The established position
AMLA will directly supervise selected high-risk financial entities operating across borders. According to the Authority’s published timeline, the first 40 entities are due to be selected in 2027 and direct supervision will begin in 2028. It would be inaccurate to describe every obliged entity as a future directly supervised AMLA entity.
The effect beyond selected entities
AMLA will coordinate indirect supervision across financial and non-financial sectors and contribute to technical standards and guidance. For a non-selected business, the ordinary relationship with its national authority is not automatically replaced by AMLA. Over time, supervisory methods, requested information and control expectations may become more comparable. That is an operational scenario, not a new requirement already specified for every category.
Three useful questions today
Before buying tools or rewriting every procedure, an organisation should test how it produces and retains AML decisions.
- Does the risk assessment reflect the products, customers, channels and countries actually served?
- Can an independent person reconstruct the data, rationale, escalation and approval behind a high-risk decision?
- Who owns policy and control updates as level-two measures are finalised?
How to read the next steps
Separating adopted law from technical measures still in development avoids two opposite errors: waiting until 2027 to act, or treating unfinished requirements as final today. A sound roadmap records the source, legal status, affected process, owner and expected evidence for each point.
Practical scenario
A firm is not expected to fall under AMLA’s direct supervision and concludes that the new European architecture has limited relevance. That misses the wider effect: technical standards, methodologies and supervisory convergence can also influence how national supervisors assess controls and evidence.
Concrete test: select an approved onboarding exception. Check who authorised it, which evidence addressed the risk and which event triggers a review. The process remains accountable to the competent supervisor; readiness also means explaining it with coherent data.
Sources and references
Informational content. It does not replace an assessment of a specific case.
AMLA — mission, responsibilities and timelineRegulation (EU) 2024/1620