> For the complete documentation index, see [llms.txt](https://www.headlesslaw.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.headlesslaw.com/tofr/articles/23.md).

# Article 23 — Internal policies, procedures and controls to ensure implementation of restrictive meas

*In force · Regulation (EU) 2023/1113, OJ L 150, 9.6.2023 · Checked against EUR-Lex on 19 Oct 2026 ·* [*Official source*](https://eur-lex.europa.eu/eli/reg/2023/1113/oj/eng)

[Payment service providers](https://www.headlesslaw.com/definitions/tofr/payment-service-provider) and [crypto-asset service providers](https://www.headlesslaw.com/definitions/tofr/crypto-asset-service-provider) shall have in place internal policies, procedures and controls to ensure the implementation of Union and national restrictive measures when performing transfers of [funds](https://www.headlesslaw.com/definitions/tofr/funds) and crypto-assets under this Regulation.

The European Banking Authority (EBA) shall issue guidelines by 30 December 2024 specifying the measures referred to in this Article.

### Related Level 2 and Level 3

#### Guidance and Q\&A

* [EBA/GL/2024/15 — Guideline — Implementation of Union and national restrictive measures \[final\]](/tofr/level-3/guidelines/internal-policies-restrictive-measures-psps-casps.md)

***

[Chapter IV — Common measures applicable by payment service providers and crypto-asset service providers](/tofr/chapters/iv.md) · [← Article 22](/tofr/articles/22.md) · [Article 24 →](/tofr/articles/24.md)