Ireland's National AML Strategy: What the Crypto Private-Wallet and Gambling Rules Mean for Accounting Firms and CFOs
Ireland has published its first National Anti-Money Laundering, Countering Financing of Terrorism, and Countering Proliferation Financing Strategy, and digital assets feature prominently. The document, released by the Irish government's finance department, proposes enhanced compliance obligations for crypto-asset service providers (CASPs), with particular focus on private wallet transfers, overseas digital asset firms, and the use of crypto as a source of funds in gambling. For accounting firms, auditors, and CFOs relying on crypto accounting software to manage client or entity-level digital asset exposure, this strategy is a direct signal to revisit current AML programme design before the underpinning legislation is enacted.
What Ireland's AML Strategy Actually Says
The strategy document is the Irish government's first consolidated framework covering AML, CFT, and proliferation financing. It sets out the country's approach to identifying and mitigating illicit finance risks across the economy, with a dedicated section on crypto-assets.
Enhanced Checks on Private Wallet Transfers
The strategy calls for strengthened obligations on CASPs handling transfers that involve private, unhosted wallets. This aligns with the direction already set at EU level: the EU's Transfer of Funds Regulation (TFR), which came into force for crypto transfers in 2024, already requires CASPs to collect and transmit originator and beneficiary information. Ireland's strategy signals that domestic implementation will go further on the due-diligence side, requiring enhanced checks rather than baseline data collection when a counterparty wallet cannot be attributed to a regulated entity.
In practical terms, this means a CASP or its compliance team must be able to demonstrate not just that it collected wallet address data, but that it took affirmative steps to assess the risk posed by that unhosted wallet before processing the transfer. For firms using digital asset accounting software to reconcile on-chain movements, the implication is clear: the software's transaction log alone will not satisfy an AML examiner. Risk-rating logic, source-of-funds narratives, and escalation records must sit alongside the transaction data.
Stricter Due Diligence on Overseas Crypto Firms
The strategy also targets relationships with overseas digital asset businesses. Irish CASPs and financial institutions that receive crypto-related flows from foreign VASPs operating outside the EU's regulatory perimeter will face stricter due-diligence requirements. The government's language points toward correspondent-style obligations: before accepting transfers from or establishing business relationships with non-EU crypto firms, regulated entities will need to assess those firms' AML/CFT frameworks, licensing status, and ownership structures.
This has immediate relevance for CFOs and treasury teams at Irish companies that hold digital assets or use overseas exchanges for treasury management. If your custodian or exchange counterparty is domiciled outside the EU and not subject to MiCA authorisation, a formal due-diligence file documenting its regulatory status will likely become a compliance prerequisite, not just good practice.
Crypto as a Source of Funds in Gambling
A distinctive element of the strategy is its reference to industry standards governing the acceptance of crypto as a source of funds within the gambling sector. Ireland has a significant licensed gambling industry, and the strategy flags that standards need to be developed to address the specific money-laundering risks that arise when players fund gambling accounts with crypto. The document does not specify the precise standard-setting body or the timeline for those standards beyond the broader strategy horizon, but the intent is clear: gambling operators accepting crypto payments will need to apply AML controls that are at least equivalent to those applied to cash or card transactions, and likely more rigorous given the pseudonymous nature of on-chain transfers.
The Legislative and Regulatory Context
MiCA Alignment Is Already Well Advanced
The strategy document acknowledges that legislation to implement the AML and CFT obligations under MiCA is described as "well advanced." MiCA's CASP authorisation regime, which became fully applicable across the EU in December 2024, requires firms to hold a licence from their home-state regulator before offering crypto services to EU clients. Ireland's Central Bank is the competent authority for MiCA authorisation in Ireland, and the strategy signals that the domestic AML overlay will be built on top of, not instead of, the MiCA framework.
For firms that have already mapped their MiCA obligations, the strategy is an additive layer. MiCA sets the licensing and conduct baseline; the national AML strategy adds the specific transaction-monitoring, due-diligence, and source-of-funds requirements that Irish supervisors will scrutinise during examinations. Firms that read MiCA compliance as the finish line should recalibrate: it is the starting point for Irish supervisory expectations. Those seeking a fuller picture of how MiCA is reshaping institutional compliance across Europe will find the broader context useful for framing the Irish position within the EU's wider supervisory convergence effort.
Ireland's June 2026 National Risk Assessment
The strategy follows Ireland's first national risk assessment focused specifically on crypto, published in June 2026, its first such assessment in seven years. That risk assessment identified the crypto sector as carrying elevated money-laundering and terrorism-financing risk, setting the political and supervisory context for the stronger measures now outlined in the strategy. The risk assessment also indicated that certain legislative elements were expected to be operational by the second half of 2027, giving firms a broad indicative timeline for when the new obligations may have legal force.
Accounting and Audit Implications
Transaction Monitoring Coverage Gaps
Many Irish businesses holding or transacting in crypto currently treat their digital asset accounting software as the primary record of crypto activity. That is appropriate for financial reporting, but it creates a gap for AML purposes. AML programme design requires that transaction monitoring rules be calibrated to detect suspicious patterns, that alerts be reviewed and documented, and that records be retained in a way that is accessible to supervisors. A crypto bookkeeping software output is not a substitute for a monitored, rule-based transaction surveillance system.
Accounting firms advising clients in the CASP sector, or clients who regularly transact in crypto, should now assess whether their clients' current systems produce the kind of audit trail that an Irish AML examiner would expect to see. The lessons from the A7 stablecoin flows case for AML recordkeeping illustrate what happens when transaction monitoring is treated as an afterthought: the gaps become enforcement exhibits.
Source-of-Funds Documentation for Audit Files
The strategy's focus on private wallet transfers and overseas firm relationships translates directly into audit file requirements. When an auditor tests a client's crypto receipts, they will increasingly need to see not just the on-chain transaction record but also the source-of-funds assessment that accompanied it. For clients in regulated sectors, such as gambling operators or licensed VASPs, that documentation will need to show that enhanced checks were performed where required.
Building a source-of-funds documentation protocol into engagement templates now, ahead of the legislation being finalised, puts firms in a better position than waiting for supervisory guidance to arrive. The direction of travel is unambiguous: regulators want to see that digital asset inflows were assessed, not just recorded.
Substance Over Software
A recurring theme across EU and Irish AML supervisory priorities is the expectation that compliance is a substantive programme, not a software output. Digital asset accounting software plays an essential role in producing accurate, reconciled records of crypto transactions, and that accuracy is the foundation of any defensible AML programme. But the records are only as useful as the policies, procedures, and human judgement layered on top of them. Firms that position their crypto accounting software as the compliance solution, rather than one component of a broader programme, are likely to find that positioning unconvincing in an examination context.
Practical Steps for Firms and CFOs
Immediate Actions
Given the strategy's publication and the "well advanced" legislative timeline, the following steps are worth prioritising now rather than waiting for the final law:
- Map all crypto counterparties: identify which business relationships involve unhosted wallets or non-EU VASPs, and document the current level of due diligence applied to each.
- Review transaction monitoring rules: confirm that your current system applies enhanced scrutiny to private wallet transfers, not just standard TFR data collection.
- Assess gambling-sector clients: if you advise licensed gambling operators that accept crypto payments, flag the upcoming industry standards work and begin gap analysis against existing AML controls.
- Update AML risk assessments: Ireland's national risk assessment designated crypto as elevated risk; client-level and firm-level AML risk assessments should reflect that designation.
- Align with MiCA authorisation timelines: if any client is providing crypto services without a MiCA licence or a transitional authorisation, the strategy reinforces that unlicensed activity will face increasing supervisory scrutiny.
The Broader EU Picture
Ireland's strategy does not exist in isolation. Across the EU, national competent authorities are building out their domestic AML frameworks on the MiCA and TFR foundations. The EU's new AML Authority (AMLA), which is being established in Frankfurt, will eventually take direct supervisory responsibility for the highest-risk CASPs across the EU. Ireland's decision to publish a formal national strategy ahead of AMLA becoming fully operational signals that the Central Bank of Ireland intends to be an active, not passive, participant in that supervisory network.
For firms with multi-jurisdictional crypto exposure, the practical consequence is that AML programme design needs to be sophisticated enough to satisfy the most demanding national supervisor in the group, not calibrated to the lowest common denominator. Ireland, on current signals, is positioning itself toward the more demanding end of that spectrum.
Source: Cointelegraph Regulation
Frequently Asked Questions
What is Ireland's National AML/CFT Strategy?
It is Ireland's first consolidated government-level strategy covering anti-money laundering, countering the financing of terrorism, and countering proliferation financing. Published by the Irish government's finance department, it sets out how the country will address illicit finance risks, including those arising from crypto-assets.
What does the strategy require for private crypto wallet transfers?
The strategy calls for enhanced due-diligence checks when transfers involve private, unhosted wallets. This goes beyond baseline data collection under the EU's Transfer of Funds Regulation, requiring CASPs to actively assess the risk posed by an unhosted wallet counterparty before processing the transfer.
How does this interact with MiCA?
The strategy acknowledges that MiCA-aligned AML legislation is already well advanced in Ireland. MiCA sets the licensing and conduct baseline for crypto-asset service providers; the national AML strategy adds the specific transaction-monitoring and due-diligence expectations that Irish supervisors will apply on top of MiCA requirements.
When will the new obligations have legal force?
The strategy document references Ireland's June 2026 national risk assessment, which indicated that certain legislative elements were expected to be operational by the second half of 2027. Firms should treat that as an indicative timeline and begin gap analysis now rather than waiting for final legislation.
What should accounting firms do with their crypto accounting software in light of this strategy?
Crypto accounting software is essential for producing accurate transaction records, but it is one component of a broader AML programme. Firms should ensure that transaction monitoring rules, source-of-funds documentation, and risk-assessment protocols sit alongside the software output. An examiner will expect to see substantive compliance evidence, not just a reconciled ledger.