EU's New Crypto Watchdog Flags AML Vulnerabilities as MiCA Migration Heats Up

The Association of Member State Anti-Money Laundering Authorities (AMLA) is sounding the alarm on anti-money laundering (AML) compliance risks as crypto firms navigate the post-MiCA transition period in Europe.

According to AMLA's chair, the migration to the EU's Markets in Crypto-Assets Regulation (MiCA) licensing framework has created a compliance blind spot. While firms scramble to meet the new regulatory requirements, money laundering safeguards are slipping through the cracks—exactly the kind of vulnerability bad actors exploit.

The MiCA Migration Crunch

The EU's MiCA regime, which kicked off with entry-into-force provisions last year, represents the bloc's most comprehensive attempt to regulate crypto trading platforms, custody providers, and stablecoin issuers under a unified framework. But here's the catch: the transition isn't seamless.

Crypto firms juggling legacy compliance systems with new MiCA requirements face operational strain. That chaos creates windows where transaction monitoring falters, customer due diligence (CDD) processes slip, and beneficial ownership verification lags. AMLA's leadership is particularly concerned about this middle ground—where old rules technically don't fully apply, but new ones aren't fully operational either.

What AMLA Is Watching

AMLA's expanded oversight focuses on three critical vectors:

Customer Onboarding: Crypto platforms are accelerating KYC/AML procedures to meet MiCA deadlines, sometimes at the expense of thoroughness. The authority wants member states to scrutinize whether firms are actually verifying customer identities or just checking boxes.

Transaction Surveillance: The MiCA migration period has exposed gaps in real-time transaction monitoring. Some platforms are operating with split systems—old monitoring for legacy assets, new systems for MiCA-compliant activity—creating dead zones.

Cross-Border Flows: As firms migrate between jurisdictions or consolidate operations under MiCA, tracing illicit fund flows becomes harder. AMLA is coordinating with member states to maintain visibility on high-risk transactions crossing borders.

The Regulatory Reality

This isn't hypothetical. AMLA's chair emphasized that crypto's regulatory evolution doesn't happen in a vacuum. Every licensing migration, every compliance upgrade, creates temporary vulnerability windows. The 2023-2024 crypto market recovery has been accompanied by increased illicit activity probes—sanction evasion, ransomware payments, and mixer usage are all trending upward according to blockchain forensics firms.

MiCA was designed to close loopholes, but the implementation phase matters as much as the regulation itself. Firms that rush through compliance face enforcement action from national authorities. Firms that are too cautious risk operational disruption.