AMLA Outlines Crypto Action Plan Prioritizing Risk Analysis, Supervisory Convergence and Blockchain

Key Takeaways

• At the 10th Global Conference on Criminal Finances and Cryptoassets in Luxembourg, AMLA Executive Board Member Simonas Krepšta identified crypto assets as a strategic priority and outlined the Crypto Action Plan for 2026 and beyond.
• The message for compliance teams is that regulation alone is not enough: AMLA expects effective implementation, convergent supervision and stronger analytics across the EU crypto sector.
• Firms should anticipate closer supervisory scrutiny and a forthcoming AMLA report on crypto ML/TF risks.

Deep Dive

At the 10th Global Conference on Criminal Finances and Cryptoassets in Luxembourg, AMLA Executive Board Member Simonas Krepšta identified crypto assets as a strategic priority and outlined the Crypto Action Plan for 2026 and beyond. The message for compliance teams is that regulation alone is not enough: AMLA expects effective implementation, convergent supervision and stronger analytics across the EU crypto sector. Firms should anticipate closer supervisory scrutiny and a forthcoming AMLA report on crypto ML/TF risks.

No new legal requirements were introduced. Krepšta did, however, stress that the MiCA framework and the new AML/CFT package provide a stronger regulatory base, while important risks and vulnerabilities remain. He also called the current fragmented blockchain analytics landscape a problem requiring an EU-level response. This points toward greater expectations, and possibly future guidance or standards, on the use of blockchain analytics for transaction monitoring, wallet screening and risk attribution.

The only timeline given is that AMLA is analyzing ML/TF risks in the crypto sector, with findings expected in a "forthcoming report" with no date. The Action Plan covers 2026 and beyond, with no specific milestones. Compliance teams should therefore treat the report as a likely input to supervisory priorities and to the risk assessment methodologies used by national authorities.

Recommended actions:
- Review enterprise-wide and business-line risk assessments for crypto-related exposure, including customers that are CASPs and flows involving crypto-asset transfers.
- Assess the maturity of blockchain analytics tooling, including coverage, data quality, and integration with transaction monitoring and case management.
- Confirm that MiCA and AML/CFT package implementation is documented, tested and evidenced, since supervisors are focusing on effective implementation and not just formal compliance.
- Monitor the AMLA risk report and any follow-on guidance, and prepare to update policies, typologies and training once published.
- Engage with industry bodies and national competent authorities to contribute to the cooperation efforts AMLA described.

Risk implications: The near-term impact is moderate and mainly concerns supervisory expectations. Firms with weak crypto controls, fragmented analytics or inconsistent cross-border practices face higher exposure to enforcement as convergence increases. Firms that invest early in analytics and well-documented risk-based controls should be better positioned when the report and any resulting guidance are issued.

Source: AMLA - Anti-Money Laundering Authority