The EU Anti-Money Laundering Authority (AMLA) is now operational in Frankfurt. The Single Rulebook applies from July 10, 2027 and direct supervision of 40 high-risk firms begins in 2028 — the preparation window is open.
AMLA's mandate and timeline
The Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) was established under Regulation (EU) 2024/1620. As of 2026, AMLA has assumed responsibility for preparing AML/CFT regulation across the EU, including draft Regulatory Technical Standards and Implementing Technical Standards. From 2028, AMLA will directly supervise 40 of the most complex high-risk financial institutions or groups in the EU.
The Single Rulebook applies from July 2027
The EU AML Regulation — the core of the Single Rulebook — applies from July 10, 2027 (with a later date of July 10, 2029 for certain obliged entity categories). The regulation replaces five previous money-laundering directives and harmonizes private-sector obligations across the bloc, ending the fragmented national interpretations that previously characterized EU AML.
What is changing for obliged entities
Scope expands meaningfully: crypto-asset service providers, professional football clubs and agents, and additional dealers in luxury goods all come within scope. A new EU-wide cash payment limit applies. Politically Exposed Person (PEP) definitions widen to include sub-national officials and state-owned enterprise officers. Customer due diligence standards harmonize, and information exchange between Financial Intelligence Units gets centralized infrastructure support.
Why the preparation window matters
July 2027 sounds distant but the scale of change — data remediation, system upgrades, governance overhauls — means programs starting now are well-timed. AMLA's 2026 work program publishes consultations on customer due diligence, risk assessments, and enforcement methodologies. Obliged entities are encouraged to engage with consultations to shape the operational details.
What financial institutions should do now
Map current AML programs against the proposed Single Rulebook to surface gaps in PEP definitions, CDD documentation, and beneficial ownership data quality. Cross-border institutions should anticipate direct AMLA supervision selection criteria. Technology stacks should be evaluated for the level of harmonized, audit-ready reporting AMLA will expect.
Cómo ayuda UMCA
UMCA's AML platform delivers the harmonized customer risk profiling, transaction monitoring, and audit trails that EU institutions need to meet the Single Rulebook standard.
