Man looks at tablet while walking outside in a tech park

How the EU AML package is transforming compliance for financial firms

Discover how new EU anti-money laundering rules reshape compliance, onboarding and risk management for financial institutions.


In brief
  • The EU AML package introduces harmonized rules and stricter standards for financial institutions across Europe.
  • Financial firms must update policies, invest in compliance technology and integrate with EU registers to meet new requirements. 
  • Early action enables institutions to minimize compliance risks and gain strategic advantage in a changing regulatory landscape.

Understanding the implications of the new EU Anti-Money Laundering (AML) package is crucial for all financial institutions. The European Union’s new AML framework is more than a regulatory update. It represents a fundamental shift in how financial institutions across Europe manage legal compliance, customer due diligence (CDD) and Know Your Customer (KYC) requirements. The EU AML package introduces harmonized rules, centralized oversight and stricter standards that will reshape compliance strategies and anti-money laundering programs for years to come.

The EU AML package: status and key milestones

The new EU AML package affects all financial institutions operating within the European Union, including banks, payment service providers, investment firms and other entities subject to AML regulations. Its reach is broad, supporting that both large multinational organizations and smaller, local institutions must align with the new standards. The goal is to create a consistent and robust approach to combating money laundering and terrorist financing across all member states.

The package is structured into four key components to address the complexity and diversity of financial activities in the EU:

  • AMLR (Regulation EU 2024/1624): Establishes a single, directly applicable rulebook for all member states, ensuring uniformity and eliminating national discrepancies in AML regulations.

  • AMLD6 (Directive EU 2024/1640): Requires each country to transpose the directive into national law, reinforcing local implementation and adaptation of AML guidelines.

  • AMLA (EU AMLA Regulation): Introduces a centralized authority to oversee and enforce AML compliance, providing direct supervision for high-risk or cross-border institutions.

  • Transfer of Funds Regulation (ToFR): Focuses on transparency and traceability of crypto and fund transfers, already in effect to address emerging financial technologies and regulatory risk management.

By dividing the framework into these four components, the EU supports comprehensive coverage that spans harmonized rules and national adaptation as well as centralized oversight and technological innovation, making efforts to combat financial crime, fraud detection and sanctions compliance more effective and resilient.


Implications of the timeline and readiness requirements

The timeline for the EU AML package sets out clear milestones that financial institutions must follow to strive for legal compliance and readiness:

  • 2025: The European Banking Authority (EBA) finalized the draft report for the first set of Regulatory Technical Standards (RTS).

  • 2026: The Anti-Money Laundering Authority (AMLA) assumed responsibility for the preparation of AML/CFT regulation. AMLA has published the final reports for two Regulatory Technical Standards (RTS) and has launched consultations on additional RTS and Implementing Technical Standards (ITS). Over the course of the year, several Level 2 and Level 3 regulatory measures are expected to be issued. All affected institutions – including banks, payment service providers, investment firms, and other entities subject to AML and KYC requirements – should conduct a comprehensive gap analysis. This involves reviewing existing AML policies, procedures, and compliance frameworks to identify necessary changes in light of the forthcoming standards.

  • 2027: The AMLR (Regulation EU 2024/1624) and AMLD6 (Directive EU 2024/1640) will come into effect, and centralized registers will become operational. All financial institutions must be fully compliant with the new harmonized rules and try to ensure their systems are integrated with EU-wide beneficial ownership and account registers. By this stage, institutions are expected to have updated their internal policies, systems and operational processes. The reason for doing so is to strive for full alignment with the finalized regulatory requirements.

  • 2028: The new EU AMLA will assume direct supervisory powers, especially over high-risk or cross-border institutions. By this stage, institutions must be prepared for direct oversight, stricter enforcement and enhanced due diligence (EDD).

Current situation

At present, financial institutions are in a transitional phase. The regulatory framework is being finalized, and the industry is awaiting the publication of the final RTS. However, the direction is clear: the EU is moving toward a more unified, technology-driven and strictly supervised AML regime. Institutions that act early by conducting gap analyses, investing in compliance technology and updating governance structures will be better positioned to meet the deadlines and minimize compliance risks, including those related to sanctions, fraud detection and regulatory reporting.

 

What should financial institutions do now?

Financial institutions can take proactive steps to prepare for the transition to the new EU AML framework:

  • Conduct a comprehensive gap analysis: Map current AML policies and procedures against the forthcoming RTS to identify any areas where legal compliance gaps exist. Early identification enables institutions to prioritize and address them efficiently.

  • Assess technology readiness: Invest in advanced, AI-driven transaction monitoring systems, real-time sanctions screening and eIDAS-compliant onboarding solutions. These are critical for meeting the new regulatory expectations and enhancing overall compliance effectiveness.

  • Update governance structures: Prepare for new compliance roles and promote the harmonization of AML frameworks across all group entities. Group-wide alignment facilitates a consistent approach to compliance and supports adaptation to the evolving regulatory landscape.

  • Integrate with EU registers: Enable systems to connect to centralized beneficial ownership and account registers, as required by the new regulations. This integration supports transparency, regulatory reporting, and auditability.

  • Build a strong compliance culture: Train staff at all levels and prepare the organization for direct supervision by the new EU AMLA. Embedding compliance into daily operations fosters a culture of vigilance and accountability.

By taking these actions now, financial institutions can position themselves to meet the upcoming requirements with confidence and minimize compliance risks as the new EU AML package comes into force.

 

By collaborating with EY teams, financial institutions can access professionals’ experience in navigating the complexities of the new EU Anti-Money Laundering (AML) requirements. Other EY member firm teams consist of professionals with extensive regulatory knowledge and practical experience in areas such as AML, Know Your Customer (KYC), Customer Due Diligence (CDD), sanctions and compliance technology. EY member firms are equipped to assist institutions throughout their compliance journey, striving for alignment with evolving regulations and addressing necessary tasks for effective implementation.

 

EY professionals conduct thorough readiness assessments to evaluate the compliance status of policies, risk assessments, and procedures at both local and EU levels. The team facilitates the deployment of advanced AML technologies that improve efficiency and auditability, so that compliance measures are robust and adaptable to future changes. Additionally, EY member firms offer scalable managed services to support daily AML operations in accordance with current regulatory outsourcing requirements.

 

In addition to technical and operational assistance, EY emphasizes knowledge sharing through workshops, client presentations, and thought leadership initiatives. This approach helps organizations stay informed about regulatory developments. By collaborating with EY, financial institutions can leverage the experience of our professionals to effectively navigate the evolving AML landscape.

 

Conclusion

The EU AML package represents a magnificent development for compliance, CDD, KYC and anti-money laundering programs. Institutions that act early may reduce compliance risk and be better positioned strategically.


Summary

The EU AML package brings harmonized rules and stricter standards for financial institutions across Europe. Firms must update compliance policies, invest in advanced technology, and integrate with EU registers to meet new anti-money laundering, KYC, and CDD requirements. Early action is essential to minimize compliance risks and maintain a competitive edge as the regulatory landscape evolves.


EY/Frankfurt Main Finance AMLA study

The study looks at the role of AMLA and how navigating the next wave of AML regulation can drive strategic innovation.

How EU leaders can stay ahead of AMLA and AMLR

AMLA and AMLR will reshape EU oversight and leaders must act now to compete in a data‑driven supervisory environment.

 


Related articles

How to prepare your CDD and onboarding for the EU AML overhaul

Explore how new EU anti-money laundering rules and digital onboarding will transform compliance, KYC and customer due diligence in 2026.

Why the EU Anti-Money Laundering Authority brings both promise and challenges

Discover the challenges and promise of the EU’s new Anti-Money Laundering Authority (AMLA), in unifying regulations and enhancing financial crime prevention.

How EU Anti-Money Laundering laws can help spur strategic innovation

Learn how financial services firms can harness the new AML rules to shape the future of fighting financial crime and gain a competitive edge.

    About this article