AML REQ for Credit Unions
The AML REQ is the Central Bank of Ireland’s annual data return on your firm’s money laundering and terrorist financing risk. Customers, products, jurisdictions, controls.
The return must be submitted through the Central Bank Portal using the prescribed XML schema. Only XML submissions are accepted.
Why it matters:
Statutory: Mandatory under your AML/CFT obligations.
Supervisory: The data directly shapes whether the CBI lines you up for a deep-dive inspection.
Strategic: Feeds into the incoming EU AMLA framework
Visible: Quality and completeness signal the maturity of your AML programme.
What's the scope?
Entities in scope
The AML REQ applies to credit unions regulated by the Central Bank of Ireland. Each credit union must use the sector-specific XSD schema for Credit Unions.
Activities covered
The REQ captures information across customer segments, high-risk customer activity, cash transactions, currency cash exchange, lending, money remittance, payment transactions, remote onboarding and AML/CFT controls.
Reporting dates
Standard reference date: 31 December of the preceding calendar year
First submission deadline: 18 September 2026
Reporting frequency
Annual reporting
File format
XML format only, aligned with the prescribed XSD schema and required XML wrapper. The XML file must be validated before upload to the Central Bank Portal.
Key data areas
The Credit Unions REQ requires information across:
Physical presence and branch numbers
Statement of compliance
Customer segments and customer risk exposure
High-risk customer activity
Cash deposits, withdrawals and high-value cash activity
Currency cash exchange
Lending and loan repayments
Money remittance activity where acting as agent of money remitters
Payment accounts and payment transactions
Remote onboarding
BWRA, risk appetite and AML/CFT controls
Policies, procedures, governance, audit and training
Customer due diligence and periodic review backlogs
Sanctions screening and transaction monitoring
Residence and establishment
Beneficial owners
Politically exposed persons
Geography of funds flow
Reporting considerations to keep in mind
All questions are mandatory, even where a data point is not applicable
Non-applicable fields must use the prescribed default values, such as 0, N/A, 2000-01-01 or the required default enumeration
All values should be reported in euro unit value
Customer risk ratings may be based on the rating as at the reference date, even if the rating changed during the year
For the first REQ return, firms are not expected to retrospectively source certain customer segment or cash differentiation data where it was not captured
XML submissions must follow the required table structures and strict table ordering
Incorrect XML structure or table order may result in rejection
The file name must follow the required format: CXXXXX_YYYYMMDD_A07.xml
Firms must complete both the “Finalise” and “Sign-Off” steps in the Portal
Material issues should still be raised through normal supervisory channels, not solely through the REQ

So, what do you need to do?
There are no shortcuts, here is what the CBI requires end-to-end.
Download and review the REQ guidance pack
Download and review the sector-specific REQ pack, including the guidance notes, XML schema and reference files, to understand the reporting requirements in full.
Prepare and map your reporting data
Align internal AML/CFT, customer, product and transaction data to the required REQ fields. Every field is mandatory & has a strict format.
Validate against the XSD schema
Validate the XML file against the Central Bank’s schema and formatting rules to identify structural or mandatory field errors before submission. Excel won’t fly. XML schema only.
Obtain internal sign-off
Complete internal review and approval processes before submission (typically MLRO and board-level).
Upload the return via the Central Bank Portal before 16 September 2026
Submit the validated XML return through the Central Bank Portal and complete the required finalisation and sign-off steps.
Maintain an audit trail
Retain supporting documentation, validation records and reporting evidence to support audit and regulatory review requirements. The CBI will ask.