FINMA/SECO Update ISIL and Al-Qaida Sanctions List: What Swiss Financial Intermediaries Must Do Now

Switzerland's State Secretariat for Economic Affairs (SECO) revised the country's ISIL (Da'esh) and Al-Qaida sanctions list on 27 October 2026, one day after the relevant UN Sanctions Committee adopted changes on 24 and 26 October 2026. The update is directly applicable Swiss law under Ordinance SR 946.231.08. Every financial intermediary operating in Switzerland, including virtual asset service providers and firms that use crypto accounting software to manage digital asset portfolios, must act immediately: screen, freeze, and report.

Background: The Legal Framework Behind This Update

Switzerland implements UN Security Council sanctions on ISIL and Al-Qaida through a dedicated federal ordinance, currently SR 946.231.08, which was enacted on 21 March 2025. The ordinance creates a standing obligation: whenever the UN's designated committee updates the consolidated list of sanctioned individuals, entities, and organisations, that change flows directly into Swiss law without the need for a separate parliamentary act.

How the SESAM database sits at the centre

SECO maintains SESAM (SECO Sanctions Management), the authoritative Swiss sanctions database. Financial intermediaries are expected to screen against SESAM, not just the UN's own consolidated list, because SECO's version incorporates Switzerland-specific ordinance language and is the reference point regulators use during supervisory reviews. The 27 October 2026 SESAM update reflects the UN committee decisions of 24 and 26 October, meaning there was less than a 24-hour lag between the international decision and the domestic database change. That speed matters: any business relationship that matches a newly listed entity is already subject to the freeze requirement from the moment the ordinance change takes effect, not from the moment a firm happens to complete its next scheduled screening cycle.

Who is in scope

The term "financial intermediary" in Swiss law is broad. Under the Anti-Money Laundering Act (GwG), it covers banks, securities firms, fund managers, insurance institutions, money service businesses, and, critically, providers of services involving virtual currencies and digital assets. If your firm holds, transfers, or accounts for crypto assets on behalf of clients, you are a financial intermediary for GwG and sanctions purposes and this update applies to you directly.

Three Obligations That Trigger Immediately

SECO's notice is explicit about what financial intermediaries must do. The language in the ordinance and the accompanying FINMA guidance creates a layered set of duties that cannot be treated as sequential: all three run in parallel from the effective date.

1. Implement the prohibitions

Financial intermediaries must give effect to every prohibition listed in SR 946.231.08. This typically means no new transactions, no fund movements, and no provision of economic resources to or for the benefit of any newly listed party. For firms managing digital asset portfolios, this prohibition extends to on-chain transfers: sending tokens or stablecoins to a wallet controlled by a listed entity is a breach regardless of whether the intermediary was aware the counterparty was listed at the time the transaction was initiated. That is why real-time or near-real-time sanctions screening integrated into your transaction workflow, not a weekly batch check, is the operationally sound approach.

2. Freeze assets and report to SECO

Any assets belonging to or controlled by a newly listed person or entity must be frozen without delay. Following the freeze, the firm must notify SECO of the affected business relationships. SECO provides a structured reporting channel for this purpose. The freeze-and-report obligation is not conditional on certainty: a plausible match, even before full due-diligence review, is sufficient to trigger provisional freezing pending clarification.

3. Conduct GwG due diligence and file with MROS if suspicion persists

This is the step that firms most commonly underestimate. SECO's notice is unambiguous: reporting to SECO does not discharge the firm's separate obligations under the GwG. Specifically:

• Article 6 GwG requires enhanced clarification when there are grounds for suspicion, even after the SECO report has been filed.
• Article 9 GwG requires an immediate suspicious activity report (SAR) to the Money Laundering Reporting Office Switzerland (MROS) if the firm cannot dispel the suspicion through its own due-diligence process.

The practical implication is that a SECO sanctions report and a MROS SAR are separate instruments serving different legal purposes. Filing one never substitutes for the other. Firms that assume the SECO notification closes the matter are exposed to regulatory action for failing to comply with GwG Articles 6 and 9.

Operational Implications for Accounting and Compliance Teams

For CFOs, compliance officers, and accounting firms advising Swiss financial intermediaries, the 27 October 2026 update raises several immediate workflow questions.

Sanctions screening and your crypto accounting software stack

Digital asset accounting software that records portfolio positions, reconciles on-chain transactions, and generates financial statements needs to be complemented by a sanctions screening layer that queries SESAM in real time. The two systems serve different functions: your crypto bookkeeping software captures what happened; your sanctions screening tool determines whether what happened was lawful. Neither replaces the other. Where firms use integrated platforms, the compliance team should verify that the SESAM feed is current, specifically that the 27 October 2026 update has been ingested, and that any wallet addresses or counterparty identifiers linked to newly listed entities have been flagged.

Understanding how AML gaps translate into regulatory action for financial firms underscores why a stale sanctions feed is not a minor operational oversight: it is a compliance failure with material supervisory consequences.

Accounting treatment of frozen digital assets

When assets are frozen pending a sanctions investigation, the accounting question is how to present them on the balance sheet and in the notes. Under Swiss GAAP (Swiss GAAP FER) and IFRS, a frozen asset is still an asset of the firm or its client, but the existence of the freeze is a fact that may affect recoverability and therefore may require disclosure or a provision assessment. The key points for accounting teams are:

• Do not derecognise the asset simply because it is frozen; derecognition requires a legal transfer of control.
• Assess whether the freeze creates a contingent liability (for example, if the firm has guaranteed liquidity to a client whose assets are now subject to the order).
• Ensure the freeze is disclosed in the notes to the financial statements where it is material, including the nature of the restriction and the estimated duration if known.

Documentation and audit trail requirements

Swiss regulators expect a clear, time-stamped audit trail covering: the date and time the SESAM update was ingested into the firm's screening system; the date and time any match was identified; the steps taken to verify the match; the date the freeze was applied; the date and content of the SECO report; and, where applicable, the date and content of the MROS SAR. For firms using digital asset accounting software, ensuring that transaction-level metadata is preserved and exportable in a format acceptable to FINMA examiners is not optional. Regulators examining sanctions compliance increasingly request this data as part of standard supervisory reviews, not only in enforcement contexts.

Why Crypto Asset Firms Face Heightened Scrutiny

Sanctions evasion using virtual assets is a documented and growing concern for international bodies including the UN Panel of Experts on ISIL and Al-Qaida. Pseudo-anonymous blockchain transactions, the use of mixers, and cross-border fund flows that bypass traditional correspondent banking are all cited in UN reporting as vectors used by designated groups. Swiss financial supervisors are aware of this and FINMA has consistently signalled that virtual asset service providers are expected to meet the same sanctions compliance standard as banks, not a lighter variant of it.

This context means that a Swiss crypto firm that fails to screen against the updated SESAM list promptly, or that treats the SECO report as a complete discharge of its obligations, faces not only domestic regulatory risk but potential exposure to international scrutiny if the underlying case has cross-border dimensions. For accounting firms advising such clients, this update is a prompt to review client onboarding procedures, transaction monitoring configurations, and the internal escalation path between the compliance function and the finance team.

The broader trajectory of AML and CFT obligations across Europe is also relevant context: what MiCAR's transitional period end means for AML and CFT obligations illustrates how the regulatory perimeter for crypto firms continues to tighten across multiple jurisdictions simultaneously, making robust compliance infrastructure a strategic necessity rather than a back-office concern.

Practical Next Steps for Swiss Financial Intermediaries

Given the direct applicability of the 27 October 2026 update, the following actions should be completed without delay:

Immediate screening review

Confirm that your sanctions screening system has ingested the 27 October 2026 SESAM update. Run a retrospective check of active business relationships and any pending transactions against the revised list. If your screening system relies on a scheduled feed rather than a real-time API connection to SESAM, consider what gap exists between the update date and your last successful feed pull, and assess whether any transactions occurred in that window that require review.

Internal escalation and legal review

Any potential match should immediately trigger your internal escalation protocol. The compliance officer and legal counsel should be involved before any communication with the client whose assets may be affected. Do not alert the client to a potential freeze in advance of legal sign-off: tipping-off prohibitions under Swiss law apply in this context.

Coordinated SECO and MROS reporting

Prepare the SECO notification and, in parallel, initiate the Article 6 GwG enhanced due-diligence review. Set a clear internal deadline for concluding that review. If suspicion cannot be resolved within a reasonable period, file the Article 9 MROS SAR promptly. Document every step with timestamps.

Update your crypto accounting software records

Mark any frozen positions clearly in your portfolio management and accounting systems. Ensure the freeze status and the date it was applied are recorded at the transaction and position level so that financial statements and regulatory reports reflect the restriction accurately.

Frequently Asked Questions

Does this update change which entities are sanctioned, or just the administrative process?

The UN Sanctions Committee decisions of 24 and 26 October 2026 changed the substantive list of sanctioned persons, entities, and organisations associated with ISIL and Al-Qaida. SECO then updated SESAM to reflect those changes. The practical effect is that new names or identifiers are now subject to the full prohibitions under SR 946.231.08. The administrative process itself is unchanged; it is the underlying list that has been revised.

How quickly must a Swiss financial intermediary act after a SESAM update?

The ordinance creates an immediate obligation: the prohibitions and the freeze requirement apply from the date the change takes effect in Swiss law, which in this case is 27 October 2026. There is no grace period. Regulators expect screening to be current and any match to be acted upon without delay. Firms that identify a lag between the SESAM update and their own screening cycle should treat that gap as a compliance risk to be remediated promptly.

Is a SECO sanctions report the same as a MROS SAR?

No, and conflating the two is a common compliance error. The SECO report notifies the authority that a business relationship with a sanctioned party has been identified and that assets have been frozen. The MROS SAR is a separate instrument filed under Article 9 GwG when the firm has reasonable grounds for suspicion of money laundering or terrorist financing that it cannot dispel through its own due-diligence process under Article 6 GwG. Both may be required in the same case, and neither substitutes for the other.

Do these obligations apply to firms that only hold crypto assets, not traditional financial instruments?

Yes. Under the GwG, providers of services involving virtual currencies are financial intermediaries. The sanctions ordinance and the accompanying GwG obligations apply to them in the same way they apply to banks or securities firms. The asset class does not determine the scope of the obligation; the nature of the financial intermediation service does.

What should accounting firms advising Swiss crypto firms do in response to this update?

Advise clients to verify their SESAM feed is current, review their sanctions screening workflow for any gaps, and confirm that internal escalation protocols distinguish clearly between the SECO reporting obligation and the separate MROS SAR obligation. From an accounting perspective, review how any frozen assets are presented in financial statements and whether disclosures in the notes are adequate. Ensure the client's crypto accounting software records reflect any freeze applied, with the correct effective date.

Source: FINMA / SECO