AMLA’s inaugural public hearing held on March 24, 2026 included the release of draft Regulatory Technical Standards that materially affect how all EU-obliged entities must implement Know Your Customer, Enhanced Due Diligence, and transaction monitoring controls.
The standards signal a departure from pure self-regulatory interpretation toward prescriptive, uniform requirements. Among the key themes: continuous customer screening is now the baseline expectation, not periodic review; sanctions and PEP screening must be embedded throughout the customer lifecycle, not only at onboarding; and suspicious transaction reporting workflows must be supported by documented internal controls and audit trails that withstand external scrutiny. For transaction monitoring specifically, AMLA’s direction strongly favors dynamic, risk-sensitive detection models over static threshold-based rules — a shift that will require significant investment from institutions using legacy monitoring systems.
Financial institutions should also note AMLA’s explicit interest in the quality and completeness of STR/SAR reporting, reflecting a global trend toward holding firms accountable not just for filing reports but for filing accurate, decision-grade intelligence that law enforcement can act upon. EU institutions have limited time to operationalize these requirements before AMLA assumes direct supervisory authority over the highest-risk cross-border entities.
By FCCT Editorial Team

