On 1 October 2026 the EU Anti-Money Laundering Authority (AMLA) submitted to the European Commission three final draft regulatory technical standards under the Anti-Money Laundering Regulation (AMLR). This news item covers what each standard regulates and what happens next.
Checked on 25 October 2026.
What the three standards cover
Customer due diligence (Article 28(1) AMLR). The information a company must collect and verify about a customer, lighter measures for lower-risk situations, verification without meeting the customer in person, electronic identification, and screening of politically exposed persons (PEPs), their family members and close associates.
Business relationships and transactions (Article 19(9) AMLR). The criteria that separate a business relationship from an occasional transaction, how to identify linked transactions, and when lower thresholds for customer checks apply.
Group-wide arrangements (Articles 16(4) and 17(3) AMLR). Minimum requirements for AML policies across a group of companies, and extra measures for subsidiaries and branches in non-EU countries, including governance, internal controls and secure information sharing.
What happens next
The Commission now has to adopt the standards, and they must be published in the Official Journal of the EU. AMLA proposes that they apply six months after entry into force. The Regulation itself applies from 10 July 2027, as we explain in our article on KYC and KYB for payment providers.
What it means for business
Payment, crypto and gaming companies can already compare their onboarding with the three topics above, in particular remote verification and PEP screening. Rebuilding procedures is better left until the Commission publishes the final text, because details may still change when the standards are adopted.
See also: What is KYC and why is it essential for cryptocurrency exchanges; Travel Rule for Crypto Businesses. Services: AML and compliance lawyers.
