Frankfurt: The European Union’s newest financial authority is quietly writing the rules that will govern how banks across the bloc hunt for dirty money. The Authority for Anti-Money Laundering and Countering the Financing of Terrorism, known as AMLA and based in Frankfurt, has moved from a paper mandate to an operating body, publishing the first of the technical standards that will flesh out the EU’s overhauled anti-laundering regime and opening consultations on more.
AMLA is the centrepiece of a package the Union adopted to fix a supervisory system that had failed too often. For years anti-money-laundering oversight rested with national authorities of uneven rigour, and a string of scandals showed how funds could flow through the weakest links while regulators pointed at one another. The new architecture replaces that fragmentation with a single European rulebook and, from the start of 2028, direct supervision by AMLA of around forty of the largest and highest-risk financial institutions operating across borders. For the rest of the sector, AMLA will set standards and coordinate the national supervisors rather than police firms itself.
The work now underway is the unglamorous but decisive part: turning broad legislation into the detailed regulatory technical standards and implementing standards that determine what compliance actually looks like. AMLA has issued final reports on an initial pair of these standards and launched consultations on further ones, covering questions such as how the risk profile of an institution should be measured and how group-wide requirements apply to subsidiaries and branches outside the Union. These are the parameters that will decide which banks fall under direct European scrutiny and how intrusive that scrutiny will be.
Cooperation with the bloc’s other financial guardians is being built in parallel. AMLA and the European Central Bank’s supervisory arm signed a memorandum of understanding to share information and align their work, recognising that money-laundering risk and prudential health are entwined; a bank riddled with illicit flows is rarely a sound one. That link matters because the ECB supervises the euro area’s biggest lenders, and gaps between the two authorities would be precisely the kind of seam that bad actors exploit.
The reform responds to a persistent worry that criminals and sanctions-evaders shop for the jurisdictions with the lightest touch. Supervisors have cautioned that firms in fast-moving corners of finance, crypto-asset services among them, may gravitate to member states with softer enforcement, and a single rulebook backed by a central authority is meant to shut down that arbitrage. Whether it succeeds will depend on how demanding the technical standards prove and on AMLA’s willingness to use its powers once direct supervision begins.
For banks and payment firms the message is to prepare rather than wait. The obligations that flow from the new rulebook, on customer due diligence, on identifying beneficial owners, on monitoring transactions, will be more uniform and, for the largest institutions, enforced from Frankfurt rather than a national capital. The scrutiny does not switch on until 2028, but the standards being drafted now are what compliance teams will have to live by, and the window to adapt is already open.
