MFSA Unveils 2026 Strategy to Strengthen Malta’s Financial Crime Defences

The Malta Financial Services Authority (MFSA) has introduced a new Financial Crime Compliance Strategy for 2026, setting out a more risk-focused and outcomes-driven approach to combating money laundering, terrorist financing and other forms of financial crime across Malta's financial services sector. The strategy is intended to strengthen supervisory effectiveness while preparing regulated businesses for major changes to the European Union's anti-money laundering framework and the growing role of the EU's Anti-Money Laundering Authority (AMLA).

Rather than focusing solely on whether regulated entities have the required policies and procedures in place, the new framework places greater emphasis on whether those controls actually work in practice. The MFSA intends to assess the effectiveness and sustainability of financial crime controls, meaning that firms may increasingly be expected to demonstrate that their AML and counter-terrorist financing arrangements identify, manage and mitigate risks effectively rather than simply satisfy documentary requirements.

The strategy is built around six principal pillars: risk-based supervision, outcomes-based supervision, lifecycle oversight of authorised entities, streamlined regulatory coordination and oversight, stronger coordination and collaboration, and enhanced industry outreach and engagement. Together, these pillars establish a supervisory model in which the intensity of regulatory scrutiny can vary according to the risk profile, size, complexity and potential impact of individual businesses and sectors.

Risk-based supervision will play a central role in determining where the MFSA directs its resources. Higher-risk sectors and activities are expected to receive greater supervisory attention, particularly where weaknesses could have a significant impact on consumers, market integrity, financial stability or Malta's reputation as a financial centre. This approach is intended to allow the regulator to respond more quickly to emerging threats rather than relying on fixed supervisory procedures.

The lifecycle approach represents another important element of the strategy. Financial crime considerations will increasingly be incorporated throughout the regulatory relationship with an authorised entity, beginning with authorisation and continuing through supervision and, where necessary, enforcement. This means that AML and financial crime controls will remain relevant throughout the existence of a regulated business rather than being assessed primarily at the point of licensing or during periodic inspections.

The MFSA also intends to strengthen its cooperation with domestic and international authorities, law enforcement agencies and industry participants. Greater information sharing and coordination are expected to support the identification of emerging threats and enable supervisory authorities to develop a more complete understanding of risks affecting Malta's financial system. The strategy also anticipates closer engagement with European institutions as the EU's new AML framework develops.

The establishment and growing responsibilities of AMLA are an important part of the new supervisory environment. The MFSA's strategy is designed to support Malta's alignment with the developing EU-wide AML framework and ensure that local supervision remains consistent with European standards. As AMLA assumes a greater role in coordinating and, for certain entities, directly supervising financial crime compliance, Maltese regulated businesses will need to prepare for a more harmonised European supervisory landscape.

The strategy also places increased importance on senior management responsibility. Boards and senior executives are expected to establish an appropriate compliance culture, ensure that financial crime safeguards remain suitable as businesses evolve and provide adequate resources for the management of AML and CFT risks. Fitness and properness requirements will continue to form part of the MFSA's assessment of individuals holding approved positions.

For regulated firms, the new approach is likely to increase the importance of regular testing, internal reviews and evidence-based assessments of AML controls. Businesses may need to demonstrate not only that customer due diligence, transaction monitoring, sanctions screening and suspicious transaction reporting procedures exist, but also that these systems are appropriately calibrated and produce effective results. Weaknesses identified through regulatory reviews may therefore require substantive remediation rather than merely policy amendments.

The MFSA's strategy also recognises that financial crime risks increasingly intersect with broader operational and technological risks. Information relating to areas such as operational resilience, information technology governance and crypto-asset activities may contribute to the regulator's overall assessment of an institution's resilience and control environment. This reflects a broader supervisory trend in which weaknesses in governance, technology or outsourcing arrangements can provide indicators of wider control deficiencies.

The introduction of the Financial Crime Compliance Strategy 2026 does not itself impose a fine or identify misconduct by any particular financial institution. Instead, it establishes the direction in which Malta's financial crime supervision is expected to develop. For banks, investment firms, payment institutions, insurers, fund operators, trustees, company service providers and other regulated businesses, the message is that effective AML compliance will increasingly be measured by demonstrable outcomes and the ability to respond to changing risks.

The new strategy therefore marks a further shift towards proactive and intelligence-led financial crime supervision in Malta. As European AML reforms progress and AMLA becomes increasingly operational, regulated entities are likely to face greater expectations concerning governance, risk assessment, control effectiveness and regulatory cooperation. The MFSA's approach signals that maintaining formal compliance will no longer be sufficient on its own; firms will increasingly need to demonstrate that their financial crime frameworks are genuinely capable of preventing, detecting and responding to illicit finance.

By fLEXI tEAM