Anti-Money Laundering for UK Estate Agents: The 2026 Compliance Checklist

UK estate agents — both residential and commercial — are supervised for anti-money laundering (AML) compliance by HMRC under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLRs). Failure to comply carries civil penalties, criminal prosecution, and reputational damage.

HMRC's enforcement activity has increased steadily. Civil penalties issued to estate agents for AML failures have reached significant figures across the sector in recent years. The days of treating AML as a box-ticking formality are over.

Who is covered

The MLRs apply to estate agency businesses — defined as businesses that conduct estate agency work under the Estate Agents Act 1979. This includes:

• Residential sales agents
• Lettings agents (where they handle transactions meeting the applicable threshold)
• Commercial property agents acting on sales and lettings

Registration — every estate agency business must be registered with HMRC before carrying out estate agency work. Unregistered businesses are in breach of the MLRs from day one. HMRC publishes a register of supervised businesses.

What the MLRs require

Risk assessment — at business level, you must carry out and document a written risk assessment of your exposure to money laundering and terrorist financing. This must be reviewed regularly and updated when circumstances change.

Policies, controls, and procedures (PCPs) — based on your risk assessment, you must have written policies and procedures covering:

• Customer due diligence (CDD)
• Identification and verification of clients and beneficial owners
• Enhanced due diligence (EDD) for higher-risk relationships
• Ongoing monitoring of business relationships
• Suspicious activity reporting
• Employee training and awareness
• Record-keeping

Customer due diligence — for each client (buyer, seller, landlord, tenant) you must:

• Verify their identity using documents, data, or information from reliable and independent sources
• Identify any beneficial owner (for corporate clients) and verify their identity
• Understand the nature and purpose of the transaction

The standard approach is to collect government-issued photo ID (passport, driving licence) and proof of address (utility bill, bank statement dated within three months). For companies, you need the company details, ultimate beneficial owners, and director information.

Source of funds — HMRC and courts expect agents to understand where a buyer's or investor's purchase funds are coming from. Simply collecting ID without asking about funds is inadequate for higher-risk transactions.

Simplified CDD vs EDD — simplified CDD applies where the transaction and client present low risk. Enhanced due diligence is required where there are higher-risk factors, including:

• Politically Exposed Persons (PEPs) and their close associates
• Clients in high-risk jurisdictions (FATF grey or black-listed countries)
• Complex or unusual transaction structures
• High-value or cash-heavy transactions

Suspicious Activity Reports (SARs) — if you know or suspect a client is involved in money laundering or terrorist financing, you must submit a SAR to the National Crime Agency (NCA) through the NCA's online portal. You should not "tip off" the client that a SAR has been submitted. Acting on a transaction where you have submitted a SAR, without receiving a consent response from the NCA within the required period, is itself an offence.

Training — all staff who handle property transactions must receive AML training proportionate to their role. Training records must be maintained.

Record-keeping — all CDD documentation and supporting records must be retained for at least five years from the end of the business relationship.

Common enforcement findings

HMRC's published enforcement decisions reveal consistent patterns of failure:

• Incomplete or missing business-wide risk assessments
• CDD not carried out before a relationship commences
• No source of funds enquiries on higher-value transactions
• Inadequate training records
• Out-of-date or unwritten policies and procedures

Where AI helps

AI can assist estate agents with:

• Drafting AML policies and procedures — producing a first draft tailored to the size and risk profile of the business, for review by a compliance consultant or solicitor
• Client risk profiling — helping identify red flags in a client profile that may warrant EDD
• SAR drafting — structuring the factual basis of a suspicious activity report clearly and completely
• Training content — generating scenario-based training materials for staff awareness

AI cannot replace a qualified AML compliance officer or a legal review of your firm's policies. But it can reduce the cost and time of getting policies in place and keeping them current.

2026 compliance checklist

• [ ] Registered with HMRC as an estate agency business for AML supervision
• [ ] Written business-wide risk assessment in place and reviewed in the last 12 months
• [ ] Written AML policies, controls, and procedures document maintained and current
• [ ] CDD carried out and documented for every new client before work commences
• [ ] Source of funds enquiries conducted for all sales transactions and significant lettings
• [ ] EDD applied to any PEP, high-risk jurisdiction client, or complex transaction
• [ ] SAR process documented and all relevant staff know how to submit
• [ ] All staff completed AML training; training records maintained
• [ ] CDD documentation retained for at least five years