Act 2026
Bekendtgørelse af lov om forebyggende foranstaltninger mod hvidvask og finansiering af terrorisme (hvidvaskloven), LBK nr. 433 af 17. april 2026 (Consolidated Act on Measures to Prevent Money Laundering and Financing of Terrorism)
Plain-English summary
Requires covered businesses to assess money-laundering risk (§ 7), keep written policies and controls (§ 8), carry out customer due diligence (§§ 10-11), report promptly to Hvidvasksekretariatet (§ 26) and keep records for five years (§ 30). Covered businesses include providers of crypto-asset services (§ 1(1) no. 22), currency exchange (no. 18) and estate agents (no. 16). Sections 47-49 (supervision) and 78 (penalties) were not reached in the text read.
Who it applies to
Banking · Payments & Fintech · Crypto / VDA · Real Estate · DNFBPs (Lawyers, Accountants, Dealers)
Topics
AML / CFT / Sanctions
Obligations arising from this law or regulation
| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| AML record retention | Retention period At least 5 years after the business relationship ends or the single transaction is completed | — | source | |
§ 30(2) requires information to be kept for at least five years after the business relationship ends or the single transaction is completed; personal data is then deleted unless other legislation says otherwise. |
||||
| AML risk assessment, written policies and compliance officer | — | — | source | |
§ 7(1) requires covered businesses to identify, assess, document and regularly update their money-laundering risk. § 8(1) requires adequate written policies, procedures and controls based on that assessment. § 7(2) requires daily management to appoint an employee with decision-making authority, and § 8(3) requires a management-level compliance officer for businesses in § 1(1) nos. 1-7 that must have a compliance function under other law. |
||||
| Customer due diligence (KYC/CDD) | At onboarding, on the § 10 triggers, and ongoing monitoring | — | source | |
§ 10 sets the triggers for due diligence: establishing a business relationship, occasional transactions above set thresholds, suspicion of money laundering or terrorist financing, and doubts about earlier identity data. § 11(1) nos. 1-5 cover identity information verified against a reliable and independent source, beneficial owners, the purpose and intended nature of the relationship, and ongoing monitoring. § 17(1) requires enhanced due diligence at higher risk (cited in Finanstilsynet's decisions). |
||||
| Suspicious transaction reporting to Hvidvasksekretariatet | Deadline Promptly (omgående) on knowledge, suspicion or reasonable grounds to suspect | — | source | |
§ 26(1) requires a covered business that knows, suspects or has reasonable grounds to suspect money laundering or terrorist financing to inform Hvidvasksekretariatet 'omgående' (promptly). §§ 26(3), (4) and (6) restrict carrying out certain transactions before the report is made. |
||||
| No obligations match these filters. | ||||
Latest news
-
US sanctions bill targets Russian energy sector under Graham legislation
3 Oct 2026
Proposed United States legislation aims to impose sanctions targeting Russia's energy infrastructure and related financial flows. Named in honor of the late Senator Lindsey Graham, who was a prominent Ukraine aid…
-
AUSTRAC Examines Western Union AML Controls and Transaction Monitoring
26 Sep 2026
Australia's financial intelligence unit has initiated a formal investigation into Western Union's anti-money laundering framework and compliance infrastructure. The regulatory examination focuses on the company's…
-
RBI penalizes Ola Financial Services for KYC compliance failures
25 Sep 2026
The Reserve Bank of India imposed a monetary penalty of ₹3.10 lakh on Ola Financial Services Private Limited for non-compliance with KYC directions under the Payment and Settlement Systems Act, 2007. Following a…