EU asset freeze reporting — the two-week Article 8 duty
Screening finds the name. The reporting duty that follows the hit is a separate obligation, it runs on a two-week clock, and since 2025 failing it is a criminal offence in its own right. Most sanctions programmes in payment firms are built around detection. The information duty in Article 8 of Council Regulation (EU) No 269/2014 — the Russia and Ukraine territorial-integrity asset-freeze regime — is built around disclosure, and its second limb asks for something no screening engine produces.
1. The duty, and who owes it
Article 8(1) opens by overriding the usual objections: notwithstanding the applicable rules on reporting, confidentiality and professional secrecy, natural and legal persons, entities and bodies shall supply the information and cooperate with the competent authority in any verification of it. Note what is absent. The duty is not addressed to financial institutions, or to obliged entities, or to any defined regulated population. It attaches to anyone who holds the information.
The disclosure goes to the competent authority of the Member State where the person is resident or located, and the deadline in both limbs is the same: within two weeks of acquiring the information. Not within two weeks of the listing, and not within two weeks of a request.
2. Two limbs — and the second one is retrospective
The first limb covers information on funds and economic resources frozen under Article 2, and — in the same breath — information held about funds and economic resources within Union territory belonging to, owned, held or controlled by a listed person which have not been treated as frozen by those obliged to freeze them. That second half is the uncomfortable one: it requires you to report the asset you should have frozen and did not.
The second limb is a look-back. It covers information held on funds and economic resources within Union territory belonging to, owned, held or controlled by a listed person which were subject to any move, transfer, alteration, use of, access to, or dealing in the two weeks preceding the listing. Nothing in a real-time screening architecture generates this. It is a retrospective query over the fortnight before a designation took effect, and it has to be run every time the Annex I list changes in a way that touches your book.
3. The minimum content is specified, and it is not a name and a number
Article 8(1a) sets a floor for what a report on frozen funds must contain:
- Identification of the person owning, holding or controlling the frozen funds or economic resources, including name, address and VAT registration or tax identification number.
- The amount or market value at two dates — at the date of reporting and at the date of freezing.
- The types of funds, broken down according to the categories in Article 1(g)(i) to (vii), plus crypto-assets and other relevant categories, plus an additional category corresponding to economic resources within the meaning of Article 1(d). For each category, where available, the quantity, location and other relevant features.
The two-date valuation is the requirement that most often has no data behind it. A firm that froze a balance in March and reports it in September needs the March figure as well as the September one, which means the freeze event itself has to be recorded as a valuation point, not merely as a status change on an account.
4. What happens to the report after you file it
Article 8(1b) requires the Member State to transmit what it receives to the Commission within two weeks, with the option of transmitting in anonymised form where an investigating or judicial authority has declared the information confidential in the context of pending criminal proceedings. Central securities depositories within the meaning of Regulation (EU) No 909/2014 are singled out: they report within two weeks of acquiring the information and every three months thereafter, and transmit simultaneously to the Commission.
Article 8(1c) then extends the cooperation duty to the Commission itself, which may request any additional information it requires for verification — and where that request goes to a private party, it is transmitted to the Member State at the same time. Two safeguards sit alongside: information may be used only for the purposes for which it was provided or received, and any processing of personal data must comply with Regulation (EU) 2016/679 and, for Union institutions, Regulation (EU) 2018/1725.
5. Since 20 May 2025 the failure is a crime
Directive (EU) 2024/1226 of 24 April 2024 harmonises criminal offences and penalties for violating Union restrictive measures, and Member States had to transpose it by 20 May 2025. In July 2025 the Commission sent letters of formal notice to 18 Member States that had not communicated full transposition, giving them two months to respond — so the map is uneven, but the direction is not.
What matters here is Article 3(1)(h)(iv). It makes it a criminal offence, where intentional, to fail to comply with an obligation to provide the competent administrative authorities with information on frozen funds or economic resources, or information held about funds within Member State territory belonging to designated persons which have not been frozen, where that information was obtained in the performance of a professional duty. That is Article 8 of Regulation 269/2014, criminalised. A parallel point, (h)(iii), catches the designated person’s own failure to report their assets.
| Provision | Reporting failures — Art 3(1)(h)(iii) and (iv) | Freeze and availability breaches — Art 3(1)(a), (b), (h)(i)–(ii) |
|---|---|---|
| Optional de minimis (Art 3(2)) | Below EUR 10,000 may be excluded | Below EUR 10,000 may be excluded |
| Maximum imprisonment (Art 5(3)) | At least 1 year where value is at least EUR 100,000 | At least 5 years where value is at least EUR 100,000 |
| Corporate fine floor (Art 7(2)) | 1% of total worldwide turnover, or EUR 8,000,000 | 5% of total worldwide turnover, or EUR 40,000,000 |
Three further features shape exposure. The EUR 100,000 and EUR 10,000 thresholds may be met through a series of linked offences of the same kind by the same offender, so a pattern of small omissions aggregates. Commission of the offence by a professional service provider in violation of its professional obligations is expressly listed as an aggravating circumstance in Article 8(c). And Article 6 makes legal persons liable not only for acts by those in leading positions but where a lack of supervision or control made the offence possible — which is the language of a control-framework failure, not of a rogue employee.
6. Worked example: the freeze you missed
Facts: a quarterly assurance review finds a dormant wallet, opened in 2021, whose holder was designated eleven months ago. Screening never matched because the stored name used a different transliteration. The balance is EUR 4,200 and nothing has moved since the listing.
Which rule applies: Article 8(1)(a), first limb — information held about funds within Union territory belonging to a listed person which have not been treated as frozen. The clock runs from acquiring the information, which is the date of the review finding, not the date of designation.
What the practitioner does: freezes immediately, and files within two weeks with the full Article 8(1a) content, including the value at the date of freezing and at the date of reporting. Outcome: the eleven-month gap is a control failure to be remediated, but the reporting failure would be a separate and, since transposition, criminal matter. Note the interaction with the de minimis option: EUR 4,200 is below EUR 10,000, so in a Member State that took the Article 3(2) option the omission may fall outside the criminal offence — but the administrative duty under Article 8 is unaffected, and linked omissions aggregate.
7. Worked example: the fortnight before the listing
Facts: a new designation lands on a Friday. Screening blocks the account the same day. The customer had made eleven outgoing transfers in the previous two weeks, including one to a third-country account.
Which rule applies: Article 8(1)(a), second limb — information held on funds subject to any move, transfer, alteration, use, access or dealing in the two weeks preceding the listing.
What the practitioner does: runs a retrospective extract over the fourteen days before the listing date, covering every movement and not only outgoing payments — access, alteration and use are named separately from transfer — and files it within two weeks of producing it. Outcome: a standing, parameterised query that takes a designation date and a customer identifier and returns the fortnight’s activity is the only sustainable answer. Firms that assemble this by hand each time are the ones that miss the two-week window, because the assembly, not the filing, is what takes the time.
8. FAQ
Who exactly owes the Article 8 duty?
Natural and legal persons, entities and bodies — not a defined regulated population. It applies notwithstanding rules on reporting, confidentiality and professional secrecy, to the competent authority of the Member State where the person is resident or located.
Is the deadline two weeks from the listing?
No. It is within two weeks of acquiring the information. For an asset found late, the clock starts when you find it.
Do we have to report assets we did not freeze?
Yes. The first limb expressly covers funds of listed persons within Union territory which have not been treated as frozen by those obliged to do so, and failing to provide that information is the conduct criminalised by Article 3(1)(h)(iv) of Directive (EU) 2024/1226.
What has to be in the report?
At a minimum: identification including name, address and VAT or tax identification number; the amount or market value at the date of reporting and at the date of freezing; and a breakdown by type of funds across the Article 1(g) categories, crypto-assets, other relevant categories and economic resources, with quantity and location where available.
Does Article 8 apply to every EU sanctions regime?
Article 8 as described here is the provision of Regulation (EU) No 269/2014, amended in February 2023 to add the minimum content and the two-week deadlines. Other sanctions regulations contain information duties that are structurally similar but not textually identical, so check the operative regulation for each regime rather than generalising.
9. What to do, today
- Separate the alert from the report in your procedures, with an owner and a two-week service level for the filing and evidence that the clock started when the information was acquired.
- Build the look-back as a parameterised query — designation date plus customer identifier, returning all movement, access and alteration events over the preceding fourteen days.
- Record a valuation at the moment of freezing, not just a status change, so the two-date requirement can be met months later.
- Map your asset taxonomy to the Article 1(g) categories plus crypto-assets and economic resources now, rather than at the point of first report.
- Check how your Member State transposed Directive (EU) 2024/1226 — whether it took the EUR 10,000 option, and how it treats liability for a lack of supervision or control.
Related: Sanctions screening at instant-payment speed · Funds-transfer information · The MiCA travel rule
