Football clubs and agents: in scope from 10 July 2029

If you run a football club or work as a football agent in Ireland, anti-money laundering law has probably never been your problem. That changes under the EU's new AML Regulation. Regulation (EU) 2024/1624 (the "AMLR") applies to most obliged entities from 10 July 2027 — but football clubs and agents get a later start date. For your sector, the AMLR applies from 10 July 2029.

Two extra years sounds generous. It is not. The AMLR asks for a documented risk assessment, customer due diligence procedures, named compliance roles, record-keeping systems and reporting arrangements — the kind of infrastructure that established designated persons in Ireland have spent fifteen years building under the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010, and are still getting wrong. Building it from zero takes longer than you think.

This post explains where football fits in the new EU framework, what the obligations will look like in practice, and what a sensible club or agency should do between now and 2029.

The EU AML package in one minute

Three instruments make up the new EU regime, and it helps to keep them straight:

• Regulation (EU) 2024/1624 (AMLR) — the "single rulebook." It is directly applicable in all 27 member states, with no national transposition needed. It sets the substantive obligations: customer due diligence, beneficial ownership, internal controls, reporting. It applies from 10 July 2027 for most sectors, and from 10 July 2029 for football clubs and agents.
• Directive (EU) 2024/1640 (AMLD6) — the institutional layer. It deals with national supervisors, financial intelligence unit powers and beneficial-ownership registers, and each member state transposes it into national law.
• Regulation (EU) 2024/1620 — creates AMLA, the EU Anti-Money Laundering Authority in Frankfurt, operational since 1 July 2025. AMLA is producing the technical standards and guidelines that will flesh out the rulebook — you can track its output at amla.europa.eu.

The key point for football: the widened scope of the AMLR brings your sector into a regime that, for everyone else, replaces an existing one. Irish accountants, solicitors, estate agents and trust or company service providers are already "designated persons" under the CJA 2010. You are joining a system that is mature, supervised and enforced — just later than the others.

What being an obliged entity actually means

The AMLR uses the term "obliged entities" for the firms it regulates (Irish law has traditionally said "designated persons"). Once in scope, obliged entities carry a common core of obligations. Based on what the AMLR requires of other sectors from 2027, expect the following themes to matter for clubs and agencies:

• A business-wide risk assessment. A documented analysis of where your organisation is exposed to money laundering and terrorist financing risk, kept current and used to drive your controls.
• Customer due diligence (CDD). Identifying and verifying the people and companies you do business with before the relationship starts. For most sectors the AMLR sets a CDD trigger at €10,000 for occasional transactions, with occasional cash transactions of €3,000 or more triggering limited CDD.
• Beneficial ownership checks. The AMLR harmonises the beneficial owner definition at 25 per cent or more ownership interest, direct or indirect, EU-wide. Where a counterparty is a company, you will need to understand who ultimately owns and controls it.
• Prescribed compliance roles. The AMLR requires a board-level compliance manager plus a compliance officer of sufficiently high standing. For a club, that means AML accountability sits with named individuals, not "the office."
• Record-keeping. Records must be retained for 5 years and then deleted — retention and deletion both matter.
• Reporting suspicions. In Ireland, suspicious transaction reports are dual-reported: to FIU Ireland via the goAML portal (fiu-ireland.ie) and to the Revenue Commissioners via ROS. Note there is no threshold-based transaction reporting regime in Ireland — reporting is suspicion-based.

One rule arrives well before 2029 and can affect clubs indirectly: the AMLR introduces an EU-wide cash payment cap of €10,000 for commercial transactions (single or linked operations), directly applicable from 10 July 2027. If your club takes large cash payments today, plan for that limit regardless of your own AMLR start date.

Who will supervise Irish football?

Ireland's AML supervision is sectoral. The Central Bank of Ireland supervises financial firms; the Law Society of Ireland supervises solicitors; the designated accountancy bodies (Chartered Accountants Ireland, ACCA, CPA Ireland) supervise their members; the PSRA supervises property services providers; and the AMLCU in the Department of Justice covers TCSPs and other non-financial sectors.

Supervisory arrangements for football clubs and agents will be settled as part of Ireland's implementation of AMLD6, which governs how member states organise national supervision. That has not yet been confirmed for this sector, so treat any claim about "your regulator" with caution until an official designation is made. What is certain is that a competent authority will supervise you, with inspection and enforcement powers — that is how the framework works for every other obliged sector.

Why 10 July 2029 is closer than it looks

Three practical reasons not to park this until 2028:

1. Everyone around you complies from 2027. Your bank, your solicitor and your accountant will be applying the full AMLR from 10 July 2027. Expect more probing questions about your ownership, your funding sources and your larger transactions — two years before your own obligations bite.
2. The infrastructure takes time. A risk assessment, CDD procedures, appointed compliance roles, staff training and record-keeping systems are not a weekend project. Firms in other sectors typically need many months to get from nothing to audit-ready.
3. The standards are being written now. AMLA's technical standards and guidelines are landing through 2026 and beyond. Clubs that follow the process early will find 2029 an administrative exercise rather than a crisis.

What to do now

• Confirm whether your organisation will be in scope — and check whether any of your other activities bring you in earlier under a different category.
• Nominate someone now to own AML readiness, even informally, ahead of the formal compliance manager and compliance officer roles.
• Map your counterparties: who pays you, who you pay, which relationships involve companies whose ownership you do not currently verify.
• Review any cash handling against the €10,000 EU cash cap that applies from 10 July 2027.
• Start a simple risk register — it becomes the seed of your business-wide risk assessment.
• Read the AMLR itself on eur-lex.europa.eu and watch amla.europa.eu for sector guidance.
• Diarise checkpoints: a scoping decision in 2027, a gap analysis in 2028, full implementation well before 10 July 2029.

Where CompliDesk fits

CompliDesk is building AMLR-native compliance tooling for Irish obliged entities — risk assessments, CDD workflows and record-keeping designed around Regulation (EU) 2024/1624 rather than retrofitted from older rules. If you are not sure whether the AMLR catches your organisation, start with our scope checker.