Our extensive knowledge at your fingertips

Latest editions

Search

Swiss Federal Council’s third National Risk Assessment on ML/TF flags organised crime, corruption, property and tax crime as key threats and calls for a effective review of the new transparency register

The report finds that Switzerland’s exposure to money laundering and terrorist financing risks remains broadly stable, although technological advances, geopolitical changes and regulatory developments are influencing the threat landscape. The report also identifies heightened risks in sectors exposed to foreign markets, new technologies and recently introduced regulation…

European Supervisory Authorities (EBA, EIOPA and ESMA) publish their 2027 work programme, prioritising DORA oversight, AI risks and cross-sectoral financial supervision

Under DORA, the authorities will continue oversight of critical ICT third-party service providers and strengthen financial-sector preparedness for cyber threats. They will also assess the implications of AI and other digital innovations, while advancing coordinated consumer protection and consistent implementation of the EU sustainability framework. The programme supports stronger cross-sectoral supervision and the EU’s Savings and…

European Commission and Europol’s Digital Forensics report warn of critical gaps in EU law enforcement capabilities as cloud data, encryption and AI complicate investigations

The report assesses gaps in digital forensic capabilities across EU Member States to guide future EU action and investment. It identifies shortages in resources and specialist skills, inconsistent tools and limited interoperability as barriers to effective investigations and cross-border cooperation. Key challenges include accessing cloud data, analysing evidence from connected devices and vehicles, and using AI within legal safeguards….

EBA classifies Circle’s US dollar-backed stablecoin (USDC) as the EU’s first significant e-money token under MiCA, triggering enhanced supervision from Nov 2026

From 12 November, the EBA will directly supervise key prudential requirements, including reserves, liquidity and own funds, alongside France’s ACPR, which retains responsibility for governance and other areas. The designation places USDC under enhanced oversight reflecting its significance in the EU crypto-asset market. The EBA has also agreed information-sharing arrangements with the New York State Department of Financial Services…

EU signs an Additional Protocol to the Warsaw Convention to strengthen cross-border cooperation in tracing, freezing and confiscating criminal assets and combating ML

The agreement introduces enhanced provisions for asset management and cross-border police and judicial cooperation, addressing persistent difficulties in recovering criminal proceeds. With only 1% of criminal assets currently recovered across the EU, the Protocol aims to improve authorities’ ability to trace, seize and confiscate illicit wealth once it enters into force…

EBA finalises Phase 1 of Reporting Framework 4.4, introducing IFRS 18 templates and revised ESG and AMLA reporting requirements ahead of wider simplification reforms in 2027

The package also includes updated templates for AMLA’s 2027 risk assessment data collection, alongside technical corrections to resolution planning and third-country branch liquidity reporting. The changes aim to support consistent reporting and reduce implementation difficulties for financial institutions.
Phase 2, expected in early 2027, will introduce wider reforms to simplify supervisory reporting and reduce unnecessary reporting burdens…

Luxembourg updates its National Risk Assessment of TF, broadening sector coverage and sharpening focus on small-scale funding, payment vulnerabilities, crypto-assets and AI-enabled fraud

It identifies lone actors, small cells and foreign terrorist fighters using modest amounts from legitimate sources as a key threat. Virtual IBANs, instant payments, e-money services and cross-border transactions present challenges for tracing funds and identifying suspicious activity. The report also examines vulnerabilities linked to stablecoins, self-hosted crypto wallets, unregulated crowdfunding and AI-generated forged identity documents…

EU FRA new report highlights data protection gaps in EU law enforcement, including challenges in cross-border intelligence sharing and personal data transfers

The report identifies gaps in authorities’ understanding of key principles, particularly data minimisation and purpose limitation, alongside inconsistent practices for ensuring data accuracy and security. It highlights the need to strengthen the role, expertise and resources of data protection officers, while national data protection authorities face resource constraints that limit effective supervision and enforcement. FRA calls for clearer guidance, improved training and stronger oversight to ensure criminal investigations use personal data lawfully while safeguarding fundamental rights…

Europol issues two reports on quantum computing risks to cryptocurrency wallets and sensitive encrypted data, urging early preparation for post-quantum cryptography

One identifies exposed public keys as a potential vulnerability, while the other examines “harvest now, decrypt later” attacks, although there is no clear evidence of systematic exploitation at scale. Both reports recommend identifying vulnerable assets, strengthening key management and planning a phased transition to post-quantum cryptography. Europol stresses the importance of early preparation, crypto-agility and coordination between…

AMLA identifies 5 areas for MiCA reform to strengthen crypto AML/CFT safeguards, from DeFi and staking to stablecoins and cross-border supervision

It calls for consideration of bringing staking, crypto lending and borrowing within the regulatory framework, alongside clearer definitions and control criteria for decentralised finance (DeFi). AMLA also seeks a consistent EU-wide approach to unauthorised stablecoins and a review of whether certain asset-referenced token issuers should be subject to AML/CFT obligations. For cross-border crypto-asset supervision, it recommends clearer information…

AMLA Chair warns of low EU supervisory convergence, prioritises crypto risks and outlines direct supervision plans for major cross-border FIs from 2028

Low supervisory convergence, particularly across the non-financial sector, with data and infrastructure gaps remaining key challenges ahead of the 10 July 2027 Single AML Rulebook. For direct supervision, she confirmed that the selected firms will have one EU supervisor and one consistent set of expectations, while crypto remains a strategic priority…

AMLA finalises 3 draft RTS for the private sector, covering business relationships and linked transactions, CDD and group-wide AML/CFT arrangements, defining key measures to reduce ML/TF

The standards clarify requirements for CDD, including lower-risk measures, non-face-to-face verification and PEP screening, while strengthening governance, risk management and secure information sharing across groups. The drafts have been submitted to the European Commission for adoption and are proposed to apply six months after entry into force once adopted and published in the…

No results found.