Austria has tightened its anti-money laundering regime. Companies that miss the updated compliance obligations face account restrictions, regulatory sanctions, and – in serious cases – criminal exposure for their responsible officers. The changes affect a broad cross-section of businesses, and the window to act is narrowing.
Austria's updated AML rules, transposing the latest EU anti-money laundering directives into national financial legislation, impose enhanced know-your-customer (KYC) requirements and stricter beneficial owner verification standards on obliged entities. Companies operating in affected sectors must complete or refresh their compliance programmes and register accurate beneficial owner data before the applicable compliance deadlines. Failure to do so can result in administrative fines, suspension of banking services, and loss of correspondent banking access.
This alert outlines what changed, which business categories are affected, and the immediate steps international companies should take now.
What changed and when it takes effect
Austria has implemented the most recent round of EU AML directives through amendments to its financial market legislation and the legislation governing the Wirtschaftliches Eigentümer Register (Register of Beneficial Owners in Austria). The core changes fall into three areas.
Expanded scope of obliged entities. The category of businesses subject to AML obligations has widened. Crypto-asset service providers, virtual asset intermediaries, and certain high-value goods dealers are now expressly included alongside traditional financial institutions and legal professionals.
Enhanced customer due diligence thresholds. The cash transaction threshold that triggers mandatory KYC procedures has been lowered. Occasional transactions that previously fell below the reporting threshold may now require full customer identification and documentation. Businesses accustomed to relying on simplified due diligence for routine commercial transactions should reassess whether those arrangements remain compliant.
Beneficial owner verification – stricter standards. Entities required to register a beneficial owner under Austrian financial legislation must now provide supporting documentation rather than a mere declaration. The Wirtschaftliches Eigentümer Register authority has increased its powers to cross-check submissions against other public registers and to request additional evidence. Discrepancies between the registered beneficial owner and the actual control structure can trigger an immediate review – and a fine.
The amendments entered into force in stages. Provisions on crypto-asset providers became operative in early 2025. The enhanced beneficial owner documentation requirements apply to all obliged entities from mid-2025, with a transitional window for existing registrations running through the end of 2025. Companies that have not updated their filings by that date are treated as non-compliant from 1 January 2026 onwards.
For a detailed analysis of banking access and licensing obligations for international companies in Austria, see our guide to banking and finance law in Austria.
Who is affected – threshold criteria and business categories
Austria's financial legislation defines "obliged entities" broadly. The following categories face the most immediate compliance exposure under the updated rules.
- Credit institutions and payment service providers – including branches of foreign banks operating in Austria. These entities must apply enhanced KYC at onboarding and refresh existing customer files where information is outdated.
- Crypto-asset service providers and virtual asset intermediaries – newly captured entities that must implement full AML programmes, including transaction monitoring and suspicious transaction reporting.
- Real estate agents, notaries, and auditors – professionals involved in high-value transactions must conduct customer due diligence on both buyer and seller where the transaction value exceeds the relevant threshold under Austrian law.
- Trust and company service providers – entities that form, administer, or manage legal structures for third parties must verify beneficial owner identity at each engagement and document the control chain.
- High-value goods dealers – dealers in art, jewellery, or luxury items who accept cash payments above the threshold are now expressly obliged entities.
International companies with Austrian subsidiaries, branches, or credit facility arrangements with Austrian banks are indirectly affected. Austrian banks are required to apply enhanced due diligence to correspondent banking relationships and to request updated KYC documentation from foreign counterparties. A foreign parent that fails to supply compliant documentation risks having its Austrian subsidiary's bank account opening blocked or existing accounts suspended.
To receive an expert assessment of your company's AML exposure in Austria, contact us at info@ferrazwhitmore.com.
Immediate actions required before the compliance deadline
The following steps are priorities for any international company with an Austrian nexus.
1. Audit your beneficial owner registration. Verify that the entity registered in the Wirtschaftliches Eigentümer Register reflects the current control structure. Any individual holding more than 25% of shares or voting rights – directly or indirectly – must be registered with supporting documentation. Where the ownership chain runs through multiple jurisdictions, each intermediate layer must be documented.
2. Refresh your KYC files. If your company is itself an obliged entity, conduct a gap analysis of existing customer due diligence files. Files that pre-date the updated rules and rely on simplified due diligence procedures should be reviewed against the new thresholds. Prioritise higher-risk clients and correspondent banking counterparties.
3. Assess crypto-asset exposure. If your business model involves issuing, distributing, or exchanging virtual assets – including tokenised instruments – confirm whether Austrian licensing or registration requirements now apply. Operating without the required registration is a criminal offence under Austrian financial legislation.
4. Review correspondent banking arrangements. Austrian banks are required to apply enhanced scrutiny to cross-border payment flows. If your company routes transactions through an Austrian credit institution, expect requests for updated AML documentation. Preparing a compliant counterparty AML pack in advance avoids delays that could disrupt time-sensitive payments.
5. Update internal policies. AML policies and procedures must reflect the amended legislative requirements. This includes updating transaction monitoring parameters, revising staff training materials, and documenting the rationale for any simplified due diligence still applied. A lawyer in Austria with financial regulation experience can conduct a targeted policy review to confirm current compliance.
Companies active in the Austrian capital markets space should also review related obligations – our coverage of capital markets regulation in Austria addresses how AML requirements interact with securities issuance and disclosure obligations.
For comparison with developments in another EU jurisdiction, see our recent alert on AML updates in Portugal, where similar directive transposition has produced comparable compliance obligations.
About Ferraz & Whitmore
Ferraz & Whitmore is an international law firm based in Lisbon, advising business clients across 46 jurisdictions. Our banking and finance practice supports international companies managing AML compliance, KYC programmes, bank account opening procedures, and correspondent banking relationships in Austria and across European markets. As a law firm in Austria-facing matters, we combine Portuguese civil law expertise with English common law tradition to deliver cross-border regulatory solutions. Our attorneys have advised financial institutions and corporate clients on AML programme design, beneficial owner registration, and supervisory engagement across both civil law and common law systems. Ferraz & Whitmore is a member of leading international legal associations and participates in cross-border practice groups focused on financial regulation and AML compliance. To discuss your company's specific compliance obligations in Austria, contact us at info@ferrazwhitmore.com.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.