MFSA Recasts Financial Crime Supervision Ahead of Europe's AML Overhaul

Key Takeaways

• MFSA Unveils New Supervisory Strategy: The Malta Financial Services Authority has published its Financial Crime Compliance Strategy 2026, outlining a forward-looking framework for supervising financial crime risks across the country's financial services sector.
• Supervision Will Be Risk- and Outcomes-Based: The strategy directs supervisory resources toward higher-risk sectors and activities while placing greater emphasis on the effectiveness of firms' AML and CFT controls rather than procedural compliance alone.
• Compliance Embedded Across the Regulatory Lifecycle: The MFSA will integrate financial crime compliance into every stage of regulation, from authorization through ongoing supervision and enforcement.
• Preparing for the EU's New AML Framework: The strategy aligns Malta's supervisory approach with the EU's AML legislative package and the establishment of the Anti-Money Laundering Authority (AMLA), positioning the regulator for a more harmonized European supervisory landscape.

Deep Dive

The Malta Financial Services Authority has published a new strategy for financial crime compliance, and what stands out is not what it asks firms to do differently today. It is how the regulator intends to supervise them tomorrow.

The Financial Crime Compliance Strategy 2026 shifts the emphasis away from compliance as a collection of policies and procedures and toward compliance as something that produces measurable results. It is a supervisory philosophy more than a rulebook, one that directs regulatory attention toward the firms and activities carrying the greatest financial crime risk while measuring whether controls actually work.

As the country's sole regulator for financial services, the Authority says it intends to weave financial crime compliance into every stage of a firm's regulatory relationship. Oversight will no longer be viewed as something that begins after authorization. Instead, the strategy follows regulated entities from authorization through ongoing supervision and, where necessary, enforcement.

That lifecycle approach sits alongside six strategic priorities that define the framework: risk-based supervision, outcomes-based supervision, lifecycle oversight of authorized entities, streamlined regulatory coordination and oversight, stronger coordination and collaboration, and enhanced industry outreach and engagement.

Preparing for a Different European Supervisory Model

The strategy arrives as Europe's anti-money laundering framework is undergoing its most significant institutional change in years. The European Union's new AML legislative package is beginning to reshape supervision across member states, while the creation of the Anti-Money Laundering Authority (AMLA) is expected to bring greater consistency to how financial crime risks are supervised across the bloc. The MFSA's strategy is, in many respects, Malta's blueprint for operating in that new environment.

The Authority says it will strengthen cooperation with domestic and international competent authorities, law enforcement agencies, and industry participants through expanded information-sharing and closer coordination. It also plans to continue supporting regulated firms through supervisory initiatives, guidance, and industry engagement designed to strengthen anti-money laundering and counter-terrorist financing controls as risks evolve.

Kenneth Farrugia, Chief Executive Officer of the MFSA, described the strategy as "a clear and structured approach to strengthening financial crime compliance across the sector."

"By adopting a risk-based, outcomes-driven framework and enhancing collaboration at both national and European level, we are reinforcing the resilience and integrity of Malta's financial system," Farrugia said.

The document does not introduce new compliance obligations. Its significance lies elsewhere. It tells firms how the regulator intends to make decisions, where it expects to focus its attention, and what it increasingly considers evidence of effective compliance. As AMLA begins to reshape supervision across Europe, that guidance offers an early indication of how Malta expects firms to demonstrate that their AML and CFT programs are delivering more than procedural compliance.

The GRC Report is your premier destination for the latest in governance, risk, and compliance news. As your reliable source for comprehensive coverage, we ensure you stay informed and ready to navigate the dynamic landscape of GRC. Beyond being a news source, the GRC Report represents a thriving community of professionals who, like you, are dedicated to GRC excellence. Explore our insightful articles and breaking news, and actively participate in the conversation to enhance your GRC journey.