Signicat×flatexDEGIRO
AMLR Readiness Briefing

flatexDEGIRO,
are you ready for AMLR?

On 10 July 2027, the EU Anti-Money Laundering Regulation decides which identification methods carry compliant sign-ups. This briefing shows what that means for flatexDEGIRO, and how to turn a deadline into an advantage.

Time until AMLR applies
00Days
00Hrs
00Min
00Sec
Entry into force · 9 Jul 2024Go-live · 10 Jul 2027

And from December 2027, financial institutions must accept EUDI Wallets under eIDAS 2.

The regulation

What AMLR means for flatexDEGIRO

A regulation, not a directive

AMLR is a single law that applies directly and automatically in all EU member states from 10 July 2027. It does not need to be rewritten into national law, and member states cannot change or reinterpret it. Fewer national variations, less room for vague processes.

A new EU supervisor

AMLA, the new central EU Authority for Anti-Money Laundering and Countering the Financing of Terrorism, coordinates supervision across the Union and directly oversees selected high-risk obliged entities.

Stricter expectations on KYC, PEP and UBO

Group-wide requirements on internal procedures, risk assessments and staff, with clear evidence checks on customer, PEP and beneficial-owner data. Article 22.1 defines exactly which identity attributes obliged entities must obtain.

Customer data must stay current

Customer data shall be kept up to date on a one- to five-year cycle. That covers the existing customer base, not only new sign-ups.

Document-based identification (Art. 22.6a)

Identity document plus reliable and independent sources, with technical detail still to be specified by the EBA RTS on CDD. In Signicat's reading, methods under Art. 22.6a can only be used in exceptional cases — eIDAS-based identification becomes the new standard under AMLR. Agent-based video identification is not explicitly listed in Article 22.6b; its standing depends on standards that are still being written.

Regulatory detail pending

eIDAS-based identification (Art. 22.6b)

Notified eID means at substantial or high assurance levels under Regulation (EU) No 910/2014, Qualified Trust Services such as QES and QEAA, and European Digital Identity Wallets. Explicitly listed, harmonised EU-wide, compliant from day one.

Regulatory certainty

What this means for flatexDEGIRO

Today, flatexDEGIRO onboards new customers across Germany, Austria and the Netherlands with photo identification, agent-based video identification and bank verification, run by external vendors and configured market by market. Under AMLR, methods under Art. 22.6a can only be used in exceptional cases: eIDAS-based identification becomes the new standard. Agent-based video identification and bank-transfer verification are not explicitly listed in Article 22.6b; their future standing depends on technical standards that are still being written. The earlier the migration starts, the more of it is a product decision instead of a deadline scramble.

Article 22.6b

eIDAS-based identification: the new standard under AMLR

Three routes are explicitly listed in Art. 22.6b. Signicat helps turn those requirements into digital flows — without starting from scratch.

AMLR · Notified eIDs

Notified eIDs at substantial or high assurance levels.

Art. 22.6b explicitly recognises notified eID means at substantial or high assurance levels under Regulation (EU) No 910/2014. European electronic identities have been around since the early 2000s — familiar to users, high conversion where they exist.

AMLR · Qualified Trust Services

QES and QEAA, the universal fallback.

A Qualified Electronic Signature can be used as an AMLR-compliant ident method in a fully automated flow, 24/7, for anyone holding a valid identity document. Independent of local eID adoption, and combinable with Qualified Electronic Attestations of Attributes (QEAA).

AMLR · EUDI Wallets

The wallets every obliged entity must accept.

Member states will launch European Digital Identity Wallets from December 2026. Financial institutions must accept EUDI Wallets from December 2027. Twenty-seven wallet ecosystems, one obligation — extensible with verified attributes from qualified sources.

Signicat answer

Signicat eID and Wallet Hub.

35+ notified eIDs across Europe through one integration, ready today.

Signicat answer

Signicat VideoID with QES.

Signicat is itself an EU Qualified Trust Service Provider — QES and QEAA issued in-house.

Signicat answer

Signicat eID and Wallet Hub.

Every EUDI Wallet added through the same hub as it goes live — no per-wallet integration.

No single ident method delivers every AMLR attribute.
Signicat closes that gap.

Article 22.1 requires attributes such as place of birth, national identification number and address. Notified eIDs, EUDI Wallets and QES certificates do not always carry all of them. Signicat closes the gap through orchestration of KYC, KYB, address verification, screening and monitoring — with access to 200+ data and registry sources across Europe, inside the same flow.

Interactive demo

Try the sign-up of the post-AMLR era

An illustrative mockup in the style of the flatexDEGIRO app. Pick a market, flip the switch, tap a method.

flatexDEGIRO
Identity verification
VideoIdent plus German eID. Under AMLR, eID is already Article 22.6b-ready; VideoIdent is not explicitly listed and can only be used in exceptional cases.

Source: flatexDEGIRO Support Center, verification pages for DE, AT and NL, August 2026.

09:41
Choose how to confirm your identity
This helps keep your account safe and complies with banking laws.
How we keep your data safe

Screens are illustrative mockups created by Signicat. flatexDEGIRO name and design references are used for demonstration only.

Why Signicat

A trusted digital world — the identity layer behind 21,000+ obliged entities.

Headquartered in Trondheim, Norway, with 17 offices across Europe, Signicat has been building digital trust infrastructure for nearly two decades. We serve 21,000+ customers — from global banks and insurers to government agencies and fast-growing fintechs — across Europe and worldwide. One platform covering the complete Digital Identity Lifecycle: 240+ identity methods, orchestration of KYC, KYB, address verification, screening and monitoring, access to 200+ data and registry sources, and an EU Qualified Trust Service Provider for QES and QEAA.

Trusted by

VisaBMWPayPalAmerican ExpressSantanderINGVolvoGOV.UKBoltSwedbankKlarnaSEBMastercardMollie

Next step

Deadline or advantage. Same date, your choice.

Prepared late, AMLR is friction. Prepared early, it is the moment to modernise onboarding, lift conversion and retire the flows customers abandon. flatexDEGIRO has every ingredient to be in the second group.

Philipp Angermann
Let's talk

Philipp Angermann

Director Financial Services DACH, Signicat

philipp.angermann@signicat.com