AMLA Lays the Groundwork for EU-Wide AML Supervision Ahead of 2028 Shift

Key Takeaways

• Direct EU Supervision Begins in 2028: AMLA will take over supervision of 40 high-risk financial institutions or groups.
• Single Risk Lens Across the EU: National supervisors and AMLA will apply the same data points and criteria when assessing AML and CFT risks.
• Binding Standards Pending Approval: Once approved by the European Commission, the rules will apply directly in all Member States.
• Consultation Now Open: Stakeholders can comment on cooperation standards until 27 January 2026.
• Testing Phase Planned for 2026: AMLA will trial the methodology and selection process before supervision goes live.

Deep Dive

Europe’s new anti-money laundering authority is beginning to move from blueprint to reality. The Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) on Thursday set out the rules that will underpin its future role as a direct supervisor of the EU’s highest-risk financial institutions, marking a major step toward more unified AML and CFT oversight across the bloc.

From 2028, AMLA will directly supervise 40 of the most complex and high-risk financial institutions or groups operating in the EU. The instruments published this week explain how those institutions will be identified and how AMLA and national supervisors will work from the same playbook when assessing money laundering and terrorist financing risks.

One Methodology, One Understanding of Risk

At the core of the announcement is a move that EU supervisors have long debated but never fully achieved: a common risk assessment methodology.

Two draft regulatory technical standards set out how this will work. One establishes the data points and criteria national supervisors must use when assessing the institutions they oversee. The second applies those same inputs to AMLA’s own process for selecting which firms will fall under its direct supervision.

The goal is consistency, ensuring that risk looks the same whether it is being assessed in Frankfurt, Paris, or Warsaw. Once approved by the European Commission, the standards will apply directly across the EU, removing room for national interpretation.

“These instruments mark a significant step toward supervisory convergence,” said AMLA Chair Bruna Szego, pointing to the close cooperation between the new authority and national supervisors. That cooperation, she added, will be essential if the EU’s revamped AML framework is to function as intended.

Getting Ready for Direct Oversight

AMLA is also beginning the practical work of preparing for its supervisory role. Alongside the draft risk standards, the authority launched a public consultation on implementing technical standards that govern how AMLA and national supervisors will cooperate, both during the selection of institutions for direct supervision and when supervisory powers are transferred.

The consultation runs until 27 January 2026 and is aimed at supervisors, financial institutions, and other stakeholders who will be affected by the new regime.

Thursday’s announcement is the first in a series of steps leading up to AMLA’s full supervisory mandate. In 2026, the authority plans to work closely with national supervisors to test the risk assessment methodology and selection process, with the aim of identifying weaknesses and refining the framework before it becomes operational.

For banks and other financial institutions already facing heightened AML scrutiny, EU supervision is becoming more centralized, more consistent, and far harder to navigate through national differences alone.

The GRC Report is your premier destination for the latest in governance, risk, and compliance news. As your reliable source for comprehensive coverage, we ensure you stay informed and ready to navigate the dynamic landscape of GRC. Beyond being a news source, the GRC Report represents a thriving community of professionals who, like you, are dedicated to GRC excellence. Explore our insightful articles and breaking news, and actively participate in the conversation to enhance your GRC journey.