Ireland launches 30-point action plan against money laundering

What happened

On 18 June 2026, the Government of Ireland launched its National Risk Assessment on Money Laundering, Terrorist Financing and Proliferation Financing, alongside a new 30-Point Action Plan. The Tanaiste and Minister for Finance Simon Harris and the Minister for Justice Jim O’Callaghan led the launch. The Department of Finance is the primary source.

The risk assessment identifies threats spanning sophisticated fraud, the misuse of crypto-assets, emerging technological risks, terrorist financing (TF), and vulnerabilities tied to global financial networks. Anti-money laundering (AML) and proliferation financing (PF) sit at the centre of the framework.

The 30 measures fall under five headings: protecting people, supporting law enforcement, tackling emerging threats, strengthening oversight, and improving cooperation. They include enhanced intelligence-sharing across departments and law enforcement. They also raise scrutiny of crypto-asset providers, gambling operators, and corporate ownership structures.

Two measures carry concrete deadlines. The Gambling Regulatory Authority of Ireland must establish an industry standard for accepting crypto-related activities as a source of funds, slated for the second quarter of 2027. A separate gambling measure introduces a “closed loop” system, requiring winnings to return to the same account the funds were deposited from.

Why it matters

This reads as a coordinated national posture, not a single rule change. The framing is analysis, not assertion: by pairing a fresh risk assessment with a numbered action plan, Ireland signals where its supervisory attention will land over the next two years. Crypto source-of-funds verification, gambling flows, and beneficial ownership are named explicitly.

The crypto source-of-funds standard is the measure to watch. It pushes the verification burden onto firms that accept crypto as a source of funds, and it hands the gambling regulator a role in setting that bar. That crosses a sector boundary. A gambling supervisor shaping crypto due diligence expectations is a signal worth tracking for any firm that touches both.

The closed-loop requirement attacks a familiar laundering vector: depositing dirty funds, gambling lightly, then withdrawing to a clean account. Forcing winnings back to the originating account removes that exit. It is a structural control, not a monitoring tweak, so it changes how payment rails must be built.

Practitioner angle

Irish-regulated firms and groups with Irish entities should map the 30-point plan against their existing controls now, before the standards harden.

• Pull the action plan and tag each of the 30 measures to an owner and an existing control. Flag the gaps, especially in crypto source-of-funds verification and corporate-ownership scrutiny.
• Crypto-asset providers and gambling operators: treat the Q2 2027 source-of-funds standard as a design deadline. Start specifying how you will perform due diligence and verify the legitimacy of crypto-related funds.
• Gambling operators: assess your payment architecture against the closed-loop requirement. Confirm you can bind a withdrawal to the originating deposit account.
• Anyone with Irish corporate structures should re-check beneficial ownership records against the increased scrutiny the plan promises.

The single most important action: assign an owner to walk the 30 measures against your control framework this quarter, so the Q2 2027 crypto source-of-funds standard finds your verification process already designed rather than retrofitted.