EU Anti-Money Laundering Directives (4AMLD to 6AMLD)

The EU Anti-Money Laundering Directives, or AMLDs, are a series of laws designed to prevent money laundering and terrorist financing. Unlike an EU regulation, a directive generally requires each member state to transpose its requirements into national law. That model created a common baseline, but implementation and supervisory practice could still differ between countries.

The fourth, fifth and sixth directives are often discussed together as 4AMLD to 6AMLD. They expanded the range of regulated businesses, strengthened information on who ultimately owns companies, and aligned parts of criminal law. They remain important reference points for compliance even as the EU moves toward a more directly applicable rulebook.

4AMLD: risk-based controls and beneficial ownership

The Fourth Anti-Money Laundering Directive, adopted in 2015, put the risk-based approach at the center of EU anti-money laundering compliance. Rather than applying identical checks to every relationship, obliged entities must assess the risk posed by customers, products, services, delivery channels and geographic exposure, then apply measures proportionate to that risk.

Obliged entities include banks and many other financial institutions, as well as specified non-financial businesses and professions such as certain accountants, lawyers, real-estate actors and gambling providers. The directive reinforced customer due diligence, or CDD: identifying and verifying a customer, understanding the purpose of a business relationship, monitoring activity, and identifying the beneficial owner when the customer is a legal entity or arrangement.

A beneficial owner is the natural person who ultimately owns or controls a company, trust or similar arrangement. 4AMLD required member states to establish beneficial ownership registers, giving competent authorities and other authorized users a source of ownership information. Register data does not remove the need for firms to perform their own checks, especially where information is incomplete, inconsistent or outdated.

5AMLD: cryptoassets and wider register access

The Fifth Anti-Money Laundering Directive, adopted in 2018, extended the EU framework to providers engaged in exchange services between virtual currencies and fiat currencies, and to custodian wallet providers. In practical terms, this brought key cryptoasset intermediaries into anti-money laundering obligations, including customer due diligence and suspicious-activity reporting. The later Markets in Crypto-Assets framework and the 2024 AML package further develop the EU's treatment of cryptoasset services.

5AMLD also broadened access to beneficial ownership registers. However, in 2022 the Court of Justice of the European Union ruled that unrestricted public access to beneficial ownership information interfered seriously with privacy and personal-data rights. The ruling ended the requirement for general public access. Authorities, obliged entities conducting due diligence, and persons able to demonstrate a legitimate interest may still have access under the applicable EU and national rules.

6AMLD: criminal-law alignment

The Sixth Anti-Money Laundering Directive, adopted in 2018 and often called 6AMLD, focused on criminal-law cooperation and definitions. It harmonised a list of predicate offences, meaning the underlying criminal activity that generates property later laundered. The list includes major categories such as fraud, corruption, drug trafficking, human trafficking and tax crimes, subject to the directive's terms.

It also required member states to provide for liability of legal persons, such as companies, where relevant offences are committed for their benefit by persons in leading positions. The directive addressed participation in money laundering, including aiding, abetting and inciting. These rules seek to reduce gaps that can arise when the same conduct is treated differently across national criminal-law systems.

Why AMLD matters for KYC

For identity verification and know-your-customer, or KYC, programs, the directives established the compliance context for determining who a customer is and whether a relationship presents heightened risk. KYC is not simply document collection: it supports the wider CDD process and ongoing monitoring required under anti-money laundering law.

• Verify the identity of customers and, where applicable, persons acting on their behalf.
• Identify and take reasonable measures to verify beneficial owners of companies and other legal arrangements.
• Apply enhanced due diligence in higher-risk cases, such as certain politically exposed persons or high-risk cross-border relationships.
• Maintain records, monitor transactions or relationships on an ongoing basis, and report suspicions through the relevant national process.

What comes next: the 2024 AML package

The EU adopted a major AML package in 2024. Its core is an Anti-Money Laundering Regulation, which is directly applicable across member states and is generally set to apply from 2027. Because a regulation does not need national transposition in the same way as a directive, it is intended to reduce divergent national rules for many core compliance requirements.

The package also creates the Anti-Money Laundering Authority, or AMLA, an EU-level body based in Frankfurt. AMLA will coordinate national supervisors and, for a limited set of the highest-risk financial entities, conduct direct supervision. A new directive remains part of the package for areas that still require national implementation, including aspects of supervision and national institutional arrangements. Together, these measures will replace much of the earlier directive-based patchwork over time.

This explainer is for general information only and is not legal advice. Firms should assess the rules applicable in each relevant member state and seek qualified legal or compliance advice where needed.