EU AML/CFT Framework

The EU AML/CFT framework overlays universal AML processes with binding EU measures, national implementation details and supervisor expectations. Use the legal text and current national materials before relying on a local rule.

Jurisdiction boundary: EU rules are presented as a jurisdiction-specific overlay. They must not be treated as universal FATF rules or automatically applied outside their legal scope.

Core instruments#

Instrument Function Operational relevance
Regulation (EU) 2024/1624 — AMLR Directly applicable rules for obliged entities and beneficial-ownership transparency CDD, EDD, internal policies, group controls, reporting, recordkeeping and customer restrictions
Directive (EU) 2024/1640 — AMLD6 Rules for national mechanisms, FIUs, supervision, registers and cooperation National implementation, FIU powers, supervisory systems and beneficial-ownership infrastructure
Regulation (EU) 2024/1620 — AMLA Regulation Establishes the EU Anti-Money Laundering Authority Direct and indirect supervision, convergence, coordination and technical standards

Application and implementation timing#

The package was adopted in 2024. The principal AMLR application date and the main AMLD6 transposition date are 10 July 2027, while individual provisions, institutional steps and technical measures can follow different dates.

An implementation must therefore verify:

  • whether the relevant provision is already applicable;
  • whether a delegated or implementing act has been adopted;
  • whether national transposition is complete;
  • which competent authority or FIU is responsible;
  • whether transitional rules apply.

Process mapping#

Universal AML process EU overlay questions
Customer classification Is the organisation or activity an obliged entity under the EU framework?
CDD / KYC Which EU customer-identification, verification and ongoing-due-diligence requirements apply?
Beneficial ownership Which ownership/control tests, register duties and discrepancy processes apply?
PEP / EDD Which enhanced measures, approvals and monitoring requirements apply?
Internal controls Which policies, compliance-function, group and training requirements apply?
Suspicious activity reporting Which national FIU, reporting channel, confidentiality and follow-up rules apply?
Recordkeeping Which EU and national retention, access and data-protection rules apply?
Supervision Is the entity supervised nationally, indirectly by AMLA or directly within AMLA's mandate?

Direct regulation versus national implementation#

AMLR is a regulation and is intended to create a more uniform set of directly applicable rules for obliged entities. AMLD6 is a directive and requires national implementation for the institutional and supervisory framework it covers.

That distinction matters operationally. A workflow should never cite “EU rules” without recording whether the relevant requirement comes from:

  • directly applicable EU regulation;
  • national law transposing AMLD6;
  • an AMLA regulatory or technical standard;
  • national supervisory or FIU guidance;
  • the organisation's own policy.

Evidence requirements for an EU overlay#

A jurisdiction-specific case or procedure should capture:

  • exact legal instrument and article;
  • consolidated or original text status;
  • application or transposition date;
  • Member State and competent authority;
  • relevant national rule or guidance;
  • date accessed;
  • internal policy mapping;
  • unresolved legal interpretation requiring specialist review.

Relationship to FATF#

The EU framework implements and develops AML/CFT controls within the Union, but it does not replace the FATF Recommendations as the global standard-setting baseline. A proper source note should distinguish global standard, EU law, national implementation and internal policy.

Source basis#

Boundary#

Boundary: entity classification, beneficial-ownership thresholds, filing deadlines and legal conclusions require the current legal text, national implementation and accountable review.

See Also#

References#