Money Laundering Reporting Officer (MLRO)

What it is

The MLRO is the named individual inside a designated person's business who owns the reporting side of the AML programme. When a fee earner, negotiator or bookkeeper spots a red flag, the concern escalates internally to the MLRO, who assesses whether the threshold of suspicion is met and decides whether to report. If the answer is yes, the MLRO files the Suspicious Transaction Report — in Ireland, twice: with FIU Ireland through the goAML portal at fiu-ireland.ie, and with the Revenue Commissioners through ROS.

The role is registration-heavy before it is ever filing-heavy. The MLRO normally holds the firm's goAML registration and needs ROS access confirmed for STR submission, and both registrations should be refreshed whenever the role changes hands.

Why it matters for Irish firms

The MLRO is where AML obligations stop being abstract. Decisions not to report need a documented rationale — that record is what shows a supervisor, whether the PSRA, the Law Society of Ireland, a designated accountancy body, the AMLCU or the Central Bank of Ireland, that a judgement was made rather than missed. A common and entirely avoidable failure is portal access tied to an MLRO who has left the firm, discovered on the day a live suspicion needs filing.

What changes under the AMLR

Regulation (EU) 2024/1624 (AMLR), applying from 10 July 2027, prescribes compliance roles at EU level: a board-level compliance manager plus a compliance officer of sufficiently high standing, with the compliance officer also taking responsibility for targeted financial sanctions implementation from that date. Irish firms will need to map their existing MLRO arrangements onto this structure — in a small practice the same person may wear more than one hat, but the roles, and who holds them, need to be designated and documented. The AMLR also tightens the environment the MLRO works in: FIU requests answered within five working days, records retained for five years then deleted.

How CompliDesk helps

CompliDesk Ireland gives the MLRO one place for escalations, reporting decisions, dual-submission tracking and role designations — see the AMLR explainer for how the prescribed roles land in 2027.