Draft Guidelines on Business-Wide Risk Assessment

AMLA has published draft guidelines on business-wide risk assessment, establishing how regulated entities should conduct and document their anti-money laundering and counter-terrorist financing (AML/CFT) risk assessments on an entity-wide basis. The guidelines will apply to credit institutions, investment firms, crypto-asset service providers, payment institutions, virtual asset service providers, and other entities supervised under the EU AML framework.

Affected entities should review the draft guidelines and prepare submissions to the consultation by 15 July 2026. Private sector contributions are strongly encouraged by AMLA as they will help ensure the final guidelines are aligned with operational practices. Once finalised, the guidelines will create compliance obligations for in-scope entities to implement business-wide AML risk assessment frameworks.