Money Laundering Act Casino Germany 2026: New Obligations, Deadlines & goAML Transition

The Money Laundering Act Casino Germany 2026 tightens compliance requirements for gambling providers. The reason is the Money Laundering Reporting Regulation (GwGMeldV), which comes into force on March 1, 2026. Obligated online casinos and land-based casinos must submit suspicious activity reports via the FIU's goAML portal. In addition, they must adapt their risk analyses to the Interpretation and Application Guidance (AuA) 2026. These steps are intended to prevent violations of Section 261 of the German Criminal Code (StGB) and prepare the sector for the EU Anti-Money Laundering Regulation.

The new Money Laundering Reporting Regulation (GwGMeldV) from March 2026

The Money Laundering Act Casino Germany 2026 is subject to stricter technical requirements under the Money Laundering Reporting Regulation (GwGMeldV) as of March 1, 2026. For the first time, this regulation establishes uniform national standards for the content of reports under the Money Laundering Act (GwG). The goal is to improve the quality of information so that the Financial Intelligence Unit (FIU) can work faster.

Deadline March 1, 2026: What changes for online casinos?

As of the deadline of March 1, 2026, reports may no longer be freely formatted. They must be submitted exclusively via goAML in the standardized XML format or via the designated form fields. This technical hurdle ensures that the data can be evaluated automatically. Anyone who fails to adapt their IT infrastructure to the goAML format in good time risks the system not accepting the reports at all. This is considered a systematic breach of duty.

According to Section 3 of the GwGMeldV, mandatory content includes an internal reference number, reporting reasons from the FIU catalog, as well as detailed information on the persons involved and beneficial owners. In addition, details of criminal charges filed in parallel must be provided. For transactions relating to real estate, proof of compliance with the ban on cash payments must also be attached. If these fields are missing, the system blocks the report. This presents casinos' operational compliance strategy with new challenges.

Mandatory Use of the FIU's goAML Portal

The Financial Intelligence Unit (FIU) is an authority operating under the Central Customs Authority. It operates the electronic reporting portal goAML. For casinos, this means that a suspicious activity report is only possible after successful registration in this system. The FIU uses goAML to bundle reports centrally and process them more efficiently. The registration obligation exists regardless of whether a report is actually submitted.

Obligated parties within the meaning of the GwG are all gambling providers that must fulfill due diligence obligations to prevent money laundering and terrorist financing. These companies must register electronically with the FIU in order to remain capable of acting. Registration in the goAML portal was already mandatory by January 1, 2024. It now serves as a basic requirement for correct reporting under the new GwGMeldV. Without this registration, no suspicious activity report can be submitted. In the event of a specific suspicion of money laundering, this leads to serious compliance violations.

Tightened Due Diligence Obligations and Risk Analysis according to AuA 2026

The Interpretation and Application Guidance (AuA) 2026 concretizes the Money Laundering Act Casino Germany 2026 through a strict structuring of risk management and due diligence obligations. Operators must adapt their company-specific risk analysis to the new chapter sequence before engaging in operational obligations. The rules clearly define who is considered a beneficial owner. They also determine how Know Your Customer (KYC) processes are to be validated in digital transactions to effectively close compliance gaps in the gambling sector.

Updating the Company-Specific Risk Analysis

The Interpretation and Application Guidance (AuA) 2026 calls for a fundamental realignment of internal control systems. In contrast to the 2020 version, which was primarily obligation-oriented, the new structure begins with general basic assumptions and an abstract risk assessment. This risk analysis must be documented. It serves as the basis for all further due diligence obligations.

Operators are obliged to regularly review the following risk factors and incorporate them into their analysis: Customer and business partner risks, product and transaction risks, sales and geographical risks

The results of the National Risk Assessment must be taken into account to correctly assess one's own residual risk. An outdated analysis leads directly to deficiencies in the implementation of due diligence obligations. The measures must correspond to the respective risk of money laundering.

Know Your Customer (KYC): Identity Verification in the Digital Age

The Know Your Customer (KYC) principle is the central pillar of customer identification. Obligated parties must ensure that the information collected regarding the identity of the contracting party is correct. In case of doubts about the identity or that of the beneficial owner, enhanced measures are required.

The updating of customer data is risk-based: under enhanced due diligence, an annual review is mandatory from July 2027. For general due diligence obligations, the period is halved from ten to five years.

Automated implementation is necessary to close compliance gaps and avoid disrupting gaming operations with manual interventions. This is the only way to implement the Money Laundering Act Casino Germany 2026 operationally efficiently.

Dealing with Beneficial Owners and Staking Arrangements

The identification of the beneficial owner is critical, especially in complex arrangements such as staking or third-party payers. The beneficial owner is the natural person who ultimately exercises control over a transaction. In the context of online gambling, this can mean that the player is not necessarily the beneficial owner if third parties provide the gaming capital.

Know Your Customer processes must therefore verify: 1. Who is providing the funds? 2. Is there a staking relationship where a "backer" bears the risk?

Such structures significantly increase the risk of money laundering because they can obscure the transparency of the source of funds. The Interpretation and Application Guidance (AuA) 2026 requires seamless documentation here. This ensures that no anonymous third-party payers are acting in the background. Incorrect attribution can lead to suspicious activity reports to the FIU being omitted, even though a relevant risk exists.

Who is affected? Scope of Application in the Gambling Sector

The Money Laundering Act Casino Germany 2026 defines a strict framework that encompasses both digital and physical providers. As obligated parties under the Money Laundering Act (GwG), online casino operators and traditional German land-based casinos are subject to identical due diligence obligations to prevent financial crime. This regulatory equality is flanked by the Interstate Treaty on Gambling 2021 (GlüStV).

Online Casinos vs. Land-Based Casinos vs. Sports Betting Providers

Yes, the Money Laundering Act applies to all commercial forms of gambling unless a specific exception exists. According to Section 2 (1) No. 15 of the GwG, organizers and intermediaries of gambling are explicitly classified as obligated parties. This affects both the online casino and the terrestrial German land-based casino. The legislator assesses the money laundering risk in this sector as high, as high transaction volumes and rapid turnover of money are typical.

While German land-based casinos have historically been the focus due to their cash intensity, digital platforms are increasingly becoming the focus of attention for the authorities. An online casino offers perpetrators the opportunity to disguise illegal proceeds as "clean" winnings through deposits and subsequent withdrawals. Both types of operations must establish internal security systems to report suspicious cases to the Financial Intelligence Unit (FIU). The only exceptions are certain lotteries with state permission or gaming machines under the Trade Regulations (Gewerbeordnung), but not the core offerings of licensed providers.

Interfaces to the Interstate Treaty on Gambling (GlüStV) and Regulatory Authorities

Compliance requirements result from the interplay of two sets of regulations. The Interstate Treaty on Gambling 2021 (GlüStV) regulates licensing and player protection, while the GwG monitors financial transactions. The Joint Gambling Authority of the Federal States (GGL) acts as the central supervisory authority for the online market. It checks whether providers meet their obligations under gambling law and anti-money laundering law.

For an online casino, this means that the granting of a license under the GlüStV automatically entails status as an obligated party under the GwG. The new Interpretation and Application Guidance (AuA) 2026 also clarify that these obligations also apply to companies in other EU countries, provided they target players in Germany. Violations of these requirements can be punished with fines by the Joint Gambling Authority of the Federal States (GGL) and made public. In addition, there is a close link to criminal law: the use of unlicensed offers can constitute the offense of money laundering under Section 261 of the Criminal Code (StGB), as profits from illegal gambling are classed as proceeds of crime.

Not every player in the gambling environment is automatically an obligated party within the meaning of the GwG. The distinction is precisely defined in Section 2 (1) of the GwG. The primary groups affected include operators of online casino platforms, organizers of sports betting on the internet, operators of a German land-based casino, as well as bookmakers and betting agencies with corresponding permission. It is important to distinguish this from other forms of gambling. Clubs that operate totalizator betting, or organizers of non-internet-based lotteries with state permission do not fall under this strict definition of obligated parties. Gaming machines in restaurants (Section 33c of the Trade Regulations (GewO)) are also excluded. For all others, however, in particular licensed online casino providers, there is a full obligation to register in the FIU reporting portal and implement comprehensive risk analyses. This clear classification ensures that supervisory authorities such as the state gambling authorities and the Federal Ministry of Finance can concentrate their control resources on the areas with the highest potential for abuse.

Criminal Risks and the Outlook for EU Regulation

The Money Laundering Act Casino Germany 2026 links national law enforcement with European harmonization. While Section 261 StGB renders players and operators liable to prosecution for illegal transactions, the EU Anti-Money Laundering Regulation (Regulation (EU) 2024/1624) introduces a uniform set of rules from July 2027.

Criminal Liability under Section 261 StGB and Asset Seizure

Participation in unlicensed online casinos carries a significant risk. Winnings from illegal gambling can be classified as proceeds from a criminal offense. Anyone who deposits or transfers these funds potentially commits the offense of money laundering under Section 261 StGB. This criminal norm is central to the prosecution of money laundering in the gambling sector. It affects both the deposit and withdrawal of funds that are disproportionate to declared income.

In case of reasonable suspicion, public prosecutors can obtain an asset freeze to immediately freeze account balances. Those affected often only learn of this measure when the actual account attachment takes place. This massively restricts liquidity. The asset freeze serves as a preventive instrument to prevent the concealment of funds of illegal origin. It is directly related to investigations under Section 261 StGB. Players should therefore only act with providers with a German license in order to avoid criminal consequences and the loss of their deposits.

Fines and Sanctions for Casino Operators

For operators of gambling platforms, the financial risks in the event of violations of the Money Laundering Act (GwG) are enormous. The catalog of fines provides for significant financial sanctions. In the event of repeated or systematic violations, these can reach into the millions.

The responsible supervisory authorities, in particular the GGL and the state authorities, are obliged to make legally binding decisions on fines publicly known. This leads to significant reputational damage for the companies concerned. In addition, suspicious cases must be reported to the FIU. If operators fail to make these suspicious activity reports, they face further sanctioning measures. Compliance with organizational obligations, including the five-year retention of data, is therefore crucial for avoiding sanctions.

Outlook: EU Anti-Money Laundering Regulation and AMLA from 2027

From July 10, 2027, the EU Anti-Money Laundering Regulation (Regulation (EU) 2024/1624) comes directly into force. It replaces fragmented national regulations with a uniform "Single Rulebook". This regulation is the centerpiece of the EU AML package. It applies directly in all member states without the need for a further national implementation act. It significantly tightens due diligence obligations. For example, it prescribes the collection of all nationalities, the tax ID, as well as profession and employment.

In parallel, the AMLA (Anti-Money Laundering Authority) based in Frankfurt will begin its work. The AMLA (Anti-Money Laundering Authority) will initially assume coordinating tasks in the non-financial sector. This also includes gambling providers. In the long term, it is planned that the AMLA (Anti-Money Laundering Authority) will assume direct supervision of selected, high-risk cross-border providers. For German operators, this means that by July 2027, they must prepare for stricter, Europe-wide harmonized identification processes. These go beyond the current requirements of the GwG.

About this Article - Editorial & Responsibility

This article on "Money Laundering Act Casino Germany 2026" was written by Sarah Weber and professionally reviewed by Dr. Markus Hoffmann. Both regularly update the content regarding regulatory changes, license availability, and bonus terms. All statements regarding licenses, authorities, and legal frameworks refer to publicly accessible sources (GGL (Joint Gambling Authority of the Federal States), Interstate Treaty on Gambling 2021 (GlüStV 2021)).

About the Author

8+ years of casino reviews, 200+ personally tested platforms in the EU and internationally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: wagering requirements, withdrawal workflows, customer support evaluation.

About the Reviewer

12+ years in the iGaming industry, including 5 years as a compliance consultant for licensed operators under the Interstate Treaty on Gambling 2021. PhD in Business Mathematics. Research focus: bonus mathematics, wager analysis, player protection systems (OASIS).

Responsible Gambling

Gambling can be addictive. If you feel that you are losing control of your gaming behavior, please contact the BzgA Spielsuchthilfe, Check-dein-Spiel.de or use the central exclusion system (OASIS (central player exclusion system)). Set personal deposit and loss limits before playing with real money. Breaks and cooldown functions from providers are not a sign of weakness - they are a tool for sustainable enjoyment of the game.

Legal Disclaimer

The information in this article is for editorial and comparison purposes only. It does not constitute legal advice. The legal assessment of online gambling without a German license is a gray area and is subject to ongoing adjustments by the GGL (Joint Gambling Authority of the Federal States). Players are responsible for complying with local regulations.