Money‑laundering Investigations in Romania (2026): a Practical Guide for Executives, Boards and Compliance Teams

Money laundering investigations romania are entering a more assertive phase in 2026, as prosecutors sharpen their focus on economic crime and the country continues to align its rules with the latest European Union anti‑money laundering framework. For executives, boards and compliance teams, the practical consequences are immediate: earlier scrutiny, faster provisional measures against corporate assets, and a heavier evidentiary burden to demonstrate that controls were in place. This guide sets out, in operational terms, how criminal AML probes unfold in Romania, who wields investigative powers, and what a company should do in the first hours and days to protect its people, its assets and its legal position.

It is written for in‑house counsel, compliance officers and directors who need a jurisdiction‑specific playbook rather than a general overview.

Quick‑reference checklist for executives and boards

When a criminal AML probe surfaces, whether through a search warrant, a prosecutor’s summons, or an internal red flag, the first hours and days are decisive. Decisions taken in that window shape the evidence available, the strength of any defence, and the company’s credibility with authorities. The following prioritised checklist is designed to be actionable under pressure.

First‑day actions

• Engage external criminal counsel immediately. Retain a white‑collar specialist before making statements, disclosing documents or interviewing staff. Early legal control is the single most valuable step.
• Preserve evidence and systems. Issue a litigation hold (ESI preservation notice) covering emails, transaction records, ledgers, KYC files and backups. Suspend routine deletion policies.
• Secure physical and digital records. Ring‑fence the relevant custodian data, transactional logs and correspondence to protect chain of custody.
• Limit communications. Route all internal and external messaging through counsel. Avoid internal emails speculating about liability, which are rarely privileged and can become evidence.

Follow‑up actions (first few days)

• Assess the position of implicated individuals. Consider precautionary suspension of employees directly implicated, taking advice on employment and privilege implications.
• Notify insurers and check cover. Directors’ and officers’ and specialist crime policies may fund defence costs; late notification can prejudice cover.
• Review suspicious transactions. Where lawful and appropriate, assess reporting obligations and take advice before halting transactions connected to the suspected conduct.

When to escalate to the board or CEO

Escalate immediately where the matter is material to the company’s finances, licensing, reputation or continuity, or where a director or senior officer is personally implicated. Boards should receive a factual briefing prepared by counsel, not raw speculation, and should minute their decisions carefully. On the recurring question of what counsel costs, retain early: fee models vary and the cost of late engagement almost always exceeds the cost of early advice. See the FAQ below for fee guidance.

Legal and regulatory framework for anti‑money laundering in Romania

Romania’s anti‑money laundering regime sits at the intersection of domestic criminal and preventive law and the wider European Union framework. Understanding both layers is essential to reading any investigation correctly, because prosecutors draw on national criminal procedure while obliged entities operate under preventive obligations shaped in Brussels.

Key Romanian statutes and implementing acts

Romania’s preventive AML rules and the criminal money‑laundering offence are set out in national legislation available through the official legislative portal, Portalul legislativ al României. These instruments define obliged entities, customer due diligence duties, beneficial ownership registration, and the criminal offence of laundering the proceeds of predicate crimes. Compliance teams should verify the current consolidated text and any recent amendments directly against the portal, since implementing acts and Government Decisions are updated periodically and specific law numbers should always be checked before relying on them.

EU AML directives and the 2024 AML package

The Romanian framework transposes a sequence of EU directives. Directive (EU) 2015/849 (the Fourth AML Directive) established the risk‑based approach and the core obligations of obliged entities. Directive (EU) 2018/843 (the Fifth AML Directive) extended enhanced due diligence, strengthened beneficial‑ownership transparency and brought virtual asset service providers within scope. Directive (EU) 2018/1673 (the Sixth AML Directive) harmonised the definition of money‑laundering offences across member states and addressed corporate liability, meaning companies, not only individuals, can face criminal exposure for laundering conduct.

In addition, the EU adopted a new AML package in 2024, including a directly applicable AML Regulation and the establishment of a new EU Anti‑Money Laundering Authority (AMLA); companies should monitor the phased application dates of these instruments, which take effect over the coming years.

The FIU and FATF standards

Romania’s Financial Intelligence Unit, the Oficiul Național de Prevenire și Combatere a Spălării Banilor (ONPCSB), receives and analyses suspicious transaction reports and refers matters to prosecutors. Above the EU layer sit the international standards of the Financial Action Task Force (FATF), whose recommendations on customer due diligence, beneficial ownership and cross‑border cooperation inform both Romanian practice and EU law.

Compliance risk checklist for regulated entities: confirm your customer due diligence tiers are current; verify beneficial ownership data against the register; test transaction monitoring thresholds; document every reporting decision; and ensure suspicious transaction report escalation routes to the FIU are functioning and tested. Gaps in these areas are precisely what investigators probe first.

Who investigates money‑laundering in Romania?

Several institutions can be involved in money laundering investigations romania, each with distinct triggers and powers. Knowing which actor is at your door changes how you respond, because a customs seizure at a border is not the same event as a prosecutor’s coordinated search.

Prosecutors, DIICOT and DNA

Criminal AML matters are led by the public prosecutor’s office. Complex cases with organised‑crime dimensions are typically handled by the specialised Directorate for Investigating Organised Crime and Terrorism (DIICOT), while corruption‑linked matters may involve the National Anticorruption Directorate (DNA). Prosecutors direct investigations, request provisional measures and coordinate searches, though searches of premises and asset freezes generally require judicial authorisation. The organisation and procedural role of the anticorruption directorate is described by the Direcția Națională Anticorupție (DNA).

The FIU and SAR analysts

The FIU does not prosecute. It analyses suspicious transaction reports from obliged entities, builds financial intelligence and refers matters to prosecutors where analysis suggests laundering. Its guidance and reporting channels are published by ONPCSB.

Police, customs and the courts

Judicial police execute searches and seizures under prosecutor supervision, and customs authorities detect and seize goods and cash at borders. The courts, finally, authorise intrusive measures and rule on challenges to seizures and freezes, making them the essential forum for any corporate defence seeking to protect assets.

Typical phases of an AML criminal investigation, timeline and triggers

Most money laundering investigations romania follow a recognisable arc. Mapping it helps a company anticipate what will be sought next and align its response and preservation duties to the correct stage.

How probes start

Investigations usually begin in one of three ways: a suspicious transaction report from an obliged entity reaches the FIU; a complaint or press exposure triggers prosecutorial interest; or intelligence about a predicate offence, fraud, corruption, tax evasion, trafficking, surfaces laundering as a downstream concern. The FIU analyses the intelligence and, where warranted, refers the matter to prosecutors, who open an investigation.

Requests to produce, preservation and searches

Once a criminal investigation is opened, prosecutors gather evidence. Companies commonly receive requests to produce transactional records, KYC and onboarding files, board minutes and correspondence. More intrusive steps, searches of premises and seizure of devices, generally require prior judicial authorisation. When investigators arrive with a search authorisation, verify its scope, note what is seized, insist on an inventory, and have counsel present. Cooperation should be genuine but calibrated to the authorisation’s terms; over‑disclosure and obstruction are both mistakes.

Typical timelines and procedural rights

From referral to charging decision, timelines vary widely with case complexity and cross‑border elements. Provisional asset measures can be imposed early and reviewed by a court; charging and trial follow if the prosecutor concludes the evidence supports the offence. Throughout, suspects and defendants retain procedural rights under the Romanian Code of Criminal Procedure, including access to counsel, the right against self‑incrimination, and the right to challenge measures, which corporate representatives should understand before any interview or statement.

Corporate defence playbook for money laundering investigations romania

A structured corporate defence turns a chaotic crisis into a managed process. The playbook below is operational: it assumes the company wants to protect its assets and reputation while cooperating lawfully and preserving every legitimate defence.

Internal forensic AML review, checklist

Run a scoped internal investigation to understand the facts before the company makes strategic decisions. Practical steps include:

• Define scope and mandate in writing, ideally under external counsel instruction to support any applicable confidentiality protections.
• Retain forensic accountants to trace flows, reconstruct transactions and quantify exposure.
• Issue ESI hold notices to custodians and IT, suspending automatic deletion across all relevant systems.
• Map the control environment, what monitoring existed, what alerts fired, and how they were handled.
• Preserve, then review, collect data first, analyse second, so nothing is lost while findings develop.

Confidentiality and the use of external counsel

The protection afforded to internal investigation materials in Romania is jurisdiction‑specific and narrower than the common‑law concept of legal professional privilege; lawyer–client confidentiality (secretul profesional) applies to communications with an admitted lawyer, but internal work product enjoys no automatic blanket protection. Conducting the review under external counsel instruction, marking documents appropriately, and limiting distribution all help protect sensitive material, but you should treat interview notes, forensic findings and legal analysis on the assumption that authorities may seek them. Never assume internal emails or informal messages are protected; treat them as potentially disclosable.

Interviewing employees and executives

Employee interviews are a core evidence source and a legal minefield. Explain to interviewees whom counsel represents (the company, not the individual), consider whether separate representation is warranted for exposed individuals, and document interviews carefully. Coordinate the sequence so that the company understands the facts before any interaction with prosecutors.

Insurance, experts and the self‑reporting decision

Notify D&O and crime insurers early and engage the right experts, forensic, regulatory and, where data moves across borders, privacy counsel. The most consequential strategic choice is whether to make a proactive disclosure. That decision should weigh, at minimum:

• Severity and scale of the suspected conduct and the strength of the underlying evidence.
• Likelihood of independent discovery by authorities absent disclosure.
• Cooperation and mitigation potentially available for proactive disclosure and remediation.
• Regulatory and reporting obligations that may compel disclosure regardless of tactical preference.
• Collateral consequences for licences, financing, counterparties and reputation.

Where mandatory reporting duties apply, for example the obligation on an obliged entity to file a suspicious transaction report, those are not optional and must be met irrespective of the broader strategic calculus. Beyond mandatory reporting, proactive disclosure is a judgement call best made with counsel after the internal review has clarified the facts. Finally, remediation matters: fixing the control failures that allowed the conduct demonstrates good faith and reduces the risk of recurrence.

Asset freezing, seizure and challenge

Asset measures are often the most damaging early consequence of money laundering investigations romania, because a frozen account or seized asset can threaten business continuity long before any finding of wrongdoing. Understanding the mechanics, and the routes to challenge them, is essential.

Emergency preservation measures

Prosecutors may take or seek provisional (conservatory) measures (măsuri asigurătorii) to prevent the dissipation of assets suspected to be proceeds of crime or instrumentalities of it. These measures can reach bank accounts, property and other assets. Because they can be applied swiftly and without prior notice, companies frequently learn of a freeze only when payments fail.

Challenging or varying freezes

Provisional measures are not final. Counsel can challenge them through the remedies available under the Code of Criminal Procedure, arguing disproportionality, insufficient connection between the assets and the alleged offence, or the harm to legitimate business. Timeliness is critical: challenges should be prepared and filed as soon as the measure is known, with supporting evidence on the lawful origin of funds and the operational impact of the freeze. Courts ultimately rule on the validity and scope of freezes and seizures, making early, well‑evidenced challenges the company’s principal tool.

Business continuity and civil considerations

Where measures threaten payroll, supplier payments or regulated obligations, counsel can seek variations to permit essential expenditure. Ultimate confiscation follows only on conviction or a specific judicial finding; until then, the company should press for proportionate measures that preserve lawful operations while the case proceeds.

Cross‑border evidence and cooperation

Modern laundering is rarely confined to one jurisdiction, so cross‑border evidence gathering features in many Romanian AML cases. Companies with operations, accounts or records abroad should anticipate both inbound and outbound cooperation requests.

Using the European Investigation Order and mutual legal assistance

Within the EU, the European Investigation Order provides a mutual‑recognition framework for obtaining evidence across member states, streamlining what previously depended on slower mutual legal assistance channels. Outside the EU, mutual legal assistance treaties and conventions remain the route for Romanian authorities to obtain evidence abroad and for foreign authorities to reach Romanian records. When a foreign request lands, verify its legal basis, scope and the identity of the requesting authority before producing anything.

GDPR and data‑transfer issues

Cross‑border evidence collides with data‑protection law. Transferring personal data in response to a foreign request, or exporting it for an internal investigation, must respect the General Data Protection Regulation and any applicable transfer restrictions. Privacy counsel should vet transfers, minimise personal data disclosed, and document the lawful basis. Practical tips: preserve custodian logs, retain local counsel in each affected jurisdiction, and treat confidentiality and professional secrecy as jurisdiction‑specific rather than universal.

Reporting obligations and suspicious transaction reporting

For obliged entities, suspicious transaction reporting is a legal duty and a first line of defence. A well‑documented SAR process both discharges the obligation and evidences good faith if the company is later scrutinised.

What to include and when to file

Obliged entities must report suspicious transactions to the FIU through its official channels, published by ONPCSB. A useful report records the customer and transaction details, the specific indicators of suspicion, the analysis performed, and the decision rationale. File promptly once suspicion crystallises; delay undermines the report’s protective value.

Tipping‑off and record keeping

Tipping‑off rules prohibit alerting the customer or third parties that a report has been made or that an investigation may follow, a breach that can itself constitute an offence. Disclosures made in good faith to the FIU generally attract legal protection. Compliance officers should maintain rigorous records of every reporting decision, including where a decision was taken not to report, since those judgements may later be examined.

Practical templates and checklists

Structured templates help teams respond consistently under pressure rather than improvising. Recommended assets to prepare and keep current include a board notification template that frames facts and options without prejudicing confidentiality; an internal investigation plan that defines scope, custodians and workstreams; a SAR submission checklist aligned to FIU requirements; and a preservation notice for third parties holding relevant records. Each template should be reviewed by counsel for confidentiality and redaction risk before use, so that a document created to protect the company does not become a liability. The internal forensic AML review checklist is a natural companion asset to the playbook above.

Key courts and recent precedent

Jurisprudence shapes how investigative powers, asset freezes and corporate liability are applied in practice. The Înalta Curte de Casație și Justiție (Romanian High Court of Cassation and Justice) and the Courts of Appeal issue decisions that clarify the proportionality of provisional measures, the evidentiary threshold for the laundering offence, and the scope of corporate criminal liability. Because these decisions evolve, companies and their counsel should verify the current state of the case law against official court sources rather than relying on summaries, and should factor recent rulings into any challenge to asset measures or charging decisions.

Conclusion and recommended next steps

Money laundering investigations romania in 2026 demand speed, structure and specialist judgement. The recurring lessons are consistent: preserve evidence and systems at once, control communications, engage experienced white‑collar counsel before making statements or disclosures, and treat asset freezes as urgent legal problems to be challenged, not accepted. Boards should insist on a factual, counsel‑led briefing and weigh any proactive disclosure only after an internal review has clarified the facts. Companies that build these reflexes into their governance, and rehearse them before a crisis, are far better placed to protect their people, their assets and their standing when scrutiny arrives.

Sources

1. EUR‑Lex, Directive (EU) 2018/843 (5th AMLD)
2. EUR‑Lex, Directive (EU) 2018/1673 (6th AMLD)
3. EUR‑Lex, Directive (EU) 2015/849 (4th AMLD)
4. Financial Action Task Force (FATF), Recommendations and guidance
5. Oficiul Național de Prevenire și Combatere a Spălării Banilor (ONPCSB)
6. Portalul legislativ al României
7. Direcția Națională Anticorupție (DNA)
8. Înalta Curte de Casație și Justiție