Football Clubs & Agents Verified for AMLR Readiness

Under Regulation (EU) 2024/1624, professional football clubs and football agents become obliged entities from 10 July 2029, broadly the same due diligence framework that already governs banks. That means risk-based customer due diligence with enhanced due diligence for higher-risk relationships, beneficial ownership verification, source-of- funds and source-of-wealth checks, sanctions and PEP screening, a business-wide risk assessment, appointed compliance roles, staff training, record-keeping and, where a suspicion arises, a suspicious transaction report filed with the FIU by the club or agent itself. Member States may grant relief to clubs playing outside their country's top division (no turnover test), and separately to top-division clubs with turnover below €5 million in each of the previous two years. Both routes require a Member State risk assessment and neither is automatic. Football agents have no exemption route at all.

Yes. From 10 July 2029, AMLR obligations will centre specifically on transactions with investors, sponsors, agents and player transfers. Agents are verified as individuals and as registered businesses; investors as legal entities with their beneficial owners identified and screened, so clubs are ready ahead of that deadline.

By verifying at the point of entry rather than investigating after the fact. Document authenticity checks stop forgeries, liveness-backed biometrics stop impersonation and deepfakes, business verification exposes shell entities, and continuous screening flags counterparties whose risk status changes after onboarding.

AML screening checks every individual and organisation attached to a deal against sanctions lists, PEP databases and adverse-media sources before money moves, and re-runs those checks on a schedule so a party who was clean at onboarding but sanctioned months later doesn't fall through the gap. It's a distinct control from transaction monitoring, which watches the pattern and value of the payments themselves. Used together, they give a club a defensible reason to pause a transaction rather than discovering the problem when a regulator or journalist does.

Through KYB checks against global registry data confirming the entity legally exists and is in good standing, followed by UBO verification to unwind holding companies and nominee structures down to the natural persons in control. Those individuals are then screened for sanctions exposure, PEP status and adverse media, with source-of-wealth and geographic-risk checks applied, stepped up to enhanced due diligence where the jurisdiction or ownership structure calls for it, before any agreement is signed.

API integration typically takes 2 to 5 business days. SDK integration takes 1 to 3 business days. Sandbox access is provisioned within 24 hours. These timelines reflect actual enterprise deployment experience, not estimates. A dedicated integration support team is available throughout the process.

Shufti provides the identity, business and screening evidence that sits underneath AMLR readiness: identity and document verification, biometrics, KYB with beneficial ownership and source-of-funds/source-of-wealth resolution, and continuous AML, PEP and sanctions screening. Every check produces a timestamped, exportable record structured for AMLR's record-keeping expectations, so the evidence is ready if a regulator or auditor asks for it. What Shufti doesn't replace: the club or agent's own business-wide risk assessment, its compliance officer function, staff training, and the suspicious transaction report itself, which stays the obliged entity's own responsibility to file with the FIU. Building the verification layer now gives whoever owns those obligations a working evidence base well ahead of the 2029 deadline.