6AMLD: The EU Sixth Anti-Money Laundering Directive Explained
6AMLD is the European Union's Sixth Anti-Money Laundering Directive. The instrument tightens the bloc's response to money laundering and terrorist financing. It harmonised a list of 22 predicate offences across member states, extended criminal liability to legal persons such as companies, and raised minimum penalties for money laundering. Member states had to transpose 6AMLD into national law by 3 December 2020, and obliged entities had to comply by 3 June 2021.
For compliance teams at banks, payment firms, and other obliged entities, 6AMLD shifted the stakes more than the day-to-day mechanics. It did not bring a long list of new operational rules. Instead, it made the legal fallout from weak controls much more serious and shut the gaps criminals had been using to move dirty money between EU jurisdictions. The rest of this guide covers what 6AMLD is, the key changes it brought, the 22 predicate offences, how liability now reaches legal persons, and what all of that means for the firms that have to live with it.
What is 6AMLD?
The Sixth Anti-Money Laundering Directive (Directive (EU) 2018/1673) sets out the criminal law side of the bloc's anti-money laundering framework. Earlier directives put most of their weight on preventive obligations like customer due diligence and reporting. 6AMLD comes at it from another angle, focusing on how money laundering is defined, prosecuted, and punished as a crime.
Three things matter most to obliged entities. First, the directive harmonises the definition of money laundering and the underlying offences that can generate criminal proceeds, so the same conduct is treated consistently across member states. It also extends criminal liability to legal persons, meaning a company can be held accountable where laundering happens because of a lack of supervision or control. The third change raises the floor on punishment: a minimum maximum prison sentence of four years for the core offence.
6AMLD sits alongside the preventive rules most compliance professionals know well, including AML regulations on due diligence and beneficial ownership. It does not replace those obligations. What it does is reinforce the legal backbone behind them, close the cross-border gaps organised crime had exploited, and hand prosecutors a more uniform toolkit across the single market.
Key changes introduced by 6AMLD
Several targeted changes reshape how firms should think about their exposure.
A harmonised set of predicate offences sits at the centre. 6AMLD lists 22 categories of criminal conduct that count as predicate offences for money laundering, so the underlying crime no longer has to be defined differently in each jurisdiction. Without that consistency, cross-border investigation and prosecution rarely get off the ground.
Then comes the second major shift: criminal liability for legal persons. A company, partnership, or other legal entity can be prosecuted where a money laundering offence was committed for its benefit by someone in a leading position, or where weak supervision allowed the offence to happen. Risk moves from a purely individual concern to a board-level and corporate one.
Tougher penalties follow. 6AMLD sets a minimum maximum term of imprisonment of four years for the principal money laundering offence. Beyond that, it allows additional sanctions against legal persons, including fines, exclusion from public benefits, temporary or permanent bans on commercial activity, and judicial winding-up.
The net also widens. Aiding, abetting, inciting, and attempting a money laundering offence each count as offences in their own right, which targets the professional enablers and intermediaries who sit at the edges of laundering schemes. Self-laundering is covered too: where the same person commits the predicate crime and then launders the proceeds.
The 22 predicate offences under 6AMLD
A predicate offence is the underlying crime that produces the proceeds someone then tries to launder. Before 6AMLD, member states defined these offences inconsistently. Those cracks let criminals route activity through the most lenient jurisdiction. The directive closes that gap by listing 22 categories of predicate offence that every member state must recognise.
The 22 categories span the full range of serious and organised crime, including participation in an organised criminal group and racketeering, terrorism, trafficking in human beings and migrant smuggling, sexual exploitation, illicit trafficking in narcotic drugs, illicit arms trafficking, trafficking in stolen goods, corruption, fraud, counterfeiting of currency, counterfeiting and piracy of products, environmental crime, murder and grievous bodily injury, kidnapping and hostage-taking, robbery and theft, smuggling, tax crimes relating to direct and indirect taxes, extortion, forgery, piracy, insider dealing and market manipulation, and cybercrime.
Two of these are worth a closer look from compliance teams. Tax crimes and cybercrime are now explicitly named, pulling conduct that earlier frameworks treated unevenly into a common standard. For a risk-based programme, that has a concrete effect: transaction patterns and customer typologies linked to tax evasion or cyber-enabled fraud belong in your screening logic and your customer risk rating models, not parked as edge cases.
Extension of criminal liability to legal persons
For corporates, the most consequential element of 6AMLD is that legal persons can now be held criminally liable. A company can face liability where a money laundering offence is committed for its benefit by a person in a leading position. Liability also attaches where a lack of supervision or control by that leadership made the offence possible by someone under their authority.
Where compliance risk sits has changed at a structural level. Blaming a rogue employee no longer ends the conversation. Where governance, controls, or oversight failed to stop the offence, the entity itself is on the hook. Senior management can answer for laundering carried out by people inside the organisation, and that raises the bar for board awareness, training, and documented accountability.
For obliged entities, the practical answer is demonstrable control. Firms need clear lines of accountability, a properly resourced compliance function, evidence that senior management understands its AML and counter-terrorist-financing responsibilities, and an audit trail showing controls were designed and operating effectively. A solid compliance automation and case management setup turns out that evidence as a matter of routine, instead of leaving teams to scramble for it once a regulator asks.
Tougher penalties and what they signal
6AMLD raised the consequences of money laundering on two fronts. For individuals, a minimum maximum custodial sentence of four years now attaches to the core offence, so no member state can treat laundering as a minor matter. Legal persons face a menu of sanctions beyond fines: exclusion from entitlement to public benefits or aid, disqualification from carrying on commercial activities, placement under judicial supervision, and judicial winding-up of the entity.
For compliance leaders, the signal is plain. A control failure is now measured in criminal exposure and existential business consequences, not just regulatory fines. That reframes AML spending. Investment in screening, monitoring, and case management stops being a pure cost of doing business. It becomes a defence against outcomes that can shut a firm down or bar it from a market.
What 6AMLD means for obliged entities
6AMLD does not hand compliance teams a fresh checklist of preventive tasks. Customer due diligence, beneficial ownership, and reporting obligations that drive day-to-day work still flow primarily from the preventive directives. What shifts is the consequence model sitting behind them, and that shift plays out in a few practical ways.
Start with the risk assessment. Revisit it in light of corporate criminal liability, making sure it captures how a control gap could expose the entity, not only an individual. Programmes should reflect the harmonised predicate offences, so tax crime and cyber-enabled offences are visible in screening and transaction monitoring. Tighten governance until there is documented evidence that leadership owns AML accountability. Firms working across several member states come out ahead under the harmonisation, since they can align controls to one consistent standard instead of running a different rulebook in each jurisdiction.
Detecting enablers matters more now. Because aiding, abetting, inciting, and attempting are offences in their own right, monitoring should surface intermediary behaviour and complex layering, not just the obvious laundering transaction.
How KYC Hub supports 6AMLD compliance
Meeting the bar 6AMLD sets comes down to evidence: can a firm show that it screens thoroughly, monitors continuously, and acts on alerts in a documented, defensible way. KYC Hub's AML screening and monitoring platform is built for exactly that. It pairs thorough sanctions, PEP, and watchlist screening with continuous monitoring and AML alerting, so shifts in a customer's risk profile surface without manual re-checks.
Global adverse media intelligence and network intelligence add depth that matters under a harmonised predicate-offence regime. They make it easier to tie customers to organised crime, fraud, corruption, and cyber-enabled activity. Tuning that cuts false positives keeps analysts on genuine risk rather than noise, while an auditable case trail hands compliance leaders the documented control evidence that corporate liability now demands. To see how it fits your programme, Book an AML Screening Demo.
