KYC Compliance in Denmark: Complete 2026 Guide

KYC compliance in Denmark goes beyond checking an identity document. Businesses must verify customers, identify beneficial owners, assess risk, and monitor activity over time: Identify → Verify → Screen → Assess → Monitor → Record.

In 2026, Denmark's main KYC framework is the Anti-Money Laundering Act, Hvidvaskloven. It requires businesses to assess customer, product, transaction, delivery-channel, and geographic risks, and generally retain KYC records for five years after a relationship or occasional transaction ends. These obligations form the foundation of Denmark AML requirements for covered businesses.

Whether you operate a bank, fintech, payment business, crypto company, accounting firm, or another regulated organisation, understanding KYC Denmark requirements is essential. This guide covers Denmark’s AML rules, due diligence, beneficial ownership, enhanced checks, monitoring, and reporting, including the main denmark aml requirements businesses must address in practice.

What Is KYC Compliance in Denmark?

KYC compliance in Denmark is a risk-based process for verifying customers, identifying beneficial owners, understanding business relationships and assessing money laundering or terrorist financing risks. It combines KYC, KYB, AML screening, CDD and EDD. Businesses must also keep customer information updated, monitor activity, reassess risk and retain compliance records.

In practical terms, kyc compliance denmark requires businesses to understand who their customers are, why they want a particular product or service, who ultimately owns or controls a legal entity, and whether customer activity remains consistent with the expected relationship. These controls support broader Denmark AML requirements and help businesses respond to changing customer and transaction risks.

What Laws Govern KYC in Denmark in 2026?

KYC compliance in Denmark is governed by the Danish AML Act, or Hvidvaskloven. It requires risk-based identity verification, beneficial ownership checks, AML screening, ongoing monitoring and recordkeeping. Businesses must document their risk assessments and maintain controls based on identified risks.

For organisations reviewing KYC Denmark obligations, the Danish AML Act provides the main framework for customer due diligence, enhanced due diligence, suspicious activity investigations and reporting. It also establishes important denmark aml requirements for maintaining written policies, procedures and controls.

Danish Anti-Money Laundering Act

The Danish AML Act sets the core requirements for customer onboarding and monitoring. Sections §7 and §8 cover risk assessments, policies and controls, while §§10, 11 and 14 address KYC, due diligence and identity verification.

Higher-risk customers may require enhanced due diligence under §17, with additional PEP checks under §18. The Act also covers simplified due diligence, third-party reliance, unusual activity investigations, suspicious activity reporting to Hvidvasksekretariatet and recordkeeping under §§21, 22, 25, 26 and 30.

Together, these provisions define many of the practical Denmark AML requirements that businesses must incorporate into their kyc compliance denmark programmes.

EU AML Rules

Danish KYC requirements also sit within the wider EU AML framework. In 2026, existing EU rules continue to cover customer due diligence, beneficial ownership, PEP screening, sanctions and suspicious activity reporting.

Denmark is preparing for the new AML package, with most AMLR requirements applying from 10 July 2027 and AMLD6 generally due for transposition by then. Businesses should follow the Danish AML Act in 2026 while preparing for greater EU harmonisation.

This means businesses should distinguish between current KYC Denmark obligations and future EU requirements rather than treating the 2027 framework as fully applicable during 2026.

Who Regulates KYC and AML Compliance in Denmark?

KYC and AML compliance in Denmark is overseen by several authorities, depending on the business’s sector and regulatory status.

Understanding which regulator applies helps businesses follow the right Denmark KYC requirements, AML rules, reporting obligations and customer due diligence standards. It also helps organisations demonstrate that their kyc compliance denmark controls address the relevant denmark aml requirements for their industry.

Danish Financial Supervisory Authority, Finanstilsynet

Finanstilsynet supervises banks, mortgage lenders, payment and electronic money institutions, investment firms, insurers and other regulated financial entities in Denmark. Its KYC and AML oversight covers risk assessments, customer due diligence, beneficial ownership, PEP and sanctions screening, transaction monitoring, recordkeeping and suspicious activity reporting. 

It also provides guidance on the Danish AML Act and MitID identity verification, while clarifying that digital ID does not replace the wider KYC process. Financial institutions should therefore ensure that their KYC Denmark procedures connect identity verification with risk assessment, screening, monitoring and documentation.

Danish Business Authority, Erhvervsstyrelsen

Erhvervsstyrelsen supervises various non-financial businesses and professions under Denmark’s AML framework, including auditors, accountants, tax advisers, real estate agents, corporate service providers and certain art-market participants.

Its inspections may assess risk assessments, KYC policies, beneficial ownership checks, customer due diligence, unusual activity investigations, suspicious activity reporting and recordkeeping. Strong AML governance helps demonstrate that KYC controls work in practice and that the business meets applicable Denmark AML requirements.

Danish Financial Intelligence Unit, Hvidvasksekretariatet

Hvidvasksekretariatet is Denmark’s Financial Intelligence Unit. It receives and analyses reports of suspected money laundering and terrorist financing, typically submitted through the goAML system.

Effective KYC, AML screening and transaction monitoring help businesses identify suspicious activity, document investigations and report concerns without tipping off customers. These processes are an important part of kyc compliance denmark, because accurate customer information and risk profiles support more effective suspicious activity detection.

Other sector-specific supervisors

Additional Danish authorities supervise AML compliance in specific industries. The Danish Gambling Authority oversees gambling operators, while lawyers conducting covered activities follow the relevant Danish Bar and Law Society or Bar Council framework.

Requirements for CDD, beneficial ownership checks, PEP screening, monitoring and reporting may vary by sector, so businesses should confirm which supervisor applies to their services. This sector-specific approach means that KYC Denmark controls should be tailored to the organisation’s activities, customer base and applicable denmark aml requirements.

When Is KYC Required in Denmark?

Under §10 of the Danish AML Act, businesses must perform customer due diligence when establishing relationships, processing certain occasional transactions, detecting suspicious activity, or questioning customer information. 

KYC compliance in Denmark is an ongoing, risk-based process involving identity verification, beneficial ownership checks, AML screening, and regular data updates. Understanding when KYC is required is central to meeting Denmark AML requirements and maintaining effective KYC in Denmark.

When Establishing a Business Relationship

KYC should generally be completed before a Danish bank, fintech, payment provider, crypto business or other obliged entity starts a customer relationship. This includes verifying identity, identifying beneficial owners, understanding the relationship’s purpose and screening for key AML risks. 

If checks cannot be completed, the business may need to refuse onboarding or service. These onboarding controls form the foundation of KYC compliance in Denmark and help businesses meet applicable Denmark AML requirements from the beginning of the relationship.

When Customer Circumstances Change

A new KYC review may be required when key customer information changes or becomes unreliable, including details about the customer, business activity, representatives, ownership or expected transactions. 

Reviews may also be triggered by sanctions exposure, PEP status, adverse media or unexplained financial activity. Updating customer information in these circumstances supports ongoing KYC in Denmark and helps ensure that the business's risk assessment remains aligned with Denmark AML requirements.

At Appropriate Points During an Existing Relationship

KYC in Denmark continues after onboarding. Businesses should review customer information based on risk, with high-risk customers generally reviewed more often. 

Ongoing checks may include updating identity documents, reconfirming beneficial ownership, rescreening sanctions and PEP lists, reviewing transactions, and comparing actual behaviour with the customer’s expected profile. A structured review programme is an important part of KYC compliance in Denmark because customer risk can change over time.

Certain Occasional Transactions

KYC may also be required for occasional transactions above Danish AML thresholds. Key triggers include transactions of €15,000 or more, money transfers above €1,000, currency exchanges of €500 or more, certain crypto-asset services at €1,000 or more, and gambling stakes or payouts of €2,000 or more. Linked transactions may be combined. Businesses should apply the relevant Denmark AML requirements even where no ongoing business relationship exists.

Whenever There Is Suspicion

Customer due diligence is required whenever money laundering or terrorist financing is suspected, regardless of transaction value. Red flags include unusual transactions, complex ownership, unexplained wealth, high-risk jurisdictions, sanctions concerns and activity without a clear lawful purpose. 

Businesses should investigate and report suspicions to Hvidvasksekretariatet where required. This is a core element of Denmark AML requirements and should be integrated into the organisation's wider KYC compliance in Denmark framework.

When Existing Identity Information Appears Unreliable

Further KYC is required when existing customer information is incomplete, outdated, inconsistent or unreliable. Triggers may include expired documents, conflicting details, beneficial ownership discrepancies or transactions that do not match the customer’s profile. 

The business should update the evidence, reassess the risk, and document the review and decision. Maintaining reliable information is essential for effective KYC in Denmark and supports continued compliance with Denmark AML requirements.

Denmark KYC Compliance Process: Step-by-Step

Follow this practical Denmark KYC compliance process to verify customers, assess risk, meet Danish AML requirements, and maintain accurate customer due diligence records.

From identity verification and beneficial ownership checks to AML screening and ongoing monitoring, each step helps businesses meet KYC requirements in Denmark. Together, these controls create a practical KYC compliance in Denmark framework for banks, fintechs, payment providers, crypto businesses and other obliged entities.

Step 1: Collect customer information

Gather the customer's full name, CPR number or date of birth, contact details and any additional information needed to understand the intended business relationship. For companies, collect the registered name, CVR number or equivalent foreign registration details.

The information collected should reflect the customer's risk profile and the products or services involved. Accurate customer data forms the foundation of KYC compliance in Denmark and supports customer due diligence, AML screening and ongoing monitoring. It also helps businesses apply KYC in Denmark consistently and meet relevant Denmark AML requirements.

Step 2: Verify the customer's identity

Confirm the customer's identity using a reliable and independent source, such as a government-issued identity document, MitID or an approved electronic identification method. Check that the information provided matches the verification source and that documents are valid and authentic.

MitID can support identity verification in Denmark, but it does not replace the full KYC process. Businesses may still need to assess the customer's purpose, conduct sanctions and PEP screening, verify beneficial ownership and apply enhanced due diligence where risk is higher. This distinction is important for KYC compliance in Denmark because identity verification is only one part of the wider Denmark AML requirements.

Step 3: Verify representatives and authorised persons

If someone acts on behalf of the customer, identify and verify that person's identity using reliable and independent information. This applies to company directors, employees, agents, attorneys and anyone operating under a power of attorney.

The business must also confirm that the person is authorised to act for the customer. Documenting both the representative's identity and authority supports Danish AML compliance and helps prevent unauthorised account access or fraudulent activity. It is also a necessary control for businesses implementing KYC in Denmark across corporate and individual customer relationships.

Step 4: Identify and verify beneficial owners

For companies and other legal entities, understand the complete ownership and control structure. Identify the natural persons who ultimately own or control the customer, including individuals who hold more than 25% of shares or voting rights or exercise control through other means.

Verify each beneficial owner's identity using reliable information and compare the findings with relevant company and beneficial ownership records. If discrepancies arise, investigate and address them as part of KYB compliance, customer due diligence and ongoing KYC monitoring. Beneficial ownership verification is a central part of KYC compliance in Denmark and helps businesses satisfy Denmark AML requirements for legal-entity customers.

Step 5: Understand the purpose of the relationship

Establish why the customer wants the product or service, what activity is expected and which countries, transaction types and volumes may be involved. This helps the business create a clear customer profile and apply the Danish AML Act's customer due diligence requirements.

The information collected should support ongoing KYC monitoring in Denmark. If the customer's actual activity later differs significantly from the expected purpose, the business should review the relationship and consider whether additional checks are needed. Understanding the relationship's purpose also helps demonstrate that KYC compliance in Denmark is based on the customer's actual risk rather than a purely administrative checklist.

Step 6: Conduct AML screening

Screen the customer, beneficial owners and relevant connected persons for sanctions, PEP status, watchlists and other risk indicators. AML screening in Denmark should be proportionate to the customer's risk and may include adverse media checks where relevant.

A potential sanctions or PEP match should be investigated rather than treated as an automatic conclusion. The business should document the screening result, resolve false positives and apply enhanced due diligence where the findings indicate increased money laundering or terrorist financing risk. Effective screening supports KYC in Denmark and helps businesses identify risks relevant to Denmark AML requirements.

Step 7: Assess customer risk and apply the appropriate due diligence

Assign a risk level based on customer, geographic, product, delivery-channel and transaction factors. The risk assessment should be documented and reflect the business's wider AML risk assessment under the Danish AML Act.

Apply standard customer due diligence to normal-risk customers and enhanced due diligence where risk is higher. EDD may require additional identity information, deeper beneficial ownership checks, source of funds or wealth evidence and closer ongoing monitoring. A documented, risk-based approach is one of the defining features of KYC compliance in Denmark and ensures that Denmark AML requirements are applied proportionately.

Step 8: Monitor, update and document the relationship

Monitor customer activity to confirm that transactions remain consistent with the customer's known profile, business activities and expected behaviour. Update KYC information when customer details, ownership, PEP status, risk factors or transaction patterns change.

Investigate unusual activity and report suspected money laundering or terrorist financing to Hvidvasksekretariatet through goAML where required. Keep identity records, verification evidence, transaction information and investigation documentation for the applicable Danish KYC recordkeeping period. Continuous monitoring and accurate documentation complete the KYC compliance in Denmark process and help businesses maintain compliance with KYC in Denmark and Denmark AML requirements.

Can Danish Businesses Outsource KYC?

Yes. Danish businesses can outsource parts of KYC and customer due diligence to qualifying third-party providers under §22 of the Danish AML Act, but they retain full legal responsibility for AML compliance and kyc compliance Denmark obligations.

The business remains responsible for risk assessments, customer acceptance, ongoing monitoring, suspicious activity reporting and maintaining access to required records. Providers should offer reliable identity verification, sanctions and PEP screening, beneficial ownership checks, risk scoring, monitoring, audit trails, data security and configurable workflows. 

A well-designed KYC Denmark programme should also ensure that outsourced processes remain aligned with the business's internal policies and Denmark AML requirements.

Common KYC Compliance Mistakes in Denmark

Avoiding common KYC compliance mistakes helps Danish businesses meet AML requirements, strengthen customer due diligence, and reduce financial crime risk. Effective kyc compliance Denmark controls should be documented, risk-based and consistently applied across the customer lifecycle.

From incomplete identity verification and weak beneficial ownership checks to poor PEP screening and outdated customer records, small gaps can create significant compliance issues. Businesses reviewing their KYC Denmark processes should also confirm that their controls reflect current Denmark AML requirements.

Applying identical checks to every customer - Denmark requires a risk-based approach. Apply standard checks to low-risk customers and enhanced due diligence to higher-risk customers, such as those linked to complex structures, high-risk jurisdictions or PEPs. This is a core principle of kyc compliance Denmark and helps businesses apply Denmark AML requirements proportionately.

Relying exclusively on beneficial ownership register information - Registers are a starting point, not a substitute for due diligence. Businesses must verify beneficial owners independently and investigate discrepancies. This is essential for reliable KYC Denmark and compliance with Denmark AML requirements.

Treating a PEP match as an automatic rejection - A PEP match requires enhanced checks, not automatic rejection. Apply senior approval, source of wealth and funds checks, and ongoing monitoring. These controls form part of a risk-based kyc compliance Denmark programme.

Using MitID as a substitute for full CDD - MitID verifies identity but does not replace full CDD. Businesses must still assess purpose, ownership, risk, sanctions, PEP status and ongoing activity. Using MitID correctly is therefore only one part of KYC Denmark and does not satisfy every Denmark AML requirement.

Inconsistent record retention - Poor recordkeeping can make audits and investigations difficult. Use clear retention schedules and automated controls to store required KYC evidence securely and delete it when obligations expire. Strong records support kyc compliance Denmark, demonstrate adherence to Denmark AML requirements and make KYC Denmark reviews more efficient.

What Changes After 2026? Denmark and the New EU AML Framework

Denmark’s KYC rules will become more harmonised under the EU’s new AML framework. Businesses should follow the Danish AML Act in 2026 while preparing for updated due diligence, beneficial ownership, risk assessment, screening, recordkeeping and supervision requirements from July 2027. 

Organisations should continue strengthening kyc compliance Denmark controls while ensuring their KYC Denmark processes remain aligned with current Denmark AML requirements.

Regulation (EU) 2024/1624

Regulation (EU) 2024/1624 (AMLR) will harmonise AML/CFT and KYC requirements across the EU. Most provisions apply from 10 July 2027, so Denmark’s existing AML framework remains the primary KYC regime in 2026. Businesses should therefore avoid treating future AMLR obligations as current Denmark AML requirements while still preparing their kyc compliance Denmark programmes for the transition.

Directive (EU) 2024/1640

Directive (EU) 2024/1640 (AMLD6) will require Denmark to update parts of its AML framework by 10 July 2027. Until then, businesses should follow the current Danish AML Act and monitor changes to supervision, beneficial ownership, CDD and enforcement. Reviewing KYC Denmark procedures early can help businesses maintain effective kyc compliance Denmark controls as Denmark AML requirements evolve.

AMLA

AMLA will improve coordination among EU AML supervisors and directly oversee selected high-risk cross-border financial institutions. For Danish businesses, it may bring more consistent expectations for KYC, screening, monitoring and reporting across Europe. Businesses should consider how these developments may affect their kyc compliance Denmark governance and KYC Denmark oversight.

2026 vs 2027: What Businesses Should Do

In 2026, Danish businesses should comply with the current AML Act, maintain effective KYC/KYB controls, verify beneficial owners, screen customers and monitor relationships. They should also prepare for the EU AML framework taking effect from 10 July 2027 by reviewing risk models, EDD workflows, recordkeeping, technology and staff training. This approach supports current kyc compliance Denmark obligations while preparing KYC Denmark processes for future Denmark AML requirements.

Bottom Line

KYC compliance in Denmark is an ongoing, risk-based process, not a one-time identity check. Businesses should verify customers, identify beneficial owners, conduct sanctions and PEP screening, assess risk, apply customer due diligence (CDD) or enhanced due diligence (EDD), monitor activity, and retain accurate records.

By connecting identity verification, AML screening, risk assessment, and transaction monitoring, businesses can strengthen KYC compliance Denmark, meet the Danish AML Act and current Denmark AML requirements, and prepare for EU AML framework changes taking effect from July 2027.

Binderr Services helps businesses streamline KYC, AML screening, risk assessment, and ongoing compliance workflows in one secure platform, supporting consistent KYC Denmark processes while keeping compliance responsibility with the business.

FAQs About KYC in Denmark