Cyprus Confidential: offshore usluge i ruski utjecaj na Cipru

Cyprus Confidential was an international investigation published in November 2023 by the International Consortium of Investigative Journalists (ICIJ), Paper Trail Media, the Organized Crime and Corruption Reporting Project (OCCRP) and media partners in several countries. It examined how Cyprus-based professional and financial-services firms worked with wealthy clients, including Russian business figures and people close to the Kremlin, before and after Russia’s full-scale invasion of Ukraine.

The investigation did not present every person or company mentioned in the documents as having committed a crime. Its findings were based on leaked business records and reporting by participating newsrooms. Where allegations or concerns were raised, the journalists sought responses from the individuals, companies and authorities concerned.

What the investigation examined

According to ICIJ, the investigation was based on approximately 3.6 million leaked files obtained by Paper Trail Media and OCCRP and shared with ICIJ and dozens of media partners. The records came from Cyprus-based providers of accounting, corporate, trust, legal and other financial services. They included emails, internal documents, corporate records and material relating to client relationships.

The files offered a view of the infrastructure used to establish companies, administer trusts, manage assets and provide professional advice. Much of this activity can be lawful when it is properly disclosed and supervised. The public-interest questions raised by Cyprus Confidential concerned whether some providers continued to assist sanctioned or politically connected clients, whether beneficial ownership was adequately identified, and whether controls against money laundering and sanctions evasion worked effectively.

Russian clients and the sanctions environment

ICIJ and its partners reported that the documents described services provided to Russian billionaires, senior business figures and people connected to influential political and commercial networks. Some relationships continued after Russia’s 2022 invasion of Ukraine, when the European Union, the United Kingdom, the United States and other governments introduced broad sanctions against individuals, companies and sectors linked to the Kremlin.

The reporting focused on the difference between being named in leaked records and being subject to sanctions. A person may appear in corporate documents without being sanctioned, while sanctions may apply to a person, an entity, particular assets or specific transactions. Determining whether a transaction breached sanctions generally requires examining the applicable law, the date, the ownership structure, the service provided and the decisions taken by the parties involved.

The investigation also described alleged efforts to reorganise ownership structures and move assets after sanctions were imposed. The journalists reported that advisers and intermediaries sometimes played an important role in these arrangements. Such reporting is not, by itself, a judicial finding. The legal assessment of any particular conduct belongs to the relevant enforcement authorities and courts.

Cyprus as a financial-services hub

Cyprus has long been used as a base for international companies and financial-services firms. Its position as an EU member state, its professional-services sector and its connections with markets in Europe and beyond have made it an important location for cross-border corporate administration.

Cyprus Confidential showed how this ecosystem can make complex ownership chains difficult for the public and, in some cases, for regulators to understand. Companies and trusts may have legitimate commercial or estate-planning purposes, but layers of entities can also obscure who ultimately controls an asset or benefits from a transaction. Effective supervision therefore depends on accurate beneficial-ownership information, reliable customer checks, documented risk assessments and timely reporting of suspicious activity.

The records examined by the journalists included references to companies, trusts, property and other assets. The presence of an entity in the material did not necessarily establish that the entity was unlawful or that its beneficial owner had violated sanctions. The significance of each record depended on the wider evidence and on the explanations provided by the people and organisations involved.

The role of professional advisers

One of the investigation’s central themes was the role of accountants, lawyers, company administrators and other intermediaries. These professionals can create and maintain the structures through which money and assets are held. They may also be responsible for identifying clients, checking ownership and assessing sanctions risks.

ICIJ and its partners reported that some Cyprus-based firms continued to work for clients who had become politically sensitive or sanctioned. In other cases, the records described advisers considering how to respond to new restrictions. The reporting raised questions about whether compliance decisions were made promptly and independently, and whether commercial relationships influenced the treatment of high-risk clients.

The investigation also highlighted that sanctions compliance is separate from ordinary anti-money-laundering obligations, although the two systems overlap. A firm may need to consider sanctions, beneficial ownership, politically exposed-person status, source of wealth, source of funds and suspicious-transaction reporting at the same time.

Political and regulatory reactions

The publication generated political pressure in Cyprus and renewed scrutiny of the country’s financial-services sector. Cyprus’s government said that allegations involving the misuse of the financial system should be examined and that authorities would investigate possible breaches. The government also presented the issue as a matter of protecting the country’s reputation and strengthening compliance with European and international rules.

Regulators and law-enforcement bodies faced the task of separating documented professional relationships from evidence of unlawful conduct. The material also prompted debate about supervision of service providers, access to beneficial-ownership information and the consequences for firms that fail to identify or report risks.

The investigation appeared amid wider European efforts to enforce sanctions against Russian individuals and prevent circumvention. EU institutions and national authorities had already increased controls, expanded sanctions lists and sought greater cooperation between financial-intelligence and law-enforcement agencies. The Cyprus case demonstrated why enforcement depends not only on banks, but also on the accountants, lawyers, trustees and corporate administrators who can design or maintain ownership structures.

Responses from the named parties

ICIJ and its partners contacted the companies, advisers and individuals identified in their reporting. The published responses varied. Some parties denied wrongdoing, rejected the characterisation of their work or said that they had complied with applicable laws and sanctions. Others stated that they had ended relationships, carried out reviews or relied on legal advice. Some did not respond before publication.

People associated with Russian business interests have also disputed allegations made in the reporting and have said that they were not responsible for conduct attributed to advisers or corporate entities. The investigation’s source material and the responses should therefore be read together: a leaked email, a company record or a reference to a client is evidence of a documented relationship, not automatically proof of criminal conduct.

Several Cyprus-based professionals and companies named in connection with the investigation faced public scrutiny over their alleged work for sanctioned or politically exposed clients. Any final determination of liability requires a formal investigation and, where relevant, a decision by a competent court or regulator.

Why the investigation matters

Cyprus Confidential illustrated how international finance can operate across borders while accountability remains largely national. A corporate structure may involve a client in one country, an adviser in another, a bank in a third and assets held elsewhere. This makes cooperation between regulators and journalists particularly important when documents point to possible conflicts between professional obligations, secrecy and public-interest oversight.

For the public, the investigation offered a detailed case study of how offshore and cross-border services work. It also showed the limits of the term “offshore”: the structures described were not necessarily illegal, and the decisive issues were transparency, control, disclosure and compliance with the law.

For policymakers, the main questions remain practical. Are beneficial owners identified accurately? Can sanctions authorities trace assets quickly? Do professional-service firms document their decisions? Are regulators able to act when a firm repeatedly serves high-risk clients? And can institutions exchange information without undermining legitimate privacy and due-process rights?

Sources and editorial attribution

• International Consortium of Investigative Journalists, Cyprus Confidential, published in November 2023.
• Paper Trail Media, which obtained and investigated the leaked records with reporting partners.
• Organized Crime and Corruption Reporting Project, a principal partner in the investigation.
• Participating national media organisations that reviewed documents, interviewed sources and sought responses from named parties.
• Public statements and regulatory information from Cypriot and European authorities concerning sanctions enforcement, anti-money-laundering supervision and the country’s financial-services sector.

The findings summarised here are attributed to ICIJ and its reporting partners. They should not be interpreted as a general allegation against Cyprus, its financial sector or every person and company mentioned in the underlying records.