On 24 March 2026, the European Anti-Money Laundering Authority (AMLA) held its first public hearing — a moment that marked more than a bureaucratic milestone. It signalled that Europe’s most ambitious AML reform in a generation is now firmly on track. For financial institutions operating across the EU and globally, the clock is ticking. AMLA’s framework will reshape how AML supervision works, and the window to prepare is narrowing.
In this week’s blog, FinCheck breaks down what AMLA is, what it will do, who it affects, and — crucially — what compliance leaders must prioritise right now.
1. What Is AMLA and Why Does It Matter?
AMLA — the Authority for Anti-Money Laundering and Countering the Financing of Terrorism — was established as part of the EU’s sweeping AML/CFT legislative reform package adopted in 2024. It is headquartered in Frankfurt and became operational in mid-2025. Its mission: to end the fragmented patchwork of national AML supervision that has allowed financial crime to exploit regulatory gaps across EU member states.
For years, EU member states applied AML/CFT rules inconsistently. National supervisors varied wildly in their methodologies, enforcement appetite, and resources. The result was a system that sophisticated criminals could game by structuring activities across jurisdictions. AMLA changes that equation.
2. The AMLA Timeline: Where Are We Now?
Understanding the roadmap is essential for compliance planning:
- 2025: AMLA officially becomes operational. Initial staffing, governance structures, and IT systems are established.
- 2026 (Now): AMLA holds its first public hearing (March 24), releases 26 Regulatory Technical Standards (RTS), Implementing Technical Standards (ITS), and guidelines. National supervisors begin testing a common risk assessment methodology.
- 1 July 2027: AMLA commences the formal selection process to identify 40 obliged entities for direct supervision.
- January 2028: AMLA begins directly supervising the selected 40 obliged entities, with full investigatory powers.
3. Who Will AMLA Directly Supervise?
AMLA will directly supervise 40 “obliged entities” — the highest-risk financial institutions operating across the EU. Selection is based on two core criteria:
- Geographic scope: The institution must operate in at least six EU member states.
- Materiality threshold: Activities in a member state are deemed “material” if the institution has more than 20,000 customers resident there, or processes more than €50 million in transactions from customers in that state.
- Residual risk profile: The institution must be classified as “high risk” — not just because of the nature of its business activities, but because its AML/CFT controls are judged to be disproportionate to those risks.
That final criterion is critical. High-risk business activities alone are not enough to trigger AMLA direct supervision. It is the gap between risk exposure and control quality that determines selection. This is a signal: institutions that invest in robust, proportionate controls reduce their likelihood of being flagged.
4. AMLA’s Powers: More Than a Supervisor
AMLA’s investigatory toolkit is extensive, ranging from: information requests and document production orders; on-site inspections conducted by joint supervisory teams; sanctions and enforcement actions imposed directly; and coordination of Financial Intelligence Units (FIUs) across member states for better cross-border information sharing.
Importantly, AMLA will exercise its investigatory powers instead of — not alongside — national competent authorities for the 40 entities it supervises directly. This represents a genuine transfer of supervisory sovereignty at EU level.
5. The Ripple Effect: Why All Financial Institutions Are Affected
One of the most important insights from AMLA’s framework is this: even institutions that are NOT among the selected 40 will feel the impact. Here is why:
- Common methodology: National supervisors across all 27 EU member states will now use a harmonised risk assessment methodology. Local interpretations and national variances will diminish. If your controls passed national inspection before, they may face higher scrutiny under the new EU-wide framework.
- Cascading standards: The 26 RTS, ITS, and guidelines AMLA is publishing in 2026 will set minimum expectations across the board. Institutions will need to update data models, systems, and processes to meet these standards.
- Market signalling: Correspondent banking relationships, investment decisions, and licensing reviews will increasingly reference AMLA compliance posture as a benchmark.
The AMLA era is not a niche concern for large pan-European banks. It is a compliance inflection point for every institution doing business in or with the EU.
6. FinCheck’s View: What Should Compliance Leaders Do Now?
AMLA readiness is not a 2027 problem. It is a 2026 priority. Based on our work with financial institutions across banking, payments, and fintech sectors, here is what compliance leaders should focus on immediately:
- Assess your exposure: Determine whether your institution meets the geographic scope and materiality thresholds that could lead to direct AMLA supervision. Even if you fall outside the 40, understand how national supervisors in your markets will apply the new methodology.
- Review your risk assessment framework: AMLA’s selection criteria hinge on whether your AML/CFT controls are commensurate with your risk profile. Commission an independent gap analysis now, before the regulators do.
- Track the 26 AMLA publications: The regulatory technical standards being released throughout 2026 will define the new baseline. Assign responsibility within your compliance team to monitor, interpret, and action each release.
- Invest in technology-driven compliance: AMLA’s harmonised framework favours institutions with scalable, data-driven AML systems. AI-enhanced transaction monitoring, automated risk scoring, and real-time analytics are becoming baseline expectations.
- Engage with national supervisors: As NCAs transition to the harmonised EU methodology, proactive engagement — regulatory liaison, supervisory college participation, and pre-emptive disclosure — will be valued. Build those relationships now.
At FinCheck, we help financial institutions turn regulatory complexity into competitive advantage — through AML programme assessments, policy frameworks, training, and technology advisory services tailored to your risk profile and jurisdiction.
The Way Forward: Harmonisation as an Opportunity
The launch of AMLA represents the most significant structural shift in EU AML/CFT supervision since the Fifth Anti-Money Laundering Directive. For the compliance community, it is both a challenge and an opportunity.
Harmonisation means that institutions with genuinely strong compliance cultures will no longer be disadvantaged by operating in stricter national jurisdictions. A common methodology creates a level playing field — and rewards those who build compliance properly, not just superficially.
The institutions that thrive in the AMLA era will be those that start their readiness journey today. Not in 2027. Not when the first 40 are announced. Now.
💡 Is your institution ready for the AMLA era? FinCheck LLC provides expert AML programme assessments, regulatory gap analyses, training, and technology advisory services to help financial institutions navigate Europe’s new supervisory landscape. Reach out: syedksaleem76@gmail.com | www.fincheckllc.com
#AMLA #AML #FinancialCrime #AMLCompliance #EURegulation #AntiMoneyLaundering #AMLCFT #FinancialCrimeCompliance #RegulatoryCompliance #EUFinance #Compliance2026 #FinTech #BankingRegulation #FinCheckLLC #ComplianceLeadership #RiskManagement #KYC #FinancialRegulation #FATF
