Question 1

Will AMLA directly supervise my firm?

Accepted Answer

Most firms will not be directly supervised by AMLA. Direct supervision is capped at 40 cross-border entities operating in 6 or more EU member states. The vast majority of obliged entities — domestic banks, payment institutions, law firms, accountants, real estate agents — will continue to be supervised by their national competent authority. In the UK, that means the FCA, HMRC, or relevant professional body. AMLA's impact on these firms comes through the binding technical standards it issues, which national supervisors enforce.

Question 2

When does the AMLR apply?

Accepted Answer

Regulation (EU) 2024/1624 applies from 10 July 2027 throughout the EU without requiring national legislation. This is a regulation, not a directive — it is directly applicable. AMLD6 must be transposed by EU member states by July 2027, covering complementary institutional and supervisory matters. Preparation should start now: AMLA is issuing binding technical standards throughout 2025-2026 that will shape how the July 2027 requirements are interpreted and enforced from day one.

Question 3

Are lawyers and accountants subject to AMLA?

Accepted Answer

Yes — legal and accounting professionals remain obliged entities under AMLD6. They will not be directly supervised by AMLA but must comply with the binding technical standards AMLA issues. National supervisors — for example, the Legal Sector Affinity Group (LSAG) in the UK, or the Barreau and Ordre des experts-comptables in France — remain responsible for day-to-day oversight. The practical effect is that AMLA sets the standards, and national bodies enforce them.

Question 4

What is the new EU cash payment limit?

Accepted Answer

The AMLR sets a €10,000 cap on professional cash payments EU-wide — the first time this limit has been set uniformly across all member states. Identity verification is required for cash transactions of €3,000 or more. Member states can set lower limits: Germany, for example, previously had no national cap and must now comply with the €10,000 ceiling. This change is particularly significant for luxury goods dealers, art market participants, and real estate professionals who are accustomed to accepting large cash transactions.

Question 5

How does CheckFile help with AMLA compliance?

Accepted Answer

CheckFile automates KYC document verification with multi-layer analysis covering structural checks, metadata analysis, and cross-document consistency. Supporting 3,200+ document types across 32 jurisdictions, CheckFile helps obliged entities meet the AMLR's due diligence requirements efficiently — whether for standard, enhanced, or simplified due diligence tiers. Automated verification reduces manual review time while maintaining the audit trail required for regulatory examination.

Question 6

Is the risk-based approach mandatory for all UK-regulated firms?

Accepted Answer

Yes. Regulation 18 of the Money Laundering Regulations 2017 requires every regulated firm to conduct a written firm-wide risk assessment. The FCA's Financial Crime Guide (FCG) provides detailed expectations for how the RBA should be implemented, documented, and reviewed. Failure to maintain a compliant RBA is itself a regulatory breach, regardless of whether any actual money laundering occurred. The FCA has issued public censures specifically for inadequate risk assessment documentation, even where no financial crime was detected.

Question 7

What is the difference between SDD and EDD under MLR 2017?

Accepted Answer

Simplified due diligence (SDD) reduces the intensity of verification when both the customer and product are demonstrably low risk, such as a listed company accessing a standard current account. Enhanced due diligence (EDD) increases scrutiny for higher-risk situations — it is mandatory for PEPs, correspondent banking relationships, high-risk third-country customers, and non-face-to-face relationships assessed as high risk. EDD always requires senior management sign-off before the relationship is established or continued, and must include source-of-wealth documentation. SDD and EDD are not optional add-ons; applying the wrong tier is a compliance failure.

Question 8

How often should customer risk profiles be reassessed?

Accepted Answer

Standard CDD requires periodic review at least annually, plus reassessment on any triggering event: a change in the customer's business activity, appearance on a sanctions list, a change in beneficial ownership structure, or an unusual transaction pattern. EDD customers should be reviewed more frequently — typically every six months or on any transaction anomaly — given the elevated risk profile. Firms should also conduct a portfolio-wide review whenever the FATF updates its grey or black list, as geographic risk changes can affect the scores of multiple customers simultaneously.

Question 9

What are the FCA penalties for inadequate risk-based AML?

Accepted Answer

The FCA can impose unlimited financial penalties under the Financial Services and Markets Act 2000 (FSMA). Recent examples include NatWest's £264.8 million fine (2022) and Santander UK's £107.7 million fine (2022), both centred on risk-based AML failures including inadequate transaction monitoring and failure to apply EDD. Beyond financial penalties, the FCA can restrict a firm's permissions, impose requirements on how business is conducted, or pursue individual accountability under the Senior Managers and Certification Regime (SMCR), making senior managers personally liable for systemic AML failures within their area of responsibility.

Question 10

Is it illegal to lie on a CV in the UK?

Accepted Answer

Yes. Knowingly submitting false information on a CV — including fabricated qualifications, misrepresented employment dates, or false claims about professional licences — constitutes False Representation under section 2 of the Fraud Act 2006 where the candidate intends to gain a financial advantage (employment and salary) by making a dishonest false statement. The maximum sentence is ten years' imprisonment. In addition, using a forged diploma or certificate as part of that deception separately engages the Forgery and Counterfeiting Act 1981. Not every inaccuracy on a CV meets the criminal threshold — exaggerating a job title or omitting a short role is unlikely to be prosecuted — but fabricating degree qualifications or professional licences that did not exist clearly does.

Compliance

AMLA: EU AML Authority Compliance Obligations 2026

Risk-Based Approach in AML: Customer Risk Scoring Model Guide 2026

AI CV and Diploma Fraud: Detection Guide for Employers 2026

Adverse Media Screening for AML Compliance: 2026 Guide

AML Compliance for Real Estate Agents 2026: Obligations and Practical Guide

Enhanced Due Diligence (EDD): Complete Compliance Guide

Perpetual KYC: Continuous Customer Monitoring Guide 2026

Retail Employee Screening: Compliance Guide 2026

EU AI Act Synthetic Media: Disclosure Obligations for Businesses 2026

Synthetic Identity Fraud: How AI Fabricates KYC Documents

Cross-Border Compliance: Document Verification for International Business

KYC Remediation: Complete Guide to Re-Verifying Customer Records

Money Laundering Typologies: Schemes and Document Red Flags

AML Red Flags: Suspicious Activity Indicators for Compliance Teams

SOC 2 Compliance for SaaS: Document Security, Controls and Audit Readiness

How to Choose an AML Solution: Evaluation Criteria and Checklist

Compliance Audit Checklist: Preparation Guide

Enterprise KYC Solutions Comparison: Features, Pricing and Compliance

AML Transaction Monitoring: Rules & Alerts

PEP Screening: Identify PEPs

Sanctions Screening: OFAC & EU Lists

Third-Party Risk Management (TPRM): Complete Guide 2026

Compliance Risk Assessment: UK Guide

GRC Guide: Complete Guide 2026

How to Build a Document Compliance Program from Scratch

Document Compliance Guide for Businesses in 2026

Vendor Compliance Certificate Verification

KYC: The Complete Guide for Businesses in 2026

Right to Work Check: Employer Compliance Guide 2026

Due diligence explained: business checklist

Anti-Money Laundering: Complete AML Compliance Guide

AMLD6 Beneficial Ownership Verification Requirements

eIDAS 2.0: The EU Digital Identity Wallet

GDPR and Document Management: Practical Compliance

MiCA 2026: Crypto KYC and Identity Rules

France E-Invoicing 2026: Compliance Guide

KYB: Business Document Verification Guide

AMLD6 Compliance Guide: Obliged Entities

DORA 2026: Document Verification for Finance

Equipment Leasing: Document Compliance in 2026

GDPR and Identity Documents: Compliance Guide

KYC 2026: New Requirements in Europe