CBAM penalties under Regulation (EU) 2025/2083 apply at exactly €100 per tonne CO₂e for every authorized declarant who fails to surrender the required number of certificates, and at €300–500 per tonne CO₂e for anyone who imports CBAM-covered goods without authorization. Two penalty tiers govern non-compliance across all six covered sectors: iron and steel, cement, aluminium, fertilizers, electricity, and hydrogen. Understanding which tier applies to your situation determines the financial exposure you face and the corrective steps you must take.
The EU carbon border adjustment mechanism entered its definitive phase on January 1, 2026, making these penalties active and enforceable today.
Caption: Two distinct CBAM penalty tiers apply depending on whether an importer holds authorized declarant status.
What Are the CBAM Penalties?
CBAM penalties are per-tonne financial sanctions applied to the exact shortfall in surrendered certificates or, in the case of unauthorized importers, to the total embedded emissions of the imported goods. They are not flat fines assessed per shipment or per declaration. Each tonne CO₂e of the gap carries a fixed cost, which means larger import volumes produce proportionally larger penalty exposure.
Article 26 of Regulation (EU) 2023/956, as amended by the Omnibus regulation Regulation (EU) 2025/2083, establishes the current penalty structure. Two violations trigger two distinct penalty levels.
Tier 1: The €100/tCO₂e Penalty for Authorized Declarants
Authorized declarants who submit their annual CBAM declaration but surrender fewer certificates than required face a penalty of exactly €100 per tonne CO₂e not covered. This rate is not a maximum and not a starting point for negotiation. The National Competent Authority (NCA) in the declarant's member state of establishment calculates the shortfall in tonnes and multiplies it directly by €100.
The penalty is inflation-adjusted from a base year, meaning the nominal figure changes slightly over time, but the current applicable rate for the 2026 compliance cycle is €100/tCO₂e as established by the Omnibus amendment.
One critical feature of the €100 penalty applies regardless of whether payment is made: paying the penalty does not cancel the certificate surrender obligation. The authorized declarant must still procure and surrender the missing certificates. The total cost of non-compliance is therefore the €100 penalty plus the current CBAM certificate price (linked to the EU ETS, approximately €70/tCO₂e as of late March 2026). The combined minimum exposure is approximately €170 per tonne CO₂e short.
Tier 2: The €300–500/tCO₂e Penalty for Unauthorized Importers
Any person who imports CBAM goods without holding valid authorized declarant status faces a penalty of €300–500 per tonne CO₂e, equivalent to 3–5 times the standard rate. This range applies to the total embedded emissions of all non-compliant imports, not just a shortfall. There is no partial credit for paying the carbon cost voluntarily.
The exact amount within the €300–500 range is determined by the relevant NCA, based on the severity and circumstances of the unauthorized importing. The penalty applies whether the unauthorized importing was intentional or the result of a missed authorization deadline. As of January 7, 2026, over 12,000 applications had been submitted and over 4,100 operators authorized, meaning a substantial number of importers remain in an unresolved authorization state.
Customs integration reinforces this penalty regime. From January 1, 2026, customs authorities automatically validate CBAM authorization status in real time before releasing goods for free circulation. Unauthorized importers are blocked at the border before goods are released.
CBAM Penalty Summary Table
The 3 violation types covered by Article 26 and the applicable penalties are listed below.
| Violation | Who It Applies To | Penalty Rate | Regulation Article |
|---|---|---|---|
| Failure to surrender sufficient certificates | Authorized CBAM declarants | €100/tCO₂e shortfall | Article 26(1), as amended by 2025/2083 |
| Importing without authorization | Any person without authorized declarant status | €300–500/tCO₂e of total embedded emissions | Article 26(2), as amended by 2025/2083 |
| Non-reporting during transitional period (historical, 2023–2025) | All importers during transitional phase | €10–50/tCO₂e unreported | Article 35 of IR 2023/1773 |
Note: The transitional period penalty (2023–2025) applied to failure to submit quarterly reports, not to certificate surrenders. Certificate obligations only began with the definitive phase on January 1, 2026.
How CBAM Penalty Enforcement Works
CBAM penalties are enforced by the 27 National Competent Authorities (NCAs), one designated by each EU member state. NCAs receive their mandate under Regulation (EU) 2023/956 and carry direct responsibility for authorization, inspection, and penalty issuance within their jurisdiction. An authorized declarant registered in Germany is subject to enforcement by Deutsche Emissionshandelsstelle (DEHSt); one registered in the Netherlands falls under the Nederlandse Emissieautoriteit (NEa).
The enforcement process follows a structured sequence. After the annual CBAM declaration deadline of September 30 each year (first deadline: September 30, 2027 for calendar year 2026 imports), the NCA reviews submitted declarations and compares surrendered certificates against verified embedded emissions. Where a shortfall is identified, the NCA issues a formal penalty notice. The declarant then faces a dual obligation: pay the penalty assessment and acquire the remaining certificates.
How NCAs Detect Non-Compliance
NCAs have three primary detection mechanisms for identifying CBAM non-compliance.
The first is declaration review. Each authorized declarant submits a CBAM declaration through the CBAM Registry by September 30. The system automatically compares certificates surrendered against embedded emissions declared. Any gap triggers a shortfall flag for NCA review.
The second is customs data integration. Article 25 of Regulation (EU) 2023/956 requires customs authorities to automatically transmit import data to the CBAM Registry for each shipment of Annex I goods, including EORI number, CN code, quantity, and country of origin. The Registry cross-references this data against the declarant's account. Shipments recorded in customs but absent from CBAM declarations are flagged automatically.
The third is risk-based inspection under Article 15. NCAs hold sweeping inspection rights and may request any compliance document within the 4-year retention period at any time, without advance notice. The European Commission conducts cross-border anomaly analysis and alerts NCAs to patterns detected across the bloc.
Caption: NCAs enforce CBAM penalties using three parallel detection mechanisms: declaration shortfall flags, customs data cross-referencing, and risk-based inspections.
Does Paying the CBAM Fine Cancel the Certificate Obligation?
Paying the €100/tCO₂e penalty does not release the certificate surrender obligation. Both apply simultaneously and independently. The penalty addresses the regulatory infraction. The certificate surrender addresses the underlying carbon cost that CBAM is designed to equalize with the EU ETS. These are separate legal obligations under Article 26 and Article 22 respectively.
The mathematical consequence is straightforward. An authorized declarant who is short by 1,000 tCO₂e at the September 30 declaration deadline owes both the €100,000 penalty (1,000 × €100) and the cost of purchasing and surrendering 1,000 additional certificates at the prevailing ETS-linked price. At a certificate price of €70, that adds €70,000. Total exposure: €170,000 for a 1,000-tonne shortfall.
This deliberate design mirrors the EU ETS excess emissions penalty structure, where ETS installations also face both the financial penalty and the carry-forward obligation to surrender the missing allowances the following year.
How to Avoid CBAM Penalties as an Authorized Declarant
Authorized declarants can manage penalty exposure through 4 proactive compliance steps carried out before the annual declaration deadline.
The 4 steps for avoiding the €100/tCO₂e authorized declarant penalty are listed below.
-
Track the quarterly holding requirement. From 2027 onward, authorized declarants must hold CBAM certificates equal to at least 50% of cumulative embedded emissions at the end of each calendar quarter. This is set by Article 22(2) as amended by the Omnibus. Failing to meet the quarterly threshold does not trigger the €100 penalty directly, but it is an early indicator the declarant is under-purchasing and risks a declaration shortfall.
-
Obtain verified actual emissions data early. Using default values from Implementing Regulation (EU) 2025/2621 avoids verification costs but carries mark-ups of 10% in 2026, rising to 20% in 2027 and 30% from 2028. Actual verified emissions from production installations are typically lower than defaults for efficient producers. Accurate data prevents both over-purchasing and under-surrendering.
-
Engage an accredited verifier before the capacity crunch. Verifier registration in the CBAM Registry opens September 1, 2026. The first declaration deadline is September 30, 2027. That leaves 13 months for verifiers to complete physical site visits to non-EU production installations globally. Verifier fees range from €5,000 to €50,000 per installation. Securing verification contracts now (April 2026) reduces the risk of declaration delays caused by verifier unavailability.
-
Submit the CBAM declaration before September 30. Late or incomplete declarations are treated as non-surrender. The declaration, the certificate surrender, and the record-keeping retention period (end of 4th year after declaration year) all operate together. A CBAM declaration filed on time with accurate data is the core protection against the Tier 1 penalty.
The CBAM declaration process outlines the full data requirements and submission steps for meeting the annual deadline.
Contextual Border: Who Faces the Higher CBAM Penalty Tier?
The €300–500/tCO₂e penalty applies to importers of CBAM goods who do not hold valid authorized declarant status at the time of import. Three categories of importer face this elevated penalty exposure.
Importers Who Missed the March 31, 2026 Authorization Deadline
The authorization application deadline for provisional importing during the definitive phase was March 31, 2026, under Article 17(7a) inserted by Regulation (EU) 2025/2083. Importers who applied by that date may continue importing provisionally while their application is processed, with the NCA having up to 120 days to reach a decision. Importers who did not apply by that date and continued importing face the unauthorized importer penalty rate, not the authorized declarant rate.
EU Importers Without an EORI Number or Direct Customs Registration
Non-EU companies importing CBAM goods into the EU must appoint an indirect customs representative established in the EU under Article 5(2a). If this arrangement is not in place, the importer lacks the legal entity recognized by the CBAM Registry and is treated as importing without authorization.
Importers Whose Authorization Was Revoked
Authorization can be refused or revoked on grounds including serious customs violations in the prior 5 years, criminal convictions for tax fraud or environmental crime, or failure to maintain compliance procedures. An importer whose authorization is revoked and who continues importing after revocation faces the Tier 2 penalty.
Can CBAM Penalties Be Appealed?
CBAM penalties can be appealed through national administrative and judicial processes in the member state that issued the penalty. There is no dedicated EU-level CBAM appeals tribunal. The appeals route runs through the national court system of the member state where the NCA that issued the penalty is located.
For most importers, the first step is an administrative appeal filed with the NCA itself, requesting reconsideration of the penalty assessment. If the NCA upholds the penalty, the declarant may escalate to the national administrative court system. Constitutional or interpretative questions about how Regulation (EU) 2023/956 applies in a specific case can ultimately be referred to the Court of Justice of the European Union (CJEU), though this route applies to legal interpretation of the regulation, not to factual disputes about specific penalty calculations.
Enforcement intensity varies across the 27 member states. The 20 NCAs designated under environment or energy ministries and the 7 NCAs designated under financial or tax ministries reflect different institutional cultures that produce different inspection frequencies and penalty enforcement styles. This divergence creates a forum-shopping consideration for companies with flexibility in their EU establishment structure.
Supplementary Questions on CBAM Non-Compliance
What Is the CBAM Fine for a Fraudulent Emissions Declaration?
Fraudulent CBAM emissions declarations are addressed under Article 26 with reference to EU ETS excess emissions penalty structures, and may also trigger customs law infractions and potential authorization revocation. The financial penalty for fraudulent declarations aligns with the ETS framework, and authorization revocation means the importer then faces the Tier 2 rate for any subsequent imports. Fraudulent declarations may also result in referral to national authorities for criminal proceedings under applicable member state law.
Does the De Minimis Threshold Eliminate Penalty Exposure?
The 50-tonne annual mass de minimis threshold under Article 2(3a) of Regulation (EU) 2023/956 as amended exempts importers below the threshold from CBAM obligations entirely. Importers whose total annual net mass of CBAM goods across all sectors remains at or below 50 tonnes per calendar year face no certificate obligation and therefore no penalty exposure. Electricity and hydrogen have no de minimis threshold and carry full CBAM obligations at any volume. The CBAM de minimis threshold sets out how to calculate annual totals across product types and sectors.
Is the CBAM Penalty the Same Across All Member States?
The penalty rate is harmonized EU-wide at €100/tCO₂e for authorized declarants and €300–500/tCO₂e for unauthorized importers by Regulation (EU) 2025/2083. The exact amount within the €300–500 range for unauthorized importers is determined by the NCA of the relevant member state, introducing limited national discretion in Tier 2 cases. Penalty collection, enforcement timing, and inspection frequency remain national matters, which is why enforcement culture differs across the bloc.
Are CBAM Penalties Tax-Deductible?
Whether CBAM penalty payments are tax-deductible depends on the tax law of the importer's member state of establishment. Most EU member states do not allow deduction of administrative penalties as business expenses, consistent with the principle that penalties must retain their deterrent effect. Importers should seek advice from their tax advisors in the relevant member state on the specific deductibility treatment of CBAM penalty payments.
Is CBAM Non-Compliance a Criminal Offense?
CBAM non-compliance under the certificate surrender and authorization framework is primarily an administrative regulatory offense, enforced through financial penalties by NCAs. Fraudulent or deliberately falsified emissions declarations may cross into criminal territory under member state law, particularly where the fraud involves customs law violations or tax evasion. The authorized CBAM declarant status and its related obligations are enforced administratively in the first instance, with criminal referral reserved for serious intentional violations.
Does the CBAM Penalty Apply to Historical Imports Before January 1, 2026?
The certificate surrender obligation and the associated €100 and €300–500 penalties apply only to imports made on or after January 1, 2026 (the start of the definitive phase). The transitional period (October 1, 2023 to December 31, 2025) carried a separate reporting obligation under the transitional regime, with a different penalty of €10–50 per tonne CO₂e for non-reporting. That regime is governed by Article 35 of Implementing Regulation (EU) 2023/1773 and is now historical. The CBAM regulation provides the full legislative timeline from entry into force through the current definitive phase rules.