0

The Netherlands Strengthens AML Rules but Deficiencies Remain in Virtual Asset Oversight

netherlands fatf virtual assets money laundering

This image is AI-generated.

The Netherlands has strengthened its anti-money laundering rules in recent years, but deficiencies in the oversight of virtual assets continue to create risks that money launderers can exploit. Following the 2022 FATF mutual evaluation, the country was placed in regular follow-up. Three years later, in its 2025 report, the FATF re-rated the Netherlands “largely compliant” on Recommendation 15, the global benchmark for how countries manage money laundering threats from new technologies and virtual assets. This re-rating signals improvement but also underscores unfinished work in strengthening defenses against financial crime.

Money laundering risks in the Netherlands’ updated framework

Money laundering is not an abstract concern for the Netherlands. The country’s status as a global financial hub, its highly internationalized banking sector, and its role as a gateway for European trade make it attractive to organized crime groups. Criminal proceeds from drug trafficking, tax fraud, corruption, and cybercrime are routinely funneled into Dutch channels, either through traditional banks, real estate, or increasingly, through virtual assets. The digitalization of financial services has compounded these risks. The proliferation of crypto exchanges, decentralized finance platforms, and peer-to-peer services has created new pathways for laundering that require tailored regulatory approaches.

The FATF follow-up report shows that the Netherlands has taken concrete steps to close earlier gaps by extending the scope of AML rules to all categories of virtual asset service providers, aligning with the European Union’s Markets in Crypto-Assets Regulation. The supervisory structure now empowers both the Dutch Central Bank and the Financial Markets Authority to license, inspect, and sanction operators. These reforms have significantly tightened oversight. However, the report also highlights areas where criminals can continue to operate with relative ease. The Caribbean Netherlands lacks a binding AML regime for virtual assets, creating a potential safe zone. Meanwhile, the threshold for mandatory customer due diligence on occasional transactions remains at €15,000, far above the FATF standard of €1,000. These shortcomings may appear minor, but they are exactly the kinds of weaknesses that sophisticated laundering networks exploit.

Money laundering oversight of virtual asset service providers

The transformation of Dutch oversight for virtual assets is a critical milestone. Before 2023, the Netherlands regulated only two of the five FATF-defined categories of virtual asset service providers. This narrow scope excluded many high-risk services, including custodians, token issuers, and transfer facilitators. For years, this allowed criminals to operate in semi-regulated environments, taking advantage of entities that were not subject to full AML obligations.

With the 2025 alignment to MiCAR, the Netherlands corrected this gap. Nine categories of crypto asset services now fall under the Dutch Money Laundering and Terrorist Financing (Prevention) Act. Providers must register, submit to fit-and-proper tests for their leadership, and comply with customer due diligence and suspicious transaction reporting. Supervisors can revoke authorizations, issue penalties, and shut down unlicensed operators. This regulatory framework sends a strong signal that the Netherlands is committed to curbing money laundering in the digital asset sector.

For money launderers, this new environment narrows the options. Exchanges and custodians are obliged to know their customers and screen for suspicious patterns, making it more difficult to use them for layering transactions. Stablecoin issuers and wallet providers must also meet the same compliance obligations, limiting the scope for anonymous transfers. Moreover, the prohibition on natural persons operating as service providers ensures that only entities subject to regulatory scrutiny can function legally.

Despite these advances, oversight remains a work in progress. The FATF follow-up report emphasizes that regulation without enforcement leaves vulnerabilities intact. Effective AML supervision requires not only comprehensive rules but also proactive monitoring, targeted inspections, and timely sanctions. The Netherlands has empowered its regulators, but their ability to identify and act against non-compliant or underground operators will determine whether the reforms succeed in practice. Money launderers are known for exploiting weak enforcement by creating shell companies, routing funds through jurisdictions with limited oversight, or using innovative technological tools to obscure transactions. Unless enforcement is aggressive and coordinated internationally, these strategies will continue to undermine compliance frameworks.

The BES Islands highlight another persistent gap. Although no VASPs currently operate in these territories, the absence of binding regulation creates a dormant risk. Launderers often seek out jurisdictions that are small, peripheral, and overlooked by regulators. Establishing entities in these territories could provide criminals with a lightly monitored channel to access the wider Dutch and EU financial system. The Netherlands is drafting legislation to cover this gap, but until enacted, the vulnerability persists.

Structural vulnerabilities in thresholds and supervision

Perhaps the most striking deficiency in the Dutch AML system is the high threshold for occasional transactions that trigger customer due diligence. While FATF standards set this threshold at €1,000, Dutch law still requires checks only above €15,000 for non-commercial customers. This tenfold discrepancy creates a structural weakness that criminals can exploit with ease.

One of the oldest and most effective laundering techniques is smurfing: breaking down large illicit sums into smaller transactions to avoid triggering AML checks. In the virtual asset ecosystem, where transfers can occur in seconds across multiple platforms, the €15,000 threshold is especially problematic. Criminal organizations can easily move millions of euros’ worth of crypto through multiple transfers, each just below the threshold, without being subject to customer due diligence. This not only hampers detection but also overwhelms the system with seemingly legitimate low-value transactions, making suspicious activity harder to identify.

The FATF report acknowledges that interim safeguards exist. Under the Dutch regime, customer due diligence must be conducted when there is suspicion of money laundering, when a client is deemed high risk, or when there are doubts about the accuracy of customer information. However, these conditions depend heavily on the vigilance of compliance teams and the robustness of monitoring systems. Without a strict threshold, many transactions will not even be flagged for further review.

The Dutch authorities plan to implement the €1,000 threshold through the EU’s new AML Regulation in July 2027. Until then, the gap remains open. For money launderers, this provides a valuable window of opportunity. Organized networks, particularly those engaged in narcotics trafficking and cybercrime, are known to adapt quickly to regulatory frameworks. They can exploit the higher threshold in the Netherlands to structure transactions strategically, routing illicit funds through Dutch VASPs while bypassing stricter regimes elsewhere in Europe.

Supervisory practices also remain a point of concern. While the Dutch Central Bank and the AFM have expanded powers to monitor compliance, their effectiveness will depend on resources, staffing, and coordination. The scale of the virtual asset sector and the sophistication of criminal networks demand high levels of expertise. If supervisory bodies cannot keep pace with technological innovation, money launderers will find ways to stay ahead. The FATF report warns that effective supervision requires more than formal authority; it demands proactive, risk-based action to identify non-compliant actors and impose meaningful sanctions.

Implications for global AML compliance

The Netherlands’ follow-up report provides valuable lessons for other jurisdictions grappling with the challenges of regulating virtual assets. Its adoption of MiCAR demonstrates the power of supranational frameworks in harmonizing standards and closing regulatory gaps. By bringing nine categories of crypto services into scope, the Netherlands aligned itself with best practices and reduced opportunities for regulatory arbitrage within the EU.

At the same time, the Dutch case illustrates the risks of partial or delayed compliance. Leaving the BES Islands unregulated may seem minor, given the absence of VASPs today, but history shows that criminals gravitate to precisely such jurisdictions. Similarly, maintaining a €15,000 threshold for due diligence until 2027 gives criminals two more years to exploit the gap. These shortcomings highlight the importance of swift implementation and uniform application of standards.

For AML professionals worldwide, the Dutch example reinforces several principles. First, regulation must evolve in step with technology. As virtual assets develop, AML frameworks must adapt without delay. Second, effective enforcement is just as important as strong laws. Supervisors must have the capacity and will to act quickly against violators. Third, vulnerabilities in small jurisdictions or peripheral territories should not be underestimated. Criminal networks will always look for the path of least resistance, and even small loopholes can undermine broader frameworks.

Looking ahead, the FATF will continue to monitor the Netherlands through regular follow-up. The fifth-round mutual evaluation will assess not only technical compliance but also the effectiveness of implementation. For the Netherlands to improve further, it must accelerate its adoption of lower thresholds, implement regulation in the BES Islands, and ensure that enforcement matches the ambition of its legal reforms. Until then, it remains a country with both strengthened defenses and lingering vulnerabilities.


Source: FATF (PDF)

Some of FinCrime Central’s articles may have been enriched or edited with the help of AI tools. It may contain unintentional errors.

Want to promote your brand, or need some help selecting the right solution or the right advisory firm? Email us at info@fincrimecentral.com; we probably have the right contact for you.

Related Posts

Bulgaria Strengthens AML OSINT Capabilities

Bulgaria Strengthens AML OSINT Capabilities

The advanced training in Sofia, Bulgaria, enhanced the use of Open-Source Intelligence for AML/CFT, strengthening the capabilities of the Financial Intelligence Unit and law enforcement to combat money laundering through operational and strategic analysis frameworks. This initiative, supported by the Council of Europe, focused on advanced techniques and inter-agency cooperation to address emerging financial crime typologies.

Poland’s Presidential Veto on MiCA Heightens AML Systemic Risks

Poland’s Presidential Veto on MiCA Heightens AML Systemic Risks

The sustained failure of Poland to adopt a comprehensive legal framework for digital assets, due to a Presidential veto, presents a substantial and escalating anti-money laundering risk. This legislative vacuum leaves Poland as the sole EU holdout, a status that has drawn stark warnings regarding potential exploitation by international criminal networks and sophisticated money laundering operations.

Share This