EU’s AMLD5: What does it mean and how will it impact the AML regulation regimes?

In the fight against financial crime, regulation has always trailed innovation and the Fifth Anti-Money Laundering Directive (AMLD5) was the European Union’s attempt to close that gap. Adopted in the wake of the Panama Papers, the Paradise Papers and a string of terror-financing scandals, AMLD5 extended the EU’s anti-money laundering rulebook into the places criminals had learned to hide: virtual currencies, anonymous prepaid cards and opaque corporate ownership structures.

Years on, AMLD5 is no longer the frontier of EU AML law; it has been carried forward into, and largely superseded by, the 2024 EU AML package. But understanding what AMLD5 introduced is still essential, because almost every obligation that defines modern AML compliance in Europe traces back to it. This guide explains what AMLD5 was, the key changes it made, how it reshaped obligations for businesses and what governs the EU’s AML regime today.

What is AMLD5?

The Fifth Anti-Money Laundering Directive Directive (EU) 2018/843 entered into force on 9 July 2018, with EU member states required to transpose it into national law by 10 January 2020. Crucially, AMLD5 did not replace its predecessor. It amended the Fourth Anti-Money Laundering Directive (AMLD4, Directive (EU) 2015/849), tightening and extending the existing framework rather than rewriting it.

Its core purpose was to combat money laundering and terrorist financing by promoting transparency without disrupting the functioning of legitimate financial and payment systems. Any business operating across the EU and classified as an “obliged entity” was required to comply.

From AMLD4 to AMLD5: Why The EU Acted

AMLD4 had already made it mandatory for banks and financial institutions to perform KYC and customer due diligence, and to maintain central registers of beneficial ownership. But the European Commission concluded it did not go far enough. A series of high-profile events, the 2016 Panama Papers, the 2017 Paradise Papers, and terrorist attacks across Europe exposed how easily the financial system could still be exploited through anonymous instruments and shell structures.

AMLD5 was the response. Rather than introducing a wholly new regime, it sharpened AMLD4’s obligations and pulled new sectors into scope, reflecting how technology had outpaced the existing rules.

The Key Changes Introduced By AMLD5

The precise amendments AMLD5 made to the EU framework included the following:

Virtual Currency Providers Brought into Scope:

For the first time, virtual currency exchange platforms and custodian wallet providers were treated as obligated entities, required to apply customer due diligence, register with authorities and report suspicious activity.

Public Access to Beneficial Ownership Registers: 

Information on the beneficial owners of EU companies was made publicly accessible. For trusts and similar arrangements, access was granted to anyone able to demonstrate a legitimate interest for example, journalists or investigators.

Lower Thresholds For Prepaid Cards and E-Money 

The threshold for anonymous prepaid cards was cut from €250 to €150, with remote (online) prepaid payments capped at €50. Anonymous prepaid cards issued outside the EU were restricted unless the issuing regime met AMLD5-equivalent standards. 

Enhanced Due Diligence For High-Risk Third Countries: 

Financial flows involving high-risk non-EU jurisdictions, as defined by the European Commission, were made subject to mandatory enhanced due diligence.

An End To Anonymity For Bank And Savings Accounts: 

Member states were required to build centralised registries or data-retrieval systems giving Financial Intelligence Units and competent authorities direct access to the holders of bank accounts, payment accounts and safe deposit boxes.

Expanded List of Obliged Entities:

Coverage was extended to art dealers and intermediaries, providers of tax-related services, e-wallet providers and more well beyond the traditional banking and financial sector.

How AMLD5 Impacted The AML Regulation Regime

For most regulated businesses, AMLD5 changed AML from a banking concern into a cross-sector obligation.

Virtual Currency and Crypto:

By covering crypto exchanges and custodial wallet providers, AMLD5 ended the assumption that digital assets sat outside AML oversight. Providers were now expected to verify customer identities, monitor transactions and report suspicious activity the same expectations long placed on traditional institutions.

Beneficial Ownership Transparency:

Mandatory consultation of beneficial ownership registers during AML screening, combined with public access, made it materially harder to hide behind layered or “letterbox” company structures designed to obscure ultimate control.

Stronger Customer Due Diligence: 

AMLD5 reinforced the expectation that due diligence be risk-based and, increasingly, digital. Manual identity checks gave way to automated identity verification and ongoing screening as the practical means of meeting the directive’s demands at scale.

A Heavier Compliance Burden: 

Newly obliged entities crypto firms, prepaid card issuers, e-wallet providers had to stand up AML programmes from scratch: customer onboarding, record-keeping, transaction monitoring, staff training and information-sharing with national authorities. For many, AMLD5 was the moment AML compliance became a core operating requirement rather than an afterthought.

What Replaced AMLD5: The EU’s AML Regime Today

This is where most legacy AMLD5 content stops being useful because the directive no longer represents the cutting edge of EU AML law. In 2024, the EU adopted its most significant AML overhaul in decades: a single package designed to replace the patchwork of national transpositions that directives like AMLD4 and AMLD5 had created.

The package, adopted on 31 May 2024 and published in the Official Journal on 19 June 2024, rests on three instruments:

• The AML Regulation (AMLR) Regulation (EU) 2024/1624. A directly applicable “single rulebook” that sets uniform AML/CFT obligations across all 27 member states with no need for national transposition. It applies from 10 July 2027 (with provisions for professional football clubs and agents applying from 2029).
• The Sixth AML Directive (AMLD6) Directive (EU) 2024/1640. Governs national supervision, FIUs and beneficial ownership registers, and repeals AMLD4. Member states must transpose it by 10 July 2027 (with beneficial ownership provisions due earlier). Among other changes, it lowers the beneficial ownership identification threshold from “more than 25%” to “25% or more.”
• The AMLA Regulation Regulation (EU) 2024/1620. Establishes the new EU Anti-Money Laundering Authority (AMLA), headquartered in Frankfurt and operational from 1 July 2025. AMLA will directly supervise around 40 of the highest-risk obliged entities and coordinate national supervisors EU-wide.

For crypto specifically, the trajectory AMLD5 began has accelerated. All crypto-asset service providers (CASPs) authorised under MiCA are now fully obliged entities, and the recast Transfer of Funds Regulation (Regulation (EU) 2023/1113) extended the “Travel Rule” to crypto-asset transfers from 30 December 2024 requiring traceability of originator and beneficiary information on every transfer.

In short: AMLD5 set the direction of transparency, expanded scope, crypto and prepaid coverage and the 2024 package made it harmonised, directly applicable and centrally supervised. Businesses that built robust AML programmes in response to AMLD5 are far better positioned for what is coming in 2027.

How Shufti Helps You Stay AML-Compliant

Whether your obligations trace back to AMLD5 or the incoming AMLR regime, the operational requirements are the same: verify who you are dealing with, screen them against the right lists, and keep monitoring. Shufti supports AML compliance across 240+ countries with:

• AML screening against global sanctions, PEP, adverse media and watchlists
• Business AML screening and KYB for ultimate beneficial ownership checks
• Ongoing monitoring and transaction monitoring to catch risk after onboarding
• Automated identity verification and customer due diligence built for high-volume, cross-border onboarding