Agefi Luxembourg - juin 2026

Juin 2026 9 AGEFI Luxembourg Économie & Banques Aparadigmshift for AML inEurope A ntiMoney Laundering (AML) across Europe has entered a decisive new phase. Financial crime risks are in creasing in scale and sophistication, driven by geopolitical tensions, digitalisation, and complex cross border financial flows. At the same time, regulators are respondingwith greater ambition, stronger supervision, and a clear push towards harmonisation. The EU AML Package represents a paradigm shift, not an incremental change. It fundamen tally transforms how AML regulation is de signed, supervised, and enforced across the European Union from nationally fragmented frameworks to a single EU level approach. The EU’s new supervisor for preventing financial crime is the AntiMoney Laundering Authority (AMLA), based in Frankfurt, and is set to reach full operational capacity in 2028. Its mission is to strengthen and harmonise the supervision of AML rules within the EU, which can be viewed as positive for Luxembourg, where the financial sector works crossborder with many other Eu ropean countries. Having one set of rules will therefore facilitate all crossborder conversations. Secondly, as Luxem bourg has always been adapting the content of the EUAMLDirectives into its national legislative framework and as the good application of those rules were audited annually, the upcoming Euro pean rules are quite close to those in place. This is an opportunity to showcase Luxembourg’s skills in this important area. It can be viewed as a return of investment that the Luxembourg financial sec tor has done in the last ten years. For financial institutions across banking, asset management, funds, insurance and payments, themessage is clear: AML is nowmore than com pliance; it’s an opportunity for true transforma tion to enhance efficiency and effectiveness across all European entities in a group. In this article we discuss the EU AML transition, assessing Europe’s state of readiness using in sights from the EMEA AML Survey 2026, and highlight what this shift means in practice, with some focus on Luxembourg. It is the first in a planned multi industry series following the im plementation journey of the EUAML Package. We encourage institutions (including insurance companies, banks, asset and wealth managers, electronic payments firms, crypto asset service providers, and virtual asset firms), to start prepar ing now if they have not already done so. We want to make sure institutions are aware of po tential challenges that lie ahead. Understanding the changes and what they will require and preparing nowwill help to ensure a smooth tran sition and mitigate risks. Fromnational frameworks to a unifiedEUmodel Today, AML rules are driven by EU Directives which are then translated into national laws and regulations. While EU directives have provided a common baseline, eachMember State has devel oped its own supervisory intensity, enforcement approach, and operational interpretation. From 10 July 2027, this will change fundamentally. The EUAML Package introduces: A single AML Regulation, directly applicable across all Member States; A reinforced AML Directive, strengthening na tional frameworks; and A new EU Anti Money Laundering Authority (AMLA), centralising and coordinating super vision. AMLAwill bring harmonised expectations, con sistent supervision, and increased data driven oversight, including direct supervision of selected high risk and complex financial institutions. This unified framework reduces regulatory fragmen tation, but it also removes the comfort of national interpretation and localised practices. Regulatory ambition meets industry readiness While the regulatory direction is clear, industry readiness remains mixed. In fact, findings from our PwC EMEA AML Survey 2026 highlight a growing execution gap: Only one third of EU financial institutions ex pect to be ready by July 2027; Over 50% anticipate significant disruption from sustained compliance pressure; 10–30%AML cost increases are expected by one third of institutions; 40%viewCustomerDueDiligence (CDD) require ments as overly rules based; and 61% of banks plan to invest in new transaction monitoring tools ahead of 2027.These figures point to a common challenge: institutions under stand what’s coming, but many have not yet planned how to adapt their operating models, data foundations, and governance structures. “Transformand comply”: why incremental change is not enough A central theme of the EU AML roadmap is “transform and comply.” The EU AML Package is not designed to be im plemented through isolated policy updates or tac tical system fixes. Instead, it pushes institutions to reassess AML endtoend, including: Group wide AML frameworks with the desig nation of an EU top parent company : EUwide rules will require greater alignment across sub sidiaries, branches, and business lines. Specifi cally for groups with a nonEU top parent company, a single EUbased top parent entitywill need to be designated to endorse the supervision role for the whole EU and nonEU underlying group entities. This means at this level, institu tions will need to appoint clearly defined roles, including a person responsible for compliance with professional obligations (RR) and a compli ance officer in charge of monitoring compliance (RC). The framework will also require the estab lishment of structured groupwide information sharing mechanisms to ensure consistent application of AML requirements. Operating models and responsibility alloca tion : Harmonised supervision requires clearer ac countability across entities and teams from governance, policies and procedures, data, pro cesses, and systems. Data quality : AMLAwill rely on consistent, ex tractable, and comparable data, increasing pres sure on data governance and architecture. KYC scalability andmaturity : Unified expecta tions expose weaknesses inmanual processes and inconsistent refresh cycles, specifically regarding the periodical reviewof files and themaintenance of the knowledge of the clients via the triggering event mechanism. Institutions that rely on incremental change risk higher costs, duplicated effort, and increased su pervisory friction. Crossindustry impact Although banks will be among the most visible stakeholders, the EUAMLPackage is deliberately cross industry. Obliged entities include: Banks and credit institutions; Asset managers, management companies, and the funds that they manage Professionals of the Financial Sector/Asset Ser vice Providers Insurance and reinsurance undertakings; and Payment institutions and e money providers. Each sector faces different pressure points, but all must alignwith the same regulatory logic and su pervisory expectations. This makes cross industry coordination and group level design choicesmore important than ever. Luxembourg benefits from a high level of AML maturity built over years of rigorous implemen tation. This can, however, create a false sense of comfort, as the EUAMLPackage does not always translate into stricter rules at first glance, just dif ferent ones. In reality, many requirements are quite different in how theymust be implemented. Different literallymeans different andwill require dedicated adaptation efforts. These changes will still demand significant transformation efforts across operating models, data, and governance. Harmonisation offers both opportunity and tension Harmonisation is one of the EU AML Package’s core objectives. A single rulebook and consistent supervision offer clear benefits, including re duced regulatory arbitrage, greater clarity for cross border groups, and potential efficiency gains through standardisation. It is true however that at the same time, institu tions are mindful of competitiveness versus the US and Asia, operational differences, such as KYC refresh frequencies, reduced flexibility to tai lor AML frameworks locally. Successfully navigating this tension will require strategic design choices, not just compliance re sponses, so there is much to think about. Planning ahead now will help reduce surprises or compli ance challenges in the future. Luxembourg in focus: a financial hubunder pressure Luxembourg’s role as a major European financial centre renders it particularly exposed to the EU AML transition. Survey data shows clear readiness challenges: 59% of respondents have not fully analysed the impact of the EUAML Package; 42% have no plans to update their AML operat ing model; 40% still rely on fully manual risk assessments; and 59% use no digital tools to detect forged or fraudulent documents. These findings highlight a structural risk: manual, fragmentedAMLframeworks are increasinglymis alignedwithEUlevel supervisory expectations. But a clear point of differentiation exists. Luxembourg has a genuine opportunity to position itself as a best practice jurisdiction by accelerating its trans formation at an early stage. Data and technology: fromenabler to supervisory expectation One of the most significant shifts under the EU AML Package is the central role of data. AMLA’s supervision model will rely heavily on standard ised data requests, consistent reporting across en tities and reusable, highquality AML, and KYC data. This elevates data governance, lineage, ex tractability, and quality to strategic priorities, rather than technical considerations. Institutions that take an early, proactive ap proach to data and technology will be better po sitioned to respond efficiently to evolving supervisory expectations. Sowhy act now? The roadmap is clear: thewindow for preparation is narrowing. Between now and July 2027, actors in scope must assess entity level applicability and exposure. A European AML Headquarter must be selected, which will be the entity controlling AML Compliance for all entities in the EU. Then entities must review roles, and responsibilities, data architecture and AML/CTF policy, proce dure, and control structures. Finally, entities need to evaluateKYCmaturity and scalability.As the roadmap highlights, this regula tory change is not only a compliance exercise. It af fects governance, operatingmodel choices, and the future data model of financial institutions. Closing the gap and looking ahead The EUAMLPackage marks an undeniable turn ing point for AML in Europe. Institutions that act early can turn regulatory change into an oppor tunity to streamline frameworks, improve risk management, and strengthen trust. The time to start this journey is now. This article is the first in a planned series over the next up coming year in various media and on our website. We will explore industry specific impacts (bank ing, funds, insurance), and dive deeper into op eratingmodel and data considerations, as we will follow the EUAML Package’s implementation as July 2027 approaches. Our message is simple: the gap is real, but it can still be closed. The time to act is now. Want to knowmore? Our experts are ready to ac company you on this journey. MichaelWEIS,AdvisoryPartner,Forensics&AntiFinancialCrimeLeader, BirgitGOLDAK,Partner,BroaderAssuranceandAMLServices, CécileMOSER,Partner,BroaderAssuranceandAMLServices, PwCLuxembourg Close the gap. Get ready for the EUAML transformation DNCAFINANCEestunesociétéenCommanditeSimple (SCS)aucapitalsocialde1634468,34Euros,ayantsonsiègesocialau19,placeVendôme75001Paris. DNCAFinanceLuxembourgBranch,1Placed’ArmesL-1136Luxembourg.DNCAFINANCEest immatriculéeauRCSdeParissous lenuméroB432518041etagrééeen tantquesociété degestiondeportefeuillepar l’AutoritédesMarchésFinancierssous lenuméroGP000-30depuis le18/08/2000.Conseilleren investissementnon indépendantausensde laDirective MIFID II. Une gestion de convictions active et responsable. s«ŉ«µ±«ŉołt§^ªsŉ©µŉ«ł^o^§±s±ŉ^µ¾ŉotªs±s«ŉlÇµª^±«ŉos«ŉ^ªlt«ħ Msŉs¾§sª±«sŉ©µŉlµ»ªsŉłs«sjsŉos«ŉl^««s«ŉoł^l±«Ģŉos«ŉ«±¿s«ŉosŉs«±ŉs±ŉos«ŉÃs«ŉtª^§©µs«ħ Parlez-enàvotreConseillerFinancieretretrouvezplusd ’informationssurdnca-investments.com Depuis plus de 25 ans à vos côtés §µªŉµsŉs«±ŉs^tsŉs±ŉoµª^jsŉosŉ»±ªsŉ§^±ªsħ Maisond’épargneetdevaleurs L E S T E M P S C H A N G E N T L E S V A L E U R S R E S T E N T