AML6 timeline: the 10 July 2027 deadline and the penalties

In short: the 2024 AML package (the AMLR regulation, the AMLD6 directive and the creation of the AMLA) applies from 10 July 2027. This is the key date for the AMLR regulation, directly applicable in every member state. On that date, a new European authority supervises the framework, penalties are harmonised across the EU (a planned minimum fine of EUR 1,000,000 for serious breaches), and obliged entities must demonstrate a KYC/KYB framework, beneficial owner verification and an audit trail that hold up under inspection. The question is no longer whether you are concerned, but whether your framework will be ready in time.

‍

The key date: 10 July 2027

‍

10 July 2027 is the date to remember. This is when the AMLR regulation becomes directly applicable across the entire European Union, without prior national transposition. In practical terms, the due diligence obligations (KYC, KYB, beneficial owners, ongoing monitoring) apply in the same way everywhere in Europe.

‍

This deadline has two immediate consequences.

‍

• The end of fragmentation: the rules no longer depend on each member state's interpretation. A single baseline applies, which reduces grey areas but also raises the bar for many players.
• A shrinking window: upgrading a compliance framework (tools, procedures, data, traceability) takes months. Waiting until 2027 to get started means taking on an avoidable operational and legal risk.

‍

So keep one thing in mind: the 10 July 2027 AML6 deadline is prepared for today, not the day before.

‍

What is being put in place (AMLA)

‍

Alongside the application of the regulation, the AMLA (Anti-Money Laundering and Countering the Financing of Terrorism Authority), based in Frankfurt, is ramping up. Its role is twofold.

‍

• Direct supervision of certain entities deemed high risk, in particular financial institutions operating across several member states.
• Coordination of national supervisors, to ensure a consistent application of the rules and avoid discrepancies from one country to another.

‍

This shift is structural. Until now, supervision remained essentially national. With the AMLA, a European authority can now directly oversee the most exposed players and impose a common standard of expectations: quality of checks, data updates, ability to document every decision. In other words, ticking boxes will no longer be enough; you will have to prove that the framework works and that it is traceable.

‍

The penalties

‍

The 2024 AML package harmonises penalties across the EU. The key points to know:

‍

• a planned minimum fine of EUR 1,000,000 for serious breaches of anti-money laundering obligations;
• for financial institutions, a share of turnover may be at stake, which can push the amount well beyond the floor;
• penalties that apply not only to entities but also, in some cases, to the individuals responsible within the organisation.

‍

But reducing the risk to a fine would be a mistake. Beyond the amount, it is trust and authorisation that are at stake. A public sanction damages reputation, weakens relationships with banking partners and investors, and can, in the most serious cases, call into question the right to operate. The real cost of a breach is therefore far higher than the budget line for the fine.

‍

How to prepare

‍

Preparing for AML6 is not about piling up last-minute manual checks. The goal is an industrialised, continuous and auditable framework. Here is a concrete checklist.

‍

• Map your obligations: precisely identify your status as an obliged entity, the customer types involved and the due diligence requirements that apply to your business.
• Update your KYC/KYB framework: make identity verification of individuals and identification of companies reliable, with up-to-date sources. For the business side, draw on the best practices in the complete KYB guide.
• Industrialise beneficial owner verification: identify the people who really control the company, trace ownership chains and make this data reliable instead of collecting it by hand.
• Set up continuous verification: a file that is compliant at onboarding may no longer be six months later. Automate updates and change detection.
• Activate PEP and sanctions screening: systematically check politically exposed persons and sanctions lists, with regular rescreening.
• Ensure a usable audit trail: every decision must be dated, justified and documented, ready to be presented during an inspection by the AMLA or a national supervisor.

‍

The common thread of this preparation is simple: move from declarative compliance to demonstrable compliance, where every decision can be replayed and justified.

‍

In conclusion

‍

The 10 July 2027 AML6 deadline is not a distant date: it is a turning point that is prepared for now. A single baseline of rules, a European authority (the AMLA) that supervises and coordinates, and harmonised penalties whose floor reaches EUR 1,000,000 for serious breaches. Organisations that anticipate will turn this constraint into an advantage: a KYC/KYB framework that is automated, continuous and auditable, able to decide fast and justify everything. To go deeper into the substance of the text, read our pillar article on the AML6 regulation.

‍

Sources: Regulation (EU) 2024/1624 (AMLR), Directive (EU) 2024/1640 (AMLD6), Regulation (EU) 2024/1620 creating the AMLA, Official Journal of the European Union.