ThetaRay, a global leader in Cognitive AI financial crime compliance, today released a landmark study on the future of anti-money laundering in Europe. The study warns that Europe’s anti-money laundering (AML) system is approaching structural failure, and that financial institutions will be unable to meet upcoming supervisory expectations without advanced AI-driven monitoring and customer-screening systems.
The report, “Next-Generation AML Solutions: An Analysis of AI-Based Tools vis-à-vis the Reform of the European AML Institutional and Substantive Architecture,” offers some of the most comprehensive examinations to date of how the EU’s sweeping AML reform package and the Artificial Intelligence Act will reshape compliance across the region.
Co-authored by Prof. Andrea Minto, a leading authority on EU financial regulation at Ca’ Foscari University of Venice and the University of Stavanger, and Yaron Hazan, ThetaRay’s Vice President of Regulatory Affairs, Advisory board member at the AI APAC Institute and former Head of Compliance at HSBC Israel, the study blends academic rigor with supervisory and operational expertise rarely found in a single publication.
The report finds that despite rising budgets and stronger enforcement, Europe’s AML framework continues to underperform:
-
The FATF reports that 97% of 120 assessed countries show only low to moderate effectiveness in preventing money laundering and terrorist financing.
-
FIUs across Europe report extremely low intelligence yield: the Netherlands identified <3.5% of 3.48 million 2024 reports as suspicious, while France’s Tracfin reports only ~5% actionable SARs.
-
Germany’s FIU data shows that only 15% of SARs are investigated by law enforcement, with 95% of forwarded cases ending without prosecution.
-
One operational risk study found that rules-based detection scenarios produced reporting in just 2% of cases.
According to the study, the global AML system suffers from persistent structural inefficiencies, high false-positive rates, and poor conversion from alerts to meaningful intelligence, the result of legacy rule-based systems that generate low-quality alerts, rely on siloed architectures, and lack the cross-border visibility required to detect modern networked financial crime.
“The data is clear: Europe’s AML system is no longer keeping pace with financial complexity,” said Yaron Hazan, Vice President of Regulatory Affairs at ThetaRay. “For years, institutions have been trapped in a cycle of rule tuning, manual investigations, and defensive reporting, without materially improving outcomes. Under the new regulatory regime, failing to adopt AI will become a compliance vulnerability in itself.”
The report highlights how the EU’s two major regulatory initiatives, the AML Package and the Artificial Intelligence Act, together represent the most consequential shift inAML expectations in decades. The AML Package strengthens due diligence obligations, expands governance requirements, and establishes a new EU-level Anti-Money Laundering Authority (AMLA), harmonizing obligations across Member States. At the same time, the AI Act classifies transaction monitoring and sanctions screening as “high-risk” uses of AI, imposing strict requirements on transparency, human oversight, data governance, and model lifecycle management.
The authors also highlight heightened vulnerabilities in correspondent banking and crypto-asset flows, where traditional rule engines struggle to detect hidden network behaviour across complex cross-border transaction chains. The study further identifies growing friction between the AML Regulation (AMLR) and GDPR data processing constraints, warning that without clearer guidance, institutions could face overlapping regulatory and legal risks.
“Europe’s new AML framework fundamentally raises the standard for what effective compliance means,” said Andrea Minto, Professor of Law and Regulation of Financial Markets at Ca’ Foscari University of Venice and the University of Stavanger. “The AML Package and the AI Act make clear that the integration of AI into customer due diligence and AML monitoring is inevitable. Financial institutions must now prepare for a world in which technological capability and legal obligation are inseparable.”
The report ultimately calls for a fundamental shift from volume-driven alerting to intelligence-led detection, emphasizing hybrid human-AI oversight, robust data governance aligned with the AI Act, transparent and explainable models, integrated customer and transaction screening workflows.
