Article 5(3) requires PSD2 authorisation applications to include a description of the PI's internal-control mechanisms for AML/CFT in accordance with the 4th + now 5th + 6th Anti-Money-Laundering Directives and Regulation (EU) 2015/847 on information accompanying transfers of funds. Article 19 requires the PI to verify the suitability of agents including AML/CFT-related fitness + propriety. Article 22 designates competent authorities + their AML cooperation. Article 22(2) requires PSPs to report suspicious activities to the financial intelligence unit (FIU) under the AMLD. The PSD2 AML interface remains critical for PIS / AIS providers despite their non-handling of funds because they generate authentication + transactional data relevant to fraud + AML monitoring. The AML Regulation (Regulation (EU) 2024/1624) + the 6th AMLD will fully apply from 10 July 2027 in parallel.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.