Why the EU is rewriting its anti-money-laundering rules
For years, the EU tackled money laundering through directives that each Member State transposed in its own way. The result was a patchwork: the same obligation could look different in Sweden than in Spain, and criminals exploited the gaps. The new EU anti-money-laundering package replaces much of that fragmentation with a single, directly applicable rulebook and a central supervisor. For any business subject to AML duties – banks, but also many advisers, agents and service providers – this is the most significant change in a decade.
The single rulebook: the AML Regulation
At the centre sits the AML Regulation (AMLR), which applies directly from 10 July 2027. Because it is a regulation rather than a directive, it takes effect without national transposition and leaves far less room for divergent local rules. It harmonises customer due diligence, the definition of politically exposed persons, beneficial-ownership transparency and an EU-wide cash-payment limit of €10,000 for traders in goods.
A new EU supervisor: AMLA
The package also creates the Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA), seated in Frankfurt and operational since 1 July 2025. AMLA will coordinate national supervisors, issue technical standards and guidelines, and from 2028 directly supervise a group of the highest-risk financial institutions. Much of the detailed rulebook – the regulatory and implementing technical standards – is being developed now, with a large share due by 10 July 2026.
What changes for beneficial ownership
The reform reinforces the 25% threshold for identifying beneficial owners and tightens the rules on who must be looked through when ownership is layered across companies and trusts. Businesses will need to revisit how they establish and document ultimate ownership, especially for complex or cross-border structures.
Practical example
A Swedish payment firm currently applies due-diligence rules drawn from the Swedish transposition of the sixth AML directive. Under the AMLR, the same rules will flow directly from EU law. The firm should map every current process – customer onboarding, PEP screening, ownership checks, record-keeping – against the coming Regulation, identify where national practice diverges, and plan the migration well before July 2027. The first AMLA peer reviews are expected soon after, and gaps will show up as findings.
Common mistakes companies make
The biggest is treating 2027 as distant. The technical standards that define exactly how the rules work are landing through 2026, so waiting means redesigning processes against a moving target. Another mistake is assuming only banks are affected; the AML regime reaches many non-financial businesses, from real-estate agents to certain advisers and crypto-asset service providers. A third is neglecting documentation – supervisors increasingly judge firms on whether their reasoning is written down, not just whether a decision was reasonable.
Recommended actions
Confirm whether your business is an obliged entity under the AML regime. Assign ownership of the transition internally and track AMLA’s technical standards as they are published. Gap-analyse your customer due diligence, PEP handling and beneficial-ownership records against the AMLR. Update your cash-handling policy for the €10,000 limit where relevant. Build the documentation infrastructure now, so the first supervisory review finds a coherent, evidenced system.
Frequently asked questions
When does the AML Regulation apply?
The AMLR applies directly across the EU from 10 July 2027, replacing much of the current directive-based framework.
What is AMLA and where is it based?
AMLA is the EU’s new anti-money-laundering authority, based in Frankfurt and operational since 1 July 2025, with direct supervision of high-risk firms from 2028.
Does the cash limit affect ordinary retailers?
Yes. The EU-wide €10,000 limit on cash payments applies to traders in goods, so retail businesses accepting large cash sums need to adapt.
Conclusion
The AML package moves Europe from a patchwork of national rules to a single rulebook overseen by a central authority. Firms that map their processes against the AMLR now – rather than waiting for 2027 – will face a controlled migration instead of a scramble. Lawgent helps obliged entities interpret the new requirements, run gap analyses and build compliant, well-documented AML frameworks. Contact us to start preparing for the single rulebook.
