-3-1400x800.webp?w=3840&q=75)
AML compliance in Spain is becoming more risk-based, data-driven and aligned with EU standards. Businesses must identify customers, verify beneficial owners, assess risk, apply enhanced checks for higher-risk cases, report suspicious activity to SEPBLAC, and continuously monitor relationships beyond onboarding. This evolving approach defines modern aml compliance spain expectations and reflects how spain aml rules are being strengthened in practice.
Recent data shows the scale of the challenge, with Europol estimating around 1% of EU GDP is linked to suspicious financial activity. In 2026, Spain strengthened its AML framework with new rules on financial sanctions risks and a national risk assessment highlighting digital finance, crypto-assets and evolving financial crime. These developments further reinforce the importance of robust aml compliance in spain across all regulated sectors.
AML compliance in Spain is no longer static. It is a continuous lifecycle that connects onboarding, beneficial ownership verification, ongoing monitoring and regulatory reporting. This guide breaks down every stage, explains what has changed in 2026 and prepares you for the upcoming EU AML framework taking effect from 2027.
Binderr AML Compliance Software for Spain
Businesses under Spanish AML rules need more than a sanctions checker. A proper solution should connect identity verification, business checks, screening, risk scoring, due diligence, monitoring, and reporting in one workflow.
With Binderr Services you can;
- KYC: Verify individuals via ID, biometrics, liveness, and fraud checks.
- KYB: Confirm company details, status, directors, shareholders, and key data.
- UBO: Identify ultimate owners or controllers of the business.
- AML Screening: Check sanctions, PEPs, watchlists, and adverse media.
- CDD & EDD: Apply due diligence and escalate higher-risk cases.
- Ongoing Monitoring: Track changes in sanctions, PEPs, ownership, and risk.
What Is AML Compliance in Spain?
AML compliance in Spain refers to the policies, controls, and procedures regulated businesses must use to prevent money laundering, terrorist financing, financial crime, and sanctions risks. It is a core requirement under Spanish AML regulations to detect and mitigate these threats across all customer and transaction activity, forming the foundation of spain aml obligations for regulated entities.
Spain follows a risk-based approach, meaning controls must match the level of risk from customers, products, services, channels, and geography. Stronger measures apply to higher-risk cases, while lower-risk situations may use simplified checks. SEPBLAC, Spain’s AML supervisor and financial intelligence unit, enforces this through risk-based supervision, focusing more heavily on higher-risk sectors and entities. This ensures that aml compliance spain requirements are applied proportionately but effectively across the financial system.
Begin Your AML Compliance Journey with Binderr
Spain's AML Regulatory Framework in 2026
Spain’s AML framework is built on Law 10/2010 and Royal Decree 304/2014, forming the backbone of AML compliance in Spain and defining key obligations for obliged entities under Spain AML regulations. Together, they establish the core structure of spain aml requirements across all regulated sectors.
It is supervised by SEPBLAC and continuously updated to reflect evolving AML requirements in Spain, including risk-based controls, beneficial ownership transparency, and enhanced reporting standards. These updates ensure that aml compliance in spain remains aligned with both national risks and EU-level expectations.
Law 10/2010
Ley 10/2010, de 28 de abril is the cornerstone of AML compliance in Spain. It sets out key obligations for banks, fintechs, insurers, lawyers, real estate professionals and other obliged entities, including customer identification, beneficial ownership checks, CDD, EDD, ongoing monitoring, suspicious activity reporting to SEPBLAC, record keeping and internal controls. It also defines supervisory powers and penalties for non-compliance. The consolidated version, updated on 21 March 2026, strengthens Spain’s risk-based approach and aligns it with evolving EU AML standards, reinforcing the overall spain aml framework.
Royal Decree 304/2014
Royal Decree 304/2014 implements Law 10/2010 by setting out detailed operational AML requirements for obliged entities in Spain. It explains how to apply customer due diligence, risk assessment, beneficial ownership checks, internal controls, and reporting obligations. The decree also defines documentation standards, verification methods, and ongoing monitoring procedures, ensuring consistent aml compliance spain practices across sectors.
SEPBLAC
The Servicio Ejecutivo de la Comisión de Prevención del Blanqueo de Capitales e Infracciones Monetarias (SEPBLAC) is Spain’s AML/CFT authority and Financial Intelligence Unit (FIU). It receives and analyses suspicious transaction reports (STRs) and supervises compliance across regulated sectors. SEPBLAC applies a risk-based approach, focusing greater scrutiny on higher-risk entities and activities. It also works with national and international authorities to combat money laundering, terrorist financing, and sanctions evasion, forming a central pillar of spain aml enforcement.
Spain's Central Register of Beneficial Ownership
The Registro Central de Titularidades Reales (RCTIR), established under Royal Decree 609/2023, is Spain’s central electronic database for beneficial ownership information. It improves transparency by helping identify ultimate beneficial owners (UBOs) and supporting KYB and corporate ownership checks. For AML teams, it is a key due diligence tool that helps uncover hidden ownership, reduce fraud risk, and support regulatory investigations, strengthening overall aml compliance in spain processes.
What Changed for AML Compliance in Spain in 2026?
2026 marked a significant shift in AML compliance in Spain, strengthening obligations under Spain AML regulations and increasing focus on financial sanctions risk. These updates have had a direct impact on how organisations approach aml compliance spain in practice.
Key updates include enhanced SEPBLAC expectations, the 2026 National Risk Assessment, and expanded AML compliance Spain requirements for risk-based controls and monitoring.
New Financial Sanctions Risk Requirements
Following the amendment introduced by Royal Decree-Law 7/2026 of 20 March, Spain’s Law 10/2010 now strengthens AML obligations by requiring firms to assess and mitigate risks linked to financial sanctions evasion or non-application. SEPBLAC has also expanded its supervisory powers in this area.
Firms must therefore implement robust sanctions controls, including real-time screening, ongoing monitoring of customers and beneficial owners, and deeper ownership analysis to detect indirect exposure. These measures should be embedded in AML risk assessments, supported by clear escalation processes and audit-ready documentation of all sanctions-related decisions, ensuring full alignment with spain aml expectations.
Spain's 2026 National Risk Assessment
Spain’s July 2026 National Risk Assessment highlights a rapidly evolving AML/CFT landscape where traditional compliance models are no longer sufficient. It identifies rising risks in international financial sanctions, crypto-assets, fintech, digital financial services, advanced technologies, and more sophisticated methods of moving illicit funds and financing terrorism.
This shows why static AML programmes are no longer effective. Risk exposure is now dynamic, cross-border, and technology-driven, requiring real-time monitoring, adaptive risk scoring, and data-driven compliance instead of periodic, rule-based reviews. These developments significantly reshape aml compliance in spain expectations.
Greater Focus on Proportionate Risk-Based Due Diligence
In April 2026, SEPBLAC reinforced its expectations for a risk-based AML approach, issuing updated guidance stating that customer due diligence must be proportionate to risk. It also warned against inappropriate de-risking, encouraging firms to avoid blanket exclusions and instead apply targeted controls supported by risk assessments and ongoing monitoring. This reinforces a more mature and flexible approach to aml compliance spain, where decisions must be evidence-based and risk-driven rather than purely rule-based.
Build a Better Compliance Process
Step-by-Step AML Compliance Process for Spanish Businesses
This step-by-step guide explains AML compliance Spain, including AML requirements Spain, customer due diligence Spain, KYC, KYB, and SEPBLAC obligations under Law 10/2010.
It breaks down the full AML compliance process from onboarding to monitoring, covering risk assessment, sanctions screening, and reporting obligations for Spanish businesses.
Step 1: Determine AML Obligations
Confirm whether your business falls under Spain’s obliged entities under Law 10/2010 and what specific AML compliance Spain duties apply. This includes identifying whether your organisation is subject to AML requirements Spain such as customer due diligence Spain, AML screening Spain, and reporting obligations to SEPBLAC.
Understanding your classification under Spanish AML regulations is essential, as AML obligations Spain vary depending on sector, activity, and risk exposure. Businesses must ensure they comply with AML law Spain requirements before onboarding customers or processing transactions.
Step 2: Conduct a Business-Wide Risk Assessment
Identify and assess AML risks across customers, products, services, geographies, and delivery channels as part of your AML risk assessment Spain process. This helps establish an effective risk-based approach aligned with Spain AML regulations and SEPBLAC expectations.
A strong AML compliance Spain framework requires ongoing evaluation of money laundering and terrorist financing risks. This ensures AML compliance requirements Spain are met and supports effective AML monitoring Spain and AML controls Spain across the organisation.
Step 3: Perform Customer Onboarding (KYC/KYB)
Collect and verify identity information for individuals and companies before establishing any business relationship as part of KYC AML Spain and KYB AML Spain processes. This includes verifying documentation, screening customers, and ensuring compliance with AML checks Spain.
Effective customer due diligence Spain is a core requirement under Spanish AML laws. Businesses must ensure accurate onboarding to meet AML compliance Spain standards and reduce exposure to financial crime risks.
Step 4: Identify Ultimate Beneficial Owners (UBOs)
Trace ownership and control structures to identify the natural persons who ultimately own or control the entity in line with beneficial ownership Spain requirements. This includes verifying UBOs in accordance with AML regulations Spain and Spain AML laws.
Accurate UBO verification Spain is essential for AML compliance Spain, helping prevent misuse of corporate structures for money laundering. It also supports effective AML screening Spain and strengthens overall AML compliance requirements Spain.
Step 5: Run AML Screening Checks
AML screening checks in Spain involve screening customers, UBOs, and related parties against sanctions lists, PEP databases, and adverse media sources. This ensures compliance with AML regulations Spain, including Law 10/2010 and SEPBLAC guidance, and helps identify high-risk individuals or entities before onboarding or during the business relationship.
Effective AML screening Spain processes should include sanctions screening, PEP screening, and adverse media monitoring to detect financial crime risks early. These checks are a core part of AML compliance in Spain and support a risk-based approach to customer due diligence.
Run Smarter AML Checks for FREE
Step 6: Assign Risk Scores and Apply CDD/EDD
Once screening is complete, businesses must assign AML risk scores based on factors such as customer type, geography, ownership structure, and transaction behaviour. This risk assessment determines whether standard customer due diligence (CDD) or enhanced due diligence (EDD) is required under Spanish AML requirements.
High-risk customers, including PEPs or those with complex ownership, require EDD Spain measures such as source of funds checks and senior management approval. This ensures compliance with AML compliance requirements Spain and strengthens overall financial crime prevention.
Step 7: Monitor Customer Activity Continuously
Ongoing monitoring is a key requirement of AML compliance Spain, ensuring that customer behaviour remains consistent with their expected risk profile. Businesses must track transactions, ownership changes, and updates to customer information throughout the relationship.
Continuous AML monitoring Spain helps detect unusual or suspicious activity early, including changes in transaction patterns or new sanctions exposure. This supports a proactive risk-based approach AML Spain and reduces exposure to financial crime risks.
Step 8: Report Suspicious Activity and Maintain Records
When suspicious activity is identified, it must be escalated and reported to SEPBLAC in line with AML reporting Spain obligations. This includes conducting a special examination and submitting a suspicious transaction report where required under Spanish AML law.
All AML documentation, including CDD records, screening results, and investigation notes, must be retained for the statutory period under AML record keeping Spain requirements. Proper documentation ensures audit readiness and demonstrates full compliance with AML regulations Spain.
Simplify the AML Compliance Process with Binderr
Spanish AML compliance involves connected checks: KYC verifies the individual, KYB the business, AML screening identifies risk, and risk assessment sets due diligence level.
Binderr connects these steps so compliance teams can manage the full AML workflow in one system without manual data transfer.
- Verify the individual: KYC via document checks, biometrics, liveness, fraud detection.
- Verify the business: KYB for registration, directors, shareholders, company data.
- Identify UBOs: Find ultimate owners and map ownership structures.
- Screen for AML risk: Check sanctions, PEPs, watchlists, adverse media.
- Calculate risk: Build a dynamic risk score from KYC, KYB, and screening data.
- Apply CDD: Combine identity, ownership, screening, and risk into due diligence.
Penalties for AML Non-Compliance in Spain
Under Spain’s AML framework, Law 10/2010 categorises administrative infringements into three levels, minor, serious, and very serious, depending on the severity of the breach, the level of negligence, and the potential or actual impact on money laundering or terrorist financing risks. This tiered structure ensures that enforcement is proportionate but firmly aligned with Spain’s risk-based AML compliance approach.
For very serious infringements, Spanish AML law imposes fines starting from €150,000, with maximum penalties based on turnover, transaction value, or illicit gains, up to a €10 million ceiling. Authorities may also impose public reprimands, operational restrictions, or licence suspension/revocation, and senior managers or directors can face personal administrative sanctions for compliance failures.
Serious infringements typically result in substantial fines and regulatory warnings, particularly where AML controls such as customer due diligence, monitoring, or reporting procedures are inadequately implemented. Meanwhile, minor infringements are treated as lower-risk compliance failures and may lead to private warnings or fines of up to €60,000, often linked to procedural lapses or documentation issues.
Overall, Spain’s AML penalty regime reinforces the importance of robust AML compliance Spain frameworks, effective internal controls, and continuous monitoring to avoid regulatory exposure and financial crime enforcement actions.
Strengthen AML Screening and Ongoing Monitoring Using Binderr
AML risk can change after onboarding, customers may become PEPs, face sanctions exposure, change ownership, or appear in adverse media.
Binderr helps compliance teams identify and monitor financial crime exposure across individuals, companies, UBOs, directors, shareholders, and complex entities.
- Screen individuals and businesses across entities
- Global sanctions screening in real-time
- PEP screening for political exposure
- Adverse media screening across global sources in real-time
- AI-powered smart matching for accuracy
Spain and the New EU AML Framework
Spain’s AML compliance Spain landscape is increasingly shaped by the upcoming EU AML Regulation and AMLD6, which will harmonise anti-money laundering rules across member states.
Businesses operating in Spain must prepare for significant regulatory alignment changes as the EU AML framework becomes fully applicable from 2027. This evolution is particularly important for Spain AML obligations, as firms will need to align national requirements with a more unified European standard.
EU AML Regulation 2024/1624
The EU AML Regulation 2024/1624 applies from 10 July 2027, introducing a single EU-wide AML framework. It replaces fragmented national rules with harmonised standards for CDD, beneficial ownership, screening, and risk-based controls. This will significantly affect AML compliance Spain, especially for cross-border firms, fintechs, and crypto-asset providers operating under Spain AML regulations.
AMLD6: Directive (EU) 2024/1640
The AMLD6 Directive (EU) 2024/1640 must be transposed by 10 July 2027, with some provisions applying earlier, including beneficial ownership register access by 10 July 2026. It strengthens AML compliance in Spain by improving UBO transparency, FIU cooperation, and CDD/EDD requirements, aligning Spain with EU AML standards and reinforcing Spain AML regulatory consistency across sectors.
AMLA
The EU Anti-Money Laundering Authority (AMLA) is being established and is preparing its EU-wide supervisory framework. The first selection of directly supervised entities is expected in 2027, with major financial institutions moving under AMLA supervision from 2028. This adds a new layer above national regulators like SEPBLAC, strengthening enforcement and improving cross-border AML oversight within the broader AML compliance Spain ecosystem.
Manage End-to-End AML Compliance with Binderr
Effective AML compliance goes beyond isolated checks. Organisations must know who the customer is, whether the business is legitimate, who ultimately owns it, the financial crime risks involved, the overall risk level, and how that risk changes over time.
Binderr brings these components together within one compliance platform.
- KYC: Verify individuals using AI document checks, biometrics, liveness, OCR, and fraud detection.
- KYB: Verify businesses using global registry and corporate data.
- UBO Identification: Identify and verify ultimate beneficial owners.
- AML Screening: Screen for sanctions, PEPs, watchlists, and adverse media.
- CDD: Combine KYC, KYB, screening, and risk into a customer risk profile.
- Ongoing Monitoring: Continuously track changes in customer and business risk.
Bottom Line
AML compliance Spain in 2026 requires a holistic, risk-based approach that goes beyond basic KYC. Businesses must consistently identify beneficial ownership, screen for sanctions and PEP exposure, assess risk, and apply CDD or EDD where needed.
With Spain strengthening its sanctions framework and preparing for upcoming EU AML reforms, Spain AML compliance is becoming more structured and technology-driven.
By unifying identity verification, KYB, screening, UBO checks, risk assessment, and ongoing monitoring, organisations can improve compliance while reducing operational complexity. Binderr Services helps businesses streamline AML compliance Spain through automated KYC, KYB, and screening workflows.
