EBA’s 2025 Opinion on ML/TF risks flags 61% of breaches stem from weak risk frameworks and outdated due diligence, while poor RegTech deployment and governance gaps heighten vulnerabilities

The report highlights that many fintech firms still prioritise growth over robust AML/CFT controls, and although residual risks in traditional sectors like banking have improved, product‑ and service‑level risks are now overtaking customer risks. Calling for stronger governance, consistent application of the EU’s risk‑based approach, and alignment with upcoming AML reforms, the EBA urges national authorities and legislators to close compliance gaps…