Skip Navigation
Understanding the 2027 EU Anti-Money Laundering Regulations
The European Union’s 2027 AML framework introduces the most comprehensive anti-money laundering regulations to date. With a focus on harmonisation, risk-based compliance, and expanded scope, these reforms will significantly impact businesses across all sectors. Learn what the new rules mean, how to comply, and why preparation is essential for protecting your organisation from money laundering risk.
EU AML Regulations 2027: Updating Your Customer Due Diligence
Preventing money laundering and terrorist financing has long been a core priority within the European Union. Over the past two decades, the fight against money laundering has led to the gradual strengthening of anti-money laundering regulations, addressing evolving threats such as the misuse of virtual assets, high-value goods, and inconsistent enforcement across Member States. Despite ongoing reforms, national variations in the transposition of EU directives have made money laundering supervision fragmented and less effective.
To address this, the European Commission introduced a comprehensive Anti-Money Laundering and Countering the Financing of Terrorism (AML/CFT) legislative package in 2024. This package introduces a directly applicable AML Regulation, an updated Anti-Money Laundering Directive (AMLD VI), the establishment of a new EU Anti-Money Laundering Authority (AMLA), and further structural enhancements. The package begins to apply across the EU from 10 July 2027, with some sector-specific requirements coming into force at later dates. The sections below outline the scope of the regulations, expected impact, and how A2CO can support your organisation in achieving full compliance with AML requirements.
The 2027 Anti Money Laundering Regulation Package
Harmonised AML Regulation Across the European Union
A major shift under the 2027 framework is the replacement of directive-based rules with a single, directly applicable AML Regulation. This unified approach eliminates discrepancies between national laws, creating consistency across all Member States in the effort to prevent money laundering and terrorist financing.
The regulation standardises key obligations, including:
-
Customer due diligence requirements
-
Identification of the beneficial owner
-
Ongoing monitoring of business relationships
-
Record-keeping and suspicious activity reporting
-
Mandatory policies and procedures for AML compliance
Transparency of Beneficial Ownership and Politically Exposed Persons (PEPs)
New rules require the use of interoperable, EU-wide registers of beneficial owners. These registers must meet standardised criteria, improving transparency and the ability to trace the origin of the funds.
In addition, stricter measures apply to dealings involving politically exposed persons. These include:
-
Enhanced due diligence checks
-
Additional risk assessment procedures
-
Increased scrutiny of the risk of money laundering or terrorist financing
EU-Wide Limits on Cash Transactions
To combat money laundering and terrorism financing, the new Regulation establishes an EU-wide cash transaction limit of €10,000, with mandatory identity verification for cash payments exceeding €3,000. While individual Member States may impose stricter thresholds, these measures ensure a harmonised minimum standard across the EU for enforcing money laundering regulations.
Suspicious Activity Reporting Obligations
The obligations for obliged entities to report suspicious transactions or suspicious activity remains. The Compliance Officer (MLRO) will have an obligation to report such transactions or activity to the FIAU when there is knowledge. suspicion or reasonable grounds to suspect Money Laundering or funding of terrorism.
Increasing the Scope of the Regulations to High Value Goods
The scope of the regulations has been broadened to include previously unregulated industries. Businesses involved in high-value goods such as jewelry, luxury vehicles, artwork, and precious metals are now considered obliged entities under AML law.
This is a significant change that may require additional investment, staff training, and system upgrades to be compliant with the regulations.
These businesses must:
-
Verify the identity of customers
-
Conduct a risk-based approach to customer assessments
-
Apply enhanced due diligence for higher risk transactions
-
Implement written AML compliance procedures
Alignment with the Criminal Law Framework
To support join investigations and help prevent regulatory arbitrage across jurisdiction, while also enabling clearer enforcement and cooperation, the regulation aligns definitions across all Member States relating to:
-
Money laundering
-
Terrorist financing
-
Predicate offences linked to the proceeds of crime
AML Compliance Requirements for Crypto-Assets and Virtual Transactions
The new rules bring crypto-asset service providers fully into the AML regulatory scope. These requirements are critical to reducing the risk of money laundering and terrorist financing in digital asset environments. Providers must now:
-
Verify the identity of customers using self-hosted wallets
-
Report suspicious transactions involving virtual assets
-
Apply risk-based controls for transfers involving third countries
-
Maintain detailed customer information and report suspicious activity
Risk-Based Measures for High-Risk Third Countries
The EU will implement a centralised mechanism to identify high-risk third countries, aligned with international standards and supported by delegated powers. This unified approach strengthens EU defenses against international threats and improves consistency in how AML risks are addressed.
Where these countries are involved, financial institutions must:
-
Perform enhanced due diligence
-
Assess the money laundering risk
-
Where necessary, apply countermeasures and financial sanctions
National Risk Assessments and Supervisory Cooperation
Under the 2027 AML package, Member States must adopt an integrated model that supports more effective detection, investigation, and prosecution of financial crime.
They are required to:
-
Conduct regular national risk assessments
-
Improve cooperation between national Financial Intelligence Units (FIUs)
-
Coordinate efforts with the European Public Prosecutor’s Office (EPPO) and the European Anti-Fraud Office (OLAF)
EU Anti-Money Laundering Authority (AMLA)
The newly established Anti-Money Laundering Authority (AMLA) is a central pillar of the EU’s updated AML regime. Operational since 2024 and expected to be fully functional by 2028, AMLA provides central oversight that significantly reduces the risk of regulatory arbitrage and creates a fairer, more resilient financial system.
Its responsibilities include:
-
Issuing AML compliance standards and technical guidance
-
Supervising high-risk cross-border financial institutions
-
Coordinating money laundering supervision at the EU level
-
Promoting consistent implementation of anti-money laundering regulations across Member States
Harmonised AML Regulation Across the European Union
A major shift under the 2027 framework is the replacement of directive-based rules with a single, directly applicable AML Regulation. This unified approach eliminates discrepancies between national laws, creating consistency across all Member States in the effort to prevent money laundering and terrorist financing.
The regulation standardises key obligations, including:
-
Customer due diligence requirements
-
Identification of the beneficial owner
-
Ongoing monitoring of business relationships
-
Record-keeping and suspicious activity reporting
-
Mandatory policies and procedures for AML compliance
Transparency of Beneficial Ownership and Politically Exposed Persons (PEPs)
New rules require the use of interoperable, EU-wide registers of beneficial owners. These registers must meet standardised criteria, improving transparency and the ability to trace the origin of the funds.
In addition, stricter measures apply to dealings involving politically exposed persons. These include:
-
Enhanced due diligence checks
-
Additional risk assessment procedures
-
Increased scrutiny of the risk of money laundering or terrorist financing
EU-Wide Limits on Cash Transactions
To combat money laundering and terrorism financing, the new Regulation establishes an EU-wide cash transaction limit of €10,000, with mandatory identity verification for cash payments exceeding €3,000. While individual Member States may impose stricter thresholds, these measures ensure a harmonised minimum standard across the EU for enforcing money laundering regulations.
Suspicious Activity Reporting Obligations
The obligations for obliged entities to report suspicious transactions or suspicious activity remains. The Compliance Officer (MLRO) will have an obligation to report such transactions or activity to the FIAU when there is knowledge. suspicion or reasonable grounds to suspect Money Laundering or funding of terrorism.
Increasing the Scope of the Regulations to High Value Goods
The scope of the regulations has been broadened to include previously unregulated industries. Businesses involved in high-value goods such as jewelry, luxury vehicles, artwork, and precious metals are now considered obliged entities under AML law.
This is a significant change that may require additional investment, staff training, and system upgrades to be compliant with the regulations.
These businesses must:
-
Verify the identity of customers
-
Conduct a risk-based approach to customer assessments
-
Apply enhanced due diligence for higher risk transactions
-
Implement written AML compliance procedures
Alignment with the Criminal Law Framework
To support join investigations and help prevent regulatory arbitrage across jurisdiction, while also enabling clearer enforcement and cooperation, the regulation aligns definitions across all Member States relating to:
-
Money laundering
-
Terrorist financing
-
Predicate offences linked to the proceeds of crime
AML Compliance Requirements for Crypto-Assets and Virtual Transactions
The new rules bring crypto-asset service providers fully into the AML regulatory scope. These requirements are critical to reducing the risk of money laundering and terrorist financing in digital asset environments. Providers must now:
-
Verify the identity of customers using self-hosted wallets
-
Report suspicious transactions involving virtual assets
-
Apply risk-based controls for transfers involving third countries
-
Maintain detailed customer information and report suspicious activity
Risk-Based Measures for High-Risk Third Countries
The EU will implement a centralised mechanism to identify high-risk third countries, aligned with international standards and supported by delegated powers. This unified approach strengthens EU defenses against international threats and improves consistency in how AML risks are addressed.
Where these countries are involved, financial institutions must:
-
Perform enhanced due diligence
-
Assess the money laundering risk
-
Where necessary, apply countermeasures and financial sanctions
National Risk Assessments and Supervisory Cooperation
Under the 2027 AML package, Member States must adopt an integrated model that supports more effective detection, investigation, and prosecution of financial crime.
They are required to:
-
Conduct regular national risk assessments
-
Improve cooperation between national Financial Intelligence Units (FIUs)
-
Coordinate efforts with the European Public Prosecutor’s Office (EPPO) and the European Anti-Fraud Office (OLAF)
EU Anti-Money Laundering Authority (AMLA)
The newly established Anti-Money Laundering Authority (AMLA) is a central pillar of the EU’s updated AML regime. Operational since 2024 and expected to be fully functional by 2028, AMLA provides central oversight that significantly reduces the risk of regulatory arbitrage and creates a fairer, more resilient financial system.
Its responsibilities include:
-
Issuing AML compliance standards and technical guidance
-
Supervising high-risk cross-border financial institutions
-
Coordinating money laundering supervision at the EU level
-
Promoting consistent implementation of anti-money laundering regulations across Member States
Future-Proofing AML Frameworks
The Regulation includes provisions to remain responsive to emerging threats, with the first full review scheduled for 2030 and subsequent updates every three years. The European Commission will periodically:
-
Review reporting thresholds and update AML policies
-
Assess new sectors and asset classes being used for money laundering
-
Reassess ongoing monitoring and suspicious activity reporting standards
Get Ready for the New AML Framework
The 2027 EU AML Regulation package marks a transformational step in the EU’s approach to combatting money laundering and terrorist financing. From regulating crypto transactions to supervising high-risk sectors and establishing a central AML authority, these changes redefine AML requirements across the continent.
Organisations that prepare early will not only mitigate risk and ensure compliance but also gain reputational benefits through improved governance and transparency.
Get in touch today to learn how we can help your business remain compliant, proactive, and secure under the new AML regime.
Our Services
Our services are designed to help you build a firm free from money laundering risks, aligned with both EU regulations and international best practices. A2CO provides tailored support to help your organisation:
-
Develop and implement written AML compliance policies
-
Conduct customer due diligence and risk assessments
-
Stay compliant with the New AML Regulation (Single Rulebook)
-
Prepare for the new AML framework coming into force in July 2027
Why Choose A2CO
-
Clear, tailored AML guidance for your business
-
Experience with EU and Malta regulatory frameworks
-
End-to-end support from policy drafting to audits
-
Trusted by regulated firms and financial institutions
-
Practical, risk-based solutions that scale with you
Frequently Asked Questions
The EU AML Single Rulebook is a unified set of directly applicable anti-money laundering rules across EU member states. It aims to ensure consistency and close regulatory gaps
The New regulations will apply to Maltese ‘obliged entities’ on the 10th of July 2027. Such entities must follow the new AML Regulations under the Single Rulebook.
AML directives require national transposition into law, while the AML rulebook will be directly applicable across the EU without the need for local legislation.
The 4th Directive established a risk-based AML framework; the 5th enhanced transparency and access to beneficial ownership; the 6th defined criminal offences and harmonized sanctions across the EU.
AMLA (Anti-Money Laundering Authority) is the new EU-level supervisor for AML/CFT. It strengthens oversight and coordinates AML enforcement across the EU.
