The European Union’s Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) is set to become the bloc’s central AML/CFT supervisor and rule maker from 10 July 2027, but financial institutions preparing for the transition should not expect the shift to bring straightforward simplification.
According to AscentAI, passed by the EU Parliament in 2024, AMLA aims to centralise how financial institutions across the bloc manage legal compliance, customer due diligence and Know Your Customer requirements. The European Banking Authority has already handed over all its AML/CFT mandates to AMLA, closing out the EBA’s standalone role in the area.
As the primary authority, AMLA will touch every part of EU AML enforcement, from Financial Intelligence Units to national supervisors. The body has finalised standards designed to help FIUs share information faster and more consistently, and has issued draft technical standards setting out how AMLA and national supervisors will work together.
A central pillar of the new framework is AMLA’s direct supervision of around 40 large financial institutions, to be selected alongside national supervisors based on cross-border activity and financial crime risk. Direct supervision is due to begin in January 2028, and how AMLA treats these firms is likely to set the tone for its approach to the wider market.
Despite the drive towards a single rulebook, member states retain scope for local interpretation. Existing AML directives require each member state to designate its own authority or mechanism to coordinate national responses to money laundering risk, with the details notified to the European Commission. With 27 member states potentially taking 27 different approaches to implementation, firms operating across borders will still face a patchwork of local practice beneath the unified EU rules.
AMLA’s Single Programming Document for 2026-2028 sets out its priorities, including finalising the direct supervision selection process, risk classification methodology, supervisory cooperation arrangements, and a framework for sanctions tied to AML/CFT breaches.
To prepare, EY recommends firms conduct a gap analysis against forthcoming technical standards, invest in AI-driven transaction monitoring and eIDAS-compliant onboarding tools, update governance structures for new compliance roles, integrate with centralised EU beneficial ownership registers, and embed a stronger compliance culture across daily operations.
Read the full AscentAI post here.
Copyright © 2026 RegTech Analyst
Copyright © 2026 RegTech Analyst
