Germany has significantly strengthened its anti-money laundering regime, effective from the beginning of 2025. Companies that miss the new compliance deadlines risk regulatory sanctions, loss of banking relationships, and potential criminal liability for responsible officers.
Germany's revised AML legislation tightens know-your-customer (KYC) obligations, beneficial owner disclosure requirements, and transaction monitoring duties for a broad range of obligated entities. Companies with German operations must update their internal compliance programs and resubmit beneficial owner data to the Handelsregister (German Commercial Register) by the applicable deadlines. Failure to comply can result in administrative fines and restrictions on credit facility access and bank account opening.
This alert identifies which business categories are affected, sets out the threshold criteria, and lists the immediate actions international companies should take now.
What changed and when it takes effect
Germany's AML legislation has been revised to align with the EU's updated anti-money laundering directives. The changes entered into force in early 2025 and apply to a wide range of obligated entities operating in or through Germany.
The core amendments affect three areas. First, the definition of beneficial owner has been narrowed. Entities must now identify and verify any natural person who directly or indirectly holds a qualifying interest, or who otherwise exercises effective control. The threshold for what constitutes control has been clarified to close gaps that previously allowed complex ownership chains to obscure ultimate beneficial owners.
Second, the AML legislation introduces enhanced due diligence requirements for higher-risk business relationships. This applies specifically to relationships involving correspondent banking arrangements, cross-border transactions above defined thresholds, and clients whose ownership structures pass through multiple jurisdictions.
Third, the reporting obligations to the transparency register have been strengthened. All entities incorporated under German law. including a GmbH (Gesellschaft mit beschränkter Haftung. The German private limited company). must ensure their beneficial owner entries in the Handelsregister are current, accurate. Additionally, consistent with internal KYC records. The fiction-of-disclosure exemption, which previously allowed entities to rely on entries in other public registers, has been substantially curtailed.
Courts including the Amtsgericht (local court, which supervises the commercial register) have begun issuing compliance notices to entities with outdated or inconsistent entries. The Bundesgerichtshof (Federal Court of Justice of Germany) has affirmed that intentional or grossly negligent non-disclosure constitutes a sanctionable breach of AML obligations.
Who is affected and threshold criteria
The revised AML rules apply to all obligated entities as defined under German AML legislation. For international companies, the following categories are directly in scope.
- German-incorporated companies, including GmbH structures and their holding entities, regardless of where the ultimate beneficial owner is resident.
- Foreign companies with a branch, permanent establishment, or registered business address in Germany.
- Financial institutions and payment service providers operating in Germany, including those conducting correspondent banking transactions.
- Real estate intermediaries, notaries, and legal professionals who handle transactions above prescribed thresholds on behalf of clients.
- Entities seeking to open a bank account in Germany or obtain a credit facility from a German-regulated institution.
The threshold criteria for enhanced due diligence are triggered when any of the following conditions apply: the transaction or relationship involves a jurisdiction listed on the EU or FATF high-risk list. the beneficial owner is a politically exposed person. the ownership structure includes three or more intermediate holding layers. or the transaction value exceeds amounts that German financial regulators consider indicative of elevated risk.
Importantly, the legislation does not limit its reach to entities already holding an account or credit product. Any company initiating a new banking relationship in Germany – including bank account opening for a new GmbH – is subject to the full updated KYC and beneficial owner verification process from the outset.
For a detailed assessment of how these rules interact with German banking and capital markets regulation, see the firm's dedicated coverage of banking and finance matters in Germany.
To receive an expert assessment of your company's AML exposure in Germany, contact us at info@ferrazwhitmore.com.
Immediate actions for international companies
Companies with German operations should treat the following items as urgent priorities.
Audit your beneficial owner entries. Verify that all entries in the Handelsregister accurately reflect the current ownership and control structure of each German entity in your group. Any discrepancy between the register entry and your internal KYC records must be corrected without delay. The Amtsgericht may impose fines for each day an incorrect entry remains outstanding.
Update your KYC documentation. AML legislation now requires that KYC files for existing business relationships be refreshed at intervals proportionate to risk. High-risk relationships must be reviewed at least annually. Collect updated identification, corporate documentation, and beneficial owner declarations for all material counterparties.
Review correspondent banking arrangements. If your group uses German institutions for correspondent banking, those institutions will apply enhanced due diligence to your transactions. Prepare full ownership charts, source-of-funds documentation, and compliance certifications in advance of any review request.
Assess the impact on credit facility access. German lenders are required to complete updated KYC and beneficial owner verification before renewing or extending any credit facility. If a renewal is scheduled within the next six months, begin the compliance documentation process now. Delays in providing compliant documentation can result in a lender declining to proceed.
Train responsible officers. Under German AML legislation, compliance obligations are personal as well as corporate. Officers of a GmbH who are found to have knowingly or negligently permitted AML breaches face personal administrative sanctions. Ensure that all directors and senior managers understand the updated obligations and the consequences of non-compliance.
Companies with cross-border structures should also consider the interaction between Germany's AML rules and the regulatory requirements of other EU jurisdictions. For context on how AML developments in a comparable civil law system are being addressed, the firm's alert on AML updates in Portugal provides a useful comparative perspective.
For German capital markets participants, the updated AML requirements also intersect with disclosure and suitability obligations under securities regulation. A broader overview is available in our coverage of capital markets matters in Germany.
About Ferraz & Whitmore
Ferraz & Whitmore is an international law firm based in Lisbon, advising business clients across 46 jurisdictions. Our banking and finance practice covers AML compliance, KYC procedures, beneficial owner disclosure, and regulatory risk management for companies operating in Germany and across the EU. We combine Portuguese civil law expertise with English common law tradition to support international companies managing cross-border compliance obligations. Our team has advised on AML and regulatory matters before German supervisory authorities and in multi-jurisdictional structures spanning both civil law and common law systems. As a law firm in Germany-focused matters and across 15 practice areas, Ferraz & Whitmore provides results-oriented counsel for entrepreneurs, institutional investors, and in-house legal teams. To discuss your company's AML compliance position in Germany, contact us at info@ferrazwhitmore.com.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.
Author: Sophie Kellner
Author title: Partner, IP & Technology Law
Author bio: Sophie Kellner is a Partner at Ferraz & Whitmore focusing on intellectual property protection, AI and technology regulation, and employment law across European and international markets. She advises technology companies, investors, and institutions on IP strategy, regulatory compliance, and workforce matters.
Published: February 11, 2026