AMLD4 / AMLD5 / AMLD6
AMLD4 is the EU's core preventive AML framework and AMLD5 widens its scope and transparency; AMLD6 (2018/1673) harmonises the money-laundering offence and its penalties. The 2024 package (AMLR 2024/1624) moves most obligations into a single regulation.
What Are AMLD4, AMLD5 and AMLD6?
AMLD4, AMLD5 and AMLD6 are shorthand for three European Union directives that shaped anti-money laundering and counter-terrorist financing law across the member states. Because they are directives rather than regulations, each one sets objectives that national governments must transpose into their own legislation. The result is a common EU baseline with national variations in detail.
The three instruments do different jobs:
- AMLD4, Directive (EU) 2015/849, is the core preventive framework. It sets out who is an obliged entity and what customer due diligence, record keeping and reporting those entities must perform.
- AMLD5, Directive (EU) 2018/843, amends AMLD4. It widens the scope and tightens transparency rules rather than replacing the framework.
- AMLD6, Directive (EU) 2018/1673, is a criminal law instrument. It harmonizes the definition of the money laundering offense and the penalties for it.
The label "AMLD6" is not used consistently. Some commentators apply it to Directive (EU) 2024/1640, which forms part of the EU's 2024 AML package. When reading a policy or contract, it is worth checking which instrument the author means.
Why the Directives Matter
For banks, payment institutions, crypto firms and other obliged entities in the EU, these directives are the source of most day-to-day AML obligations: identifying customers and beneficial owners, assessing risk, screening for politically exposed persons, monitoring relationships and reporting suspicion to the national financial intelligence unit. National laws, supervisory guidance and examination practice all trace back to them.
They also matter outside the EU. Firms with EU customers, branches or correspondent relationships are assessed against EU standards, and many non-EU jurisdictions have modeled their rules on the same approach, itself built on the FATF Recommendations.
What Each Directive Changed
AMLD4
AMLD4 placed the risk-based approach at the center of the framework. Key elements include:
- Risk assessments at EU, national and firm level, with firms expected to document their own business-wide assessment.
- An obligation on companies and other legal entities to hold accurate information on their beneficial owners, and on member states to keep that information in central registers.
- Application of enhanced due diligence to politically exposed persons regardless of whether they hold a domestic or foreign office.
- Clearer rules on when simplified due diligence may be applied, based on assessed risk rather than automatic exemptions.
- Extension of the regime to gambling service providers and to traders in goods dealing in large cash payments.
AMLD5
AMLD5 responded to terrorist attacks in Europe and to concerns raised by leaked offshore data. Its main changes include:
- Bringing providers engaged in exchange services between virtual currencies and fiat currencies, and custodian wallet providers, into scope as obliged entities.
- Widening access to beneficial ownership information on companies, including access for the general public. The Court of Justice of the European Union later held that unrestricted public access was incompatible with fundamental rights, and member states adjusted their registers.
- Requiring centralized mechanisms that allow FIUs and competent authorities to identify holders of bank and payment accounts.
- Specifying the enhanced due diligence measures to apply to business relationships and transactions involving high-risk third countries identified by the European Commission.
- Restricting anonymous prepaid instruments and extending scope to further sectors, including certain art market participants and letting agents above set thresholds.
AMLD6 (Directive (EU) 2018/1673)
The criminal law directive harmonized the definition of money laundering and listed 22 categories of predicate offenses that every participating member state must cover, including environmental crime, cybercrime and tax crimes. It requires that aiding, abetting, inciting and attempting money laundering be punishable, provides for liability of legal persons, and sets a minimum level for the maximum term of imprisonment. Not every member state participates in this directive.
Regulatory Expectations Today
The directives are being succeeded by a single rulebook. The EU's 2024 package includes Regulation (EU) 2024/1624 (the AML Regulation, or AMLR), which will apply directly in all member states from July 2027 and moves most obligations on obliged entities out of directives and into a regulation. Regulation (EU) 2024/1620 established the Anti-Money Laundering Authority (AMLA), and Directive (EU) 2024/1640 covers national institutional matters such as FIUs, supervisors and registers.
Until the AMLR applies, national laws transposing AMLD4 and AMLD5 remain the operative rules. Crypto-asset service providers were brought more fully into the regime by Regulation (EU) 2023/1113, which also amended AMLD4.
The United Kingdom transposed AMLD4 and AMLD5 through the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 and their later amendments, but it did not opt in to the criminal law directive.
Common Challenges
- Country differences: transposition varied, so a group operating in several member states often faces different thresholds, register rules and supervisory expectations.
- Beneficial ownership verification: registers are a starting point, but firms are generally expected to verify the information rather than rely on it alone.
- Keeping up with high-risk country lists: the Commission's list changes, and enhanced due diligence must follow it.
- Planning for the AMLR: firms are mapping current national rules against the single rulebook to find gaps before it applies.
How on8.ai Helps
SmartSanction supports the screening obligations that run through the directives: sanctions, PEP screening and risk screening of people and companies, with an ownership and relationship graph for KYB. Every match comes with the reasoning behind it, which helps teams document why a customer was cleared or escalated.
Related Terms
Related Articles
Account Takeover (ATO)
A form of identity theft where a fraudster gains access to a user's bank accounts, email, or other services.
Adverse Media
Adverse media is published information linking a person or company to crime or serious misconduct, screened as part of customer due diligence.
Alert Rules
Configured parameters within AML software that automatically trigger an alert when suspicious activities match defined criteria.
Algorithmic Fraud
Automated and programmatic approaches to attempting financial fraud at scale utilizing bots and specialized software.