9.6.2023 |
EN |
Official Journal of the European Union |
L 150/1 |
REGULATION (EU) 2023/1113 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL
欧洲议会和理事会条例(EU)2023/1113
of 31 May 2023 截至 2023 年 5 月 31 日
on information accompanying transfers of funds and certain crypto-assets and amending Directive (EU) 2015/849
关于资金和某些加密资产转移所附信息的指令,并修订第 2015/849 号指令(欧盟
(recast) (重铸)
(Text with EEA relevance)
(与欧洲经济区有关的文本)
THE EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION,
欧洲议会和欧盟理事会、
Having regard to the Treaty on the Functioning of the European Union, and in particular Article 114 thereof,
考虑到《欧洲联盟运作条约》,特别是其中的第 114 条、
Having regard to the proposal from the European Commission,
考虑到欧盟委员会的建议、
After transmission of the draft legislative act to the national parliaments,
向国家议会递交法律草案后、
Whereas: 鉴于
(1) |
Regulation (EU) 2015/847 of the European Parliament and of the Council (4) has been substantially amended (5). Since further amendments are to be made, that Regulation should be recast in the interests of clarity. |
(2) |
Regulation (EU) 2015/847 was adopted to ensure that the Financial Action Task Force (FATF) requirements on wire transfer service providers, and in particular the obligation on payment service providers to accompany transfers of funds with information on the payer and the payee, were applied uniformly throughout the Union. The latest changes introduced in June 2019 in the FATF standards on new technologies, with the aim of regulating virtual assets and virtual asset service providers, have provided new and similar obligations for virtual asset service providers, with the purpose of facilitating the traceability of transfers of virtual assets. Further to those changes, virtual asset service providers are to accompany transfers of virtual assets with information on the originators and beneficiaries of those transfers. Virtual asset service providers are also required to obtain, hold and share that information with their counterpart on the other end of the virtual assets transfer and make it available on request to competent authorities. |
(3) |
Given that Regulation (EU) 2015/847 currently only applies to transfers of funds, that is to banknotes and coins, scriptural money, and electronic money as defined in Article 2, point 2, of Directive 2009/110/EC of the European Parliament and of the Council (6), it is appropriate to extend the scope of Regulation (EU) 2015/847 in order to also cover transfers of virtual assets. |
(4) |
Flows of illicit money through transfers of funds and virtual assets can damage the integrity, stability and reputation of the financial sector, and threaten the internal market of the Union as well as international development. Money laundering, terrorist financing and organised crime remain significant problems which should be addressed at Union level. The soundness, integrity and stability of the system of transfers of funds and virtual assets, and confidence in the financial system as a whole, could be seriously jeopardised by the efforts of criminals and their associates to disguise the origin of criminal proceeds or to transfer funds or virtual assets for criminal activities or terrorist purposes. |
(5) |
In order to facilitate their criminal activities, money launderers and financers of terrorism are likely to take advantage of the freedom of capital movements within the Union’s integrated financial area unless certain coordinating measures are adopted at Union level. International cooperation within the framework of FATF and the global implementation of its recommendations aim to prevent money laundering and terrorist financing while transferring funds or virtual assets. |
(6) |
By reason of the scale of the action to be undertaken, the Union should ensure that the International Standards on Combating Money Laundering and the Financing of Terrorism and Proliferation adopted by FATF on 16 February 2012 and then revised on 21 June 2019 (the ‘revised FATF Recommendations’), and in particular FATF Recommendation 15 on new technologies, FATF Recommendation 16 on wire transfers and the revised interpretative notes on those recommendations, are applied uniformly throughout the Union and that, in particular, there is no discrimination or discrepancy between, on the one hand, national payments or transfers of virtual assets within a Member State and, on the other, cross-border payments or transfers of virtual assets between Member States. Uncoordinated action by Member States acting alone in the field of cross-border transfers of funds and virtual assets could have a significant impact on the smooth functioning of payment systems and virtual asset services at Union level and could therefore damage the internal market in the field of financial services. |
(7) |
In order to foster a coherent approach in the international context and to increase the effectiveness of the fight against money laundering and terrorist financing, further Union action should take account of developments at international level, in particular the revised FATF Recommendations. |
(8) |
Their global reach, the speed at which transactions can be carried out and the possible anonymity offered by their transfer make virtual assets particularly susceptible to criminal misuse, including in cross-border situations. In order to effectively address the risks posed by the misuse of virtual assets for money laundering and terrorist financing purposes, the Union should promote the application at global level of the standards implemented by this Regulation and the development of the international and cross-jurisdictional dimension of the regulatory and supervisory framework for transfers of virtual assets in relation to money laundering and terrorist financing. |
(9) |
Directive (EU) 2015/849 of the European Parliament and of the Council (7), as a result of its amendment by Directive (EU) 2018/843 of the European Parliament and of the Council (8), introduced a definition of virtual currencies and recognised providers engaged in exchange services between virtual currencies and fiat currencies, as well as custodial wallet providers, among the entities subject to anti-money laundering and counter-terrorist financing requirements under Union law. Recent international developments, in particular within the framework of FATF, now imply the need to regulate additional categories of virtual asset service providers not yet covered and to broaden the current definition of virtual currency. |
(10) |
The definition of crypto-assets in Regulation (EU) 2023/1114 of the European Parliament and of the Council (9) corresponds to the definition of virtual assets set out in the revised FATF Recommendations, and the list of crypto-asset services and crypto-asset service providers covered in that Regulation also encompasses the virtual asset service providers identified as such by FATF and considered likely to raise money laundering and terrorist financing concerns. In order to ensure coherency of Union law in that area, this Regulation should use the same definitions of crypto-assets, crypto-asset services and crypto-asset service providers as those used in Regulation (EU) 2023/1114. |
(11) |
The implementation and enforcement of this Regulation represent relevant and effective means of preventing and combating money laundering and terrorist financing. |
(12) |
This Regulation is not intended to impose unnecessary burdens or costs on payment service providers, crypto-asset service providers or persons who use their services. In that regard, the preventive approach should be targeted and proportionate and should be in full compliance with the free movement of capital, which is guaranteed throughout the Union. |
(13) |
The Union’s Revised Strategy on Terrorist Financing of 17 July 2008 (the ‘Revised Strategy’) states that efforts must be maintained to prevent terrorist financing and to control the use by suspected terrorists of their own financial resources. It recognises that FATF is constantly seeking to improve its recommendations and is working towards a common understanding of how they should be implemented. The Revised Strategy notes that implementation of the revised FATF Recommendations by all FATF members and members of FATF-style regional bodies is assessed on a regular basis and that a common approach to implementation by Member States is therefore important. |
(14) |
In addition, the Commission in its communication of 7 May 2020 on an Action Plan for a comprehensive Union policy on preventing money laundering and terrorist financing identified six priority areas for urgent action to improve the Union’s anti-money laundering and counter-terrorist financing regime, including the establishment of a coherent regulatory framework for that regime in the Union to obtain more detailed and harmonised rules, in particular to address the implications of technological innovation and developments in international standards and to avoid diverging implementation of existing rules. Work at international level suggests a need to expand the scope of sectors or entities covered by that regime and to assess how it should apply to crypto-asset service providers not covered so far. |
(15) |
In order to prevent terrorist financing, measures with the purpose of freezing the funds and economic resources of certain persons, groups and entities have been taken, including Council Regulations (EC) No 2580/2001 (10), (EC) No 881/2002 (11) and (EU) No 356/2010 (12). To the same end, measures with the purpose of protecting the financial system against the channelling of funds and economic resources for terrorist purposes have also been taken. Directive (EU) 2015/849 contains a number of such measures. Those measures do not, however, fully prevent terrorists or other criminals from accessing payment systems for transferring their funds. |
(16) |
The traceability of transfers of funds and crypto-assets can be a particularly important and valuable tool in the prevention, detection and investigation of money laundering and terrorist financing, as well as in the implementation of restrictive measures, in particular those imposed by Regulations (EC) No 2580/2001, (EC) No 881/2002 and (EU) No 356/2010. It is therefore appropriate, in order to ensure the transmission of information throughout the payment chain or the transfer of crypto-assets chain, to provide for a system imposing the obligation on payment service providers to accompany transfers of funds with information on the payer and the payee and the obligation on crypto-asset service providers to accompany transfers of crypto-assets with information on the originator and the beneficiary. |
(17) |
Certain transfers of crypto-assets entail specific high-risk factors for money laundering, terrorist financing and other criminal activities, in particular transfers related to products, transactions or technologies designed to enhance anonymity, including privacy wallets, mixers or tumblers. To ensure the traceability of such transfers, the European Supervisory Authority (European Banking Authority), established by Regulation (EU) No 1093/2010 of the European Parliament and of the Council (13) (EBA), should clarify, in particular, how the risk factors listed in Annex III to Directive (EU) 2015/849 are to be taken into account by crypto-asset service providers, including when carrying out transactions with non-Union entities that are not regulated, registered or licensed in any third country, or with self-hosted addresses. Where situations of higher risk are identified, EBA should issue guidelines specifying the enhanced due diligence measures that obliged entities should consider applying to mitigate such risks, including the adoption of appropriate procedures such as the use of distributed ledger technology (DLT) analytic tools, to detect the origin or destination of crypto-assets. |
(18) |
This Regulation should apply without prejudice to the national restrictive measures and Union restrictive measures imposed by regulations based on Article 215 of the Treaty on the Functioning of the European Union, such as Regulations (EC) No 2580/2001, (EC) No 881/2002 and (EU) No 356/2010 and Council Regulations (EU) No 267/2012 (14), (EU) 2016/1686 (15) and (EU) 2017/1509 (16), which may require that payment service providers of payers and of payees, crypto-asset service providers of originators and of beneficiaries, intermediary payment service providers, as well as intermediary crypto-asset service providers, take appropriate action to freeze certain funds and crypto-assets or that they comply with specific restrictions concerning certain transfers of funds or of crypto-assets. Payment service providers and crypto-asset service providers should have in place internal policies, procedures and controls to ensure implementation of those restrictive measures, including screening measures against Union and national lists of designated persons. EBA should issue guidelines specifying those internal policies, procedures and controls. It is intended that the requirements of this Regulation on internal policies, procedures and controls related to restrictive measures will be repealed in the near future by a Regulation of the European Parliament and of the Council on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing. |
(19) |
The processing of personal data under this Regulation should take place in full compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (17). Further processing of personal data for commercial purposes should be strictly prohibited. The fight against money laundering and terrorist financing is recognised as an important public interest ground by all Member States. In applying this Regulation, the transfer of personal data to a third country is required to be carried out in accordance with Chapter V of Regulation (EU) 2016/679. It is important that payment service providers and crypto-asset service providers operating in multiple jurisdictions with branches or subsidiaries located outside the Union should not be prevented from transferring data about suspicious transactions within the same organisation, provided that they apply adequate safeguards. In addition, the crypto-asset service providers of the originator and of the beneficiary, the payment service providers of the payer and of the payee and the intermediary payment service providers and intermediary crypto-asset service providers should have in place appropriate technical and organisational measures to protect personal data against accidental loss, alteration, or unauthorised disclosure or access. |
(20) |
Persons that merely convert paper documents into electronic data and are acting under a contract with a payment service provider, and persons that provide payment service providers solely with messaging or other support systems for transmitting funds or with clearing and settlement systems should not fall within the scope of this Regulation. |
(21) |
Persons that provide only ancillary infrastructure, such as internet network and infrastructure service providers, cloud service providers or software developers, that enables another entity to provide transfer services for crypto-assets, should not fall within the scope of this Regulation unless they perform transfers of crypto-assets. |
(22) |
This Regulation should not apply to person-to-person transfers of crypto-assets conducted without the involvement of a crypto-asset service provider, or to cases where both the originator and the beneficiary are providers of transfer services for crypto-assets acting on their own behalf. |
(23) |
Transfers of funds corresponding to services referred to in Article 3, points (a) to (m) and point (o), of Directive (EU) 2015/2366 of the European Parliament and of the Council (18) do not fall within the scope of this Regulation. It is also appropriate to exclude from the scope of this Regulation transfers of funds and of electronic money tokens, as defined in Article 3(1), point (7), of Regulation (EU) 2023/1114, that represent a low risk of money laundering or terrorist financing. Such exclusions should cover payment cards, electronic money instruments, mobile phones or other digital or information technology (IT) prepaid or postpaid devices with similar characteristics, where they are used exclusively for the purchase of goods or services and the number of the card, instrument or device accompanies all transfers. However, the use of a payment card, an electronic money instrument, a mobile phone or any other digital or IT prepaid or postpaid device with similar characteristics in order to effect a transfer of funds or of electronic money tokens between natural persons acting as consumers for purposes other than trade, business or professional activity, falls within the scope of this Regulation. In addition, automated teller machine withdrawals, payments of taxes, fines or other levies, transfers of funds carried out through cheque images exchanges, including truncated cheques, or bills of exchange, and transfers of funds where both the payer and the payee are payment service providers acting on their own behalf should be excluded from the scope of this Regulation. |
(24) |
Crypto-assets that are unique and not fungible are not subject to the requirements of this Regulation unless they are classified as crypto-assets or funds under Regulation (EU) 2023/1114. |
(25) |
Crypto-asset automated teller machines (the ‘crypto-ATMs’) can enable users to perform transfers of crypto-assets to a crypto-asset address by depositing cash, often without any form of customer identification and verification. Crypto-ATMs are particularly exposed to money laundering and terrorist financing risks because the anonymity they provide, and the possibility of operating with cash of unknown origin, make them an ideal vehicle for illicit activities. Given the role of crypto-ATMs in providing or actively facilitating transfers of crypto-assets, transfers of crypto-assets linked to crypto-ATMs should fall under the scope of this Regulation. |
(26) |
In order to reflect the special characteristics of national payment systems, and provided that it is always possible to trace the transfer of funds back to the payer, Member States should be able to exempt from the scope of this Regulation certain domestic low-value transfers of funds, including electronic giro payments, used for the purchase of goods or services. |
(27) |
Due to the inherent borderless nature and global reach of transfers of crypto-assets and of the provision of crypto-asset services, there are no objective reasons to distinguish the treatment of money laundering and terrorist financing risks of national transfers from that of cross-border transfers. In order to reflect those specific features, no exemption from the scope of this Regulation should be granted to domestic low-value transfers of crypto-assets, in line with the FATF requirement to treat all transfers of crypto-assets as cross-border. |
(28) |
Payment service providers and crypto-asset service providers should ensure that the information on the payer and the payee or on the originator and the beneficiary is not missing or incomplete. |
(29) |
In order not to impair the efficiency of payment systems and in order to balance the risk of driving transactions underground as a result of overly strict identification requirements against the potential terrorist threat posed by small transfers of funds, the obligation to check whether information on the payer or the payee is accurate should, in the case of transfers of funds where verification has not yet taken place, be imposed only in respect of individual transfers of funds that exceed EUR 1 000, unless the transfer appears to be linked to other transfers of funds which together would exceed EUR 1 000, the funds have been received or paid out in cash or in anonymous electronic money, or where there are reasonable grounds for suspecting money laundering or terrorist financing. |
(30) |
Compared to transfers of funds, transfers of crypto-assets can be carried out across multiple jurisdictions at a larger scale and higher speed due to their global reach and technological characteristics. In addition to the pseudo-anonymity of crypto-assets, those features of transfers of crypto-assets offer criminals the opportunity to carry out at high speed large illicit transfers while circumventing traceability obligations and avoiding detection, by means of structuring a large transaction into smaller amounts, using multiple seemingly unrelated DLT addresses, including one-time use DLT addresses, and using automated processes. Most crypto-assets are also highly volatile and their value can fluctuate significantly within a very short timeframe which makes the calculation of linked transactions more uncertain. In order to reflect those specific features, transfers of crypto-assets should be subject to the same requirements regardless of their amount and of whether they are domestic or cross-border transfers. |
(31) |
For transfers of funds or for transfers of crypto-assets where verification is deemed to have taken place, payment service providers and crypto-asset service providers should not be required to verify the accuracy of the information on the payer or the payee accompanying each transfer of funds, or on the originator and the beneficiary accompanying each transfer of crypto-assets, provided that the obligations laid down in Directive (EU) 2015/849 are met. |
(32) |
In view of the Union legislative acts in respect of payment services, namely Regulation (EU) No 260/2012 of the European Parliament and of the Council (19), Directive (EU) 2015/2366 and Regulation (EU) 2021/1230 of the European Parliament and of the Council (20), it should be sufficient to provide that only simplified information accompany transfers of funds within the Union, such as the payment account number or a unique transaction identifier. |
(33) |
In order to allow the authorities responsible for combating money laundering or terrorist financing in third countries to trace the source of funds or crypto-assets used for those purposes, transfers of funds or transfers of crypto-assets from the Union to outside the Union should carry complete information on the payer and the payee, in respect of transfers of funds, and on the originator and the beneficiary, in respect of transfers of crypto-assets. Complete information on the payer and the payee should include the legal entity identifier (LEI), or any equivalent official identifier, where that identifier is provided by the payer to its payment service provider, since that would allow for better identification of the parties involved in a transfer of funds and could easily be included in existing payment message formats, such as that developed by the International Organisation for Standardisation for electronic data interchange between financial institutions. The authorities responsible for combating money laundering or terrorist financing in third countries should be granted access to complete information on the payer and the payee or on the originator and the beneficiary, as applicable, only for the purposes of preventing, detecting and investigating money laundering and terrorist financing. |
(34) |
Crypto-assets exist in a borderless virtual reality and can be transferred to any crypto-asset service provider, whether or not that provider is registered in a jurisdiction. Many non-Union jurisdictions have in place rules relating to data protection and its enforcement that differ from those in the Union. When transferring crypto-assets on behalf of a client to a crypto-asset service provider that is not registered in the Union, the crypto-asset service provider of the originator should assess the ability of the crypto-asset service provider of the beneficiary to receive and retain the information required under this Regulation in compliance with Regulation (EU) 2016/679, using, where appropriate, the options available in Chapter V of Regulation (EU) 2016/679. The European Data Protection Board should, after consulting EBA, issue guidelines on the practical implementation of data protection requirements for transfers of personal data to third countries in the context of transfers of crypto-assets. Situations might occur where personal data cannot be sent because the requirements of Regulation (EU) 2016/679 cannot be fulfilled. EBA should issue guidelines on suitable procedures for determining whether the transfer of crypto-assets should be executed, rejected or suspended in such cases. |
(35) |
The Member State authorities responsible for combating money laundering and terrorist financing, and relevant judicial and law enforcement authorities in the Member States and at Union level, should intensify cooperation with each other and with relevant third country authorities, including those in developing countries, in order to strengthen further transparency and the sharing of information and best practices. |
(36) |
The crypto-asset service provider of the originator should ensure that transfers of crypto-assets are accompanied by the name of the originator, the originator’s distributed ledger address, in cases where a transfer of crypto-assets is registered on a network using DLT or similar technology, the originator’s crypto-asset account number, in cases where such an account exists and is used to process the transaction, the originator’s address including the name of the country, official personal document number and customer identification number, or, alternatively, the originator’s date and place of birth, and, subject to the existence of the necessary field in the relevant message format and where provided by the originator to its crypto-asset service provider, the current LEI or, in its absence, any other available equivalent official identifier of the originator. The information should be submitted in a secure manner and in advance of, or simultaneously or concurrently with, the transfer of crypto-assets. |
(37) |
The crypto-asset service provider of the originator should also ensure that transfers of crypto-assets are accompanied by the name of the beneficiary, the beneficiary’s distributed ledger address, in cases where a transfer of crypto-assets is registered on a network using DLT or similar technology, the beneficiary’s account number, in cases where such an account exists and is used to process the transaction and, subject to the existence of the necessary field in the relevant message format and where provided by the originator to its crypto-asset service provider, the current LEI or, in its absence, any other available equivalent official identifier of the beneficiary. The information should be submitted in a secure manner and in advance of, or simultaneously or concurrently with, the transfer of crypto-assets. |
(38) |
Regarding transfers of crypto-assets, the requirements of this Regulation should apply to all transfers including transfers of crypto-assets to or from a self-hosted address, as long as there is a crypto-asset service provider involved. |
(39) |
In the case of a transfer to or from a self-hosted address, the crypto-asset service provider should collect the information on both the originator and the beneficiary, usually from its client. A crypto-asset service provider should in principle not be required to verify the information on the user of the self-hosted address. Nonetheless, in the case of a transfer of an amount exceeding EUR 1 000 that is sent or received on behalf of a client of a crypto-asset service provider to or from a self-hosted address, that crypto-asset service provider should verify whether that self-hosted address is effectively owned or controlled by that client. |
(40) |
As regards transfers of funds from a single payer to several payees that are to be sent in a batch file transfer containing individual transfers from the Union to outside the Union, provision should be made for such individual transfers to carry only the payment account number of the payer or the unique transaction identifier, as well as complete information on the payee, provided that the batch file contains complete information on the payer that is verified for accuracy and complete information on the payee that is fully traceable. |
(41) |
As regards batch file transfers of crypto-assets, the submission of information on the originator and beneficiary in batches should be accepted, as long as that submission occurs immediately and securely. It should not be permitted to submit the required information after the transfer, as submission must occur before or at the moment the transaction is completed, and crypto-asset service providers or other obliged entities should submit the required information simultaneously with the batch file transfer of crypto-assets. |
(42) |
In order to check whether the required information on the payer and the payee accompanies transfers of funds, and to help identify suspicious transactions, the payment service provider of the payee and the intermediary payment service provider should have effective procedures in place to detect whether information on the payer and the payee is missing or incomplete. Those procedures should include monitoring after or during the transfers where appropriate. Competent authorities should ensure that payment service providers include the required transaction information with the wire transfer or related message throughout the payment chain. |
(43) |
As regards transfers of crypto-assets, the crypto-asset service provider of the beneficiary should implement effective procedures to detect whether the information on the originator or beneficiary is missing or incomplete. Those procedures should include, where appropriate, monitoring after or during the transfers. It should not be required that the information is attached directly to the transfer of crypto-assets itself, as long as it is submitted in advance of, or simultaneously or concurrently with, the transfer of crypto-assets, and is available upon request to appropriate authorities. |
(44) |
Given the potential threat of money laundering and terrorist financing presented by anonymous transfers, it is appropriate to require payment service providers to request information on the payer and the payee and to require crypto-asset service providers to request information on the originator and the beneficiary. In line with the risk-based approach developed by FATF, it is appropriate to identify areas of higher and lower risk, with a view to better targeting the risk of money laundering and terrorist financing. Accordingly, the crypto-asset service provider of the beneficiary, the payment service provider of the payee, the intermediary payment service provider and the intermediary crypto-asset service provider should have effective risk-based procedures that apply where a transfer of funds lacks the required information on the payer or the payee, or where a transfer of crypto-assets lacks the required information on the originator or the beneficiary, in order to allow that service provider to decide whether to execute, reject or suspend that transfer and to determine the appropriate follow-up action to take. |
(45) |
Crypto-asset service providers, like all obliged entities, should assess and monitor the risk related to their clients, products and delivery channels. Crypto-asset service providers should also assess the risk related to their transactions, including where performing transfers to or from self-hosted addresses. In the event that the crypto-asset service provider is or becomes aware that the information on the originator or beneficiary using the self-hosted address is inaccurate, or where the crypto-asset service provider encounters unusual or suspicious patterns of transactions or situations of higher risks of money laundering and terrorist financing associated with transfers involving self-hosted addresses, that crypto-asset service provider should implement, where appropriate, enhanced due diligence measures to manage and mitigate the risks appropriately. The crypto-asset service provider should take those circumstances into account when assessing whether a transfer of crypto-assets, or any related transaction, is unusual and whether it is to be reported to the Financial Intelligence Unit (FIU) in accordance with Directive (EU) 2015/849. |
(46) |
This Regulation should be reviewed in the context of the adoption of a Regulation of the European Parliament and of the Council on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing, a Directive of the European Parliament and of the Council on the mechanisms to be put in place by the Member States for the prevention of the use of the financial system for the purposes of money laundering or terrorist financing and repealing Directive (EU) 2015/849 and a Regulation of the European Parliament and of the Council establishing the Authority for Anti-Money Laundering and Countering the Financing of Terrorism and amending Regulations (EU) No 1093/2010, (EU) No 1094/2010, (EU) No 1095/2010, in order to ensure consistency with the relevant provisions. |
(47) |
When assessing the risks, the payment service provider of the payee, the intermediary payment service provider, the crypto-asset service provider of the beneficiary or the intermediary crypto-asset service provider should exercise special vigilance where it becomes aware that information on the payer or the payee or on the originator or the beneficiary, as applicable, is missing or incomplete, or where a transfer of crypto-assets is required to be considered suspicious based on the origin or destination of the crypto-assets concerned, and should report suspicious transactions to the competent authorities in accordance with the reporting obligations set out in Directive (EU) 2015/849. |
(48) |
Similar to transfers of funds between payment service providers, transfers of crypto-assets involving intermediary crypto-asset service providers might facilitate transfers as an intermediate element in a chain of transfers of crypto-assets. In line with international standards, such intermediary providers should also be subject to the requirements set out in this Regulation, in the same way as existing obligations on intermediary payment service providers. |
(49) |
The provisions on transfers of funds and transfers of crypto-assets in relation to which information on the payer or the payee or the originator or the beneficiary is missing or incomplete, and in relation to which transfers of crypto-assets are required to be considered suspicious based on the origin or destination of the crypto-assets concerned, apply without prejudice to any obligations on payment service providers, intermediary payment service providers, crypto-asset service providers and intermediary crypto-asset service providers to reject or suspend transfers of funds and transfers of crypto-assets which breach a provision of civil, administrative or criminal law. |
(50) |
In order to ensure technology neutrality, this Regulation should not mandate the use of a particular technology for the transfer of transaction information by crypto-asset service providers. To ensure the efficient implementation of requirements applicable to crypto-asset service providers under this Regulation, standard-setting initiatives involving or led by the crypto-asset industry will be critical. The resulting solutions should be interoperable through the use of international or Union-wide standards in order to allow for a swift exchange of information. |
(51) |
With the aim of assisting payment service providers and crypto-asset service providers to put effective procedures in place to detect cases in which they receive transfers of funds or transfers of crypto-assets with missing or incomplete information on the payer, payee, originator or beneficiary and to take effective follow-up action, EBA should issue guidelines. |
(52) |
To enable prompt action to be taken in the fight against money laundering and terrorist financing, payment service providers and crypto-asset service providers should respond promptly to requests for information on the payer and the payee or on the originator and the beneficiary from the authorities responsible for combating money laundering or terrorist financing in the Member State where those payment service providers are established or where those crypto-asset service providers have their registered office. |
(53) |
The number of working days elapsing in the Member State of the payment service provider of the payer determines the number of days to respond to requests for information on the payer. |
(54) |
As it may not be possible in criminal investigations to identify the data required or the individuals involved in a transaction until many months, or even years, after the original transfer of funds or transfer of crypto-assets, and in order to be able to have access to essential evidence in the context of investigations, it is appropriate to require payment service providers or crypto-asset service providers to keep records of information on the payer and the payee or the originator and the beneficiary for a period of time for the purposes of preventing, detecting and investigating money laundering and terrorist financing. That period should be limited to five years, after which all personal data should be deleted unless national law provides otherwise. If necessary for the purposes of preventing, detecting or investigating money laundering or terrorist financing, and after carrying out an assessment of the necessity and proportionality of the measure, Member States should be able to allow or require retention of records for a further period of no more than five years, without prejudice to national criminal law on evidence applicable to ongoing criminal investigations and legal proceedings and in full compliance with Directive (EU) 2016/680 of the European Parliament and of the Council (21). Those measures could be reviewed in light of the adoption of a Regulation of the European Parliament and of the Council on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing. |
(55) |
In order to improve compliance with this Regulation, and in accordance with the Commission Communication of 9 December 2010 entitled ‘Reinforcing sanctioning regimes in the financial services sector’, the power to adopt supervisory measures and the sanctioning powers of competent authorities should be enhanced. Administrative sanctions and measures should be provided for and, given the importance of the fight against money laundering and terrorist financing, Member States should lay down sanctions and measures that are effective, proportionate and dissuasive. Member States should notify the Commission and the permanent internal committee on anti-money-laundering and countering terrorist financing referred to in Article 9a(7) of Regulation (EU) No 1093/2010 thereof. |
(56) |
In order to ensure uniform conditions for the implementation of this Regulation, implementing powers should be conferred on the Commission. Those powers should be exercised in accordance with Regulation (EU) No 182/2011 of the European Parliament and of the Council (22). |
(57) |
A number of countries and territories which do not form part of the territory of the Union share a monetary union with a Member State, form part of the currency area of a Member State or have signed a monetary convention with the Union represented by a Member State, and have payment service providers that participate directly or indirectly in the payment and settlement systems of that Member State. In order to avoid the application of this Regulation to transfers of funds between the Member States concerned and those countries or territories having a significant negative effect on the economies of those countries or territories, it is appropriate to provide for the possibility for such transfers of funds to be treated as transfers of funds within the Member States concerned. |
(58) |
Given the potential high risks associated with, and the technological and regulatory complexity posed by, self-hosted addresses, including in relation to the verification of ownership information, by 1 July 2026, the Commission should assess the need for additional specific measures to mitigate the risks posed by transfers to or from self-hosted addresses or to or from entities not established in the Union, including the introduction of possible restrictions, and should assess the effectiveness and proportionality of the mechanisms used to verify the accuracy of information concerning the ownership of self-hosted addresses. |
(59) |
At present, Directive (EU) 2015/849 only applies to two categories of crypto-asset service providers, namely, custodial wallet providers and providers engaged in exchange services between virtual currencies and fiat currencies. In order to close existing loopholes in the anti-money laundering and counter-terrorist financing framework and to align Union law with international recommendations, Directive (EU) 2015/849 should be amended to include all categories of crypto-asset service providers as defined in Regulation (EU) 2023/1114, which covers a broader range of crypto-asset service providers. In particular, with a view to ensuring that crypto-asset service providers are subject to the same requirements and level of supervision as credit and financial institutions, it is appropriate to update the list of obliged entities by including crypto-asset service providers within the category of financial institutions for the purpose of Directive (EU) 2015/849. In addition, taking into account that traditional financial institutions also fall within the definition of crypto-asset service providers when offering such services, the identification of crypto-asset service providers as financial institutions allows for a single consistent set of rules that applies to entities providing both traditional financial services and crypto-asset services. Directive (EU) 2015/849 should also be amended in order to ensure that crypto-asset service providers are able to appropriately mitigate the money laundering and terrorist financing risks to which they are exposed. |
(60) |
Relationships established between crypto-asset service providers and entities established in third countries for the purpose of executing transfers of crypto-assets or the provision of similar crypto-asset services present similarities to correspondent banking relationships established with a third country’s respondent institution. As those relationships are characterised by an ongoing and repetitive nature, they should be considered a type of correspondent relationship and be subject to specific enhanced due diligence measures similar in principle to those applied in the context of banking and financial services. In particular, crypto-asset service providers should, when establishing a new correspondent relationship with a respondent entity, apply specific enhanced due diligence measures in order to identify and assess the risk exposure of that respondent, based on its reputation, the quality of supervision and its anti-money laundering and counter-terrorist financing (AML/CFT) controls. Based on the information gathered, the correspondent crypto-asset service providers should implement appropriate risk mitigating measures, which should take into account in particular the potential higher risk of money laundering and terrorist financing posed by unregistered and unlicensed entities. That is especially relevant as long as the implementation of the FATF standards relating to crypto-assets at global level remains uneven, which poses additional risks and challenges. EBA should provide guidance on how crypto-asset service providers should conduct the enhanced due diligence and should specify the appropriate risk mitigating measures, including the minimum action to be taken, when interacting with unregistered or unlicensed entities which provide crypto-asset services. |
(61) |
Regulation (EU) 2023/1114 has established a comprehensive regulatory framework for crypto-asset service providers which harmonises the rules pertaining to the authorisation and operation of crypto-asset service providers across the Union. In order to avoid duplication of requirements, Directive (EU) 2015/849 should be amended to remove registration requirements in relation to those categories of crypto-asset service providers which will become subject to a single licensing regime under Regulation (EU) 2023/1114. |
(62) |
Since the objectives of this Regulation, namely to fight money laundering and the financing of terrorism, including by implementing international standards and by ensuring the availability of basic information on payers and payees of transfer of funds, and on originators and beneficiaries of transfers of crypto-assets, cannot be sufficiently achieved by the Member States but can rather, by reason of the scale or effects of the action, be better achieved at Union level, the Union may adopt measures, in accordance with the principle of subsidiarity as set out in Article 5 of the Treaty on European Union. In accordance with the principle of proportionality as set out in that Article, this Regulation does not go beyond what is necessary in order to achieve those objectives. |
(63) |
This Regulation is subject to Regulation (EU) 2016/679 and Regulation (EU) 2018/1725 of the European Parliament and of the Council (23). It respects the fundamental rights and observes the principles recognised by the Charter of Fundamental Rights of the European Union, in particular the right to respect for private and family life (Article 7), the right to the protection of personal data (Article 8), the right to an effective remedy and to a fair trial (Article 47) and the principle of ne bis in idem. |
(64) |
In order to ensure consistency with Regulation (EU) 2023/1114, this Regulation should apply from the date of application of that Regulation. By that date, Member States should also transpose the amendments to Directive (EU) 2015/849. |
(65) |
The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 and delivered an opinion on 22 September 2021 (24), |
HAVE ADOPTED THIS REGULATION:
采用了这一规定:
CHAPTER I 第一章
Subject matter, scope and definitions
主题、范围和定义
Article 1 第 1 条
Subject matter 主题
This Regulation lays down rules on the information on payers and payees accompanying transfers of funds, in any currency, and on the information on originators and beneficiaries accompanying transfers of crypto-assets, for the purposes of preventing, detecting and investigating money laundering and terrorist financing, where at least one of the payment service providers or crypto-asset service providers involved in the transfer of funds or transfer of crypto-assets is established or has its registered office, as applicable, in the Union. In addition, this Regulation lays down rules on internal policies, procedures and controls to ensure implementation of restrictive measures where at least one of the payment service providers or crypto-asset service providers involved in the transfer of funds or transfer of crypto-assets is established or has its registered office, as applicable, in the Union.
为防止、侦查和调查洗钱和资助恐怖主义行为,本条例规定了关于任何货币的资金转移所附带的付款人和受款人信息,以及关于加密资产转移所附带的发端人和受益人信息的规则,如果参与资金转移或加密资产转移的支付服务提供商或加密资产服务提供商中至少有一家在欧盟设立或拥有注册办事处(视适用情况而定)。此外,本条例还规定了内部政策、程序和控制规则,以确保在涉及资金转移或加密资产转移的支付服务提供商或加密资产服务提供商中至少有一家在欧盟设立或拥有注册办事处(如适用)的情况下执行限制性措施。
Article 2 第二条
Scope 范围
1. This Regulation shall apply to transfers of funds, in any currency, which are sent or received by a payment service provider or an intermediary payment service provider established in the Union. It shall also apply to transfers of crypto-assets, including transfers of crypto-assets executed by means of crypto-ATMs, where the crypto-asset service provider, or the intermediary crypto-asset service provider, of either the originator or the beneficiary has its registered office in the Union.
1.本条例适用于在欧盟境内设立的支付服务提供商或中介支付服务提供商以任何货币发送或接收的资金转账。本条例还适用于加密资产的转账,包括通过加密自动转账机制执行的加密资产转账,且发端人或受益人的加密资产服务提供商或中介加密资产服务提供商在欧盟设有注册办事处。
2. This Regulation shall not apply to the services listed in Article 3, points (a) to (m) and point (o), of Directive (EU) 2015/2366.
2.本条例不适用于第 2015/2366 号指令(欧盟)第 3 条第(a)至(m)点和第(o)点所列的服务。
3. This Regulation shall not apply to transfers of funds or to transfers of electronic money tokens, as defined in Article 3(1), point (7), of Regulation (EU) 2023/1114, carried out using a payment card, an electronic money instrument, a mobile phone or any other digital or IT prepaid or postpaid device with similar characteristics, provided that the following conditions are met:
3.本条例不适用于使用支付卡、电子货币票据、手机或任何其他具有类似特征的数字或信息技术预付费或后付费设备进行的资金转账或电子货币代币转账(如第 2023/1114 号条例(欧盟)第 3(1)条第(7)点所定义),前提是满足以下条件:
(a) |
that card, instrument or device is used exclusively to pay for goods or services; and |
(b) |
the number of that card, instrument or device accompanies all transfers flowing from the transaction. |
However, this Regulation shall apply when a payment card, an electronic money instrument, a mobile phone or any other digital or IT prepaid or postpaid device with similar characteristics is used in order to effect a transfer of funds or electronic money tokens between natural persons acting as consumers for purposes other than trade, business or professional activity.
但是,如果支付卡、电子货币票据、移动电话或任何其他具有类似特征的数字或 IT 预付或后付费设备被用于在作为消费者的自然人之间实现资金或电子货币代币的转移,而其目的不在于贸易、商业或专业活动,则本条例也应适用。
4. This Regulation shall not apply to persons that have no activity other than to convert paper documents into electronic data and that do so pursuant to a contract with a payment service provider, or to persons that have no activity other than to provide payment service providers with messaging or other support systems for transmitting funds or with clearing and settlement systems.
4.本条例不适用于除根据与支付服务提供商签订的合同将纸质文件转换为电子数据外没有其他活动的人,也不适用于除向支付服务提供商提供信息传送或其他资金传送支持系统或清算与结算系统外没有其他活动的人。
This Regulation shall not apply to a transfer of funds where any of the following conditions is met:
本条例不适用于符合以下任何条件的资金转账:
(a) |
it involves the payer withdrawing cash from the payer’s own payment account; |
(b) |
it constitutes a transfer of funds to a public authority as payment for taxes, fines or other levies within a Member State; |
(c) |
both the payer and the payee are payment service providers acting on their own behalf; |
(d) |
it is carried out through cheque images exchanges, including truncated cheques. |
This Regulation shall not apply to a transfer of crypto-assets where any of the following conditions is met:
本条例不适用于符合以下任何条件的加密资产转让:
(a) |
both the originator and the beneficiary are crypto-asset service providers acting on their own behalf; |
(b) |
the transfer constitutes a person-to-person transfer of crypto-assets carried out without the involvement of a crypto-asset service provider. |
Electronic money tokens, as defined in Article 3(1), point (7), of Regulation (EU) 2023/1114, shall be treated as crypto-assets under this Regulation.
条例(欧盟)2023/1114 第 3 条第(1)款第(7)点所定义的电子货币代币应被视为本条例下的加密资产。
5. A Member State may decide not to apply this Regulation to transfers of funds within its territory to a payee’s payment account permitting payment exclusively for the provision of goods or services where all of the following conditions are met:
5.成员国可决定不对在其境内向收款人的付款账户进行的、允许专门为提供货物或服务付款的转 账适用本条例,但须满足以下所有条件:
(a) |
the payment service provider of the payee is subject to Directive (EU) 2015/849; |
(b) |
the payment service provider of the payee is able to trace back, through the payee, by means of a unique transaction identifier, the transfer of funds from the person who has an agreement with the payee for the provision of goods or services; |
(c) |
the amount of the transfer of funds does not exceed EUR 1 000. |
Article 3 第三条
Definitions 定义
For the purposes of this Regulation, the following definitions apply:
本条例适用以下定义:
(1) |
‘terrorist financing’ means terrorist financing as defined in Article 1(5) of Directive (EU) 2015/849; |
(2) |
‘money laundering’ means the money laundering activities referred to in Article 1(3) and (4) of Directive (EU) 2015/849; |
(3) |
‘payer’ means a person that holds a payment account and allows a transfer of funds from that payment account or, where there is no payment account, that gives a transfer of funds order; |
(4) |
‘payee’ means a person that is the intended recipient of the transfer of funds; |
(5) |
‘payment service provider’ means the categories of payment service provider referred to in Article 1(1) of Directive (EU) 2015/2366, natural or legal persons benefiting from a waiver pursuant to Article 32 thereof and legal persons benefiting from a waiver pursuant to Article 9 of Directive 2009/110/EC, providing transfer of funds services; |
(6) |
‘intermediary payment service provider’ means a payment service provider that is not the payment service provider of the payer or of the payee and that receives and transmits a transfer of funds on behalf of the payment service provider of the payer or of the payee or of another intermediary payment service provider; |
(7) |
‘payment account’ means a payment account as defined in Article 4, point (12), of Directive (EU) 2015/2366; |
(8) |
‘funds’ means funds as defined in Article 4, point (25), of Directive (EU) 2015/2366; |
(9) |
‘transfer of funds’ means any transaction at least partially carried out by electronic means on behalf of a payer through a payment service provider, with a view to making funds available to a payee through a payment service provider, irrespective of whether the payer and the payee are the same person and irrespective of whether the payment service provider of the payer and that of the payee are one and the same, including:
|
(10) |
‘transfer of crypto-assets’ means any transaction with the aim of moving crypto-assets from one distributed ledger address, crypto-asset account or other device allowing the storage of crypto-assets to another, carried out by at least one crypto-asset service provider acting on behalf of either an originator or a beneficiary, irrespective of whether the originator and the beneficiary are the same person and irrespective of whether the crypto-asset service provider of the originator and that of the beneficiary are one and the same; |
(11) |
‘batch file transfer’ means a bundle of several individual transfers of funds or transfers of crypto-assets put together for transmission; |
(12) |
‘unique transaction identifier’ means a combination of letters, numbers or symbols determined by the payment service provider, in accordance with the protocols of the payment and settlement systems or messaging systems used for the transfer of funds, or determined by a crypto-asset service provider, which permits the traceability of the transaction back to the payer and the payee or the traceability of the transfer of crypto-assets back to the originator and the beneficiary; |
(13) |
‘person-to-person transfer of crypto-assets’ means a transfer of crypto-assets without the involvement of any crypto-asset service provider; |
(14) |
‘crypto-asset’ means a crypto-asset as defined in Article 3(1), point (5), of Regulation (EU) 2023/1114, except where falling within the categories listed in Article 2(2), (3) and (4) of that Regulation or otherwise qualifying as funds; |
(15) |
‘crypto-asset service provider’ means a crypto-asset service provider as defined in Article 3(1), point (15), of Regulation (EU) 2023/1114, where performing one or more crypto-asset services as defined in Article 3(1), point (16), of that Regulation; |
(16) |
‘intermediary crypto-asset service provider’ means a crypto-asset service provider that is not the crypto-asset service provider of the originator or of the beneficiary and that receives and transmits a transfer of crypto-assets on behalf of the crypto-asset service provider of the originator or of the beneficiary, or of another intermediary crypto-asset service provider; |
(17) |
‘crypto-asset automated teller machines’ or ‘crypto-ATMs’ means physical or on-line electronic terminals that enable a crypto-asset service provider to perform, in particular, the activity of transfer services for crypto-assets, as referred to in Article 3(1), point (16)(j), of Regulation (EU) 2023/1114; |
(18) |
‘distributed ledger address’ means an alphanumeric code that identifies an address on a network using distributed ledger technology (DLT) or similar technology where crypto-assets can be sent or received; |
(19) |
‘crypto-asset account’ means an account held by a crypto-asset service provider in the name of one or more natural or legal persons and that can be used for the execution of transfers of crypto-assets; |
(20) |
‘self-hosted address’ means a distributed ledger address not linked to either of the following:
|
(21) |
‘originator’ means a person that holds a crypto-asset account with a crypto-asset service provider, a distributed ledger address or a device allowing the storage of crypto-assets, and allows a transfer of crypto-assets from that account, distributed ledger address, or device, or, where there is no such account, distributed ledger address, or device, a person that orders or initiates a transfer of crypto-assets; |
(22) |
‘beneficiary’ means a person that is the intended recipient of the transfer of crypto-assets; |
(23) |
‘legal entity identifier’ or ‘LEI’ means a unique alphanumeric reference code based on the ISO 17442 standard assigned to a legal entity; |
(24) |
‘distributed ledger technology’ or ‘DLT’ means distributed ledger technology as defined in Article 3(1), point (1), of Regulation (EU) 2023/1114. |
CHAPTER II 第 II 章
Obligations on payment service providers
支付服务提供商的义务
Article 4 第四条
Information accompanying transfers of funds
资金转账所附资料
1. The payment service provider of the payer shall ensure that transfers of funds are accompanied by the following information on the payer:
1.付款人的支付服务提供商应确保资金转账附有关于付款人的以下信息:
(a) |
the name of the payer; |
(b) |
the payer’s payment account number; |
(c) |
the payer’s address including the name of the country, official personal document number and customer identification number, or, alternatively, the payer’s date and place of birth; and |
(d) |
subject to the existence of the necessary field in the relevant payments message format, and where provided by the payer to its payment service provider, the current LEI of the payer or, in its absence, any available equivalent official identifier. |
2. The payment service provider of the payer shall ensure that transfers of funds are accompanied by the following information on the payee:
2.付款人的支付服务提供商应确保资金转账附有收款人的以下信息:
(a) |
the name of the payee; |
(b) |
the payee’s payment account number; and |
(c) |
subject to the existence of the necessary field in the relevant payments message format, and where provided by the payer to its payment service provider, the current LEI of the payee or, in its absence, any available equivalent official identifier. |
3. By way of derogation from paragraph 1, point (b), and paragraph 2, point (b), in the case of a transfer not made to or from a payment account, the payment service provider of the payer shall ensure that the transfer of funds is accompanied by a unique transaction identifier rather than the payment account number.
3.为减损第 1 款(b)项和第 2 款(b)项的规定,如果不是向支付账户转账,也不是从支付账户转账,付款人的支付服务提供商应确保资金转账附有唯一的交易标识符,而不是支付账户号码。
4. Before transferring funds, the payment service provider of the payer shall verify the accuracy of the information referred to in paragraph 1 and, where applicable, in paragraph 3, on the basis of documents, data or information obtained from a reliable and independent source.
4.在转账之前,付款人的支付服务提供商应根据从可靠和独立来源获得的文件、数据或信息,核实第 1 款和第 3 款(如适用)所述信息的准确性。
5. Verification as referred to in paragraph 4 of this Article shall be deemed to have taken place where one of the following applies:
5.在出现下列情况之一时,应视为进行了本条第 4 款所述的核查:
(a) |
the identity of the payer has been verified in accordance with Article 13 of Directive (EU) 2015/849 and the information obtained pursuant to that verification has been retained in accordance with Article 40 of that Directive; |
(b) |
Article 14(5) of Directive (EU) 2015/849 applies to the payer. |
6. Without prejudice to the derogations provided for in Articles 5 and 6, the payment service provider of the payer shall not execute any transfer of funds before ensuring full compliance with this Article.
6.在不影响第 5 条和第 6 条规定的例外情况下,付款人的支付服务提供商在确保完全遵守本条规定之前,不得执行任何资金转账。
Article 5 第五条
Transfers of funds within the Union
联盟内部的资金转移
1. By way of derogation from Article 4(1) and (2), where all payment service providers involved in the payment chain are established in the Union, transfers of funds shall be accompanied by at least the payment account number of both the payer and the payee or, where Article 4(3) applies, the unique transaction identifier, without prejudice to the information requirements laid down in Regulation (EU) No 260/2012, where applicable.
作为对第 4 条第(1)款和第(2)款的减损,如果支付链中涉及的所有支付服务提供商均在欧盟内设立,则资金转账应至少附有付款人和收款人的支付账户号码,或在适用第 4 条第(3)款的情况下,附有唯一交易标识符,但不影响第 260/2012 号条例(欧盟)中规定的信息要求(如适用)。
2. Notwithstanding paragraph 1, the payment service provider of the payer shall, within three working days of receiving a request for information from the payment service provider of the payee or from the intermediary payment service provider, make available the following:
2.尽管有第 1 款的规定,付款人的支付服务提供者应在收到收款人的支付服务提供者或中介支付服务提供者的信息请求后三个工作日内提供以下信息:
(a) |
for transfers of funds exceeding EUR 1 000, whether such transfers are carried out in a single transaction or in several transactions which appear to be linked, the information on the payer or the payee in accordance with Article 4; |
(b) |
for transfers of funds not exceeding EUR 1 000 that do not appear to be linked to other transfers of funds which, together with the transfer in question, exceed EUR 1 000, at least:
|
3. By way of derogation from Article 4(4), in the case of transfers of funds referred to in paragraph 2, point (b), of this Article, the payment service provider of the payer need not verify the information on the payer unless the payment service provider of the payer:
3.作为对第 4 条第(4)款的减损,对于本条第 2 款(b)项所述的资金转账,付款人的付款服务提供者无须核实付款人的信息,除非付款人的付款服务提供者
(a) |
has received the funds to be transferred in cash or in anonymous electronic money; or |
(b) |
has reasonable grounds for suspecting money laundering or terrorist financing. |
Article 6 第六条
Transfers of funds to outside the Union
向联盟外转移资金
1. In the case of a batch file transfer from a single payer where the payment service providers of the payees are established outside the Union, Article 4(1) shall not apply to the individual transfers bundled together therein, provided that the batch file contains the information referred to in Article 4(1), (2) and (3), that that information has been verified in accordance with Article 4(4) and (5), and that the individual transfers carry the payment account number of the payer or, where Article 4(3) applies, the unique transaction identifier.
1.如果收款人的支付服务提供商位于欧盟之外,则在单一付款人的批量文件传输中,第 4 条第(1)款不适用于其中捆绑在一起的单笔转账,条件是批量文件包含第 4 条第(1)、(2)和(3)款所述信息,且该信息已根据第 4 条第(4)和(5)款进行了核实,单笔转账带有付款人的支付账号,或在适用第 4 条第(3)款的情况下,带有唯一交易标识符。
2. By way of derogation from Article 4(1), and, where applicable, without prejudice to the information required in accordance with Regulation (EU) No 260/2012, where the payment service provider of the payee is established outside the Union, transfers of funds not exceeding EUR 1 000 that do not appear to be linked to other transfers of funds which, together with the transfer in question, exceed EUR 1 000, shall be accompanied by at least:
2.作为对第 4(1)条的减损,并在不影响第 260/2012 号条例(欧盟)所要求的信息的情况下,如果收款人的支付服务提供商在欧盟之外,不超过 1 000 欧元的资金转账似乎与其他资金转账没有关联,且这些资金转账与相关转账一起超过 1 000 欧元,则应至少随附:
(a) |
the names of the payer and of the payee; and |
(b) |
the payment account numbers of the payer and of the payee or, where Article 4(3) applies, the unique transaction identifier. |
By way of derogation from Article 4(4), the payment service provider of the payer need not verify the information on the payer referred to in this paragraph unless the payment service provider of the payer:
作为对第 4(4)条的减损,付款人的付款服务提供者无须核实本段中提及的关于付款人的信息,除非付款人的付款服务提供者:
(a) |
has received the funds to be transferred in cash or in anonymous electronic money; or |
(b) |
has reasonable grounds for suspecting money laundering or terrorist financing. |
Article 7 第 7 条
Detection of missing information on the payer or the payee
检测付款人或收款人的缺失信息
1. The payment service provider of the payee shall implement effective procedures to detect whether the fields relating to the information on the payer and the payee in the messaging or payment and settlement system used to effect the transfer of funds have been filled in using characters or inputs admissible in accordance with the conventions of that system.
1.收款人的支付服务提供者应实施有效程序,以检测用于实现资金转移的信息传送或支付和结算系统中与付款人和收款人信息有关的字段是否使用了该系统的惯例所允许的字符或输入。
2. The payment service provider of the payee shall implement effective procedures, including, where appropriate, monitoring after or during the transfers, in order to detect whether the following information on the payer or the payee is missing:
收款人的支付服务提供商应执行有效的程序,包括酌情在转账后或转账过程中进行监测,以发现是否遗失了关于付款人或收款人的以下信息:
(a) |
for transfers of funds where the payment service provider of the payer is established in the Union, the information referred to in Article 5; |
(b) |
for transfers of funds where the payment service provider of the payer is established outside the Union, the information referred to in Article 4(1), points (a), (b) and (c), and Article 4(2), points (a) and (b); |
(c) |
for batch file transfers where the payment service provider of the payer is established outside the Union, the information referred to in Article 4(1), points (a), (b) and (c), and Article 4(2), points (a) and (b), in respect of that batch file transfer. |
3. In the case of transfers of funds exceeding EUR 1 000, whether those transfers are carried out in a single transaction or in several transactions which appear to be linked, before crediting the payee’s payment account or making the funds available to the payee, the payment service provider of the payee shall verify the accuracy of the information on the payee referred to in paragraph 2 of this Article on the basis of documents, data or information obtained from a reliable and independent source, without prejudice to the requirements laid down in Articles 83 and 84 of Directive (EU) 2015/2366.
对于金额超过 1 000 欧元的转账,无论这些转账是在单笔交易中进行,还是在看似关联的几笔交易中进行,在将资金贷记收款人的支付账户或将资金提供给收款人之前,收款人的支付服务提供商应根据从可靠和独立来源获得的文件、数据或信息,核实本条第 2 款所述收款人信息的准确性,但不得影响第(欧盟)2015/2366 号指令第 83 和 84 条规定的要求。
4. In the case of transfers of funds not exceeding EUR 1 000 that do not appear to be linked to other transfers of funds which, together with the transfer in question, exceed EUR 1 000, the payment service provider of the payee need not verify the accuracy of the information on the payee, unless the payment service provider of the payee:
4.如果转账金额不超过 1 000 欧元,且似乎与其他转账没有关联,而这些转账与所涉转账一起超过了 1 000 欧元,则收款人的支付服务提供商无需核实收款人信息的准确性,除非收款人的支付服务提供商: 1:
(a) |
effects the pay-out of the funds in cash or in anonymous electronic money; or |
(b) |
has reasonable grounds for suspecting money laundering or terrorist financing. |
5. Verification as referred to in paragraphs 3 and 4 of this Article shall be deemed to have taken place where one of the following applies:
5.在出现下列情况之一时,应视为进行了本条第 3 款和第 4 款所述的核查:
(a) |
the identity of the payee has been verified in accordance with Article 13 of Directive (EU) 2015/849 and the information obtained pursuant to that verification has been retained in accordance with Article 40 of that Directive; |
(b) |
Article 14(5) of Directive (EU) 2015/849 applies to the payee. |
Article 8 第八条
Transfers of funds with missing or incomplete information on the payer or the payee
付款人或收款人信息缺失或不完整的资金转账
1. The payment service provider of the payee shall implement effective risk-based procedures, including procedures based on the risk-sensitive basis referred to in Article 13 of Directive (EU) 2015/849 for determining whether to execute, reject or suspend a transfer of funds lacking the required complete payer and payee information and for taking the appropriate follow-up action.
1.收款人的支付服务提供商应实施有效的基于风险的程序,包括基于(欧盟)第 2015/849 号指令第 13 条所述风险敏感基础的程序,以确定是否执行、拒绝或暂停缺乏所需的完整付款人和收款人信息的资金转账,并采取适当的后续行动。
Where the payment service provider of the payee becomes aware, when receiving a transfer of funds, that the information referred to in Article 4(1), points (a), (b) and (c), Article 4(2), points (a) and (b), Article 5(1), or Article 6, is missing or incomplete or has not been filled in using characters or inputs admissible in accordance with the conventions of the messaging or payment and settlement system as referred to in Article 7(1), the payment service provider of the payee shall, on a risk-sensitive basis:
收款人的支付服务提供者在收到资金转账时,如发现第 4(1)条(a)、(b)和(c)项、第 4(2)条(a)和(b)项、第 5(1)条或第 6 条所述的信息缺失或不完整,或没有使用第 7(1)条所述的信息传送或支付和结算系统的惯例所允许的字符或输入值填写,则收款人的支付服务提供者应在风险敏感的基础上: 1:
(a) |
reject the transfer; or 拒绝转让;或 |
(b) |
request the required information on the payer and the payee before or after crediting the payee’s payment account or making the funds available to the payee. |
2. Where a payment service provider repeatedly fails to provide the required information on the payer or the payee, the payment service provider of the payee shall:
2.如果支付服务提供商多次未能提供关于付款人或收款人的必要信息,则收款人的支付服务提供商应: 1:
(a) |
take steps, which may initially include the issuing of warnings and setting of deadlines, before proceeding to a rejection, restriction or termination in accordance with point (b) if the required information is still not provided; or |
(b) |
directly reject any future transfers of funds from that payment service provider, or restrict or terminate its business relationship with that payment service provider. |
The payment service provider of the payee shall report that failure, and the steps taken, to the competent authority responsible for monitoring compliance with anti-money laundering and counter-terrorist financing provisions.
收款人的支付服务提供商应向负责监督反洗钱和打击资助恐怖主义行为规定遵守情况的主管当局报告这一失误和所采取的措施。
Article 9
Assessment and reporting
The payment service provider of the payee shall take into account missing or incomplete information on the payer or the payee as a factor when assessing whether a transfer of funds, or any related transaction, is suspicious and whether it is to be reported to the Financial Intelligence Unit (FIU) in accordance with Directive (EU) 2015/849.
收款人的支付服务提供商在评估资金转账或任何相关交易是否可疑以及是否应根据(欧盟)第 2015/849 号指令向金融情报机构(FIU)报告时,应将付款人或收款人的信息缺失或不完整作为一个因素加以考虑。
Article 10 第十条
Retention of information on the payer and the payee accompanying the transfer
保留转账附带的付款人和收款人信息
Intermediary payment service providers shall ensure that all the information received on the payer and the payee that accompanies a transfer of funds is retained with the transfer.
中间支付服务提供商应确保在转账时保留所收到的关于付款人和收款人的所有信息。
Article 11 第十一条
Detection of missing information on the payer or the payee
检测付款人或收款人的缺失信息
1. The intermediary payment service provider shall implement effective procedures to detect whether the fields relating to the information on the payer and the payee in the messaging or payment and settlement system used to effect the transfer of funds have been filled in using characters or inputs admissible in accordance with the conventions of that system.
1.中间支付服务提供者应执行有效程序,以检测用于实现资金转移的信息传送或支付和结算系统中与付款人和收款人信息有关的字段是否使用了该系统的惯例所允许的字符或输入。
2. The intermediary payment service provider shall implement effective procedures, including, where appropriate, monitoring after or during the transfers, in order to detect whether the following information on the payer or the payee is missing:
2.中间支付服务提供商应执行有效程序,包括酌情在转账后或转账过程中进行监测,以发现是否遗失了关于付款人或收款人的以下信息:
(a) |
for transfers of funds where the payment service providers of the payer and the payee are established in the Union, the information referred to in Article 5; |
(b) |
for transfers of funds where the payment service provider of the payer or of the payee is established outside the Union, the information referred to in Article 4(1), points (a), (b) and (c), and Article 4(2), points (a) and (b); |
(c) |
for batch file transfers where the payment service provider of the payer or of the payee is established outside the Union, the information referred to in Article 4(1), points (a), (b) and (c), and Article 4(2), points (a) and (b), in respect of that batch file transfer. |
Article 12 第十二条
Transfers of funds with missing information on the payer or the payee
付款人或收款人信息缺失的资金转账
1. The intermediary payment service provider shall establish effective risk-based procedures for determining whether to execute, reject or suspend a transfer of funds lacking the required payer and payee information and for taking the appropriate follow-up action.
1.中介支付服务提供商应建立有效的风险控制程序,以确定是否执行、拒绝或暂停缺乏所需的付款人和收款人信息的资金转账,并采取适当的后续行动。
Where the intermediary payment service provider becomes aware, when receiving a transfer of funds, that the information referred to in Article 4(1), points (a), (b) and (c), Article 4(2), points (a) and (b), Article 5(1), or Article 6, is missing or has not been filled in using characters or inputs admissible in accordance with the conventions of the messaging or payment and settlement system as referred to in Article 7(1), that intermediary payment service provider shall on a risk-sensitive basis:
中间支付服务提供者在接收资金划拨时,如发现第 4(1)条(a)、(b)和(c)项、第 4(2)条(a)和(b)项、第 5(1)条或第 6 条所指的信息缺失,或未使用第 7(1)条所指的信息传送或支付结算系统公约所允许的字符或输入内容填写,该中间支付服务提供者应在风险敏感的基础上进行处理:
(a) |
reject the transfer; or 拒绝转让;或 |
(b) |
request the required information on the payer and the payee before or after the transmission of the transfer of funds. |
2. Where a payment service provider repeatedly fails to provide the required information on the payer or the payee, the intermediary payment service provider shall:
2.如果支付服务提供商屡次未能按要求提供付款人或收款人的信息,中介支付服务提供商应
(a) |
take steps, which may initially include the issuing of warnings and setting of deadlines, before proceeding to a rejection, restriction or termination in accordance with point (b) if the required information is still not provided; or |
(b) |
directly reject any future transfers of funds from that payment service provider or restrict or terminate its business relationship with that payment service provider. |
The intermediary payment service provider shall report that failure, and the steps taken, to the competent authority responsible for monitoring compliance with anti-money laundering and counter-terrorist financing provisions.
中介支付服务提供商应向负责监督反洗钱和打击资助恐怖主义行为规定遵守情况的主管当局报告这一失误和所采取的措施。
Article 13 第十三条
Assessment and reporting 评估和报告
The intermediary payment service provider shall take into account missing information on the payer or the payee as a factor when assessing whether a transfer of funds, or any related transaction, is suspicious, and whether it is to be reported to the FIU in accordance with Directive (EU) 2015/849.
中介支付服务提供商在评估资金转账或任何相关交易是否可疑以及是否应根据(欧盟)第 2015/849 号指令向金融情报机构报告时,应将付款人或收款人信息缺失作为一个因素加以考虑。
CHAPTER III 第 III 章
Obligations on crypto-asset service providers
加密资产服务提供商的义务
Article 14 第十四条
Information accompanying transfers of crypto-assets
加密资产转让所附带的信息
1. The crypto-asset service provider of the originator shall ensure that transfers of crypto-assets are accompanied by the following information on the originator:
1.发端人的加密资产服务提供商应确保加密资产的转移附有关于发端人的以下信息:
(a) |
the name of the originator; |
(b) |
the originator’s distributed ledger address, in cases where a transfer of crypto-assets is registered on a network using DLT or similar technology, and the crypto-asset account number of the originator, where such an account exists and is used to process the transaction; |
(c) |
the originator’s crypto-asset account number, in cases where a transfer of crypto-assets is not registered on a network using DLT or similar technology; |
(d) |
the originator’s address, including the name of the country, official personal document number and customer identification number, or, alternatively, the originator’s date and place of birth; and |
(e) |
subject to the existence of the necessary field in the relevant message format, and where provided by the originator to its crypto-asset service provider, the current LEI or, in its absence, any other available equivalent official identifier of the originator. |
2. The crypto-asset service provider of the originator shall ensure that transfers of crypto-assets are accompanied by the following information on the beneficiary:
2.发端人的加密资产服务提供商应确保加密资产的转移附有受益人的以下信息:
(a) |
the name of the beneficiary; |
(b) |
the beneficiary’s distributed ledger address, in cases where a transfer of crypto-assets is registered on a network using DLT or similar technology, and the beneficiary’s crypto-asset account number, where such an account exists and is used to process the transaction; |
(c) |
the beneficiary’s crypto-asset account number, in cases where a transfer of crypto-assets is not registered on a network using DLT or similar technology; and |
(d) |
subject to the existence of the necessary field in the relevant message format, and where provided by the originator to its crypto-asset service provider, the current LEI or, in its absence, any other available equivalent official identifier of the beneficiary. |
3. By way of derogation from paragraph 1, point (c), and paragraph 2, point (c), in the case of a transfer of crypto-assets not registered on a network using DLT or similar technology and not made to or from a crypto-asset account, the crypto-asset service provider of the originator shall ensure that the transfer of crypto-assets is accompanied by a unique transaction identifier.
3.作为对第 1 款(c)项和第 2 款(c)项的减损,如果加密资产的转移没有在使用 DLT 或类似技术的网络上登记,也没有转入或转出加密资产账户,则发端人的加密资产服务提供商应确保加密资产的转移附有独特的交易标识符。
4. The information referred to in paragraphs 1 and 2 shall be submitted in advance of, or simultaneously or concurrently with, the transfer of crypto-assets and in a secure manner and in accordance with Regulation (EU) 2016/679.
4.第 1 款和第 2 款中提及的信息应在加密资产转移之前或同时,按照(欧盟)第 2016/679 号条例以安全的方式提交。
The information referred to in paragraphs 1 and 2 shall not be required to be attached directly to, or be included in, the transfer of crypto-assets.
第 1 款和第 2 款所述信息不必直接附在加密资产的转让中,也不必包括在转让中。
5. In the case of a transfer of crypto-assets made to a self-hosted address, the crypto-asset service provider of the originator shall obtain and hold the information referred to in paragraphs 1 and 2 and shall ensure that the transfer of crypto-assets can be individually identified.
5.在向自托管地址转移加密资产的情况下,发端人的加密资产服务提供商应获取并持有第 1 款和第 2 款提及的信息,并应确保可单独识别加密资产的转移。
Without prejudice to specific risk mitigating measures taken in accordance with Article 19b of Directive (EU) 2015/849, in the case of a transfer of an amount exceeding EUR 1 000 to a self-hosted address, the crypto-asset service provider of the originator shall take adequate measures to assess whether that address is owned or controlled by the originator.
在不影响根据(欧盟)第 2015/849 号指令第 19b 条采取的具体风险缓解措施的情况下,如果向自托管地址转移的金额超过 1 000 欧元,发端人的加密资产服务提供商应采取适当措施,评估该地址是否由发端人拥有或控制。
6. Before transferring crypto-assets, the crypto-asset service provider of the originator shall verify the accuracy of the information referred to in paragraph 1 on the basis of documents, data or information obtained from a reliable and independent source.
6.在转移加密资产之前,发端人的加密资产服务提供商应根据从可靠和独立来源获得的文件、数据或信息,核实第 1 款所述信息的准确性。
7. Verification as referred to in paragraph 6 of this Article shall be deemed to have taken place where one of the following applies:
7.在出现下列情况之一时,应视为进行了本条第 6 款所述的核查:
(a) |
the identity of the originator has been verified in accordance with Article 13 of Directive (EU) 2015/849 and the information obtained pursuant to that verification has been retained in accordance with Article 40 of that Directive; |
(b) |
Article 14(5) of Directive (EU) 2015/849 applies to the originator. |
8. The crypto-asset service provider of the originator shall not allow for the initiation, or execute any transfer, of crypto-assets before ensuring full compliance with this Article.
8.在确保完全遵守本条规定之前,发端人的加密资产服务提供商不得允许启动或执行任何加密资产转让。
Article 15 第 15 条
Batch file transfers of crypto-assets
加密资产的批量文件传输
In the case of a batch file transfer of crypto-assets from a single originator, Article 14(1) shall not apply to the individual transfers bundled together therein, provided that the batch file contains the information referred to in Article 14(1), (2) and (3), that that information has been verified in accordance with Article 14(6) and (7), and that the individual transfers carry the distributed ledger address of the originator, where Article 14(2), point (b), applies, the crypto-asset account number of the originator, where Article 14(2), point (c), applies, or the unique transaction identifier, where Article 14(3) applies.
对于来自单一发端人的加密资产批量文件传输,第 14(1)条不适用于其中捆绑在一起的单个传输,前提是批量文件包含第 14(1)、(2)和(3)条中提及的信息,且该信息已根据第 14(6)和(7)条进行了验证、在适用第 14(2)条(b)点的情况下,单笔转账带有发起方的分布式账本地址;在适用第 14(2)条(c)点的情况下,单笔转账带有发起方的加密资产账号;在适用第 14(3)条的情况下,单笔转账带有唯一的交易标识符。
Article 16 第 16 条
Detection of missing information on the originator or the beneficiary
检测发起人或受益人的缺失信息
1. The crypto-asset service provider of the beneficiary shall implement effective procedures, including, where appropriate, monitoring after or during the transfers, in order to detect whether the information referred to in Article 14(1) and (2) on the originator and the beneficiary is included in, or follows, the transfer or batch file transfer of crypto-assets.
受益人的加密资产服务提供者应执行有效程序,包括酌情在转账后或转账过程中进行监测,以查明第 14(1)和(2)条所述关于发端人和受益人的信息是否包含在或跟随在加密资产转账或批量文件转账中。
2. In the case of a transfer of crypto-assets made from a self-hosted address, the crypto-asset service provider of the beneficiary shall obtain and hold the information referred to in Article 14(1) and (2) and shall ensure that the transfer of crypto-assets can be individually identified.
2.对于从自托管地址进行的加密资产转移,受益人的加密资产服务提供商应获取并持有第 14 条第(1)款和第(2)款所述的信息,并应确保加密资产转移可被单独识别。
Without prejudice to specific risk mitigating measures taken in accordance with Article 19b of Directive (EU) 2015/849, in the case of a transfer of an amount exceeding EUR 1 000 from a self-hosted address, the crypto-asset service provider of the beneficiary shall take adequate measures to assess whether that address is owned or controlled by the beneficiary.
在不影响根据(欧盟)第 2015/849 号指令第 19b 条采取的具体风险缓解措施的情况下,如果从自托管地址转移的金额超过 1 000 欧元,受益人的加密资产服务提供商应采取适当措施,以评估该地址是否由受益人拥有或控制。
3. Before making the crypto-assets available to the beneficiary, the crypto-asset service provider of the beneficiary shall verify the accuracy of the information on the beneficiary referred to in Article 14(2) on the basis of documents, data or information obtained from a reliable and independent source.
3.在向受益人提供加密资产之前,受益人的加密资产服务提供商应根据从可靠和独立来源获得的文件、数据或信息,核实第 14(2)条所述受益人信息的准确性。
4. Verification as referred to in paragraphs 2 and 3 of this Article shall be deemed to have taken place where one of the following applies:
4.本条第 2 款和第 3 款所指的核查,在符合下列情况之一时,应被视为已经进行: 1:
(a) |
the identity of the beneficiary has been verified in accordance with Article 13 of Directive (EU) 2015/849 and the information obtained pursuant to that verification has been retained in accordance with Article 40 of that Directive; |
(b) |
Article 14(5) of Directive (EU) 2015/849 applies to the beneficiary. |
Article 17 第 17 条
Transfers of crypto-assets with missing or incomplete information on the originator or the beneficiary
加密资产的转移,其发起人或受益人的信息缺失或不完整
1. The crypto-asset service provider of the beneficiary shall implement effective risk-based procedures, including procedures based on the risk-sensitive basis referred to in Article 13 of Directive (EU) 2015/849, for determining whether to execute, reject, return or suspend a transfer of crypto-assets lacking the required complete information on the originator and the beneficiary and for taking the appropriate follow-up action.
1.受益人的加密资产服务提供商应执行有效的基于风险的程序,包括基于(欧盟)第2015/849号指令第13条所述风险敏感基础的程序,以确定是否执行、拒绝、退回或暂停缺乏关于发端人和受益人的所需完整信息的加密资产转移,并采取适当的后续行动。
Where the crypto-asset service provider of the beneficiary becomes aware that the information referred to in Article 14(1) or (2), or in Article 15, is missing or incomplete, that crypto-asset service provider shall, on a risk-sensitive basis and without undue delay:
如果受益人的加密资产服务提供者意识到第 14 条第(1)款或第(2)款或第 15 条提及的信息缺失或不完整,该加密资产服务提供者应在风险敏感的基础上,在不无故拖延的情况下: 1:
(a) |
reject the transfer or return the transferred crypto-assets to the originator’s crypto-asset account; or |
(b) |
request the required information on the originator and the beneficiary before making the crypto-assets available to the beneficiary. |
2. Where a crypto-asset service provider repeatedly fails to provide the required information on the originator or the beneficiary, the crypto-asset service provider of the beneficiary shall:
2.如果加密资产服务提供商一再未能提供关于发端人或受益人的所需信息,受益人的加密资产服务提供商应:
(a) |
take steps, which may initially include the issuing of warnings and setting of deadlines, before proceeding to a rejection, restriction or termination in accordance with point (b) if the required information is still not provided; or |
(b) |
directly reject any future transfers of crypto-assets to or from, or restrict or terminate its business relationship with, that crypto-asset service provider. |
The crypto-asset service provider of the beneficiary shall report that failure, and the steps taken, to the competent authority responsible for monitoring compliance with anti-money laundering and counter-terrorist financing provisions.
受益人的加密资产服务提供商应向负责监测反洗钱和反资助恐怖主义规定遵守情况的主管当局报告这一故障和所采取的步骤。
Article 18 第十八条
Assessment and reporting 评估和报告
The crypto-asset service provider of the beneficiary shall take into account missing or incomplete information on the originator or the beneficiary as a factor when assessing whether a transfer of crypto-assets, or any related transaction, is suspicious and whether it is to be reported to the FIU in accordance with Directive (EU) 2015/849.
受益人的加密资产服务提供商在评估加密资产转移或任何相关交易是否可疑以及是否应根据第(欧盟)2015/849号指令向金融情报机构报告时,应将发端人或受益人的信息缺失或不完整作为一个因素加以考虑。
Article 19 第十九条
Retention of information on the originator and the beneficiary accompanying the transfer
保留随同转账的发端人和受益人的信息
Intermediary crypto-asset service providers shall ensure that all the information received on the originator and the beneficiary that accompanies a transfer of crypto-assets is transmitted with the transfer and that records of such information are retained and made available on request to the competent authorities.
中间加密资产服务提供商应确保所收到的与加密资产转让有关的关于发端人和受益人的所有信息随转让一起传送,并确保保留这些信息的记录,并应要求提供给主管当局。
Article 20 第二十条
Detection of missing information on the originator or the beneficiary
检测发起人或受益人的缺失信息
The intermediary crypto-asset service provider shall implement effective procedures, including, where appropriate, monitoring after or during the transfers, in order to detect whether the information on the originator or the beneficiary referred to in Article 14(1), points (a), (b) and (c), and Article 14(2), points (a), (b) and (c), has been submitted previously, simultaneously or concurrently with the transfer or batch file transfer of crypto-assets, including where the transfer is made to or from a self-hosted address.
加密资产中介服务提供商应执行有效程序,包括酌情在转账后或转账过程中进行监测,以查明第 14 条第(1)款(a)、(b)和(c)项以及第 14 条第(2)款(a)、(b)和(c)项提及的关于发端人或受益人的信息是否已在加密资产转账或批量文件转账之前、同时或并行提交,包括在向自托管地址或从自托管地址转账时提交。
Article 21 第二十一条
Transfers of crypto-assets with missing information on the originator or the beneficiary
加密资产的转移缺少发起人或受益人的信息
1. The intermediary crypto-asset service provider shall establish effective risk-based procedures, including procedures based on the risk-sensitive basis referred to in Article 13 of Directive (EU) 2015/849, for determining whether to execute, reject, return or suspend a transfer of crypto-assets lacking the required information on the originator and the beneficiary and for taking the appropriate follow up action.
1.中间加密资产服务提供商应建立有效的基于风险的程序,包括基于第(欧盟)2015/849号指令第13条提及的风险敏感基础的程序,以确定是否执行、拒绝、退回或暂停缺乏关于发端人和受益人所需信息的加密资产转让,并采取适当的后续行动。
Where the intermediary crypto-asset service provider becomes aware, when receiving a transfer of crypto-assets, that the information referred to in Article 14(1), points (a), (b) and (c), and Article 14(2), points (a), (b) and (c), or Article 15(1), is missing or incomplete, that intermediary crypto-asset service provider shall, on a risk-sensitive basis and without undue delay:
如果中间加密资产服务提供者在接收加密资产转让时发现第 14(1)条(a)、(b)和(c)项、第 14(2)条(a)、(b)和(c)项或第 15(1)条所述信息缺失或不完整,则该中间加密资产服务提供者应在风险敏感的基础上,在不无故拖延的情况下,及时提供相关信息:
(a) |
reject the transfer or return the transferred crypto-assets; or |
(b) |
request the required information on the originator and the beneficiary before making the transmission of the transfer of crypto-assets. |
2. Where the crypto-asset service provider repeatedly fails to provide the required information on the originator or the beneficiary, the intermediary crypto-asset service provider shall:
2.如果加密资产服务提供者一再未能提供关于发端人或受益人的所需信息,中介加密资产服务提供者应:
(a) |
take steps, which may initially include the issuing of warnings and setting of deadlines, before proceeding to a rejection, restriction or termination in accordance with point (b) if the required information is still not provided; or |
(b) |
directly reject any future transfers of crypto-assets to or from, or restrict or terminate its business relationship with, that crypto-asset service provider. |
The intermediary crypto-asset service provider shall report that failure, and the steps taken, to the competent authority responsible for monitoring compliance with anti-money laundering and counter-terrorist financing provisions.
中间加密资产服务提供商应向负责监测反洗钱和反恐融资规定遵守情况的主管当局报告这一失误和所采取的步骤。
Article 22
Assessment and reporting
The intermediary crypto-asset service provider shall take into account missing information on the originator or the beneficiary as a factor when assessing whether a transfer of crypto-assets, or any related transaction, is suspicious, and whether it is to be reported to the FIU in accordance with Directive (EU) 2015/849.
CHAPTER IV
Common measures applicable by payment service providers and crypto-asset service providers
Article 23
Internal policies, procedures and controls to ensure implementation of restrictive measures
Payment service providers and crypto-asset service providers shall have in place internal policies, procedures and controls to ensure the implementation of Union and national restrictive measures when performing transfers of funds and crypto-assets under this Regulation.
The European Banking Authority (EBA) shall issue guidelines by 30 December 2024 specifying the measures referred to in this Article.
CHAPTER V
Information, data protection and record-retention
Article 24
Provision of information
Payment service providers and crypto-asset service providers shall respond fully and without delay, including by means of a central contact point in accordance with Article 45(9) of Directive (EU) 2015/849, where such a contact point has been appointed, and in accordance with the procedural requirements laid down in the national law of the Member State in which they are established or have their registered office, as applicable, to enquiries exclusively from the authorities responsible for preventing and combating money laundering or terrorist financing of that Member State concerning the information required under this Regulation.
Article 25
Data protection
1. The processing of personal data under this Regulation is subject to Regulation (EU) 2016/679. Personal data that is processed pursuant to this Regulation by the Commission or EBA is subject to Regulation (EU) 2018/1725.
2. Personal data shall be processed by payment service providers and crypto-asset service providers on the basis of this Regulation only for the purposes of the prevention of money laundering and terrorist financing and shall not be further processed in a way that is incompatible with those purposes. The processing of personal data on the basis of this Regulation for commercial purposes shall be prohibited.
2.支付服务提供商和加密资产服务提供商只能为防止洗钱和资助恐怖主义的目的根据本条例处理个人资料,不得以与这些目的不符的方式进一步处理个人资料。禁止根据本条例出于商业目的处理个人数据。
3. Payment service providers and crypto-asset service providers shall provide new clients with the information required pursuant to Article 13 of Regulation (EU) 2016/679 before establishing a business relationship or carrying out an occasional transaction. That information shall be provided in a concise, transparent, intelligible and easily accessible form in accordance with Article 12 of Regulation (EU) 2016/679 and shall, in particular, include a general notice concerning the legal obligations of payment service providers and crypto-asset service providers under this Regulation when processing personal data for the purposes of the prevention of money laundering and terrorist financing.
3.支付服务提供商和加密资产服务提供商应在建立业务关系或进行临时交易之前,向新客户提供(欧盟)第2016/679号条例第13条所要求的信息。根据(欧盟)第2016/679号条例第12条,该信息应以简洁、透明、易懂和易于获取的形式提供,并应特别包括关于支付服务提供商和加密资产服务提供商在为防止洗钱和资助恐怖主义的目的处理个人数据时根据本条例承担的法律义务的一般通知。
4. Payment service providers and crypto-asset service providers shall ensure at all times that the transmission of any personal data on the parties involved in a transfer of funds or a transfer of crypto-assets is conducted in accordance with Regulation (EU) 2016/679.
4.支付服务提供商和加密资产服务提供商应始终确保根据(欧盟)第 2016/679 号法规传输资金转移或加密资产转移所涉各方的任何个人数据。
The European Data Protection Board shall, after consulting EBA, issue guidelines on the practical implementation of data protection requirements for transfers of personal data to third countries in the context of transfers of crypto-assets. EBA shall issue guidelines on suitable procedures for determining whether to execute, reject, return or suspend a transfer of crypto-assets in situations where compliance with data protection requirements for the transfer of personal data to third countries cannot be ensured.
欧洲数据保护委员会应在与欧洲银行监管局协商后,发布关于在加密资产转移的情况下切实执行向第三国转移个人数据的数据保护要求的准则。在无法确保向第三国转移个人数据时遵守数据保护要求的情况下,欧洲数据保护委员会应发布关于确定是否执行、拒绝、退回或暂停加密资产转移的适当程序的指导原则。
Article 26 第 26 条
Record retention 保留记录
1. Information on the payer and the payee or on the originator and beneficiary shall not be retained for longer than strictly necessary. Payment service providers of the payer and of the payee shall retain records of the information referred to in Articles 4 to 7, and crypto-asset service providers of the originator and beneficiary shall retain records of the information referred to in Articles 14 to 16, for a period of five years.
1.关于付款人和收款人或关于发端人和受益人的信息的保留时间不得超过绝对必要的时间。付款人和收款人的支付服务提供商应保留第 4 至 7 条所述信息的记录,发端人和受益人的加密资产服务提供商应保留第 14 至 16 条所述信息的记录,期限为五年。
2. Upon expiry of the retention period referred to in paragraph 1, payment service providers and crypto-asset service providers shall ensure that the personal data is deleted, unless otherwise provided for by national law which determines under which circumstances payment service providers and crypto-asset service providers may or shall further retain such data. Member States may allow or require further retention only after they have carried out a thorough assessment of the necessity and proportionality of such further retention, and where they consider it to be justified as necessary for the prevention, detection or investigation of money laundering or terrorist financing. That further retention period shall not exceed five years.
2.在第 1 款所述保留期结束后,支付服务提供商和加密资产服务提供商应确保删除 个人数据,除非国家法律另有规定,确定在何种情况下支付服务提供商和加密资产服务 提供商可以或应当进一步保留这些数据。会员国只有在对进一步保留的必要性和相称性进行彻底评估后,并认为有理由认为对防止、侦查或调查洗钱或资助恐怖主义行为是必要的情况下,才可允许或要求进一步保留。进一步保留的期限不得超过五年。
3. Where, on 25 June 2015, legal proceedings concerned with the prevention, detection, investigation or prosecution of suspected money laundering or terrorist financing are pending in a Member State, and a payment service provider holds information or documents relating to those pending proceedings, the payment service provider may retain that information or those documents in accordance with national law for a period of five years from 25 June 2015. Member States may, without prejudice to national criminal law on evidence applicable to ongoing criminal investigations and legal proceedings, allow or require the retention of such information or documents for a further period of five years where the necessity and proportionality of such further retention has been established for the prevention, detection, investigation or prosecution of suspected money laundering or terrorist financing.
如果在 2015 年 6 月 25 日,与预防、侦查、调查或起诉涉嫌洗钱或资助恐怖主义行为有关的法律程序在会员国待决,而支付服务提供商持有与这些待决程序有关的信息或文件,则支付服务提供商可根据国家法律自 2015 年 6 月 25 日起将这些信息或文件保留五年。会员国可在不影响适用于正在进行的刑事调查和法律诉讼的国家证据刑法的情况下,允许或要求将此类信息或文件再保留五年,条件是已确定进一步保留对于预防、侦查、调查或起诉涉嫌洗钱或资助恐怖主义行为是必要和相称的。
Article 27
Cooperation among competent authorities
The exchange of information among competent authorities and with relevant third-country authorities under this Regulation shall be subject to Directive (EU) 2015/849.
CHAPTER VI
Sanctions and monitoring
Article 28
Administrative sanctions and measures
1. Without prejudice to the right to provide for and impose criminal sanctions, Member States shall lay down the rules on administrative sanctions and measures applicable to breaches of the provisions of this Regulation and shall take all measures necessary to ensure that they are implemented. The sanctions and measures provided for shall be effective, proportionate and dissuasive and shall be consistent with those laid down in accordance with Chapter VI, Section 4, of Directive (EU) 2015/849.
Member States may decide not to lay down rules on administrative sanctions or measures for breach of the provisions of this Regulation which are subject to criminal sanctions in their national law. In that case, Member States shall communicate to the Commission the relevant criminal law provisions.
2. Member States shall ensure that, where obligations apply to payment service providers and crypto-asset service providers, in the event of a breach of provisions of this Regulation sanctions or measures can, subject to national law, be applied to the members of the management body of the relevant service provider and to any other natural person who, under national law, is responsible for the breach.
3. Member States shall notify the rules referred to in paragraph 1 to the Commission and to the permanent internal committee on anti-money-laundering and countering terrorist financing referred to in Article 9a(7) of Regulation (EU) No 1093/2010. Member States shall notify the Commission and that permanent internal committee without undue delay of any subsequent amendments thereto.
3.成员国应将第 1 款所述规则通知欧盟委员会和(欧盟)第 1093/2010 号条例第 9a(7)条所述反洗钱和打击资助恐怖主义行为常设内部委员会。成员国应毫不拖延地向欧盟委和该常设内部委员会通报随后对规则作出的任何修正。
4. In accordance with Article 58(4) of Directive (EU) 2015/849, competent authorities shall have all the supervisory and investigatory powers that are necessary for the exercise of their functions. In the exercise of their powers to impose administrative sanctions and measures, competent authorities shall cooperate closely to ensure that those administrative sanctions or measures produce the desired results and to coordinate their action when dealing with cross-border cases.
4.根据(欧盟)第2015/849号指令第58(4)条,主管当局应拥有行使其职能所需的一切监督和调查权力。在行使其实施行政处罚和措施的权力时,主管当局应密切合作,以确保这些行政处罚或措施产生预期效果,并在处理跨境案件时协调行动。
5. Member States shall ensure that legal persons can be held liable for the breaches referred to in Article 29 committed for their benefit by any person acting individually or as part of an organ of that legal person, and having a leading position within the legal person based on any of the following:
5.会员国应确保,对于法人中单独行事或作为法人机关的一部分行事并在法人中担任领导职务的任何人为法人的利益而实施的第 29 条所述违法行为,可根据以下任一情况追究其责任:
(a) |
power to represent the legal person; |
(b) |
authority to take decisions on behalf of the legal person; |
(c) |
authority to exercise control within the legal person. |
6. Member States shall also ensure that legal persons can be held liable where the lack of supervision or control by a person referred to in paragraph 5 of this Article has made it possible to commit one of the breaches referred to in Article 29 for the benefit of that legal person by a person under its authority.
7. Competent authorities shall exercise their powers to impose administrative sanctions and measures in accordance with this Regulation in any of the following ways:
(a) |
directly; |
(b) |
in collaboration with other authorities; |
(c) |
under their responsibility by delegation to such other authorities; |
(d) |
by application to the competent judicial authorities. |
In the exercise of their powers to impose administrative sanctions and measures, competent authorities shall cooperate closely in order to ensure that those administrative sanctions or measures produce the desired results and to coordinate their action when dealing with cross-border cases.
Article 29
Specific provisions
Member States shall ensure that their administrative sanctions and measures include at least those laid down in Article 59(2) and (3) of Directive (EU) 2015/849 in the event of the following breaches of this Regulation:
(a) |
repeated or systematic failure by a payment service provider to accompany the transfer of funds with the required information on the payer or the payee, in breach of Article 4, 5 or 6, or by a crypto-asset service provider to accompany the transfer of crypto-assets with the required information on the originator and beneficiary, in breach of Article 14 or 15; |
(b) |
repeated, systematic or serious failure by a payment service provider or crypto-asset service provider to retain records, in breach of Article 26; |
(c) |
failure by a payment service provider to implement effective risk-based procedures, in breach of Article 8 or 12, or by a crypto-asset service provider to implement effective risk-based procedures, in breach of Article 17; |
(d) |
serious failure by an intermediary payment service provider to comply with Article 11 or 12 or by an intermediary crypto-asset service provider to comply with Article 19, 20 or 21. |
Article 30
Publication of sanctions and measures
In accordance with Article 60(1), (2) and (3) of Directive (EU) 2015/849, the competent authorities shall publish administrative sanctions and measures imposed in the cases referred to in Articles 28 and 29 of this Regulation without undue delay, including information on the type and nature of the breach and the identity of the persons responsible for it, if necessary and proportionate after a case-by-case evaluation.
Article 31
Application of sanctions and measures by competent authorities
1. When determining the type of administrative sanctions or measures and the level of administrative pecuniary sanctions, the competent authorities shall take into account all relevant circumstances, including those listed in Article 60(4) of Directive (EU) 2015/849.
2. As regards administrative sanctions and measures imposed in accordance with this Regulation, Article 62 of Directive (EU) 2015/849 shall apply.
Article 32
Reporting of breaches
1. Member States shall establish effective mechanisms to encourage the reporting to competent authorities of breaches of this Regulation.
Those mechanisms shall include at least those referred to in Article 61(2) of Directive (EU) 2015/849.
2. Payment service providers and crypto-asset service providers, in cooperation with the competent authorities, shall establish appropriate internal procedures for their employees, or persons in a comparable position, to report breaches internally through a secure, independent, specific and anonymous channel, proportionate to the nature and size of the payment service provider or the crypto-asset service provider concerned.
Article 33
Monitoring
1. Member States shall require competent authorities to monitor effectively and to take the measures necessary to ensure compliance with this Regulation and encourage, through effective mechanisms, the reporting of breaches of the provisions of this Regulation to competent authorities.
2. By 31 December 2026, and every three years thereafter, the Commission shall submit a report to the European Parliament and to the Council on the application of Chapter VI, with particular regard to cross-border cases.
CHAPTER VII
Implementing powers
Article 34
Committee procedure
1. The Commission shall be assisted by the Committee on the Prevention of Money Laundering and Terrorist Financing. That Committee shall be a committee within the meaning of Regulation (EU) No 182/2011.
1.委员会应得到防止洗钱和资助恐怖主义委员会的协助。该委员会应是第 182/2011 号条例(欧盟)所指的委员会。
2. Where reference is made to this paragraph, Article 5 of Regulation (EU) No 182/2011 shall apply.
2.在提及本款时,应适用第 182/2011 号条例(欧盟)第 5 条。
CHAPTER VIII 第八章
Derogations 减损
Article 35 第 35 条
Agreements with countries and territories which do not form part of the territory of the Union
与不属于联邦领土的国家和地区签订的协定
1. The Commission may authorise any Member State to conclude an agreement with a third country or with a territory outside the territorial scope of the Treaty on European Union and the Treaty on the Functioning of the European Union (TFEU) as referred to in Article 355 TFEU (the ‘country or territory concerned’), which contains derogations from this Regulation, in order to allow transfers of funds between that country or territory and the Member State concerned to be treated as transfers of funds within that Member State.
1.委员会可授权任何成员国与《欧盟运作条约》(TFEU)第 355 条所指的《欧洲联盟条约》和《欧洲联 盟运作条约》(TFEU)领土范围之外的第三国或领土("有关国家或领土")缔结协定,其中包含对本 条例的减损,以使该国或领土与有关成员国之间的资金转移被视为该成员国内部的资金转移。
Such agreements may be authorised only where all of the following conditions are met:
只有在满足以下所有条件的情况下,此类协议才能获得批准:
(a) |
the country or territory concerned shares a monetary union with the Member State concerned, forms part of the currency area of that Member State or has signed a monetary convention with the Union represented by a Member State; |
(b) |
payment service providers in the country or territory concerned participate directly or indirectly in payment and settlement systems in that Member State; |
(c) |
the country or territory concerned requires payment service providers under its jurisdiction to apply the same rules as those established under this Regulation. |
2. A Member State wishing to conclude an agreement as referred to in paragraph 1 shall submit a request to the Commission and provide it with all the information necessary for the appraisal of the request.
2.希望缔结第 1 段所述协定的会员国应向委员会提出申请,并向其提供评估申请所 需的一切资料。
3. Upon receipt by the Commission of such a request, transfers of funds between that Member State and the country or territory concerned shall be provisionally treated as transfers of funds within that Member State until a decision is reached in accordance with this Article.
3.在委员会收到这一请求后,在根据本条作出决定之前,该会员国与有关国家或地区之 间的资金转帐应暂时视为该会员国内部的资金转帐。
4. If, within two months of receipt of the request, the Commission considers that it does not have all the information necessary for the appraisal of the request, it shall contact the Member State concerned and specify the additional information required.
4.如果在收到申请后两个月内,委员会认为它没有评估申请所需的全部信息,它应与 有关会员国联系,并具体说明所需的补充信息。
5. Within one month of receipt of all the information that it considers to be necessary for the appraisal of the request, the Commission shall notify the requesting Member State accordingly and shall transmit copies of the request to the other Member States.
5.委员会在收到其认为评估申请所需的全部资料后一个月内,应将有关情况通知提 出申请的成员国,并将申请副本转交其他成员国。
6. Within three months of the notification referred to in paragraph 5 of this Article, the Commission shall decide by means of an implementing act in accordance with Article 34(2) whether to authorise the Member State concerned to conclude the agreement that is the subject of the request.
6.在本条第 5 段所述通知发出后三个月内,委员会应根据第 34(2)条的规定,通过实施法案决 定是否授权有关成员国缔结申请所涉协定。
The Commission shall, in any event, adopt a decision as referred to in the first subparagraph of this paragraph within 18 months of receipt of the request.
无论如何,委员会应在收到申请后 18 个月内通过本段第一分段所述决定。
CHAPTER IX
Other provisions
Article 36
Guidelines
EBA shall issue guidelines addressed to the competent authorities and the payment service providers in accordance with Article 16 of Regulation (EU) No 1093/2010 on measures to be taken in accordance with this Regulation, in particular as regards the implementation of Articles 7, 8, 11 and 12 of this Regulation. By 30 June 2024, EBA shall issue guidelines addressed to the competent authorities and to the crypto-asset service providers on measures to be taken as regards the implementation of Articles 14 to 17 and Articles 19 to 22 of this Regulation.
EBA shall issue guidelines specifying technical aspects of the application of this Regulation to direct debits as well as the measures to be taken by payment initiation service providers, as defined in Article 4, point (18), of Directive (EU) 2015/2366, under this Regulation, taking into account their limited role in payment transactions.
EBA shall issue guidelines, addressed to competent authorities, on the characteristics of a risk-based approach to supervision of crypto-asset service providers and the steps to be taken when conducting such supervision.
EBA shall ensure a regular dialogue with stakeholders on the development of technical interoperable solutions with the view of facilitating the implementation of the requirements laid down in this Regulation.
Article 37
Review
1. By 12 months after the entry into force of a Regulation on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing, the Commission shall review this Regulation and shall, if appropriate, propose amendments in order to ensure a consistent approach and alignment with the Regulation on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing.
2. By 1 July 2026, the Commission, after consulting EBA, shall issue a report assessing the risks posed by transfers to or from self-hosted addresses or entities not established in the Union, as well as the need for specific measures to mitigate those risks, and propose, if appropriate, amendments to this Regulation.
3. By 30 June 2027, the Commission shall submit to the European Parliament and to the Council a report on the application and enforcement of this Regulation accompanied, if appropriate, by a legislative proposal.
The report referred to in the first subparagraph shall include the following elements:
(a) |
an assessment of the effectiveness of the measures provided for in this Regulation and of compliance with this Regulation by payment service providers and crypto-asset service providers; |
(b) |
an assessment of the technological solutions for complying with the obligations imposed on crypto-asset service providers under this Regulation, including of the latest development of technologically sound and interoperable solutions for complying with this Regulation and of the use of DLT analytic tools for identifying the origin and destination of transfers of crypto-assets and for performing a ‘know your transaction’ (KYT) assessment; |
(c) |
an assessment of the effectiveness and suitability of the de minimis thresholds related to transfers of funds, in particular with respect to the scope of application and the set of information accompanying transfers, and an assessment of the need to lower or remove such thresholds; |
(d) |
assessment of the costs and benefits of introducing de minimis thresholds related to the set of information accompanying transfers of crypto-assets, including an assessment of the related money laundering and terrorist financing risks; |
(e) |
an analysis of the trends in the use of self-hosted addresses to perform transfers without the involvement of a third party, together with an assessment of the related money laundering and terrorist financing risks and an evaluation of the need, effectiveness and enforceability of additional mitigation measures, such as specific obligations on providers of hardware and software wallets and limitation, control or prohibition of transfers involving self-hosted addresses. |
That report shall take into account new developments in the field of anti-money laundering and counter-terrorist financing, as well as relevant evaluations, assessments and reports in that field drawn up by international organisations and standard setters, law enforcement authorities and intelligence agencies, crypto-asset service providers or other reliable sources.
CHAPTER X
Final provisions
Article 38
Amendments to Directive (EU) 2015/849
Directive (EU) 2015/849 is amended as follows:
(1) |
in Article 2(1), point (3), points (g) and (h) are deleted; |
(2) |
Article 3 is amended as follows:
|
(3) |
in Article 18, the following paragraphs are added: ‘5. By 30 December 2024, EBA shall issue guidelines on risk variables and risk factors to be taken into account by crypto-asset service providers when entering into business relationships or carrying out transactions in crypto-assets. 6. EBA shall clarify, in particular, how the risk factors listed in Annex III shall be taken into account by crypto-asset service providers including when carrying out transactions with persons and entities which are not covered by this Directive. To that end, EBA shall pay particular attention to products, transactions and technologies that have the potential to facilitate anonymity, such as privacy wallets, mixers or tumblers. Where situations of higher risk are identified, the guidelines referred to in paragraph 5 shall include enhanced due diligence measures that obliged entities shall consider applying to mitigate such risks, including the adoption of appropriate procedures to detect the origin or destination of crypto-assets.’ |
(4) |
the following articles are inserted: ‘Article 19a 第 19 条a 1. Member States shall require crypto-asset service providers to identify and assess the risk of money laundering and terrorist financing associated with transfers of crypto-assets directed to or originating from a self-hosted address. To that end, crypto-asset service providers shall have in place internal policies, procedures and controls. Member States shall require crypto-asset service providers to apply mitigating measures commensurate with the risks identified. Those mitigating measures shall include one or more of the following:
2. By 30 December 2024, EBA shall issue guidelines to specify the measures referred to in this Article, including the criteria and means for identification and verification of the identity of the originator or beneficiary of a transfer made to or from a self-hosted address, in particular through reliance on third parties, taking into account the latest technological developments. Article 19b 第 19b 条 1. By way of derogation from Article 19, with respect to cross-border correspondent relationships involving the execution of crypto-asset services as defined in Article 3(1), point (16), of Regulation (EU) 2023/1114, with the exception of point (h) of that point, with a respondent entity not established in the Union and providing similar services, including transfers of crypto-assets, Member States shall, in addition to the customer due diligence measures laid down in Article 13 of this Directive, require crypto-asset service providers, when entering into a business relationship with such an entity, to:
Where crypto-asset service providers decide to terminate correspondent relationships for reasons relating to anti-money laundering and counter-terrorist financing policy, they shall document and record their decision. Crypto-asset service providers shall update the due diligence information for the correspondent relationship on a regular basis or when new risks emerge in relation to the respondent entity. 2. Member States shall ensure crypto-asset service providers take into account the information referred to in paragraph 1 in order to determine, on a risk-sensitive basis, the appropriate measures to be taken to mitigate the risks associated with the respondent entity. 3. By 30 June 2024, EBA shall issue guidelines to specify the criteria and elements that crypto-asset service providers shall take into account when conducting the assessment referred to in paragraph 1 and the risk mitigating measures referred to in paragraph 2, including the minimum action to be taken by crypto-asset service providers where the respondent entity is not registered or licensed.’ |
(5) |
the following article is inserted: ‘Article 24a By 1 January 2024, EBA shall issue guidelines specifying how the enhanced customer due diligence measures in this Section apply when obliged entities perform crypto-asset services as defined in Article 3(1), point (16), of Regulation (EU) 2023/1114, with the exception of point (h) of that point, as well as transfers of crypto-assets as defined in Article 3, point (10), of Regulation (EU) 2023/1113. In particular, EBA shall specify how and when those obliged entities shall obtain additional information on the originator and beneficiary.’ |
(6) |
in Article 45, paragraph 9 is replaced by the following: ‘9. Member States may require electronic money issuers as defined in Article 2, point (3), of Directive 2009/110/EC, payment service providers as defined in Article 4, point (11), of Directive (EU) 2015/2366 and crypto-asset service providers established on their territory in forms other than a branch, and whose head office is situated in another Member State, to appoint a central contact point in their territory. That central contact point shall ensure, on behalf of the entity operating on a cross-border basis, compliance with AML/CFT rules and shall facilitate supervision by supervisors, including by providing supervisors with documents and information on request.’ |
(7) |
in Article 47, paragraph 1 is replaced by the following: ‘1. Member States shall ensure that currency exchange and cheque-cashing offices and trust or company service providers are licensed or registered, and that providers of gambling services are regulated.’ |
(8) |
in Article 67, the following paragraph is added: ‘3. Member States shall adopt and publish, by 30 December 2024, the laws, regulations and administrative provisions necessary to comply with Article 2(1), point 3, Article 3, point (2)(g), Article 3, points (8), (18), (19) and (20), Article 19a(1), Article 19b(1) and (2), Article 45(9) and Article 47(1). They shall immediately communicate the text of those measures to the Commission. They shall apply those measures from 30 December 2024.’. |
Article 39
Repeal
Regulation (EU) 2015/847 is repealed with effect from the date of application of this Regulation.
References to the repealed Regulation shall be construed as references to this Regulation and shall be read in accordance with the correlation table in Annex II.
Article 40
Entry into force
This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.
It shall apply from 30 December 2024.
This Regulation shall be binding in its entirety and directly applicable in all Member States.
Done at Brussels, 31 May 2023.
For the European Parliament
The President
R. METSOLA
For the Council
The President
P. KULLGREN
(2) OJ C 152, 6.4.2022, p. 89.
(3) Position of the European Parliament of 20 April 2023 (not yet published in the Official Journal) and decision of the Council of 16 May 2023.
(4) Regulation (EU) 2015/847 of the European Parliament and of the Council of 20 May 2015 on information accompanying transfers of funds and repealing Regulation (EC) No 1781/2006 (OJ L 141, 5.6.2015, p. 1).
(5) See Annex I.
(6) Directive 2009/110/EC of the European Parliament and of the Council of 16 September 2009 on the taking up, pursuit and prudential supervision of the business of electronic money institutions amending Directives 2005/60/EC and 2006/48/EC and repealing Directive 2000/46/EC (OJ L 267, 10.10.2009, p. 7).
(7) Directive (EU) 2015/849 of the European Parliament and of the Council of 20 May 2015 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing, amending Regulation (EU) No 648/2012 of the European Parliament and of the Council, and repealing Directive 2005/60/EC of the European Parliament and of the Council and Commission Directive 2006/70/EC (OJ L 141, 5.6.2015, p. 73).
(8) Directive (EU) 2018/843 of the European Parliament and of the Council of 30 May 2018 amending Directive (EU) 2015/849 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing, and amending Directives 2009/138/EC and 2013/36/EU (OJ L 156, 19.6.2018, p. 43).
(8) 欧洲议会和理事会 2018 年 5 月 30 日第 2018/843 号指令(欧盟),修订关于防止利用金融系统洗钱或资助恐怖主义的第 2015/849 号指令(欧盟),并修订第 2009/138/EC 号和第 2013/36/EU 号指令(OJ L 156, 19.6.2018, p. 43)。
(9) Regulation (EU) 2023/1114 of the European Parliament and of the Council of 31 May 2023 on markets in crypto-assets, and amending Regulations (EU) No 1093/2010 and (EU) No 1095/2010 and Directives 2013/36/EU and (EU) 2019/1937 (OJ L 150, 9.6.2023, p. 40).
(9) 2023 年 5 月 31 日欧洲议会和欧盟理事会关于加密资产市场的第 (EU) 2023/1114 号条例,并修订第 (EU) 1093/2010 号和第 (EU) 1095/2010 号条例以及第 2013/36/EU 号和第 (EU) 2019/1937 号指令 (OJ L 150, 9. 6.2023, p. 40) 。6.2023,第 40 页)。
(10) Council Regulation (EC) No 2580/2001 of 27 December 2001 on specific restrictive measures directed against certain persons and entities with a view to combating terrorism (OJ L 344, 28.12.2001, p. 70).
(10) 理事会 2001 年 12 月 27 日关于针对某些个人和实体的具体限制性措施以打击恐怖主义的第 2580/2001 号条例(EC)(OJ L 344, 28.12.2001, p. 70)。
(11) Council Regulation (EC) No 881/2002 of 27 May 2002 imposing certain specific restrictive measures directed against certain persons and entities associated with the ISIL (Da’esh) and Al-Qaida organisations (OJ L 139, 29.5.2002, p. 9).
(11) 理事会 2002 年 5 月 27 日第 881/2002 号条例 (EC) 针对与伊黎伊斯兰国 (Da'esh) 和基地组织有关的某些个人和实体实施了某些特定限制措施 (OJ L 139, 29.5.2002, p. 9)。
(12) Council Regulation (EU) No 356/2010 of 26 April 2010 imposing certain specific restrictive measures directed against certain natural or legal persons, entities or bodies, in view of the situation in Somalia (OJ L 105, 27.4.2010, p. 1).
(12) 理事会 2010 年 4 月 26 日第 356/2010 号条例 (EU) 鉴于索马里局势,针对某些自然人或法人、实体或机构实施了某些特定限制措施 (OJ L 105, 27.4.2010, p. 1)。
(13) Regulation (EU) No 1093/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Banking Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/78/EC (OJ L 331, 15.12.2010, p. 12).
(13) 2010 年 11 月 24 日欧洲议会和理事会关于设立欧洲监管局(欧洲银行管理局)的第 1093/2010 号条例 (EU),修订第 716/2009/EC 号决定并废除委员会第 2009/78/EC 号决定 (OJ L 331, 15.12.2010, p. 12)。
(14) Council Regulation (EU) No 267/2012 of 23 March 2012 concerning restrictive measures against Iran and repealing Regulation (EU) No 961/2010 (OJ L 88, 24.3.2012, p. 1).
(14) 理事会 2012 年 3 月 23 日第 267/2012 号条例(欧盟),涉及针对伊朗的限制性措施并废除第 961/2010 号条例(欧盟)(OJ L 88, 24.3.2012, p. 1)。
(15) Council Regulation (EU) 2016/1686 of 20 September 2016 imposing additional restrictive measures directed against ISIL (Da’esh) and Al-Qaeda and natural and legal persons, entities or bodies associated with them (OJ L 255, 21.9.2016, p. 1).
(15) 理事会 2016 年 9 月 20 日第 2016/1686 号条例(欧盟)针对伊黎伊斯兰国(达埃什)和基地组织以及与之相关的自然人和法人、实体或机构实施了额外的限制性措施(OJ L 255, 21.9.2016, p. 1)。
(16) Council Regulation (EU) 2017/1509 of 30 August 2017 concerning restrictive measures against the Democratic People’s Republic of Korea and repealing Regulation (EC) No 329/2007 (OJ L 224, 31.8.2017, p. 1).
(16) 理事会 2017 年 8 月 30 日第 2017/1509 号条例(欧盟),涉及针对朝鲜民主主义人民共和国的限制性措施,并废除第 329/2007 号条例(欧共体)(OJ L 224, 31.8.2017, p. 1)。
(17) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1).
(17) 2016 年 4 月 27 日欧洲议会和欧盟理事会关于在处理个人数据方面保护自然人以及关于此类数据自由流动的第 2016/679 号条例(欧盟),并废除第 95/46/EC 号指令(《通用数据保护条例》)(OJ L 119, 4.5.2016, p. 1)。
(18) Directive (EU) 2015/2366 of the European Parliament and of the Council of 25 November 2015 on payment services in the internal market, amending Directives 2002/65/EC, 2009/110/EC and 2013/36/EU and Regulation (EU) No 1093/2010, and repealing Directive 2007/64/EC (OJ L 337, 23.12.2015, p. 35).
(18) 2015 年 11 月 25 日欧洲议会和理事会关于内部市场支付服务的指令 (EU) 2015/2366,修订指令 2002/65/EC、2009/110/EC 和 2013/36/EU 以及条例 (EU) No 1093/2010,并废除指令 2007/64/EC(OJ L 337, 23.12.2015, p. 35)。
(19) Regulation (EU) No 260/2012 of the European Parliament and of the Council of 14 March 2012 establishing technical and business requirements for credit transfers and direct debits in euro and amending Regulation (EC) No 924/2009 (OJ L 94, 30.3.2012, p. 22).
(19) 2012 年 3 月 14 日欧洲议会和欧洲理事会第 260/2012 号条例 (EU) 规定了欧元贷记转账和直接借记的技术和业务要求,并修订了第 924/2009 号条例 (EC) (OJ L 94, 30.3.2012, p. 22)。
(20) Regulation (EU) 2021/1230 of the European Parliament and of the Council of 14 July 2021 on cross-border payments in the Union (OJ L 274, 30.7.2021, p. 20).
(20) 2021 年 7 月 14 日欧洲议会和欧盟理事会关于欧盟跨境支付的条例 (EU) 2021/1230 (OJ L 274, 30.7.2021, p. 20)。
(21) Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA (OJ L 119, 4.5.2016, p. 89).
(21) 2016 年 4 月 27 日欧洲议会和欧盟理事会关于在主管机关为预防、调查、侦查或起诉刑事犯罪或执行刑事处罚之目的处理个人数据方面保护自然人以及关于此类数据自由流动的第 2016/680 号指令(欧盟),并废除理事会第 2008/977/JHA 号框架决定((21) )、调查、侦查或起诉刑事犯罪或执行刑事处罚,以及此类数据的自由流动,并废除理事会第 2008/977/JHA 号框架决定(OJ L ;119, 4.5.2016, p. 89)。
(22) Regulation (EU) No 182/2011 of the European Parliament and of the Council of 16 February 2011 laying down the rules and general principles concerning mechanisms for control by Member States of the Commission’s exercise of implementing powers (OJ L 55, 28.2.2011, p. 13).
(22) 2011 年 2 月 16 日欧洲议会和欧洲理事会第 182/2011 号条例(欧盟),该条例规定了成员国控制欧盟委员会行使执行权力机制的规则和一般原则(OJ L 55, 28.2.2011, p. 13)。
(23) Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L 295, 21.11.2018, p. 39).
(23) 欧洲议会和理事会 2018 年 10 月 23 日关于在欧盟机构、团体、办事处和机关处理个人数据方面保护自然人以及关于此类数据自由流动的第 2018/1725 号条例(欧盟),并废除第 45/2001 号条例(欧共体)和第 1247/2002/EC 号决定(OJ L ;295, 21.11.2018, p. 39)。
(24)
OJ C 524, 29.12.2021, p. 10.
(24)OJ C 524, 29.12.2021, p. 10。
ANNEX I 附 件 I
REPEALED REGULATION WITH THE AMENDMENT THERETO
被废除的条例及其修正案
Regulation (EU) 2015/847 of the European Parliament and of the Council |
|
Regulation (EU) 2019/2175 of the European Parliament and of the Council |
[Only Article 6] [仅第 6 条] |
ANNEX II 附 件 II
CORRELATION TABLE 相关表
Regulation (EU) 2015/847 条例(欧盟)2015/847 |
This Regulation 本条例 |
Article 1 第 1 条 |
Article 1 第 1 条 |
Article 2(1), (2) and (3) |
Article 2(1), (2) and (3) |
Article 2(4), first and second subparagraphs |
Article 2(4), first and second subparagraphs |
— |
Article 2(4), third and fourth subparagraphs |
Article 2(5) 第 2(5)条 |
Article 2(5) 第 2(5)条 |
Article 3, introductory wording |
Article 3, introductory wording |
Article 3, points 1 to 9 |
Article 3, points 1 to 9 |
— |
Article 3, point 10 第 3 条第 10 点 |
Article 3, point 10 第 3 条第 10 点 |
Article 3, point 11 第 3 条第 11 点 |
Article 3, point 11 第 3 条第 11 点 |
Article 3, point 12 第 3 条第 12 点 |
Article 3, point 12 第 3 条第 12 点 |
— |
— |
Article 3, points 13 to 24 |
Article 4(1), introductory wording |
Article 4(1), introductory wording |
Article 4(1), points (a), (b) and (c) |
Article 4(1), points (a), (b) and (c) |
— |
Article 4(1), point (d) 第 4(1)条(d)项 |
Article 4(2), introductory wording |
Article 4(2), introductory wording |
Article 4(2), points (a) and (b) |
Article 4(2), points (a) and (b) |
— |
Article 4(2), point (c) 第 4(2)条(c)项 |
Article 4(3) to (6) 第 4(3)至(6)条 |
Article 4(3) to (6) 第 4(3)至(6)条 |
Articles 5 to 13 第 5 至 13 条 |
Articles 5 to 13 第 5 至 13 条 |
— |
Articles 14 to 23 第 14 至 23 条 |
Article 14 第十四条 |
Article 24 第二十四条 |
Article 15(1), (2) and (3) |
Article 25(1), (2) and (3) |
Article 15(4), sole subparagraph |
Article 25(4), first subparagraph |
— |
Article 25(4), second subparagraph |
Article 16 第 16 条 |
Article 26 第 26 条 |
— |
Article 27 第二十七条 |
Article 17 第 17 条 |
Article 28 第二十八条 |
Article 18 第十八条 |
Article 29 第 29 条 |
Article 19 第十九条 |
Article 30 第三十条 |
Article 20 第二十条 |
Article 31 第 31 条 |
Article 21 第二十一条 |
Article 32 第 32 条 |
Article 22 第二十二条 |
Article 33 第 33 条 |
Article 23 第二十三条 |
Article 34 第 34 条 |
Article 24(1) to (6) 第 24(1)至(6)条 |
Article 35(1) to (6) 第 35(1)至(6)条 |
Article 24(7) 第 24(7)条 |
— |
Article 25, sole subparagraph |
Article 36, first subparagraph |
— |
Article 36, second, third and fourth subparagraph |
— |
Article 37 第三十七条 |
— |
Article 38 第 38 条 |
Article 26 第 26 条 |
Article 39 第三十九条 |
Article 27 第二十七条 |
Article 40 第 40 条 |
Annex 附件 |
— |
— |
Annex I 附件 I |
— |
Annex II 附件 II |