regulating

AML6: what the new anti-money laundering regulation really changes

Min

•

17.03.2026

From 10 July 2027, all obliged entities in Europe must comply with the new rules of the AML 2024 package. This legislative package addresses two structural problems: regulatory fragmentation between Member States and the blind spot on crypto-assets. In short: harmonised rules across Europe, newly covered sectors, and a new supervisory authority. Here is what you need to know to get ahead.

What exactly is AML6?

A package of three texts, not a single directive

"AML6" refers to a package of three texts adopted together in 2024. It should not be confused with the criminal law directive 2018/1673 (also called 6AMLD), which only addressed the criminalisation of money laundering.

A directive (AMLD6) → sets the rules each Member State must integrate into national law: supervision, beneficial ownership registers, financial intelligence units.
A regulation (AMLR) → harmonised rules directly applicable in all Member States. This is the core of KYC and KYB obligations.
A regulation establishing the AMLA → the new European anti-money laundering authority, based in Frankfurt.

A fourth text completes the framework: the Travel Rule, making mandatory the traceability of all crypto-asset transfers in the EU (sender, recipient, amount).

Key dates to remember

19 June 2024 : Publication in the Official Journal of the EU1

July 2025 : AMLA becomes operational in Frankfurt

2027 : Start of AMLA's progressive direct supervision

‍10 July 2027 : MANDATORY APPLICATION across Europe

‍2029 : Entry into force for professional football

What the AML 2024 package changes in practice

Harmonised KYC/KYB rules across Europe

No more divergences between countries. KYC/KYB obligations, enhanced due diligence and internal controls become applicable simultaneously in all Member States through the AMLR. An organisation operating in France, Germany and the Netherlands will apply the same procedures everywhere.

The AMLA: a European anti-money laundering watchdog

The AMLA (Authority for Anti-Money Laundering and Countering the Financing of Terrorism) has been operational since July 2025. It will begin its progressive direct supervision of the financial actors most exposed to money laundering risks from 2027, in coordination with national supervisors.

Crypto-assets within the common regulatory framework

Crypto-asset service providers (CASPs) now have the same obligations as banks. The Travel Rule makes the traceability of crypto-asset transfers mandatory: identity of the sender, the recipient, and the amount of each transaction.

Newly obliged sectors

The AML 2024 package significantly expands the scope of entities subject to compliance obligations:

Luxury goods: jewellery, watches, cars, yachts, private jets
Golden visas: intermediaries in residence/citizenship by investment programmes
Professional football: clubs and players' agents (from 2029)

And a European first: a European cap of €10,000 on cash payments made by businesses, above which controls and a declaration to the authorities are mandatory — a measure that harmonises reporting and controls across the EU, with Member States able to apply a stricter threshold.

What changes for beneficial owners (UBO)

Broader access and interconnected registers

Who is really behind a company? That is the central question of the UBO (Ultimate Beneficial Owner) framework. AMLD6 strengthens access to this information:

Authorities and obliged entities (banks, lawyers, notaries…) retain unlimited access to national registers.
Journalists and NGOs may access them if they demonstrate a legitimate interest, with harmonised criteria across Europe.
National registers will be interconnected via the BORIS system, to facilitate cross-border checks.

For your organisation, this means systematic verification and continuous updating of UBO data. Automating your KYC/KYB process becomes essential to keep pace without exploding operational costs.

Sanctions under AML6

New thresholds, combined with existing national frameworks

With AML6, new sanction thresholds are defined. For any serious, repeated or systematic violation, they provide in particular:

A minimum fine of €1 million or twice the profit derived from the breach
For financial institutions: a significant percentage of annual turnover

These sanctions will combine with the existing national frameworks, where supervisory authorities can already impose significant penalties.

What exposes obliged entities more: failure to identify UBOs, absence of enhanced due diligence on a high-risk client, failure to report a suspicious transaction, non-compliance with the Travel Rule.

How to prepare before July 2027

Actions to take now

Most obligations have existed for a long time but are being strengthened and reaffirmed. What AML6 changes above all is supervision becoming European, the harmonisation of practices and requirements, and reinforced controls. Practices will harmonise and extend to other sectors.

Before July 2027, here are the concrete priorities:

Align your KYC/KYB policies with the new requirements of the AMLR
Update your UBO processes: systematic verification and regular updating
Integrate the Travel Rule if you process crypto-assets
Check if you fall under the newly obliged sectors
Train your teams on the new Enhanced Due Diligence (EDD) obligations

For more: read the full guide on KYC automation to understand how to industrialise your compliance before the deadline.

Meelo: KYC/KYB compliance ready for AML6

The AML 2024 package requires continuous, traceable and harmonised compliance across Europe. Meelo lets you industrialise your compliance today:

✓ Identity (KYC) and business (KYB) verification in seconds
✓ Continuous identification and updating of beneficial owners (UBO)
✓ Dynamic risk scoring compliant with Enhanced Due Diligence (EDD) requirements
✓ Integrated fraud detection
✓ Automatic documentation and complete audit trail

Less manual processing. More consistency. More regulatory security.

Frequently asked questions about AML6

What is the difference between AML6 and the 6th Anti-Money Laundering Directive (6AMLD)?
The 6AMLD (2018/1673) only addressed the criminal law harmonisation of money laundering offences. The AML 2024 package (often called "AML6" in the industry) is a broader set: a directly applicable regulation, a directive on supervision, and a regulation establishing the AMLA. Both texts coexist.

Will the AMLA replace national supervisors?
No. The AMLA directly supervises the highest-risk financial actors (around 40 institutions initially) and coordinates national supervisors. National authorities retain their powers for institutions outside the AMLA's direct supervision perimeter.

Are SMEs affected by AML6?
It depends on the sector. SMEs in luxury goods, golden visa intermediaries or professional football agents will be obliged entities. A standard SME outside a regulated sector is not directly targeted, unless it is a client of an obliged entity that must subject it to a KYB check.

What is the Travel Rule and who is affected?
The Travel Rule requires crypto-asset service providers to transmit information on the identity of the sender and recipient for each transfer. Any CASP operating in Europe is affected from the mandatory application date of July 2027.