Caught Between AMLA and the EU AI Act

How Banks Can Move Forward With High-Risk AI


 
 

Regulators are pushing financial institutions to dramatically improve their capabilities for identifying financial crime, while likely classifying the AI applications that could help meet this requirement as high-risk. The key to balancing these conflicting concepts might be an effective contextual intelligence platform.

There is an interesting contradiction in European banking right now.

On one hand, regulators are making it increasingly clear that financial institutions need to dramatically improve the scale and effectiveness of their anti-financial crime operations. AMLA alone will push many banks into a level of Customer Due Diligence (CDD) activity that simply cannot be absorbed operationally without far more automation, orchestration, and AI support than exists today.

On the other hand, the EU AI Act is simultaneously moving toward potentially classifying many of these exact same AI applications - AML monitoring, fraud detection, sanctions analysis, KYC decision support - as high-risk AI systems.

In other words: banks are being pushed toward AI and warned about it at the same time.

And honestly, both pressures make complete sense.

A few weeks ago I was looking at projections from a large European banking program around future CDD renewal volumes. The numbers were absurd enough that they almost stopped feeling real. Roughly 190,000 annual renewals in 2023 potentially growing to more than 1.3 million by 2029. Retail volumes increasing thirteenfold. Entire operational assumptions around compliance capacity effectively breaking apart within a five-year horizon.

At that point this stops being a technology conversation.

Nobody looks at growth curves like that and thinks:

“Maybe we should carefully experiment with AI.”

You look at them and realize the existing operating model has already expired.

CUSTOMER CASE STUDY

How Ally Built a Modern Fraud Intelligence Platform

Learn how Ally applied graph analytics and contextual investigation tools to uncover complex fraud networks and strengthen fraud prevention.

Read Case Study

The industry does not really have the option of avoiding AI in financial crime operations anymore. The volume, speed, and complexity requirements simply move too fast in the opposite direction.

But the uncomfortable part is this: the more important AI becomes in AML and KYC operations, the more dangerous its weaknesses become too.

And most discussions about trustworthy AI in banking still focus too heavily on the models themselves:

  • Model governance.
  • Model explainability.
  • Model risk.
  • Model controls.

Important topics, obviously. But I increasingly think the more fundamental problem sits elsewhere.

Because when you watch how many AI systems are currently being deployed inside large enterprises, what you often see is not really intelligence. What you see is a very sophisticated attempt to compensate for fragmented data environments.

The AI is expected to retrieve information from disconnected systems, interpret conflicting records, understand entity relationships, reconstruct context, reason through ambiguity, identify relevance, and then generate a coherent conclusion on top of all of it.

Which is an astonishing amount to ask from any system.

This is particularly difficult in anti-financial crime operations, where the actual difficulty is rarely a lack of data. Usually it is the exact opposite. There is too much of it, spread across too many systems, carrying too little shared meaning.

You see this very clearly in Ultimate Beneficial Ownership analysis.

Sven Eisermann from Commerzbank recently made an observation I thought captured the issue extremely well. Mr. Eisermann suggested that the challenge with UBO identification is not simply about collecting ownership information. It is about reconstructing and validating ownership and control structures in a way that remains understandable, explainable, and defensible.

And once upstream documentation quality breaks down - incomplete reporting, fragmented ownership trails, inconsistent structures - the burden shifts directly onto the financial institution.

At that point, what should have been a verification process quietly turns into a reconstruction exercise.

Now place AI into that environment.

We expect the system to understand legal entities, ownership hierarchies, indirect control relationships, transactional context, and behavioral significance while simultaneously generating outputs that sound fluent, confident, and actionable.

And this is exactly where the industry keeps colliding with the “plausible sounding answer” problem.

Because modern AI is remarkably good at producing answers that feel right.

That is precisely what makes failures dangerous.

The issue is usually not that the output looks obviously broken. The issue is that somewhere between data retrieval, contextual interpretation, reasoning, and language generation, the system quietly drifts away from reality while maintaining the appearance of confidence.

In low-stakes environments this is manageable.

In anti-financial crime operations, it becomes operational risk:

  • Regulatory risk.
  • Reputational risk.
  • And eventually, under the EU AI Act, governance risk as well.

Which is why I suspect the future winners in high-risk AI for financial crime use cases will not necessarily be the institutions with the most advanced models. They will be the institutions that reduce the amount of chaos those models are forced to navigate in the first place.

For years, data modernization in banking has largely been associated with cloud migration, centralization initiatives, storage strategies, and master data management programs.

But AI changes the definition of modernization.

Because AI systems do not merely need access to enterprise data. They need interpretable context:

  • Who is connected to whom.
  • What matters.
  • Why it matters.
  • How relationships evolve over time.
  • Which signals carry actual risk significance.

Without that contextual layer, AI spends enormous amounts of effort repeatedly reconstructing meaning from fragmented inputs. Every query becomes its own miniature investigation.

And honestly, this reminds me of something unexpectedly relevant I once heard while visiting Kruger National Park. Rangers had observed certain animals gradually adapting to use the park roads rather than forcing movement through dense bushland. Not because the animals became smarter, but because structured pathways reduced friction and uncertainty.

That analogy has stayed with me because it feels increasingly relevant to enterprise AI. Right now, many banks are essentially asking AI to fight its way through the bushes.

What if instead we gave it the Autobahn?

The Enabler For Superior AI: A Contextual Intelligence Platform

What’s needed is an interpretation layer between fragmented enterprise data and the AI systems operating on top of it. Context that already exists before the model starts reasoning. Relationships already connected. Meaning already established.

Interestingly, this is not a hypothetical idea. Financial crime investigators have already been moving in this direction for years by adopting contextual intelligence platforms

One of the most important shifts contextual intelligence platforms like DataWalk introduced into investigations was not simply speed. It was the ability for investigators to operate directly inside contextual intelligence rather than manually reconstructing it from scratch every time.

That changed the economics of investigations entirely. Instead of spending weeks stitching together fragmented information before meaningful analysis could even begin, investigators could move directly into understanding hidden ownership structures, circular money movements, coordinated fraud activity, and network-level risk patterns.

Now imagine applying that same principle to AI systems. Instead of forcing AI to repeatedly infer context from fragmented enterprise environments, the context itself becomes infrastructure.

The implications are significant. AI hallucinations decrease because the model is no longer compensating for missing connective tissue. Auditability improves because reasoning paths become easier to trace and explain. Operational scalability improves because less compute power is wasted reconstructing meaning over and over again from disconnected sources.

And suddenly the tension between AMLA and the EU AI Act starts looking slightly different.

Because maybe the real challenge was never simply “how do we govern AI?”

Maybe the deeper question is: how do we create enterprise environments where trustworthy AI becomes realistically possible in the first place? Contextual intelligence may hold the key.


Download free ebook
"How DataWalk AI is Transforming Investigative
and Intelligence Analytics


Download the eBook

FAQ

The tension between these regulations stems from a dual pressure: AMLA requires banks to drastically scale up automation to handle surging compliance volumes, while the EU AI Act classifies many of these financial crime applications as medium- or high-risk.
Banks can navigate this by shifting focus from model governance alone to upgrading their underlying data environment. By replacing fragmented data with an organized, contextual interpretation layer, institutions can reduce AI errors and generate the traceable, explainable outcomes that regulators demand.
Most compliance challenges do not stem from a lack of data or a flaw in the AI model itself. Instead, they come from fragmented data environments where information is scattered across disconnected systems with no shared meaning.
When AI is forced to repeatedly reconstruct context, interpret conflicting records, and guess entity relationships, it faces a high risk of producing confident but inaccurate conclusions. Advanced models cannot fix the operational and regulatory risks caused by chaotic data.
Modern AI is highly adept at generating fluent, confident, and professional outputs. The danger arises when a system quietly drifts from reality during data retrieval or reasoning, yet still delivers an answer that looks completely accurate. In low-stakes environments, these errors are manageable. In anti-financial crime operations like Ultimate Beneficial Ownership (UBO) analysis or fraud detection, they create severe operational, legal, and reputational risks.

Instead of forcing AI to fight through unstructured data to infer connections, a contextual infrastructure serves as a pre-built pathway. It establishes relationships, links connected entities, and clarifies risk signals before the AI begins its analysis.

With this framework in place:

  • Hallucinations decrease because the model no longer guesses or compensates for missing data connections.
  • Auditability improves because human investigators and regulators can easily trace and verify the system's reasoning path.
  • Scalability increases because computing power is spent analyzing risk rather than constantly rebuilding data context from scratch.
 

Join the next generation of data-driven investigations:
Discover how your team can turn complexity into clarity fast.

 
Get A Free Demo