The Malta Gaming Authority (MGA) has formally invited all authorised licence holders and relevant stakeholders to participate in ongoing public consultations opened by the EU’s Anti‑Money Laundering Authority (AMLA) on three draft Regulatory Technical Standards (RTS) pertaining to anti‑money laundering and countering the financing of terrorism (AML/CFT).
The consultations, launched by AMLA on 9 February 2026, cover draft RTS on customer due diligence, criteria for identifying business relationships and transactions, and pecuniary sanctions and enforcement measures – all core elements of the EU’s evolving AML/CFT rulebook.
Key Compliance Implications for Operators
The draft RTS is set to have significant implications for gaming operators across the EU. These standards will define how operators must approach customer verification, transaction monitoring, and enforcement actions in light of AML/CFT measures. Operators who fail to stay ahead of these developments risk missing critical regulatory updates.
To provide a clear understanding of the impacts, it’s crucial to review the following aspects:
- Customer Due Diligence (CDD) Obligations: Licensees will be required to enhance CDD processes to ensure consistent application of due diligence procedures across transactions. This will involve setting up robust customer verification measures.
- Risk Thresholds and Business Relationships: Operators must pay closer attention to new criteria for identifying high‑risk business relationships and threshold settings for transactions. This means ensuring their systems are prepared for more detailed checks.
- Enforcement Measures and Sanctions: The draft RTS also addresses the potential enforcement measures for non‑compliance. Operators will need to prepare for more stringent oversight and heavier penalties for violations.
Why Gaming Operators Must Act Now
The MGA stressed that this consultation phase represents a “valuable opportunity” for gaming-sector entities to ensure that the technical standards account for operational realities within both online and land-based gambling. Given that AMLA’s mandate now explicitly includes the non‑financial sector – such as gaming operators – licensees’ submissions can influence the proportionality and calibration of AML/CFT policies.
This push for industry engagement aligns with similar encouragements seen elsewhere in Europe; for instance, Sweden’s regulator has also prompted gambling licence holders to engage with AMLA’s consultations to ensure the rules are workable in practice and credible in their AML risk mitigation.
Operators must prepare to review and comment on the following draft technical standards:
- Customer Due Diligence RTS (Article 28(1) AMLR): Enhancements to customer verification and risk management practices are a key area that will likely require changes in internal systems and processes.
- Criteria for Identifying Business Relationships (Article 19(9) AMLR): The establishment of clearer guidelines for identifying business relationships and transactions may require new classifications and transaction monitoring systems.
- Sanctions and Enforcement (Article 53(10) AMLD6): Any failure to comply with the new standards could lead to significant administrative penalties and stricter enforcement actions. Operators will need to implement tighter compliance monitoring.
Operational Challenges Ahead for Operators
The outcome of these consultations will affect how AML rules are implemented across the EU and will directly impact compliance audits, internal risk models, reporting mechanisms, and supervisory expectations.
However, as detailed in AMLA consultations, operators should brace for the complex task of aligning their internal policies with broader EU‑wide standards. These changes will increase the operational burden and may require significant investments in updated technology and staff training to stay compliant as deadlines approach.
The Road Ahead: Industry and Regulatory Impact
The deadline reminder for licensees to submit their views on the draft RTS under AMLD6 is 9 March 2026 for enforcement-related RTS, and 8 May 2026 for CDD and transaction RTS.
Operators must act quickly to adjust their compliance frameworks and update systems in line with the proposed standards. With feedback shaping the final regulatory landscape, engaging early is key for anticipating future regulatory costs and avoiding last-minute adjustments.