The EU single AML rulebook
"A directly applicable regulation that harmonizes due diligence, beneficial ownership, obliged entities and suspicious transaction reporting across the Union."
Comprehensive legal advice on the AMLR (Anti-Money Laundering Regulation): the new European single rulebook on anti-money laundering and counter-terrorist financing, directly applicable in all Member States from July 10, 2027.
Free AMLR consultation
We reply within 24 h
Six areas of legal support so your firm can move smoothly from Law 10/2010 to the new single EU regime under the AMLR, with a program you can defend before AMLA and SEPBLAC.
Comparative analysis of your current AML/CFT program against the requirements of Regulation (EU) 2024/1624: policies, controls, compliance structure, documentation and thresholds.
Design and implementation of the complete AML/CFT program under the AMLR: policies, procedures, internal controls, training, compliance governance and reporting.
Identification, verification and recording of the beneficial owner under the new AMLR criteria, connected to the national central register and the European platform.
External review or independent expert report to validate your adaptation to the AMLR and AMLD6 before SEPBLAC or AMLA inspections.
Advice for the new obliged entities under the AMLR: crypto-asset service providers (MiCA), high-value goods traders and professional football clubs.
Training programs for the OCI, the compliance function, senior management and employees on the substantive and operational changes introduced by the AMLR.
The AMLR is the centerpiece of the new EU framework, but it operates alongside AMLD6, the Regulation establishing AMLA and the Transfer of Funds Regulation (TFR) on transfers of funds and crypto-assets. Understanding all four components is essential to designing the program properly.
"A directly applicable regulation that harmonizes due diligence, beneficial ownership, obliged entities and suspicious transaction reporting across the Union."
"A directive governing central UBO registers, national supervision, FIUs, cooperation between authorities and administrative sanctions, to be transposed by July 10, 2027."
"The regulation establishing the Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA), based in Frankfurt, the direct supervisor of high-risk cross-border entities."
"Regulation on information accompanying transfers of funds and crypto-assets. An essential piece for CASPs, payment institutions and banks."
The AMLR replaces the directive model with a directly applicable regulation. It narrows national discretion, expands the list of obliged entities, raises sanctions and creates a European supervisor (AMLA) with direct powers over cross-border entities.
Direct application: the AMLR does not require transposition. Law 10/2010 will remain relevant for matters not covered by the Regulation, but the core obligations will apply directly.
New obliged entities: the AMLR expressly extends the list to CASPs, credit intermediaries, high-value goods traders and professional football clubs in certain transactions.
Dual supervision: AMLA directly supervises a limited group of high-risk cross-border entities; the rest remain under the national supervisor (SEPBLAC), but in coordination with AMLA.
Maximum pecuniary sanctions raised to €10 million or 10% of total annual turnover for serious, repeated or systematic breaches.
Harmonized limit on cash payments in large transactions, replacing varying national thresholds and strengthening traceability.
Date of application of the AMLR and transposition deadline for AMLD6. Obliged entities should start adapting their programs now.
July 10, 2027 is closer than it seems. We design a realistic plan to adapt to Regulation (EU) 2024/1624, with clear priorities, milestones and auditable deliverables.
The AMLR (Anti-Money Laundering Regulation) is Regulation (EU) 2024/1624 of May 31, 2024 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing. It was published in the Official Journal of the EU on June 19, 2024.
The AMLR is directly applicable in all Member States from July 10, 2027, without the need for transposition. It largely replaces Directive (EU) 2015/849 (AMLD4) as regards the obligations of obliged entities.
The EU AML package has three main pieces: the AMLR (Reg. 2024/1624), which sets out the substantive obligations for obliged entities; AMLD6 (Dir. 2024/1640), which governs central registers, supervision, FIUs and administrative sanctions; and the AMLAR (Reg. 2024/1620), which establishes AMLA, the new EU authority based in Frankfurt.
On top of all this comes the Transfer of Funds Regulation (EU) 2023/1113 (TFR) on information accompanying transfers of funds and crypto-assets.
The AMLR extends the list of obliged entities compared with AMLD4. It includes, among others, crypto-asset service providers (CASPs) as defined in the MiCA Regulation, mortgage and consumer credit intermediaries that are not financial institutions, traders in certain high-value goods and, in a move that has drawn wide media attention, professional football clubs when they carry out certain transactions.
Member States may introduce limited exemptions for certain gambling service providers, certain professional football clubs and certain low-risk financial activities.
The AMLR expressly includes CASPs among obliged entities at EU level. This consolidates the regulation already under way with MiCA and the TFR (Travel Rule), creating a single framework: MiCA license + AMLR obligations + Travel Rule + coordinated supervision.
In practice, CASPs will have to meet the same KYC, monitoring, reporting and UBO obligations as credit institutions, under harmonized criteria.
The AMLR introduces a harmonized €10,000 limit on cash payments in large transactions, replacing varying national thresholds. The aim is to reduce opportunities for money laundering and strengthen the traceability of higher-value transactions.
Member States may keep stricter limits. In Spain, it has to be coordinated with Law 7/2012 (the cash payment limit currently in force).
The AMLR harmonizes beneficial ownership transparency requirements for obliged entities, and AMLD6 details how national central registers must work: they must hold more detailed information (including on third-country entities and legal arrangements) and be interconnected through the European Central Platform.
Access to these registers is open to competent authorities, AMLA and persons with a demonstrable legitimate interest, such as journalists or NGOs.
Law 10/2010 will remain relevant, but it will have to coexist with the AMLR. Provisions of Law 10/2010 that overlap with the AMLR will be displaced by the direct application of the Regulation. Those that implement aspects of AMLD6 will have to be adjusted through transposition.
This requires a full review of the AML/CFT program: manuals, forms, policies, procedures, training and technology tools.
AMLA is the new EU AML/CFT authority based in Frankfurt. It will be responsible for overall coordination, issuing guidelines and technical standards and, above all, direct supervision of a limited number of high-risk cross-border obliged entities.
SEPBLAC will remain the national supervisor for most Spanish obliged entities, in close cooperation with AMLA and within the common framework set by the AMLR.
The AMLR is not a mere update: it is a paradigm shift. It moves from the "directive + transposition + national criteria" model to "regulation + direct application + European supervisor". Adapting takes time, method and a proper project.
Regulation (EU) 2024/1624 (AMLR), Directive (EU) 2024/1640 (AMLD6), Regulation (EU) 2024/1620 (AMLAR), Regulation (EU) 2023/1113 (TFR), Law 10/2010 (on a transitional basis), Law 7/2012, Commission Delegated Regulation (EU) 2016/1675 and the FATF Recommendations.
The AMLR applies from July 10, 2027. AMLA must approve several technical standards by July 10, 2026. AMLD6 must be transposed by then. Internal preparation cannot wait.
An adaptation project led by the OCI, with clear metrics and auditable deliverables. The supervisor will want to see evidence that the firm has spent years preparing, not that it improvised three weeks before.
The AMLR also reshapes related areas: it strengthens the integration of the FATF list into the risk engine, aligns the obligations of MiCA EMT issuers and CASPs, sets the compliance floor that entities such as SGIICs or firms in the financial sandbox must respect, and raises the bar for independent directors at investment firms (ESIs) in their internal oversight role.
The AMLR only makes sense as a multidisciplinary project: legal interprets the rules, compliance turns them into policies, IT builds them into the KYC and monitoring engine, and the business adapts its workflows. Here is the operational dashboard we go through with each client.
1) Gap analysisA thorough comparison between the current program under Law 10/2010 and the requirements of the AMLR + AMLD6, identifying gaps, over-compliance and gray areas.
2) PoliciesRewriting the AML/CFT manual and key procedures (KYC, EDD, monitoring, STRs, training) under the logic of Regulation (EU) 2024/1624.
3) TechnologyTechnical recalibration of the detection engine: rules, thresholds, lists (FATF, EU, sanctions), customer profiling and audit logs compliant with AMLA standards.
4) UBOThe way the UBO is identified, verified and recorded changes. The firm must consult and cross-check against the national central register, connect with the European Central Platform and document discrepancies.
Quick decisionFull recalibration, with a focus on UBO, cross-border monitoring and possible direct supervision by AMLA.
Complete AML program, Travel Rule, MiCA integration and specific training.
Designing the program from scratch: luxury goods, football, credit intermediaries and other sectors coming into scope for the first time.
Directive transposed nationally, with criteria varying between Member States.
Directly applicable regulation, with uniform criteria across the EU.
Closed list inherited from AMLD4, with national interpretations.
Expanded list: CASPs, credit intermediaries, luxury goods, professional football.
Identification under national criteria, partially interconnected registers.
Harmonized criteria, detailed central registers, interconnected European platform.
Varying national thresholds (in Spain, Law 7/2012).
Harmonized EU limit of €10,000, without prejudice to stricter national limits.
AMLD4 caps: €5 million or 5% of turnover.
AMLD6 caps: €10 million or 10% of turnover. Periodic penalty payments.
National supervisors (SEPBLAC) with limited coordination through the EBA.
SEPBLAC + AMLA, with direct supervision of high-risk cross-border entities.
Typical indicators in AML/CFT programs that will reach July 10, 2027 with problems unless action is taken.
If you work in AML/CFT compliance and your firm has to move from Law 10/2010 to the AMLR, these are the terms that will appear in every manual, every inspection and every report your firm produces from now on.
EU regulation on the prevention of money laundering and terrorist financing, directly applicable from July 10, 2027.
Directive governing central UBO registers, national supervision, FIUs, cooperation between authorities and the sanctions regime.
Regulation establishing AMLA, the new EU Authority for Anti-Money Laundering and Countering the Financing of Terrorism, based in Frankfurt and with direct supervisory powers.
EU AML/CFT supervisor with powers of coordination, technical standards and direct supervision of high-risk cross-border entities.
Regulation on information accompanying transfers of funds and crypto-assets. An essential piece for CASPs and payment institutions.
The concept that defines the AMLR: a single, directly applicable body of rules, without national fragmentation, for obliged entities across the EU.
List expanded by the AMLR: banks, EMIs, insurers, advisers, lawyers, CASPs, luxury goods, professional football and credit intermediaries.
The natural person who ultimately owns or controls a legal entity. The AMLR standardizes the criteria and AMLD6 details the central registers.
The AMLR sets a common €10,000 ceiling on cash payments in large transactions, without prejudice to stricter national limits.
Tell us where your AML/CFT program stands today and we will design a realistic AMLR adaptation plan with clear priorities and auditable deliverables.
The AMLR (Anti-Money Laundering Regulation) is Regulation (EU) 2024/1624 of the European Parliament and of the Council of May 31, 2024 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing. It was published in the Official Journal of the EU on June 19, 2024 and is the centerpiece of the new EU single rulebook on AML/CFT.
For three decades, AML/CFT obligations were channeled through directives (AMLD1 to AMLD5), transposed with diverging criteria in each Member State. The result was a fragmented internal market, with different national interpretations that made it harder for obliged entities with a European presence to operate and opened the door to regulatory arbitrage. The AMLR tackles this problem by turning the substantive obligations into rules directly applicable in all Member States.
The AMLR does not apply on its own. It is part of a broader legislative package: Directive (EU) 2024/1640 (AMLD6), which governs the institutional aspects (central registers, national supervisors, FIUs, cooperation, sanctions), and Regulation (EU) 2024/1620 (AMLAR), which establishes AMLA, the new EU Authority for Anti-Money Laundering and Countering the Financing of Terrorism. It is complemented by Regulation (EU) 2023/1113 (TFR) on information accompanying transfers of funds and crypto-assets.
The AMLR is directly applicable from July 10, 2027. AMLD6 must be transposed into national law by the same date (with some exceptions). AMLA must approve several regulatory and implementing technical standards before July 10, 2026. This means obliged entities need to start their internal adaptation project now.
The AMLR expands the list of obliged entities compared with AMLD4. It expressly includes, among others, crypto-asset service providers (CASPs) as defined in the MiCA Regulation, mortgage and consumer credit intermediaries that are not financial institutions, certain high-value goods traders and professional football clubs in certain transactions, with the possibility of limited national exemptions.
The AMLR consolidates and harmonizes the core obligations: internal policies, procedures and controls to manage risk, customer due diligence, identification and verification of the beneficial owner, and suspicious transaction reporting to the financial intelligence unit. Obliged entities are the gatekeepers of the system and get uniform criteria across the EU.
One of the most visible changes is the harmonized €10,000 limit on cash payments in large transactions, which replaces varying national thresholds. Member States may keep stricter limits. In Spain, it will have to be coordinated with Law 7/2012, which remains in force to the extent it is not displaced by the AMLR.
AMLD6 expands the sanctions regime inherited from AMLD4. The pecuniary caps for serious, repeated or systematic breaches rise to €10 million or 10% of total annual turnover. It also introduces harmonized minimum administrative measures and the possibility of imposing periodic penalty payments.
Law 10/2010 will remain relevant for matters not covered by the AMLR (areas subject to transposition, detailed technical matters), but obligations that overlap with the Regulation will be displaced by its direct application. A full review of the Spanish AML/CFT program is unavoidable.
Key legislation, linked to the official text:
Legislation and links reviewed in .