CySEC AML · Chapter 3 · Topic 5 of 7

How do the EU AML directives and the FATF shape Cyprus's AML rules?

Why the EU legislates against money laundering, the main directives and the new 2024 package, and what the Financial Action Task Force is, how it works and what its Recommendations cover.

By the ExamPass CY editorial teamLast reviewed 6 min read

Short answer

Cyprus's AML/CFT Law implements EU directives adopted by the European Parliament and the Council, which set common rules to detect and prevent money laundering and terrorist financing and to speed up cross-border cooperation between authorities. They follow the global standard set by the Financial Action Task Force (FATF), an intergovernmental body founded by the G7 in 1989. Its 40 Recommendations are not law, but countries are assessed against them. Its decision-making Plenary meets three times a year, and the European Commission is a member.

EU and FATF at a glance

Who adopts EU AML directivesThe European Parliament and the Council
Main directives4th AML Directive (EU) 2015/849, amended by the 5th, (EU) 2018/843; Directive (EU) 2018/1673 on criminal law
New EU packageAML Regulation (EU) 2024/1624 and Directive (EU) 2024/1640, mainly from 10 July 2027; AMLA set up by Regulation (EU) 2024/1620
FATF founded1989, by the G7
FATF Recommendations40 Recommendations; since 2012 they include the former 9 Special Recommendations on terrorist financing
Legal forceNone in themselves; they are the international standard countries are evaluated against
FATF PlenaryMeets three times a year
Membership40 members: 38 jurisdictions and 2 regional organisations, the European Commission and the Gulf Co-operation Council; Russia suspended since 24 February 2023

Source: Directive (EU) 2018/1673, recital 1; Directive (EU) 2015/849; Regulations (EU) 2024/1620 and 2024/1624; FATF, International Standards on Combating Money Laundering and the Financing of Terrorism and Proliferation.

Why does the EU legislate against money laundering?

Money laundering, terrorist financing and organised crime undermine the soundness, stability and good name of the financial sector and threaten the EU's internal market and internal security. Criminals move money across borders easily, so national rules alone are not enough. The EU's directives, adopted by the European Parliament and the Council, complement and reinforce measures to detect and prevent laundering, and make cooperation between competent authorities in different member states faster and more efficient.

Cyprus implements them through Law 188(I)/2007 and CySEC's AML Directive. The 4th AML Directive, (EU) 2015/849, strengthened the risk-based approach first set out in the 3rd Directive (2005/60/EC), adding EU, national and firm-level risk assessments, and introduced central beneficial ownership registers. The 5th, (EU) 2018/843, amended it, for example by extending the rules to virtual currency providers and opening up access to the registers; in November 2022 the EU Court of Justice struck down general public access, and Cyprus now requires a legitimate interest. Directive (EU) 2018/1673 harmonised the criminal offence of money laundering and its penalties.

In 2024 the EU adopted a new package: a directly applicable Anti-Money Laundering Regulation, (EU) 2024/1624, and a new directive, (EU) 2024/1640, both applying mainly from 10 July 2027, and a new EU authority, AMLA, set up by Regulation (EU) 2024/1620, which took over the EBA's AML/CFT role at the start of 2026.

Terms used in this note

FATF
The Financial Action Task Force, the intergovernmental body that sets the international standards against money laundering, terrorist financing and proliferation financing.
Plenary
The FATF's decision-making body, made up of its members, which meets three times a year.
Directive
An EU law that sets goals member states must achieve, which each country puts into its own national law.

What is the FATF and how does it work?

The Financial Action Task Force is an intergovernmental body set up by the G7 in 1989 to develop national and international measures against money laundering. Its mandate has since grown to cover terrorist financing and the financing of the proliferation of weapons of mass destruction.

Its decision-making body, the Plenary, meets three times a year. It has 40 members: 38 jurisdictions and two regional organisations, the European Commission and the Gulf Co-operation Council. Russia's membership was suspended on 24 February 2023, after its invasion of Ukraine. Cyprus is not a member; it is evaluated by MONEYVAL, a body that works to the FATF standards, as explained in What is MONEYVAL?

Besides setting standards, the FATF monitors how its members implement them, studies laundering and terrorist financing methods in typology reports, and identifies jurisdictions with strategic weaknesses.

What do the FATF Recommendations cover?

The FATF Recommendations serve as the global benchmark for combating money laundering, terrorist financing and proliferation financing. They do not have the force of law; they work because countries commit to them and are evaluated against them, and because weak performers face public listing.

First issued in 1990, they were revised in 1996, 2001, 2003 and 2012, and have been updated regularly since. After the attacks of 2001 the FATF added Special Recommendations on terrorist financing, nine in the end. In 2012 it merged the 40 plus 9 into a single set of 40.

The Recommendations cover risk assessment and the risk-based approach, national cooperation, the criminal offences of money laundering and terrorist financing, targeted financial sanctions, preventive measures for financial institutions and other businesses, the transparency of companies and trusts, the powers of authorities and international cooperation.

How to think about it

Keep each body in its lane. The EU makes binding law through directives and, from 2027, a directly applicable regulation; Cyprus turns the directives into national law. The FATF writes the global standard, which has no legal force of its own but shapes everything else. For FATF numbers: founded 1989 by the G7, 40 Recommendations since 2012, Plenary three times a year, the European Commission among its members.

Common mistakes

  1. Saying the FATF Recommendations are legally binding. They are the international standard, not law; countries give them effect through their own legislation.

  2. Counting 49 Recommendations today. Since 2012 the 40 plus 9 have been merged into a single set of 40.

  3. Naming the European Commission as the only author of AML directives. Directives are adopted by the European Parliament and the Council, usually on a Commission proposal.

  4. Assuming Cyprus is an FATF member. Cyprus is evaluated by MONEYVAL, not directly by the FATF.

Practise this topic

Test what you just read

The Chapter 3 pack has 84 exam-style questions, 13 of them on this topic. Every question has a hint before you answer and a full explanation after.

Try the free demo

Or revise the numbers first with 15 free Chapter 3 flashcards →

Last reviewed on by the ExamPass CY editorial team against the law in force on that date. Study notes help you prepare for the CySEC exams; they are not legal advice. ExamPass CY is not affiliated with CySEC.

How we write study notesReport an error