EU AMLR & AMLA: What Actually Changes for Compliance Teams in 2027

# EU AMLR & AMLA: What Actually Changes for Compliance Teams in 2027 IGInfocredit Group December 14, 2025 10 min read The EU's Anti-Money Laundering Regulation becomes directly applicable in mid-2027, replacing 27 national rule books with one. Here's what genuinely changes — and what compliance teams should be doing now to avoid a last-minute scramble. On 10 July 2027, the **EU Anti-Money Laundering Regulation (AMLR)** becomes directly applicable across all Member States, accompanied by the operational launch of the **Anti-Money Laundering Authority (AMLA)** in Frankfurt. For the first time in two decades, AML/CFT obligations will not be filtered through national transposition — the same rule book applies to a Cypriot crypto exchange, a German private bank, and a Maltese gaming operator. ## What Genuinely Changes ### Single rule book Customer due diligence, beneficial ownership, PEP handling, and reporting obligations are now harmonised across all 27 Member States. National divergences become exceptions, not the norm. ### Direct AMLA supervision Up to 40 of the highest-risk credit and financial institutions will be directly supervised by AMLA. The remainder fall under coordinated indirect supervision — but to AMLA standards. ### EU-wide cash limit A €10,000 cap on cash payments applies across the Union, with stricter Member-State limits permitted. Persons trading in goods above €10,000 in cash become obliged entities. ### Expanded scope Crypto-asset service providers, crowdfunding platforms, professional football clubs and agents (in Member States that opt in), and high-value goods dealers all fall in scope. ## Beneficial Ownership: 25% — Sometimes 15% The default ownership threshold remains **25% plus one share**, but AMLR empowers the Commission to lower it to **15%** for sectors assessed as higher-risk. Expect this to be invoked first for crypto, gaming, and certain trust and company-service providers. Multi-layer structures must be unwrapped; the "senior managing official" fallback is permitted only when no natural person can be identified after a documented exhaustive search. ## CDD Goes Risk-Based — But With Sharper Edges - **Standard CDD** for occasional transactions is triggered at €10,000 (or €1,000 for crypto-asset transfers). - **Enhanced CDD** is mandatory for high-net-worth individuals (assets ≥ €50m, excluding primary residence), high-risk third countries on the EU list, and cross-border correspondent relationships. - **Simplified CDD** remains permitted, but only after a documented risk-assessment and never as a default for low-value retail products. ## What to Expect from AMLA AMLA will issue binding regulatory and implementing technical standards, run joint supervisory teams (JSTs) for directly-supervised entities, and operate a central database of supervisory data. For indirect-supervised firms, expect AMLA to drive convergence through peer reviews, thematic inspections, and the power to step in when a national supervisor is judged inadequate. > "The single rule book is a genuine simplification — but only if your control framework was already designed to a high common denominator. Firms that optimised to the lowest-cost national regime will find 2027 significantly more expensive." Infocredit Group · ComplianceSuite.ai practice note ## A 4-Step Plan for the Next 12 Months 1. **Gap analysis** against final AMLR text and the first batch of AMLA RTS — focus on BO, EDD triggers, and group-wide policies. 2. **Data architecture review** — can your systems evidence the new BO, sanctions and PEP data points to AMLA-grade standards? 3. **Group-wide policy refresh** — AMLR Article 16 makes the parent responsible for group AML governance, including third-country branches. 4. **Supervisory readiness rehearsal** — simulate an AMLA or NCA information request end-to-end; aim for a 5-business-day turnaround. Talk to our team about a structured AMLR readiness review, or explore how ComplianceSuite.ai's modules align to the new framework on the [platform overview](https://compliancesuite.ai/product). ## Turn compliance into your competitive advantage. See how ComplianceSuite.ai's four pillars can transform your KYC, AML, fraud, and transaction-monitoring workflows. [Book a demo](https://compliancesuite.ai/contact) [More insights](https://compliancesuite.ai/insights) ## We value your privacy We use essential cookies to make ComplianceSuite work. With your consent, we'll also use analytics and marketing cookies to improve the site and measure campaign performance. You can change your choice at any time. Read our [Privacy Policy](https://compliancesuite.ai/privacy) and [Cookie Notice](https://compliancesuite.ai/cookies). CustomiseReject non-essentialAccept all