What Is AMLD6? EU AML Deadlines, UBO & Penalties (2026)

If you searched “AMLD6 deadline” expecting one date, here is the honest answer: there isn’t one. The EU’s new anti-money-laundering framework switches on in stages — and the milestone landing on 10 July 2026 is not the full directive at all. It’s the part that matters most to anyone who relies on company-ownership data: the rules governing beneficial-ownership registers.

Most of the confusion is structural. “AMLD6” is used loosely to mean three separate laws with different mechanics and different start dates. Get those wrong and your compliance roadmap is off by a year. This guide fixes the timeline first, then walks through what actually changes — the lowered ownership threshold, the expanded list of regulated businesses, the new EU-level supervisor, and the register-access regime that quietly tightened in 2025 and tightens again in 2026.

What AMLD6 actually is — and the directive it’s confused with

There are two completely different EU laws people call “6AMLD”.

The older one — Directive (EU) 2018/1673 — was about criminalising money laundering: harmonising offences and penalties across Member States. It was transposed back in 2020. If a search result is talking about “22 predicate offences” or prison terms, that’s the 2018 directive.

The one that matters now is Directive (EU) 2024/1640, adopted on 31 May 2024 and published in the Official Journal on 19 June 2024. It is preventive, not punitive. It rebuilds the institutional plumbing of EU AML: national supervision, financial intelligence units (FIUs), and — critically for data teams — beneficial-ownership registers. It repeals the Fourth Directive (as amended by the Fifth) when it fully applies.

But AMLD6 doesn’t stand alone. It’s one leg of a three-part package, and most of the rules that bind individual businesses actually live in a different instrument.

Three laws, one package

The 2024 reform replaces a decade of patchwork directives with a single architecture. Understanding which law does what is the difference between a coherent compliance plan and a guess.

The practical takeaway: a compliance team can’t just wait for its national parliament. Many of the binding rules — the customer due-diligence standard, the ownership threshold, the cash cap — arrive through the Regulation, which applies identically in every Member State without any national transposition. The Directive governs how states supervise and run registers. You track both.

The real timeline: 2024 to 2029

This is where most articles — and a fair number of compliance plans — go wrong. The package switches on in phases. Here is the verified sequence.

What actually happens on 10 July 2026

Two distinct things, neither of which is “the whole directive.”

1. The register provisions. Articles 11–13 and 15 of AMLD6 — the rules on developing and operating beneficial-ownership registers — carry a transposition deadline of 10 July 2026. From that point, registers must hold more detailed ownership information and give legitimate-interest users access to historical data, not just the current snapshot. That historical dimension is new and material: it lets an investigator or obliged entity see when someone became a beneficial owner, not merely who is recorded today.

2. The technical standards. AMLA must deliver the bulk of its mandated regulatory and implementing technical standards and guidelines — roughly two dozen instruments — to the European Commission by 10 July 2026. These are the documents that turn the high-level rules into operational requirements. The Commission must also adopt delegated acts on UBO-related penalty guidelines by the same date.

Beneficial-ownership registers: a regime that keeps moving

Register access has swung like a pendulum, and AMLD6 is the latest swing. The story is worth knowing because it explains why “just check the public register” stopped being a reliable answer across the EU.

The turning point was 22 November 2022. In joined cases C-37/20 and C-601/20 (WM and Sovim SA v Luxembourg Business Registers), the Court of Justice held that the Fifth Directive’s requirement to give the general public unrestricted access to ownership data was invalid — a disproportionate interference with the privacy and data-protection rights in Articles 7 and 8 of the EU Charter. Registers across several Member States went offline overnight.

AMLD6 codifies the post-ruling settlement: access for those with a legitimate interest, with a presumption of access for journalists, civil-society organisations and academics working on AML. For obliged entities, access flows through their due-diligence obligations. The result is a register landscape that is real but uneven — different gating, different fees, different languages, different response times in all 27 states.

We mapped that unevenness in detail in our guide to which countries publish UBO data and which gate it, and in the full directory of European company registries.

The lowered UBO threshold — a quietly large change

One of the most operationally significant changes is a single word. The threshold for identifying a beneficial owner moves from “more than 25%” to “25% or more.”

That sounds trivial. It isn’t. Consider an entity owned by four parties in equal quarters.

The consequence is concrete: obliged entities will identify more beneficial owners than before, particularly in evenly-split structures. Every existing UBO record built against the old threshold should be re-examined. If your data provider still applies “more than 25%”, your ownership picture is already out of date for 2027. (We compare how the major providers handle this in our breakdown of the leading UBO data providers.)

Expanded scope and the EU-wide cash cap

The Regulation widens the net of “obliged entities” well beyond banks and lawyers, and introduces a hard ceiling on cash.

The cash cap applies directly, with no national transposition, whether the payment is a single transaction or several linked ones. Member States keep the option to set lower limits. The expansion of obliged entities is the headline politically, but for most data and compliance teams the cap and the lowered UBO threshold are the changes that touch day-to-day workflows.

AMLA: the EU’s first central AML supervisor

The Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) is the structural novelty. Headquartered in Frankfurt and operational since 1 July 2025, it does two jobs that didn’t previously exist at EU level.

First, it will directly supervise a small set of the highest-risk cross-border financial groups — in the region of forty institutions — rather than leaving them solely to national regulators. Second, it sets the technical standards that make the single rulebook operate consistently from Dublin to Valletta, and it coordinates the national FIUs. This is the mechanism intended to end “forum shopping” for the lightest-touch jurisdiction.

Penalties for non-compliance: the numbers got bigger

The package doesn’t just expand obligations — it raises the cost of getting them wrong. For serious, repeated or systematic breaches, the maximum pecuniary sanctions double at the headline level.

For directly-supervised entities, AMLA imposes these sanctions itself; for everyone else, national supervisors apply them, guided by AMLD6’s harmonised minimum measures. The practical signal for compliance leaders: a weak ownership picture or a missed beneficial owner is no longer a paperwork risk — under the new bands it is a balance-sheet one.

Does AMLD6 apply to the UK?

No — and this trips up a lot of UK-based teams. The 2024 EU AML package (AMLR, AMLD6 and AMLA) does not apply in the United Kingdom post-Brexit. The UK runs its own regime, principally the Money Laundering Regulations 2017 (as amended), supervised by the FCA and other bodies, and it stayed broadly aligned with international FATF standards rather than adopting the new EU framework.

The most important divergence is exactly the one this article centres on. After the 2022 Court of Justice ruling, the EU moved beneficial-ownership access to a legitimate-interest model. The UK went the other way: its People with Significant Control (PSC) register at Companies House remained publicly accessible. So a single cross-border group can face a public-by-default register in London and gated, legitimate-interest registers across the EU — different access rules for the same ownership question.

That doesn’t put UK firms out of scope. Any UK business serving EU customers, operating in EU markets, or sitting inside an EU group will meet AMLR and AMLD6 obligations through that EU-facing activity. For teams straddling both, the operational problem is consistency: one standardised ownership dataset that spans UK and EU registries beats reconciling 28 different portals and access regimes by hand. (Our directory of European company registries maps the access model for each.)

What compliance and data teams should do in 2026

The framework still has moving parts — national transposition laws and several technical standards land through 2026 and 2027. That argues for readiness work now, not a finished compliance build. Practical priorities:

• Re-run UBO identification at “25% or more.” Prioritise entities with evenly-split ownership; those are where new beneficial owners appear.
• Map your register access. Know, country by country, whether you can reach beneficial-ownership data through legitimate interest, what it costs, and how slow it is. Our guide to searching EU company registers covers BRIS and the national-register reality.
• Build for historical ownership. From 2026, point-in-time records aren’t enough; you’ll need to evidence when ownership changed.
• Check your data lineage. Audit-defensible AML data means traceable provenance — the source register, the retrieval date — not a blended score from an aggregator. This is the through-line of our work on UBO discovery and compliance.
• Track the Regulation, not just your parliament. The cash cap, thresholds and CDD standard arrive through directly-applicable EU law.

The data gap AMLD6 creates — and how to close it

Here is the uncomfortable truth the directive exposes. A beneficial-ownership register reflects a filing date, not current reality. Shares trade. Owners die. Trusts distribute. Across 27 Member States, those registers sit behind different access rules, in different languages, with different fields and refresh cycles — and many gate ownership behind legitimate interest after the 2022 ruling.

For a team verifying a handful of companies, that’s a research afternoon. For one onboarding thousands a year against a 2027 deadline and a lower UBO threshold, it’s an operational problem that doesn’t scale by hand. The answer isn’t more analysts; it’s data sourced from the registries, standardised, continuously refreshed, and delivered where your systems already work.

Frequently asked questions