AMLA's New EU AML Enforcement & UBO Rules (2026) Explained

Starting in 2026, businesses must verify Ultimate Beneficial Owners (UBOs) using independent sources and comply with new Anti-Money Laundering Authority (AMLA) oversight. The EU is ushering in a new era of anti-money laundering (AML) and counter-terrorist financing (CTF) enforcement with the establishment of AMLA and updated UBO rules. This comprehensive legislative package aims to create a more harmonized and effective framework across all member states, significantly impacting how businesses conduct due diligence and report suspicious activities.

Key Takeaways from AMLA and New UBO Rules

• Centralized Oversight: AMLA will directly supervise high-risk financial entities and coordinate national supervisors, creating a unified EU AML/CTF system.
• Stricter UBO Verification: New rules mandate enhanced accuracy and accessibility of UBO information, requiring businesses to go beyond self-declarations, as outlined in the proposed AML Regulation (AMLR) Article 10.
• Harmonized Framework: A single EU AML Rulebook will replace disparate national implementations, reducing regulatory arbitrage.
• Enhanced Enforcement: AMLA will have direct enforcement powers, including imposing fines, for breaches by supervised entities, as detailed in the AMLA Regulation (AMLAR) Article 55.
• Increased Scrutiny: Businesses, particularly those in high-risk sectors, will face more rigorous due diligence requirements and reporting obligations.

Understanding the Anti-Money Laundering Authority (AMLA)

AMLA is the cornerstone of the EU's new AML/CTF package. Officially established in early 2024 and expected to be fully operational by mid-2025, with direct supervisory powers commencing in 2026, AMLA will serve as the central authority for AML/CTF supervision within the EU. Its primary goal is to enhance the effectiveness of the Union's framework by ensuring consistent application of rules and fostering cooperation among national authorities, as stipulated in the AMLA Regulation.

AMLA's Core Responsibilities

AMLA's mandate is broad, covering both direct supervision and coordination roles:

• Direct Supervision: AMLA will directly supervise selected high-risk financial sector entities that operate across multiple member states or pose significant money laundering risks, as per AMLAR Article 6. This direct oversight ensures a consistent approach to supervision for critical players.
• Coordination and Harmonization: It will coordinate national supervisory authorities, develop common supervisory methodologies, and facilitate information exchange, as outlined in AMLAR Article 15. This aims to prevent regulatory arbitrage and ensure a level playing field across the EU.
• Enforcement: AMLA will have the power to impose administrative sanctions and measures on supervised entities for serious breaches of AML/CTF rules, as specified in AMLAR Article 55. This direct enforcement capability marks a significant shift from the previous, more fragmented system.
• Financial Intelligence Units (FIUs): AMLA will support and coordinate the work of national FIUs, enhancing their capacity to detect and analyze suspicious transactions, as per AMLAR Article 30.

The EU's new AML/CTF package is a response to the evolving landscape of financial crime, with illicit financial flows estimated to be between 2-5% of global GDP annually. AMLA is designed to close existing loopholes and strengthen the bloc's defenses.

New Ultimate Beneficial Ownership (UBO) Rules: A Deeper Dive

The updated UBO rules, part of the broader AML package, are designed to increase transparency regarding who truly owns and controls legal entities. The aim is to prevent criminals and terrorists from hiding their identities behind complex corporate structures. These rules will significantly impact how businesses identify, verify, and report UBO information, as detailed in the proposed AML Regulation (AMLR) Chapter III.

Key Changes in UBO Identification and Verification

The new UBO framework introduces several critical updates:

1. Lowered Ownership Thresholds: While the 25% ownership threshold generally remains, there's increased emphasis on identifying beneficial owners through control mechanisms, even if direct ownership is below this threshold, as per AMLR Article 2.
2. Enhanced Verification Requirements: Businesses will be required to take reasonable measures to verify the identity of beneficial owners beyond relying solely on self-declarations or company registers. This includes using reliable, independent sources, as mandated by AMLR Article 10.
3. Interconnected UBO Registers: National UBO registers will be more interconnected and accessible, facilitating cross-border investigations and ensuring data consistency, as outlined in AMLR Article 14.
4. Definition of Beneficial Ownership: The definition is clarified to include individuals who ultimately own or control a legal entity directly or indirectly, including through bearer shareholdings, control via other means, or holding senior management positions if no other UBO is identified, as per AMLR Article 2.

1. Start UBO Verification: Initiate the process of identifying the Ultimate Beneficial Owner.
2. Initial UBO Identification: Begin by identifying potential UBOs based on ownership and control structures.
3. Check Company Registry & Internal Records: Consult official company registries and internal corporate documents.
4. Is UBO Identified?: Determine if a UBO can be clearly identified based on initial checks.
5. Identify Senior Managing Official as UBO of Last Resort: If no UBO is identified, designate a senior managing official as the beneficial owner.
6. Gather UBO Data: Collect essential UBO information: Name, Date of Birth, Nationality, and Address.
7. Verify UBO Data with Independent Sources: Cross-reference collected UBO data with reliable, independent sources.
8. Are Sources Reliable & Independent?: Assess the quality and independence of the verification sources used.
9. Request Additional Documentation or Data: If sources are insufficient, request more documents or data for verification.
10. Conduct AML Screening for UBO: Perform AML checks on the identified UBO against watchlists and databases.
11. Assess UBO Risk: Evaluate the UBO's risk profile (e.g., PEP status, sanctions, adverse media).
12. Record & Document UBO Information & Verification Steps: Maintain detailed records of all UBO data and the verification process.
13. Monitor UBO Changes Continuously: Implement ongoing monitoring to detect any changes in UBO status.
14. End UBO Verification Process: Conclude the UBO verification, ensuring all requirements are met.

The diagram above illustrates a typical enhanced UBO verification process that businesses may need to adopt to comply with the new requirements, emphasizing the need for independent source verification and ongoing monitoring.

Practical Implications for Businesses Regarding AMLA UBO Rules

For regulated entities, the new AMLA UBO rules translate into more stringent due diligence processes. Here's what businesses need to prepare for:

Area of Impact	Previous Approach (Pre-2026)	New Approach (Post-2026)
UBO Identification	Rely on registers/self-declaration; 25% ownership focus.	Deeper investigation into control structures; consideration of lower ownership with significant influence.
UBO Verification	Basic checks, often self-certification.	Mandatory verification using independent, reliable sources (e.g., public records, identity verification providers).
Data Accuracy	Periodic updates, often reactive.	Proactive monitoring and immediate updates for changes in UBO status.
Risk Assessment	General assessment of corporate structures.	Specific risk assessment tied to UBO complexity and jurisdictions involved.
Reporting	Reporting discrepancies to national authorities.	More standardized reporting, potential direct interaction with AMLA for high-risk cases.

How Didit Can Support Your Verification Needs

Didit offers verification services that can assist businesses in meeting their due diligence obligations. Our offerings include:

• Business Verification (KYB): Didit's KYB solution provides registry lookups from $2.00 per business, UBO/officer extraction, entity/person AML, linked KYC, and document OCR.
• AML Screening: We offer AML screening at $0.20 per check across 1,300+ lists, with ongoing AML at $0.07 per user per year.
• User Verification (KYC): Our KYC services include ID Verification ($0.15), Passive Liveness ($0.10), Face Match 1:1 ($0.05), and Proof of Address ($0.20). A Full KYC bundle (ID + Passive Liveness + Face Match + IP) is available for $0.33.
• Workflow Orchestrator: The Workflow Orchestrator is provided for free, alongside MCP Server and SDKs.

Ready to Get Started?

The implementation of AMLA and the new UBO rules marks a significant shift in the EU's approach to combating financial crime. Businesses must proactively assess their current AML/CTF frameworks, update their UBO identification and verification processes, and leverage reliable technological solutions to ensure compliance. Adapting early will not only mitigate regulatory risks but also strengthen trust and integrity within the financial ecosystem.

Frequently Asked Questions (FAQs)

Q1: When do the new AMLA UBO rules officially come into force?

A1: While AMLA was established in early 2024, its direct supervisory powers and the full application of the new AML/CTF package, including the updated UBO rules, are expected to commence from mid-2026. Businesses should prepare well in advance of this date.

Q2: How will AMLA affect businesses that only operate in one EU member state?

A2: Even if a business operates solely within one member state, it will still be subject to the harmonized AML/CTF rules and UBO requirements enforced by AMLA. AMLA's role is to ensure consistent application across all member states, meaning national supervisors will align their practices with AMLA's guidelines. High-risk entities may also fall under direct AMLA supervision regardless of their geographic footprint.

Q3: What constitutes 'enhanced verification' for UBOs under the new rules?

A3: Enhanced verification means going beyond basic checks. It requires businesses to obtain information from multiple reliable and independent sources to confirm the UBO's identity and ownership/control. This might include cross-referencing public registries, corporate documents, official identity documents, and leveraging third-party verification services. Relying solely on self-declarations will no longer be sufficient, as per AMLR Article 10.

Q4: Will the new UBO rules apply to all types of legal entities?

A4: Yes, the new UBO rules generally apply to all legal entities, including companies, trusts, foundations, and similar legal arrangements, as defined in AMLR Article 2. The goal is to prevent any entity from being used to obscure beneficial ownership for illicit purposes. Specific exemptions might exist for certain types of entities (e.g., publicly traded companies subject to disclosure requirements), but the general scope is broad.

Q5: What are the potential penalties for non-compliance with the new AMLA UBO rules?

A5: Penalties for non-compliance can be significant. AMLA will have the power to impose administrative sanctions and fines on supervised entities for serious breaches, as outlined in AMLAR Article 55. National authorities will also continue to enforce penalties for entities under their direct supervision. These can include substantial financial penalties, reputational damage, and operational restrictions, reflecting the EU's commitment to reliable AML enforcement.