Valletta: On an island whose financial reputation has more than once been bruised by scandal, the arrival of a single European anti-money-laundering authority is being watched with particular attention. Over the past fortnight that authority, based in Frankfurt and known by the blunt acronym AMLA, has moved from being an institution that exists on paper to one that is busily writing the rulebook everyone else will have to follow.
The pace tells the story. In mid-May the authority held a public hearing on draft technical standards covering group-wide requirements, the rules that decide how a banking or financial group spread across several countries must organise its defences against dirty money. More than six hundred and fifty participants dialled in, a figure that says as much about industry anxiety as it does about civic enthusiasm. A week and a half later came a second hearing, this time on guidelines for business-wide risk assessment, the exercise by which firms are meant to work out where they are most exposed to being used as a laundering conduit. A further webinar, scheduled for the second week of June, will walk firms through the reporting package that determines which entities fall under the authority’s direct eye.
This burst of activity is the visible edge of a deeper shift in how Europe polices financial crime. For years the task was left to a patchwork of national supervisors of wildly varying appetite and competence, a fragmentation that allowed tainted money to slosh from a permissive jurisdiction into the wider single market. A string of high-profile cases involving banks in the Baltic states, Scandinavia and elsewhere made the case for centralisation hard to rebut. AMLA formally began operations in the summer of last year, and at the start of this year it absorbed the anti-money-laundering mandates that had previously sat with the European Banking Authority, consolidating in one place powers that had been awkwardly bolted onto a body built for something else.
The authority’s ambitions are deliberately concrete. From 2028 it is due to take on the direct supervision of around forty of the highest-risk financial institutions operating across the bloc, the large, complex, cross-border firms whose failures would do the most damage. For everyone else, AMLA will set the standards and ride herd on the national supervisors charged with applying them, a hub-and-spoke model meant to end the era of the weakest link. The technical standards and guidelines being thrashed out in these spring hearings are the scaffolding for that regime, and the unglamorous detail being argued over now will shape compliance costs for thousands of banks, payment firms and crypto businesses.
The reception has been mixed in the way these things usually are. Banks broadly welcome a single rulebook over twenty-seven divergent ones, while quietly bracing for the expense of meeting it. Smaller firms worry about being held to standards designed with global giants in mind. Campaigners against financial crime, for their part, warn that an authority is only as good as the resources and political backing it is given, and that the real test will come the first time AMLA has to face down a powerful institution or an uncooperative national government.
For now the authority is in the patient, procedural phase of its life, consulting and drafting rather than fining and sanctioning. But in places like Valletta, where the gap between a clean reputation and a damaged one can be measured in lost business, the message has landed. The era of supervisory forum-shopping is being shut down, one technical standard at a time.
