Malta
Overview
Malta’s regime is anchored in the Prevention of Money Laundering Act, Chapter 373, the Prevention of Money Laundering and Funding of Terrorism Regulations and binding FIAU Implementing Procedures.
CDD beneficial-owner obligations sit in the PMLFTR and FIAU Implementing Procedures. The April 2026 Part I revision reinforces identification of the ultimate natural person. Malta also amended its beneficial-ownership register architecture: 2025 changes extended the trust-register reporting framework to private trustees, company-register amendments entered into force on 10 July 2026, and Legal Notice 252 of 2026 further amended the trust/TUBOR framework in September 2026, including access arrangements highlighted by MFSA.
Subject persons apply risk-based CDD, monitoring and recordkeeping and submit suspicious reports to FIAU under the PMLA/PMLFTR framework.
Compliance Calendar2
Requirement
Suspicious Transaction / Activity Report (STR/SAR)
Authority / Report toFinancial Intelligence Analysis Unit (FIAU)
Deadline / triggerPromptly. FIAU guidance explains this operationally as submission on the same day when knowledge or suspicion is considered to subsist by the MLRO.
Requirement
- Subject scope
- Subject persons under the Prevention of Money Laundering and Funding of Terrorism Regulations (PMLFTR).
- Trigger
- Knowledge or suspicion of money laundering or funding of terrorism identified and considered to subsist by the MLRO/reporting function.
- Filing channel
- All subject persons must register on goAML to submit suspicious activity/transaction reports.
Impact
- Consequences of non-compliance
- Late or missing reporting and related AML/CFT control failures may lead to FIAU administrative measures, penalties and remediation directives under the applicable framework.
- Enforcement authority
- Financial Intelligence Analysis Unit (FIAU)
- Operational impact
- MLRO processes should document the time suspicion is considered to subsist and support same-day goAML submission.
Requirement
Customer / business risk assessment and AML/CFT control framework
Authority / Report toFIAU and relevant sector supervisor where applicable
Deadline / triggerOngoing. Maintain current risk assessments, policies, controls, internal reporting and monitoring; update when risk changes. No universal external filing date is asserted for the combined control obligation.
Requirement
- Subject scope
- Subject persons under the PMLFTR and FIAU Implementing Procedures.
- Trigger
- Establishment/continuation of business relationships and changes in customer, product/service, delivery-channel, geographic or business-wide risk.
- Filing channel
- Internal governance and documentation; provide information to FIAU/supervisor when required.
Impact
- Consequences of non-compliance
- Deficiencies may lead to FIAU remediation directives and administrative penalties; quantum depends on the breach and enforcement decision.
- Enforcement authority
- FIAU
- Operational impact
- Keep customer and business risk assessments live and ensure controls, internal reporting and BO/CDD processes reflect the current risk profile.
Authorities & FIU4
FATF Assessment
Measures how fully the jurisdiction has implemented FATF’s technical requirements. It does not measure practical effectiveness.
Measures whether the AML/CFT system achieves its intended results in practice. Follow-up reports do not normally replace these ratings.
Explore 40 FATF RecommendationsSee every Technical Compliance rating and what it means.+
Explore 11 Immediate OutcomesSee how FATF rates whether the AML/CFT system works in practice.+
Regulatory Timeline46
Legal Notice 252 of 2026, published in the Malta Government Gazette on 22 September 2026, amends the Trusts and Trustees Act (Register of Beneficial Owners) Regulations. MFSA’s 28 September circular identifies the changes as a further AMLD6 transposition phase affecting access to beneficial-ownership information held in TUBOR.
On 18 September 2026 the MFSA published the results of an outcomes-based review of outsourcing arrangements by fund managers, including outsourced compliance and AML functions. The regulator identified weaknesses in pre-appointment due diligence, governance, conflicts and oversight and issued a Dear CEO Letter setting out its expectations.
Malta’s FIAU published its AML/CFT Supervisory Plan for 2026–2027 on 31 August 2026. The plan identifies the supervisory priorities and interventions guiding compliance monitoring during the third year of the FIAU’s five-year compliance monitoring framework.
The Malta Financial Services Authority published its Financial Crime Compliance Strategy 2026 on 5 August 2026. The strategy sets a risk-based and outcomes-driven supervisory framework across authorisation, supervision and enforcement and aligns the MFSA’s financial-crime work with evolving EU AML reforms and AMLA.
The Malta Business Registry states that the Companies Act (Register of Beneficial Owners) (Amendment) Regulations, 2026 entered into force on 10 July 2026 through Legal Notice 184 of 2026. The amendments implement a further AMLD6 transposition phase and introduce revised access arrangements for company beneficial-ownership information.
The binding guidance removes an exception that could stop analysis at a legal person and reinforces identification of the ultimate natural-person beneficial owner.
MFSA’s official circular records the publication on 11 July 2025 of Legal Notice 133 of 2025 amending the Trusts and Trustees Act (Register of Beneficial Owners) Regulations. The amendments extend the trust beneficial-ownership reporting framework to private trustees and form part of Malta’s AMLD6 implementation.
FATF revised Recommendation 16 to standardise payment information and strengthen fraud/error controls in cross-border payments.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗FATF amended Recommendation 1 and related interpretive material to strengthen proportionality and simplified measures under the risk-based approach.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗FATF revised Recommendations 4, 30, 31 and 38 and related interpretive material to make asset recovery a stronger operational priority, expand tools to trace and confiscate criminal property and improve domestic and international cooperation.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗At its February 2023 Plenary FATF revised Recommendation 25 and its Interpretive Note to strengthen transparency and beneficial-ownership requirements for trusts and similar legal arrangements, complementing the 2022 strengthening of Recommendation 24 for legal persons.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗FATF removed Malta from its jurisdictions under increased monitoring.
FATF strengthened Recommendation 24 on beneficial ownership transparency for legal persons.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗FATF added Malta to its jurisdictions under increased monitoring.
FATF amended Recommendations 1 and 2 and their Interpretive Notes so countries and covered private-sector entities must identify, assess and mitigate risks of breaches, non-implementation or evasion of proliferation-related targeted financial sanctions.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗The Basel Committee revised its ML/TF risk-management guidelines to add principles for information exchange and cooperation between prudential and AML/CFT supervisors in authorisation, ongoing supervision and enforcement.
A Basel supervisory publication does not become domestic law merely because it is GLOBAL. National adoption, supervisory use or incorporation must be evidenced by a LOCAL milestone or source.
Basel Committee on Banking Supervision ↗The 2020 amendment strengthens the statutory framework supporting AML/CFT supervision and enforcement.
FATF adopted detailed implementation requirements for virtual assets and VASPs in June 2019, including the application of wire-transfer information requirements commonly described as the Travel Rule. This operationalised the virtual-asset perimeter introduced through the 2018 Recommendation 15 revision.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗The Virtual Financial Assets Act entered into force on 1 November 2018 and regulated VFA service providers and agents. The framework also brought the sector into Malta’s AML/CFT architecture before the later EU MiCA transition.
In October 2018 FATF revised Recommendation 15 and added the definitions of virtual asset and virtual asset service provider, formally bringing virtual-asset activity into the global AML/CFT standards architecture. Detailed implementation requirements followed in 2019.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗The PMLFTR provide the principal preventive framework for customer due diligence, risk-based controls, monitoring, recordkeeping and reporting.
The Basel Committee issued Sound management of risks related to money laundering and financing of terrorism, superseding its 2001 CDD and 2004 consolidated KYC papers and integrating ML/TF risk management with prudential supervisory expectations.
A Basel supervisory publication does not become domestic law merely because it is GLOBAL. National adoption, supervisory use or incorporation must be evidenced by a LOCAL milestone or source.
Basel Committee on Banking Supervision ↗FATF adopted a consolidated revised set of 40 Recommendations integrating AML, CFT and proliferation-financing safeguards.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗Resolution 1737 imposed binding measures concerning Iran’s proliferation-sensitive nuclear activities, including an asset freeze on designated individuals and entities. Together with the DPRK regime, it forms a foundational UN counter-proliferation targeted-financial-sanctions architecture.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗Following the DPRK nuclear test, Resolution 1718 imposed binding sanctions including an asset freeze on designated persons and entities connected to the nuclear programme. It became a central UN targeted-financial-sanctions pillar for counter-proliferation financing.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗FATF added a ninth Special Recommendation addressing cash couriers and cross-border movement of currency.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗Resolution 1540 requires all States to adopt and enforce laws and domestic controls to prevent non-State actors from acquiring or using weapons of mass destruction and related materials. It forms a binding global legal pillar of the proliferation-financing control environment later reflected in FATF CPF standards.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗The UN General Assembly adopted the United Nations Convention against Corruption on 31 October 2003. UNCAC addresses prevention of money laundering, laundering of corruption proceeds, confiscation and a dedicated asset-recovery framework; the Convention entered into force globally on 14 December 2005.
Current UN depositary relationship to 2003 UN Convention against Corruption. This is not a claim that the jurisdiction was already a Party on the GLOBAL event date; the national accession/ratification date is a separate LOCAL/STATUS fact.
UN Treaty Collection ↗The FIAU was admitted as a full member of the Egmont Group in July 2003, formalising secure international FIU cooperation shortly after the unit became operational.
FATF comprehensively revised its AML/CFT Recommendations, strengthening preventive measures and extending coverage.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗The Financial Intelligence Analysis Unit was established and became operational on 1 October 2002 after amendments to the Prevention of Money Laundering Act. It became Malta’s national central administrative FIU.
Malta is listed among the 22 countries participating in MONEYVAL's first evaluation round in the March 2002 review cited by the 2007 Horizontal Review. This confirms membership/participation by March 2002 but does not establish the original admission date.
The Basel Committee issued Customer due diligence for banks, setting minimum supervisory expectations for customer acceptance, identification, ongoing monitoring and risk management. It became an influential global banking KYC/CDD benchmark and was later reflected in FATF standards.
A Basel supervisory publication does not become domestic law merely because it is GLOBAL. National adoption, supervisory use or incorporation must be evidenced by a LOCAL milestone or source.
Basel Committee on Banking Supervision ↗FATF expanded its standards to terrorist financing through eight Special Recommendations.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗Resolution 1373 requires all States to prevent and suppress terrorist financing, criminalise the provision or collection of funds for terrorist acts, freeze terrorist assets without delay and prohibit making funds or financial services available to terrorists and related entities.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗The Palermo Convention was adopted on 15 November 2000 and broadened the international money-laundering framework beyond drug proceeds through criminalisation and preventive measures tied to transnational organised crime. It entered into force globally on 29 September 2003.
Current UN depositary relationship to 2000 Palermo Convention. This is not a claim that the jurisdiction was already a Party on the GLOBAL event date; the national accession/ratification date is a separate LOCAL/STATUS fact.
UN Treaty Collection ↗The UN General Assembly adopted the International Convention for the Suppression of the Financing of Terrorism on 9 December 1999, creating the treaty framework for criminalising terrorist financing and international cooperation. It entered into force globally on 10 April 2002.
Current UN depositary relationship to 1999 Terrorist Financing Convention. This is not a claim that the jurisdiction was already a Party on the GLOBAL event date; the national accession/ratification date is a separate LOCAL/STATUS fact.
UN Treaty Collection ↗Resolution 1267 imposed an assets freeze and other targeted sanctions in the Taliban context and created the Security Council committee that became the foundation of the UN 1267 sanctions architecture. It is a key global precursor to modern terrorist-financing targeted financial sanctions.
UN Members agree to accept and carry out Security Council decisions. This current Charter relationship is not proof of the jurisdiction’s domestic implementation, nor a claim about its membership status on the historical event date.
UN Charter · Article 25 ↗Official FATF history records Malta among the original PC-R-EV membership cohort and identifies Georgia separately as joining later in May 1999. PC-R-EV was established in September 1997; the Council of Europe terms trace the establishing decision to the 600th Ministers’ Deputies meeting on 10 September 1997.
FATF revised the Forty Recommendations to reflect evolving money-laundering methods and countermeasures.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗Representatives of 13 financial intelligence units met in Brussels on 9 June 1995 and founded what became the Egmont Group. The milestone created the operational global network for FIU-to-FIU cooperation and exchange of financial intelligence.
Current profile relationship to the Egmont network. This does not imply membership in 1995; admission history is a separate LOCAL/STATUS fact.
Egmont Group · Member FIUs ↗Chapter 373 establishes Malta’s core criminal and institutional anti-money-laundering framework and the statutory basis for the FIAU architecture.
FATF issued its original Forty Recommendations, establishing the first global AML standard framework.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗The G7 established FATF in 1989 to examine and develop measures to combat money laundering. FATF became the central global standard-setting body whose recommendations are implemented through national and regional AML/CFT frameworks.
Current relationship. This is regional assessment network participation, not direct FATF membership. The GLOBAL standard remains separate from evidence of domestic implementation.
FATF Global Network ↗The Vienna Convention was adopted on 20 December 1988 and created the first treaty-level international obligation to criminalise laundering conduct linked to drug-trafficking proceeds, alongside confiscation and international-cooperation measures. It entered into force globally on 11 November 1990.
Current UN depositary relationship to 1988 Vienna Convention. This is not a claim that the jurisdiction was already a Party on the GLOBAL event date; the national accession/ratification date is a separate LOCAL/STATUS fact.
UN Treaty Collection ↗The Basel Committee published a Statement of Principles for banks aimed at reducing the risk that banking institutions would be used by criminals or as channels for money laundering. This helped establish the preventive and supervisory side of AML alongside the emerging criminal-law framework.
A Basel supervisory publication does not become domestic law merely because it is GLOBAL. National adoption, supervisory use or incorporation must be evidenced by a LOCAL milestone or source.
Basel Committee on Banking Supervision ↗