On 15 September the European Parliament voted 464–50 (159 abstentions) to extend CBAM from raw steel and aluminium into 457 downstream product categories. The vote far exceeds the Commission's proposed 180 products and the Council's 200, pushing CBAM into fasteners, wire, springs and household goods. Importers in the paying phase must surrender certificates priced at EU ETS levels, so exporters should map HS-to-CN codes, build carbon accounts and brace for higher compliance costs as scope widens toward 2028.
Supply Chain Action Points
On 15 September the European Parliament did something that should make every exporter and importer sitting on a steel or aluminium supply chain sit up. It voted 464 to 50, with 159 abstentions, to pull 457 downstream product categories into the Carbon Border Adjustment Mechanism.
The original CBAM, the one most of us have been quietly planning around, only covered the raw stuff — blast-furnace steel, primary aluminium, cement, fertiliser, hydrogen, electricity. This vote drags finished and semi-finished goods into the net. Fasteners, wire, springs, household items made from those metals. If you ship any of that into the EU, the rules just got a lot closer to your invoice.
Here is the part that matters: the Parliament's number is 457 products. The Commission had proposed 180. The Council had settled on 200. So what passed is more than double the Commission's plan and well past what member states had informally agreed. This is not a rounding error. It is a deliberate widening, and it points straight at 2028, when the scope is expected to settle into its final shape.
Most people still think of CBAM as a tax on raw metal. It was, at the start. The mechanism was designed to stop carbon leakage — the fear that European factories would move to places with looser emissions rules and just ship the same goods back. So the first version, the one that entered its definitive paying phase on 1 January 2026, targeted the big emitters at the top of the value chain: iron and steel, aluminium, cement, fertilisers, hydrogen, and electricity. You paid for the embedded carbon in those products when you brought them into the EU.
That design had a quiet logic. Hit the primary material and you indirectly cover everything made from it. A bolt is mostly steel. Tax the steel and you have, in theory, taxed the bolt. But in practice the EU decided that logic was too soft. Importers were still finding ways to land finished and semi-finished goods without touching the carbon accounting of the underlying metal. So the Parliament moved to close that gap by naming the finished goods directly.
Read the vote carefully because the numbers tell you how serious this is. 464 votes in favour, 50 against, 159 abstentions. That is a comfortable majority in a chamber of 720 seats. The abstentions matter less than the spread between what was proposed and what passed. The Commission, the body that actually drafts legislation, had put 180 new products on the table. The Council, representing the member states, had been working around a figure of 200. Parliament blew past both and landed on 457. More than double the Commission's number. That gap is the signal.
What kind of products are we talking about? The ones that sit in every warehouse and every hardware shop. Fasteners — screws, bolts, nuts, washers. Wire and wire products. Springs. Household goods made from steel and aluminium: cookware, furniture fittings, tools, appliances casings. If your catalogue has anything fabricated from metal and you sell into the EU, assume it is now in scope until proven otherwise. The burden of proof is on you to show it is not.
For importers, the change is immediate in planning even if the paying date is still ahead. CBAM works through certificates. During the definitive phase, the EU importer — or the indirect importer who takes ownership at the border — must open a CBAM registry account and surrender certificates equal to the embedded emissions of the goods. Each certificate is priced at the weekly average of EU ETS allowance prices. Right now that sits in the 70 to 85 euros per tonne of CO2 range, depending on the week. So the cost is not a flat tariff. It floats with the European carbon market.
For exporters — and in this trade most of you are exporting from a non-EU country into the EU — the mechanism hits you indirectly but the pressure is real. Your EU customer, the importer, now needs a verified embedded-emissions figure for every covered product line. They cannot surrender a certificate without it. That means they will come to you for the numbers. If you cannot supply a defensible carbon figure, two things happen: your buyer eats the cost of conservative default values, which makes your quote uncompetitive, or they start looking for a supplier who can.
The compliance cost is what scares people. It is not only the carbon price itself. It is the accounting. You need to know, per product, per shipment, how much CO2 was emitted making it — from the ore and the alloy, through the rolling and the drawing, to the coating and the packing. That data chain has to survive scrutiny. As the scope widens toward 2028, expect the EU to tighten what counts as an acceptable emissions method. The default values that let you estimate today will be harder to use tomorrow. Build the real measurement now or pay for the slack later.
One group that badly underestimates this are the mid-sized exporters who assume CBAM only touches the giants. It does not. The mechanism is charged per shipment, not per company, and a single container of fasteners or wire already carries the full liability. The giants have compliance teams and verified data in place; they will absorb the cost efficiently and barely notice it. The mid-sized firm with no carbon account is the one that gets squeezed, because it pays the conservative default rate and cannot pass the cost through without losing the order. If your name is not on a Fortune 500 list, this is more your problem, not less.
Let me make the money concrete with a worked example, because abstract carbon prices do not change behaviour — a number on your margin does. Assume a shipment of carbon steel fasteners, HS code 7318, headed to a distributor in Rotterdam. I will lay out every assumption so you can swap in your own.
Assumptions: the shipment is worth 500,000 euros at the factory gate. It weighs 200 tonnes. The embedded emissions of these fasteners run about 2.1 tonnes of CO2 per tonne of product — that is the steel plus the drawing, threading and zinc plating. Total embedded CO2 is therefore 200 times 2.1, or 420 tonnes. The EU ETS price we use is 75 euros per tonne of CO2, a mid-range figure for the current market. In the country of origin, a carbon price has already been paid under the local scheme at roughly 8 euros per tonne of CO2. CBAM lets you deduct carbon cost already paid at origin, so the net rate is 75 minus 8, or 67 euros per tonne.
Now do the arithmetic. 420 tonnes of CO2 multiplied by 67 euros equals 28,140 euros in CBAM certificates that the importer must surrender for this one shipment. Against a 500,000 euro invoice that is 5.6 percent of the goods value landing as a pure carbon cost. Not a tariff you can negotiate away, not a freight surcharge that disappears when the oil price drops. A structural cost tied to how the product was made. And this is a modest example — fasteners are low-emission relative to, say, a tonne of primary aluminium at roughly 1.5 tonnes of CO2 per tonne of metal before you even form it.
Scale that 5.6 percent across a year of EU-bound shipments and the picture gets serious fast. If your fastener line ships 6 million euros into the EU annually, you are looking at roughly 337,000 euros of certificates a year, assuming the same mix and carbon intensity. At a 20 million euro EU turnover built on fabricated metal, the figure clears one million euros. This is the number your finance team should be modelling, not the headline tariff rate.
So what do you actually do, starting this week? Begin by map your catalogue to HS and CN codes with no shortcuts. The CBAM liability attaches to the customs classification, and the new 457 products are defined by their CN codes. Pull your top 100 EU-bound SKUs and write down the ten-digit CN code for each. Where you are unsure, get a customs broker to confirm — a wrong code is not a small error, it is the difference between in-scope and out, and between a defensible carbon figure and a guessed one.
Next, build a carbon account for each mapped product. You do not need a certified audit on day one, but you do need a defensible method. Start from your Bill of Materials: how much steel or aluminium per unit, from which mill, with what emissions intensity. Keep the mill's declarations. Where the mill has verified data under a recognised scheme, use it — that is worth real money because it beats the EU's default values. Set a target: have a working carbon account for your top 50 SKUs by 31 December 2026, and the full EU catalogue by 30 April 2027.
After that, talk to the right people before they come to you. If you are the exporter, open the conversation with your top five EU customers this quarter and tell them what embedded-emissions data you can already supply. If you are the importer, brief your suppliers now and put the data requirement into your next purchase order as a contractual line, not a polite request. The buyers and suppliers who sort this out in 2026 will own the 2028 market. The ones who wait will be quoting against a cost they cannot see.
Set trigger thresholds so this does not slip. Trigger one: when your EU-bound metal goods exceed 1 million euros in annual turnover, you should already have a CBAM registry account open and a nominated accountable person. Trigger two: when any single product line crosses 500 tonnes of embedded CO2 a year, assign it a dedicated carbon-data owner because the scrutiny on it will be heaviest. Trigger three: watch the EU ETS price weekly; if it rises above 90 euros, re-run your landed-cost model because your certificate bill just jumped.
There are alternatives, and you should know them, but none are free. You can reshore part of your production inside the EU to avoid the border mechanism entirely — expensive, slow, and only sensible at volume. You can switch to low-carbon primary metal, buying green steel or primary aluminium with verified low emissions; the certificate bill falls but the material premium is real. You can pass the cost through to the customer, but only if your contract allows it and your competitor has not already absorbed it to win the shelf.
Now the pitfalls, because most of the pain here is avoidable. The first is HS and CN mapping errors. A product quietly reclassified by a broker who does not know CBAM can land you paying on the wrong basis or, worse, not paying when you should — and the EU audits retrospectively. The second is certificate timing. Certificates must be surrendered by 31 May each year for the previous year's imports, and you buy them across the year as prices move. Buy too late and you scramble at a peak; buy too early and you tie up cash. Plan the purchases like you plan freight.
A further pitfall is the downstream pass-through assumption. Many exporters assume their EU customer will simply accept a higher price to cover CBAM. Some will. Many will instead ask you to eat part of it to keep the relationship, or will shift to a supplier in a country with a linked carbon market where the cost is lower. CBAM is explicitly designed to reward exactly that shift. Do not bet your margin on a customer's goodwill. Model the pass-through honestly and keep a contingency for the share you will carry.
A fourth trap is data quality. The EU is moving from default values to actual, verified embedded emissions. If your carbon account rests on estimates and supplier guesses, you will eventually be forced to a conservative default that costs more than the real number would have. The work you do in 2026 to tighten your data is an investment that compounds — every tonne you can document properly is a tonne you do not pay the penalty rate on.
The size of the gap between 457 and the Commission's 180 should change how you talk to your own customers. A Parliament that more than doubles what the executive proposed is signalling it will not settle for the soft version. Buyers inside the EU read that too. The prudent ones are already writing CBAM data clauses into 2027 contracts, and they will favour suppliers who can answer the carbon question on the first ask. If you show up in six months unable to quote an emissions figure, you are not negotiating a price — you are negotiating your way back onto the vendor list.
A word on the EU ETS price, because it is the variable that moves your bill more than anything you actually control. The certificate price tracks the weekly average of allowance prices, and that market is volatile. It has swung from below 60 euros to above 90 in the space of a single year on policy and energy news alone. You cannot set it, but you can stop being surprised by it. Put the ETS price on the same dashboard as your freight index and your exchange rate. When it climbs, your CBAM cost climbs with it, and the only lever you hold is the carbon intensity of what you ship.
On the supplier side, the single most valuable document you can collect this quarter is the mill's emissions declaration. Not a marketing claim, not a rounded average, but the actual intensity for the heat or coil that became your product. Mills with verified data under a recognised scheme — and more of them carry it every month — let you use actuals instead of the EU's default values, which are set conservatively and will cost you more. One tonne of CO2 shifted off the default can be worth 60 to 80 euros at today's price. Across a busy year that difference is not a rounding error; it is margin.
Do not treat 2028 as a distant line on the calendar. The direction is set: scope widens, methods tighten, default values shrink. Every Parliament vote like this one pulls the deadline forward in practice, because importers start demanding data the moment legislation is tabled, not the moment it is gazetted. The firms that look relaxed in 2028 are the ones who spent 2026 and 2027 building the boring machinery — code maps, carbon accounts, supplier declarations, a named owner. The firms that look panicked are the ones who read 'final shape in 2028' and heard 'later'.
If you want one concrete place to start, here is the first ninety days. Week one, pull the EU-bound catalogue and flag every metal SKU. Week two, get a broker to confirm the CN code on the top 100. Week four, open the conversation with your five biggest EU customers or suppliers. By day sixty, have a draft carbon account on your top 20 lines using mill declarations where you have them. By day ninety, stand up the CBAM registry account if your turnover crosses the threshold, and put the data requirement in writing on your next contract. None of it is glamorous. All of it is what separates a quote that holds from a quote that blows up.
Nobody enjoys building a carbon account for a box of screws. But this is the direction the trade is moving and the Parliament just removed any doubt about how far it will go. The firms that treat CBAM as a 2028 problem will spend 2028 firefighting. The ones that treat it as a 2026 accounting job will be quoting with confidence while their competitors are still guessing. Map the codes, build the numbers, talk to your customers, and watch the ETS price like it is one of your own inputs. That is the whole game. — Leo
- Map your top 100 EU-bound SKUs to ten-digit CN codes with a customs broker by 30 November 2026; a wrong code means the wrong CBAM liability.
- Build a working carbon account for your top 50 SKUs by 31 December 2026 and cover the full EU catalogue by 30 April 2027.
- Open your CBAM registry account and name an accountable person once EU-bound metal goods exceed 1,000,000 euros in annual turnover.
- Brief your top five EU customers or suppliers this quarter and put embedded-emissions data into the next purchase order as a contractual line.
- Track the EU ETS price weekly; if it rises above 90 euros per tonne of CO2, immediately re-run your landed-cost model.
- Assign a dedicated carbon-data owner to any product line crossing 500 tonnes of embedded CO2 per year.