EU-wide

Designating an AML representative across the EU

Fintech Passport

April 29, 2026 · 6-min read

Designating an AML representative across the EU

Every EU member state requires you to name a person who is personally accountable for AML compliance. The role goes by different names — representante in Spain, compliance officer in the Netherlands, déclarant in France, responsabile antiriciclaggio in Italy, Geldwäschebeauftragter in Germany, responsable du contrôle in Luxembourg — but the underlying obligation is the same. Residency rules, supervisory notification routes, and personal liability differ between jurisdictions. A passporting EMI typically needs more than one.

1. Why every member state asks for a named person

EU AML directives — currently the Fourth, Fifth and Sixth, soon consolidated under the new EU AML Authority (AMLA) regime — require obligated subjects to designate a natural person who is the supervisor’s first point of contact for AML matters. The person submits suspicious-activity reports, signs off on the annual self-assessment, receives requerimientos in inspections, and is identifiable to the regulator by name.

The role is not symbolic. In every jurisdiction below, the named person carries personal regulatory responsibility independent of the entity itself. Sanctions against the individual are possible — and have been imposed.

2. The six core jurisdictions, side by side

🇪🇸 Spain — SEPBLAC

Legal basis: Article 26 of Ley 10/2010.
Role name: representante ante el SEPBLAC.
Residency: Spain-resident expected.
Registration: Modelo F22 via the SEPBLAC web portal — full process is documented in our F22 piece.
Notes: Some obligated subjects also designate an órgano de control interno — a board-level body that sits alongside the representative.

🇳🇱 Netherlands — DNB / FIU-NL

Legal basis: Wet ter voorkoming van witwassen en financieren van terrorisme (Wwft) Articles 2d and 2e.
Role names: Two roles, sometimes combined — the compliance officer (oversight) and the auditor / dagelijks beleidsbepaler (day-to-day responsibility), plus a designated AML reporting contact for FIU-NL.
Residency: Functional presence in the Netherlands required — typically a Dutch-based hire, or an outsourced compliance officer with a Dutch base.
Registration: Notification to DNB on appointment, plus designation of the FIU-NL contact via the goAML intake.

🇫🇷 France — ACPR / TRACFIN

Legal basis: Code monétaire et financier, Articles L.561-2 and following.
Role names: Déclarant TRACFIN (the SAR signatory) and Correspondant TRACFIN (the day-to-day contact). The two are usually different people.
Residency: France-resident expected for the déclarant role.
Registration: Notification to TRACFIN through the ERMES portal; ACPR notified separately.

🇮🇹 Italy — Banca d’Italia / UIF

Legal basis: Decreto Legislativo 231/2007, Article 16.
Role name: Responsabile della funzione antiriciclaggio — typically supported by a Delegato per le segnalazioni who signs SOS reports to UIF.
Residency: Italy-resident expected.
Registration: Notification to Banca d’Italia and UIF on appointment; details of the Delegato registered separately for UIF correspondence.

🇩🇪 Germany — BaFin / FIU Germany

Legal basis: Geldwäschegesetz (GwG) §7.
Role name: Geldwäschebeauftragter (and a deputy — Stellvertreter).
Residency: Germany-resident expected; outsourcing permissible only with BaFin acceptance.
Registration: Notification to BaFin on appointment; FIU intake configured through the goAML Germany portal.

🇱🇺 Luxembourg — CSSF / CRF

Legal basis: CSSF Circulars (currently 12/552 and successors), implementing the Luxembourg AML law.
Role names: Responsable du contrôle du respect des obligations professionnelles (RC) — board-level — and Responsable du respect des obligations professionnelles (RR) — operational.
Residency: Luxembourg-resident expected for the RR; the RC may sit at parent level subject to notification.
Registration: Both roles notified to CSSF on appointment; CRF intake configured separately.

3. The passporting reality — usually more than one rep

The exact threshold varies by country — some supervisors require a representative on first transaction, others on first complaint, others tolerate home-state-only filing for the smallest activities. The pragmatic rule for any meaningful volume is: one representative per jurisdiction.

4. Personal liability across the six

The named representative carries personal sanction risk in every jurisdiction below:

Spain — Title VII of Ley 10/2010 allows fines on directors and AML representatives, separate from entity-level fines.
Netherlands — DNB can impose fines on individual policymakers (dagelijks beleidsbepalers) under the Wwft.
France — ACPR Sanctions Commission can sanction the déclarant personally.
Italy — Banca d’Italia and UIF can sanction the responsabile with administrative fines and professional restrictions.
Germany — BaFin sanctions the Geldwäschebeauftragter directly under §56 GwG.
Luxembourg — CSSF can sanction the RC and the RR personally under the AML law.

The role should always be remunerated, indemnified, and supported with sufficient resources to do the job. No serious AML programme rests on a unsupported solo officer.

5. Can the role be outsourced?

Yes, conditionally, in every jurisdiction. The conditions are similar everywhere:

The outsourcing arrangement is documented and approved at board level.
The provider has the capacity and seniority to do the job.
The provider is reachable to the supervisor on short notice.
The entity remains liable in parallel — outsourcing does not transfer regulatory accountability.

Spain, France and Luxembourg are the most receptive to outsourced AML representatives in practice. Germany is the strictest — BaFin’s expectation is that the Geldwäschebeauftragter sits inside the regulated entity itself.

6. FAQ

If I am licensed in Spain and passport into Germany, do I still need a German representative?

Generally yes for any meaningful activity in Germany. The Spanish appointment covers Spain; Germany expects its own. The exact threshold is a fact-by-fact assessment, but plan for a German representative as soon as German activity becomes operationally non-trivial.

Can the same person act as representative in two countries?

In theory yes, where residency rules permit. In practice — only if the person has genuine capacity to be reached and to act in both jurisdictions, which is rare. Most setups use a different named person per country.

What is the difference between a board-level AML body and the named representative?

The named representative is the operational interface with the supervisor and the FIU. The board-level body — where required, as in Spain (órgano de control interno) and Luxembourg (RC) — provides governance oversight. The two are complementary, not substitutes.

Does the AML representative need a particular professional qualification?

None of the six jurisdictions mandate a specific qualification. All require demonstrable AML experience, sufficient seniority and independence from the commercial line. Supervisors will ask for a CV at appointment.

What happens if the representative resigns?

The supervisor must be notified immediately and a replacement appointed without delay. Operating without a registered representative is a regulated breach in every jurisdiction listed above.

7. What to do, today

If you are scoping cross-border AML coverage:

Map your activities country by country and identify which jurisdictions require a local representative.
Decide whether each role sits in-house or with an outsourced provider — and document the decision.
Sequence appointments before activity starts; supervisors take a poor view of post-hoc registrations.
Keep a single internal register of all AML representatives, with appointment dates and supervisor acknowledgements — useful in every audit.