Austria’s FMA sanctions Kurant over anti-money-laundering control failures
THE BRIEF
Austria's Financial Market Authority imposed an additional €45,000 penalty on Kurant GmbH for breaches of customer due-diligence requirements under the Financial Markets Anti-Money Laundering Act. The findings concerned procedures for occasional transactions and cases involving suspected money laundering, terrorist financing or links to terrorist organizations. The enforcement action is modest in monetary size but important as a control signal: regulators continue to test whether customer due-diligence triggers, escalation rules and evidence are working in practice. Firms operating in higher-risk payment, crypto or cash-related environments should assume that written policies alone will not satisfy supervisory expectations if frontline execution, case documentation or escalation decisions cannot be demonstrated.
WHY IT MATTERS
AML failures often arise not because a policy is missing, but because thresholds, ownership and escalation are inconsistent at the point of execution. Occasional transactions can be particularly challenging because institutions may have less customer history available to support risk decisions. The FMA action therefore has relevance beyond one Austrian firm: it reinforces a broader European supervisory expectation that controls must be risk-based, repeatable and evidenced. Compliance and audit teams should be able to show not only that procedures exist, but also how alerts are handled, how exceptions are approved and how suspicious cases are escalated and documented.
WHO SHOULD CARE
AML officers, compliance leaders, Austrian and EU financial institutions, crypto and payment-service providers, internal audit, operational-risk teams and senior management responsible for financial crime.
WHAT TO DO NOW
- Review customer-due-diligence triggers for occasional, high-risk and unusual transactions and confirm they are consistently applied.
- Test escalation procedures for suspected money laundering, terrorist financing and sanctions-related concerns using real case samples.
- Verify that analyst decisions, overrides and approvals are documented with enough evidence to withstand regulatory review.
- Check whether higher-risk channels or customer groups receive enhanced due diligence and appropriate management oversight.
- Use internal audit or quality assurance to identify gaps between written AML procedures and actual frontline execution.
VERIFICATION NOTE
The FMA published the final sanction on August 18, 2026 and states that the decision is legally binding.
