What is the Fifth Money Laundering Directive? What you need to know

Money laundering in the news

The Fifth Money Laundering Directive is now in force. Here’s what you need to know

The Fifth Money Laundering Directive is now in force and has been transposed into UK law in the form of the Money Laundering and Terrorist Financing (Amendment) Regulations 2019. The new regulations amend the Fourth Directive in an effort to clamp down on terrorist financing. 

What is 5AMLD?

Firstly, it is not as extensive as the Fourth Money Laundering Directive. Passed in the UK as the Money Laundering Regulations 2017, this necessitated a wholesale change in how businesses approach money laundering such as introducing the risk based approach and removing automatic exemptions from due diligence.

The Fifth Directive is more of a series of amendments to the structure of the Fourth Directive, adding various additional provisions that weren’t included in the text of 4AMLD. The main changes are focused on enhanced powers for direct access to information and increased transparency around beneficial ownership information and trusts. 

5MLD will bring in changes including:

  • Regulating virtual currencies and pre-paid cards to prevent terrorist financing
  • Improving safeguards for financial transactions to and from high risk countries
  • Ensuring centralised national bank and payment account registers or central data retrieval systems are accessible in all member states

Course demo: Anti-Money Laundering: Know Your Risk

Key dates for 5MLD implementation

  • 10 January 2020 – Beneficial ownership for corporates to be set up by
  • 10 March 2020 – Beneficial ownership of trusts to be set up by
  • 10 September 2020 – Centralised automated mechanisms to allow identification of those who hold or control payment accounts and bank accounts to be set up by

Regulating Bitcoin

Bitcoin, like other cryptocurrencies, has caused a bit of a problem for money laundering prevention. Some regulators have taken a fearful approach, worried it allows criminals to more easily transfer illicit cash around the world whereas others have welcomed its openness and transparency, particularly the opportunities in banking and finance presented by the new technology of blockchain.

Under 5AMLD, virtual currencies such as Bitcoin will have a legal definition. Virtual currency platforms and wallet providers will also become regulated entities under the scope of the directive. While many already conduct due diligence and report suspicious transactions, the Fifth Directive will make it a legal requirement.

Prepaid cards

The Fourth Directive already cut the spending limits on prepaid cards. The Fifth Directive amendments will lower the requirement for customer verification from €250 to €150, and even to €50 for some remote transactions. The use of anonymous prepaid cards issued outside the EU may also be prohibited unless the jurisdiction is considered to have equivalent money laundering legislation to the EU.

Enhanced due diligence

The Fifth Directive will require enhanced due diligence when dealing with transactions from high risk countries. As well as obtaining evidence of the source of funds and source of wealth, information on beneficial ownership and background to the intended transaction must also be recorded. The EU may also designate a ‘blacklist’ of high risk countries for money laundering.

The Fifth Money-Laundering Directive also looks set to amend the ‘reliable and independent source’ requirement for verification of customer information to include ‘where available, electronic identification means’. This suggests that not only will the source have to be reliable and independent, it will also have to be electronic.

Increased reach

The Fifth Directive has been extended to cover all forms of tax advisory service, lettings agents and art dealers. Access will also be available to members of the public to request information on the real owners of firms operating in the EU, a measure aimed at quashing letterbox companies established solely to launder money and hide wealth. Whistleblowers who report money laundering will have also have increased protection and the right to anonymity.

How will this affect training?

VinciWorks flagship AML training course, AML: Know Your Risk, is focused on the changes brought in to the AML regime by the Fourth Directive. It includes some context about the Fifth Directive and will be automatically updated as soon as the changes go into effect.

Anti-Money Laundering resource page

VinciWorks has created a resource page that contains a host of helpful compliance tools, from course demos, policy templates and articles. We will continue to update the resource page as the changes under the Fifth Money Laundering Directive go into effect. If you would like to know more about VinciWorks’ anti-money laundering training, complete the form below and we will get in touch.

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

“In a world older and more complete than ours they move finished and complete, gifted with extensions of the senses we have lost or never attained, living by voices we shall never hear.”

Picture of James

James

VinciWorks CEO, VInciWorks

Spending time looking for your parcel around the neighbourhood is a thing of the past. That’s a promise.

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.