On 13 July 2026 the EU Anti-Money Laundering Authority (AMLA) launched a public consultation on draft Regulatory Technical Standards (RTS) that define how national supervisors assess money laundering and terrorist financing risks for non-financial obligated entities, including European gambling licensees. The consultation runs until 27 September 2026. The Malta Gaming Authority (MGA) and Sweden's Spelinspektionen publicly urged licensees to engage. It is the first coordinated EU step toward a shared AML methodology for the online gambling sector.
Before AMLA formally started work in 2026 under Regulation (EU) 2024/1620, each national regulator — the MGA in Malta, the Kansspelautoriteit (KSA) in the Netherlands, the Gemeinsame Glücksspielbehörde der Länder (GGL) in Germany, the Agenzia delle Dogane e dei Monopoli (ADM) in Italy, the Autorité nationale des jeux (ANJ) in France and Spelinspektionen in Sweden — applied its own risk assessment methodology derived from the national transposition of AMLD5. That fragmentation created room for regulatory arbitrage: the same operator faced different KYC standards depending on which licence was in scope. AMLA's public consultation on the RTS is intended to close that gap.
In our view, the AMLA consultation is not a cosmetic step. It is the actual start of a process that moves AML standards for gambling operators from the national to the European level. Once adopted, the RTS becomes a binding methodology for national supervisors; that means the MGA and Spelinspektionen, both of which have publicly endorsed the process, will have to apply the same risk calibrator going forward. For a multi-jurisdictional operator, that removes divergence in verification criteria. For the player, it makes KYC across different EU-licensed casinos increasingly consistent.
The direction is already visible in individual regulator moves. In 2026 the UKGC introduced financial risk assessments with a £5,000 annual net-loss trigger, the Dutch KSA rewrote its means test for deposits above €700 with structural income evidence, and Ireland's GRAI issued its first B2C licences with mandatory age verification and account closure on 1 July 2026. All three initiatives share the same core idea: the operator must understand where the player's money came from and be able to explain that to the regulator. The AMLA consultation locks that vector in for the whole EU.
We believe the biggest effect will land on players who hold accounts across several EU-licensed casinos at once. Once the RTS becomes binding, source-of-funds checks at Maltese, Swedish and Italian operators will look close enough that documents submitted to one will map almost directly to the next. That reduces friction when opening new accounts, but it also raises the floor — no operator can hide behind a token KYC to speed up sign-up any more. In practice it means that once you have gone through KYC verification at one casino, the review logic at another EU licensee will feel familiar rather than arbitrary.
The Ukrainian context reads separately. Ukraine sits outside AMLA's scope, so neither the wound-down KRAIL nor its successor, the State Agency PlayCity, is formally part of the consultation. But Ukrainian operators that plug into Maltese or Swedish holding structures will inherit the new requirements at group level — and, as the Irish and British reforms have shown, that almost always raises the bar on the domestic market as well. We advise Ukrainian players to read the AMLA consultation as a preview: responsible-gambling defaults and personal limits over the next two years will stop being a matter of ethics alone and become a matter of European parent-company supervision.
What exactly is AMLA proposing on 13 July?
On 13 July 2026, AMLA opened a public consultation on a draft Regulatory Technical Standard governing how national supervisors assess money-laundering and terrorist-financing risks for non-financial obligated entities. Those obligated entities include gambling operators holding an EU licence. The consultation window runs until 27 September 2026, after which AMLA is expected to finalise the RTS and pass it to the European Commission for adoption.
How does the consultation affect KYC for players?
At the consultation stage, day-to-day KYC at online casinos does not change — the identity and source-of-funds checks a player faces today look the same as before 13 July. Once the RTS is adopted, however, national regulators will apply a shared risk calibrator, and source-of-funds practice at Maltese, Swedish and German operators will start to look uniform. Longer term, that means fewer surprises when a player moves an account between EU-licensed sites.
Which regulators have officially backed the process?
The Malta Gaming Authority published a stakeholder notice informing licensees about AMLA's consultations on draft AML/CFT regulatory standards and guidelines and calling for engagement. Sweden's Spelinspektionen issued a separate note urging domestic licensees to weigh in on the public consultation. Both regulators frame the exercise as a decisive step toward a common European supervisory methodology.
When will the changes actually reach EU casinos?
Direct operator-level changes will not land immediately after 27 September. AMLA first has to consider the responses, finalise the RTS and coordinate the transition with national regulators. Judged against previous European AML instruments, operators tend to get between 6 and 18 months to implement technical changes after an RTS is adopted. That puts the most visible player-facing changes no earlier than the second half of 2027.
So what should a player actually do right now? First, keep up-to-date KYC documents on hand — a valid ID and a recent proof of address — in case your operator asks for re-verification during the transition. Second, save proof of the origin of large deposits (payroll statements, asset sales, bank transfers) because those documents become central to AMLA's risk model. Third, follow your regulator's publications: the MGA, KSA, GGL, ADM and Spelinspektionen tend to translate EU-level changes into their own operator guidance quickly.
As of 15 July 2026, AMLA's consultation is the most important European AML event of the year for the gambling sector, and its outcome will shape how uniform KYC will look at every EU-licensed casino by 2028. Gambling is adult (18+) entertainment, not a way to earn money; if you feel that your gambling budget is slipping out of your control, use the deposit-limit, time-out and self-exclusion tools inside your operator account or contact a national problem-gambling support service.