The transformation of the EU anti-money laundering framework: regulatory and operational implications
The transformation of the European Union’s anti-money laundering and counter-terrorist financing framework is a complex process involving changes to regulation, supervisory operations and institutional practice. The establishment of the European Anti-Money Laundering Authority (AMLA, or the Authority), together with the introduction of the Anti-Money Laundering Regulation (AMLR), marks a shift towards a more uniform, methodologically consistent and operationally coordinated EU approach.
This newsletter builds on the key findings of a four-part professional article series. The articles entitled “The European Anti-Money Laundering Authority (AMLA)” and “A paradigm shift in EU anti-money laundering regulation” set out the regulatory background, while the articles examining the practical implications of the AMLR and AMLA describe the operational impact of the changes.
The following sections summarise the main directions of the EU anti-money laundering reform and the key areas of practical adaptation, bringing together the findings of these articles in a single, coherent framework.
The starting point of the reform: a fragmented regulatory environment
The previous system was based on rules implemented by individual Member States, which in practice led to divergent regulatory and supervisory approaches. As a result:
- anti-money laundering practices differed across Member States,
- internationally active institutions faced inconsistent requirements,
- regulatory differences created opportunities for arbitrage.
The money laundering risks observed in the financial system, combined with the expansion of cross-border activities, made clear that a fragmented approach had limited effectiveness.
The AMLR as a uniform regulatory basis: requirements applied at operational level
One of the cornerstones of the new anti-money laundering framework is the AMLR, which introduces directly applicable, uniform rules across the European Union. This means that anti-money laundering requirements will apply in the same form throughout the EU, rather than through national implementation measures.
The objective of the regulation is to ensure that requirements are not only defined at a conceptual level but are also reflected consistently in day-to-day operations, thereby reducing the risks arising from differences between Member States.
The changes directly affect the operations of financial and other institutions in several specific areas:
- customer due diligence and KYC (Know Your Customer): the thresholds triggering customer due diligence will be harmonised and lowered,
- cash use: an EU-wide cash payment ceiling of EUR 10,000 will be introduced, together with stricter customer due diligence obligations,
- scope of obliged entities: new actors, such as crypto-asset service providers, crowdfunding platforms and luxury goods traders, will be brought within scope.
In practice, this is already driving short-term operational adaptation, for example through changes to front-office processes, monitoring systems and reporting logic.
It is also becoming apparent that some institutions, in line with their own risk profiles, are setting internal limits below the EU ceiling.
AMLA as a new supervisory pillar: direct control and indirect market impact
The establishment of AMLA is a key element in the transformation of EU-level supervisory operations. The Authority is designed to:
- strengthen supervisory coordination across the European Union,
- enhance cooperation between financial intelligence units,
- establish a uniform methodological framework.
The supervisory model operates at two levels:
- direct supervision of the highest-risk institutions,
- indirect market impact through the harmonisation of national supervisory practices.
As a result, the Authority’s influence extends across the market as a whole.
In practice, this is reflected in supervisors treating AMLA’s multiannual programme as a “market roadmap” and expecting institutions to incorporate it into their preparation programmes.
A shift in supervisory approach: strengthening data-driven and convergent operations
One of the defining features of the new system is the growing importance of data-driven supervisory operations. AMLA’s programme focuses primarily on the following areas:
- completion of the single rulebook,
- supervisory convergence,
- stronger cooperation between financial intelligence units (FIUs).
In practice, this means more structured data collection and a more consistent approach to risk analysis.
At the same time, the supervisory focus is also changing, with increasing emphasis on actual operational effectiveness rather than formal compliance alone.
This is illustrated by the fact that some supervisors are already using risk-based outcome tests to assess the actual alignment between monitoring and risk classification.
Operational adaptation: integrating anti-money laundering requirements into day-to-day operations
For institutions, the new framework is primarily an operational challenge. Its requirements affect several areas at the same time:
- customer due diligence practices,
- data provision and reporting,
- the internal control environment,
- group-level governance.
Data management is becoming particularly important. Institutions need to review how customer risk, ownership and monitoring data are managed and structured.
Information exchange and reporting are increasingly shifting towards structured, machine-readable formats. One practical manifestation of this trend is that reports are becoming more detailed and more standardised.
A specific supervisory example points in the same direction: the Maltese FIU has informed the supervised institutional sector in advance that the uniform EU templates will require more structured and more detailed reports.
Group-level extension: expanding the scope of obliged entities and addressing integration challenges
The extension of the regulation creates new tasks, particularly at corporate group level. Under the new expectations:
- the range of obliged entities is expanding,
- new types of activities are being brought within AML scope,
- group-level frameworks need to be reconsidered.
In practice, this means that crypto-asset service providers or crowdfunding subsidiaries, for example, are being integrated into compliance systems.
Technological operations: new operational conditions for compliance
It is becoming increasingly clear that compliance can no longer be ensured solely through manual or fragmented operations. AMLA’s mandate also extends to the development of relevant technical standards.
As a result:
- data quality and data integration are becoming key factors,
- the development of monitoring and reporting systems is essential,
- compliance is becoming closely linked to IT capabilities.
In practice, this is reflected, for example, in the launch of multi-year data and systems development programmes at larger institutions.
Operational efficiency will also become increasingly important, including the timely completion of high-volume identification tasks, keeping customer profiles up to date, and effectively avoiding or managing false alerts. Artificial intelligence-based solutions are already being used in some of these areas and are likely to be adopted more widely in the future.
Towards uniform regulation and an integrated operating model
The purpose of the new framework established by AMLA and the AMLR is to ensure that anti-money laundering requirements are applied uniformly and effectively in practice across the European Union. The changes affect regulation, supervisory approaches and institutional operations simultaneously.
Practical experience shows that compliance is increasingly becoming a complex operational capability that brings together data management, risk management, organisational operations, process management and the technological solutions that support them.
Contributors to the preparation of this newsletter: dr. Bence Tóth and Ákos Pintér