Compliance Atlas/
Home/Topics/Amld
TOPICS·FINANCE

EU Anti-Money Laundering Directive (AMLD)

EU framework to prevent money laundering and terrorist financing through due diligence and reporting.

EUUpdated May 2026
IN A NUTSHELL
What
EU anti-money laundering framework requiring financial institutions and designated entities to prevent money laundering and terrorist financing.
Who
Banks, payment institutions, crypto providers, lawyers, accountants, real estate agents, dealers in high-value goods, and other obliged entities.
When
AMLD6 adopted 2024, applicable from July 2027. New AML Authority (AMLA) operational from 2025 with direct supervision powers.
Penalty
Up to EUR 10 million or 10% of annual turnover for obliged entities; personal criminal liability for responsible officers.
OVERVIEW

Now in its sixth iteration (AMLD6, Directive 2024/1640), the EU Anti-Money Laundering framework represents one of the bloc's most established and continuously evolving regulatory regimes. The AML directives, together with the newly adopted Anti-Money Laundering Regulation (AMLR), establish a comprehensive system to prevent the financial system from being used for money laundering and terrorist financing. The latest legislative package, adopted in 2024, creates a single EU rulebook through the directly applicable AMLR and establishes a new EU-level Anti-Money Laundering Authority (AMLA) to supervise the highest-risk cross-border entities.

The AML framework applies to a broad range of obliged entities, including credit institutions, financial institutions, payment service providers, crypto-asset service providers, auditors, tax advisors, real estate agents, dealers in high-value goods, and, increasingly, providers of virtual asset services. AMLD6 expands the scope further, bringing additional sectors and professions into the AML compliance perimeter. Any entity handling financial transactions or providing services that could be exploited for illicit purposes must implement AML controls.

Core obligations revolve around customer due diligence (CDD), including verifying customer identity, understanding the nature of the business relationship, and identifying beneficial owners. Enhanced due diligence is required for higher-risk situations, such as transactions with politically exposed persons (PEPs), complex corporate structures, or jurisdictions with weak AML controls. Obliged entities must monitor transactions on an ongoing basis, report suspicious transactions to national Financial Intelligence Units (FIUs), and maintain records for at least five years. Internal AML compliance programs, staff training, and independent audits are mandatory.

The establishment of AMLA, expected to become operational in 2025 with direct supervisory powers from 2028, represents a structural shift in EU AML enforcement. AMLA will directly supervise the most significant cross-border financial entities, coordinate national FIUs, and issue technical standards and guidance. This centralisation aims to address the inconsistencies in AML enforcement that have been exposed by high-profile money laundering scandals across EU Member States.

The AML framework interacts with financial services regulation broadly, as AML obligations apply alongside prudential and conduct-of-business requirements. The Markets in Crypto-Assets Regulation (MiCA) brings crypto-asset service providers explicitly within the AML perimeter. For businesses in the financial sector and beyond, AML compliance is a foundational obligation that requires continuous investment in systems, processes, and training to keep pace with evolving threats and regulatory expectations.

KEY MILESTONES
May 28, 2026
YOU ARE HERE
WHO DOES THIS AFFECT?

Select your company type for tailored compliance guidance.

KEY OBLIGATIONS
Implement customer due diligence (CDD) including beneficial ownership identification
Apply enhanced due diligence for PEPs, high-risk countries, and complex structures
Monitor transactions on an ongoing basis and report suspicious activity to FIU
Maintain AML compliance program with designated officer, training, and independent audit
Comply with cash payment limits (EUR 10,000 under AMLR)
YOUR FIRST STEP

Prepare for the transition from AMLD5 to AMLD6 and AMLR by conducting a gap analysis against the new single rulebook requirements

KEY COMPLIANCE REQUIREMENTS
01
Customer due diligence
Verify customer identity, understand ownership structures, and assess the business relationship purpose and nature.
02
Suspicious transaction reporting
Monitor transactions and report suspicious activities to the national Financial Intelligence Unit promptly.
03
Risk assessment
Conduct business-wide and individual risk assessments and apply enhanced due diligence for higher-risk scenarios.
04
Beneficial ownership
Identify and verify beneficial owners; access and maintain data in national beneficial ownership registers.
05
Record keeping
Retain customer identification data and transaction records for at least 5 years after the end of the relationship.
06
Internal controls
Establish AML/CFT compliance functions, employee training programmes, and independent audit procedures.
KEY INTERPRETATIONS & FAQ
RELATED TOPICS
Financial Services RegulationEU Markets in Crypto-Assets Regulation (MiCA)
← ALL TOPICS