statutory exceptions, including where no indictment is issued within the relevant period, the criminal proceedings are discontinued or suspended, the victim was not properly informed of the right to claim, the damages were not yet known, or the claim’s complexity would require a civil-law formation.

Portugal does not have a single, general US-style class-action procedure for all white-collar offences. However, equivalent collective mechanisms are available, particularly through the action popular under Law 83/95. This may protect collective, homogeneous or diffuse interests and may lead to global compensation for victims who cannot be individually identified.

The Public Prosecution Service directs criminal investigations, assisted by the Judicial Police (Polícia Judiciária) and other anti-crime police bodies. It is the central specialist department for the co-ordination and, in appropriate cases, direction of investigations involving economic-financial, organised, transnational or particularly complex crime, including corruption, money laundering and subsidy fraud. The Judicial Police, particularly its National Anti-Corruption Unit (Unidade Nacional de Combate à Corrupção, UNCC), is the principal specialist police body for investigating corruption and related economic-financial crime. Its Financial Intelligence Unit and financial/forensic units support anti-money laundering and asset-tracing investigations.

Sector regulators, including the Bank of Portugal, the Portuguese Securities Market Commission (Comissão do Mercado de Valores Mobiliários, CMVM), the Competition Authority and the Tax and Customs Authority, investigate and sanction administrative offences within their statutory mandates and refer suspected crimes to the Public Prosecution Service. There are no separate white-collar criminal courts, but specialised investigative and trial divisions may hear complex cases. Criminal and administrative proceedings may run in parallel, subject to ne bis in idem and evidential co-ordination. Policy priorities influence resource allocation, but prosecutorial decisions remain governed by legality and procedural law. The main recent institutional change was the creation of MENAC (Mecanismo Nacional Anticorrupção), replacing the former Corruption Prevention Council (Conselho de Prevenção da Corrupção), followed by reforms in 2025 that made MENAC more operational and introduced a collegiate management structure.

Investigations may begin following a criminal complaint, denunciation, report by a regulator or supervisory authority, information from another investigation, or facts discovered by the police or Public Prosecution Service. The Public Prosecution Service must investigate facts suggesting a crime and identifies the scope and direction of the inquiry. Criminal police may obtain urgent information and preserve evidence, but must act under the direction and functional dependence of the judicial authorities. Criminal-policy laws and general prosecutorial directives may identify priority categories, without replacing the statutory threshold for opening proceedings (Code of Criminal Procedure, Articles 241, 262–263).

Portuguese investigative authorities may obtain company records through voluntary requests, production orders and, for specified economic-financial offences, compulsory requests to banks, financial institutions, payment institutions and electronic-money institutions. Those entities must provide relevant information and documents within statutory deadlines.

Searches require judicial authorisation where there are indications that evidence is located on restricted premises. The police may act without prior authorisation only in limited urgent circumstances, with documented consent or in flagrante delicto. Evidence, documents, proceeds and instruments may be seized, normally subject to judicial authorisation or subsequent validation.

Employees, directors and third parties may be questioned as witnesses and are generally required to testify, subject to statutory rights to refuse and professional-secrecy protections. An individual questioned as a defendant/accused has the right to remain silent, and their silence cannot be used against them.

The Cybercrime Law permits the expedited preservation, judicially authorised search and seizure of computer data, including forensic copying and preservation in place.

There is no separate general cryptocurrency-seizure regime. Digital assets may nevertheless be traced, frozen or seized as proceeds, advantages or instruments of crime under the general criminal-procedure and confiscation rules. In economic-financial cases, courts may also order the removal of assets corresponding to suspected criminal advantages.

Portuguese enforcement authorities use advanced digital tools in white-collar investigations, including forensic searches of email, servers and mobile devices, large-scale banking-transaction analysis, financial-intelligence risk analysis, and cryptocurrency tracing. Public sources do not, however, establish widespread use of predictive AI or specific blockchain-analytics platforms.

The main rules are the EU AI Act, Law No 59/2019 on law-enforcement data processing, and Law No 109/2009 on electronic evidence. Solely automated decisions with significant adverse effects are restricted, predictive criminal-risk assessments based exclusively on profiling are prohibited, while many investigative systems are classified as high risk and require safeguards, human oversight and auditability.

In Portugal, internal investigations are not generally mandatory, but they are required in practice when a company receives a whistle-blowing report: covered entities must assess the allegations, conduct an appropriate follow-up – potentially an internal inquiry – and communicate the outcome.

Companies with at least 50 employees, and certain regulated entities, must also maintain corruption-prevention compliance programmes and internal reporting channels.

Enforcement authorities and courts may consider internal investigations as evidence of compliance and as an evidential source, but they independently assess the evidence and its legality. There is no general duty to disclose all findings; however, disclosure may be required by sector-specific rules, a lawful authority request or mandatory reporting obligations.

Investigations must comply with the GDPR, Law No 58/2019 and the Labour Code, particularly rules on necessity, proportionality, transparency, employee privacy and workplace monitoring.

Legal privilege is not a broad corporate privilege: lawyer professional secrecy protects legal advice and information obtained in the lawyer’s professional capacity, but ordinary business records and interviews are not automatically privileged.

In Portugal, white-collar prosecutions normally begin when the Public Prosecutor’s Office receives a crime report, called “notícia do crime”, a complaint or police referral. The Public Prosecutor directs the investigation and decides whether to prosecute.

Prosecutors do not have unlimited discretion: where the investigation establishes sufficient indications of a crime and its perpetrator, they must generally bring charges; they must archive the case where the crime or sufficient evidence cannot be established.

Limited discretion exists through statutory mechanisms such as provisional suspension of proceedings, subject to legal conditions and judicial agreement.

The courts do not normally initiate or bring charges; they control certain investigative decisions, may review an indictment during the instruction phase and ultimately decide guilt. A company may be prosecuted only where the relevant offence permits corporate criminal liability and the statutory conditions are met – for example, commission in the company’s name or interest by a person in a leadership position, or because of deficient supervision or control. Individual liability remains possible independently.

Portugal has no general deferred-prosecution or non-prosecution agreement equivalent. The main alternative is provisional suspension of proceedings: it requires the statutory conditions, the defendant’s and usually the victim’s consent, and the investigating judge’s approval. It is available for offences punishable by up to five years’ imprisonment or by a non-custodial sanction, provided there is no relevant prior conviction or suspension, no high degree of guilt, and the conditions adequately address prevention needs.

The conditions may include compensation, disgorgement, payment to the state, co-operation or other conduct requirements. For corruption and economic-financial crime, a corporate defendant may be required to adopt, implement or amend a compliance programme, subject to judicial monitoring. If the conditions are fulfilled, the case is archived and cannot be reopened; otherwise, it proceeds.

A separate mechanism permits archiving where the offence expressly allows dispensation of punishment, with the investigating judge’s consent.

Therefore, compliance improvements are not a general precondition to avoiding trial, but they may be imposed expressly as a condition in corporate corruption or economic-financial cases.

In Portugal, the main white-collar and corporate-fraud offences include fraud, computer fraud, fraudulent insolvency, tax fraud, private-sector and international corruption, false company information, fraudulent accounts and unlawful distribution of company assets. These offences generally require intentional deception, concealment, manipulation of assets or accounts, or the offer, promise, solicitation or acceptance of an undue advantage. Sanctions range from fines to imprisonment, with aggravated cases reaching eight years.

Money laundering has also been criminalised. It covers converting, transferring, concealing, disguising, acquiring, holding or using assets derived from specified serious offences, including fraud, tax fraud, corruption, private-sector corruption, insider dealing and market manipulation. The standard penalty is up to 12 years’ imprisonment, with aggravation for habitual conduct or professional-sector entities.

Companies may be criminally liable where the offence is committed in their name, on their behalf or in their interest by leaders, or because of deficient supervision or control. Corporate sanctions include fines, dissolution, activity bans, exclusion from subsidies, closure of establishments and publication of the conviction.

Portugal criminalises bribery, influence peddling and related offences. Passive corruption consists of a public official requesting or accepting an undue advantage, for an act or omission contrary to official duties; the penalty is one to eight years’ imprisonment, or one to five years where the act is not contrary to duty. Active corruption consists of giving or promising that advantage, punishable by one to five years’ imprisonment, or up to three years or a fine where the act is lawful.

Receiving or offering an undue advantage is a separate offence, covering an undue benefit given to or accepted by a public official because of official functions, even without proof of a specific reciprocal act. The penalties are up to five years’ imprisonment or a fine of up to 600 days for the official, and up to three years’ imprisonment or a fine of up to 360 days for the provider.

Influence peddling consists of requesting, accepting, giving or promising an advantage in exchange for abusing real or supposed influence over a national or foreign public entity. It is punishable by up to five years’ imprisonment where an unlawful decision is sought, or lower imprisonment/fines where a lawful decision is sought.

Bribery of foreign public officials is expressly criminalised, including where intended to obtain or retain business or another advantage in international trade; the penalty is generally one to eight years’ imprisonment.

Bribery between private parties is also criminalised: accepting an undue advantage in breach of private-sector duties is punishable by up to five years’ imprisonment, or one to eight years where competition is distorted or patrimonial harm is caused. Offering such an advantage carries up to three years’ imprisonment, or up to five years in aggravated cases.

Under the General Regime for the Prevention of Corruption (Regime Geral de Prevenção da Corrupção, RGPC), Portuguese companies and branches of foreign companies with 50 or more employees, as well as specified public entities, must adopt a compliance programme to prevent, detect and sanction corruption and related offences. The programme must include a risk-prevention plan, code of conduct, training, an internal reporting channel and an independent compliance officer.

The risk plan must cover the organisation’s activities, identify and assess corruption risks, provide preventive and corrective measures, and be periodically reviewed. The code of conduct must address applicable corruption offences and sanctions, while training must be proportionate to employees’ exposure to risk.

Failure to adopt or implement these measures is an administrative offence, punishable for companies by fines of up to approximately EUR44,892; there is no standalone criminal offence merely for failing to maintain the programme under the RGPC. Directors and responsible officers may also incur personal liability.

The Code of Criminal Procedure requires police authorities to report all crimes, and public officials to report crimes detected in the exercise of their functions. There is no equivalent general duty imposed on every private company or employee to report suspected bribery directly to the authorities, although covered companies must maintain internal reporting channels.

In Portugal, the main insider-dealing offence is the unlawful use or disclosure of inside information, that is, non-public, precise information capable of materially affecting the price of financial instruments. It covers trading, recommending or inducing trading, modifying or cancelling orders, and disclosure outside normal professional duties. The penalty is up to five years’ imprisonment or a criminal fine for insiders, and up to four years’ imprisonment or a fine of up to 240 days for other persons.

Market manipulation consists principally of disseminating false, incomplete, exaggerated, biased or misleading information; or carrying out fictitious transactions or other fraudulent practices capable of artificially affecting the market. The penalty is up to five years’ imprisonment or a fine, increasing to eight years’ imprisonment or a fine of up to 600 days where the market is affected. Manipulation of financial benchmarks is separately punishable by up to five years’ imprisonment or a fine.

It is also an offence for relevant financial-sector directors or officers to use false or misleading economic, financial or legal information to obtain investments, place securities or raise financing. The penalty is one to six years’ imprisonment, increasing to two to eight years if investments are obtained or securities are subscribed or marketed.

Under the Legal Framework of Credit Institutions and Financial Companies (Regime Geral das Instituições de Crédito e Sociedades Financeiras, RGICSF) only authorised credit institutions may receive deposits or other repayable funds from the public for their own use. Unauthorised receipt of such funds is punishable by up to five years’ imprisonment. Unauthorised investment-intermediation activity is generally a very serious administrative offence, with fines ranging from EUR25,000 to EUR5 million, subject to higher turnover or benefit-based limits.

In Portugal, the principal tax offences are tax fraud, qualified tax fraud, tax breach of trust, and tax fraud involving undue payments or refunds.

Tax fraud consists of intentionally concealing or altering accounting or declared facts, concealing facts that must be disclosed, or simulating transactions, with the purpose of avoiding tax assessment, payment or delivery, or obtaining undue tax benefits, refunds or other advantages. The authorities must prove the fraudulent conduct, the specific tax-avoidance or benefit-seeking purpose and its objective suitability to reduce tax revenue; an actual loss is not necessarily required. The sanction is imprisonment of up to three years or a fine of up to 360 days, subject to a EUR15,000 threshold.

Qualified tax fraud applies where aggravating circumstances exist, such as collusion, falsified or concealed records, the use of false invoices, offshore structures or an advantage exceeding EUR50,000. It is punishable by one to five years’ imprisonment for individuals and a fine of 240 to 1,200 days for legal persons; where the advantage exceeds EUR200,000, the penalties increase to two to eight years’ imprisonment and a fine of 480 to 1,920 days for legal persons.

Tax breach of trust occurs where a person is legally required to deliver tax that has been deducted or received fails to do so, in an amount exceeding EUR7,500, and the statutory cure periods expire. It carries up to three years’ imprisonment or a fine of up to 360 days; if the amount exceeds EUR50,000, individuals face one to five years’ imprisonment and legal persons a fine of 240 to 1,200 days.

There is no general standalone criminal obligation for companies to maintain an anti-tax-evasion compliance programme, nor is failure to prevent tax evasion, by itself, a separate criminal offence. Companies nevertheless have extensive tax filing, accounting, document-production and reporting duties. Failure to submit the required declarations, communications, transfer-pricing documentation or country-by-country reporting is generally an administrative tax offence.

In Portugal, inaccurate or missing financial records are generally administrative offences, not criminal offences. The main breaches include failure by companies subject to the Accounting Standardisation System (Sistema de Normalização Contabilística, SNC) to apply accounting standards or present required financial statements where this distorts the accounts. This is punishable by fines of EUR1,500 to EUR30,000 (reduced by half for negligence). Tax-related inaccuracies or omissions in accounts, books or records may attract fines of EUR375 to EUR22,500, while failure to present or retain accounting records may attract fines of EUR75 to EUR750.

Criminal liability may arise where the records involve document falsification. The prosecution must prove intentional falsification, alteration or false recording of a legally relevant fact, together with the purpose of causing harm, obtaining an illegitimate benefit, or facilitating or concealing another offence. The penalty is generally up to three years’ imprisonment or a fine; aggravated cases may carry six months’ to five years’ imprisonment, or one to five years where a public official is involved.

Financial records may also support tax fraud charges. Authorities must prove intentional conduct aimed at reducing tax revenue or obtaining an undue tax advantage, such as concealing or altering accounting values, failing to disclose taxable facts, or using simulated transactions. The basic offence is punishable by up to three years’ imprisonment or a fine, provided the undue advantage reaches EUR15,000. Qualified tax fraud carries one to five years’ imprisonment for individuals and substantial fines for companies, increasing where the advantage exceeds EUR200,000.

Sector-specific administrative sanctions also apply to banks and listed companies for falsified, incomplete or absent accounts and inaccurate regulatory disclosures. For banks, fines may reach EUR5 million for companies and individuals.

The main offence relating to cartels and criminal competition law, covers agreements, concerted practices or decisions of business associations that have as their object or effect the appreciable prevention, restriction or distortion of competition, including price-fixing, output limitation, market or customer allocation, bid rigging and restrictions on supply. Such conduct is prohibited under Article 9 of the Competition Act (Law No 19/2012) and is punishable by a fine of up to 10% of the infringing undertaking’s worldwide turnover.

Other administrative competition offences include abuse of a dominant position and abuse of economic dependence. These require proof of dominance or economic dependence, abusive conduct, and the capacity to affect competition or the market. The same competition-law fines may apply.

Additional sanctions may include publication of the decision and exclusion from public procurement or licensing procedures for up to two years. The Competition Act does however provide leniency for cartel participants that co-operate with the Portuguese Competition Authority.

Principal Criminal Offences

In Portugal, the principal consumer-related criminal offences include fraud concerning goods, requiring an intention to deceive in commercial dealings by selling or circulating counterfeit, falsified, degraded, inferior-quality or under-quantity goods. The sanction is imprisonment for up to one year and a fine up to 100 days; negligent conduct may attract imprisonment up to six months or a fine up to 50 days, together with possible forfeiture and publication of the judgment.

Hoarding

Hoarding is criminal where, during a significant shortage or threat to the regular supply of essential goods, the offender hides stock, refuses or delays sale or delivery, imposes tying conditions, or closes premises to prevent sales. The penalty is six months’ to three years’ imprisonment and a fine of at least 100 days; negligence may be punished by imprisonment for up to one year and a fine of at least 40 days.

Price speculation and manipulation

Price speculation consists principally of charging prices above legally permitted or publicly displayed prices, manipulating prices for illegitimate profit, or supplying goods below the declared weight or measure. It is punishable by six months’ to three years’ imprisonment and a fine of at least 100 days; negligence may result in imprisonment for up to one year and a fine of at least 40 days.

Administrative Offences

The main administrative offences include misleading or otherwise unfair commercial practices, breaches of distance-selling and consumer-information duties, unlawful contractual clauses, and violations of statutory price-reduction or consumer-guarantee rules. These generally constitute economic offences classified as minor, serious or very serious, punishable by fines under the Legal Framework for Economic Administrative Offences (Regime Jurídico das Contraordenações Económicas, RJCE); negligence and, in some regimes, attempts are also punishable. Additional sanctions may include confiscation, closure or suspension of an establishment or activity, professional disqualification and publication of the decision.       

In Portugal, the main cybercrime offences are:

  • computer-related forgery, consisting of manipulating or suppressing computer data to create false information intended to be treated as authentic, punishable by up to five years’ imprisonment or a fine;
  • unlawful computer access, punishable by up to five years’ imprisonment in aggravated cases;
  • unlawful computer interception, punishable by up to three years’ imprisonment or a fine; and
  • computer damage or sabotage, punishable by up to ten years’ imprisonment in the most serious cases.

Computer fraud is committed where a person, with intent to obtain an illegitimate benefit and cause patrimonial loss, manipulates data processing, uses unauthorised or incorrect data, interferes with a computer system, or disrupts telecommunications services. The penalties range from up to three years’ imprisonment or a fine, to two to eight years’ imprisonment where the loss is considerable.

The unlawful disclosure of a secret learned through employment, office, profession or similar circumstances is punishable by up to one year’s imprisonment or a fine. Unlawful use of a commercial, industrial or professional secret causing prejudice is subject to the same penalty.

In addition, obtaining, using or disclosing a protected trade secret without consent – including through unauthorised access, breach of confidentiality obligations or conduct contrary to honest commercial practices – constitutes a very serious economic administrative offence, sanctioned under the Portuguese RJCE.

In Portugal, breaches of UN/EU restrictive measures – including dealing with frozen assets, supplying designated persons, violating trade or financial prohibitions, or circumventing reporting/freezing obligations – are criminal offences punishable by one to five years’ imprisonment. Military or dual-use goods offences may attract five to eight years’ imprisonment, with separate penalties for negligence.

For dual-use goods, exporting, brokering, transferring or providing technical assistance without the required licence, or using false declarations, is criminally punishable by up to two to five years’ imprisonment or fines; related record-keeping and reporting failures are administrative offences.

The regime combines Portuguese law with directly applicable EU controls and UN/EU sanctions, including conduct involving third countries. Financial institutions’ failure to implement sanctions-screening and asset-freezing mechanisms is generally an administrative offence, punishable by substantial fines.

Under Portuguese law, concealment is not a single general offence. The main offences are money laundering, receiving stolen property, material assistance and granting personal favours.

Money Laundering

Money laundering requires dealing with assets or advantages derived from a qualifying predicate offence by converting, transferring, concealing or disguising their origin, nature, location or ownership, with knowledge of their illicit origin and the purpose of concealing it to avoid prosecution. It is punishable by up to 12 years’ imprisonment, subject to statutory limits linked to the predicate offence.

Receiving Stolen Property

Receiving stolen property requires concealing, receiving, acquiring, possessing, retaining or transferring a thing obtained by another person through a property offence, with intent to obtain a financial advantage. The penalty is up to five years’ imprisonment or a fine up to 600 days; professional receiving carries one to eight years’ imprisonment. A less negligent form is punishable by up to six months’ imprisonment or a fine.

Material Assistance and Granting Personal Favours

Material assistance consists of helping another person benefit from property obtained through a property offence and is punishable by up to two years’ imprisonment or a fine up to 240 days. Granting personal favours consists of obstructing or frustrating evidence-gathering or taking action to prevent another offender from being punished, and is punishable by up to three years’ imprisonment or a fine; the penalty cannot exceed that applicable to the underlying offence.

A person may generally be liable for both the predicate offence and subsequent money laundering, because the offences protect different legal interests and may form a real concurrence of offences.

A person may be criminally liable for participating in a corporate or white-collar offence committed by another.

A person is treated as a co-author or instigator where they directly participate in an offence, act jointly under an agreement, or intentionally cause another person to commit it, if execution or commencement of execution occurs. The person is subject to the penalty applicable to the underlying offence.

Aiding and abetting applies when a person is an accomplice to another person’s intentional offence by intentionally providing material or moral assistance. The applicable penalty is that for the principal offence, but specially mitigated.

When there is an agreement involving at least three persons acting concertedly over a period to commit one or more crimes, this may constitute criminal association. Promoting, founding, joining or supporting the association is punishable by imprisonment of one to five years; leadership is punishable by two to eight years.

The individual’s liability is independent of any liability of the company. However, a company may also be criminally liable for specified offences committed in its name or interest by leadership, or by subordinates where there has been a breach of supervision or control duties.

Money laundering is criminalised under Article 368-A of the Portuguese Penal Code. The offence covers:

  • converting or transferring criminal proceeds to conceal their origin or prevent prosecution;
  • concealing or disguising the nature, origin, location, movement or ownership of criminal proceeds; and
  • acquiring, possessing or using such proceeds with knowledge of their criminal origin.

The maximum penalty is 12 years’ imprisonment, increased by one third where the offence is habitual or committed professionally by an obliged entity.

Predicate offences are defined broadly and include corruption; influence peddling; embezzlement; subsidy and credit fraud; private and international corruption; tax and social-security fraud; insider dealing and market manipulation; smuggling; cyber-fraud; criminal association; drug, arms and human trafficking; environmental offences; and breaches of restrictive measures. Proceeds indirectly derived from these offences are also covered.

Portuguese law imposes extensive anti-money laundering duties on “obliged entities”, including customer due diligence, internal controls, suspicious-transaction reporting, record-keeping, co-operation, non-disclosure and staff training. Failure to comply is generally an administrative offence, not a standalone civil or criminal offence; however, deliberate assistance or participation in laundering may constitute the criminal offence itself.

The Central Department of Investigation and Prosecution (Departamento Central de Investigação e Ação Penal, DCIAP) and the Public Prosecution Service lead criminal enforcement, with the Financial Intelligence Unit (Unidade de Informação Financeira, UIF) receiving and analysing suspicious-transaction information. Relevant sectoral supervisory authorities enforce preventive obligations.

Portugal recognises several ESG-related criminal offences, although there is no single general “ESG offence”. Portugal criminalises several environmental offences, including serious pollution, damage to protected nature and habitat, and unlawful handling of waste or hazardous substances, alongside extensive administrative environmental liability. Contravention of human rights and participation in modern slavery are addressed through offences such as trafficking, forced labour, discrimination, bodily harm and unlawful working conditions rather than as a single ESG crime. Corporate liability depends on the relevant statute and Article 11 of the Penal Code. Supply-chain monitoring obligations arise from sectoral, labour, AML, public-procurement and EU sustainability rules; there is no single general Portuguese criminal offence for failing to monitor every supply chain.

Portugal has no standalone criminal offence merely for using AI. Liability depends on the conduct and may arise where AI is used to commit existing offences, particularly insider dealing or market manipulation.

For insider dealing, the elements are possession of non-public, precise and price-sensitive information, followed by its disclosure, use to trade, recommendation of a trade, or modification/cancellation of an order. The offence carries imprisonment for up to five years for insiders in a privileged position, or up to four years for other persons, alternatively with a fine.

Algorithmic market manipulation includes using automated orders, cancellations or trading strategies to disrupt or delay trading systems, overload order books, obscure genuine orders, or create false or misleading indications of supply, demand or price. It is punishable by imprisonment for up to five years, rising to eight years where the conduct causes or contributes to an artificial market alteration; responsible managers who knowingly fail to stop such conduct may face up to four years’ imprisonment.

Unauthorised algorithmic trading, or failure to maintain required risk controls, testing, continuity arrangements and records, is generally a serious or very serious administrative offence under the Portuguese Securities Code.

The EU AI Act also prohibits certain AI practices, including subliminal, manipulative or deceptive techniques, and exploitation of vulnerable persons, where these substantially distort behaviour and cause, or are likely to cause, significant harm. These breaches attract administrative fines and other enforcement measures under the AI Act, rather than automatically constituting criminal offences.

Portugal applies EU Regulation 2023/1114 (The Markets in Crypto-Assets Regulation, MiCA). Crypto-assets are broadly defined as digitally transferable and storable representations of value or rights. They are not automatically securities, commodities or currency; however, assets qualifying as financial instruments fall outside MiCA and remain subject to Portuguese/EU securities law. This classification determines the applicable regulator and enforcement regime.

The main criminal offences are ordinary fraud and computer fraud, including intentionally using deception, unauthorised data or interference with data processing to obtain an illicit benefit and cause patrimonial loss.

MiCA prohibits insider dealing, unlawful disclosure of inside information and market manipulation concerning crypto-assets admitted, or proposed to be admitted, to trading.

Crypto-asset service providers must obtain authorisation under MiCA; in Portugal, the Banco de Portugal supervises relevant providers for AML purposes. They must conduct customer and beneficial-owner due diligence, apply enhanced controls to self-hosted wallet transfers, keep records and report suspicious transactions to the DCIAP and the UIF. Non-compliance may result in administrative fines, corrective orders, suspension or cancellation of registration, and potentially, criminal liability for money laundering or sanctions evasion.

In Portugal, the main defences are that the prosecution cannot prove the offence’s objective elements, causation, participation, or required intent; that the conduct was negligent only where negligence is expressly criminalised; or that the defendant acted under a factual or legal mistake. General defences such as justification, necessity, coercion, incapacity and lack of guilt may also apply, depending on the facts.

An effective compliance programme is not generally a complete defence for the individual perpetrator. For companies, however, it may help disprove the required failure of supervision or control, particularly where the employee’s actions were contrary to express instructions. It is expressly relevant to sentencing: a pre-existing and properly implemented compliance programme may justify mitigation, substitution of a fine, or affect the imposition of ancillary penalties for corporate offences including fraud, computer fraud, money laundering and corruption.

For AML-regulated entities, compliance measures such as risk assessment, internal controls, training and reporting procedures are mandatory. Their existence may mitigate regulatory or criminal exposure but does not automatically eliminate liability for an underlying offence or for a specific compliance breach.

Portugal has no general de minimis defence or safe harbour for white-collar offences, and low financial value does not automatically prevent criminal liability. However, the court may grant waiver of penalty (dispensa de pena) where the offence carries no more than six months’ imprisonment or only a limited fine, the unlawfulness and guilt are minor, the damage has been repaired, and punishment is unnecessary for prevention. This is a discretionary measure after guilt has been established, not an acquittal.

There are no general exempt industries or sectors. Liability depends on the specific offence and applicable sectoral legislation; regulated industries may instead face additional administrative or professional sanctions. Companies may be criminally liable for specified offences, including fraud, computer fraud, money laundering and corruption, subject to the statutory corporate-liability conditions.

Portugal has no general US-style plea-bargaining procedure allowing a defendant to negotiate reduced charges or a binding sentence. The closest mechanism is a full and unconditional confession under Article 344 of the Code of Criminal Procedure: if voluntary and accepted by the court, it may dispense with the need for further evidence and lead directly to sentencing, but the court retains control over the legal qualification and sentence. This mechanism also applies to legal persons.

Self-disclosure and co-operation are not automatic grounds for immunity or sentence reduction. They may support special mitigation, where they demonstrate sincere remorse or repair of the damage, or otherwise substantially reduce culpability or the need for punishment. In minor cases, the court may also dispense with punishment where the damage has been repaired and other statutory conditions are met.

Sector-specific leniency regimes exist. In cartel cases, the first company to disclose the infringement and fully co-operate may obtain immunity from the Competition Authority’s fine. In securities-market abuse proceedings, a full confession may reduce the applicable fine limits by one third, while confession combined with decisive co-operation may produce a reduction, generally subject to disgorgement or compensation requirements.

Portugal protects whistle-blowers under Law 93/2021, provided they report in good faith and have reasonable grounds to believe the information is true. Retaliation is prohibited, including dismissal, negative performance assessments, changes to working conditions and disciplinary sanctions; such actions may trigger compensation and are generally presumed retaliatory if taken within two years of the report.

Covered companies must maintain secure internal reporting channels allowing written or oral reports, including anonymous reports. Channels must ensure confidentiality, data protection, restricted access, independence, impartiality and conflict-free handling.

There are no general financial rewards for whistle-blowers. External reports may be made to the Public Prosecutor’s Office, criminal police bodies, regulators or other competent authorities, through channels that must accept anonymous or identified reports. Anonymous reports may be closed if they contain no indications of an infringement.

There is no single EU-wide defence mechanism. In practice, effective defence requires early co-ordination between local counsel, challenges to jurisdiction and evidence transfer, and consideration of whether proceedings should be consolidated, transferred or resisted on grounds such as pending domestic proceedings, a prior final judgment or conflicts with fundamental procedural principles.

Portugal’s mutual-assistance framework permits evidence gathering and joint investigation teams, but foreign authorities operating in Portugal remain subject to Portuguese authority and procedural law. Co-operation may also be refused where it affects sovereignty, security, public order or fundamental principles.

Within the EU, the European Arrest Warrant facilitates surrender for serious offences such as corruption, fraud, money laundering and cybercrime, in many cases without verifying double criminality. For other offences, double criminality generally remains relevant. Transfer of criminal proceedings is possible but is assessed case by case and must respect the ne bis in idem principle.

Over the next year, Portugal is expected to maintain, rather than fundamentally reshape, its white-collar crime policy.

The principal political development is implementation of the National Anti-Corruption Strategy and action plan for 2025–2028, including stronger transparency and lobbying rules, monitoring of public-sector corruption risks, and enhanced co-operation between inspection bodies and the criminal police.

MENAC is also expected to remain central, with powers to monitor compliance programmes, issue guidance, collect information and co-operate with prosecutors, the Judicial Police and foreign authorities. The foreseeable trend is intensified enforcement, prevention and inter-agency co-operation.

Portugal has recently introduced a specific lobbying framework through Law No 5-A/2026, regulating the legitimate representation of interests, creating a public Transparency Register and requiring disclosure of relevant interactions with public bodies. It also introduces a “legislative footprint” mechanism recording lobbying contacts during the preparation of legislation.

Accordingly, lobbying transparency is likely to be an important enforcement and integrity priority in 2027, alongside the implementation of the National Anti-Corruption Strategy for 2025–2028.

Rogério Alves & Associados

Av. Álvares Cabral 61
4 piso 1250-017
Lisboa
Portugal

+351 21 391 10 40

geral@raassociados.pt www.raassociados.pt
Author Business Card

Trends and Developments


Author



Rogério Alves & Associados (RA) is a full-service law firm, with national and international reach, established in 2013 in Lisbon, Portugal. The firm consists of several lawyers, each of whom has a love for the profession and a track record of success. Today, RA is a recognised and well-known law firm experienced in criminal law. The six lawyers in the criminal law team have amassed a great deal of experience covering most types of proceedings commonly found in criminal law. They vigorously represent clients in the context of so-called economic and financial crimes (white-collar crimes), in crimes against honour and against property, as well as in regulatory offences litigation (the scope, importance and intensity of which continues to grow). The connection between the lawyer and the court is historical and traditional, and RA does justice to this tradition.

Introduction

White-collar crime has become an increasingly important concern within Portugal’s legal and institutional framework. While the term has traditionally been associated with offences such as corruption, fraud and embezzlement, the concept has broadened considerably. Money laundering, tax fraud, cybercrime, market abuse, influence peddling and the misuse of corporate structures now form part of the wider landscape of economic and financial criminality. Portuguese enforcement policy reflects this broader approach, identifying corruption, influence peddling, money laundering, cybercrime, fiscal offences and economic-financial crime as priorities for prevention, investigation and prosecution.

Criminal prosecution remains central, but it increasingly sits alongside asset recovery, corporate compliance, transparency requirements and international co-operation. Enforcement is consequently concerned with establishing individual criminal responsibility, but also with identifying and recovering illicit assets, preventing corporate misconduct and improving accountability within both the public and private sectors.

Law No 37/2026 of 28 July is particularly relevant in this regard. The reform introduces amendments to the Criminal Code and the Code of Criminal Procedure, as well as to the framework governing asset recovery and confiscation. It creates new procedural mechanisms, strengthens the role of asset-recovery authorities, provides for autonomous confiscation in defined circumstances and expressly recognises the relevance of compliance programmes in proceedings involving legal entities.

The regulatory framework is also changing outside the traditional boundaries of criminal law. The Portuguese regime governing lobbying and legitimate interest representation, together with the European Union’s Artificial Intelligence Act, has introduced additional requirements concerning transparency, accountability and human oversight regarding the use of technology.

The resulting framework raises an important question: how can Portugal strengthen its capacity to detect and prosecute economic crime while preserving the procedural guarantees that apply to criminal investigations? Privacy, legal privilege, proportionality, the presumption of innocence and effective judicial oversight are likely to become increasingly important as investigations make greater use of financial information, electronic communications and other forms of digital evidence.

The Portuguese Anti-Corruption Policy

Portugal’s current framework treats corruption and related forms of economic crime as threats not only to public finances, but also to public confidence and the proper functioning of public institutions.

The legal framework is now being developed through the National Anti-Corruption Strategy for 2025–2028. Article 233 of the State Budget Law for 2026 provides for the adoption of the new strategy and its action plan for the 2025–2028 period, together with a corruption-risk prevention plan concerning executive positions. The framework establishes objectives, identifies responsible entities and implementation deadlines, and provides for performance indicators and annual monitoring reports to be submitted to parliament.

Prevention and transparency occupy a particularly prominent place in this new cycle. The identified objectives include the regulation of lobbying, improved access to information, changes to public consultation procedures concerning decree-laws and greater transparency in relation to lobbying activities. The strategy also envisages greater public access to declarations concerning the income, assets and interests of political officeholders and senior public officials, as well as information relating to incompatibilities and impediments.

The 2026 criminal policy framework reinforces these priorities. It treats the fight against corruption and related criminality as an ongoing priority. Fraud involving European subsidies and other forms of public financing is also identified as an area requiring particular attention.

Another relevant feature is the emphasis placed on co-operation between administrative inspection bodies and specialised criminal police authorities. Complex economic crime investigations increasingly require expertise that cannot be provided by a single investigative subject. Accounting, tax, financial, legal and technological analysis may all be necessary to establish how a transaction was structured, where funds were transferred to and who ultimately benefited from the conduct under investigation.

This is an important practical development. The effectiveness of enforcement may depend as much on the ability of different authorities to combine information and expertise as on the powers available to any individual investigative body.

Corruption, Influence Peddling and Lobbying

Corruption remains at the centre of white-collar crime enforcement in Portugal. Its consequences are not limited to the financial loss arising from an individual transaction. Corruption can affect the integrity of public decision-making and, more broadly, confidence in public institutions.

A significant recent development is Law No 5-A/2026, which establishes a framework for the transparency of legitimate interest representation and creates the Register of Transparency of Interest Representation. The legislation regulates activities intended to influence public decision-making, including meetings, correspondence, events and consultations.

The regime applies to a broad range of public bodies, including the presidency of the republic, parliament, the government and public administration, as well as the Bank of Portugal, regulatory authorities and local and regional authorities. The register is intended to be publicly accessible and machine-readable, subject to the applicable data-protection requirements.

Those engaging in lobbying activities are required to provide information concerning their identity, the clients and interests they represent, their sectors of activity, the people responsible for the relevant activities, revenues and public or European subsidies. The information must be kept up to date, and lobbyists must identify themselves when contacting public decision-makers.

The legislation also introduces legislative-footprint mechanisms and periodic disclosure of meetings by public entities. These measures are intended to make the interaction between external interests and the legislative process more transparent and, in turn, make potential conflicts of interest easier to identify.

The regime is principally based on registration, transparency and administrative consequences rather than on the creation of a new criminal offence. Breaches may result in suspension, restrictions on access to public entities or exclusion from consultations, while unregistered lobbying or the provision of false information may be communicated to the Public Prosecutor’s Office.

The law also addresses conflicts of interest and certain forms of post-public-employment activity, including cooling-off requirements applicable to certain public officials. Its relevance to white-collar crime therefore lies less in creating a new category of criminal liability than in making relationships, interests and access to public decision-makers more visible. Greater transparency may, in turn, make it easier to identify concealed influence, conflicts of interest and circumstances that warrant further investigation.

Money Laundering and the Recovery of Criminal Assets

Law No 37/2026 transposes Directive (EU) 2024/1260 on asset recovery and confiscation and makes corresponding amendments to the Criminal Code, the Code of Criminal Procedure and several special regimes relating to money laundering and economic crime.

One of the principal effects of the reform is to strengthen the role of the Asset Recovery Office and place greater emphasis on financial and patrimonial investigations. The relevant authorities are expected to identify and locate assets, assist with seizure and confiscation, manage recovered property and co-operate with asset-recovery authorities in other jurisdictions.

The reform also addresses the practical management of seized property. In circumstances where maintaining an asset would be excessively costly, dangerous or likely to result in deterioration, the legislation facilitates its early sale, assignment or destruction. Specific provisions apply to assets such as vehicles, vessels and aircraft, which may be transferred to the relevant asset-management body within the prescribed period.

The regime governing extended confiscation has also been strengthened. For certain serious offences, including corruption, money laundering, cybercrime and others, the assessment of assets may consider a disproportion between the value of the property and lawful income, the absence of a credible lawful source, transfers intended to conceal ownership or location, and links to organised crime.

Perhaps the most significant innovation is the introduction of an autonomous confiscation procedure. In defined circumstances, where criminal proceedings conclude without a conviction but indications of illicit conduct remain, the Public Prosecutor’s Office may seek confiscation independently. The procedure establishes rules governing evidence, objections, hearings, trial and appeals.

The practical consequence is significant: confiscation may now acquire a degree of autonomy from the criminal prosecution itself. That is likely to shift part of the focus of proceedings towards the provenance and ownership of assets, even where the underlying criminal case does not ultimately result in a conviction. Questions concerning the presumption of innocence, property rights, proportionality and the evidential threshold for confiscation will consequently require careful consideration.

The same issues arise in relation to digital assets. Crypto-assets can provide an additional layer of complexity to financial investigations because ownership and transactions may be difficult to identify and trace. A recent Portuguese appellate decision (Judgment of the Porto Court of Appeal of 5 February 2025, Case No 699/23.0JGLSB.P1) accepted that the use of crypto-asset wallets and platforms is not unlawful in itself, while recognising that their use to disguise illicit funds and convert them into euros may support a finding of money laundering.

Corporate Compliance and Internal Investigations

Corporate compliance has acquired increasing importance in Portuguese enforcement policy. The legal framework does not prescribe a single compliance model applicable to every company. The adequacy of a compliance system will depend on the nature, size and risk profile of the organisation. Nevertheless, compliance may be relevant to the prevention of criminal conduct, the assessment of corporate responsibility and the measures that may ultimately be imposed on a legal entity.

Law No 37/2026 gives this principle a more concrete procedural dimension by allowing the courts, in connection with criminal proceedings involving legal entities, to order the adoption or implementation of a compliance programme. The purpose of such a programme is to prevent the same offence from being committed again or to materially reduce the risk of recurrence.

The National Anti-Corruption Strategy and related policy instruments likewise emphasise compliance programmes, internal controls, risk assessment and reporting mechanisms, as well as co-operation between preventive and enforcement authorities. Properly designed internal systems may assist companies in identifying conduct and preserving information that later becomes relevant to a criminal investigation.

An internal investigation does not, however, replace a criminal investigation, nor does the existence of an internal investigation automatically create an obligation to disclose every finding to the authorities. Companies nevertheless face significant risks when they destroy evidence, obstruct an investigation, conceal criminal proceeds or fail to comply with applicable anti-money laundering, regulatory or reporting obligations.

The practical importance of internal investigations is consequently increasing. Companies need to be able to preserve relevant documents and communications, identify potential conflicts of interest, protect legally privileged material and assess whether reporting or remedial measures are required. The way a company responds to suspected misconduct may also become relevant to prosecutorial decisions.

For companies operating in higher-risk sectors, compliance should therefore not be regarded solely as a regulatory exercise. It may form part of the organisation’s broader strategy for managing criminal and reputational exposure.

Artificial Intelligence and Advanced Digital Tools

Artificial intelligence is beginning to play a more significant role in white-collar crime investigations. Its potential uses are broad, ranging from the review of large volumes of documents and communications to the identification of unusual transactions and patterns that might otherwise be difficult to detect.

The EU Artificial Intelligence Act applies in Portugal and establishes a risk-based regulatory framework. It operates alongside the GDPR and the specific data-protection rules applicable to law enforcement, rather than replacing them.

The AI Act prohibits or restricts certain practices, including social scoring and certain forms of biometric identification. It further addresses criminal-risk assessments based solely on profiling or personality characteristics, while distinguishing these from fraud-risk analysis based on suspicious transactions.

For white-collar investigations, the practical point is that AI may be a valuable investigative tool, but its output cannot simply be treated as self-validating evidence. Where companies use AI to review emails, contracts, accounting records or financial transactions, they should be able to identify how the system was used, maintain appropriate audit trails, protect privileged material and ensure meaningful human oversight.

The regulatory framework also introduces requirements relating to technical and organisational safeguards, record-keeping and AI literacy.

These requirements are likely to become increasingly relevant as both companies and enforcement authorities adopt AI-based tools. The challenge will be to obtain the efficiency gains associated with automated analysis without losing sight of the evidential, privacy and procedural requirements that apply to the underlying investigation.

Financial, Tax and Cybercrime Trends

Tax fraud, fiscal crime and cybercrime remain significant areas of Portuguese enforcement policy. Their importance has increased alongside digital commerce, increasingly complex corporate structures, remote financial services and the ability to move funds and assets across jurisdictions with greater speed.

Cybercrime should also be viewed both as a distinct form of criminality and as a means of committing more conventional economic offences. Unauthorised access to systems, manipulation of electronic records, ransomware, identity fraud and crypto-asset transfers may be used in schemes involving fraud, money laundering, corruption or tax evasion.

It seems that the distinction between cybercrime and economic crime is therefore becoming less clear. A fraud investigation may require digital-forensic expertise; a money-laundering investigation may depend on blockchain analysis; and a corruption investigation may turn on electronic communications or data extracted from corporate systems.

This overlap makes multidisciplinary investigation increasingly important. Prosecutors and investigators need access to financial, accounting and technical expertise, while companies must consider cybersecurity, data governance and financial controls as parts of the same broader risk-management framework.

Conclusion

The Portuguese framework for white-collar crime is becoming broader and more closely connected across different areas of law. Criminal prosecution remains the principal means of establishing responsibility, but it now forms part of a wider system that includes prevention, compliance, financial intelligence, transparency and asset recovery.

The National Anti-Corruption Strategy for 2025–2028 reflects this broader approach, particularly through its emphasis on transparency, lobbying, integrity and accountability in public life. Law No 37/2026 takes the development further by strengthening asset-recovery mechanisms, introducing autonomous confiscation and giving compliance programmes a more explicit place in proceedings involving legal entities. The practical significance of these changes will become clearer once the new provisions are tested before the Portuguese courts.

At the same time, the lobbying framework and the EU Artificial Intelligence Act illustrate how developments outside conventional criminal law are becoming relevant to the prevention and investigation of economic crime. Companies are likely to face greater expectations concerning internal controls, data governance and the responsible use of technology, particularly where their activities involve significant regulatory or financial risks.

The central issue is therefore not simply whether Portugal has acquired stronger tools to investigate and recover the proceeds of crime. It is whether those tools can be used effectively while preserving the safeguards that distinguish legitimate enforcement from disproportionate state intervention. As investigations become increasingly dependent on financial data, digital evidence and automated analysis, questions of privacy, legal privilege, evidential reliability, proportionality and judicial oversight will assume greater importance.

Portugal’s enforcement framework is consequently entering a period in which prevention, investigation and asset recovery are becoming increasingly interconnected. The success of this approach will depend on the ability of enforcement authorities to make effective use of these new mechanisms while ensuring that the fundamental procedural guarantees applicable to criminal proceedings remain fully respected.

Rogério Alves & Associados

Av. Álvares Cabral 61
4 piso 1250-017
Lisboa
Portugal

+351 21 391 10 40

geral@raassociados.pt www.raassociados.pt
Author Business Card

Law and Practice

Author



Rogério Alves & Associados (RA) is a full-service law firm, with national and international reach, established in 2013 in Lisbon, Portugal. The firm consists of several lawyers, each of whom has a love for the profession and a track record of success. Today, RA is a recognised and well-known law firm experienced in criminal law. The six lawyers in the criminal law team have amassed a great deal of experience covering most types of proceedings commonly found in criminal law. They vigorously represent clients in the context of so-called economic and financial crimes (white-collar crimes), in crimes against honour and against property, as well as in regulatory offences litigation (the scope, importance and intensity of which continues to grow). The connection between the lawyer and the court is historical and traditional, and RA does justice to this tradition.

Trends and Developments

Author



Rogério Alves & Associados (RA) is a full-service law firm, with national and international reach, established in 2013 in Lisbon, Portugal. The firm consists of several lawyers, each of whom has a love for the profession and a track record of success. Today, RA is a recognised and well-known law firm experienced in criminal law. The six lawyers in the criminal law team have amassed a great deal of experience covering most types of proceedings commonly found in criminal law. They vigorously represent clients in the context of so-called economic and financial crimes (white-collar crimes), in crimes against honour and against property, as well as in regulatory offences litigation (the scope, importance and intensity of which continues to grow). The connection between the lawyer and the court is historical and traditional, and RA does justice to this tradition.

Compare law and practice by selecting locations and topic(s)

{{searchBoxHeader}}

Select Topic(s)

loading ...
{{topic.title}}

Please select at least one chapter and one topic to use the compare functionality.