Anti-Money Laundering Act Casino Germany 2026: New Obligations, Deadlines & goAML Transition

The Anti-Money Laundering Act for Casinos in Germany 2026 is tightening compliance requirements for gambling providers. The reason is the AML Reporting Ordinance (GwGMeldV), which takes effect on March 1, 2026. Mandatory online casinos and gaming houses must submit suspicion reports exclusively via the FIU's goAML portal. Additionally, they must align their risk analyses with the Interpretation and Application Guidelines (AuA) 2026. These steps aim to prevent violations of § 261 of the German Criminal Code (StGB) and prepare the sector for the EU Anti-Money Laundering Regulation.

The New AML Reporting Ordinance (GwGMeldV) from March 2026

The Anti-Money Laundering Act for Casinos in Germany 2026 is subject to stricter technical requirements from March 1, 2026, via the AML Reporting Ordinance (GwGMeldV). This ordinance establishes, for the first time, uniform federal standards for the content of reports under the Anti-Money Laundering Act (GwG). The goal is to improve information quality so that the Financial Intelligence Unit (FIU) can process reports more quickly.

Deadline March 1, 2026: What Changes for Online Casinos?

From the deadline of March 1, 2026, reports may no longer be freely formatted. They must be submitted exclusively via goAML in standardized XML format or through the designated form fields. This technical requirement ensures that data can be processed automatically. Failure to adapt IT infrastructure to the goAML format in time risks the system rejecting reports entirely, which constitutes a systematic breach of obligations.

According to § 3 GwGMeldV, mandatory content includes an internal file reference, reporting reasons from the FIU catalog, and detailed information on involved persons and beneficial owners. Additionally, reports must include information on parallel criminal complaints filed. For transactions involving real estate, proof of compliance with the cash payment ban must be attached. If these fields are missing, the system blocks the report. This poses new challenges for the operational compliance strategies of casinos.

Mandatory Use of the FIU's goAML Portal

The Financial Intelligence Unit (FIU) is an agency attached to the Central Customs Administration. It operates the electronic reporting portal goAML. For casinos, this means: a suspicion report can only be submitted after successful registration in this system. The FIU uses goAML to centrally consolidate reports and process them more efficiently. The registration requirement applies regardless of whether a report is actually submitted.

Under the GwG, all gambling providers subject to due diligence obligations for the prevention of money laundering and terrorist financing are considered obligated parties. These companies must register electronically with the FIU to remain operational. Registration in the goAML portal was already mandatory by January 1, 2024. It now serves as a fundamental prerequisite for correct reporting under the new GwGMeldV. Without this registration, no suspicion report can be submitted. In cases of concrete suspicion of money laundering, this results in severe compliance violations.

Tightened Due Diligence Obligations and Risk Analysis under AuA 2026

The Interpretation and Application Guidelines (AuA) 2026 specify the Anti-Money Laundering Act for Casinos in Germany 2026 through a strict structuring of risk management and due diligence obligations. Operators must align their company-specific risk analysis with the new chapter sequence before proceeding to operational duties. The regulations clearly define who qualifies as a beneficial owner. They also specify how Know Your Customer (KYC) processes must be validated for digital transactions to effectively close compliance gaps in the gambling sector.

Update of Company-Specific Risk Analysis

The Interpretation and Application Guidelines (AuA) 2026 demand a fundamental realignment of internal control systems. Unlike the 2020 version, which was primarily obligation-oriented, the new structure begins with general foundational assumptions and an abstract risk assessment. This risk analysis must be documented and serves as the basis for all further due diligence obligations.

Operators are required to regularly review and incorporate the following risk factors into their analysis: Customer and business partner risks Product and transaction risks Distribution and geographic risks

The results of the National Risk Analysis must be taken into account to correctly assess residual risk. An outdated analysis directly leads to deficiencies in implementing due diligence obligations. Measures must correspond to the respective money laundering risk.

Know Your Customer (KYC): Identity Verification in the Digital Age

The Know Your Customer (KYC) principle is the central pillar of customer identification. Obligated parties must ensure that the collected data regarding the contracting partner's identity is accurate. In case of doubts about the identity or that of the beneficial owner, enhanced measures are required.

Customer data updates are risk-based: At an enhanced due diligence level, an annual review is mandatory from July 2027. For standard due diligence obligations, the review period is halved from ten to five years.

Automated implementation is necessary to close compliance gaps and avoid disrupting operations through manual interventions. Only in this way can the Anti-Money Laundering Act for Casinos in Germany 2026 be implemented operationally and efficiently.

Handling Beneficial Owners and Staking Structures

Identifying the beneficial owner is critical, especially in complex structures like staking or third-party payments. The beneficial owner is the natural person who ultimately exercises control over a transaction. In the context of online gambling, this means the player is not necessarily the beneficial owner if third parties provide the gaming capital.

Know Your Customer processes must therefore verify: 1. Who provides the funds? 2. Is there a staking relationship where a "backer" bears the risk?

Such structures significantly increase money laundering risk as they can obscure the transparency of fund origins. The Interpretation and Application Guidelines (AuA) 2026 require flawless documentation in these cases. This ensures that no anonymous third-party payers operate in the background. Incorrect allocation can lead to failure to submit suspicion reports to the FIU, even when a relevant risk exists.

Who is Affected? Scope in the Gambling Sector

The Anti-Money Laundering Act for Casinos in Germany 2026 defines a strict framework covering both digital and physical providers. As obligated parties under the Anti-Money Laundering Act (GwG), online casino operators and traditional German gaming houses are subject to identical due diligence obligations for the prevention of financial crime. This regulatory alignment is supported by the Interstate Treaty on Gambling 2021 (GlüStV).

Online Casinos vs. Gaming Houses vs. Sports Betting Providers

Yes, the Anti-Money Laundering Act applies to all commercial forms of gambling, unless a specific exception exists. According to § 2(1) No. 15 GwG, organizers and intermediaries of gambling are explicitly classified as obligated parties. This affects both online casinos and terrestrial German gaming houses. The legislator assesses the money laundering risk in this sector as high due to high transaction volumes and rapid fund turnover.

While the German gaming house has historically been in focus due to its cash intensity, digital platforms are increasingly becoming the center of attention for authorities. An online casino offers offenders the opportunity to disguise illegal proceeds as "clean" winnings through deposits and subsequent withdrawals. Both operating models must therefore establish internal security systems to report suspicion cases to the Financial Intelligence Unit (FIU). Only certain state-licensed lotteries or gaming machines under the Trade Regulations are exempt, not the core offerings of licensed providers.

Interfaces with the Interstate Treaty on Gambling (GlüStV) and Regulatory Authorities

Compliance requirements arise from the interplay of two regulatory frameworks. The Interstate Treaty on Gambling 2021 (GlüStV) governs licensing and player protection, while the GwG oversees financial transactions. The Joint Gambling Authority of the States (GGL) acts as the central supervisory authority for the online market. It monitors whether providers fulfill their gambling and anti-money laundering obligations.

For an online casino, this means that the granting of a license under GlüStV automatically confers the status of an obligated party under GwG. The new Interpretation and Application Guidelines (AuA) 2026 also clarify that these obligations apply to companies outside the EU as well, provided they target players in Germany. Violations of these provisions can be penalized with fines and publicly disclosed by the Joint Gambling Authority of the States (GGL). Furthermore, there is a close link to criminal law: using unlicensed offerings can fulfill the elements of money laundering under § 261 StGB, as winnings from illegal gambling are classified as proceeds of crime.

Not every actor in the gambling environment is automatically an obligated party under the GwG. The distinction is precisely defined in § 2(1) GwG. The primarily affected groups include operators of online casino platforms, organizers of online sports betting, operators of German gaming houses, as well as bookmakers and betting agencies with the appropriate permit. It is important to distinguish these from other forms of gambling. Associations operating totalizators or organizers of non-internet-based lotteries with state permission do not fall under this strict definition of obligated parties. Gaming machines in pubs (§ 33c GewO) are also exempt. However, for all others, particularly licensed online casino providers, full registration in the FIU reporting portal and the implementation of comprehensive risk analyses are mandatory. This clear classification ensures that supervisory authorities, such as the state gambling authorities and the Federal Ministry of Finance, can concentrate their control resources on areas with the highest potential for abuse.

Criminal Risks and Outlook on EU Regulation

The Anti-Money Laundering Act for Casinos in Germany 2026 links national law enforcement with European harmonization. While § 261 StGB criminalizes players and operators in illegal transactions, the EU Anti-Money Laundering Regulation (Regulation (EU) 2024/1624) introduces a unified regulatory framework from July 2027.

Criminal Liability under § 261 StGB and Asset Freezing

Participating in unlicensed online casinos carries significant risk. Winnings from illegal gambling can be classified as proceeds of crime. Anyone who deposits or transfers these funds potentially fulfills the elements of money laundering under § 261 StGB. This criminal provision is central to prosecuting money laundering in the gambling sector. It covers both the deposit and withdrawal of funds that are disproportionate to declared income.

Upon justified suspicion, public prosecutors can obtain an asset freeze to immediately lock bank account balances. Those affected often only learn of this measure during actual account garnishment, which severely restricts liquidity. The asset freeze serves as a preventive tool to stop the concealment of illegally sourced funds. It is directly linked to investigations under § 261 StGB. Players should therefore exclusively use providers with a German license to avoid criminal consequences and the loss of their deposits.

Fines and Sanctions for Casino Operators

For operators of gambling platforms, the financial risks of violating the Anti-Money Laundering Act (GwG) are enormous. The fine catalog provides for significant financial sanctions. In cases of repeat offenses or systematic violations, these can reach into the millions.

The competent supervisory authorities, particularly the GGL and state authorities, are required to publicly disclose final fine decisions. This leads to significant reputational damage for the affected companies. Additionally, suspicion cases must be reported to the FIU. If operators fail to submit these reports, further sanctioning measures are threatened. Compliance with organizational obligations, including the five-year data retention period, is therefore crucial for avoiding sanctions.

Outlook: EU Anti-Money Laundering Regulation and AMLA from 2027

From July 10, 2027, the EU Anti-Money Laundering Regulation (Regulation (EU) 2024/1624) takes direct effect. It replaces fragmented national provisions with a unified "Single Rulebook". This regulation is the cornerstone of the EU AML package. It applies directly in all member states without requiring further national implementation acts. It significantly tightens due diligence obligations. For example, it mandates the collection of all nationalities, tax IDs, as well as occupation and employment status.

Parallel to this, the AMLA (Anti-Money Laundering Authority) based in Frankfurt begins its work. Initially, the AMLA (Anti-Money Laundering Authority) will take on coordinating tasks in the non-financial sector, which also includes gambling providers. In the long term, it is planned that the AMLA (Anti-Money Laundering Authority) will assume direct supervision over selected, high-risk cross-border providers. For German operators, this means preparing for stricter, EU-wide harmonized identification processes by July 2027. These go beyond the current requirements of the GwG.

About This Article - Editorial & Responsibility

Author: Sarah Weber - Casino Tester & Bonus Analyst Expert Review: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst Last Updated: 2026-07-28.

This article on "Anti-Money Laundering Act Casino Germany 2026" was written by Sarah Weber and expertly reviewed by Dr. Markus Hoffmann. Both regularly update the content regarding regulatory changes, license availability, and bonus terms. All statements regarding licenses, authorities, and legal frameworks refer to publicly accessible sources (GGL (Joint Gambling Authority of the States), Interstate Treaty on Gambling 2021 (GlüStV 2021)).

About the Author

8+ years of casino reviews, 200+ personally tested platforms in the EU and internationally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: wagering requirements, payout workflows, customer support evaluation.

About the Reviewer

12+ years in the iGaming industry, including 5 years as a compliance consultant for licensed operators under the Interstate Treaty on Gambling 2021. PhD in Business Mathematics. Research focus: bonus mathematics, wager analysis, player protection systems (OASIS).

Responsible Gambling

Gambling can be addictive. If you feel you are losing control over your gaming behavior, please contact BzgA Gambling Addiction Help, Check-dein-Spiel.de, or use the central blocking system (OASIS (central player blocking system)). Set personal deposit and loss limits before playing with real money. Pauses and cooldown features provided by operators are not a sign of weakness - they are a tool for sustainable enjoyment of the game.

Legal Disclaimer

The information in this article serves exclusively editorial and comparison purposes. It does not constitute legal advice. The legal assessment of online gambling without a German license is a gray area and is subject to ongoing adjustments by the GGL (Joint Gambling Authority of the States). Players are solely responsible for complying with local regulations.