AML compliance in 2027: What’s changing across the EU, US, and APAC

The United Nations estimates that between 2% and 5% of global GDP is laundered every year, amounting to roughly $800 billion to $2 trillion annually. And regulators are not waiting: across many major jurisdictions, enforcement actions are escalating and the scope of who must comply is expanding.

Despite tightening anti-money laundering regulations and increasing pressure on the private sector, it's become clear that AML regulatory frameworks need constant updating. Criminals are always on the lookout for loopholes, and many still act with impunity. The AML regulations that governments have enacted, even when they've resulted in improvements, have not put a stop to money laundering and other financial crimes.

Cryptocurrencies and virtual assets have fundamentally changed how illicit money moves. What once required cash couriers, shell companies, and offshore accounts can now happen in minutes with minimal trace.

According to the Financial Action Task Force (FATF), cybercriminals, sanctioned actors, drug trafficking organizations, and terrorist financiers are all leveraging virtual assets at growing scale. The report cites an industry estimate of approximately $51 billion in illicit blockchain-based activity related to fraud and scams in 2024.

Criminal networks also tend to operate internationally. Organized crime groups often span multiple countries, moving dirty money across jurisdictions where regulatory frameworks don't always align. International cooperation has improved, but it has historically struggled to keep pace with the speed at which illicit funds move.

In response, regulators worldwide are introducing stricter rules.

The EU's approach to anti-money laundering has undergone its most significant overhaul in decades. In May 2024, the European Parliament and Council adopted a comprehensive AML package that includes a new AML Regulation, a new AML Directive, and the creation of AMLA, a dedicated EU-wide authority for combating money laundering.

Known informally as the AMLR, the new regulation establishes a single rulebook that will apply across every member state, with full application from 10 July 2027. This is a shift from the previous approach, which allowed member states some flexibility in how they implemented AML directives, creating inconsistencies that criminals could exploit. 

Alongside the regulation, the new AML Directive (EU) 2024/1640 still requires each EU country to write certain rules into national law, covering things like financial intelligence units, supervisors, and beneficial ownership registers. So most of the new framework applies uniformly across the EU, but a few pieces still depend on individual countries.

AMLA started operations in 2025, working on technical standards and supervisory convergence frameworks. However, AMLA's direct supervision of individual financial institutions follows a phased timeline: the selection of up to 40 high-risk obliged entities will take place during 2027, with direct supervision of those selected entities starting in January 2028. For financial institutions operating across multiple EU member states, this represents a meaningful change in how supervision will work in practice. AMLA can also step in directly and act immediately, but only as a last resort, if a serious threat emerges.

On the other side of the Atlantic, changes in regulations are happening constantly. The Corporate Transparency Act, which took effect in January 2024, was designed to create a national registry of beneficial owners of corporations, making it harder to hide money in anonymous structures. In March 2025, however, FinCEN issued an interim final rule removing the requirement for US companies and US persons to report beneficial ownership information, exempting all domestically-formed entities from the reporting requirement.

Foreign reporting companies, entities formed under the law of a foreign country and registered to do business in a US state, continue to have BOI reporting obligations. The regulatory environment is still changing: as of mid-2026, the interim final rule has not yet been finalized, and FinCEN has signaled its intent to issue a permanent rule. Organizations operating in or with the US should monitor developments, as the final form of beneficial ownership reporting requirements has not yet been settled.

The lesson here is the same one playing out across Europe: AML frameworks are not static, and what is required today may look very different in even a year's time.

The push for stronger anti-money laundering frameworks extends beyond the US and Europe. Australia passed amendments to its AML and Counter-Terrorism Financing Act in November 2024. The changes will expand Australia's AML/CTF regime from around 20,000 regulated entities to approximately 90,000, bringing professions like real estate agents and lawyers into scope for the first time starting July 1, 2026.

Across the Asia-Pacific region, regulators are tightening oversight of crypto and digital asset platforms, with enhanced KYC and transaction monitoring requirements becoming standard expectations rather than something optional. Enforcement is catching up to the regulations: in 2024 alone, regulators in Hong Kong, Singapore, and Australia all issued fines to financial institutions for AML compliance failures, ranging from weaknesses in transaction monitoring to systemic failings in customer due diligence.

The regulations covered above share a common thread: they all demand that financial institutions do more, faster, with greater accuracy, and across more data sources than ever before. And the expectation from regulators is that institutions will keep up.

The problem is that most traditional compliance tools were not built for this level of complexity. Rules-based systems catch what they are programmed to catch, but they often miss the connections between entities that make sophisticated money laundering schemes hard to spot. A single transaction might look clean, but a network of transactions, accounts, shell companies, and individuals linked across jurisdictions may tell a very different story.

This is where graph technology platforms like Linkurious make a real difference. By mapping relationships between entities rather than analyzing data points in isolation, graph analytics lets investigators see those networks clearly and quickly, connecting the dots across complex structures that would take days to piece together manually. The sections below cover the specific ways graph technology helps compliance teams stay ahead.

Money laundering has historically been handled separately from other crimes within organizations. But criminal networks rarely stay in one lane, and the most sophisticated schemes tend to cross multiple domains simultaneously, with proceeds from cybercrime flowing into money laundering channels, or fraud rings using the same infrastructure as organized crime groups.

Taking a unified approach to AML means enabling data sharing and collaboration across departments. Graph technology supports this directly: by integrating data from across an organization into a single platform, it gives AML professionals visibility into patterns and relationships that siloed systems frequently miss.

Financial institutions face tight deadlines to file Suspicious Activity Reports, and as regulatory pressure increases, the time available to investigate and act on alerts will only get tighter. Traditional investigation methods rely heavily on manual processes, cross-referencing disconnected systems to piece together a picture of what's happening around a client or transaction. This is slow, uses a lot of resources, and creates room for error when speed and accuracy matters most.

Graph analytics and visualization changes that dynamic by mapping the relationships between clients, accounts, transactions, and external data points into a visual, interactive network. Investigators can surface the full context of a case in minutes rather than hours, and suspicious connections that would take days to detect manually become visible in a single view. Ria Money Transfer, a global money remittance company operating in over 165 countries, reduced investigation time by up to 80% after adopting Linkurious Enterprise. Analysis that previously took a full day now takes around two hours.

Within the large volumes of data that financial institutions hold, the ability to detect and investigate high-risk activity depends on technology that can handle complexity without losing precision.

Graph technology helps investigators to move through complex networks, following relationships across layers of ownership, intermediaries, and jurisdictions that rules-based systems frequently struggle to flag. Money laundering patterns that might otherwise go undetected, because often no single data point is suspicious enough on its own, become visible when the connections between them are mapped together.

The cost of AML compliance continues to rise as regulations expand. Those costs come from both people and technology, and the pressure to do more with existing resources happens across every type of institution.

Investment in graph technology can help on both fronts. By reducing the time investigators spend on manual data gathering and false positives, it gives investigators more time for the work that actually requires human expertise. And by building on a flexible tool, organizations can absorb regulatory updates more efficiently than those relying on rules-based traditional systems that require reprogramming every time the rules shift.

The institutions best positioned for AML regulatory changes are not necessarily the largest or the most heavily staffed. They are often those that have invested in technology that gives their investigators better information in minutes instead of hours.

The recent regulatory shifts all point in one direction: more complexity and higher expectations for what compliance teams need to deliver. Graph technology doesn't make that complexity disappear, but it makes it more manageable. By giving investigators a clear view of the connections that matter, it turns a system that often feels like it's always catching up into one that can actually stay ahead.

Keeping compliance programs aligned with regulatory shifts is not a one-time exercise. Our ebook “How to outsmart money laundering networks” explores how graph technology helps compliance teams build the kind of adaptable, connected approach that holds up as both regulations and criminal tactics evolve.

If you want to see how Linkurious can help your compliance team stay ahead of evolving regulatory requirements, get in touch with us.