EU published landmark anti-money-laundering rules for crypto exchanges and wallets

The European Union formally published Directive (EU) 2018/843 in its Official Journal on June 19, 2018, establishing a binding timetable for bringing two kinds of cryptocurrency intermediary into the bloc’s anti-money-laundering and counter-terrorist-financing framework.

Known as the Fifth Anti-Money Laundering Directive, or 5AMLD, the measure added providers exchanging virtual currencies for fiat currencies and providers safeguarding customers’ private cryptographic keys to the categories of regulated “obliged entities.” Publication mattered because it completed the directive’s official legislative record and started the clock toward entry into force and national implementation.

What the directive covered

The directive defined a virtual currency as a digital representation of value that was not issued or guaranteed by a central bank or public authority, did not necessarily have a link to an established currency, lacked the legal status of currency or money, but was accepted as a means of exchange and could be transferred, stored and traded electronically.

It separately defined a custodian wallet provider as an entity safeguarding private cryptographic keys for customers so that virtual currencies could be held, stored or transferred. Member states were instructed to ensure that covered fiat-to-crypto exchange providers and custodial wallet providers were registered.

By placing those businesses within the existing anti-money-laundering regime, the directive subjected them, once implemented through national law, to the framework’s customer due-diligence, recordkeeping, suspicious-transaction reporting and supervisory requirements. The European Parliament had described the practical effect as requiring covered platforms and wallet providers to apply customer-verification controls comparable to those used by other obliged financial entities.

The scope was important but limited. The text did not make every cryptocurrency user or software developer a regulated financial institution. Its express crypto provisions focused on intermediaries exchanging virtual currencies against fiat money and businesses taking custody of customers’ cryptographic keys. The directive itself acknowledged that transactions conducted without those intermediaries would remain outside that particular control point.

A regulatory perimeter takes shape

The June 19 publication marked a significant institutional turn. Rather than attempting to regulate a decentralized network directly, the EU concentrated on identifiable businesses connecting virtual currencies to conventional finance or holding credentials for customers. That approach treated exchanges and custodians as compliance gateways through which authorities could obtain information and investigate suspicious financial activity.

The development also supplied EU law with explicit definitions for concepts that had often been discussed inconsistently across jurisdictions. For exchanges and custody businesses considering European operations, the direction of travel was consequently clearer: customer anonymity at regulated access points would face tighter constraints, registration would be required, and national supervisors would receive responsibility for enforcing the translated rules.

This was not a comprehensive cryptocurrency licensing regime, a judgment on whether any token was a security, or an endorsement of virtual currencies. It was an amendment to the EU’s financial-crime controls, adopted in a broader package addressing beneficial ownership, prepaid cards, cooperation among financial-intelligence units and transactions involving high-risk countries.

Timing and limits on June 19

The European Parliament approved the agreed text on April 19, 2018, and the Council adopted it on May 14. The final instrument was dated May 30 and appeared in Official Journal L 156 on June 19. Under Article 5, it would enter into force on the twentieth day after publication. Article 4 gave member states until January 10, 2020, to bring the required national laws, regulations and administrative provisions into force.

Accordingly, publication on June 19 did not instantly impose a uniform operating rule on every European exchange. Implementation still depended on national legislation, supervisory arrangements and the directive’s later effective dates. The verified development was the publication of the binding EU instrument and its implementation timetable—not proof that every member state or covered business was already compliant.