AML/CFT compliance in the Netherlands: a guide for foreign firms

By Mitchell Zandwijken · 19 August 2026 · Wwft, AML/CFT

Entering the Dutch market — or serving Dutch clients — means dealing with one of Europe's more actively enforced AML regimes. This guide explains the essentials of Dutch anti-money laundering regulation for international financial institutions and corporates.

The legal framework: the Wwft

The core statute is the Wwft (Wet ter voorkoming van witwassen en financieren van terrorisme — Act on the Prevention of Money Laundering and Terrorist Financing), the Dutch implementation of the EU anti-money laundering directives. It applies to a broad set of "institutions": banks, payment and e-money institutions, trust offices, crypto-asset service providers, investment firms, life insurers, accountants, tax advisors, civil-law notaries, lawyers (for certain services), real estate agents and high-value dealers.

Who supervises what

SupervisorSector (among others)
DNB (Dutch central bank)Banks, payment institutions, trust offices, crypto-asset service providers
AFMInvestment firms and funds
BFTNotaries, accountants, tax advisors
Tax Administration (Bureau Toezicht Wwft)Real estate agents, dealers, pawnshops
Deans of the BarLawyers

Dutch supervisors — DNB in particular — are known for detailed expectations on business-wide risk assessments (the SIRA), transaction monitoring and remediation programmes.

A distinctive feature: reporting unusual transactions

Unlike the "suspicious activity" regime in many countries, the Netherlands requires institutions to report unusual transactions to FIU-the-Netherlands — a deliberately lower threshold. Reports are triggered by objective indicators (for example certain cash transactions) or the subjective indicator: any reason to assume a transaction may be related to money laundering or terrorist financing. Tipping off the client is prohibited.

Customer due diligence essentials

  • Identify and verify the client and its UBOs (ultimate beneficial owners, generally >25% ownership or control) before entering the relationship.
  • Establish the purpose and intended nature of the relationship and a risk profile.
  • Apply enhanced due diligence for higher-risk situations: politically exposed persons (PEPs), high-risk third countries, complex structures.
  • Monitor transactions continuously against the expected pattern, and keep files up to date.

Enforcement climate

The Netherlands has seen major AML enforcement actions against financial institutions, including criminal settlements and mandatory remediation programmes. Supervisors can impose instructions, incremental penalty payments and administrative fines running into the millions; serious breaches can be prosecuted criminally as economic offences.

Practical first steps for foreign firms

  1. Determine whether your Dutch activities qualify you as a Wwft institution — this depends on the services, not the label.
  2. Map your group AML framework against Dutch specifics: the SIRA, the unusual-transaction regime and Dutch supervisory guidance.
  3. Localise CDD and escalation procedures, and arrange Dutch-language reporting to FIU-the-Netherlands.
  4. Train local staff on Dutch indicators and expectations.
  5. Keep an eye on the EU AML package: from 10 July 2027 the directly applicable AMLR replaces much of the Wwft.

Sources

Read next

Setting up or reviewing your Dutch AML framework? ZandKade Compliance supports foreign firms with gap analyses, localisation and training — in English. Book an intro call.

Want to discuss your AML or sanctions challenge?

In a free 30-minute introductory call we explore your situation and a possible approach.

Book a call