The European Union’s anti-money laundering and counter-terrorist financing framework is entering a new phase of development. As the European Anti-Money Laundering Authority (AMLA) begins its operations, the focus of regulatory reform is increasingly shifting towards establishing consistent supervisory practices, strengthening data-driven operations and developing technological capabilities. This process not only represents a transformation of the supervisory architecture but may also have a significant long-term impact on the operations of financial institutions and crypto-asset service providers.
This newsletter builds on the key findings of a four-part series of professional articles. “AMLA Becomes Operational – Key Directions of the 2026–2028 Work Programme” and “AMLA Becomes Operational – Key Directions of the 2026 Work Programme” present the Authority’s strategic priorities, the steps involved in building the supervisory system, and the anticipated development of direct and indirect supervision through AMLA’s first work programmes.
The article “AMLA’s Data-Driven Vision: AI, Data Analytics and the Next Generation of European AML Supervision” examines how AMLA’s planned central data ecosystem, automated data collection and use of artificial intelligence may transform future AML/CFT supervision, and what new data management expectations they may create for financial institutions.
The article “AMLA, the Travel Rule and the Next Compliance Challenges” examines the new AML/CFT environment from the perspective of crypto-asset service providers, with particular regard to Travel Rule requirements, the operational challenges faced by CASPs and the anticipated impact of the supervisory convergence supported by AMLA.
Below, we bring the findings of these articles together within a single framework to present the key directions of AMLA’s operations and the practical and strategic implications that may shape the development of European AML/CFT compliance in the coming years.
AMLA as a Driver of Supervisory Convergence
AMLA’s work programme for 2026–2028 clearly demonstrates that the Authority’s primary objective is to lay the practical foundations for a consistent European AML/CFT system. In the coming years, particular emphasis will be placed on regulatory technical standards, common supervisory methodologies, and the development of direct and indirect supervisory frameworks. The aim is not merely to harmonise EU rules, but to create a supervisory environment in which differences between Member State practices gradually diminish while the risk-based and outcome-oriented approach is strengthened.
An integral part of this process is the development of cooperation between supervisory authorities, financial intelligence units and the private sector. The information-sharing partnerships and professional forums planned by AMLA point towards the emergence of an integrated AML/CFT community in which knowledge sharing and joint risk management play an increasingly important role.
The Rise of Data-Driven Supervision
One of the most important elements of AMLA’s programme is its emphasis on data-driven operations. The Authority plans to establish a central AML/CFT data ecosystem and an EU-level AML/CFT database, which could enable the structured collection and comparable analysis of supervisory information. The objective is to identify risks more accurately, support supervisory cooperation and strengthen supervisory decision-making.
The work programme specifically highlights the role of artificial intelligence, automated data collection and advanced data analytics solutions. These tools are expected to support the earlier detection of money-laundering trends, the analysis of complex networks and the risk-based allocation of supervisory resources. Although AMLA does not currently prescribe specific technological solutions, the strategic direction clearly points towards the development of data-centric supervision.
Data Quality as a Compliance Issue
The emergence of a data-driven AML/CFT system also creates new priorities for financial institutions. AML compliance can increasingly no longer be understood solely as a matter of documentation or policies; the focus is gradually shifting towards the quality, completeness and usability of data. The management of AML data assets, the development of central data models, automated regulatory reporting and auditable data management are expected to rank among the most important areas of development in the coming years.
Based on the evolution of supervisory expectations, the decisive question in the longer term may not only be whether an institution has the necessary documentation, but also the quality, structure and speed with which customer, ownership, monitoring and risk data are available for risk-management and supervisory processes.
The Travel Rule and the Compliance Challenges Facing Crypto-Asset Service Providers
The evolving regulatory environment has a particularly significant impact on crypto-asset service providers. Alongside the harmonised framework established by the MiCA Regulation, the application of the Travel Rule is intended to ensure the transparency and traceability of information relating to transfers of crypto-assets. The objective is for crypto-asset transactions to provide a level of verifiability for AML/CFT purposes comparable to that of traditional financial services.
The compliance challenges, however, are not limited to the transmission of data. CASPs must also address due diligence on counterparty institutions, ensure data quality, manage incomplete or incorrect information, and assess the AML/CFT risks associated with self-hosted wallets and counterparty relationships. Travel Rule data are increasingly becoming an integral part of transaction monitoring, sanctions screening and blockchain analytics processes.
The Next Stage in the Evolution of AML/CFT Compliance
AMLA’s first work programmes clearly indicate that, in the coming years, the European AML/CFT system will evolve towards more consistent supervision, more intensive information sharing and data-driven operations. Considerations relating to data quality, automation and the demonstrable management of risks are expected to play an increasingly important role in assessing compliance capabilities.
For financial institutions and crypto-asset service providers, AMLA’s first years of operation therefore represent not only new regulatory requirements, but also the emergence of a new operating environment that may shape the long-term direction of European AML/CFT compliance. Organisations that begin mapping their data assets, reviewing their processes, developing their technological capabilities and preparing for increasingly data-driven supervisory expectations in good time may be better positioned—while ensuring that process improvements also enhance, or at least preserve, the customer experience.
Newsletter prepared by: Bence Tóth
