Home / Directive (EU) 2015/849 Anti-Money Laundering
Directive (EU) 2015/849 Anti-Money Laundering (4AMLD)

Summary: Directive (EU) 2015/849 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing (4AMLD)

WHAT IS THE AIM OF THE DIRECTIVE?

  • Directive (EU) 2015/849 (4th Anti-Money Laundering Directive, 4AMLD) aims to combat money laundering [1] and the financing of terrorism [2] by preventing the financial market from being misused for these purposes.
  • It replaces the previous Directive 2005/60/EC (3rd Anti-Money Laundering Directive, 3AMLD) that entered into force in 2007.
  • Its purpose is to remove any ambiguities in the previous directive and associated legislation, and to improve the consistency of anti-money laundering and counter-terrorist financing rules across all European Union (EU) Member States.
  • The directive also takes into account the recommendations of the Financial Action Task Force (FATF) from 2012, which were revised in 2023.
  • To reflect these updated recommendations, amending Regulation (EU) 2023/1113 introduces additional categories of virtual asset service providers not previously covered by the directive, which are defined in Regulation (EU) 2023/1114, the markets in crypto-assets regulation. Amending Regulation (EU) 2023/1113 also lays down rules to ensure that crypto-asset [3] service providers [4] are able to appropriately mitigate the money laundering and terrorist financing risks to which they are exposed.

KEY POINTS

The directive applies to:

  • credit institutions;
  • financial institutions;
  • designated non-financial businesses and professions, such as:
    • auditors,
    • external accountants,
    • tax advisors,
    • notaries and lawyers, in certain circumstances,
    • estate agents, when acting as intermediaries in the letting of immovable property for which the monthly rent exceeds €10,000,
    • traders in goods (e.g. precious metals and stones, when payments of €10,000 or more are made in cash),
    • art dealers, where the value of a transaction is €10,000 or more,
    • providers of gambling services.

The directive:

  • reinforces the rules regarding transparency with regard to the identification of customers – especially beneficial owners [5] of companies and legal arrangements (trusts);
  • requires information on beneficial ownership for companies to be held in each Member State in a central register, such as a commercial register, a company register or a public register;
  • improves the awareness of and responsiveness to any money laundering / terrorist financing weakness - in addition to the national risk assessments to be carried out by Member States, the European Commission also conducts assessments of the money laundering / terrorist financing risks affecting the internal market and related to cross-border activities (the first report was released in June 2017);
  • brings about a coordinated European policy to deal with non-EU countries (third countries) which have inefficient anti-money laundering / counter-terrorist financing (AML/CTF) regimes, to protect the EU’s financial system - The first EU list of ‘high-risk third countries’ was adopted by a Commission delegated act in July 2016, and the list has since been amended several times;
  • strengthens and improves cooperation between financial intelligence units (FIUs), which are among the key actors in the fight against money laundering / terrorist financing – A systematic exchange of information between FIUs should take place through advanced technical infrastructures using FIU.net, a decentralised computer network using a sophisticated matching technology;
  • specifies that suspicions of money laundering or terrorist financing must be reported to the public authorities, usually the FIU;
  • requires those to whom it is addressed to introduce:
    • supporting measures, such as ensuring the proper training of personnel and establishing appropriate internal preventive policies and procedures,
    • additional safeguards, such as enhanced customer due diligence for situations of higher risk, like trading with banks situated outside the EU and, in particular, when dealing with natural or legal entities established in non-EU countries identified by the Commission as high-risk third countries;
  • prohibits banks from keeping anonymous safe-deposit boxes in addition to anonymous accounts and passbooks;
  • includes measures to prevents risks linked to prepaid cards and virtual currencies by:
    • lowering the identification threshold for prepaid cardholders from €250 to €150,
    • enabling national FIUs to obtain information allowing them to trace the identity of the owner of virtual currency;
  • strengthens cooperation between FIUs by allowing them to share more information;
  • gives the European Banking Authority (EBA), since , the tasks of preventing the use of the financial system for the purposes of money laundering and terrorist financing and of leading, coordinating and monitoring the efforts of all EU financial services providers and competent authorities in this domain.

Amending Regulation (EU) 2023/1113

Regulation (EU) 2023/1113 creates a system for dealing with exchanges of crypto-assets to ensure they are not used illegally, such as to circumvent sanctions or to fund terrorism or war. To comply with international standards on transfers of crypto-assets and to ensure the traceability of these assets, it requires crypto-asset service providers to gather and, where appropriate, disclose to the authorities certain information about senders and beneficiaries of any transfers of these assets that they undertake, irrespective of their value.

Regulation (EU) 2023/1113 has amended Directive (EU) 2015/849 to:

  • include all categories of crypto-asset service providers as defined in Regulation (EU) 2023/1114 within the definition of ‘financial institutions’ in Directive (EU) 2015/849 (Article 3);
  • require crypto-asset service providers to apply mitigating measures commensurate with the risks associated with transfers involving self-hosted addresses and to implement, where appropriate, enhanced due diligence measures (Article 19a);
  • require crypto-asset service providers to apply appropriate risk mitigating measures when establishing cross-border correspondent relationships involving the execution of crypto-asset services with a respondent entity not established in the EU (new Article 19b);
  • allow Member States to require crypto-asset service providers established in their territory in forms other than a branch, and whose head office is situated in another Member State, to appoint a central contact point in their territory (Article 45, paragraph 9);
  • remove registration requirements in relation to those categories of crypto-asset service providers which will become subject to a single licensing regime under Regulation (EU) 2023/1114 (Article 47, paragraph 1) - these amendments to Directive (EU) 2015/849 also require the European Banking Authority to issue guidelines on a range of issues, including:
    • the criteria and elements that crypto-asset service providers must take into account when assessing their cross-border correspondent relationships involving the execution of crypto-asset services, along with the risk mitigating measures associated with the respondent entities, including the minimum action to be taken by crypto-asset service providers where a respondent entity is not registered or licensed (new Article 19b),
    • risk variables and risk factors to be taken into account by crypto-asset service providers when entering into business relationships or carrying out transactions in crypto-assets (Article 18),
    • measures crypto-asset service providers have to set in place to identify and assess the risk of money laundering and terrorist financing associated with transfers of crypto-assets made to or originating from a self-hosted address [6] (new Article 19a),
    • how the enhanced customer due diligence measures apply and appropriate risk mitigating measures to be taken when obliged entities perform crypto-asset services with unregistered or unlicensed entities which provide crypto-asset services (new Article 24a).

Supplement to Directive (EU) 2015/849

A delegated act, Delegated Regulation (EU) 2019/758, lays down a set of additional measures, including minimum action, that credit and financial institutions must take to effectively handle the money laundering and terrorist financing risk where a non-EU country’s law does not permit the implementation of group-wide policies and procedures at the level of branches or majority-owned subsidiaries that are part of the group and established in the non-EU country.

Repeal

Directive (EU) 2015/849 will be repealed and replaced by Directive (EU) 2024/1640 as of .

FROM WHEN DO THE RULES APPLY?

Directive (EU) 2015/849 has applied since and was originally supposed to become law in the Member States by . This deadline was, however, further extended by several amendments, in particular Directive (EU) 2018/843, which had to be fully transposed into national law by . The same date applied for the establishment of the registers referred to in Article 30 of Directive (EU) 2015/849, as amended, while the registers referred to in Article 31 thereof were to be established by .

The changes introduced by amending Regulation (EU) 2023/1113 apply from .

BACKGROUND

The directive is part of a package of EU legislative measures aimed at preventing money laundering and terrorist financing that includes Regulation (EU) 2015/847 on the traceability of money transfers. It is also part of a broader EU strategy to tackle financial crime that includes the work of:

For further information, see:

KEY TERMS

  1. Money laundering. The conversion of the proceeds of crime into apparently clean funds, usually via the financial system, for example by disguising the sources of the money, changing its form or moving the funds to a place where they are less likely to attract attention.
  2. Terrorist financing. The supply or collection of funds intended to be used to carry out terrorist offences.
  3. Crypto-asset. A digital representation of a value or right which may be transferred and stored electronically in a repository using distributed ledger technology (DLT) or similar technology (that is, it is shared across, and synchronised between, a set of DLT nodes using a consensus mechanism).
  4. Crypto-asset service providers. A legal person or other undertaking whose occupation or business is to provide one or more crypto-asset services to clients on a professional basis, and that is allowed to provide crypto-asset services in accordance with Regulation (EU) 2023/1114.
  5. Beneficial owner. The person who ultimately owns or controls a company.
  6. Self-hosted address. A distributed ledger address not linked to either a crypto-asset service provider or an entity not established in the EU and providing services similar to those of a crypto-asset service provider.

MAIN DOCUMENT

Directive (EU) 2015/849 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing.

RELATED DOCUMENTS

Regulation (EU) 2023/1113 on information accompanying transfers of funds and certain crypto-assets.

Regulation (EU) 2023/1114 on markets in crypto-assets.

Directive (EU) 2019/2177 amending Directive 2009/138/EC on the taking-up and pursuit of the business of Insurance and Reinsurance (Solvency II), Directive 2014/65/EU on markets in financial instruments and Directive (EU) 2015/849 on the prevention of the use of the financial system for the purposes of money-laundering or terrorist financing

Report from the Commission to the European Parliament and the Council on the assessment of the risk of money laundering and terrorist financing affecting the internal market and relating to cross-border activities (COM(2022) 554 final, ).

Commission Recommendation (EU) 2020/1039 on making State financial support to undertakings in the Union conditional on the absence of links to non-cooperative jurisdictions

Report from the Commission to the European Parliament and the Council on the assessment of the risk of money laundering and terrorist financing affecting the internal market and relating to cross-border activities (COM(2019) 370 final, ).

Report from the Commission to the European Parliament and the Council assessing the framework for cooperation between Financial Intelligence Units (COM(2019) 371 final, ).

Commission Delegated Regulation (EU) 2019/758 supplementing Directive (EU) 2015/849 with regard to regulatory technical standards for the minimum action and the type of additional measures credit and financial institutions must take to mitigate money laundering and terrorist financing risk in certain third countries

Directive (EU) 2018/843 amending Directive (EU) 2015/849 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing.

Report from the Commission to the European Parliament and the Council on the assessment of the risk of money laundering and terrorist financing affecting the internal market and relating to cross-border activities (COM(2017) 340 final, ).

Commission Delegated Regulation (EU) 2016/1675 supplementing Directive (EU) 2015/849 of the European Parliament and of the Council by identifying high-risk third countries with strategic deficiencies

Regulation (EU) 2015/847 on information accompanying transfers of funds

Regulation (EU) No 1093/2010 establishing a European Supervisory Authority (European Banking Authority).

Disclaimer

The e-Legal AML/CFT AI Consultant provides exclusively informational and advisory services: it clarifies AML/CFT legal requirements, conducts a legal analysis of the content of submitted internal documents within the scope of an agreed-upon assignment, and prepares recommendations and draft amendments that are purely advisory in nature.

The e-Legal AML/CFT AI Consultant does not assume the role of the person responsible for ensuring a client’s AML/CFT compliance; it does not approve, implement, or monitor the ongoing execution of a client’s policies and procedures; it does not conduct due diligence on clients or beneficial owners, assess the risks of specific clients or transactions, monitor transactions, make decisions regarding the execution or suspicious nature of transactions, submit mandatory reports to the SPCSB, perform statutory AML audits, or certify that a client’s operations comply with AML/CFT requirements. Furthermore, the service does not include the preparation, execution, or facilitation of financial, property, or corporate transactions for the client, the formation or management of companies, the management of assets or accounts, or the provision of fiduciary services.

The outcome of the consultation is limited to a legal assessment of the submitted documents as of an agreed-upon date; it does not confirm that the client has effectively fulfilled AML/CFT requirements, nor does it replace the performance of obligations by the client or their authorized representatives. The use of the consultant’s name or its findings as confirmation of a client’s full AML/CFT compliance—or the designation of the consultant as the party responsible for such compliance—is not permitted.

Alexhost - Webhosting support of the e-Legal.md Diginet.md - Ecommerce Solutions and Internet Marketing OpenCode.md - Open Source products and Digital Public Goods e-Cont.md - Issuance and circulation of e-invoices for payment for business in Moldova (B2B)