EU AMLA Enforcement Hits iGaming: What Operators Must Do Now

⏱ 3 min read

Europe's iGaming sector is in the middle of its most consequential compliance overhaul since online gambling was liberalised, as Regulation (EU) 2024/1624 — the bloc's single Anti-Money Laundering rulebook — reached full enforceability in May 2026. The EU Anti-Money Laundering Authority (AMLA), headquartered in Frankfurt and operational since January 2026, is now preparing its first round of direct-supervision selections, with cross-border iGaming operators expected to appear on the target list by Q3 2026.

The pressure is already reshaping the competitive landscape. Three mid-tier operators — two Malta-licensed and one Curaçao-licensed serving EU markets — have exited the European market since January, citing AMLA readiness costs as a key factor. Industry estimates put the compliance uplift for mid-sized operators at between 8 and 15 percent of total operational spending, with enhanced due diligence on high-risk customers and business partners representing the largest single line item.

---

What EU AMLA Actually Means for Online Gambling

AMLA is the first EU-level authority with direct supervisory power over non-financial obliged entities, a category that explicitly includes licensed online gambling operators. It can access transaction data in real time and impose fines of up to 10 percent of annual turnover for AML compliance failures — far exceeding the penalties most national regulators have historically applied in the sector.

The authority's immediate mandate is to directly supervise up to 40 high-risk cross-border entities across the EU. That initial list will be concentrated on banks, crypto exchanges and large fintech firms, but iGaming operators serving multiple member states are explicitly flagged in AMLA's risk framework. For gambling operators, the key exposure comes through payment service providers: Regulation 2024/1624 extends AML obligations to e-wallets, crypto payment processors and traditional payment gateways that facilitate gambling deposits and withdrawals, creating a dual compliance layer that operators must now manage.

The Malta Gaming Authority (MGA) has told licensees it "welcomes" AMLA but called for any approach to remain "risk-based and proportionate" given the operational realities of non-financial sectors — a signal that the MGA is actively working to ensure Malta-licensed operators are not disadvantaged in the new framework.

---

Key Changes Under EU Regulation 2024/1624

The regulation replaces the previous patchwork of national implementations of the fourth and fifth Anti-Money Laundering Directives with a single, directly applicable EU rulebook. For iGaming operators, the most operationally significant changes are:

• Harmonised Know Your Business (KYB): Operators must verify and document the Ultimate Beneficial Owner structure of every third-party business they work with — affiliates, payment processors, game studios, data providers. Records must be auditable on demand.
• Real-time transaction monitoring: Suspicious patterns must be flagged within minutes, not days. Batch screening cycles that run weekly or monthly are no longer acceptable for high-risk relationships.
• €2,000 CDD threshold: Customer Due Diligence is now mandatory upon the collection of winnings, the wagering of a stake, or both, at the €2,000 level for a single or linked occasional transaction.
• Minimum five-year record retention: In a harmonised format, with on-demand accessibility to national supervisors and AMLA.
• Enhanced due diligence for VIP players: Beneficial ownership transparency is now extended to corporate VIP accounts and payment intermediaries, closing a channel previously exploited for layering.

---

Early Enforcement Signals From National Regulators

National regulators are not waiting for AMLA to act. Denmark's Spillemyndigheden issued three orders against 25syv A/S in April 2026 for violating AML Act requirements covering risk assessment, adequacy of controls, and failure to screen customers. The case is being read by compliance analysts as a preview of enforcement posture once the full AMLA framework is operational.

The Dutch KSA blocked more than 1,200 unlicensed gambling domains in Q1 2026 alone and has identified AML compliance as one of five priority areas for the year. In France, a regulator imposed a €75,000 fine on an unnamed operator in early 2026 for data archiving failures — a relatively small penalty that nonetheless signals increased appetite for enforcement on process-level breaches, not just egregious AML failures. Spain's DGOJ has imposed a total of €111 million in fines through 2025 across 58 sanctions, six of them against foreign operators without a local licence carrying penalties of €5 million each.

---

Compliance Cost and Market Consolidation

The compliance squeeze is measurable. Operators report that enhanced payment provider screening has added between 12 and 48 hours to withdrawal processing times in some jurisdictions — a friction point that risks driving price-sensitive players toward unregulated alternatives. The Netherlands' regulated market channelization rate stood at 77 percent in early 2026, meaning the remaining 23 percent of market activity is flowing through unlicensed channels whose operators face none of the compliance burden.

Regulator / Jurisdiction	Key AMLA-Era Action	Fine / Penalty	Effective Date
EU (AMLA / Reg. 2024/1624)	Direct supervision of cross-border operators; unified AML rulebook	Up to 10% annual turnover	May 2026 (full enforceability)
Denmark (Spillemyndigheden)	Three orders against 25syv A/S for AML Act breaches	Not disclosed	April 2026
Netherlands (KSA)	1,200+ unlicensed domains blocked; AML listed as priority	Ongoing enforcement	Q1 2026
Spain (DGOJ)	€5m per unlicensed foreign operator; 58 total sanctions	€111m total (2025)	Cumulative through 2025
France (ANJ)	Data archiving non-compliance fine on unnamed operator	€75,000	Early 2026

Larger operators with mature compliance infrastructure are interpreting the consolidation positively. With three smaller rivals having already withdrawn and further cost pressures building ahead of AMLA's direct supervision round in Q3, well-capitalised operators are gaining market share while underfunded competitors exit. The UK Gambling Commission has separately proposed formal information-sharing arrangements with AMLA — a development that matters for any operator serving both UK and EU players, as enforcement findings in one jurisdiction will increasingly inform supervisory action in the other.

---

Sources

Primary regulatory publications and specialist iGaming legal analysis consulted for this article.

Proper notification of draft gambling regulations to the European Commission is essential for good policy making and to allow for any proposed changes to national gambling frameworks to be scrutinised for their compatibility with EU law.

— Maarten Haijer, Secretary General, European Gaming and Betting Association (EGBA) · On TRIS regulatory transparency, 2025