09 February 2026
AMLA ¦ The New EU AML/CFT Framework – What Non‑Financial Firms Must Do Before 2027
A uniform EU approach to financial crime
The EU’s new anti‑money laundering and countering the financing of terrorism (AML/CFT) framework introduces a single, harmonised rulebook designed to close gaps created by fragmented national regimes. From 10 July 2027 (and 10 July 2029 for professional football clubs and agents), firms and professions across the non‑financial sector will face consistent obligations to know their customers, assess and monitor risk, and report suspicions. The Authority for Anti‑Money Laundering and Countering the Financing of Terrorism (AMLA) will play a central role in setting common rules, coordinating supervision and enabling cross‑border financial intelligence sharing.
Why the changes matter for the non‑financial sector
Money laundering and terrorist financing can be facilitated by cash handling, high‑value transactions, complex ownership structures and cross‑border activity – risk factors common outside traditional financial institutions. Under the new framework, a broad range of non‑financial obliged entities will be subject to uniform obligations. These include auditors, accountants, tax and legal advisers, notaries, trust and company service providers (TCSPs) , real estate agents, traders in precious metals and high‑value goods, storage and intermediaries in freezones, credit intermediaries, crowdfunding intermediaries, gambling service providers, investment migration operators, football agents and professional football clubs.
Key elements of the new framework
AMLA will set EU‑wide rules for obliged entities and devise a common supervisory methodology so that entities are assessed and supervised consistently across Member States – reducing the arbitrage and enforcement gaps criminals currently exploit. AMLA’s remit covers setting customer due diligence (CDD) standards, criteria for business relationships and occasional transactions, group‑wide AML/CFT policies, ongoing monitoring requirements, and defining reporting formats for suspicious activity to financial intelligence units (FIUs). National supervisors will retain day‑to‑day oversight, but coordination, supervisory convergence and a central AML/CFT database will strengthen cross‑border enforcement and intelligence sharing.
Phased consultations and what to expect in 2026
AMLA plans extensive public consultations in 2026 on draft instruments affecting the non‑financial sector. Topics scheduled for consultation include harmonised customer due diligence rules, thresholds for which customers require checks, group‑wide policies, handling of third countries that prohibit EU‑equivalent group rules, business‑wide risk assessments (BWRA), ongoing monitoring, and reporting of suspicions. Supervisory convergence measures due for consultation include the gravity of AML/CFT obligation breaches and penalties, home/host supervisory cooperation, central database requirements, supervisor risk assessment methodologies for non‑financial obliged entities, and the operation of AML/CFT supervisory colleges.
Operational implications for obliged entities
From a practical standpoint, non‑financial firms should start gap analyses against the expected EU standards, mapping client onboarding, transaction monitoring, record keeping and suspicious activity reporting to the harmonised templates and thresholds that AMLA will propose. Firms that operate cross‑border or within groups must anticipate new rules on group‑wide policies and information sharing, and prepare for compliant approaches to third‑country constraints. Supervisors will apply consistent supervisory risk assessments and sanctions frameworks – making early remediation and documentary clarity essential to avoid disproportionate fines and enforcement actions.
Engagement and next steps for industry stakeholders
AMLA emphasises stakeholder input to ensure rules are practical and proportionate. Non‑financial obliged entities should plan to respond to AMLA’s public consultations in 2026 and engage with national supervisors now to align internal controls and training programs. Legal, compliance and business teams need to cooperate to ensure customer due diligence processes, ongoing monitoring procedures and reporting channels meet the forthcoming EU standards and that systems are ready for the July 2027 implementation date.
Conclusion – preparing for a single European AML/CFT standard
The new EU framework represents a significant shift toward harmonisation and tighter coordination between supervisors and intelligence authorities, expanding the scope of regulated activity beyond banks to many non‑financial professions. For firms in scope, the transition requires anticipatory compliance work, active engagement with consultations, and updates to governance and operational controls to meet consistent EU expectations for preventing, detecting and reporting financial crime.