Malta Steps Up AML Fight as EU Rules Enter New Era

FIAU deputy director Elena Tabone outlines Malta’s risk-based approach, stronger supervision and enforcement strategy as the European Union tightens its anti-money laundering framework

Malta is strengthening its anti-money laundering and counter-terrorist financing (AML/CFT) framework as European regulatory requirements evolve, with greater emphasis on risk-based supervision, enforcement and closer alignment with international standards.

Elena Tabone, deputy director of Malta’s Financial Intelligence Analysis Unit (FIAU), said the country’s approach is increasingly focused on ensuring that financial institutions and other regulated businesses identify and respond effectively to emerging money laundering and terrorist financing risks.

Tabone joined the FIAU in 2015 as a compliance officer, bringing a background in insurance to the agency. Over the years, she has worked extensively on AML/CFT supervision and administrative enforcement, helping to strengthen Malta’s supervisory framework.

Her comments come at a significant time for European financial crime compliance, with the EU moving toward a more harmonised AML/CFT supervisory architecture and the Anti-Money Laundering Authority (AMLA) assuming an increasingly important role in coordinating the bloc’s approach.

Risk-based supervision takes centre stage

For regulators, the challenge is no longer simply ensuring that firms have AML policies and procedures on paper. Increasingly, attention is being directed toward whether those controls are proportionate to the risks faced by individual businesses and whether they work effectively in practice.

Malta’s FIAU has developed its supervisory approach around this principle, using risk assessment and monitoring to determine where regulatory attention is most needed.

The approach reflects a broader international shift in financial crime compliance: regulated entities are expected to understand their specific exposure to money laundering and terrorist financing risks and demonstrate that their controls are capable of mitigating those risks.

Tabone’s experience at the FIAU has included contributing to the development of the agency’s supervisory framework and its alignment with European and international requirements.

Enforcement remains critical

Effective supervision, however, requires more than guidance and monitoring.

Administrative enforcement has become an increasingly important component of Malta’s AML/CFT regime, with the FIAU using its enforcement powers where regulated entities fail to meet their obligations.

The agency’s strengthened enforcement framework reflects a wider regulatory expectation that AML/CFT failures should carry meaningful consequences.

For compliance professionals, the message is clear: having policies in place is not enough. Institutions must be able to demonstrate that their customer due diligence, transaction monitoring, suspicious transaction reporting, risk assessment and governance arrangements operate effectively.

Preparing for a new European framework

Malta’s preparations also come against the backdrop of major changes to the EU’s AML architecture.

The creation of AMLA is designed to strengthen consistency in AML/CFT supervision across the European Union. From January 2026, responsibility for EU-level AML/CFT tasks transferred from the European Banking Authority to AMLA, while the new authority is expected to begin direct supervision of selected high-risk financial institutions from 2028.

For national authorities such as the FIAU, the changing European framework means maintaining strong domestic supervision while ensuring effective cooperation within the wider European system.

Malta is therefore positioning its AML/CFT regime to respond not only to current risks but also to the regulatory expectations emerging across the EU.

Technology and emerging risks

Technology is also changing the compliance landscape.

Financial institutions increasingly rely on automated systems, data analytics and artificial intelligence to identify suspicious activity and strengthen monitoring. At the same time, criminals continue to exploit technological developments to move illicit funds through increasingly complex channels.

This creates a dual challenge for regulators and compliance officers: adopting technology capable of improving detection while ensuring that automated systems themselves remain subject to appropriate oversight and controls.

The FIAU has already invested in technological capabilities to enhance its supervisory work. Among these initiatives is CASPAR, a platform used by the agency to assess and monitor businesses under its supervisory remit.

A broader lesson for compliance professionals

Malta’s experience offers a wider lesson for regulated businesses across Europe and beyond.

As AML/CFT regulation becomes increasingly sophisticated, compliance programmes are expected to move from a documentation-driven approach toward demonstrable effectiveness.

Boards and senior management must understand their organisations’ financial crime risks, compliance teams must have sufficient resources and expertise, and regulated entities must be able to demonstrate that their controls evolve as risks change.

For Malta, the objective is to remain ahead of those changes rather than simply react to regulatory developments.

For the wider compliance community, the direction of travel is unmistakable: stronger risk assessment, smarter supervision, meaningful enforcement and greater accountability are becoming central to the fight against financial crime.