Italy has tightened its anti-money laundering regime in a series of legislative and regulatory steps that took effect in the course of 2025. Companies that have not yet reviewed their internal procedures face a direct risk of supervisory sanctions, restrictions on bank account opening, and suspension of credit facilities. The window to act is narrow.
Italy's AML regime now requires all obliged entities. including companies, financial intermediaries, and professional service providers. to maintain updated know your customer (KYC) records and to register verified beneficial owner information with the competent authority. Entities that have not completed these obligations face sanctions that may become enforceable from the first quarter of 2026. The primary compliance deadline for affected companies is to remediate their beneficial owner register filings and internal AML procedures before supervisory reviews commence.
This alert summarises the regulatory changes, the categories of business most immediately affected, and the concrete steps that international companies operating in Italy should take now.
What changed – the regulatory development and effective date
Italy transposed the EU's Fourth and Fifth Anti-Money Laundering Directives through its primary AML legislation, which is anchored in the country's anti-money laundering and counter-terrorist financing legislation (Legislative Decree 231/2007, as subsequently amended). The most operationally significant recent changes fall into three areas.
First, Italy's titolare effettivo (beneficial owner) registration system moved from a partially voluntary regime to a mandatory one. All legal entities incorporated in Italy, as well as foreign entities operating through an Italian branch or subsidiary, must file and maintain up-to-date beneficial owner data with the Italian Companies Register (Registro delle Imprese). The obligation became enforceable following a transitional period that concluded in 2024, meaning supervisory authorities are now actively verifying compliance.
Second, Italian financial supervisory authorities. primarily the Unità di Informazione Finanziaria per l'Italia (UIF, the Financial Intelligence Unit) and the Bank of Italy – issued updated guidance on enhanced due diligence for higher-risk client categories. The guidance specifically addresses correspondent banking relationships and the handling of politically exposed persons. These are not merely best-practice recommendations; failure to follow them is treated as a breach of AML obligations under Italian banking and finance legislation.
Third, the penalties for non-compliance were substantially increased. Administrative fines are now calibrated to the seriousness and duration of the breach. Repeat or systemic failures can result in the suspension of regulated activities. For companies that rely on a credit facility or maintain an Italian bank account, even a preliminary supervisory finding of non-compliance can trigger a freeze or review of those arrangements.
The combined effect of these changes means that the AML compliance standard in Italy in 2026 is materially higher than it was two years ago. Companies that built their internal procedures before the current cycle of reforms should treat a full review as urgent.
Who is affected – threshold criteria and business categories
Italy's AML legislation does not limit its scope to banks and financial institutions. The regime applies to a broad set of "obliged entities" (soggetti obbligati). The categories most affected by the 2025 updates include the following.
- Financial intermediaries: banks, payment institutions, electronic money institutions, investment firms, and insurance companies operating in Italy – whether as licensed Italian entities or as passported EU service providers.
- Corporate entities with Italian registration: any company incorporated in Italy, including subsidiaries of foreign groups, must maintain a compliant beneficial owner register and make timely filings with the Registro delle Imprese.
- Professional service providers: lawyers, notaries, accountants, and company service providers are directly obliged and must apply KYC and AML procedures to their own client engagements.
- Real estate operators and high-value goods traders: entities engaged in Italian real estate transactions or in the trade of high-value goods above the applicable cash transaction threshold are subject to due diligence requirements on their counterparties.
- Foreign companies with Italian branches: a foreign entity operating through an Italian branch or permanent establishment is treated as an obliged entity for Italian AML purposes where its activities fall within the regulated categories.
The threshold for identifying a beneficial owner under Italian AML law follows the EU standard: any natural person holding. directly or indirectly. more than twenty-five percent of the shares or voting rights of a legal entity. Where no natural person meets this threshold, the senior managing official must be recorded. Groups with multi-layered holding structures should pay particular attention: Italian supervisors have been scrutinising indirect ownership chains more closely. Additionally. A beneficial owner disclosure that does not trace the chain to the ultimate natural person will be treated as incomplete.
For companies relying on correspondent banking arrangements, the updated guidance from the Bank of Italy requires their Italian counterpart institutions to apply enhanced due diligence. In practice, this means that foreign companies seeking to open or maintain an Italian bank account. Alternatively. To access a credit facility from an Italian bank, must be prepared to provide substantially more documentation than was required under prior practice.
To discuss whether your company falls within an affected category and to assess your current exposure, contact us at info@ferrazwhitmore.com.
What to do now – immediate actions and compliance timeline
International companies operating in Italy should treat the following steps as priorities for the first quarter of 2026. Delay in addressing these items increases the risk of enforcement action and can complicate routine banking transactions.
- Audit your beneficial owner register: verify that the filing with the Registro delle Imprese accurately reflects the current ownership and control structure. Any change in shareholding or management since the last filing requires an updated submission. The register must reflect the position as of the date of filing, not as of any earlier corporate resolution.
- Review KYC documentation for existing relationships: obliged entities must ensure that customer due diligence files are current. Where a client relationship was onboarded under prior, less stringent standards, a refresh of KYC documentation is required. This applies equally to corporate clients and to individual clients who are beneficial owners of corporate counterparties.
- Map correspondent banking exposure: if your business relies on an Italian financial institution for correspondent banking services or maintains a credit facility with an Italian bank, engage proactively with that institution. Italian banks are under regulatory pressure to request updated documentation from their corporate clients. Waiting for a formal request increases the risk of service interruption.
- Update internal AML policies and training: Italian AML legislation requires obliged entities to maintain written internal procedures and to provide periodic staff training. Procedures drafted before the 2025 update cycle should be reviewed for consistency with current UIF guidance. Training records must be maintained and available for inspection.
- Assess cross-border transaction reporting obligations: transactions above the applicable threshold that cross Italy's borders must be reported in accordance with Italian AML and customs legislation. Companies that have expanded their Italian operations without revisiting their transaction monitoring procedures may find unreported flows that require remediation.
For companies with operations across multiple EU jurisdictions, Italy's updated AML regime should be read alongside comparable changes in other member states. Our alert on AML compliance developments in Portugal sets out a comparable set of obligations for companies active in the Iberian market. A coordinated review across jurisdictions is more efficient and reduces the risk of inconsistent internal procedures.
Engaging a lawyer in Italy with cross-border AML experience is particularly valuable at this stage. The interaction between Italian AML legislation, EU directives, and the operational requirements of international banking relationships requires analysis that goes beyond a single-jurisdiction reading of the rules. A law firm in Italy with international coverage can map the compliance gap, prioritise remediation steps, and manage the regulatory interface with Italian supervisors. Our banking and finance practice in Italy supports international clients across all stages of AML compliance review and remediation. For clients with capital markets activities, our capital markets practice in Italy addresses the additional AML obligations that apply to securities transactions and regulated market participants.
About Ferraz & Whitmore
Ferraz & Whitmore is an international law firm based in Lisbon, advising business clients across 46 jurisdictions. Our banking and finance practice covers AML compliance, regulatory due diligence, beneficial owner identification, KYC procedure design, and engagement with financial supervisory authorities in Italy and across the EU. The firm combines Portuguese civil law expertise with English common law tradition. a dual foundation that is particularly useful when managing AML obligations that span civil law jurisdictions such as Italy and common law enforcement environments. Our attorneys have advised financial intermediaries, multinational corporates, and institutional investors on AML matters before Italian supervisory bodies and in cross-border contexts involving correspondent banking and credit facility arrangements. Ferraz & Whitmore is a member of leading international legal associations and participates in cross-border practice groups focused on financial regulation and compliance. To discuss your company's AML obligations in Italy, contact us at info@ferrazwhitmore.com.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.