EU AMLA Finalises Three Technical Standards for AML/CFT
The EU AML Authority finalizes three technical standards that will shape how firms across the EU apply CDD, manage group controls, and aggregate transactions, giving them a six‑month window to adjust.
On 1 October 2026, the EU AML Authority (AMLA) finalized three Regulatory Technical Standards (RTS) under the new EU AML/CFT framework. The first set clarifies when a customer relationship counts as a business relationship versus an occasional transaction and how multiple linked transactions must be aggregated for due‑diligence thresholds. The second defines the exact information and verification steps required for customer and beneficial owner identification, introduces proportionate measures for lower‑risk cases, and sets rules for non‑face‑to‑face digital onboarding. The final set establishes minimum requirements for group‑wide AML/CFT governance, internal controls, and secure intra‑group information sharing, with special attention to subsidiaries and branches in third countries. Once the European Commission adopts the RTS and they’re published in the Official Journal, obliged entities have a six‑month runway to implement the changes. Firms must review onboarding, monitoring, and group policies now, adjust IT systems, train staff, and track the adoption date to avoid supervisory scrutiny. The broad, EU‑wide impact makes this a must‑watch development for all clients.