Spain: AML/CTF Regime

Spain's standing AML/CTF architecture rests on Ley 10/2010, of 28 April, and its implementing regulation Real Decreto 304/2014, of 5 May, supervised by SEPBLAC. As an EU/EEA member, Spain is bound directly by the EU's AML Regulation framework once it takes full effect, with 6AMLD transposition and AMLA's supervisory perimeter tracked at the EEA layer rather than re-derived at the Spanish national level. This cycle's structural development within that architecture is Real Decreto 813/2026, published in the BOE on 8 October 2026 and entering into force 28 October 2026, which amends RD 304/2014 on three points: removing the EUR 1,000 identification threshold for crypto-asset ATM transactions so that identification is required regardless of amount; stripping identification exemptions previously available for notarial acts; and removing the exemption that had allowed certain small obliged entities to avoid designating a representative to SEPBLAC. Each of these is a closing of a previously exempted gap in the customer-due-diligence regime rather than the introduction of a wholly new obligation category, and the amendment should be read as routine EU-aligned AML strengthening rather than as a signal of rising money-laundering or terrorist-financing risk exposure in Spain specifically.

On the international-standing side, Spain is not on the FATF grey list and FATF's assessment, following a 2018 re-rating on three Recommendations, found Spain compliant or largely compliant on 38 of the 40 FATF Recommendations. SEPBLAC published its National Risk Assessment for 2026 on 31 July 2026, which provides the current risk basis for Spain's existing AML/CFT measures and sits alongside, rather than as a response to, RD 813/2026's October amendments.

Outlook

The RD 813/2026 amendments take effect 28 October 2026, after which crypto-asset ATM operators, notarial-act participants and small obliged entities will operate under the tightened identification and representation duties. No FATF plenary action on Spain is in train, and no indication of a near-term FATF re-assessment was evidenced this cycle. The principal item to watch is whether SEPBLAC issues sector-specific guidance for gambling operators, payment institutions or crypto-asset ATM operators translating RD 813/2026's general amendments into applied compliance expectations, an area not separately retrieved this cycle beyond the general Ley 10/2010 obliged-entity regime.