AMLD6 Sanctions Framework | Fines & Penalties under Article 53

How costly will breaches of the Anti-Money Laundering Act become from 2026?

With AMLD6 and the new AMLA RTS drafts from February 2026, fines will rise to up to 10% of annual turnover or €5 million. The decisive factor is AMLA’s new categorisation, which draconically penalises systemic failures in customer data updates (Art. 33 RTS).

AMLA takes the helm: The new compliance sanctions catalogue

Europe’s anti-money laundering supervisor AMLA has officially taken control and, right at the start of 2026, ignited the next stage of regulation. With the conclusion of the consultation procedures on the regulatory technical standards (RTS) on 9 March 2026, the era of regulatory non-commitment in Europe is coming to an окончательный end.

These standards form the operational foundation for Regulation (EU) 2024/1624 (AMLR) and Directive (EU) 2024/1640 (AMLD6). At the centre of strategic attention is in particular Article 53 of AMLD6. Here, AMLA now defines the methodological framework for compliance failures: the classification of the severity of breaches and the calculation of the resulting fines will in future be carried out according to Europe-wide harmonised, strict criteria.

This regulatory upheaval brings with it a fundamental paradigm shift:

• From intervals to risk: The move away from rigid five-year deadlines for customer updates in favour of a dynamic, risk-based approach pursuant to Art. 33 of the RTS draft.

• A management task: An operational tour de force that demands far more from management than merely administrative “ticking the box”.

• Investment pressure: Strategic foresight now requires investment in smart IT automation and an entirely new logic of internal resource allocation.

Anyone who cuts costs in the wrong place can quickly get caught in the gears of a supervisor that will in future impose drastic periodic penalty payments on systemic failures. As the deadline for comments has just expired, an immediate analysis of the sanctions methodology is now vital for institutions in order to limit financial exposure risk.

1. Deadlines for the consultation on sanctions and fines

This concerns the draft regulatory technical standards (RTS) on the classification of the severity of breaches and the setting of fines pursuant to Art. 53(10) of Directive (EU) 2024/1640.

• Internal deadline (VIB): feedback from member companies will be accepted until 3 March 2026.
• External deadline (AMLA): the official submission deadline for statements ends on 9 March 2026 at 23:59 (CET).

2. Deadlines for customer due diligence (CDD) and business relationships

This includes the RTS drafts on customer due diligence obligations (Art. 28(1) AMLR) as well as on criteria for business relationships and thresholds (Art. 19(9) AMLR).

• Internal deadline (VIB): comments from member companies on both papers are requested by 27 April 2026.
• External deadline (AMLA): the official submission deadline to the authority is 8 May 2026 at 23:59 (CET).

3. Date for the public hearing

Online hearing: AMLA has announced a public online hearing for 24 March 2026, specifically addressing the drafts on business relationships and customer due diligence.

These new benchmarks in EU anti-money laundering prevention require timely review, as the deadline for the sanctions regime in particular is very short.

1. C-level (management / boards)

Management bears ultimate responsibility for proper AML organisation. The new RTS drafts require strategic engagement with the following points:

• Resource allocation for the risk-based approach: Since the blanket five-year deadline for data updates is replaced by a risk-based approach (Art. 33), management must ensure sufficient budget and technology are available to dynamically monitor individual risk profiles.
• Liability and sanctions management: The consultation on Art. 53(10) of Directive (EU) 2024/1640 defines the severity of breaches and the calculation of fines. The C-level must align the internal control system so that systemic errors are avoided, as AMLA sets clear benchmarks for high sanctions here.
• Strategic positioning: Management should authorise participation in the consultation procedures (via associations such as VIB) to safeguard the institution’s interests when shaping the final standards.

2. Compliance Officer

The Compliance Officer steers the implementation of the regulatory framework and the interface with the supervisor:

• Analysis of the sanctions methodology: They must assess how the new method for setting periodic penalty payments and fines affects the company’s risk profile.
• Deadline management: Monitoring the extremely short submission deadlines—particularly 9 March 2026 for the sanctions regime—falls within their area of responsibility.
• Participation in hearings: Coordinating participation in AMLA’s public online hearing on 24 March 2026 on business relationships and due diligence obligations is a core task.

3. Money Laundering Reporting Officers (Anti-Money Laundering Officers)

For the MLRO, immediate operational adjustment obligations arise for day-to-day practice:

• Revision of CDD processes: The shift from rigid to risk-based updating (Art. 33) requires an adjustment of internal guidelines for customer review (KYC).
• Monitoring of online services: Under the new RTS on Art. 19(9) AMLR, it must be examined whether online registrations that provide ongoing access will in future be strictly classified as a business relationship (instead of an occasional transaction) and monitored accordingly more intensively.
• Identification of linked transactions: Criteria must be implemented to reliably identify transactions that are considered “linked” under Art. 3 of the RTS draft.
• Technical input statement: They must consolidate internal expertise and deliver comments on the papers to VIB by 3 March and 27 April 2026 respectively.

1. C-level (management / boards)

The C-level is increasingly moving into liability for resource allocation and system integrity. The risk-based approach under Art. 33 RTS forces investment in automated monitoring cycles. At the same time, the standardisation of fines under Art. 53 AMLD6 increases financial risk. Given the tight deadline until 9 March 2026, time is pressing for strategic safeguarding.

For senior management, the focus shifts from purely administrative duties to liability responsibility for resource allocation and system integrity.

• Resource gap in CDD (Art. 33 RTS draft on Art. 28(1) AMLR): The move away from the rigid five-year deadline in favour of a risk-based approach means that review cycles must now be managed individually. The C-level must decide whether to invest in automated IT solutions to handle these dynamic intervals without massive headcount growth.
• Financial exposure risk (Art. 53(10) AMLD6): Since AMLA now sets methodological standards for the level of fines and the severity of breaches, the “price tag” for compliance errors becomes more predictable but potentially more expensive. Management must strengthen the internal control system (ICS) so that systemic failure is ruled out.
• Time-critical strategic influence: Since the deadline for the sanctions regime already ends on 9 March 2026, there is hardly any room for a strategic assessment of the impacts on group liability.

2. Compliance Officer

Strategic excellence at C-level requires continuous orientation. To ensure you are not left alone after your programme, we developed S+P C.O.R.E.

S+P value-added guarantee: Your knowledge advantage for 2026

Every booking of an S+P seminar automatically includes free access to the quarterly S+P C.O.R.E. Executive Update. Why? Because we know the regulatory world never stands still. We keep your knowledge up to date—guaranteed.