AML Compliance and AMLA Readiness in the Netherlands

Businesses operating in the Netherlands face a rapidly shifting anti-money laundering landscape as the European Union's new AML package – comprising the Anti-Money Laundering Regulation (AMLR), the Sixth Anti-Money Laundering Directive (AMLD6), and the newly operational Anti-Money Laundering Authority (AMLA) – moves from legislative text to live enforcement. The Dutch supervisors AFM and DNB are already aligning their supervisory expectations ahead of the 10 July 2027 application date for AMLR and AMLD6, meaning that gaps in customer due diligence, beneficial ownership registers, and transaction monitoring frameworks carry growing regulatory risk today. Ferraz & Whitmore assists international companies, funds, and financial institutions with gap analysis, policy redesign, and cross-border coordination to position them for full compliance before each critical deadline.

Why AML Readiness in the Netherlands Is Urgent Now

The EU's AML reform is not a distant prospect. AMLA became operational in July 2025, bringing with it a mandate to develop binding regulatory and implementing technical standards (RTS/ITS) by 10 July 2026. Those standards will define the detailed requirements that entities must meet when AMLR and AMLD6 take direct effect on 10 July 2027. From 2028, AMLA will assume direct supervisory responsibility over the highest-risk obliged entities across the EU, including those based in or operating through the Netherlands.

For Dutch-incorporated entities – whether a besloten vennootschap (BV) registered at the Kamer van Koophandel (KvK) or a branch of a foreign group – this timeline means that internal compliance programmes must be substantially rebuilt, not merely adjusted, over the next two years. Waiting for final RTS/ITS text before beginning internal work almost guarantees a compressed and costly remediation sprint.

AFM and DNB have each signalled increased supervisory intensity in the run-up to AMLR application. Enforcement actions and thematic reviews by both supervisors in recent years have demonstrated a willingness to use existing Wwft (Wet ter voorkoming van witwassen en financieren van terrorisme) powers robustly while the new framework matures.

Who Needs This Service

AML compliance and AMLA readiness work is relevant to a broad range of entities with a Dutch nexus:

• Credit institutions and payment service providers supervised by DNB, facing the most intensive AMLA scrutiny and among the first candidates for direct AMLA supervision from 2028.
• Investment firms and fund managers under AFM oversight, including those operating under MiCA or other licensing regimes where AML obligations intersect with conduct rules.
• Corporate holding and intermediate structures established as Dutch BVs within multinational groups, where beneficial ownership transparency and group-wide CDD policies must be aligned.
• Trust and company service providers, accountants, notaries, and real estate intermediaries – designated obliged entities under the Wwft whose procedures will need updating once AMLD6 is transposed.
• Crypto-asset service providers (CASPs) already subject to registration requirements in the Netherlands and affected by the convergence of AMLR obligations with MiCA licensing conditions.
• Foreign groups using a Dutch entity as their EU hub and needing to reconcile home-country AML standards with Dutch and directly applicable EU requirements.

If your organisation falls into any of these categories and has not yet conducted a structured AMLA gap assessment, the window for orderly remediation is narrowing. We are available to discuss your specific situation at info@ferrazwhitmore.com or through our contacts page.

The Regulatory Framework: AMLR, AMLD6, and AMLA Explained

The EU AML package replaces the patchwork of national implementations that followed earlier directives with a directly applicable regulation. AMLR establishes uniform rules on customer due diligence (CDD), beneficial ownership verification and disclosure, transaction monitoring, and group-wide policies. Because it is a regulation – not a directive – AMLR will apply in the Netherlands without a separate national transposition act, reducing room for local divergence but also removing some of the flexibility that Dutch obliged entities have relied upon.

AMLD6 addresses institutional architecture: it governs national supervisors, financial intelligence units (in the Netherlands, the Financial Intelligence Unit – Nederland, FIU-Nederland), and the supervisory college framework that AMLA will coordinate. Member states must transpose AMLD6 into national law, and the Dutch Wwft will require significant amendment.

AMLA itself has three core functions that affect Dutch-based entities directly. First, it will develop the RTS/ITS that flesh out AMLR's requirements – these technical standards carry binding force and must be monitored closely as they emerge before the 10 July 2026 deadline. Second, from 2028 AMLA will directly supervise selected obliged entities, likely those assessed as presenting the highest cross-border AML risk. Third, AMLA will coordinate the supervisory colleges that include AFM and DNB, setting common supervisory methodologies.

For groups with entities in multiple EU jurisdictions, AMLA's college structure introduces both opportunity and complexity: consolidated supervision may streamline some interactions, but it also means that deficiencies identified in one entity can trigger scrutiny across the group. Our team has been tracking AMLA's technical standards work, including developments relevant to AMLA technical standards as analysed in our Luxembourg alert, and applies that cross-jurisdictional perspective to Dutch engagements.

Key Compliance Requirements Under the New Framework

Customer Due Diligence

AMLR will standardise CDD procedures across the EU, prescribing minimum content for identification, verification, and ongoing monitoring of business relationships. Dutch entities accustomed to the Wwft's existing CDD obligations will find that certain thresholds, risk categories, and simplified-due-diligence eligibility criteria change. Enhanced due diligence requirements for high-risk third countries and politically exposed persons (PEPs) are expected to be detailed further in AMLA's RTS.

Beneficial Ownership

Accurate and current beneficial ownership (UBO) information sits at the centre of both AMLR and AMLD6. The Netherlands operates the UBO register administered through the KvK. Following litigation at the national level – including scrutiny at the level of the Hoge Raad – and the CJEU's ruling on public access to UBO registers, access rules for the Dutch register have evolved. Entities must nonetheless ensure that their internal UBO records are complete, verified, and updated whenever changes occur, independently of the public register's status.

AMLR will impose group-level obligations to share UBO information within corporate structures, which has direct implications for Dutch holding companies and intermediate entities used by international groups.

Transaction Monitoring

Automated transaction monitoring systems will need to be calibrated against the risk profiles prescribed or guided by AMLA's technical standards. Dutch financial institutions that have built monitoring frameworks on Wwft guidance will need to assess whether those systems meet AMLR's more granular requirements, particularly regarding documentation of the monitoring methodology and escalation procedures for unusual transactions.

Policies, Controls, and Training

AMLR requires obliged entities to have documented, board-approved AML policies and to designate a compliance officer with sufficient seniority and resources. Internal audit functions must be able to test AML controls independently. Staff training requirements will be specified further in AMLA's standards. For Dutch BVs that are part of larger groups, the alignment of group policies with AMLR's directly applicable rules – rather than the home-country equivalent – requires careful drafting and sign-off.

Typical Pitfalls We Observe

In advising clients on Dutch AML matters, we regularly encounter the following structural weaknesses:

• Over-reliance on group policies drafted to a different standard – parent-company AML frameworks designed for US, UK, or non-EU regulations often do not map cleanly to AMLR requirements and may need substantive localisation.
• Incomplete UBO chains for complex structures – multi-layered holding arrangements involving foundations (stichtingen), cooperatives (coöperaties), and foreign entities frequently produce gaps in the beneficial ownership chain that are difficult to remediate under time pressure.
• Transaction monitoring calibration lag – systems built on historical typologies may not capture risk categories that AMLA's standards are expected to address, particularly in crypto-asset and cross-border payment flows.
• Underestimating AMLA's RTS/ITS lead time – entities that wait for final published technical standards before starting internal redesign will face a compressed window between the 10 July 2026 RTS/ITS deadline and the 10 July 2027 application date.
• Failure to coordinate with local counsel on Wwft transitional provisions – the interplay between existing Dutch law and directly applicable AMLR will require careful navigation during the transitional period.

How Ferraz & Whitmore Approaches This Work

Our engagement model for AML compliance and AMLA readiness in the Netherlands is structured around four phases, adapted to the client's existing programme maturity:

• Gap assessment – mapping current policies, procedures, systems, and documentation against AMLR requirements and expected AMLA technical standards, producing a prioritised gap register.
• Programme design – drafting or revising AML policies, CDD procedures, UBO verification protocols, and transaction monitoring frameworks to meet the new requirements, with board-ready documentation.
• Implementation support – assisting with the operationalisation of new procedures, training materials, compliance officer mandate documentation, and coordination with AFM or DNB on supervisory expectations where appropriate.
• Ongoing monitoring – tracking AMLA's RTS/ITS publications, Dutch legislative developments, and AFM/DNB enforcement signals to keep client programmes current ahead of the 2027 and 2028 milestones.

Where AML matters intersect with corporate structuring needs – for example, when reviewing a Dutch holding structure's beneficial ownership chain – we coordinate closely with our corporate law practice in the Netherlands. For clients in the crypto-asset sector, we integrate AML readiness work with MiCA licensing advice in the Netherlands to ensure that regulatory requirements are addressed in a coherent and efficient manner.

To explore how we can support your organisation's AMLA readiness programme, please write to us at info@ferrazwhitmore.com or visit our contacts page.

Self-Assessment Checklist: Is Your Dutch Entity Ready?

The following questions are intended as a preliminary diagnostic. A "no" or "uncertain" answer to any item warrants closer attention before the 2027 application date:

• Has your organisation mapped its obligations under AMLR against its current Wwft-based compliance programme?
• Are your CDD procedures documented to a standard that reflects AMLR's requirements rather than only existing Dutch guidance?
• Is your UBO chain verified, documented, and updated as required for all Dutch entities in your group?
• Does your transaction monitoring system have documented risk calibration that can be tested by an independent audit function?
• Has your compliance officer's mandate, seniority, and resourcing been reviewed in light of AMLR's requirements?
• Do you have a plan for tracking and implementing AMLA's RTS/ITS once published ahead of the 10 July 2026 deadline?
• If you are in scope for direct AMLA supervision from 2028, have you begun assessing what that relationship will require?
• Have you assessed whether AFM or DNB is your primary AML supervisor, and whether a supervisory college arrangement may apply?

The Cross-Border Dimension

Many of our clients reach us through their Dutch entity but operate across multiple EU and non-EU jurisdictions. AMLA's supervisory college framework means that deficiencies in a Dutch entity's AML programme may be visible to – and acted upon by – supervisors in other member states. Conversely, enforcement actions or supervisory findings in another jurisdiction can trigger additional scrutiny in the Netherlands.

Cross-border groups should treat AMLA readiness as a group-wide exercise with local implementation nodes, rather than a country-by-country checkbox process. The Dutch component of that exercise involves AFM and DNB as primary supervisors, the KvK-based UBO register, FIU-Nederland as the financial intelligence unit, and the directly applicable AMLR framework overlaid on transitional Wwft provisions.

For international clients establishing or rationalising their EU structure ahead of 2027, the interaction between AML obligations and the choice of Dutch entity type – BV, NV, cooperative, or other – is a material structuring consideration. Our team brings together AML, corporate, and regulatory expertise to address these interactions in a coordinated way.

If you would like to discuss the cross-border AML implications of your Dutch structure or operations, we welcome initial enquiries at info@ferrazwhitmore.com or through our contacts page.

Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.