Money laundering officer costs 2026: What internal, external and hybrid really costs

The costs of a money laundering officer (GwB) in 2026 depend on four variables: the obliged status according to Section 2 of the Money Laundering Act (GwG), the risk profile according to Section 5 of the GwG, the business volume and the chosen form of order. The range ranges from 800 euros per month for an external order from a small goods dealer to 80,000 euros in total annual costs for an internal money laundering officer in a medium-sized financial company, including job share, training, IT and deputy. Anyone planning the costs must also take the indirect costs into account: compliance software, training register, suspicious activity reporting process and reporting obligations to the responsible supervisory authority.

This guide classifies the types of costs, compares the three ordering models (internal, external, hybrid), shows the typical savings and risk items and provides ranges for the most frequently obliged groups (goods dealers, real estate agents, tax advisors, FinTech). In addition, the most important obligations according to Section 7 GwG, BaFin and state supervision and the typical fine traps are explained. The CIVAC Compliance Platform and Officer-as-a-Service is ultimately classified as a hybrid model that avoids the main cost traps, delivers the appointment certificate in five working days and combines workspace plus external orders in one licence. This means that the comparison between the models is not abstract, but rather based on concrete ranges per industry, size and risk profile.

The obligation to appoint a money laundering officer arises from Section 7 of the Money Laundering Act (GwG). The obligation to appoint applies to so-called obligated parties according to Section 2 GwG, i.e. to a long list of companies and professional groups: credit institutions, financial service providers, insurers, tax advisors, lawyers, notaries, real estate agents, goods dealers above certain cash thresholds, gaming providers, trustees and crypto service providers. Different appointment thresholds and different supervisory authorities apply to each of these types of obliged entities.

Within the obliged entity status, the AMLA differentiates once again: The obligation to appoint according to Section 7 Para. 1 GwG generally applies to all obliged entities, but can be made easier by the responsible supervisory authority in individual cases for size reasons. For goods traders it typically applies to cash acceptances of over 10,000 euros per transaction, and for real estate agents it applies to every brokerage transaction with a purchase contract volume. FinTech companies without a banking licence are covered by Section 2 Paragraph 1 No. 6 GwG if they offer payment services, e-money or crypto services.

The order is made in writing. The supervisory authority must be informed of the appointment: for financial companies, BaFin; for non-financial entities, the responsible state authorities (usually the district governments or regional councils). Anyone who fails to place the order or appoints an unqualified person risks an order according to Section 51 GwG and a fine according to Section 56 GwG of up to 150,000 euros as a rule, and in the case of serious or repeated violations up to 5 million euros or 10 percent of the group's turnover. The amount depends on company size, obligor status and repetition factor. In practice, supervisory authorities are increasingly resorting to administrative sanctions because the FATF recommendations require consistent enforcement and the EU Money Laundering Regulation AMLR 2024 sets out a harmonised sanctions practice. The supervisory authority not only checks the formal appointment, but also the actual functionality, the verifiable qualifications of the person and the verifiable reporting practice to management.

The total costs of a money laundering officer are made up of six components. Firstly, the personnel costs or the external fee: for an internal solution, the pro-rata salary, for an external solution, the service provider’s monthly fee. Secondly, the training costs: an initial training course according to Section 7 Paragraph 5 GwG includes 24 to 40 teaching hours with costs of 1,500 to 3,000 euros, an annual refresher 8 to 16 hours with 600 to 1,200 euros.

Third, the IT and software costs. A documented suspicious activity reporting system, a customer identification process (KYC) and a training register are mandatory. Classic AMLA software costs between 200 and 2,000 euros per month, depending on the obliged entity status and scope of functions. Fourthly, the consulting costs: A risk analysis according to Section 5 GwG, an update of the money laundering manual and support during supervisory audits typically cost 2,000 to 8,000 euros per year.

Fifth, the costs of the deputy: According to Section 7 Paragraph 1 Sentence 2 GwG, a deputy must be appointed in addition to the money laundering officer to take over the tasks in his absence. This role is often underestimated and results in additional training costs and a job share of around 5 to 10 percent of a full-time position. Sixth, the opportunity costs: The time that is spent internally on maintaining the money laundering manual, processing suspicious activity reports, the KYC check of new customer relationships and supervisory communication is underestimated in the overall assessment in many companies. An honest calculation extrapolates the number of hours per month using the internal full cost rate and adds this to the direct costs. Only then will the comparison with an external or hybrid solution be reliable and the decision can be made objectively.

An internal money laundering officer typically costs 35,000 to 80,000 euros in total annual costs in medium-sized companies with 50 to 500 employees. The pro-rata salary is 20 to 40 percent of a position and thus between 16,000 and 35,000 euros in personnel costs, plus 10,000 to 20,000 euros for training, software and consulting. In addition, there are 5,000 to 25,000 euros for the deputy, depending on the scope of the business. If you include all the items, you typically end up with 50,000 to 60,000 euros per year.

The internal variant has advantages: proximity to the business, quick decision-making processes, familiarity with customers and processes. But it also has clear weaknesses. Firstly, training the internal money laundering officer at a level that covers current FATF recommendations, trends in suspected cases and EU money laundering packages (AMLR 2024) is often difficult to maintain in the line organisation. Secondly, independence according to Section 7 Paragraph 3 of the GwG is a permanent task when appointed internally: the GwB may not take on any operational tasks that create a conflict of interest.

Thirdly, the representation situation is critical. If the internal GwB is sick, on vacation or changing, the deputy must be able to take over without delay. In practice, the deputy is often only formally named and not adequately trained, which is seen as a structural deficit in the audit. Anyone who orders internally should therefore strictly document the deputyship, training plan and replacement SLA in the order package. A written task matrix, a clear reporting line to management in accordance with Section 7 Paragraph 5 GwG and a quarterly report are the operational building blocks that differentiate between a formally existing order and a truly functional order. Others run compliance like a filing cabinet. We run it like software., even when ordered internally via the CIVAC Workspace.

An external money laundering officer is appointed through a service contract with a specialised provider. In 2026, the fees range from 800 euros per month for small parties with a low risk profile (small goods dealers, individual brokers) to 3,500 euros per month for medium-sized parties (FinTech without a banking licence, tax advisors with complex clients, precious metal dealers). For larger parties (payment service providers, larger crypto providers), the fees are between 4,000 and 8,000 euros per month or an hourly fee.

The typical contract models distinguish between three components. Firstly, the basic fee for the formal appointment, ongoing advice and reporting obligations. Secondly, transaction- or event-related fees: risk analysis updates, processing of suspected cases, support in supervisory audits, preparation of annual reports. Thirdly, training and workshop packages for the obligated party's employees, often as an included volume or at an additional cost.

Compared to the internal solution, external models often save 30 to 50 percent of the costs. You have the additional advantage that the service provider's expertise, training and software are also purchased. Professional liability lies with the service provider, which relieves the company of its own D&O insurance. The most important stumbling block is the SLA: a response within two working days is the industry standard and should be clearly agreed in the contract. CIVAC offers this SLA as standard and supplements it with the workspace, in which the money laundering manual, the training register, the risk analysis and the suspicious transaction report are kept in one system. This reduces the response time in the event of a suspected case from typically three days to a few hours, which keeps the reporting obligation in accordance with Section 43 of the GwG reliable and structurally reduces the risk of fines for late reports.

A hybrid model combines internal operational responsibility with external formal ordering. An internal money laundering coordinator takes over the daily tasks: KYC checks, initial assessment of abnormalities, maintenance of customer files and training of employees. An external money laundering officer carries out the formal function, signs the reports to the supervisory authority, evaluates complex suspected cases and appears in the audit before BaFin or state authorities.

This model is often the most economically attractive solution for medium-sized obliged entities (50 to 500 employees). The costs are typically between 25,000 and 45,000 euros per year, which is 20 to 30 percent less than a purely internal solution. At the same time, the company benefits from the specialization of the external service provider and the speed of reaction of an internal coordinator. The reporting line to management runs parallel, the workspace bundles the artifacts of both roles, and a joint quarterly meeting keeps the task matrix synchronized.

Licence the workspace for your internal representatives, or have our representatives appoint them. In the hybrid model you do both. Your internal coordinator works in the CIVAC Workspace, the external GwB is also active in the same system. The database remains in the EU data centre, which meets the GDPR requirements according to Art. 44 ff. If the business volume is subsequently reduced, the model can be switched to purely external ordering; as it grows, it can be converted into a fully in-house solution with external consulting. This flexibility is rarely included in the classic pure outsourcing contract and makes the hybrid model the variant that adapts to the real course of business and is not tied to rigid contract terms. This also reduces the risk of a costly change of provider because the database remains in your own workspace and is not owned by the service provider.

The cost ranges vary significantly depending on the industry. For goods traders with annual cash acceptances of less than 100,000 euros, the external order in 2026 is 800 to 1,200 euros per month. For jewelry dealers, precious metal dealers and art dealers with higher cash volumes, the fee increases to 1,500 to 2,500 euros per month because the risk analysis is more extensive and supervisory audits are carried out more frequently. In addition, there is training and IT at 3,000 to 6,000 euros per year.

Real estate agents are in the middle segment due to the high transaction volumes and the frequent PEPs (politically exposed persons): 1,500 to 3,000 euros per month external fees plus 4,000 to 8,000 euros per year for training, KYC software and advice. Tax advisors and auditors have special obligations according to Section 261 StGB i. V. with § 2 GwG: Here the external fee is often 2,000 to 3,500 euros per month because complex client structures have to be checked.

FinTech companies without a banking licence are particularly under supervisory pressure from BaFin. External money laundering officers for payment service providers or e-money institutions cost 3,500 to 8,000 euros per month, plus 15,000 to 30,000 euros per year for training, software and periodic reports. Anyone who chooses the internal model in this industry will quickly end up with total annual costs of 100,000 euros plus IT. Crypto service providers according to Section 2 Paragraph 1 No. 16 GwG have additional obligations regarding the travel rule and blockchain analysis, which further increases costs. CIVAC offers specialised workspaces with industry modules for goods traders, real estate agents, tax consultants and FinTech, so that the risk analysis, the money laundering manual and the KYC workflow are industry-ready from day one and do not have to be built from scratch.

The hidden costs of a money laundering officer lie in four areas. Firstly, in updating the money laundering manual. The FATF and the EU Commission publish new risk assessments and guidelines every year, which must be incorporated into the handbook. Anyone who neglects this risks fines in accordance with Section 56 Paragraph 1 No. 17 GwG. The update costs 2,000 to 5,000 euros per year with external advice, and correspondingly more staff hours internally.

Secondly, in the replacement situation. If the money laundering officer is absent and the deputy is not sufficiently qualified, a suspected case may remain unfounded or a report may be made late. The deadline for reporting suspicions in accordance with Section 43 of the GwG is immediate, in practice within 24 hours. Late reports are punished with a fine of up to 100,000 euros and also bring the company to the attention of the supervisory authority. A well-trained deputy with the same tools is therefore not a convenience, but a mandatory investment.

Thirdly, in the supervisory audit. An on-site audit by BaFin or state authorities can cost between three and fifteen person-days of internal commitment, depending on the level of preparation. Anyone who keeps all mandatory documents (risk analysis, money laundering manual, training register, KYC files, suspicious transaction report, reports) in one workspace reduces this burden to two to three days. Fourthly, in the fine cases themselves. According to Section 56 GwG, the sanctions have been significantly tightened in 2024: up to 150,000 euros as a rule, up to 5 million euros or 10 percent of group sales for significant violations. CIVAC reduces these hidden costs through audit templates, automatic training register, suspicion reporting tools and a report generator. The auditor calls, the evidence is ready. This makes the supervisory review a plannable event instead of a stress test.

There are three ways to save money with the money laundering officer without increasing the risk. Firstly, when bundling multiple compliance roles in one workspace. Anyone who manages data protection officers, money laundering officers, whistleblower protection reporting centres and IT security officers in one platform saves licence costs, avoids duplicate documentation and reduces the training effort. The reporting line to management is consolidated, the management review covers all roles in one meeting instead of four.

Secondly, choosing the right ordering model. Anyone who chooses an internal model as a small obligated person regularly pays more than necessary. If you are a large party who orders purely externally, you pay for response times that an internal coordinator can provide more cost-effectively. The right choice is based on the business volume, the risk profile and the existing internal expertise. An honest inventory at the beginning often saves 30,000 to 60,000 euros over three years.

Thirdly, with the software. Generic AMLA software costs 200 to 2,000 euros per month, but is often oversized for small obliged entities and undersized for medium-sized ones. If you use a specialised platform with industry modules and an integrated workspace, you avoid double investment in multiple tools. CIVAC bundles workspace, audit templates, report generator and training register in one licence. Licence the workspace for your internal representatives, or have our representatives order it. The platform covers 25 agent roles, from GwB to DSB to ISB, and can be booked per role or used as a complete package. This means that compliance is not more expensive, but rather structurally cheaper than the sum of the individual solutions, because tools, databases and reporting lines are not duplicated and training content can be shared between the roles. A consolidated management review for all representatives in one meeting per quarter saves additional management time.

If you want to realistically estimate the costs of a money laundering officer, start with four questions. First: Are you an obligated party according to Section 2 of the GwG, and if so, in which category? Secondly: What risk profile does the risk analysis result in according to Section 5 GwG, low, medium or high? Thirdly: How high is your current job share for money laundering prevention, and can it be verified in an audit-proof manner? Fourth: What software, money laundering manual and training register are available? These four answers result in the specific effort and the appropriate ordering model with clear cost information.

CIVAC accompanies the order in three variants. Firstly, as a pure workspace model: you licence the platform for your internal money laundering officer with 490 audit templates, preconfigured appointment certificate, industry-specific money laundering manual, KYC workflow, suspicion reporting tool and training register. Secondly, as a purely external order: CIVAC provides an experienced external GwB with a five working day SLA. Thirdly, as a hybrid model: Internal coordinator and external GwB work in the same workspace, which reduces costs by 20 to 30 percent compared to a purely internal solution.

Turn reading into a mandate. Send a short email to info@civac.de with industry, obligated status, number of employees and question about internal, external or hybrid model. You will receive a written cost analysis with bandwidths and an order suggestion within two working days. If you want to read more beforehand, you can find frequently asked questions about ordering, fines and training obligations on the CIVAC FAQ pages, and the most important key figures on SLA, templates and audit path in the CIVAC Facts section. In the AMLA area, an appointment certificate, signed, filed and verifiable, is often the difference between predictable compliance and a six-figure fine.