EU Anti-Money Laundering Regulation 2025: The Single AML Rulebook Arrives

The End of Fragmentation

For over three decades, the European Union's approach to anti-money laundering regulation was based on Directives — legislative instruments that set minimum standards but required transposition into national law by each member state. The result was 27 different national implementations, with significant variations in:

• Definitions of beneficial ownership
• Customer due diligence (CDD) thresholds and procedures
• Reporting obligations for suspicious transactions
• Register access rules for beneficial ownership information
• Sanctions for non-compliance

This fragmentation created regulatory arbitrage opportunities, compliance complexity for cross-border obliged entities, and gaps in the EU's AML/CFT framework that were exploited by criminals.

The EU Anti-Money Laundering Regulation (AMLR) — Regulation (EU) 2024/1624 — changes this fundamentally. As a Regulation rather than a Directive, the AMLR is directly applicable in all member states without the need for national transposition. It creates a single, uniform AML rulebook across the EU.

Timeline and Architecture

The AML legislative package adopted in 2024 consists of:

1. The AMLR (Regulation (EU) 2024/1624): The directly applicable rulebook covering CDD, beneficial ownership, reporting, and record-keeping. Application date: 10 July 2027 for most provisions.
2. The Sixth Anti-Money Laundering Directive (6AMLD) (Directive (EU) 2024/1640): Covers national-level matters including the powers and responsibilities of Financial Intelligence Units (FIUs), national risk assessments, and supervisory architecture. Transposition deadline: 10 July 2027.
3. The AMLA Regulation (Regulation (EU) 2024/1620): Establishes the Anti-Money Laundering Authority (AMLA), a new EU-level supervisory body headquartered in Frankfurt. AMLA became operational in 2025.

Beneficial Ownership — The New Standard

Definition

The AMLR establishes a uniform definition of beneficial ownership across all member states:

• A natural person who ultimately owns or controls a legal entity through direct or indirect ownership of a sufficient percentage of shares, voting rights, or ownership interest — with the threshold set at 25% (member states may set lower thresholds)
• A natural person who exercises control through other means (e.g., shareholders' agreements, power to appoint management)
• Where no individual meets the above criteria, the senior managing official of the entity is identified as the beneficial owner

Trusts and Similar Arrangements

For trusts and other legal arrangements, the AMLR identifies the following as beneficial owners:

• The settlor
• The trustee(s)
• The protector (if any)
• The beneficiaries, or where the beneficiaries are determined by characteristics or class, the class of persons in whose main interest the arrangement is set up or operates
• Any other natural person exercising ultimate effective control over the trust

Central Registers

Each member state must maintain a central beneficial ownership register. Following the ECJ's decision in WM and Sovim SA (striking down unrestricted public access under 5AMLD), the AMLR recalibrates access:

• Competent authorities: Unrestricted access (FIUs, law enforcement, tax authorities, supervisory authorities)
• Obliged entities: Access for CDD purposes, subject to registration and identification
• Persons with a legitimate interest: Access on a case-by-case basis. Legitimate interest includes journalists conducting investigative reporting, civil society organisations working on AML/CFT issues, and academic researchers. The criteria for demonstrating legitimate interest are specified in the AMLR.
• General public: No unrestricted public access (overturned by the ECJ ruling)

Discrepancy Reporting

Obliged entities (banks, lawyers, accountants, real estate agents) are required to report any discrepancy between the beneficial ownership information they obtain through CDD and the information held in the central register. This creates a continuous verification mechanism.

Customer Due Diligence — Harmonised Standards

Standard CDD

The AMLR specifies uniform CDD requirements:

• Identification and verification of the customer's identity using reliable and independent sources
• Identification of the beneficial owner and taking reasonable measures to verify their identity
• Assessment of the purpose and intended nature of the business relationship
• Ongoing monitoring of the business relationship, including scrutiny of transactions

Enhanced Due Diligence (EDD)

EDD is required in specific high-risk situations, including:

• Business relationships or transactions involving persons from high-risk third countries (as identified by the European Commission's delegated act)
• Politically exposed persons (PEPs) — both domestic and foreign
• Correspondent banking relationships
• Transactions involving complex or unusually large patterns with no apparent economic or lawful purpose
• Relationships with entities from jurisdictions identified by the FATF as having strategic deficiencies

Simplified Due Diligence (SDD)

SDD is permitted where the risk assessment indicates a lower ML/TF risk, but the AMLR restricts the circumstances:

• SDD may not be applied to PEPs, high-risk third country persons, or in situations where there is a suspicion of ML/TF
• The obliged entity must maintain documentation justifying the application of SDD

Cash Transaction Limits

The AMLR introduces an EU-wide limit on cash transactions of EUR 10,000. Transactions above this threshold must be conducted through a financial institution. Member states may set lower limits.

Suspicious Transaction Reporting

Uniform Reporting Standard

The AMLR harmonises suspicious transaction reporting across the EU:

• Obliged entities must report suspicious transactions to the national FIU without delay
• The threshold for reporting is the existence of a suspicion — not certainty or proof — that funds are the proceeds of criminal activity or are related to terrorist financing
• Tipping off (informing the customer that a report has been made) is prohibited
• FIUs must acknowledge receipt of the report and may request additional information

Cross-Border Reporting

The 6AMLD strengthens cross-border co-operation between FIUs:

• FIUs must exchange information spontaneously or upon request
• FIU.net (the secure communication network between EU FIUs) is enhanced
• AMLA will co-ordinate cross-border cases and resolve disputes between national FIUs

AMLA — The New EU Supervisor

The Anti-Money Laundering Authority (AMLA) represents the most significant institutional innovation in the EU's AML framework:

Direct Supervision

AMLA will directly supervise a limited number of the highest-risk cross-border obliged entities. The criteria for selecting directly supervised entities include:

• Operating in a minimum number of member states
• Being assessed as high-risk by national supervisory authorities
• Having been identified in connection with AML/CFT deficiencies

Indirect Supervision

For all other obliged entities, AMLA will:

• Co-ordinate national supervisory authorities through joint supervisory teams
• Issue guidelines and regulatory technical standards
• Conduct peer reviews of national supervisory authorities
• Resolve disputes between national supervisors

Non-Financial Sector

AMLA's mandate extends to the non-financial sector, including:

• Real estate agents
• Dealers in high-value goods
• Crypto-asset service providers
• Professional football clubs (newly brought within the obliged entity scope under 6AMLD in certain member states)

Impact on Offshore Structures

Third-Country Equivalence

The AMLR and 6AMLD have significant implications for non-EU jurisdictions, including offshore financial centres:

• The European Commission maintains a list of high-risk third countries subject to EDD. Inclusion on this list triggers automatic EDD for all EU obliged entities dealing with persons or entities from the listed country.
• The assessment criteria include the jurisdiction's compliance with FATF Recommendations, the effectiveness of its AML/CFT framework, and the adequacy of its beneficial ownership transparency regime.

CDD on Offshore Entities

EU obliged entities dealing with offshore structures (BVI companies, Cayman trusts, Nevis LLCs) must:

• Identify and verify the beneficial owners of the structure
• Assess the source of funds and source of wealth
• Understand the purpose of the relationship
• Apply EDD if the jurisdiction is identified as high-risk or if other risk factors are present
• Report any suspicious activity to the national FIU

Trust and Company Service Providers (TCSPs)

TCSPs operating in the EU are obliged entities under the AMLR and must:

• Apply CDD to all clients
• Maintain beneficial ownership information and file it with the national register
• Report suspicious transactions
• Screen against sanctions lists
• Conduct ongoing monitoring of business relationships

Key Takeaways

• The AMLR replaces fragmented national AML Directives with a single, directly applicable EU-wide rulebook
• Beneficial ownership registers continue in all member states, with access for competent authorities, obliged entities, and persons with legitimate interest — but not the general public
• CDD requirements are fully harmonised, with mandatory EDD for PEPs, high-risk third countries, and complex transactions
• A EUR 10,000 EU-wide cash transaction limit is introduced
• AMLA (headquartered in Frankfurt) will directly supervise the highest-risk cross-border obliged entities and co-ordinate national supervisors
• Offshore structures used by EU-resident clients will be subject to the harmonised CDD and EDD requirements
• The discrepancy reporting obligation creates a continuous verification mechanism for beneficial ownership information
• Application of most AMLR provisions begins 10 July 2027, with AMLA operational from 2025