Virtual IBANs (vIBANs) have long operated in a grey zone – widely used in payments, treasury, and fintech ecosystems, yet lacking a harmonised regulatory definition. As their popularity grew, so did concern among supervisors: vIBANs can obscure account ownership, complicate traceability, and in the worst cases, enable layering and cross-border fraud schemes.
A new AML/CFT regulatory wave in Europe has now changed that. Our latest regulatory analysis paper, “How AML/CFT Regulation Triggered the Virtual IBAN Overhaul,” explains what drove EU authorities to intervene – and what financial institutions must do next.
Why AML/CFT Regulators Moved First
While payment authorities debated the legal meaning of IBANs, AML supervisors were already seeing real-world problems:
- Criminals misusing vIBANs to disguise the true institution or country behind a payment (highlighted in FATF-Europol-Egmont cases).
- “Downstreaming” – the re-issuance of vIBANs in chains that obscure the underlying master account.
- Law enforcement struggling to freeze funds because vIBANs are identifiers, not accounts holding money.
These risks, combined with increasing IBAN discrimination across Europe, pushed AML regulators to take the lead.
The AMLR and AMLD6: A New Framework for vIBANs
The EU’s Anti-Money Laundering Regulation (AMLR) and AMLD6 now introduce the first formal EU definition of a virtual IBAN and set clear responsibilities for issuers. Key requirements include:
- Identifying and verifying the end-user of each vIBAN
- Linking every vIBAN to a specific underlying (master) payment account
- Providing end-user information to the master account institution within five working days
- Reporting vIBAN-related data to the centralised account registry
For many institutions, this marks a major shift: vIBANs are no longer just technical routing tools – they are regulated identifiers with strict AML/CFT obligations.
What’s Inside the Paper
The analysis explores:
- How divergent national interpretations allowed different vIBAN models to flourish
- Why AML/CFT risks accelerated regulatory intervention
- What the AMLR’s new vIBAN definition means operationally
- Practical implications for COBO and POBO models
- How downstreaming, layering, and complex vIBAN chains increase exposure
- What regulators are expected to clarify next – especially around Verification of Payee
The paper also includes real-life commentary from DiPocket, illustrating how leading fintechs manage master accounts, control vIBAN issuance, and mitigate financial crime risks in practice.
Download the Full Regulatory Analysis
👉 Click below to download “How AML/CFT Regulation Triggered the Virtual IBAN Overhaul” – a deep dive prepared by AMLYZE’s AML/CFT experts, complete with regulatory insights, market analysis, and practical guidance on staying ahead of emerging risks.





