The Anti-Money Laundering Authority (AMLA)

The EU's new authority for anti-money laundering and countering the financing of terrorism: what it is, what it does, and what it means for financial institutions across Europe. Find everything you need to know about AMLA and read the latest commentary from the Zanders AMLA office.

What is AMLA?

The Anti-Money Laundering Authority is the European Union's authority for anti-money laundering and countering the financing of terrorism (AML/CFT), headquartered in Frankfurt. It is the supervisory and coordinating center of the EU's 2024 AML reforms.

AMLA began operating in mid-2025 and took over the European Banking Authority's AML/CFT mandate in 2026. From 2028 it will directly supervise a first group of high-risk, cross-border financial institutions, while coordinating national supervisors everywhere else.

The authority and the rulebook: two different things

AMLA is the authority — the body responsible for supervising, coordinating and driving convergence in AML/CFT supervision across the EU.

AMLR is the regulation — the single rulebook that translates these objectives into concrete requirements for financial institutions. It establishes a harmonized framework for how organizations assess risk, conduct customer due diligence, identify beneficial owners, monitor transactions, manage politically exposed persons, and apply financial crime controls across the EU.


What AMLA does

Direct supervision

Directly supervises a limited number of high-risk, cross-border financial institutions selected against EU-wide criteria.

Coordinating national supervisors

Oversees and coordinates national anti-money laundering supervisors, drives convergence, and runs peer reviews to raise standards consistently.

A single rulebook & standards

Develops the technical standards and guidance that give the EU's harmonized AML/CFT framework practical effect.

2025

AMLA established and operational in Frankfurt

2026

EBA's AML/CFT mandate transferred to AMLA

2027

AMLR applies (10 July 2027); AMLD6 transposed

2028

Direct supervision of selected high-risk institutions begins

What AMLA means in practice

For institutions, AMLA signals a shift to harmonized, directly enforced expectations and data-led supervision. Whether or not a firm falls under direct supervision, national oversight will increasingly reflect AMLA's standards.

The specific obligations — customer due diligence, beneficial ownership, politically exposed persons, the €10,000 cash limit and more — sit in the regulation itself.

Key impact areas of AMLA on financial institutions

Where the new European framework will most affect how institutions run financial crime prevention. Expand each area for detail.


While AMLR sets the new customer due diligence requirements, AMLA plays a central role in driving consistent supervisory expectations and implementation standards across Member States. New requirements around customer identification, beneficial ownership, risk classification and ongoing monitoring are expected to significantly increase the demand for accurate customer information and defensible decision-making.

Many institutions continue to struggle with fragmented customer information, inconsistent risk assessments and costly remediation exercises. AMLA's focus on standardization creates an opportunity to move beyond compliance-driven remediations and towards a more sustainable customer data strategy.

Transaction Monitoring remains one of the largest cost drivers in financial crime prevention. At the same time, regulators increasingly expect institutions to demonstrate the effectiveness of their monitoring frameworks and justify how scenarios, thresholds and controls contribute to detecting financial crime.

The challenge facing many organizations is that traditional rule-based monitoring often generates large volumes of false positives while providing limited insight into actual risk. At the same time, machine learning and AI-driven approaches create new governance, explainability and validation requirements.

Whether the topic is customer due diligence, Transaction Monitoring, sanctions screening or reporting, one challenge consistently appears across financial institutions: data.

AMLA's approach relies on harmonized supervision, standardized risk methodologies and consistent reporting across Member States. Institutions must therefore demonstrate not only that controls exist, but also that they are supported by reliable data, documented decisions and auditable processes. AMLA's regulatory program includes work on business-wide risk assessments, ongoing monitoring and supervisory risk methodologies that rely heavily on underlying data quality.

AMLA and the AMLR introduce a more harmonized European framework for financial crime prevention, intended to establish a common rulebook across Member States. The key question is no longer what the regulation says, but how organizations translate new requirements into effective governance, ownership and risk management practices. AMLA is developing regulatory standards and guidelines to support consistent implementation across the EU.

The new European framework creates an opportunity for financial institutions to redesign how financial crime prevention is organised, governed and executed. Changes to customer due diligence, monitoring, reporting and information sharing are forcing institutions to reconsider operating models that have often evolved over many years.

This creates questions such as:

  • Which activities should be centralised?
  • Which processes should be automated?
  • How should model ownership be organised?
  • Where can AI accelerate investigations?
  • Which vendors best support future requirements?

AMLA explained

FAQs about the Anti-Money Laundering Authority. Expand each area for detail.

AMLA is the EU's Authority for Anti-Money Laundering and Countering the Financing of Terrorism, based in Frankfurt. It supervises selected high-risk institutions directly and coordinates national supervisors across the EU.

AMLA is headquartered in Frankfurt am Main, Germany.

AMLA was established in 2025 and took over the EBA's AML/CFT mandate in 2026. Direct supervision begins in 2028.

A first group of high-risk, cross-border financial institutions will fall under direct AMLA supervision; all other obliged entities remain under national supervisors that AMLA coordinates.

AMLA is the authority (the supervisor); AMLR is the regulation (the rulebook obliged entities must follow).

Have a question we've not answered?

Get in touch with a member of the Zanders AMLA office leadership for support.

Zaid Siddiqi

Director at Zanders

Johannes Lont

Senior Manager

Fintegral

is now part of Zanders

In a continued effort to ensure we offer our customers the very best in knowledge and skills, Zanders has acquired Fintegral.

Okay

RiskQuest

is now part of Zanders

In a continued effort to ensure we offer our customers the very best in knowledge and skills, Zanders has acquired RiskQuest.

Okay

Optimum Prime

is now part of Zanders

In a continued effort to ensure we offer our customers the very best in knowledge and skills, Zanders has acquired Optimum Prime.

Okay