
Illustrative firm examples
Netherlands country research brief
Research dated 2026-10-09 · Reviewed 2026-10-09
Version 8b0a9b67f398
8b0a9b67f3984a78b7d942fae461a2b62a2470ea09d6ae806c260b12f415ed5eScope: Illustrative firm examples. The selector is not an authorisation or legal-applicability determination. Source-check observations concern retrieval/access only and do not establish legal currentness; the research date is the content date boundary. Source health: review-required, checked 2026-10-12T05:15:56.850Z.
Framework and authorities
Anti-money-laundering framework
The Dutch Money Laundering and Terrorist Financing Prevention Act (Wwft) governs defined obliged institutions and activities, not every Dutch company. It sets customer due diligence, unusual-transaction reporting and related controls. The 1 July 2026 expression includes Article 17a, effective that day. De Nederlandsche Bank (DNB) and the Authority for the Financial Markets (AFM) supervise different statutory sectors; the competent supervisor depends on entity and service, and other supervisors exist. Financial Intelligence Unit-Netherlands (FIU-Nederland) receives reports and may request a transaction hold; it is not the firm's supervisor. Guidance is not legislation. This is not a full perimeter or amendment audit.
Risk, FATF and sanctions context
Dated assessment evidence
The Financial Action Task Force (FATF) Netherlands evaluation was assessed on-site in October-November 2021 and published in August 2022. The retained Dutch-hosted file is an informal translation of the Executive Summary, not the full report. It rates effectiveness moderate for outcomes 3, 4, 5 and 11; high for 2 and 6; substantial for the rest. Technical compliance includes Recommendations 13 and 15 partially compliant and 16 largely compliant. These are 2022 ratings, not current ratings or monitoring status. The later follow-up original could not be retained; subsequent changes and present status are unconfirmed. The 2023 money-laundering assessment (evidence to June 2023) highlights professional services, bank transfers and trade-based methods. The 2023 terrorist-financing assessment highlights unlicensed remitters (including hawala), cash movement, fraud and financial channels. These are national findings, not firm scores. DNB's 2026 report discusses terrorist-financing vulnerabilities and sanctions-avoidance patterns but says its data do not establish circumvention. No separate current Dutch proliferation-financing risk assessment was found; sanctions findings are not such a rating.
Sanctions and cross-border nexus
Dutch law and national implementation operate alongside directly applicable European Union (EU) restrictive measures, including United Nations measures implemented through EU or Dutch instruments. Apply the operative regime's prohibitions, ownership/control rules, exceptions, licences and reporting duties; no live list or party screening was done. United Kingdom (UK) and United States (U.S.) measures apply only when their own person, territory, transaction or programme nexus is met. A Dutch presence or cross-border customer alone creates no blanket UK or U.S. duty. No designation status is implied.
Selected firm implications
Meaning: Customer due diligence at relationship start or covered incidental transactions of at least EUR 15,000 (gaming EUR 2,000), or funds transfers under EU 2023/1113 Art. 3(9) of at least EUR 1,000. Suspicion, identity doubt or increased risk also triggers it.
Conditions: Wwft obliged institution; linked incidental transactions aggregate.
Exceptions: Art. 7(1)-(4): qualifying e-money disapplies specified CDD/timing duties only with all product, value, use and monitoring conditions; cash/remote-payment limits defeat relief. Art. 6 simplified CDD retains monitoring. Specified valuer exclusions and trust-service Chapter 4 substitution apply; trustee disclosure is distinct.
Suggested action: Verify customer/beneficial owner; establish purpose and monitor.
Legislation / Binding · Artikel 3Meaning: Verify customer and beneficial owner; check required registers for new legal-entity relationships.
Conditions: Applies when Article 3 customer due diligence is required under Article 4.
Exceptions: Art. 4(3): low risk and no service disruption; verify promptly. Art. 4(4): bank or other financial undertaking may open an account, including securities, before client verification only if unusable until verified; not all UBO duties are deferred. Notary/trust-beneficiary timing and Art. 7's cumulative e-money conditions remain.
Suggested action: Verify before onboarding/covered transaction, subject to timing exceptions.
Legislation / Binding · Artikel 4Meaning: Comply without delay, maintain procedures and notify the client immediately when applied.
Conditions: Dutch FIU request on indicated money laundering/terrorist financing or at a foreign FIU's request; effective 1 July 2026.
Exceptions: Five working days maximum; extend up to five only on foreign-FIU request. FIU withdraws as soon as possible. Not an automatic suspicion freeze.
Suggested action: Escalate the FIU request; hold only named transactions and track expiry.
Legislation / Binding · Artikel 17aNotices and limitations
- Illustrative bank, payments and crypto examples, not an assessed firm profile.
- Product/customer exposure alone is not statutory applicability. This is not a licensing guide.
- Local entity / domestic activity selected.
- 3 representative obligations; see the full register for other duties.
- Unavailable or changed mappings need reassessment; missing evidence is not no obligation.
- Source observations are unavailable, stale, failed or review-required. This dated brief does not confirm today's legal position.
- Wwft: 1 July 2026 expression; later-change audit open.
- FATF: 2022 ratings only; later report not retained; current status unconfirmed.
- National assessments use evidence to June 2023; no separate current Dutch proliferation-risk report retained.
- Sanctiewet: 1 March 2025 expression; later changes, supervision and live designations unchecked.
- National context, not firm risk; profile labels do not set scope. Hashes confer no rights; paraphrase only; not advice or full inventory.
Evidence sources
Original source documents are not reproduced in this brief. Retained originals are private research evidence; use the official-source links.
- Legislation · Dutch Government (KOOP) · KOOP expression 2026-07-01_0; later-change audit open · Arts. 1a, 3-4, 6-7, 10a-10b, 17a
- Legislation · Dutch Gazette (KOOP) · Order 4 December 2025; published 9 December 2025 · Enig artikel(2), read with Stb. 2025, 333 Article V(A): Wwft Art. 17a from 1 July 2026
- Official Supervision · DNB · DNB index captured 2026-09-27 · Wwft supervisor information
- Official Supervision · AFM · AFM index captured 2026-09-27 · AFM sector materials
- Official FIU Guidance · FIU-Nederland · FIU page captured 2026-09-27 · Reporting duty overview; statute: Wwft Art. 16
- National Risk Assessment · WODC, Justice Ministry · Cahier 2024-1; evidence to June 2023 · Threat assessment; Jan 2020-Jun 2023
- National Risk Assessment · WODC, Justice Ministry · Cahier 2024-2; evidence to June 2023 · Threat assessment; Jan 2020-Jun 2023
- Official Supervision Report · DNB · DNB report, 2026 · Terrorist-financing/sanctions-risk discussion; evidential caveat
- FATF Mutual Evaluation Summary · Dutch Government; FATF · Informal Dutch Executive Summary translation, Aug 2022; English controls · On-site 27 Oct-18 Nov 2021; rating tables
- Legislation · Dutch Government (KOOP) · KOOP expression 2025-03-01_0; later audit open · Domestic framework; read with EU and regime-specific rules
- Official Sanctions Guidance · European Commission · Commission page captured 2026-10-09 · Heading: Where do EU sanctions apply?
- Official Sanctions Guidance · HM Treasury, Office of Financial Sanctions Implementation (OFSI) · Guidance updated 2026-05-12; captured 2026-10-09 · Sections 1-2 scope; section 4 ownership/control
- Official Sanctions Guidance · U.S. Treasury, Office of Foreign Assets Control (OFAC) · FAQ 11 updated 2024-08-21; captured 2026-10-09 · FAQ 11: U.S.-person/territorial scope
Wwft, BWBR0024282, 1 Jul 2026
KOOP expression 2026-07-01_0; later-change audit open · Arts. 1a, 3-4, 6-7, 10a-10b, 17a
Source record
Retrieved 2026-09-27T12:18:01Z. SHA-256: b6ee6fad70c3cd114920b696bce35d1c7b6e74dd933e0b9c02b06bf248a4ef95
Source retrieval check
failed · Checked 2026-10-12T05:15:48.533Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
Stb. 2025, 414, Art 17a start
Order 4 December 2025; published 9 December 2025 · Enig artikel(2), read with Stb. 2025, 333 Article V(A): Wwft Art. 17a from 1 July 2026
Source record
Retrieved 2026-09-28T01:20:58Z. SHA-256: 321efccfa29ab7f198f7e9e05f444015e562346f0f0a49d717059b48e8ddd763
Source retrieval check
review-required · Checked 2026-10-12T05:15:48.785Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
DNB Wwft supervision, Sep 2026
DNB index captured 2026-09-27 · Wwft supervisor information
Source record
Retrieved 2026-09-27T12:18:01Z. SHA-256: 58c5f0d93f3ecca6cbf611dd2a2d412d9299a2d657e2410b098c282283cd2d9c
Source retrieval check
review-required · Checked 2026-10-12T05:15:49.939Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
AFM Wwft / sanctions index, Sep 2026
AFM index captured 2026-09-27 · AFM sector materials
Source record
Retrieved 2026-09-27T12:18:01Z. SHA-256: 5c987ec87fca0674e602511fd7eaaf8f4d5599a5334edc38d5cc357b4f25f039
Source retrieval check
review-required · Checked 2026-10-12T05:15:50.858Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
FIU-NL reporting duty, Sep 2026
FIU page captured 2026-09-27 · Reporting duty overview; statute: Wwft Art. 16
Source record
Retrieved 2026-09-27T12:18:01Z. SHA-256: 071d7ff7787ae38e6a32fa6c9b09be973ac88c9352427c4ac3878260e4bdd87f
Source retrieval check
review-required · Checked 2026-10-12T05:15:51.743Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
WODC money-laundering assessment, 2023
Cahier 2024-1; evidence to June 2023 · Threat assessment; Jan 2020-Jun 2023
Source record
Retrieved 2026-09-27T12:18:01Z. SHA-256: d155f8c79db1ee861dc6e112ccc6504fe45026c4edf843f228b974a8e4044e19
Source retrieval check
observed · Checked 2026-10-12T05:15:52.760Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
WODC terrorist-financing assessment, 2023
Cahier 2024-2; evidence to June 2023 · Threat assessment; Jan 2020-Jun 2023
Source record
Retrieved 2026-09-27T12:18:01Z. SHA-256: 5b69c775bab3e4f28841362018b37cc0fb8f4235750d9bd1d57fb4f49236a4ce
Source retrieval check
observed · Checked 2026-10-12T05:15:53.459Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
DNB Integrity Supervision 2026
DNB report, 2026 · Terrorist-financing/sanctions-risk discussion; evidential caveat
Source record
Retrieved 2026-09-27T12:18:01Z. SHA-256: 3b1843c7d8913df2d67adc6ed5cf59322eb5c544a29bc7a1eba435dda2d3b7d0
Source retrieval check
observed · Checked 2026-10-12T05:15:54.078Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
FATF evaluation summary, Aug 2022
Informal Dutch Executive Summary translation, Aug 2022; English controls · On-site 27 Oct-18 Nov 2021; rating tables
Source record
Retrieved 2026-10-09T22:44:23Z. SHA-256: 2ddd9e4ed5f6fd96bf522a7f20d7c71314b01f58d237fc12dad5a3acbc5147f4
Source retrieval check
failed · Checked 2026-10-12T05:15:54.519Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
Sanctiewet 1977, 1 Mar 2025
KOOP expression 2025-03-01_0; later audit open · Domestic framework; read with EU and regime-specific rules
Source record
Retrieved 2026-09-27T12:18:01Z. SHA-256: 08acfa07475a52edb3e26f4b344dd61d0345e43fab858994b52e6de55c24508b
Source retrieval check
failed · Checked 2026-10-12T05:15:54.886Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
EU sanctions scope, Oct 2026 capture
Commission page captured 2026-10-09 · Heading: Where do EU sanctions apply?
Source record
Retrieved 2026-10-09T19:54:30Z. SHA-256: 84d90e3b6d3d7ca27c33d98783660ea6e86c7f837a8006418763b4e96dab98c4
Source retrieval check
observed · Checked 2026-10-12T05:15:55.131Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
UK OFSI scope, May 2026
Guidance updated 2026-05-12; captured 2026-10-09 · Sections 1-2 scope; section 4 ownership/control
Source record
Retrieved 2026-10-09T20:24:30.136Z. SHA-256: 254c2891db0f511d40d8bf862d92954c08469ae8c7f720dbd9b613b551e9c230
Source retrieval check
review-required · Checked 2026-10-12T05:15:55.937Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
OFAC FAQ 11, Aug 2024
FAQ 11 updated 2024-08-21; captured 2026-10-09 · FAQ 11: U.S.-person/territorial scope
Source record
Retrieved 2026-10-09T19:54:40Z. SHA-256: 92cfe8932dd817a5c2371d265ae1ecbaf62970f798c0d5c6ab77fd96897e0e99
Source retrieval check
review-required · Checked 2026-10-12T05:15:56.850Z
A retrieval check is an access observation only; it does not establish legal currentness. Research content date boundary: 2026-10-09.
This brief relies on the identified official source edition. Open it using the official-source control.
Retail bank
Meaning
Customer due diligence at relationship start or covered incidental transactions of at least EUR 15,000 (gaming EUR 2,000), or funds transfers under EU 2023/1113 Art. 3(9) of at least EUR 1,000. Suspicion, identity doubt or increased risk also triggers it.
Full public provision explanation
Article 3 is the Wwft's core CDD provision. It requires identifying and verifying the client, identifying the UBO and taking reasonable verification/ownership-structure measures (with extra steps where the UBO is senior management), establishing the purpose and intended nature of the relationship, ongoing monitoring (including source-of-funds checks where needed), checking representative authority/identity, and checking whether the client acts for itself or a third party. CDD extends to the underlying trust/legal arrangement or partnership where the client acts as trustee or partner. CDD must be performed on entering a business relationship, on incidental transactions of €15,000+ (or linked transactions reaching that total), on suspicion indicators, on doubts about earlier data, on increased risk from an existing client or high-risk country, and on incidental transfers of funds (Article 3(9) of Regulation (EU) 2023/1113) of €1,000 or more; gaming providers use a €2,000 threshold instead of €15,000. CDD must be risk-sensitised using at least the Annex I risk variables of the Fourth AML Directive. Property valuers (Article 1a(4)(m)) are excluded from most of this article. CDD data must be kept up to date, with specific refresh triggers. Trust offices apply their own Wtt 2018 Chapter 4 CDD regime instead. Institutions may not rely solely on the trade register or UBO register when performing CDD.
Suggested action
Verify customer/beneficial owner; establish purpose and monitor.
Conditions
Wwft obliged institution; linked incidental transactions aggregate.
- Triggered by entering a business relationship, incidental transactions of €15,000 or more (€2,000 for gaming providers), incidental transfers of funds within Article 3(9) of Regulation (EU) 2023/1113 of €1,000 or more, ML/TF indications, doubts about earlier data, the risk of an existing client, or increased risk linked to the client's state. Paragraph 3 also binds a client acting as trustee (including a firm acting in that capacity) to inform the institution promptly of that capacity and supply the data and documents under Article 5 of the Implementatiewet registratie uiteindelijk belanghebbenden van trusts.
Exceptions
Art. 7(1)-(4): qualifying e-money disapplies specified CDD/timing duties only with all product, value, use and monitoring conditions; cash/remote-payment limits defeat relief. Art. 6 simplified CDD retains monitoring. Specified valuer exclusions and trust-service Chapter 4 substitution apply; trustee disclosure is distinct.
- Does not apply (paragraphs 1-8, 10) to property valuers (Article 1a(4)(m)); trust offices apply the Wtt 2018 Chapter 4 regime instead of paragraphs 2-8 and 10.
Payments and e-money
Meaning
Verify customer and beneficial owner; check required registers for new legal-entity relationships.
Full public provision explanation
Client and UBO identification and verification (and the trust and partnership extensions) must be completed before a business relationship is entered into or a threshold incidental transaction is carried out. On a new relationship with a legal-entity or partnership client, the institution must hold proof of trade-register registration and check whether the UBOs are recorded under Article 15a of the Handelsregisterwet 2007; for a trustee client, proof of registration in the Dutch trust UBO register (or another EU register under Article 31 of the Fourth AML Directive) and a check that the UBOs are registered. Exceptions: verification may be completed during onboarding, as soon as possible after first contact, where needed so as not to disrupt the service and the ML/TF risk is low; a bank or other financial undertaking may open an account (including a securities account) before verification if it ensures the account cannot be used until verification is done; notaries may verify when the Notaries Act requires identification; and beneficiaries of a trust described by characteristics or class may be identified at payout or when they exercise their vested rights, provided enough information is obtained beforehand.
Suggested action
Verify before onboarding/covered transaction, subject to timing exceptions.
Conditions
Applies when Article 3 customer due diligence is required under Article 4.
Exceptions
Art. 4(3): low risk and no service disruption; verify promptly. Art. 4(4): bank or other financial undertaking may open an account, including securities, before client verification only if unusable until verified; not all UBO duties are deferred. Notary/trust-beneficiary timing and Art. 7's cumulative e-money conditions remain.
- Paragraph 3 permits verification during establishment only where needed to avoid disrupting services and ML/TF risk is low, with verification as soon as possible after first contact. Separately, paragraph 4 permits a bank or other financial undertaking to open an account, including a securities account, before client identity verification only if it guarantees that the account cannot be used until verification; it does not defer every UBO duty. Notaries may time verification to Article 39 Notaries Act (paragraph 5). Trust/legal-arrangement beneficiaries may be identified at payout or exercise of vested rights only if described by characteristics/category and sufficient information is obtained beforehand (paragraph 6). Article 7's conditional e-money disapplication must also be tested.
Crypto and digital assets
Meaning
Comply without delay, maintain procedures and notify the client immediately when applied.
Full public provision explanation
The FIU may ask an institution to hold one or more transactions for up to five working days where it has indications they may be connected with ML/TF, or where a foreign FIU asks it to; the period can be extended by up to five more working days where the request comes from a foreign FIU, and the FIU must withdraw the request as soon as it can. The institution must comply without delay, must have policies, procedures and measures enabling it to do so, and must inform the client immediately that it is applying the hold.
Suggested action
Escalate the FIU request; hold only named transactions and track expiry.
Conditions
Dutch FIU request on indicated money laundering/terrorist financing or at a foreign FIU's request; effective 1 July 2026.
Exceptions
Five working days maximum; extend up to five only on foreign-FIU request. FIU withdraws as soon as possible. Not an automatic suspicion freeze.