Agent and distributor reporting — what the network owes

A distribution network generates reporting obligations that scale with the network, and each one has a trigger nobody puts on a calendar. Adding an agent is a notification. Adding an agent in another member state re-runs a passporting procedure. And the whole network sits inside AML duties that name agents and distributors expressly — training, awareness and the prohibition on disclosure. None of that is a periodic return, which is exactly why it drifts.

1. The Article 19 notification, item by item

Where a payment institution intends to provide payment services through an agent, Article 19 of Directive (EU) 2015/2366 requires it to communicate to the competent authorities in its home member state:

• the agent’s name and address;
• a description of the internal control mechanisms the agent will use to comply with AML/CFT obligations — to be updated without delay on material changes to what was notified;
• the identity of directors and persons responsible for the management of the agent, and, for agents that are not themselves payment service providers, evidence that they are fit and proper;
• the payment services for which the agent is mandated; and
• where applicable, the agent’s unique identification code or number.

Article 19(2) opens with a two-month window from receipt for the authority to act, and the agent may only begin once entered in the register. Registration is the commencement event, not the notification.

2. Distributors are a different instrument

For electronic money the position is not the same, and conflating the two produces the wrong filing. Article 3(4) of Directive 2009/110/EC requires member states to allow e-money institutions to distribute and redeem electronic money through natural or legal persons acting on their behalf. Article 3(5) then states flatly that e-money institutions shall not issue electronic money through agents — while allowing them to provide payment services through agents subject to Article 19.

Where an EMI distributes e-money in another member state through such a person, PSD2 Articles 27 to 31 apply mutatis mutandis, with the exception of Article 29(4) and (5) — so the cross-border machinery engages, through a different route from the agent one.

3. Every added agent re-runs the procedure

The obligation that catches scaling firms is in the passporting regime: the procedure runs again for every agent added in a host member state. A network of fifty agents in three markets is not three notifications; it is a recurring process with a defined clock each time.

That has an organisational consequence. Network growth is a commercial activity with its own velocity, and the notification is a regulatory dependency sitting inside it. Where the two are not connected by a gate, agents start operating before registration — which is a breach of the commencement rule rather than a paperwork delay.

4. The AML duties that bind the network

Two AMLR provisions name agents and distributors expressly, and both are operational obligations rather than filings:

• Article 12 requires the awareness measures and specific, ongoing training programmes to reach employees and persons in comparable positions including agents and distributors, appropriate to their functions and to the entity’s risks, and duly documented.
• Article 73 binds agents and distributors by name to the prohibition on disclosure — which covers disclosing that activity is being assessed, not merely that a report was filed.

Read alongside the Article 19 notification, these connect: the AML control description filed with the supervisor has to describe something that actually exists in the network, and the training that makes it exist is itself a documented obligation. A notification describing controls the network does not operate is a misstatement to the supervisor rather than an aspiration.

5. A worked case

Facts: an EMI grows a distribution network from ten to sixty outlets across two host member states over a year, managed by a commercial partnerships team.

What the obligations do: each new outlet in a host state re-runs the notification procedure with its own clock, and none may start before registration. The AML control description filed originally now describes a network five times larger with, in practice, revised procedures — engaging the without-delay update duty. And the training obligation now covers sixty outlets with documented evidence per person.

What the practitioner does: puts the notification inside the onboarding workflow for the outlet, so an outlet cannot be activated in the operational system until registration is confirmed; and treats the AML control description as a versioned document with an owner, reviewed whenever network procedures change rather than annually. Training evidence is collected by the same workflow that activates the outlet, because collecting it later at scale does not happen.

FAQ

Related: Agents vs distributors · Agents and the register · AML training obligations