← Back to News
Regulation

Commission puts 18 EU states on notice over AML register rules

The Commission opened infringement procedures on September 25, 2026, against 18 member states, France included, over untransposed sixth AML Directive rules on access to beneficial ownership registers, which payment firms use for customer checks.

The European Commission opened infringement procedures on September 25, 2026, against 18 member states, France among them, for failing to notify in full the national measures transposing the sixth Anti-Money Laundering Directive’s rules on access to beneficial ownership registers, which fell due on July 10, 2026. Each receives a letter of formal notice and has two months to reply; absent a satisfactory response, the Commission may issue a reasoned opinion.

The 18 states named

The press release names Austria, Belgium, Bulgaria, Croatia, Cyprus, Czechia, Estonia, Finland, France, Germany, Greece, Lithuania, Luxembourg, the Netherlands, Poland, Portugal, Romania and Spain. Nine member states are absent. The letters target a notification duty rather than the substance of national law.

What the articles open, and to whom

These articles make up the access regime for the central registers. Article 11 requires member states to give competent authorities “immediate, unfiltered, direct and free access” to the interconnected registers, without alerting the entity concerned. Its paragraph 2 extends that access to seven further categories: self-regulatory bodies, tax authorities, the authorities that enforce EU restrictive measures, AMLA, the bloc’s anti-money laundering authority, the European Public Prosecutor’s Office, OLAF, Europol and Eurojust. Paragraph 3 adds obliged entities, which must have timely access when they run customer due diligence under Chapter III of Regulation (EU) 2024/1624. Paragraph 4 lets member states charge for it, capped at the cost of assuring the quality of the register data and making it available. Article 12 covers access by persons who can demonstrate a legitimate interest, Article 13 its mutual recognition, and Article 15 the exceptions. The press release attributes these articles to Directive (EU) 2015/849. Article 78 of the sixth directive sets their deadline at July 10, 2026, with most of the text due on July 10, 2027 and its Article 18 on July 10, 2029.

StandingCountMember states
Named in 2025 and 20267Belgium, Croatia, Cyprus, Estonia, Germany, Greece, Poland
Named in 2025 only4Denmark, Italy, Slovakia, Sweden
Named in 2026 only11Austria, Bulgaria, Czechia, Finland, France, Lithuania, Luxembourg, Netherlands, Portugal, Romania, Spain
Never named5Hungary, Ireland, Latvia, Malta, Slovenia
Member states put on notice across the two rounds, which cover different duties: the July 10, 2025, deadline, then the July 10, 2026, one.

Payments enter through that paragraph 3. Regulation (EU) 2024/1624 counts credit institutions and financial institutions among its obliged entities, and the financial institution category covers payment services, e-money and crypto-asset service providers. They query the registers to identify the beneficial owners of corporate customers. The calendar leaves a gap: the access right has been due since July 10, 2026, while the regulation that creates the due diligence duty it serves does not apply until July 10, 2027. Until then, a payment institution works under national rules derived from Directive (EU) 2015/849.

Blank forms and a pen on a wooden desk
Register access feeds the onboarding checks run by obliged entities, payment institutions among them.

A second round, one year after the first

A year before these letters, to the day, the Commission put 11 member states on notice over the directive’s first deadline of July 10, 2025, which required comprehensive access to beneficial ownership information on legal entities, trusts and similar arrangements. Seven states appear in both letters. A state’s absence from the second list means it notified measures for the second deadline, not that its position on the first one is settled.

🔑
The Commission’s stated reason
The press release says that “the gradual implementation of the sixth AML Directive is essential to addressing weaknesses in the Union's financial system and to ensuring that all Member States consistently and effectively apply their anti-money laundering rules.”

Timeline

May 31, 2024
The AML package is adopted
Directive (EU) 2024/1640 and Regulation (EU) 2024/1624 are adopted together.
July 10, 2025
First deadline
Article 74, which reworks register access under Directive (EU) 2015/849, is due.
September 25, 2025
Eleven states put on notice
Eleven states had not notified that first set of measures.
July 10, 2026
Second deadline
Articles 11, 12, 13 and 15, which govern register access, fall due.
September 25, 2026
Eighteen states put on notice
Eighteen states receive a letter of formal notice.
October 10, 2026
Access grants must be reported
Member states report which access they have granted.
July 10, 2027
The regulation starts to apply
Regulation (EU) 2024/1624 applies; most of the directive falls due the same day.

The letters are addressed to governments, not to firms, and open no register by themselves. They are the first stage of a procedure that can lead to a reasoned opinion and then to the Court of Justice of the European Union. A nearer deadline faces all 27: Article 11 requires them to tell the Commission, by October 10, 2026, which categories of obliged entities were granted access and what information those entities can see. That filing will show, country by country, what a payment institution can look up.

Provenance

Published September 25, 2026

4 sources, 2 distinct domains

↗ European Commission, press release INF/26/1834 · ec.europa.eu↗ EUR-Lex, Directive (EU) 2024/1640 · eur-lex.europa.eu↗ EUR-Lex, Regulation (EU) 2024/1624 · eur-lex.europa.eu↗ European Commission, press release INF/25/2124 · ec.europa.eu
← All news