One Country, One Supervisor
A model the rest of the EU will follow. For real estate, that means consistent audits, faster detection and bigger fines. The radar era has begun.
For decades, the money launderer's best friend in Europe wasn't a clever lawyer or an offshore account. It was fragmentation. AML responsibilities scattered across FIUs, ministries, sectoral supervisors and professional bodies — each with partial visibility, limited resources and, for the non-financial sector especially, little appetite for audits. Real estate businesses know this better than anyone: obligated entities for 25 years, audited almost never.
That structural weakness is now being engineered out of the system. And Spain has just moved first.
The Spanish initiative: ANIFI
On 28 July 2026, the Spanish Council of Ministers approved preliminary draft legislation creating ANIFI — the National Financial Integrity Authority (Autoridad Nacional de Integridad Financiera). It is worth pausing on what this new authority consolidates into a single body: financial intelligence (absorbing SEPBLAC, Spain's FIU), AML/CFT supervision and inspections, administrative sanctioning powers, international financial sanctions administration, and proliferation-financing oversight.
One authority. One mandate. And — this is the part every compliance officer should read twice — one single point of contact with AMLA, the EU's Anti-Money Laundering Authority in Frankfurt.
Crucially, ANIFI's scope does not stop at banks. Its mandate explicitly extends across the full range of obliged entities, including the DNFBPs — designated non-financial businesses and professions. That is us: real estate agencies, developers who intermediate, franchise networks, mortgage credit intermediaries. The sectors that historically sat at the bottom of every supervisor's priority list are, in this new architecture, squarely inside a well-resourced authority whose funding model — levies on obliged entities, supplemented by sanction proceeds — literally grows with enforcement.
Why a "single point of coordination" changes everything
To understand why this matters, look at it from Frankfurt's perspective. AMLA's job is to drive strict, convergent supervision across 27 Member States. That job is nearly impossible when each country presents a patchwork of authorities with overlapping mandates and inconsistent data. It becomes dramatically easier when each country presents one consolidated counterpart — one body that holds the intelligence, runs the inspections, and signs the sanctions.
Spain's model is exactly the structure AMLA needs on the other side of the table, and it will not stay unique for long. When one Member State builds the reference architecture — clean lines of responsibility, integrated intelligence and supervision, a single interlocutor for Frankfurt — the peer pressure on the others is immediate. Expect variations of this consolidation across the EU well before AMLR fully applies in July 2027.
The direct consequences: consistency, speed, and bigger fines
For the non-financial sector, and real estate in particular, the consequences of this new plumbing are concrete and near-term.
Audits become consistent. Under the fragmented model, whether you were ever inspected depended largely on geography and luck. A consolidated authority runs risk-based supervision from a single data pool, with AMLA setting the methodology above it. The audit you never had in 25 years becomes the audit that is scheduled, systematic and repeatable.
Non-compliance is identified faster. When financial intelligence and supervision live in the same house, the signals connect. The FIU sees the suspicious transaction reports that weren't filed by an agency handling dozens of transactions a year. The supervisor sees the obliged entity that never registered, never trained staff, never documented a risk assessment. Cross-referencing that used to take years — or never happened — becomes routine queries on integrated data.
Fines increase in volume and in value. More audits mechanically means more findings. A unified sanctioning authority, benchmarked by AMLA and partly funded by the proceeds of its own enforcement, has both the capacity and the structural incentive to sanction consistently. The pattern is familiar from every sector where supervision consolidated: enforcement doesn't creep up — it steps up.
Put plainly: the years of flying under the supervision radar are slowly but surely coming to a complete stop. Not because the rules changed — they've existed since 2001 — but because the machinery that enforces them is finally being built to work.
The uncomfortable question for every real estate business
If a consolidated national authority ran a risk-based screening of your business tomorrow, what would it find? A documented, up-to-date business risk assessment? Client files where identification, verification and due diligence are demonstrable step by step? Evidence of staff training? A functioning reporting reflex?
For firms that have treated AML as a formality, the honest answer is uncomfortable. And the window to fix it is defined not by your own planning but by two external clocks: AMLR applying in July 2027, and national consolidation — Spain today, others tomorrow — arriving even sooner. Add the shrinking pool of available AML expertise as the deadline approaches, and the conclusion of my previous articles stands, reinforced: the time to act is not when the letter from the new authority arrives. It is now.
Being ready is a choice — and a structure
Readiness under this new supervisory reality has a precise meaning: being able to demonstrate compliance instantly, file by file, the day the auditor connects. That is a structural capability, not a scramble. It requires a platform where Know Your Business (risk self-assessment, internal policies, training, whistleblowing), Know Your Customer (digital ID verification, sanctions and PEP screening, adverse media) and real-estate-specific risk assessment live in one place — transparent, GDPR-secure, and instantly auditable.
That is precisely what Immosurance was built to be: the first European-wide AML compliance platform designed specifically for the real estate sector, developed with CEPI, Europe's leading real estate association — all-in-one, exhaustive, encrypted, GDPR-compliant and AMLR-ready, for a single agency or an entire franchise network, in 14+ languages. When supervision consolidates, the businesses that thrive will be the ones whose compliance evidence is one click away. That is a choice available today; it will be a scramble tomorrow.
Spain has fired the starting gun on the new era of AML supervision. The radar is no longer being switched on — it is being networked, centralised and pointed directly at the sectors that assumed it would never look their way.
Don't be the business it finds unprepared.
Do you expect your country to follow Spain's consolidation model? And would your files survive the first systematic audit? We welcome your view in the comments — and if you want to see what instant auditability looks like in practice, our door is open.