Skip to content

AMLD6: Comfort in Your AML Controls or 10% Turnover Fines?

Key Takeaways

  • Regulatory Shift: AMLD6 and the establishment of AMLA elevate compliance expectations from static policies to demonstrable, operational evidence. Non-compliance carries severe administrative fines of up to 10% of annual turnover.
  • Unified Intelligence Layer: Closing structural blind spots does not require replacing core legacy engines. Institutions can connect siloed transactional and customer data into an overarching graph intelligence layer.
  • Qualitative UBO Control: AMLD6 mandates tracing ultimate beneficial ownership (UBO) through both indirect shareholdings and qualitative influence, necessitating graph-based aggregation of layered entity structures.
  • Traceable Explainability: Preserving a complete, auditable Chain of Evidence ensures that Enhanced Due Diligence (EDD) decisions and FIU disclosures remain fully defensible during supervisory audits.

Executive Summary

AMLD6 significantly raises expectations around how financial institutions demonstrate the effectiveness, consistency, and defensibility of their anti-money laundering (AML) controls. This paper demonstrates how leading institutions are using contextual intelligence to meet those expectations in practice. It shows how DataWalk enables AML teams to:

  • Close structural blindspots in existing AML architectures: Connect siloed systems into a unified intelligence layer without disruptive replacement programs.
  • Apply enhanced due diligence in full context: Examine customer behavior, transaction activity, jurisdictional exposure, and networks together—rather than across fragmented systems.
  • Investigate complex ownership and control structures: Reconstruct layered, indirect, and evolving ultimate beneficial ownership (UBO) relationships in a consistent and explainable manner.
  • Strengthen cooperation with FIUs and authorities: Respond confidently to information requests with clear, traceable analytical reasoning.
  • Future-proof AML operations under increasing scrutiny: Adapt to emerging typologies and regulatory expectations without constant remediation.

With AMLA oversight and potential fines of up to 10% of annual turnover, AMLD6 compliance is increasingly assessed through operational evidence—not policy alone. This paper outlines how a unified intelligence layer enables institutions to meet AMLD6 requirements with clarity, consistency, and control.

AMLD6 and the Shift in Regulatory Expectations

The ratification of the EU AML Package marks the transition to a Single Rulebook regime. While AMLD6 does not fundamentally redefine money laundering obligations, it significantly tightens expectations around how financial institutions demonstrate control effectiveness. Regulatory focus is expanding toward:

  • Cyber-enabled financial crime,
  • Environmental crime,
  • Complex ownership and control structures, and
  • Risks that are not always visible in transaction data alone.

These developments increase scrutiny on whether AML controls provide complete and explainable coverage, rather than isolated detection outcomes.

AMLD6 & AMLA Regulation Timeline

Key milestones for financial institutions and the single rulebook regime.

May 2024 Completed
Official Adoption of the EU AML Package
Ratification of AMLD6 and the Anti-Money Laundering Regulation (AMLR), establishing the “Single Rulebook.”
2025 Completed
AMLA Setup & Seat Selection
Selection of Frankfurt as the AMLA headquarters and recruitment of technical experts.
2026 (Now) Operational Phase
Transposition & Tech Integration
Member states transpose AMLD6 into national law. Institutions deploy Unified Intelligence Layers to close structural blindspots.
Mid-2027 Deadline
Full Application & Direct Supervision
AMLA begins direct supervision of high-risk entities. Non-compliance risks turnover fines of up to 10%.

Enhanced Due Diligence Under AMLD6

What Financial Institutions Are Expected to Do

AMLD6 strengthens expectations for enhanced due diligence (EDD), particularly for customers and transactions linked to high-risk countries and complex scenarios. Financial institutions must be equipped to:

  • Systematically identify exposure to high-risk jurisdictions;
  • Apply enhanced customer due diligence measures that are proportionate and substantive;
  • Assess customer behavior, transaction activity, and contextual risk in aggregate;
  • Document investigative outcomes clearly; and
  • Demonstrate how enhanced measures reduce risk to an acceptable level.

The regulatory test is whether higher risks are identified, assessed, and mitigated in a reasonable and well-evidenced manner—and whether that reasoning can be demonstrated consistently without manual reconstruction.

How DataWalk Helps Find Invisible Customer Risks

DataWalk supports EDD by providing a unified analytical context where risk can be examined holistically. In practice, this enables institutions to:

  • Examine money flows, behavior, jurisdictional exposure, and networks together;
  • Move beyond isolated alerts to a connected risk narrative;
  • Ground EDD decisions in full context rather than fragmented system views; and
  • Preserve a clear chain of evidence to support supervisory review.

This ensures EDD is applied consistently and remains defensible as scrutiny increases, even as risk profiles and typologies evolve.

CUSTOMER CASE STUDY

Cracking a $5.7M Fraud in 120 Minutes

The Power of Agile Investigation With DataWalk.

Read Case Study
Case study cover: Cracking a $5.7M Fraud in 120 Minutes

Beneficial Ownership Under AMLD6: Ownership and Control

What Financial Institutions Are Expected to Do

AMLD6 explicitly requires Ultimate Beneficial Owners (UBOs) to be identified through assessment of both ownership and qualitative control. Financial institutions must be able to:

  • Identify individuals or entities that own a customer through direct or indirect shareholdings;
  • Identify individuals or entities that control a customer through influence or decision-making authority;
  • Assess ownership and control across multiple layers of entities and arrangements;
  • Consider aggregated interests, including small or indirect holdings across networks;
  • Identify structures designed to obscure ownership or control; and
  • Demonstrate how ownership and control were determined at a specific point in time.
UBO under AMLD6: Mapping Control
Direct OwnershipStandard analysis of direct shareholding percentages.
Indirect ControlInfluence through decision-making authority or complex multi-layer corporate vehicles.
Aggregated InterestCombining small holdings across networks to uncover the true controlling UBO.
Significant Increase in Analytical Depth
Based on the shift from quantitative thresholds to qualitative “control” assessments, manual due diligence becomes prohibitively resource-intensive without a unified intelligence layer.

How DataWalk Supports Ownership and Control Analysis

DataWalk enables ownership and control to be examined together within a single, coherent view. It allows financial institutions to:

  • Bring together ownership data from onboarding systems, corporate registries, documentation, and external databases;
  • Reconstruct ownership and control networks across all relevant layers;
  • Assess ownership and influence in combination rather than in isolation;
  • Surface complex or unusual corporate structures automatically; and
  • Retain full visibility into how analytical conclusions were reached over time.

Cooperation With FIUs Under AMLD6

What Financial Institutions Are Expected to Do

AMLD6 strengthens cooperation requirements between financial institutions, national Financial Intelligence Units (FIUs), and competent authorities. Institutions are expected to:

  • Provide accurate, timely, and consistent intelligence;
  • Explain the exact analytical reasoning behind alerts, SAR filings, and investigative conclusions;
  • Respond to follow-up requests without reconstructing analysis from scratch; and
  • Demonstrate internal consistency in how similar risks are assessed across departments.

How DataWalk Supports Intelligence Collaborations

DataWalk preserves a continuous Chain of Evidence, ensuring that analytical reasoning remains fully traceable and reviewable. This enables financial institutions to:

  • Respond confidently to FIU requests;
  • Ensure shared intelligence is grounded in consistent logic;
  • Cross-check typologies, risk indicators, and watchlist entities shared by FIUs against the institution’s complete customer and transaction base in real time;
  • Reduce friction during follow-up supervisory engagements; and
  • Maintain clarity even as complex cases evolve over time.

The Architectural Challenge Behind AMLD6

Many AML environments remain constrained by legacy systems designed for isolated detection tasks rather than holistic risk understanding. As AMLD6 increases expectations around contextual analysis and explainability, these data silos present a structural liability—making it difficult to demonstrate how risks were assessed across data sources, timelines, and organizational boundaries. The challenge is not replacing existing systems, but connecting them effectively to preserve context and reasoning.

A Unified Intelligence Layer for AML

DataWalk acts as an intelligence layer that sits above existing AML systems, uniting alerts, customer profiles, transaction activity, and external datasets into a single analytical foundation. This allows financial institutions to:

  • Decouple operational intelligence from core transaction processing;
  • Integrate new external data sources seamlessly without disrupting operational systems;
  • Adapt to emerging typologies without re-engineering ETL pipelines; and
  • Maintain explainability and auditability as analytical rules evolve.

Legacy Systems vs. Unified Intelligence Layer

Evaluating standard AML detection stacks against a Unified Graph Intelligence Layer demonstrates how operational capabilities align with AMLD6 expectations.

Compliance Requirement Legacy AML Detection Stack Unified Graph Intelligence Layer
UBO Control Mapping Evaluates direct percentage thresholds per entity Aggregates indirect control and qualitative influence across networks
Data Integration Fragmented, siloed databases per product line Single unified knowledge graph across structured and unstructured data
Audit Trail & Lineage Manual compilation of records across systems Automated, continuous Chain of Evidence and explainable scoring
FIU Request Turnaround Re-execution and manual reconstruction of cases Instant query execution against complete historical context
Adaptability to Typologies Long IT development cycles to update rule engines No-code rule prototyping and deployment in minutes
How DataWalk AI is Transforming Investigative and Intelligence Analytics — eBook cover

How DataWalk AI is Transforming Investigative and Intelligence Analytics

Download the eBook

FAQ

What are the financial risks if our AML controls fail to meet AMLD6 standards?

The most significant financial risk comes from the Anti-Money Laundering Authority (AMLA), which holds the mandate to impose administrative fines of up to 10% of total annual turnover for serious non-compliance. Beyond direct fines, institutions face reputational damage and mandatory remediation programs if controls fail to demonstrate complete operational coverage.

How does AMLD6 change the requirements for identifying Ultimate Beneficial Owners (UBOs)?

AMLD6 requires institutions to determine UBOs by evaluating both ownership percentage and qualitative control. Institutions must trace control exercised through indirect holdings, decision-making authority, or complex corporate layers, while maintaining a point-in-time record of how control was determined.

Does complying with AMLD6 require replacing existing transaction monitoring systems?

No. DataWalk operates as an intelligence layer above existing core systems. It unifies data across transaction monitoring, customer databases, and external registries into a single knowledge graph without requiring a costly rip-and-replace of core banking infrastructure.

What do regulators expect regarding cooperation with Financial Intelligence Units (FIUs)?

Regulators expect financial institutions to provide timely, contextualized reports and quickly respond to follow-up inquiries. Institutions must explain the exact analytical logic behind SAR filings without manually reconstructing investigative steps.

How does Composite AI assist in complex UBO and AML investigations?

Composite AI combines graph analytics with agentic workflow execution. The graph engine resolves entities, calculates network risk scores, and maps indirect paths, while agentic workflows generate auditable summaries and execute targeted investigation steps.

DataWalk Platform

See DataWalk in action

Request a personalised live demo and discover how DataWalk connects the dots across your data.