Anti-money laundering is not just a banking problem. A wide range of everyday UK businesses — estate agents, accountants, solicitors, high-value dealers — are legally required to have AML controls, and “I didn’t know” is not a defence. Getting it wrong risks unlimited fines and, for individuals, prison.
This guide explains what money laundering and AML are, who is legally in scope, the key obligations, and the red flags staff need to recognise.
What money laundering is
Money laundering is the process of making money that comes from crime look legitimate. It is how the proceeds of drugs, fraud, corruption and other crimes are “cleaned” so they can be spent and invested without attracting suspicion. It typically happens in three stages:
- Placement — getting the “dirty” cash into the financial system.
- Layering — moving it through transactions to disguise its origin.
- Integration — bringing it back as apparently legitimate funds.
What anti-money laundering (AML) is
Anti-money laundering is the set of laws, controls and procedures that businesses use to detect, prevent and report money laundering and terrorist financing. The point of AML is to make it hard to launder money through legitimate businesses, and to make sure suspicious activity is spotted and reported.
Who has to comply?
AML duties fall on the “regulated sector” defined by the Money Laundering Regulations 2017. That is far wider than banks, and includes:
- Banks, building societies and other financial and credit businesses
- Accountants, auditors, tax advisers and bookkeepers
- Legal professionals doing certain work
- Estate agents and letting agents (above a rent threshold)
- High-value dealers accepting large cash payments
- Trust and company service providers
- Crypto-asset businesses
If your business is in scope, AML is a legal requirement, not a choice — and it is supervised by a body such as the FCA, HMRC or a professional supervisor.
The law behind AML
Three main pieces of UK law sit behind AML:
- The Proceeds of Crime Act 2002 (POCA) — the principal money laundering offences.
- The Money Laundering Regulations 2017 — the detailed obligations for the regulated sector.
- The Terrorism Act 2000 — terrorist financing.
The key obligations
Businesses in scope must, in proportion to their risk:
- Carry out a risk assessment of where they are exposed to money laundering — a specialised risk assessment for financial crime.
- Do customer due diligence (CDD/KYC) — identify and verify who their customers are, and apply enhanced checks for higher-risk situations.
- Monitor business relationships and transactions on an ongoing basis.
- Appoint a Money Laundering Reporting Officer (MLRO) and train staff.
- Report suspicion — submit a Suspicious Activity Report (SAR) to the National Crime Agency.
- Keep records of due diligence and transactions.
The offences — and why staff matter
Under POCA it is an offence to conceal, arrange or acquire criminal property, to fail to disclose a suspicion when you work in the regulated sector, and to “tip off” a person that a report has been made. These offences can apply to individual employees, not just the business — which is why front-line staff need to recognise and report suspicion rather than assume it is someone else’s job.
Red flags to recognise
- Customers reluctant to provide identity or ownership information
- Unusual payment methods, especially large or structured cash
- Transactions with no clear business or economic rationale
- Funds or parties linked to high-risk jurisdictions
- A deal that does not fit the customer’s known profile
Spotting a red flag does not mean accusing anyone — it means raising it internally so the MLRO can decide whether a SAR is needed.
Further reading
- Gov.uk — Money Laundering Regulations
- National Crime Agency — Money laundering
- Proceeds of Crime Act 2002
Frequently asked questions
What is money laundering?
Money laundering is the process of making money that comes from crime look legitimate, so the proceeds of crimes such as drugs, fraud and corruption can be spent and invested without attracting suspicion. It typically happens in three stages: placement (getting dirty cash into the financial system), layering (moving it through transactions to disguise its origin), and integration (bringing it back as apparently legitimate funds).
What is anti-money laundering (AML)?
Anti-money laundering is the set of laws, controls and procedures that businesses use to detect, prevent and report money laundering and terrorist financing. Its purpose is to make it hard to launder money through legitimate businesses and to ensure suspicious activity is identified and reported to the authorities.
Which businesses have to comply with AML rules?
AML duties fall on the regulated sector under the Money Laundering Regulations 2017, which is far wider than banks. It includes financial and credit businesses; accountants, auditors, tax advisers and bookkeepers; legal professionals doing certain work; estate and letting agents above a threshold; high-value dealers accepting large cash payments; trust and company service providers; and crypto-asset businesses. In-scope firms are supervised by a body such as the FCA or HMRC.
What are the main AML obligations for a business?
In proportion to their risk, in-scope businesses must carry out a money laundering risk assessment; perform customer due diligence (know your customer) with enhanced checks for higher-risk situations; monitor business relationships and transactions; appoint a Money Laundering Reporting Officer and train staff; report suspicion via a Suspicious Activity Report to the National Crime Agency; and keep records of due diligence and transactions.
What are the money laundering offences under POCA?
Under the Proceeds of Crime Act 2002 it is an offence to conceal, arrange or acquire criminal property, to fail to disclose a suspicion when working in the regulated sector, and to tip off a person that a report has been made. These offences can apply to individual employees, not just the business, which is why front-line staff must recognise and report suspicion internally rather than assume it is someone else’s responsibility.
Anti-money laundering training
Our Anti-Money Laundering (AML) Awareness course covers the stages of money laundering, who must comply, the key obligations, the offences, and the red flags staff need to recognise and report.
Related: What is a risk assessment? · UK CPD courses by industry
£9 per course. CPD accredited, 100 % online, verifiable e-certificate on completion. Pay for 2, get 3 — any 3 courses for £18.
Please note: this is a CPD-accredited awareness course and general information, not legal or compliance advice. Businesses in the regulated sector must follow the requirements set by their AML supervisor and their own policies and MLRO, and specific situations should be referred to a qualified compliance professional. It is not an Ofqual-regulated qualification.