Anti-Money Laundering (AML) regulations are a critical compliance area for many UK small businesses. Understanding which businesses must comply, the customer due diligence requirements, and how to register for AML supervision is essential to avoid legal penalties and protect your business’s reputation.
| Key AML Facts for Small Businesses | Details |
|---|---|
| Which businesses are covered? | Certain regulated sectors including estate agents, accountants, and financial service providers |
| Customer due diligence (CDD) | Verify customer identity and monitor transactions for suspicious activity |
| AML supervision registration | Register with HMRC or the relevant supervisory authority |
| Penalties for non-compliance | Fines, criminal prosecution, and business licence revocation |
Understanding the AML Legal Framework in the UK
The UK’s Anti-Money Laundering regime is primarily governed by the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (the 'MLRs 2017'), as amended. These regulations implement the EU’s Fourth and Fifth Anti-Money Laundering Directives and set out the legal obligations for regulated businesses to prevent money laundering and terrorist financing.
Businesses that fall within the scope of the MLRs 2017 must comply with customer due diligence (CDD), ongoing monitoring, record-keeping, and reporting suspicious activity to the UK’s Financial Intelligence Unit (FIU) via the National Crime Agency (NCA).
In addition to the MLRs, other relevant legislation includes the Proceeds of Crime Act 2002 (POCA), which criminalises money laundering offences, and the Terrorism Act 2000, which covers terrorist financing.
Which Small Businesses Are Covered by AML Regulations?
Not all small businesses are subject to AML regulations. The MLRs 2017 apply to certain regulated sectors, often referred to as "regulated entities". Common small business types covered include:
- Accountants, tax advisers, and independent legal professionals when undertaking certain activities such as managing client money or buying and selling property
- Estate agents involved in property transactions
- High-value dealers (businesses accepting cash payments of €10,000 or more)
- Trust or company service providers
- Money service businesses including currency exchange and transmission services
- Some financial and credit institutions
If your business operates in one of these sectors, you must comply with AML requirements. If unsure, GOV.UK provides a helpful guide on regulated sectors under AML.
Customer Due Diligence (CDD) Requirements
One of the core AML obligations is to carry out customer due diligence to verify the identity of your clients and assess the risk of money laundering or terrorist financing. This helps prevent your business from being used to facilitate illegal activities.
CDD involves:
- Identifying and verifying a customer’s identity using reliable, independent documents such as passports or driving licences
- Identifying beneficial owners where applicable, for example, the ultimate individual behind a company or trust
- Understanding the purpose and intended nature of the business relationship
- Ongoing monitoring of transactions to detect suspicious or unusual activity
You need to apply CDD when establishing a business relationship, carrying out occasional transactions above certain value thresholds, or when there is suspicion of money laundering or terrorist financing.
Enhanced Due Diligence (EDD)
In higher risk situations, such as dealing with politically exposed persons (PEPs) or transactions involving high-risk countries, you must apply Enhanced Due Diligence. This includes obtaining additional information about the customer and the source of funds, and increased monitoring of the relationship.
Ready to open your business bank account?
Open a Tide business account free and get up to £200 cash — use Tide referral code REFER200 when signing up or click the link below. Takes under 5 minutes, no credit check.
Registering for AML Supervision
If your business is regulated under the MLRs 2017 but is not supervised by an existing AML supervisory body (such as the FCA or SRA), you must register with HM Revenue & Customs (HMRC) for AML supervision. HMRC oversees AML compliance for many small businesses, including accountants, estate agents, and high-value dealers.
To register with HMRC for AML supervision, you will need to:
- Confirm that your business activities fall under the scope of the MLRs 2017
- Submit an application through the HMRC AML supervision portal
- Pay the applicable annual supervision fee (amount varies depending on business size)
- Maintain compliance with AML regulations, including submitting an annual compliance report to HMRC
Failure to register when required is a criminal offence and can result in substantial fines or prosecution. Further information and registration is available on GOV.UK’s AML supervision guidance.
Record-Keeping and Reporting Obligations
Under AML regulations, regulated businesses must keep detailed records of customer identification documents, transaction histories, and any risk assessments undertaken. These records must be retained for at least five years after the end of the business relationship or transaction.
Additionally, businesses are required to report any suspicious activity to the National Crime Agency (NCA) through a Suspicious Activity Report (SAR). This must be done promptly and may be subject to a "no consent" notice which prevents you from proceeding with the transaction until authorised.
Implementing internal policies and training staff on AML compliance is also essential to meet regulatory expectations and reduce risks.
Penalties and Enforcement for Non-Compliance
Non-compliance with AML regulations can have serious consequences for small businesses. Penalties include:
- Criminal prosecution resulting in fines or imprisonment
- Civil penalties such as monetary fines imposed by regulatory bodies
- Reputational damage that may affect customer trust and business opportunities
- Revocation of licences or authorisations required to operate
Enforcement action is increasingly proactive, with regulators such as HMRC and the FCA actively investigating breaches. It is therefore vital to establish robust AML controls and seek professional advice when needed.
- AML regulations apply to specific small business sectors like estate agents and accountants.
- Customer Due Diligence (CDD) is a mandatory process to verify client identities and monitor transactions.
- Businesses must register with HMRC or another supervisory authority for AML supervision if required.
- Keep thorough records and report suspicious activity to the National Crime Agency.
- Non-compliance can lead to heavy fines, criminal charges, and reputational harm.
- Seek professional legal advice to ensure full compliance with AML obligations.
Which small businesses need to comply with AML regulations?
Certain regulated sectors such as accountants, estate agents, high-value dealers, and money service businesses must comply with AML rules. If your business conducts relevant activities under the Money Laundering Regulations 2017, you are likely required to register for AML supervision.
What does customer due diligence involve under AML?
Customer due diligence requires verifying the identity of your customers, understanding the nature of the business relationship, and monitoring transactions for suspicious activity. Enhanced due diligence applies in higher risk cases, such as dealing with politically exposed persons.
How do I register for AML supervision with HMRC?
You can register online with HMRC if your business is subject to AML regulations but not supervised by another body. The process includes submitting an application, paying the fee, and maintaining ongoing compliance. Detailed guidance is available on the GOV.UK website.
Note: This article provides an overview and should not be taken as legal advice. For complex AML compliance issues, always seek professional legal advice.
For related topics, see our articles on Data Protection and GDPR and Business Licences and Permits.
Official Sources
* GOV.UK: Set up a business · * HMRC: Income Tax rates · * HMRC: Corporation Tax · * HMRC: VAT registration