What is Anti-Money Laundering (AML)? A Guide for Accountants

What is Anti-Money Laundering (AML)?

Anti-money laundering (AML) refers to the body of laws, regulations, and procedures designed to prevent criminals from disguising illegally obtained funds as legitimate income. For accountants and finance professionals, AML compliance is not optional — it is a legal requirement, and failure to meet it carries serious professional and criminal consequences.

How Money Laundering Works: The Three Stages

Money laundering typically occurs in three stages:

1. Placement — Illegally obtained cash is introduced into the financial system. This might involve depositing large amounts of cash, purchasing high-value assets, or using cash-intensive businesses to blend dirty money with legitimate revenue.
2. Layering — The money is moved through complex transactions to obscure its origin: international wire transfers, shell companies, cryptocurrency exchanges, and multiple accounts across different institutions.
3. Integration — The laundered money re-enters the legitimate economy appearing to come from a legal source — used to purchase property, invest in a business, or fund a lifestyle that legal income alone could not explain.

Accountants are particularly vulnerable to exploitation in the layering and integration stages — for example, when helping clients structure complex transactions, prepare financial statements, or manage offshore structures.

The UK AML Regulatory Framework

In the UK, AML obligations for accountants are primarily governed by three pieces of legislation:

• Proceeds of Crime Act 2002 (POCA) — The primary UK legislation criminalising money laundering. POCA creates offences of concealing, arranging, or acquiring criminal property, and imposes a duty to report suspicions to the National Crime Agency (NCA) via a Suspicious Activity Report (SAR).
• Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017 (MLR 2017) — Implements the EU's Fourth Anti-Money Laundering Directive into UK law. Sets out the specific obligations of "relevant persons" — including accountants and tax advisers in practice.
• Terrorism Act 2000 — Creates offences relating to terrorist financing and imposes additional reporting requirements.

In Ireland, the equivalent legislation is the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010, as amended, which implements EU AML Directives into Irish law.

EU AML Framework

The EU has strengthened its AML framework through successive directives. The Fourth (4AMLD) introduced risk-based customer due diligence and beneficial ownership registers. The Fifth (5AMLD) extended AML rules to crypto exchanges and required public access to beneficial ownership registers. The Sixth (6AMLD) harmonised predicate offences across member states. Most recently, the EU established AMLA — a new supervisory authority with direct oversight powers over high-risk obliged entities from 2025. While the UK is no longer subject to EU directives post-Brexit, UK AML law remains closely aligned with European standards in practice.

AML Obligations for Accountants in Practice

Under MLR 2017, accountants in practice are classified as "relevant persons" with specific legal obligations:

Customer Due Diligence (CDD)

Before taking on a new client, you must verify their identity and understand the nature of their business. Standard CDD involves verifying identity (name, address, date of birth for individuals; registered name, address, and company number for businesses), identifying beneficial owners (those owning more than 25% of a company), and understanding the purpose and intended nature of the business relationship. Enhanced due diligence (EDD) is required for higher-risk clients, including politically exposed persons (PEPs) and clients from high-risk third countries.

Suspicious Activity Reporting (SARs)

If you know or suspect that a client is involved in money laundering, you must submit a SAR to the NCA via the UK Financial Intelligence Unit (UKFIU). Critically, you must not "tip off" the client that you have made or are considering making a report — doing so is itself a criminal offence under POCA.

Record-Keeping

You must retain CDD records and supporting documents for at least five years after the business relationship ends. This covers copies of identification documents, correspondence, and transaction records.

Staff Training

Firms must ensure all relevant employees receive appropriate AML training: how to identify suspicious activity, internal reporting procedures, and the consequences of non-compliance. Annual training is best practice and the expectation of most supervisory bodies.

Practice-Wide Risk Assessment

Every firm in scope must maintain a written risk assessment identifying the money laundering and terrorist financing risks specific to their client base and services. This must be reviewed and updated regularly — at minimum annually, and whenever there are significant changes to the business.

Money Laundering Reporting Officer (MLRO)

Practices with more than one person must appoint an MLRO (also called Nominated Officer) to receive internal reports of suspicious activity and decide whether to file a SAR with the NCA.

Penalties for Non-Compliance

The consequences of AML non-compliance are severe. Criminal prosecution under POCA can result in up to 14 years' imprisonment for knowingly participating in money laundering. Supervisory bodies can impose unlimited civil penalties for breaches of MLR 2017. Professional bodies — AAT, ACCA, ICAEW — can suspend or revoke membership and licences. And public disciplinary decisions can permanently damage a firm's reputation.

Common High-Risk Services for Accountants

The following services carry elevated money laundering risk and require heightened vigilance: company formation and management, trust and estate administration, managing client money, property transactions where the accountant acts as agent, tax planning involving offshore structures, clients with complex or opaque ownership structures, and cash-intensive businesses.

Frequently Asked Questions

Are all accountants subject to AML regulations?

Not all. MLR 2017 applies to accountants and tax advisers who provide accountancy services as a business — primarily those in practice. If you work as an employee in industry (a corporate finance team, for example), your employer's AML framework applies, but you are not personally a "relevant person" under MLR 2017. Accountants in practice — sole traders and partners in accounting firms — are directly in scope.

What is a Suspicious Activity Report (SAR)?

A SAR is a formal report submitted to the National Crime Agency when you know or suspect someone is involved in money laundering or terrorist financing. In the UK, SARs are submitted via the UKFIU's SAR Online system. Filing a SAR provides a defence against potential prosecution if you continue to act for a client after reporting.

What does "tipping off" mean in AML?

Tipping off occurs when you disclose to a client (or someone connected to them) that a SAR has been or may be filed, in a way that could prejudice any investigation. This is a criminal offence under POCA, regardless of intent. You must never tell a client you have filed a SAR or that they are under investigation.

How often should AML training be completed?

There is no statutory minimum frequency, but best practice — and the expectation of supervisory bodies — is annual AML training for all relevant staff. Training should be updated whenever there are significant regulatory changes. For AAT licensed members, regular AML training is a requirement of maintaining the practice licence.

Which body supervises accountants for AML compliance?

Accountants are supervised by their professional body: AAT members by AAT, ACCA members by ACCA, ICAEW members by ICAEW. Accountants who are not members of a recognised supervisory body are supervised by HMRC for AML purposes.