The Client You Accepted May Not Be the Client You Know

Dutch AML supervision is shifting attention from onboarding paperwork to the changes that happen later.

A familiar client calls the accountancy office late on Friday. An invoice has been paid by another company. The director who usually gives instructions has disappeared from view. A new shareholder is apparently involved.

The work is legitimate, the relationship is longstanding, and nobody wants unnecessary friction. Yet the customer record no longer explains the business sitting in front of the adviser.

That is where continuous monitoring becomes a management decision. Someone needs to establish what changed, whether the explanation fits, and who records the answer.

In a 4 June notice, Bureau Financieel Toezicht reported on AMLA’s consultation about draft guidance for continuous monitoring. The proposed European approach covered general principles, current customer information, and the monitoring of transactions and activities. Risk and proportionality were central. The consultation closed on 3 September 2026.

The Dutch operating duty is already clear. Article 3(2)(d) Wwft requires regulated institutions to monitor business relationships and the transactions conducted within them. Where necessary, that includes examining the source of funds.

The relationship after onboarding

Many firms still treat customer due diligence as an entrance procedure. Identity is verified, the ultimate beneficial owner is recorded, the purpose of the relationship is described, and the engagement begins. Then the documents sit quietly while the business moves on.

A customer can change ownership, activities, representatives, payment routes or geographical exposure without changing its name. Transaction volume can outgrow the original expectation. A local company can begin receiving money from abroad. An employee can start giving instructions without a clear authority trail.

These changes call for a simple but demanding question: does the relationship still fit what the institution knows about the client and the client’s risk profile?

AMLA’s work points towards a common European language for answering that question. The direction is not to check everything with equal intensity. It is to show why the level of attention matched the relationship, the change and the risk at that moment.

That matters particularly for small offices. Proportionality calls for a reasoned method to notice meaningful changes and decide what follows. A stable, low-risk client needs a different rhythm from a relationship with complex ownership, unfamiliar payment routes or a changed business model.

The client file should therefore behave less like an archived intake form and more like a living record. It needs an opening story, but also review points, decisions, evidence and a route for escalation.

Responsibility stays at the firm

Software can screen names, flag jurisdictions and compare transaction patterns. An external specialist can support research. Bureau Financieel Toezicht states that the monitoring duty under Article 3(2)(d) Wwft cannot be outsourced.

That makes governance very concrete. Who owns the customer risk assessment? Who sees a change in the trade register, a different payer or a new representative? Who decides whether the information needs refreshing? What happens when the relationship manager wants to proceed while the explanation remains incomplete?

The weak point is often the space between departments. Finance sees the payment. Client service hears the explanation. Compliance receives an alert. The director assumes someone else has dealt with it.

Each person holds one part of the story, while nobody owns the conclusion.

Bureau Financieel Toezicht’s published decisions show that ongoing monitoring is a visible part of supervision. In 2026, it published two case-specific fines involving failures in monitoring, enhanced due diligence and reporting.

For the Friday client, a reassuring telephone call is rarely enough. The office needs one coherent record that connects the changed ownership, authority, invoice and payment explanation. When the explanation is sound, recording it protects the relationship rather than damaging it.

The market asks questions too

Continuous monitoring reaches beyond businesses directly covered by the Wwft. A small trading company may meet these questions through its bank, accountant, notary, financier or payment provider. When those parties ask who owns the company or why another entity paid, commercial familiarity alone may not settle the matter.

FIU-Nederland’s 2025 overview gives this pressure a concrete setting. It received more than three million unusual-transaction reports and designated 92,000 transactions as suspicious. One analysis concerned 2,000 third-party payments to Dutch businesses, worth €300 million.

The business lesson is narrow and useful. A paid invoice may still need an explanation when the payer differs from the customer. Group financing or a payment by a parent company can be entirely ordinary. The company should nevertheless be able to identify the payer, explain the reason and connect the payment to the underlying supply.

Clear records make that easier. Ownership documents, authorisation trails, invoices and payment explanations should support each other. When they do, a routine question remains routine.

Poor records can create cash pressure long before a regulatory issue appears. A bank may ask questions. A notary may pause a transaction. An adviser may need to reconstruct months of information. Senior time disappears, billing slows and a commercially sound payment waits because the story is scattered across inboxes and memory.

A practical test for Monday morning

The sensible first step is modest. Take a small sample of active relationships and compare today’s reality with the original file. Look at ownership, authorised persons, activities, counterparties and payment behaviour.

Then test retrieval. Could a colleague explain the relationship without depending on one person’s private mailbox, memory or client phone call? Could the firm show who noticed the change, what was assessed, and why the chosen response suited the circumstances?

This is not about treating every variation as a crisis. It is about making sure the business notices the variations that matter and gives someone the authority to deal with them.

The deeper Dutch business lesson concerns responsibility over time. Trust is not weakened by a precise question when circumstances change. Trust is weakened when everyone notices the change and nobody takes ownership of it.

The client accepted two years ago may still be an excellent client. The firm simply needs to know why that remains a reasonable conclusion today.

The data, sourcing, and analysis behind this article were conducted by Paolo Maria Pavan. AI was not used to identify sources, build the factual basis, or produce the analytical judgment contained here. AI was used only as a drafting aid. The final English text was personally reviewed, edited, and approved by Paolo Maria Pavan before publication.

References

• AMLA raadpleegt betrokken partijen over ontwerprichtsnoeren: doorlopende monitoring van zakelijke relaties
• Bureau Financieel Toezicht - Existing Dutch monitoring duty and non-delegable control responsibility
• Bureau Financieel Toezicht - Supervisory enforcement against weak monitoring
• FIU-Nederland - Dutch AML risk signals relevant to relationship monitoring
• Overheid.nl Wetgevingskalender - Transition from Wwft to the European AML framework
• FIU-Nederland - Operational escalation when a transaction cannot proceed normally
• Wettenbank - Wet ter voorkoming van witwassen en financieren van terrorisme
• FIU-Nederland - Dissemination notification FAQ