EU AMLA Tightens iGaming AML Rules as July Deadlines Hit

⏱ 3 min read

Europe's new anti-money laundering enforcer held a landmark public hearing on 2 July 2026, finalising draft guidelines on ongoing business-relationship monitoring that will bind every licensed iGaming operator serving EU players. The Anti-Money Laundering Authority (AMLA), operational in Frankfurt since 1 July 2025, is accelerating its rule-making calendar — and the gambling sector is squarely in its sights.

The hearing is part of a broader sprint: AMLA's consultation on group-wide AML framework standards for multi-jurisdiction operators closed on 15 June 2026, and the authority is expected to publish its first selection of entities for direct supervision during Q3 2026. Cross-border iGaming operators — those active in six or more EU member states — are explicitly in the frame. Industry estimates put the additional compliance cost at 8–15% of mid-tier operator revenues, and three smaller operators have already exited EU markets since January citing AMLA readiness costs.

---

What AMLA Is and Why It Matters Now

AMLA is the EU's first supranational AML enforcement body, created under Regulation (EU) 2024/1620 and established in Frankfurt's Messeturm. On 1 January 2026, the European Banking Authority transferred its entire AML and counter-terrorism financing mandate to AMLA — the moment it shifted from symbolic to operational. The authority is scaling rapidly: it had fewer than five staff when chair Bruna Szego (formerly of the Bank of Italy) arrived in February 2025; it had roughly 120 employees by early 2026, with targets of 240 by year-end and 432 by end-2027.

AMLA's mandate ends two decades of patchwork enforcement. Previously, a Malta-licensed operator could face materially different AML scrutiny than an identically structured business regulated in France or Germany. AMLA replaces that fragmentation with one directly applicable rulebook under Regulation (EU) 2024/1624, with direct supervision of selected high-risk obliged entities beginning on 1 January 2028.

---

The 2 July Hearing and What Was Discussed

The 2 July 2026 public hearing focused on AMLA's draft guidelines for ongoing monitoring of business relationships — one of the most operationally complex areas for online gambling operators, who must continuously assess player risk across millions of active accounts. The guidelines will determine how operators document transaction patterns, flag anomalies, and escalate suspicious activity to national Financial Intelligence Units.

This follows three earlier consultations opened in February 2026 covering sanctions enforcement criteria, criteria for identifying business relationships and linked transactions, and customer due diligence requirements. A fourth consultation on group-wide minimum AML/CFT standards for multi-jurisdiction operators closed on 15 June 2026 — particularly significant for any operator combining an EU licence with Curaçao or Gibraltar operations, as the RTS will set binding expectations for how offshore arms are brought within the group's compliance framework.

---

Direct Impact on iGaming Operators

Gambling service providers are explicitly classified as obliged entities under the AMLA framework. The key operational changes include:

• Unified CDD thresholds across all 27 member states, replacing the divergent national standards that previously allowed regulatory arbitrage.
• Enhanced due diligence for customers from EU high-risk third-country list jurisdictions, politically exposed persons, and complex corporate VIP structures.
• Real-time transaction monitoring accessible to AMLA, not just periodic national audits.
• Fines of up to 10% of annual turnover (or €10 million, whichever is higher) for AML failures — with senior management personally liable in some scenarios.
• Potential withdrawal of cross-border serving rights, creating a de facto pan-European enforcement mechanism no single national regulator previously held.

Operators with a Malta Gaming Authority licence serving players across multiple EU markets are particularly exposed. The MGA has publicly welcomed AMLA's creation but stressed the need for a risk-proportionate approach that reflects the operational realities of online gaming versus traditional financial institutions.

---

Compliance Costs and Market Consolidation

The financial pressure is already reshaping the competitive landscape. The AMLA framework is a direct driver of a wave of KYC and RegTech M&A: Corsair Capital paid $295 million for a majority stake in Munich-based IDnow in March 2025, while Sumsub reached unicorn status at over $1 billion in January 2026 — both moves tied explicitly to rising iGaming compliance demand. Three mid-tier EU operators have exited since January, citing AMLA readiness as a primary factor. Larger groups including Flutter, Entain, and Kindred have invested heavily in compliance infrastructure and are positioned to benefit as under-capitalised rivals exit.

Operator Scale	Est. Compliance Cost Uplift	AMLA Readiness Status	Key Risk
Major listed groups (Flutter, Entain)	Low (infrastructure pre-built)	High	Competitive advantage from rivals' exits
Mid-tier (MGA-licensed, multi-market)	8–15% of revenue	Variable	Platform upgrades, EDD resourcing
Small / Curaçao-licensed (EU-facing)	High (no legacy infrastructure)	Low	Market exit or acquisition pressure
RegTech vendors (IDnow, Sumsub)	Revenue opportunity	N/A	Consolidation / acquisition targets

---

Key AMLA Dates Every Operator Must Know

• 1 July 2025 — AMLA becomes operational in Frankfurt.
• 1 January 2026 — EBA completes transfer of full AML/CFT mandate to AMLA.
• 10 July 2026 — AMLA deadline to issue risk-variable guidelines and submit draft CDD regulatory technical standards to the European Commission.
• Q3 2026 — First round of entity selections for direct AMLA supervision, expected to target cross-border iGaming operators active in 6+ EU member states.
• 10 July 2027 — Regulation (EU) 2024/1624 (the single AML rulebook) becomes fully applicable; national AML patchworks replaced.
• 1 January 2028 — AMLA begins direct supervision of selected high-risk obliged entities.

---

Sources

Verified against primary regulatory documents and cross-referenced across specialist iGaming and legal industry outlets.

The gambling sector has spent two decades operating under a patchwork created by successive AML directives. This is the moment that matters — not 2027, when the rules will have been finalised and compliance departments are scrambling, but now, whilst submissions are still being accepted and the guidelines are still being drafted.

— Simon Tottenham, Industry Commentator, CDC Gaming · June 2026