RTS on the assessment of the inherent and residual risk profile of obliged entities (financial sector)

What it covers

Harmonised methodology supervisors use to rate the inherent and residual ML/TF risk of credit and financial institutions: the data points, risk indicators, weighting and the resulting risk categories. Final report published by AMLA on 16 December 2025 and sent to the Commission; the Commission's Legal Service asked for clarifications and AMLA aims to finalise the RTS before the end of 2026 (General Board, 1 July 2026). The non-financial sector has its own draft RTS under the same article, in consultation since July 2026.

What it means in practice

Determines how your supervisor classifies your institution and how intensively it is supervised. Expect standardised data requests on customers, products, channels and geography; align the SIRA, risk appetite and management information with these indicators.

Versions and what changed

1. Consultation paperMarch 6, 2025
   EBA consultation paper (EBA/CP/2025)

   First public draft, prepared by the EBA. Consultation closed 6 June 2025.

   Sources
2. Final draftDecember 16, 2025
   AMLA final report on the draft RTS under Art. 40(2) AMLD6

   Final report published by AMLA on 16 December 2025 with the methodology for supervisors to rate the inherent and residual risk profile of credit and financial institutions (the non-financial sector gets its own RTS).

   Sources
3. Submitted to the CommissionDecember 16, 2025
   Sent to the European Commission for adoption

   Sent to the Commission in December 2025 (press release of 18 December 2025; AMLA's 2025 annual report). The Commission's Legal Service asked for clarifications; AMLA aims to finalise the RTS before the end of 2026 (General Board, 1 July 2026).

   Sources
4. Published in the Official Journalnot yet available

Consultation themes

• Are the mandatory risk factors for the business-wide risk assessment appropriate for your sector?
• Is the proposed weighting method compatible with existing risk models?
• How often should the business-wide assessment be reviewed?

Sources

• AMLA - final report on the RTS under Art. 40(2) AMLD6 (16 Dec 2025)
• AMLA - press release: a major step toward harmonised EU supervision, first two final RTS (18 Dec 2025)
• AMLA - public summary of the 9th General Board, supervisory composition (1 Jul 2026)
• EBA - consultation on 4 RTS under the AML package (6 Mar - 6 Jun 2025)
• AMLA - Authority for Anti-Money Laundering

Framework blocks it lands on

This instrument on the dashboard, with the other instruments and the framework: Open on the dashboard

Other instruments

• RTS on group-wide minimum requirements and additional measures for subsidiaries and branches in third countriesFinal text, awaiting publication
• RTS on the assessment of the inherent and residual risk profile of obliged entities in the non-financial sectorIn consultation
• Guidelines on ML/TF risk variables and risk factors (successor to the EBA Risk Factors Guidelines)EBA guideline in force, AMLA successor pending
• Guidelines on the extent of internal policies, procedures and controls (incl. the compliance function)EBA guideline in force, AMLA successor pending
• Guidelines on targeted financial sanctions (internal policies, procedures and controls)EBA guideline in force, AMLA successor pending
• Guidelines on ML/TF risks, trends and methods involving third countriesAnnounced, no draft yet

Every RTS, Guideline and ITS under the AMLR