An obliged entity is a business that is legally required to follow anti-money laundering rules. The term is used mainly in the European Union, and it covers banks and other financial firms as well as many non-financial businesses such as lawyers and estate agents.
Key takeaways
- An obliged entity is a business legally required to follow AML rules.
- The term is used mainly in the European Union.
- It covers financial institutions and many non-financial businesses.
- Obliged entities must run customer checks, keep records, and report suspicion.
- The categories are set by the EU’s anti-money laundering directives.
- It overlaps closely with the FATF idea of a DNFBP.
On this page
What it isThe term explainedWho countsTheir obligationsThe EU frameworkObliged entity vs DNFBPWhy it mattersStaying compliantFAQsRead more
6
EU anti-money laundering directives issued to date
Source: European Union
$800B to $2T
Laundered worldwide each year that these rules target
Source: UNODC
1989
Year the FATF set the global standard these rules follow
Source: FATF
What is an obliged entity?
An obliged entity is any business that the law requires to follow anti-money laundering rules. The name captures the idea plainly: these are the firms that are obliged to check for and report dirty money.
The term is most common in the European Union, where AML law lists the types of business that must comply. If a firm is an obliged entity, it cannot opt out of the rules; the duties apply by law.
The category is wide, covering far more than banks. Read more: those duties are built around customer due diligence.
The term explained
The phrase obliged entity is a legal one, and each word matters. Together they mark out who the rules bind.
- Obliged. Bound by law to comply, not doing so by choice.
- Entity. A business or professional practice, rather than a private individual.
Other regimes use different labels for the same idea, such as regulated entity or reporting entity. The meaning is broadly the same: a business the law has placed inside the AML system.
Who counts as an obliged entity?
The list of obliged entities is set by law and is deliberately broad. It reaches well beyond the financial sector.
- Banks and financial institutions. The core of the list.
- Payment and e-money firms. Including many money service businesses.
- Lawyers and accountants. When they handle certain transactions.
- Estate agents. Because property is a laundering channel.
- Trust and company service providers. Firms that set up and run companies.
- Casinos and high-value dealers. Where large sums change hands.
The common thread is that each sits at a point where dirty money might enter the system. That is what earns a place on the list.
Screen a customer against watchlists
Run one search across sanctions, PEP, and adverse media data to meet your customer check duties.
The obligations of an obliged entity
Every obliged entity carries the same core duties, scaled to its size and risk. The obligations are consistent across the EU.
- Customer due diligence. Verify who customers are, and their beneficial owners.
- Risk assessment. Judge the money laundering risk of customers and services.
- Record-keeping. Keep evidence of checks and transactions, usually for years.
- Reporting. File a report on suspicious activity to the authorities.
- Internal controls. Run an AML program with training and oversight.
Do this: get an indicative read on your exposure with the AML Risk Assessment.
The EU framework
The concept of an obliged entity comes from the EU’s anti-money laundering directives. These directives set the rules that member states then write into national law.
The EU has issued a series of these directives over the years, refining and widening the duties each time. The most recent numbered one is the Sixth Anti-Money Laundering Directive, and the EU has since agreed a further package that creates a central AML authority. Each round has tended to add obliged entities and tighten what they must do.
Obliged entity vs DNFBP
Obliged entity and DNFBP are closely related, and it helps to see how they fit. One is broader than the other.
A DNFBP is the FATF’s term for the non-financial businesses covered by AML rules, such as lawyers and estate agents. An obliged entity is the EU’s broader term, covering both those non-financial businesses and the financial institutions. So all DNFBPs are obliged entities, but obliged entities also include banks.
| DNFBP | Obliged entity | |
|---|---|---|
| Used by | FATF, globally | The EU |
| Covers | Non-financial businesses only | Financial and non-financial |
| Includes banks | No | Yes |
In short, obliged entity is the wider umbrella, and DNFBP is the non-financial slice within it.
Why the term matters
The term matters because it defines who the law applies to. If a business is an obliged entity, the full weight of AML rules falls on it.
For a firm, knowing whether it is an obliged entity is the first compliance question. It decides whether the firm must run checks, keep records, and report, or whether it sits outside the rules. Getting that wrong, and assuming the rules do not apply, is a serious mistake.
The line can be finer than it looks. A business that only occasionally handles client money, or that sits on the edge of a listed sector, may still be caught, which is why firms in doubt take advice rather than guess.
Staying compliant as an obliged entity
An obliged entity stays compliant by building the AML basics into how it works. The steps are the same across sectors, sized to the firm.
- Confirm your status. Be clear that the rules apply and which ones.
- Check customers. Verify identity and beneficial ownership.
- Assess and monitor. Rate risk and watch for unusual activity.
- Report and record. File suspicion and keep evidence of your checks.
Get an indicative AML risk rating
See where your money laundering risk is concentrated across customers, products, and geographies.
Weigh a customer’s country risk
Look up a country against FATF, sanctions, and corruption data to judge a customer’s geographic risk.
Frequently asked questions
What is an obliged entity?
An obliged entity is a business that is legally required to follow anti-money laundering rules. The term is used mainly in the European Union and covers banks and other financial firms as well as many non-financial businesses, such as lawyers and estate agents. If a firm is an obliged entity, the AML duties apply by law and cannot be opted out of.
Who counts as an obliged entity?
Obliged entities include banks and financial institutions, payment and e-money firms, lawyers and accountants handling certain transactions, estate agents, trust and company service providers, and casinos and high-value dealers. The common thread is that each sits at a point where dirty money might enter the financial system, which is what places it inside the rules.
What is the difference between an obliged entity and a DNFBP?
A DNFBP is the FATF’s term for non-financial businesses covered by AML rules, such as lawyers and estate agents. An obliged entity is the EU’s broader term, covering both those non-financial businesses and financial institutions such as banks. So all DNFBPs are obliged entities, but obliged entities also include banks, making it the wider category.
Where does the term obliged entity come from?
The term comes from the European Union’s anti-money laundering directives, which set out the businesses that must comply with AML rules. Member states write these directives into national law. The concept has been part of successive EU directives, each of which has tended to widen the list of obliged entities and tighten their duties.
What are the duties of an obliged entity?
An obliged entity must carry out customer due diligence including beneficial ownership, assess the money laundering risk of customers and services, keep records of checks and transactions for a set period, report suspicious activity to the authorities, and run internal controls such as an AML program with training. These duties are scaled to the firm’s size and risk.
Are all financial institutions obliged entities?
In the EU, yes. Banks, payment firms, e-money firms, and other financial institutions are core obliged entities and must follow the full anti-money laundering rules. The category then extends beyond finance to many non-financial businesses. Being a financial institution almost always means being an obliged entity under EU AML law.
Is an obliged entity the same as a regulated entity?
They are closely related and often used to mean the same thing. Obliged entity is the EU’s specific term for a business bound by AML rules. Regulated entity and reporting entity are similar labels used in other regimes. All describe a business the law has placed inside the anti-money laundering system, with duties to check, record, and report.
How do I know if my business is an obliged entity?
You are likely an obliged entity if your business is a financial institution, or a non-financial business in a listed sector such as legal, accountancy, real estate, company services, or high-value dealing. National AML law, based on the EU directives, sets out the exact list. Confirming your status is the first compliance question, since it decides whether the rules apply.
What EU directives define obliged entities?
The EU’s anti-money laundering directives define obliged entities, with each new directive refining and widening the list. The most recent numbered one is the Sixth Anti-Money Laundering Directive, and the EU has agreed a further package creating a central AML authority. Successive directives have added sectors such as crypto firms and luxury-goods traders.
Do obliged entities have to report suspicious activity?
Yes. Reporting suspicious activity is a core duty of every obliged entity. When a firm suspects money laundering, it must report it to the national financial intelligence unit, usually through a suspicious activity report. This duty applies to all obliged entities, from banks to estate agents, and is central to how the AML system detects dirty money.
What happens if an obliged entity ignores AML rules?
An obliged entity that ignores AML rules faces regulatory penalties, fines, and in serious cases criminal liability. Beyond the legal risk, failing to run checks leaves the firm open to being used for laundering. Assuming the rules do not apply, when a business is in fact an obliged entity, is a serious and common mistake that regulators treat harshly.
How many anti-money laundering directives has the EU issued?
The EU has issued six numbered anti-money laundering directives to date, from the first in 1991 to the Sixth Anti-Money Laundering Directive. It has since agreed a further reform package, including a regulation and a new central AML authority. Each round has tended to widen the list of obliged entities and strengthen their obligations.
Read more: our ultimate guides, whitepapers and templates
Related guides and resources to help you act on what you just read.
Last reviewed July 12, 2026 · 10 min read · Written for compliance and risk professionals · By the WhoWiki editorial team
Key takeaway: an obliged entity is a business legally required to follow anti-money laundering rules, a term used mainly in the EU for firms that must run AML checks.