AML Training Requirements for Solicitors and Law Firms

Anti-money laundering training shows up on almost every list of what regulators expect law firms to get right — and almost every list of what they get wrong. For solicitors in England and Wales and Ireland, AML isn't a once-a-year e-learning module to clear before renewing a practising certificate; it's a recurring, risk-based control that both the SRA and the Law Society of Ireland treat as a core part of firm compliance, and a frequent subject of inspection.

Why AML training for law firms looks different from generic finance training

Generic AML training built for banks or accountancy firms misses most of what actually matters in a law firm context. Solicitors encounter money laundering risk through a specific set of transaction types: high-value residential and commercial conveyancing, where large sums move through client account in a single transaction; private client and probate work, where the source of an estate's wealth may span decades and multiple jurisdictions; and business sales or company formation work, where corporate structures can be used to obscure beneficial ownership. Training that doesn't address these scenarios directly — that stays at the level of generic red flags — leaves fee-earners unable to spot the patterns that actually show up in their files.

This is why risk-based, role-relevant training matters more than blanket completion of a single module. A conveyancing fee-earner needs deep familiarity with source of funds evidence and the red flags specific to property transactions. A private client solicitor needs to understand source of wealth assessment for long-accumulated assets. A firm's MLRO or MLCO needs training that goes well beyond either — covering the firm-wide risk assessment, suspicious activity reporting, and how to escalate concerns raised by fee-earners.

What regulators are actually checking

Both the SRA and the Law Society of Ireland treat AML compliance as a standing supervisory priority, not a periodic exercise. Inspections and thematic reviews tend to probe whether a firm's training is actually tailored to its risk profile — does a firm doing significant conveyancing work have training that reflects conveyancing-specific risk, or has it bought the same generic package regardless of practice mix? Firms that can show training content mapped to their own risk assessment are in a materially stronger position than those relying on a single standardised course completed once a year.

This connects directly to how client money is handled day to day. AML risk and financial control aren't separate concerns in practice — a firm with weak client due diligence is also more exposed to the kind of client account risk covered under the SRA Accounts Rules, since money laundering typically depends on moving funds through legitimate-looking client accounts.

What good AML training actually covers

Effective AML training for a law firm goes well beyond definitions. It needs to give fee-earners practical ability to carry out customer due diligence properly, understand when enhanced due diligence is required and what that looks like in practice, recognise the difference between source of funds and source of wealth and know which evidence is appropriate for each, and understand their firm's specific escalation route when something looks wrong. It should also be refreshed regularly rather than delivered once at induction and never revisited — AML typologies change, and a fee-earner trained three years ago on today's red flags is working from an outdated picture.

Firm-wide risk assessments deserve specific attention in training too. Every firm regulated for AML purposes is required to maintain a written risk assessment covering its client base, geographic exposure, service lines and delivery channels — and training should explain how that risk assessment actually shapes day-to-day due diligence decisions, rather than existing as a document nobody below partner level has read.

Sanctions and AML: related but distinct

AML and sanctions compliance overlap but aren't the same discipline, and training that conflates the two risks leaving gaps in both. AML training is fundamentally about detecting and reporting suspicious activity connected to the proceeds of crime; sanctions compliance is about screening clients and counterparties against constantly-updated designated-persons lists and knowing what to do when a match comes up. A firm that treats sanctions screening as a subsection of its AML training, rather than a distinct process with its own triggers and escalation route, is more likely to miss a sanctions match that wouldn't otherwise raise standard AML red flags.

Building a defensible training programme

A defensible AML training programme for a law firm needs three things: content genuinely tailored to the firm's practice areas and risk profile, a clear record of who has completed what and when, and a refresh cycle that keeps pace with changing typologies and regulatory guidance rather than a fixed once-a-year slot. For firms building or reviewing their CPD and compliance training, AML should sit alongside — not underneath — the firm's other core compliance training, given how directly it bears on regulatory risk.

How often should law firm staff complete AML training?

AML typologies and regulatory expectations change regularly, so effective programmes refresh training at least annually and supplement it with updates when significant new risks or guidance emerge, rather than relying on a single induction session.

Is generic AML training enough for a law firm?

Generic AML training built for other sectors typically doesn't cover the transaction types most relevant to solicitors, such as high-value conveyancing, probate and private client work, or business sales. Risk-based, role-relevant training tailored to a firm's actual practice mix is more defensible and more useful.

Who needs the deepest AML training within a firm?

Fee-earners handling high-risk work — conveyancing, private client, business sales — need practical, scenario-specific training, while the firm's MLRO or MLCO needs broader training covering the firm-wide risk assessment, reporting obligations and escalation handling.

What's the difference between AML training and sanctions training?

AML training focuses on detecting and reporting suspicious activity connected to proceeds of crime. Sanctions training focuses on screening clients and counterparties against designated-persons lists. They overlap but require distinct processes and should not be treated as a single combined module.

AML compliance in a law firm succeeds or fails on whether training actually reflects the firm's real risk — not on whether a module has been technically completed. Firms that invest in role-relevant, regularly refreshed training put themselves in a far stronger position, both for regulatory inspection and for actually catching the transactions that matter.