AML compliance for estate agents goes far beyond an identity check. Estate agents need to understand who they are dealing with, where funds have come from, what risks are present and what further investigation those risks require.
That can include Customer Due Diligence (CDD), identity verification, Source of Funds, Source of Wealth, PEP and sanctions screening, customer and transaction risk assessment, Enhanced Due Diligence (EDD) and ongoing monitoring. Crucially, estate agents also need to be able to evidence what they have done and why.
That’s why there is an important difference between AML software and a fully managed AML compliance service. Software gives estate agents tools. A fully managed service does the work for them.
In this guide, we look at what AML checks for estate agents actually involve, what HMRC expects, where the workload really sits and why simply buying an AML or digital ID app doesn’t necessarily make an estate agency compliant.
Jump to the following sections:
What are AML checks for estate agents?
What does HMRC expect from estate agents?
What does a complete AML check involve?
What does this look like in a real AML case?
Do AML checks need to be completed for lettings?
Why using ID apps to complete a check isn’t enough
What AML compliance requirements sit outside individual customer checks?
The problem with partial AML compliance
Can estate agents outsource AML compliance?
Do estate agents lose control when they outsource AML compliance?
What does fully managed AML compliance look like in practice?
Why a fully managed AML service matters for estate agents
What should estate agents look for in an AML provider?
Frequently asked questions about AML checks for estate agents
There are two regulations that sit behind estate agent AML obligations. The Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017 set out what you must do, and the Proceeds of Crime Act 2002 makes it a criminal offence to assist money laundering, even unwittingly. HMRC is the supervisory authority for both estate agency businesses and letting agency businesses, and it has the power to inspect, fine, and publicly name firms that fall short.
The scale of the problem explains why the rules are taken so seriously. The figures below are drawn from official and government sources.
|
Figure |
What it refers to |
Source |
|
Hundreds of billions of pounds |
The realistic possible scale of money laundering affecting the UK each year |
National Crime Agency |
|
Up to £10 billion |
Estimated illicit money flowing through UK property each year |
National Risk Assessment 2025 |
|
170 penalties, totalling £835,842 |
Fines issued to estate agency businesses in a single six month HMRC reporting period (April to September 2025) |
HMRC |
|
194 agents, around £1.09 million |
Fines issued to property agents in the previous reporting period (October 2024 to March 2025) |
HMRC |
|
Most penalised sector |
Estate agencies were the single largest group fined in the latest HMRC enforcement round |
HMRC |
The A couple of points stand out from this. The first is that estate agents are not a side note in money laundering enforcement. They are repeatedly the most fined sector under the Money Laundering Regulations. The second is that the most common reason for a fine is not some elaborate criminal case. It is simply trading without being registered for AML supervision, or failing to keep controls up to date. In other words, most of these penalties are avoidable.
There is also a reputational dimension. Beyond the financial penalty, HMRC publishes the names of non compliant businesses, and the 2025 National Risk Assessment continues to flag the property sector as high risk, with both residential and commercial sales and lettings exposed.
Anti-money laundering checks help estate agents understand who they are dealing with, where money involved in a property transaction has come from and whether anything about the customer or transaction presents a potential money laundering risk.
Identity verification is an important part of that process, but it is only one part. Customer Due Diligence, often referred to as CDD or KYC, is broader than simply proving somebody’s identity. HMRC describes it as the checks businesses undertake on customers and, where applicable, beneficial owners, with the level of due diligence determined by the risks involved.
A compliant AML process therefore needs to consider the customer, the transaction and the risks surrounding both. Depending on the circumstances, that can include:
Customer Due Diligence (CDD) and identity verification
PEP and sanctions screening
Source of Funds
Source of Wealth
customer and transaction risk assessment
Giftors and other third-party funders
complex ownership or company structures
overseas customers and funds
Enhanced Due Diligence (EDD)
ongoing monitoring
suspicious activity and escalation
clear evidence of the decisions made
complete, audit-ready records
The important word here is risk. AML compliance isn’t simply about collecting documents; it is about understanding the risks presented by a customer and transaction, determining what action those risks require and being able to demonstrate what was done as a result.
Source: HMRC, Anti-money laundering guidance for supervised businesses – Customer Due Diligence, July 2026.
Estate agency businesses are supervised by HMRC for anti-money laundering compliance and must meet their obligations under the Money Laundering Regulations. Those requirements have continued to evolve.
HMRC’s September 2025 guidance introduced 34 specific risk indicators that estate agents needed to consider. Its further guidance update in July 2026 added five new risks alongside six operational changes and seven clarifications. That means there are now 39 risks that estate agents need to consider as part of their AML approach.
But the significance of HMRC’s latest guidance goes beyond the number of risks. It reinforces the need for estate agencies to demonstrate that their AML framework works in practice.
It’s not enough to have a Business-Wide Risk Assessment sitting in a folder, Policies, Controls and Procedures that aren’t consistently followed, or an AML app producing a green tick. An estate agency’s Business-Wide Risk Assessment should inform its Policies, Controls and Procedures; those policies should inform how its people are trained and how AML is carried out; and that should be reflected in the decisions made on every individual case.
If HMRC asks to see a file, the estate agency needs to be able to demonstrate what risks were considered, what was identified, what further investigation took place and why the eventual decision was made.
That’s the difference between doing an AML check and being able to prove AML compliance.
HMRC’s current guidance states that estate agency businesses must carry out their own risk assessment covering money laundering, terrorist financing and proliferation financing and take HMRC’s sector risk assessment into account. In other words, AML needs to be risk based, business wide and evidenced.
Source: HMRC, Risk Assessment of Estate Agent Businesses and Guidance for all sectors: Risk Assessment, July 2026.
Every case is different because AML is risk based, but a complete estate agent AML process will typically involve several important stages.
Estate agents need to establish who their customer is and verify their identity using reliable information or evidence. Digital identity verification can make this considerably faster and easier, but completing a digital ID check doesn’t mean the AML process is finished. It’s the beginning.
Customers need to be screened appropriately against relevant sanctions lists and checked to identify Politically Exposed Persons (PEPs). A match or elevated risk doesn’t necessarily mean the transaction cannot proceed; it means the appropriate risk assessment and, where required, Enhanced Due Diligence needs to take place.
For buyers, understanding Source of Funds means establishing where the money being used for the property transaction actually came from. This is different from simply obtaining proof that the money exists.
A bank statement might demonstrate that £100,000 is sitting in an account, but it doesn’t necessarily explain how the customer obtained that £100,000. Was it inheritance, savings, the sale of another property, investments, business income or a gift? Understanding and evidencing that story is a fundamental part of AML.
HMRC’s latest estate agency guidance states that Source of Funds must be scrutinised during property transactions as part of ongoing monitoring and identifies it as a key money laundering risk indicator.
Source of Wealth goes further. Rather than looking only at the money being used for the transaction, it considers how the customer accumulated their overall wealth.
Depending on the risks presented by the case, this can require considerably more investigation than simply requesting another document. HMRC’s July 2026 guidance makes clear that verifying Source of Funds and Source of Wealth is required when undertaking Enhanced Due Diligence and may also be necessary as part of standard Customer Due Diligence or ongoing monitoring.
The information gathered needs to be considered against the relevant risks. That means identifying whether anything about the customer, transaction, funding, geography, ownership structure or behaviour increases the risk of money laundering and, critically, evidencing that assessment.
HMRC’s estate agency risk assessment identifies a wide range of circumstances that can increase risk, including unusual funding arrangements, unexpected changes to transactions, third-party payments and links with higher-risk jurisdictions.
Where higher risks are identified, Enhanced Due Diligence may be required. HMRC describes EDD as an increased level of due diligence for situations presenting a higher risk, requiring additional measures to understand and manage those risks.
This is one of the areas where basic AML software can leave significant work with the estate agent. Identifying a risk is one thing; investigating it properly, gathering the necessary evidence, understanding the circumstances, deciding what action is required and documenting the outcome is another.
AML isn’t necessarily finished when the initial check is completed. HMRC requires businesses to continue monitoring a business relationship for its duration, and property transactions can change significantly over time.
Funding can change, new parties can become involved, a transaction can take longer than expected, information provided at the start may no longer be current and new risks can emerge. Compliance therefore requires ongoing monitoring rather than treating AML as a one-off check at the start of a transaction.
Finally, estate agents need evidence. If HMRC reviews a case, the question isn’t simply “Was an AML check completed?” It is whether the estate agency can demonstrate what was checked, what risks were identified, what was done about them and why the decision was made.
That requires a clear, complete and defensible audit trail.
Sources: HMRC, Estate Agent Business Guidance; Source of Funds & Source of Wealth; Enhanced Due Diligence; and Ongoing Monitoring guidance, July 2026.
Source of Funds and proof of funds are not the same thing.
This is one of the most important distinctions in property AML. Proof of funds shows that the money exists. Source of Funds explains where that money came from.
Seeing £250,000 in a bank account doesn’t explain its origin. Understanding that the £250,000 came from the documented sale of another property, accumulated savings or an inheritance starts to build the picture required for Source of Funds.
Where money comes from somebody else, such as a gifted deposit, the risk doesn’t disappear because the money isn’t the buyer’s. HMRC specifically identifies unusual third-party involvement and cash gifts as factors that can increase money laundering risk, so the people providing the money, where the funds came from and the wider circumstances may need to be understood and evidenced.
This is why Source of Funds can become one of the most time-consuming elements of AML for estate agents. It isn’t simply document collection; it requires investigation, judgement and, where information doesn’t add up, further questions.
Consider a buyer purchasing a property using a combination of mortgage finance, savings and a substantial gifted deposit from a family member.
An ID app can verify the buyer’s identity and may also undertake PEP and sanctions screening, but that isn’t necessarily the end of the AML work. There are a number of further questions that may need to be answered:
Where did the buyer’s savings come from?
Does the financial information provided support that explanation?
Who is providing the gifted deposit and what is their relationship to the buyer?
Where did the giftor obtain those funds?
Does anything about the funding, people involved or transaction present an additional risk?
Is Enhanced Due Diligence required?
Is further evidence needed?
Who makes and records those decisions?
This illustrates where the AML workload really sits. Technology can perform important checks, but when the information becomes more complex, somebody still has to review it, understand it, ask the next question, investigate where necessary and record why the case can proceed.
That is the work a fully managed AML compliance service is designed to take away from estate agents.
AML is most often associated with sales, but it reaches into lettings too, and the rules here cause a lot of confusion. A few points are worth knowing.
Full AML checks become a requirement for letting agency work once the monthly rent reaches the equivalent of €10,000 or more, at any point during the term. The threshold is set in euros in the regulations themselves, which is why the figure looks unusual for a UK rule. In sterling terms it works out at roughly £8,500 a month, although the exact equivalent moves with the exchange rate. That figure defines regulated letting agency work under the Money Laundering Regulations 2017. If you operate in a market where lettings could realistically reach that level, it is worth planning for it rather than waiting for a high value let to land on your desk while unregistered.
Two further points often catch letting agents out. First, since May 2025, estate and letting agents are required to carry out sanctions checks on all clients, regardless of the rent level. Second, Right to Rent and AML are separate legal frameworks with different purposes. A Right to Rent check confirms a person's immigration status. It does not satisfy AML requirements, and vice versa. Large upfront rental payments, for example a tenant offering to pay many months in advance, are also a recognised money laundering warning sign and should prompt source of funds questions.
Digital identity technology can be extremely valuable. It can verify identity documents, undertake biometric checks and screen data quickly and accurately, and Coadjute itself uses advanced technology and AI throughout its compliance process.
But technology is there to enable the service. It isn’t the service itself.
An ID result, risk score or red flag still leaves the question of what happens next. Estate agents need to consider who will investigate the risk, chase additional evidence, review Source of Funds, establish Source of Wealth where required, handle Enhanced Due Diligence, follow up missing information, investigate discrepancies and document the rationale behind the eventual decision.
There is also the wider compliance framework to consider. Individual checks need to connect with the estate agency’s Business-Wide Risk Assessment, Policies, Controls and Procedures and the way the business actually operates.
If most of that work still falls to the estate agent, the compliance hasn’t really been outsourced. The estate agent has been given technology to help them do the work themselves.
That’s a fundamentally different model from a fully managed service.
AML compliance is bigger than an individual customer check. Estate agencies also need the governance and compliance framework surrounding those checks, including:
a current Business-Wide Risk Assessment (BWRA)
appropriate Policies, Controls and Procedures (PCPs)
clearly defined MLRO or nominated officer responsibilities
appropriate AML training
consistent processes across branches and teams
management information and oversight
appropriate escalation and suspicious activity procedures
record keeping
evidence that the framework is actually being followed
This matters because HMRC isn’t simply assessing whether an estate agency can produce an AML report for a particular customer. It can look at whether the whole compliance framework works.
An estate agency’s business-wide risks should inform its policies, its policies should inform its processes and training, those processes should be reflected in individual cases, and its records should allow the business to demonstrate that complete chain.
HMRC’s July 2026 guidance specifically connects a business’s risk assessment with the Policies, Controls and Procedures it puts in place to manage and mitigate those risks.
Source: HMRC, Guidance for all sectors: Risk Assessment, July 2026.
Most estate agents aren’t deliberately ignoring AML. The challenge is that the requirements have become increasingly complex while agents are trying to run busy branches, win instructions, conduct viewings, negotiate offers, manage vendors and progress transactions.
That’s why partial compliance can happen surprisingly easily. An identity check gets completed, but Source of Funds isn’t fully investigated. A risk gets flagged, but nobody records what happened next. Different branches follow slightly different processes. The BWRA says one thing while the day-to-day process says another. A digital tool produces a risk score, but responsibility for understanding and acting on that risk still sits with an already busy estate agent.
Every individual piece might look reasonable, but together they can leave gaps. And when an estate agency needs to demonstrate its compliance, those gaps matter.
Yes.
Many generic ID App/KYC providers give estate agents technology to make elements of the process easier, but the estate agent still owns much of the work. Coadjute takes a different approach.
Coadjute is a fully managed AML compliance and risk management service designed especially for estate agents. We bring together specialist compliance people, expertise, managed processes, AI and technology to undertake AML compliance on behalf of estate agents. Technology helps us deliver that service efficiently and at scale, but technology isn’t the product. The fully managed service is the product.
Coadjute manages the entire AML process, including:
Customer Due Diligence and identity verification
PEP and sanctions screening
Source of Funds and Source of Wealth
customer and transaction risk assessment
Enhanced Due Diligence
Giftors and third-party funding
companies, trusts and international cases
complex case investigation
ongoing monitoring
customer chasing and follow-up
evidence gathering
audit-ready reporting
governance and compliance support
Importantly, Coadjute also does the work around the work. That means chasing buyers and sellers, sending reminders and nudges, identifying missing information, following up, investigating discrepancies and escalating cases when additional compliance expertise is required.
Because often, it isn’t the initial AML check that takes the time. It’s everything that comes afterwards.
Not at all. A fully managed AML compliance service should remove work from estate agents without removing visibility from the estate agency.
Estate agents still have a clear view of their AML activity, including which checks are complete, which are still progressing, what information is outstanding and whether anything requires attention. MLROs and management teams also need the confidence that checks are progressing properly, risks are being addressed and nothing is being missed.
That’s why Coadjute combines a fully managed service with complete visibility. Estate agents can see the status of each case through the Coadjute platform, including progress, activity and anything still outstanding, while the compliance work itself is handled by Coadjute’s technology and UK-based compliance specialists.
Once a case is complete, the audit-ready report does more than simply confirm that an AML check has been completed. It evidences how compliance was achieved, including the risks considered, evidence reviewed, any Source of Funds or Source of Wealth assessment, whether Enhanced Due Diligence was required, the actions taken and the audit trail behind those decisions.
This means estate agents can outsource the workload without becoming disconnected from their compliance. Coadjute does the work, while estate agents remain informed and in control.
For estate agents, it will feel remarkably simple.
The estate agent raises the check and the buyer or seller is guided through the information they need to provide. Coadjute’s technology, AI and UK-based compliance specialists then manage the AML process, including the initial checks as well as the chasing, assessment, investigation, follow-up and Enhanced Due Diligence required to bring the case through to completion.
If information is missing, Coadjute chases it. If something doesn’t add up, Coadjute investigates it. If additional evidence is required, Coadjute asks for it, and if a case becomes complex, Coadjute’s compliance specialists manage it.
Throughout the process, the estate agent can see what’s happening at every step. At the end, the estate agency has a clear, structured and audit-ready compliance record showing how the case was assessed and how the decision was reached.
Because Coadjute AML reports can also be securely shared with conveyancers, the work completed earlier in the transaction can help reduce unnecessary repetition further down the chain.
That is the difference between software and a fully managed service. Software gives estate agents tools that only complete part of the check, the rest of the compliance framework still needs to be completed by the agent. A fully managed service does the work for them.
Estate agents didn’t become estate agents because they wanted to investigate Source of Wealth, chase bank statements or interpret and assess AML risks. Their expertise is in winning instructions, building relationships, negotiating, progressing transactions, looking after customers and getting people moved.
AML is nevertheless an important legal responsibility, and one that has become increasingly specialist, complex and time-consuming. But the future shouldn’t be about asking estate agents to do more themselves with technology; it should be about enabling them to outsource specialist work to experts who are supported by technology.
That’s the principle behind Coadjute. Rather than giving estate agents another platform to operate and another process to manage, Coadjute becomes an extension of their compliance operation. Our specialists do the work behind the scenes, while estate agents remain informed and fully in control.
So the question for an estate agency is no longer simply: “Which AML software should we use?” A better question is: “How much of AML should estate agents really be managing themselves?”
With a fully managed service, the answer is very little.
When reviewing AML providers, estate agents shouldn’t just compare identity technology or the speed of an initial check. They should understand exactly how much of the overall compliance process the provider will actually manage.
Some useful questions to ask include:
Who manages Source of Funds and Source of Wealth?
Who handles Enhanced Due Diligence?
Who investigates complex cases and discrepancies?
Who chases buyers and sellers and follows up missing information?
Who keeps the case moving?
Who supports the Business-Wide Risk Assessment and PCPs?
Who helps train the team?
Who gives the MLRO visibility across the business?
What happens when a risk or exception is identified?
If HMRC asks the estate agency to demonstrate its compliance, what evidence can the provider produce?
Those questions reveal very quickly whether an estate agent is buying an AML tool or a fully managed AML compliance service.
Technology should make expertise easier to access, not give estate agents more work
Technology and AI have an important role in the future of AML compliance, and Coadjute uses both extensively.
Our AI assistant, Clara, supports the compliance process by helping to identify missing information, guiding consumers through what they need to provide and helping cases keep moving. Automation can chase, prompt and nudge, technology can make information easier to analyse, and the Coadjute platform gives estate agents visibility across every case.
But there are still areas where specialist human judgement matters. That’s why Coadjute combines technology with UK-based compliance expertise. The aim isn’t to remove people from compliance; it’s to use technology to make specialist compliance more efficient, more consistent and easier for estate agents to access.
Technology enables the service. Our people and expertise make it a fully managed service.
There is another important difference between buying software and using a fully managed service: the relationship.
Coadjute doesn’t simply onboard an estate agency onto a platform and leave its people to get on with it. We become an extension of the estate agency’s compliance operation, supporting implementation, helping teams understand how the service works, keeping clients informed of regulatory change and providing ongoing compliance guidance.
As AML requirements continue to evolve, estate agents need more than software updates. They need to understand what has changed, what it means for their business and what they need to do next.
Coadjute’s role is therefore not simply to complete AML cases. It is to help estate agencies operate confidently within an increasingly demanding compliance environment. Outsourcing the work doesn’t mean outsourcing the relationship or giving up visibility; it means giving estate agents a specialist partner that does more of the work for them.
A: Yes. Estate agency businesses fall within the UK’s anti-money laundering regime and must comply with the applicable Money Laundering Regulations and HMRC guidance. That includes carrying out appropriate Customer Due Diligence, assessing risk, ongoing monitoring, keeping records and maintaining the wider controls required within the business.
A: AML checks can include identity verification, Customer Due Diligence, PEP and sanctions screening, Source of Funds, Source of Wealth where appropriate, customer and transaction risk assessment, Enhanced Due Diligence and ongoing monitoring. The exact level of investigation depends on the risks presented by the customer and transaction.
A: No. Identity verification is one component of AML. Full AML compliance also involves understanding and assessing risk, Source of Funds, potentially Source of Wealth, Enhanced Due Diligence, ongoing monitoring, record keeping and appropriate governance.
A: No. Proof of funds demonstrates that money is available. Source of Funds establishes where the money being used for the transaction came from and whether its origin is consistent with what is known about the customer.
A: Not necessarily. Digital ID apps can automate important elements such as identity verification, biometric checks and screening, but completing those checks doesn’t necessarily complete the wider AML process.
Somebody still needs to assess the information, investigate risks, review Source of Funds, chase missing evidence, undertake Enhanced Due Diligence where required and evidence the decisions made. A fully managed AML service differs because the specialist provider does that work rather than simply supplying estate agents with technology to do it themselves.
A: Enhanced Due Diligence, or EDD, is an increased level of due diligence required where higher money laundering risks are present. It can involve additional identity and verification measures, further investigation of Source of Funds or Source of Wealth and enhanced ongoing monitoring, depending on the circumstances of the case.
A: Yes. HMRC guidance requires estate agency businesses to identify and assess the money laundering, terrorist financing and proliferation financing risks faced by their business. That assessment should inform the Policies, Controls and Procedures used to manage and mitigate those risks.
The BWRA is therefore a fundamental part of an estate agency’s AML framework rather than simply an administrative document.
A: Estate agents can use specialist third parties to carry out AML activity, but they should understand exactly what the provider is — and isn’t — doing. There is a significant difference between outsourcing an ID check and using a fully managed AML compliance service.
Coadjute is built around the latter. We combine specialist compliance people, expertise, managed processes, AI and technology to undertake AML compliance on behalf of estate agents.
A: A fully managed AML compliance service goes beyond providing software or individual checks. It manages the wider AML workload, including customer engagement, chasing, evidence gathering, Source of Funds, Source of Wealth, risk assessment, Enhanced Due Diligence, complex cases, ongoing monitoring and audit-ready reporting.
It can also support the wider governance requirements around AML, including Business-Wide Risk Assessments, Policies, Controls and Procedures, training and ongoing compliance guidance.
A: AML software gives estate agents technology to help them carry out compliance tasks themselves. A fully managed AML service combines people, expertise, processes and technology to carry out that work on the estate agent’s behalf.
Software gives estate agents tools. A fully managed service does the work for them.
AML compliance has changed. It is no longer simply about collecting the right documents or running the right checks. Estate agents increasingly need to demonstrate a consistent, risk-based compliance process and be able to evidence the decisions made on every file.
Doing that properly takes time, specialist knowledge, consistent processes and ongoing oversight. Coadjute was built around a simple belief: estate agents should be able to concentrate on being estate agents.
Coadjute provides a fully managed AML compliance and risk management service built specifically for the UK property market. Our specialist people, expertise, managed processes, AI and technology work together to manage compliance on behalf of estate agents — from identity verification and Source of Funds through to risk assessment, Enhanced Due Diligence, ongoing monitoring, governance and audit-ready reporting.
That means Coadjute does the checks, the chasing, the investigation and the work around the work, while estate agents remain informed and in control. It gives their people more time to focus on winning instructions, building relationships, progressing transactions and getting people moved.
We do the work, so brilliant estate agents can get on with being brilliant estate agents.
See what a fully managed AML compliance service actually looks like — book a demo and our team will walk you through how Coadjute handles compliance on your behalf.
Our latest ebook goes further into what HMRC's July 2026 update now also expects from estate agents and where the real compliance workload sits.
Or start with our AML Checklist to see how much of the process your current provider is genuinely managing for you or assess where your in-house compliance gaps may lie.