EU carbon border rules are moving from preparation to operational scrutiny, and a new compliance vulnerability is emerging in cross-border metal supply chains. The European Union’s Carbon Border Adjustment Mechanism (CBAM) is drawing attention to cases where steel or aluminium used in exported goods cannot be fully substantiated for embedded emissions. The problem is most acute when metal is produced in one country, processed in another, and then exported to the EU as a covered or potentially covered product.
Whether the exported article triggers CBAM depends on its Combined Nomenclature (CN) classification and the applicable product rules. Even when customs origin changes after processing, the need to provide emissions information for covered precursor materials can remain. This creates a compliance task that follows the material’s production history rather than stopping at the final exporter’s paperwork.
The definitive CBAM regime, which began operating in January 2026, requires an authorised EU declarant to calculate embedded emissions for goods within scope using the relevant methodology. Where actual emissions are used, the figures must be supported by the prescribed verification. In parallel, the European Commission publishes product- and country-specific default values for situations where their use is permitted under the legislation.
Shipment-level calculations also cannot be replaced by broad corporate claims. Data requirements vary by product and production route, meaning a general environmental statement does not automatically stand in for an emissions calculation covering a specific consignment. This distinction becomes more consequential as downstream coverage is discussed, because precursor traceability would need to be supported across longer information chains.
For example, a Turkish metal component made using Chinese steel may require documented links between the EU importer, the component manufacturer and the upstream steel mill. The documentation burden depends on the final scope and accounting requirements tied to the finished product. Securing that chain can be difficult because suppliers may treat fuel consumption, production volumes and emissions-allocation figures as commercially sensitive.
As a result, importers and manufacturers may need contractual arrangements that enable evidence sharing with authorised verifiers without spreading confidential industrial data more widely than necessary. This approach is intended to preserve compliance while limiting unnecessary disclosure across parties that do not need full technical detail.
Three recurring documentation weaknesses can raise CBAM risk along these supply chains. First, a supplier may name the fabricator of a component but fail to identify the installation that produced the steel or aluminium used in it. That gap can leave an importer without upstream information required under the applicable rules.
Second, embedded emissions may be calculated using corporate-group level data rather than figures tied to the relevant installation and product. Where methodologies require more granular production inputs, group-wide numbers may not provide an adequate basis for calculations. Third, reported material quantities may not reconcile with purchase records, production volumes and invoices, undermining the credibility of declarations.
When quantities do not match supporting documents, there is also a risk that low-emission material is attributed to multiple products without adequate records. In practice, this makes consistency between production data, procurement documentation and emissions calculations a core element of supply-chain control rather than a purely administrative exercise.
The compliance challenge has direct relevance for manufacturers in Serbia, Türkiye and across the Western Balkans that rely on internationally sourced metal feedstock. A Serbian processor exporting a product already covered by CBAM remains subject to applicable requirements regardless of whether its steel or aluminium originated in China or another third country. At the same time, inputs being covered does not automatically mean finished goods are covered.
A product currently outside CBAM’s scope should not be treated as already subject to direct obligations solely because its metal input is covered. Any future liability would depend on how that product is classified under CN and which legislation applies at the relevant time. For firms operating across multiple jurisdictions, distinguishing customs treatment of finished articles from information needed for precursor emissions becomes essential.
Contracts and internal controls are therefore expected to align responsibilities across the chain. Supply agreements should specify which party provides upstream emissions information, what verification standards apply, how long evidence must be retained and how corrected data will be transmitted to the authorised EU declarant. Implementing those terms also requires coordination among quality assurance teams, accountants, customs specialists and production engineers.
No single function typically holds all elements needed to connect material purchases, manufacturing processes, product quantities and emissions calculations. Manufacturers able to trace metal from procurement through final production and substantiate allocations under independent review may be better placed to meet customer requirements in EU markets. Conversely, companies unable to reconstruct relevant production history could face commercial disadvantages even if their manufacturing costs remain competitive.
Overall, CBAM’s operational start in January 2026 has turned precursor traceability into a practical compliance requirement for exporters of steel- and aluminium-based products. The combination of shipment-level calculation needs, default-value limits and documentation gaps means that multi-country processing can create evidence challenges even when customs origin changes. For regional exporters and EU importers alike, maintaining consistent production records tied to verified embedded emissions is now central to reducing both regulatory exposure and customer-facing commercial risk.