AMLD6 and the AMLA Regulation: What Actually Changed for Your Compliance

• The EU's 2024 anti-money-laundering package is three instruments: a directly applicable AML Regulation, the sixth AML Directive, and the regulation creating the EU Anti-Money Laundering Authority, AMLA.
• The package entered into force in 2024, most obligations apply from July 2027, and AMLA began operating from Frankfurt in 2025.
• The big structural change is a single rulebook: the AML Regulation harmonises core obligations directly across member states, reducing the patchwork the directives left behind.
• Crypto-asset service providers are explicitly brought into scope as obliged entities, aligning crypto with the wider AML regime.
• Headline rules include an EU-wide cash payment limit of 10,000 euros and a beneficial-ownership threshold of 25 percent, with central registers.
• AMLD6 compliance is less about a single new rule and more about consistency, auditability, and readiness for centralised EU supervision.

AMLD6 compliance means meeting the obligations of the EU's 2024 anti-money-laundering package: the directly applicable AML Regulation, the sixth AML Directive that member states transpose, and the regulation establishing the new EU Anti-Money Laundering Authority, AMLA. The package entered into force in 2024, with most obligations applying from July 2027 and AMLA operating from 2025.

TL;DR

The EU's 2024 anti-money-laundering package is the most significant overhaul of European AML rules in years, and the shorthand AMLD6 undersells it, because it is really three linked instruments. The AML Regulation, (EU) 2024/1624, is directly applicable and creates a single rulebook of harmonised obligations. The sixth AML Directive, (EU) 2024/1640, sets requirements that member states transpose into national law. And the AMLA Regulation, (EU) 2024/1620, establishes a new EU-level Anti-Money Laundering Authority.

The package entered into force in 2024, most obligations apply from July 2027, and AMLA began operating from Frankfurt in 2025, with direct supervision of the highest-risk groups phasing in later. The substance includes crypto-asset service providers brought into scope, an EU-wide 10,000 euro cash limit, and a 25 percent beneficial-ownership threshold. This guide explains the three instruments, the timeline, what changed, and how to approach AMLD6 compliance. Done well, AMLD6 compliance is a data and consistency problem, not a box-ticking exercise.

12 min read. Last updated 11 November 2026.

What is AMLD6 and the EU AML package?

AMLD6 commonly refers to the sixth Anti-Money Laundering Directive within the EU's 2024 AML reform package. A point of clarification matters here: an earlier directive from 2018, focused on criminalising money laundering, was also sometimes called the sixth directive, but the AMLD6 relevant to this reform is Directive (EU) 2024/1640, part of the package adopted in 2024. Using AMLD6 as shorthand for the whole package is common but imprecise, because the package is broader than any single directive. For obliged entities, AMLD6 compliance therefore means preparing for the whole package, not just one directive.

The reform's purpose is to fix the fragmentation that successive directives created: because directives are transposed differently by each member state, obligations varied across the EU, and criminals exploited the gaps. The 2024 package addresses this with a directly applicable regulation that standardises core rules and a central authority to supervise consistently. So AMLD6 compliance, properly understood, means readiness for a more harmonised, centrally supervised EU regime, which connects to the broader AML compliance software picture.

What are the three instruments in the package?

The package's architecture is three instruments that do different jobs. The AML Regulation, (EU) 2024/1624, often called the single rulebook, is directly applicable in every member state without national transposition, and it sets the harmonised core obligations: customer due diligence, beneficial ownership, reporting, and more, applied uniformly. The sixth AML Directive, (EU) 2024/1640, covers matters left to national implementation, such as the organisation of supervisors and financial intelligence units, and member states transpose it into domestic law. The AMLA Regulation, (EU) 2024/1620, establishes the Anti-Money Laundering Authority as a new EU body.

Understanding which instrument does what matters for compliance planning. The directly applicable Regulation means core obligations will be consistent across the EU and not subject to national variation, while the Directive means some elements still depend on each member state's transposition. For a multi-jurisdiction obliged entity, the single rulebook is the headline: far more of your obligations will be identical across the EU than before.

What is the timeline, and when does it apply?

The package entered into force in mid-2024, but its obligations phase in over several years. The AML Regulation, the single rulebook, applies from 10 July 2027, which is the key date for most obliged entities to be fully compliant with the harmonised obligations. The AMLA Regulation established the authority earlier, and AMLA began operating from Frankfurt in 2025, building up its staff and capabilities ahead of taking on direct supervisory functions, with direct supervision of the highest-risk cross-border groups phasing in toward 2028. Member states transpose the Directive on their own timelines within the package's deadlines.

So the practical planning horizon is clear: AMLA exists and is operating now, and the substantive single-rulebook obligations bite from July 2027. AMLD6 compliance is therefore a multi-year programme, not a single deadline, and the firms that start aligning their data and processes early will be far better placed than those waiting for 2027. Always confirm the latest dates, as implementing measures and guidance continue to be issued.

What changed for crypto-asset service providers?

A significant change is that crypto-asset service providers, CASPs, are explicitly brought within the AML regime as obliged entities under the package. This aligns crypto with the obligations long applied to banks and other financial institutions: customer due diligence, beneficial-ownership checks, monitoring, and reporting. Combined with the Markets in Crypto-Assets regulation and the Travel Rule, it means EU crypto firms face a comprehensive, harmonised AML framework rather than a patchwork.

For CASPs the implication is that AMLD6 compliance is not optional or lighter than for traditional finance; the same core obligations apply, supervised consistently. Crypto firms operating in the EU should ensure their KYC, screening, and monitoring meet the single-rulebook standard, the connected approach we describe in the crypto compliance software comparison and the FATF Travel Rule guide. The era of crypto being treated as outside the mainstream AML regime is ending in the EU. For CASPs, AMLD6 compliance now means the same single-rulebook bar as banks.

What are the headline rules on cash and beneficial ownership?

Two substantive rules attract the most attention. First, an EU-wide limit on large cash payments: the package sets a cap of 10,000 euros on cash payments for goods and services across the EU, with member states able to set lower limits, aimed at curbing cash-based laundering. Second, beneficial ownership: the package maintains a 25 percent ownership-or-control threshold for identifying beneficial owners, with provisions for central beneficial-ownership registers and the ability to apply lower thresholds in higher-risk situations.

These are the rules most likely to surface in coverage, but for an obliged entity the bigger story is the harmonisation underneath them: customer due diligence, enhanced due diligence triggers, and reporting becoming consistent across the EU. Resolving beneficial ownership to the 25 percent threshold reliably, across jurisdictions, is exactly the work UBO mapping supports, and it becomes more important as registers and obligations standardise.

What does AMLA do, and who will it supervise?

AMLA, the Anti-Money Laundering Authority, is the new centrepiece. Operating from Frankfurt, it has two broad roles. First, direct supervision: from around 2028 it will directly supervise a set of the highest-risk cross-border financial groups, taking on a hands-on supervisory role that previously sat entirely with national authorities. Second, coordination and standard-setting: it will support and coordinate national supervisors and financial intelligence units, and help ensure the single rulebook is applied consistently across the EU.

For most obliged entities, AMLA will not be their direct supervisor, but its existence raises the bar everywhere, because national supervisors will be coordinated and held to common standards, and AMLA's guidance will shape expectations. The practical message is consistency: AMLD6 compliance means being ready for a regime where interpretation varies far less by country, and where the records you keep need to satisfy a more uniform, more demanding standard, the theme of an audit-ready compliance stack.

How should you prepare for AMLD6 compliance?

Preparation is a multi-year programme, and the firms that start now will be readiest for July 2027. Map your obligations against the single rulebook to see where harmonised requirements differ from your current national-law-based processes. Standardise your customer due diligence, beneficial-ownership resolution, screening, and reporting so they meet the EU-wide standard rather than the lowest national bar. Ensure crypto operations, if any, are brought up to the same AML standard as the rest of the business.

Above all, invest in consistent, auditable records, because a centrally coordinated regime with AMLA in the background will expect you to produce clean, uniform evidence on demand, across jurisdictions. Treat beneficial ownership, perpetual monitoring, and documented decisions as the foundations, and build the data layer so the audit trail assembles itself. AMLD6 compliance rewards the firms that harmonise early and document well, and penalises those who wait. Book an EU AML readiness review to assess your gap.

The bottom line

The EU's 2024 AML package is bigger than the AMLD6 label suggests. A directly applicable single rulebook, a transposed directive, and a new central authority together replace a fragmented, country-by-country regime with a harmonised, centrally coordinated one. Crypto is in scope, a 10,000 euro cash limit and a 25 percent beneficial-ownership threshold are headline rules, and AMLA is already operating ahead of the single rulebook applying from July 2027. In short, AMLD6 compliance is now the organising principle for EU AML readiness.

AMLD6 compliance is therefore a multi-year readiness programme, not a single deadline. Harmonise your due diligence, ownership resolution, screening, and reporting to the EU-wide standard, bring crypto operations up to the same bar, and invest in consistent, auditable records, because centralised supervision rewards firms that prepare early and document well.

Book an EU AML readiness review, or see how it works.

Related resources

• AML compliance software in 2026
• Correspondent banking due diligence in 2026
• Perpetual KYC vs periodic KYC
• UBO mapping with AI
• Crypto compliance software: a 2026 comparison
• AML software
• How it works

Cited sources

• EUR-Lex, Regulation (EU) 2024/1624 (the AML Regulation): https://eur-lex.europa.eu/eli/reg/2024/1624/oj
• EUR-Lex, Directive (EU) 2024/1640 (the sixth AML Directive): https://eur-lex.europa.eu/eli/dir/2024/1640/oj
• EUR-Lex, Regulation (EU) 2024/1620 (the AMLA Regulation): https://eur-lex.europa.eu/eli/reg/2024/1620/oj
• Anti-Money Laundering Authority (AMLA): https://www.amla.europa.eu/about-amla_en
• FATF Recommendations: https://www.fatf-gafi.org/en/topics/fatf-recommendations.html