KYC Compliance in Austria: Rules and Process for 2026

KYC compliance in Austria goes beyond passport checks. Under the FM-GwG, businesses must verify customers and beneficial owners, understand the relationship’s purpose, assess AML risks and conduct appropriate screening and ongoing monitoring.

Austria's KYC requirements are becoming more risk-based in 2026. Following the April 2026 FATF assessment, regulated firms should strengthen beneficial-owner checks, supervision, audit trails and ongoing risk monitoring.

In this guide, you'll learn which KYC rules apply in Austria, when customer due diligence is required, how to verify individuals and beneficial owners, and how to manage screening, risk assessment, ongoing monitoring and recordkeeping.

KYC Laws and Regulators in Austria in 2026

Austria’s KYC framework combines national AML laws, financial supervision, beneficial-ownership rules and EU standards. These rules cover customer identification, due diligence, sanctions screening, suspicious transaction reporting and ongoing monitoring.

Austria has used the unified FM-GwG framework for its financial market since 2017. The FMA also provides guidance on online identification, customer due diligence, risk assessment, monitoring and suspicious activity reporting.

KYC compliance Austria therefore requires more than collecting an ID; it connects identity verification, beneficial ownership, risk scoring, AML screening and ongoing monitoring. Understanding these controls is also essential for meeting Austria AML requirements across regulated financial activities.

What Changed for Austrian AML Compliance in 2026?

Austria’s AML framework became more sanctions-focused in 2026. From 1 January 2026, company-level risk assessments must consider the risk of failing to implement or evading targeted financial sanctions, including risks linked to customers, countries, products, transactions and new technologies.

The FMA Austria also took responsibility for supervising compliance with applicable national, EU and UN sanctions. This change increases the importance of integrating sanctions considerations into broader AML governance and risk-management processes.

As a result, KYC compliance in Austria increasingly links identity verification, beneficial ownership checks, AML risk assessment and sanctions screening. While these controls remain distinct, accurate customer and ownership data help identify sanctioned individuals, entities and hidden control structures.

For businesses reviewing their KYC Austria processes in 2026, this means sanctions controls should be documented alongside customer due diligence, risk classification and ongoing monitoring. These measures form part of a broader response to Austria AML requirements.

Who Must Perform KYC Checks in Austria?

KYC checks in Austria are mandatory for businesses covered by applicable anti-money laundering laws. The main financial-sector requirements are set out in the FM-GwG and apply to banks, financial institutions, investment firms, insurers, payment providers, crypto-asset service providers and other regulated entities.

Sector-specific AML rules may also cover lawyers, notaries, auditors, tax advisers, real-estate agents, certain traders and management consultants. The exact requirements depend on the business’s sector, activities, customer relationships and exposure to financial-crime risk.

Businesses should therefore assess their obligations under the relevant sector rules rather than assuming that every Austrian company has identical KYC duties. A compliant KYC Austria programme should reflect the entity’s regulated status, products, customers and risk exposure while addressing applicable Austria AML requirements.

Step-by-Step KYC Compliance Process in Austria

Understanding the KYC process in Austria helps businesses meet customer due diligence and AML compliance requirements efficiently.

From identity verification and beneficial ownership checks to risk assessment, screening and ongoing monitoring, each step supports compliant customer onboarding and effective KYC compliance Austria.

Step 1: Collect customer information

Gather the customer's full name, date of birth, address, nationality where relevant, identification details and occupation or business activity. For companies, collect the legal name, registration number, registered office, directors, authorised representatives, ownership structure and beneficial-owner details.

This information supports KYC compliance in Austria by creating a reliable customer profile for identity verification, AML screening and customer risk assessment. Collect only information relevant to the relationship and the customer's risk profile, while maintaining accurate records for ongoing KYC reviews. A complete customer profile also helps demonstrate compliance with Austria AML requirements.

Step 2: Verify the customer's identity

Confirm the information using a valid identity document or another credible and independent source. Austrian businesses may also use approved electronic identification, video identification and other permitted remote onboarding methods where applicable.

Verification must establish that the customer is a real person or legitimate organisation and that the information provided is accurate. Reliable identity verification supports Austrian AML compliance, reduces impersonation risk and provides evidence for CDD and audit requirements. It is a core control in any effective KYC Austria process.

Step 3: Verify representatives and authorised persons

For companies and other legal entities, confirm the identity and authority of directors, representatives, agents or anyone acting on the customer's behalf. Review corporate records, powers of attorney, official registers or other reliable evidence to confirm that the person can represent the customer.

This step is part of KYB and customer due diligence in Austria. Businesses should record both the representative's identity and the basis of their authority, then reassess the information if the company's management, ownership or authorised signatories change. These checks help satisfy Austria AML requirements for understanding who is acting for the customer.

Step 4: Identify and verify beneficial owners

Determine which natural persons ultimately own or control the entity. Review the complete ownership and control structure, including direct and indirect holdings, voting rights and control through other arrangements.

For relevant Austrian entities, use WiEReG records and beneficial-ownership information as part of the verification process. A register extract supports KYC compliance Austria, but it does not replace independent, risk-based verification of the ultimate beneficial owner (UBO).

Beneficial-owner verification is a central part of KYC Austria because it helps businesses identify hidden control, complex ownership and potential sanctions or financial-crime exposure. It also supports the wider Austria AML requirements for customer due diligence and risk assessment.

Step 5: Understand the purpose of the relationship

Establish why the customer wants the product or service and how it is expected to be used. Collect information about the customer’s business or professional activity, anticipated transaction volumes, counterparties and relevant geographic exposure.

This information supports the customer due diligence Austria process and helps determine whether the relationship matches the customer’s stated profile. Clear purpose information also provides a baseline for ongoing KYC monitoring and identifying unusual activity. It allows firms to apply KYC compliance Austria controls in a way that reflects the customer’s actual business relationship.

Step 6: Assess source of funds and source of wealth

Obtain and verify information about where the funds used in the relationship originate. Depending on the customer’s risk profile, this may include evidence of income, business revenue, asset sales, investments or other legitimate sources of funds.

Source of wealth checks examine how the customer accumulated their overall wealth and are generally more detailed in higher-risk cases. These checks form part of KYC compliance Austria, particularly where enhanced due diligence or unusual financial activity is involved. They may also be necessary to meet Austria AML requirements when the customer, transaction or source of funds presents elevated risk.

Step 7: Conduct AML screening and assign a risk level

Screen the customer, beneficial owners and relevant connected persons for sanctions and politically exposed person (PEP) exposure. Where appropriate, review adverse media and other reliable information that may indicate money-laundering, terrorist-financing or sanctions risks.

Assess geography, ownership complexity, products, delivery channels, transaction patterns and customer activity before assigning a risk class. A documented AML risk assessment Austria process helps determine whether standard, simplified or enhanced due diligence is required.

For firms strengthening KYC Austria controls, risk scoring should be documented, explainable and capable of changing when new information appears. This supports KYC compliance Austria while helping demonstrate that Austria AML requirements are being applied through a genuine risk-based approach.

Step 8: Apply appropriate due diligence and monitor continuously

Apply standard, simplified or enhanced due diligence according to the identified risk. Record the onboarding decision, supporting evidence, screening results and rationale in an auditable compliance record.

Ongoing monitoring is an essential part of the KYC process Austria. Refresh customer information when ownership, activity, geography or risk factors change, and investigate transactions that no longer match the customer’s expected profile.

Continuous monitoring ensures that KYC compliance Austria does not end when onboarding is complete. It also helps businesses maintain accurate KYC Austria records, respond to changing sanctions or AML risks and meet Austria AML requirements throughout the customer relationship.

What Happens If KYC Cannot Be Completed?

When KYC or customer due diligence cannot be completed under Austria’s FM-GwG, the obliged entity generally must not process the transaction, establish the relationship or continue it until the issue is resolved. 

This is a core part of kyc compliance austria and reflects the wider austria aml requirements for regulated businesses. The case should be escalated for additional documents, manual review or enhanced due diligence, especially where identity, beneficial ownership, source of funds, sanctions or PEP concerns remain unclear.

If suspicion arises, the business must consider filing a report with Austria’s FIU through goAML. A compliant kyc austria workflow should provide clear outcomes: approve, review, request information, apply EDD, reject or terminate, and consider STR reporting.

KYC Compliance Penalties in Austria

KYC and AML breaches under Austria’s Financial Markets Anti-Money Laundering Act (FM-GwG) can result in significant administrative fines. Certain violations may attract penalties of up to €150,000, while serious, repeated or systematic breaches can reach €5 million or 10% of annual turnover, depending on the applicable provision. These penalties highlight why kyc compliance austria requires documented controls that align with current austria aml requirements.

The consequences of non-compliance extend beyond financial sanctions. Businesses may face regulatory remediation, increased supervision by the Financial Market Authority (FMA), customer onboarding restrictions, operational disruption and reputational damage. For firms operating in sectors covered by kyc austria rules, weak controls can also make it more difficult to demonstrate that customer due diligence was applied consistently.

To reduce these risks, businesses should maintain documented KYC procedures, risk assessments, beneficial ownership checks, AML screening records and a clear audit trail demonstrating that customer due diligence and ongoing monitoring were performed appropriately. A structured kyc austria process can help businesses meet their obligations while supporting broader kyc compliance austria and austria aml requirements.

Austria KYC Compliance in 2026 vs the EU AMLR in 2027

This distinction matters for businesses planning their Austria KYC strategy and broader kyc compliance austria obligations. In 2026, Austrian banks, fintechs, payment providers, crypto-asset service providers and other obliged entities must follow the current framework, including the FM-GwG, WiEReG, FMA guidance and applicable EU sanctions and AML requirements. Understanding these rules is central to meeting austria aml requirements and maintaining effective kyc austria processes.

From 10 July 2027, the EU AML Regulation will apply directly to most covered entities, creating a more harmonised AML framework. Businesses should meet current Austrian KYC requirements while preparing flexible workflows for identity, beneficial-owner, sanctions, PEP, risk and ongoing monitoring checks. A well-designed kyc compliance austria programme can help businesses manage current obligations while preparing for future regulatory changes.

Avoiding rigid, hard-coded onboarding processes will make it easier to adapt to future Austrian and EU AML compliance changes and respond to evolving austria aml requirements.

Bottom Line

Conclude by showing that effective Austrian KYC compliance in 2026 is more than a one-time document check. Businesses must connect identity verification, beneficial ownership checks, AML and sanctions screening, risk assessment, CDD/EDD and ongoing monitoring.

This risk-based approach helps firms meet FM-GwG requirements, respond to changing risks, prepare for the EU AMLR and make compliance faster and easier to audit. It also provides a practical foundation for meeting kyc compliance austria, kyc austria and austria aml requirements in a consistent way.

For a simpler way to manage these requirements, Binderr Services helps businesses streamline KYC, KYB, AML screening, risk assessment and ongoing compliance monitoring in one connected workflow.

FAQs - KYC Compliance in Austria