AMLR and crowdfunding: what changes for platforms in 2027

Crowdfunding platforms become obliged entities

Under Art. 3(3)(h), crowdfunding service providers become obliged entities. They must run customer due diligence, keep records and report suspicious transactions to their financial intelligence unit.

Two kinds of customers

Investors and project owners are both customers (Art. 19(5)(e)). Each needs a due diligence process suited to its profile, for natural persons and legal entities alike.

Screening, reviews and records

Sanctions screening is part of customer due diligence (Art. 20(1)(d)). Customer data must be refreshed at least every year for high-risk customers and every 5 years for the others, and records kept for 5 years after the relationship ends (Art. 77).

What is still open

The AMLA regulatory technical standards on customer due diligence were sent to the Commission as a final draft on 30 September 2026 and are not yet adopted. Processes should be built so they can follow the final text. DORA already applies to crowdfunding providers, which matters when you outsource part of the AML function.

How AML Hub helps

AML Hub gives your platform an AMLR-aligned questionnaire with investor and project-owner tracks, risk scoring, provider checks, case review with 4-eyes approval and 5-year record keeping, while every decision the regulation reserves to you stays with your team.