AMLA Opens Simplified Due Diligence Roundtables: What EU Firms Must Do Now
The Anti-Money Laundering Authority has issued an open call for EU financial sector professionals to join in-person sectoral roundtables on simplified customer due diligence. The sessions run from 9 November to 2 December 2026 in Frankfurt am Main, and the deadline to register an expression of interest is 18 October 2026 at 23:59 CEST. Luxembourg's financial regulator, the CSSF, has urged firms and their representative bodies to participate, calling the topic significant enough to warrant broad industry engagement. For compliance leads, auditors, and CFOs operating in the digital asset space, that is not a routine notice. It is a policy window.
What AMLA Is Actually Doing Here
Simplified customer due diligence, commonly abbreviated as SDD, is the framework that allows obliged entities to apply reduced checks to clients or products deemed to present a lower money laundering or terrorist financing risk. It is not an exemption from AML obligations. It is a calibrated, risk-proportionate alternative to standard CDD, and it requires a documented justification tied to the firm's own risk assessment.
AMLA's roundtables are part of its mandate to develop harmonised EU-wide guidelines on how SDD should be applied across different sectors. The feedback gathered at the Frankfurt sessions will directly feed into draft guidelines that will eventually bind obliged entities across all member states. That includes credit institutions, payment firms, crypto-asset service providers under MiCA, and a range of other regulated entities.
Why Sectoral Roundtables Matter for Digital Asset Firms
The sectoral structure of the roundtables is deliberate. Different industries face materially different risk profiles, and a one-size-fits-all SDD standard would be both over-inclusive and under-inclusive depending on the context. By gathering input sector by sector, AMLA is signalling that the resulting guidelines will try to reflect operational reality rather than regulatory abstraction.
For firms in the crypto and digital asset space, this is consequential. CASPs are explicitly brought within the EU's AML framework under the 2024 AML Regulation package. How SDD thresholds, permissible scenarios, and documentation requirements are eventually written will affect the compliance costs and onboarding friction every EU-regulated crypto firm carries day to day. Firms that participate now can make sure their specific risk environment is on the record before the draft guidelines are written.
The Policy Context: AMLA, the AML Regulation, and What Has Changed
AMLA became operational in 2025 as the EU's dedicated AML supervisory and standard-setting body. Its creation marked a structural shift away from the fragmented, directive-based approach that had allowed wide divergence in how member states implemented AML rules. The new AML Regulation, which applies directly without national transposition for core provisions, gives AMLA the power to produce binding technical standards and guidelines that apply uniformly across the single market.
Where SDD Fits in the New Framework
Under the AML Regulation, obliged entities must conduct CDD on their clients, but the regulation explicitly permits reduced measures where a documented risk assessment supports it. The conditions for applying SDD, the factors that can justify it, and the minimum records that must be kept are all areas where AMLA's guidelines will provide the operational detail that the top-level regulation leaves open.
Getting that detail right matters enormously. SDD that is written too narrowly will push firms toward over-collecting data on low-risk clients, adding cost and friction for no risk-reduction benefit. SDD written too broadly risks creating gaps that bad actors can exploit. The roundtable process is how AMLA attempts to calibrate that balance with real-world input.
What the CSSF Notice Means for Luxembourg-Based Firms
The CSSF does not typically amplify AMLA calls with strong encouragement unless it considers the stakes genuinely high. The language in the 12 October notice is notably direct: the regulator explicitly encourages professionals and representative bodies to participate, and it frames the roundtables as an exercise that will shape how SDD is applied "throughout the EU." That framing is a signal to Luxembourg-domiciled firms, including fund administrators, payment institutions, and crypto entities holding CSSF authorisation, that abstaining is a choice with consequences.
Representative Bodies and Collective Responses
AMLA's process allows both individual firms and industry associations to submit expressions of interest. For smaller firms that may not have the resources to prepare a detailed individual submission, coordinating with a sector trade body is a practical alternative. The CSSF notice specifically mentions representative bodies, which suggests the regulator expects collective as well as individual engagement. Compliance teams that are already members of an industry association should check whether their association is preparing a response and contribute their operational perspective to it.
Practical Accounting and Compliance Implications
The eventual SDD guidelines will not be abstract regulatory text. They will translate into specific changes to onboarding workflows, risk-scoring models, and the records that firms must retain and be able to produce on demand. Each of those changes has a direct bearing on how firms use their crypto bookkeeping software and broader digital asset accounting software to document and evidence their CDD decisions.
Record-Keeping and Audit Trails
Regulators across the EU are increasingly clear that applying SDD does not reduce the record-keeping obligation. It changes the nature of the records required, not the obligation to hold them. Firms will still need to demonstrate, in an auditable way, that they assessed the risk, concluded that SDD was appropriate, and applied it consistently. That means the audit trail functionality in any crypto accounting software stack needs to be capable of capturing SDD rationale at the client level, not just transaction-level data.
Accounting firms advising clients on AML compliance should be reviewing how their current documentation workflows handle SDD elections. If the process relies on manual notes or unstructured files, the new AMLA guidelines are likely to create pressure to formalise and systematise that evidence. Firms that have already invested in structured digital asset accounting software with robust audit logging will be better placed to adapt quickly once the guidelines are finalised.
Risk-Scoring Models and Calibration
SDD is only permissible where the firm's risk assessment supports it. That means the underlying risk-scoring model must be documented, defensible, and consistent with whatever factors AMLA identifies as relevant in its guidelines. For crypto-asset service providers, whose client base can include retail users, institutional counterparties, and everything in between, the calibration of those models is a non-trivial exercise.
Teams working on transaction monitoring and client risk classification should use the roundtable period, and the subsequent consultation on draft guidelines, as a trigger to review and stress-test their current SDD criteria. The question to ask is whether the factors currently used to justify a reduced-diligence classification will survive scrutiny under the incoming AMLA framework. On how AI is reshaping crypto compliance workflows, there is a broader discussion of how automated risk tools are changing the capacity to do this kind of calibration at scale.
Cross-Border Consistency
One of AMLA's explicit goals is to eliminate the divergence in AML standards that has historically allowed regulatory arbitrage within the EU. For firms operating across multiple member states, harmonised SDD guidelines will simplify compliance architecture. Instead of maintaining separate SDD policies for each jurisdiction, a single EU-standard policy becomes possible. That is an operational opportunity, but realising it requires firms to be engaged in the guideline-setting process now, so that the final text reflects the multi-jurisdictional realities they face.
The broader AML compliance picture for firms handling digital assets, including considerations around stablecoin products, is covered in our analysis of AML compliance considerations for stablecoin issuers and banks.
Key Dates and Next Steps
The timeline is tight. The expression-of-interest deadline of 18 October 2026 is less than a week from the date of the CSSF notice. Firms that want to participate in the Frankfurt roundtables need to act immediately.
What Firms Should Do This Week
First, check AMLA's press release for the exact expression-of-interest form and submission instructions. The CSSF notice links directly to AMLA's page, which contains the practical details. Second, identify who within the firm is best placed to represent its SDD-related operational experience, whether that is the MLRO, the head of compliance, or a senior AML analyst. Third, if the firm cannot attend individually, contact the relevant industry association and confirm whether a collective response is being coordinated.
Beyond the immediate registration step, compliance teams should begin documenting the specific aspects of SDD that are most operationally significant for their business. The roundtables are a dialogue, not a one-way briefing. Participants who arrive with concrete, evidence-based observations about where current SDD rules create ambiguity or disproportionate burden will have more influence on the resulting guidelines than those who attend without a prepared position.
Frequently Asked Questions
What is simplified customer due diligence and how does it differ from standard CDD?
Simplified customer due diligence allows obliged entities to apply reduced identity and risk checks to clients or products assessed as lower risk. Unlike standard CDD, which requires full identity verification and ongoing monitoring at a standard intensity, SDD permits a lighter-touch approach, though it still requires a documented risk justification and ongoing monitoring at a reduced level. It is not an opt-out from AML obligations.
Who can attend the AMLA roundtables and how do firms register?
AMLA has opened participation to financial sector professionals and their representative bodies across all relevant sectors. Firms must submit an expression of interest via the process described in AMLA's own press release before 18 October 2026 at 23:59 CEST. The CSSF notice directs firms to AMLA's page for the practical submission steps.
Will the roundtable outcomes be binding on EU firms?
The roundtables themselves are a consultative input stage. The feedback gathered will inform draft SDD guidelines developed by AMLA. Once finalised, AMLA guidelines carry significant regulatory weight and obliged entities across the EU will be expected to apply them. They are not directly binding in the same way as a regulation, but supervisors will use them as the benchmark when assessing compliance.
How should crypto-asset service providers prepare their SDD frameworks ahead of the AMLA guidelines?
CASPs should review their current risk-scoring criteria for SDD eligibility, document the rationale behind each criterion, and assess whether that rationale is consistent with the AML Regulation's risk factor framework. They should also review their record-keeping processes to ensure that SDD elections are captured in a way that can be audited. Participating in the roundtables or contributing to an industry association response is the most direct way to shape how the guidelines ultimately read.
What does this mean for accounting firms advising regulated clients?
Accounting firms that advise obliged entities on AML compliance should treat the AMLA guideline process as an early-warning signal. Once draft guidelines are published, clients will need to assess the gap between their current SDD policies and the incoming standard. Firms that track the consultation process from this roundtable stage onward will be able to advise clients earlier and more precisely, reducing the risk of last-minute remediation exercises.
Source: CSSF Luxembourg