EU AML & Crypto Regulatory Tracker
The single rulebook is reshaping compliance across Europe. Every key deadline — MiCA, the Travel Rule, AMLA, the AML Regulation, DORA and Instant Payments — on one timeline, with what each change actually means for CASPs, EMIs and obliged entities.
342
days left
Next critical deadline · 10 Jul 2027
AMLR applies — the single AML rulebook
Obliged entities must align policies to the single rulebook: lower reporting thresholds, broadened suspicion standard, stricter beneficial-ownership and EDD rules. Expect a sharp rise in reportable activity — automation becomes essential.
MiCA stablecoin rules apply (ART & EMT)
MiCA · Reg (EU) 2023/1114, Titles III–IV · EBA / ESMA
Rules for asset-referenced tokens (ARTs) and e-money tokens (EMTs) — including issuer authorization, reserve and redemption requirements — became applicable.
What it means for you
Stablecoin issuers and distributors must hold the relevant authorization, maintain reserves, and meet redemption-at-par obligations. Exchanges must delist non-compliant stablecoins.
MiCA full application — CASP authorization regime live
MiCA · Reg (EU) 2023/1114 · ESMA / National Competent Authorities
The full MiCA framework became applicable. Crypto-Asset Service Providers (CASPs) now require authorization from a national regulator to operate in the EU.
What it means for you
Any firm providing crypto services (custody, exchange, trading, transfer, advice) must be authorized as a CASP or operate under a valid transitional regime. Unauthorized provision becomes a supervisory breach.
Travel Rule applies to all crypto transfers
TFR · Reg (EU) 2023/1113 · EBA
The recast Transfer of Funds Regulation extended the FATF "Travel Rule" to crypto-asset transfers: originator and beneficiary information must travel with every transfer, with no de-minimis threshold.
What it means for you
CASPs must collect, verify, and transmit originator/beneficiary data for every transfer, screen counterparties, and handle transfers to/from self-hosted wallets and non-compliant VASPs.
Instant Payments — banks must be able to receive
Instant Payments Reg · Reg (EU) 2024/886 · European Commission / National authorities
Euro-area PSPs must be able to receive instant credit transfers in euro, settled within 10 seconds, at any time.
What it means for you
Payment infrastructure must support 24/7 sub-10-second settlement on the receive side, with no surcharge versus standard transfers.
DORA applies — ICT operational resilience
DORA · Reg (EU) 2022/2554 · ESAs (EBA, ESMA, EIOPA)
The Digital Operational Resilience Act became applicable to financial entities, including CASPs, covering ICT risk management, incident reporting, resilience testing, and third-party (cloud/vendor) risk.
What it means for you
Compliance and security teams must maintain an ICT risk framework, register critical third-party providers, run resilience testing, and report major ICT incidents within strict deadlines.
AMLA established in Frankfurt
AMLAR · Reg (EU) 2024/1620 · Anti-Money Laundering Authority (AMLA)
The EU’s new Anti-Money Laundering Authority was established, beginning its build-out of staff, data collection, and the regulatory/technical standards (RTS/ITS) that will drive the new single rulebook.
What it means for you
AMLA will set binding technical standards and coordinate national supervisors. Obliged entities should track AMLA guidelines early — they will shape examinations well before direct supervision starts.
Instant Payments — send + mandatory sanctions screening
Instant Payments Reg · Reg (EU) 2024/886 · European Commission / National authorities
Euro-area PSPs must be able to send instant payments and must screen their own customers against EU sanctions lists at least daily, replacing per-transaction screening for instant transfers.
What it means for you
Sanctions screening shifts to frequent customer-base screening rather than ex-ante per-payment checks. With a 10-second settlement window, real-time controls must run with sub-100ms latency. Verification-of-Payee checks also apply.
MiCA transitional period ends (grandfathering)
MiCA · Reg (EU) 2023/1114, Art. 143 · National Competent Authorities
The maximum transitional ("grandfathering") window for crypto firms that operated under national regimes before MiCA closes. After this date, firms without full CASP authorization can no longer provide services.
What it means for you
Firms still relying on transitional status must have secured (or be finalizing) CASP authorization. Note: several member states set shorter windows — check your national deadline, which may already have passed.
PSD3 / PSR — expected application
PSD3 + PSR (proposal) · European Commission (in legislative process)
The third Payment Services Directive and Payment Services Regulation are progressing through the EU legislative process, updating authorization, fraud, and open-banking rules for PSPs and EMIs.
What it means for you
EMIs and payment firms should monitor the final text and timeline. Date is indicative until the regulation is adopted and published.
AMLR applies — the single AML rulebook
AMLR · Reg (EU) 2024/1624 · AMLA / National Competent Authorities
The directly-applicable EU AML Regulation takes effect, harmonizing CDD, beneficial ownership, and suspicious-activity rules across all member states. Suspicion no longer requires identifying a specific predicate offence.
What it means for you
Obliged entities must align policies to the single rulebook: lower reporting thresholds, broadened suspicion standard, stricter beneficial-ownership and EDD rules. Expect a sharp rise in reportable activity — automation becomes essential.
AMLD6 national transposition deadline
AMLD6 · Dir (EU) 2024/1640 · EU Member States
Member states must transpose the sixth AML Directive, covering supervisory powers, FIU cooperation, and access to beneficial-ownership and bank-account registers.
What it means for you
National frameworks tighten supervisory and FIU powers. Compliance teams should expect more intrusive examinations and faster information requests from authorities.
AMLA begins direct supervision of high-risk entities
AMLAR · Reg (EU) 2024/1620 · Anti-Money Laundering Authority (AMLA)
AMLA is expected to take over direct supervision of a first cohort of around 40 high-risk cross-border financial institutions — including major crypto and payment players — selected the prior year.
What it means for you
Selected entities move under direct EU-level supervision with joint supervisory teams. Even non-selected firms will feel the cascade through national supervisors applying AMLA standards.
Get the EU Regulatory Digest
One email a month. The deadlines, fines, and rule changes that affect CASPs, EMIs, and compliance teams in Europe. No spam.
We only use your email to send the digest. Unsubscribe anytime.