Line4

UpcomingAnti-money laundering (AMLA)Last checked 11 November 2026

AMLA risk assessment data collection (AML_RA)

A regulatory return listed by the European Banking Authority (EBA), European Union.

Data for the Anti-Money Laundering Authority (AMLA) to run its money laundering risk assessment models. AMLA uses them to select, in 2027, up to 40 entities it will supervise directly from 2028, and to make sure supervisors across the EU assess the money laundering risk of credit and financial institutions consistently. The EBA supports AMLA under an EBA-AMLA Service Level Agreement of January 2026 by providing the data model, taxonomy and statistical support. The module covers basic information, customers, products and services (for example payment accounts, lending, e-money, crypto services, cash), geographies, distribution channels, AML/CFT controls and balance sheet data. Source

Official title: Risk assessment methodologies (AML_RA), AMLA risk assessment 2027 data collection exercise

Check a AML_RA file, free

The facts

Who files
Obliged entities under the anti-money laundering rules (the AMLA page refers to credit and financial institutions). The EBA pages do not set out the 2027 submission route in full; the 4.3 page speaks of submissions to 'NCAs' and 'EBA/AMLA'. In the 2026 testing exercise, sampled entities were notified by their national competent authorities and AMLA circulated the template to them through those authorities. The 4.2 page footnote says the risk assessment methodology data, although part of the technical package, is not collected by the EBA. Source
How often
A single 2027 data collection exercise with reference date 31 December 2026, per the 4.3 and 4.4 pages. No recurring frequency is stated on the pages read. Source
Deadline
Not stated for the 2027 exercise on the EBA or linked AMLA pages. For context, the 2026 testing exercise asked participating entities to submit data by 22 April 2026 (AMLA page of 16 March 2026). Source
Format
xBRL-CSV. First reference dates fall after 31 March 2026, from when the EBA takes reports only in xBRL-CSV; the EBA's sample files for the release are xBRL-CSV packages. Source
How it is filed
Filing routes recorded for the EBA: EUCLID (European Centralised Infrastructure of Data); Pillar 3 data hub (P3DH) submissions. See how firms file with the EBA.
Status
UpcomingFirst published in release 4.3 for preparation only: the 4.3 components 'must not be used for data submissions to NCAs, nor to EBA/AMLA'. Release 4.4 phase 1 holds the revised AML_RA module (version 1.1.0, reference date 31 December 2026) built on the 2026 data collection, and the 4.4 FAQ says reporting entities should use the 4.4 phase 1 taxonomy for their 2027 submissions. Source
Legal basis
Group
Anti-money laundering (AMLA)
Check a file before you file it

Line4 Check for EBA reporting runs EBA's own validation rules on a AML_RA file in your browser, free. Your file never leaves your computer. What it runs, from its published manifest:

  • EBA release 4.3: 329 of EBA's 331 active checks (99%).
  • EBA release 4.4 phase 1: 373 of EBA's 383 active checks (97%).

It is not a substitute for the validation the supervisor runs when you submit.

Templates (34)

The tables and forms inside the return. Plain name first, the EBA's code in brackets.

  • Basic Information (W 01.01)
  • Comments (W 01.02)
  • Comments on unknown/non-applicable datapoints - Risk Assessment (W 01.03)
  • Customers Template Instructions (W 02.01)
  • Payment accounts (W 03.01)
  • Virtual IBANs (W 03.02)
  • Prepaid cards (W 03.03)
  • Lending and Factoring (W 03.04)
  • Life insurance contracts (W 03.05)
  • Currency exchange (involving cash) (W 03.06)
  • Investment services and activities (W 04.01)
  • Money remittance (W 04.02)
  • Wealth management (W 04.03)
  • Correspondent services (W 04.04)
  • Trade finance (W 04.05)
  • E-money (W 04.06)
Show all 34 templates
  • TCSP services (W 04.07)
  • Crypto fiat cards (W 04.08)
  • Providing custody and administration of crypto-assets on behalf of clients (W 04.09)
  • Crypto Services (W 04.10)
  • Management of UCITS and AIFS (W 04.11)
  • Safe custody services (W 04.12)
  • Crowdfunding (W 04.13)
  • Cash transactions (W 04.14)
  • Geographies (W 05.01)
  • Distribution channels (W 06.01)
  • Governance/Culture and Compliance (W 07.01)
  • Internal compliance reporting - outsourcing and audit (W 07.02)
  • Risk Assessment (W 07.03)
  • Customer Due Diligence and Monitoring (W 07.04)
  • Transaction Monitoring and Suspicious Activity Monitoring (W 07.05)
  • Targeted Financial Sanctions and Compliance with Fund Transfers Regulation (W 07.06)
  • Group-wide AML/CFT Framework (W 07.07)
  • Balance-sheet data (W 08.01)

Templates of module AML_RA in EBA release 4.4 phase 1, read from the module's entry point in the taxonomy package; parts of a template split into sub-tables (a, b, c) are listed once. Release 4.3 has 32 template codes; drops W 01.03, W 08.01. Source

Validation rules

414 rules, as counted from the EBA's published material. Software can run them exactly as published. Source

How they are written: Excel list with one row per rule and module version: an expression column in the EBA's DPM-XL syntax, severity (error or warning), active status and reference-date range. The same rules ship as XBRL Formula assertions in the taxonomy package..

EBA's list applies the active AML_RA_4.4 rules to reference dates from 2026-12-31 with no end date set. Release 4.3 (AML_RA_4.3): 137 active of 137 listed.

The rules, on eba.europa.eu

How they were counted

Distinct rule codes listed for module AML_RA_4.4 in EBA's validation rules list VR_4.4.phase1_.xlsx ((from 4.0) EBA_Validation rules, latest update 12/10/2026) with IsActive = Active: 414 of 414 listed. 0 of the active rules have severity error; the rest are warnings.

Counts are in the EBA's own unit, so they are not comparable with other regulators' counts.

Public data

No published data from this return was found. No publication of this return's data found on the EBA's risk analysis and data pages (checked 2026-11-11). Source

Official documents (13)

The EBA's own files, with the size and SHA-256 fingerprint of each as downloaded on 11 November 2026, so anyone can tell whether a copy is the same version.

  • Taxonomy package 4.4 (Phase 1)

    Taxonomy · ZIP · 9.7 MB · 12 October 2026

    SHA-256 e1d89112fee0show in fulle1d89112fee0f0708631b8f4776360bac8bf3fffdf28fe83164253ace1551ea6
  • Taxonomy package 4.3

    Taxonomy · ZIP · 5.0 MB · 13 July 2026

    SHA-256 02de1ac54ebcshow in full02de1ac54ebc1b74d847eb3be25347dc6df6d5766f9532eb8d044a6bc564761c
  • FAQ for reporting framework release 4.4

    Guidance · DOCX · 126.8 KB · 12 October 2026

    SHA-256 cd65515c169fshow in fullcd65515c169f9e87002a3158816716d14683e8458834361b366149d241251aab
  • Reporting framework 4.4

    List of returns · HTML

  • Sample files 4.4 (Phase 1)

    Sample · ZIP · 111.5 KB · 12 October 2026

    SHA-256 9443e194a9c9show in full9443e194a9c9827f08011d22d1f63656acf2d8d8ca6dc0837546c4006bd3d099
  • DPM table layout and data point categorization (4.4 Phase 1)

    Template · ZIP · 1.7 MB · 12 October 2026

    SHA-256 be696e982438show in fullbe696e982438ebb12aed58cf854b66a38b4b87cadcd731629bbb41c332d76aad
  • Reporting framework 4.3

    List of returns · HTML

  • Sample files 4.3

    Sample · ZIP · 24.0 KB · 9 July 2026

    SHA-256 b1412977382fshow in fullb1412977382f1cbca0f4c104cc61c91432ea63430a2b9cbf8f9597b1745345d3
  • DPM table layout and data point categorization (4.3)

    Template · ZIP · 629.2 KB · 9 July 2026

    SHA-256 97bec445820eshow in full97bec445820efa56579d6e340ec8825ac4b8355747b5308bb07fb41f3d3dd3ed
  • (from 4.0) EBA_Validation rules (latest update 12/10/2026)

    Validation rules · XLSX · 1.1 MB · 12 October 2026

    One row per rule and module version, with the expression, severity, active status and reference-date range.

    SHA-256 38c190fa4c2fshow in full38c190fa4c2ff81f22a5bd2ed94f744fc64e4eb9b722676e07f89669d79b1aea
  • Small validation package 14/09/2026: Micro taxonomy package

    Validation rules · ZIP · 1.5 MB · 14 September 2026

    Severity and deactivation updates for the taxonomy (XBRL set folders).

    SHA-256 ea6184a7e3a6show in fullea6184a7e3a67016346f2154bfb04ca0a489ea829cf344239367fa216d21709f
  • EBA filing rule V5.9

    Filing rules · PDF · 1.2 MB · 26 June 2026

    Technical rules for XBRL-XML and xBRL-CSV files sent to the EBA.

    SHA-256 bbc23b9ecad5show in fullbbc23b9ecad5de0a0821bbe8bce8e4ce617652afce02e81c88d572bac4a4b293
  • DPM Know issues (uploaded on 05/11/2026)

    Known issues · XLSX · 69.9 KB · 5 November 2026

    SHA-256 c6753a428649show in fullc6753a4286496876f2e545b355f1ebaddf0e4383de522b19818c93af141327e0

Sources

Every page and document this return's facts were read from.

Knowing exactly what is collected, in what format and under which rules is the first step to real-time supervision. Line4 builds SupTech software for financial regulators that runs checks like these as each return arrives.

Line4's text and records here are free to reuse under CC BY 4.0. Please credit: “Source: Line4 regulatory submissions library (CC BY 4.0), https://www.line4.ai”. The regulators' documents, forms, taxonomies, rules and data belong to them: see EBA's reuse terms. This describes what regulators publish. It is not legal or regulatory advice: always rely on the regulator's own text.

Contains material from the European Banking Authority (EBA), https://www.eba.europa.eu, reproduced with the source acknowledged as the EBA's legal notice requires. Source: European Banking Authority.

Last checked 11 November 2026.