14/10/2026

AMLA Direct Supervision From 2028

Most firms will keep dealing with their national supervisor. A small group will not. The Anti-Money Laundering Authority will supervise some high-risk cross-border credit and financial institutions itself, and the selection starts next year.

The rule

Regulation (EU) 2024/1620 sets this out in Article 13. Article 12 has AMLA assess credit and financial institutions, and their groups, that operate in at least six Member States, and rate their residual risk. Those rated high qualify as selected obliged entities. The expected number is 40, but if more than 40 qualify, AMLA may agree a higher number with supervisors. Where the numbers force a choice, the entities active in the most Member States go first, with the highest share of third-country transactions as a tie-breaker.

The timetable

The first selection starts by 1 July 2027 and concludes within six months. AMLA publishes the list once the selection is done, and direct supervision begins six months after publication. That puts the start in 2028; the exact date depends on when the list is published, and the FIAU describes the first selection cycle as scheduled for 2027 and direct supervision as starting from 2028. We have not found a fixed calendar day from AMLA, so treat any specific date you read elsewhere as pending confirmation. Later selections happen every three years. Track the AMLA website for the methodology and any change to dates.

Which sectors

The text speaks of credit and financial institutions and their groups, so the sector label is not the test. Commentators expect high-risk cross-border crypto, payment and e-money firms among the candidates. Treat that as informed guessing, not as a list.

Our view

Do not wait for a letter. If you operate in several Member States and your risk profile is high, prepare as if you will be picked: one group risk assessment, consistent files, a manager who can explain the framework to a new supervisor. The work is useful whether or not you are selected, because the AMLR applies from 10 July 2027 regardless.

What this means for you

Check whether your footprint and risk rating could put you on the list. We can talk it through if you send an enquiry or schedule a no-obligation call. Related: cross-border groups, the Malta view, AMLR in the EU.

General information, not legal advice.

Talk to an expert