Is Digital ID Enough for AML Compliance?

Insight read time: 8 minutes

Is digital ID enough for AML compliance? Why identity verification is only part of the picture 

Digital identity verification can play an important role in anti-money laundering compliance, but an ID check alone is not AML compliance.

For estate agents, confirming that somebody is who they say they are is only one part of a much wider set of anti-money laundering responsibilities.

That distinction matters.

As digital identity technology has become more widely adopted across the property industry, it can be easy to assume that completing an electronic ID check means the AML requirement has been dealt with.

It hasn't.

The question estate agents need to ask is no longer simply:

“Have we verified this person's identity?”

It is:

“Have we properly understood and managed the money laundering risk associated with this customer and this transaction?”

Those are very different questions.

What is the difference between digital ID and AML compliance?

Digital identity verification is designed to help establish whether an individual is who they claim to be.

Depending on the service being used, this might include:

• checking identity documents

• biometric or facial matching

• liveness checks

• validating personal information against trusted data sources

These are valuable tools.

But they address identity verification, rather than the complete AML process.

HM Treasury's 2026 guidance on the use of digital identities under the Money Laundering Regulations makes this distinction clear. Digital verification services can be used for relevant identity verification checks, but their use does not replace the wider obligations businesses have under the Money Laundering Regulations.

In other words:

Digital ID can support AML compliance. It is not, by itself, an AML compliance solution.

What does AML require beyond an identity check?

AML is risk-based.

Estate agents need sufficient information to understand their customers, the circumstances surrounding a transaction and the risks involved.

Depending on the circumstances, this can extend well beyond confirming someone's name, date of birth or identity document.

Customer risk assessment

You need to consider the risks presented by the customer and transaction and respond appropriately.

A successful identity check does not tell you whether the circumstances surrounding a transaction are unusual or higher risk.

Politically exposed persons and sanctions

Appropriate screening and risk management need to be undertaken where customers or connected individuals are politically exposed persons or subject to relevant sanctions considerations.

Beneficial ownership

Where companies, trusts or other legal structures are involved, identifying the individual you are speaking to may only be the starting point.

You may also need to establish who ultimately owns or controls the entity.

Source of funds and source of wealth

Knowing who someone is does not establish where their money has come from.

Source of funds and, where necessary, source of wealth can require further investigation and evidence.

Money sitting in a bank account does not automatically explain how it was accumulated or whether the circumstances make sense.

Enhanced due diligence

Higher-risk situations can require enhanced due diligence.

This means obtaining additional information and taking additional steps to understand and mitigate the risk.

An automated ID result cannot, on its own, make that judgement.

Ongoing monitoring

AML does not necessarily finish when the initial checks have been completed.

HMRC guidance requires businesses to continue monitoring relevant business relationships and to respond when information, circumstances or risk changes.

Policies, controls and procedures

AML compliance also exists at a business level.

Estate agency businesses need appropriate policies, controls and procedures designed around the risks they face.

Business-wide risk assessment

Estate agents must assess the money laundering, terrorist financing and proliferation financing risks facing their business.

That is an organisational responsibility - not something an individual electronic ID check can satisfy.

Training and oversight

Staff need to understand the risks, recognise warning signs, know when a case needs escalation and understand their responsibilities.

Businesses also need appropriate oversight and records to demonstrate what they have done.

Digital ID vs fully managed AML

The difference becomes clearer when you put the two side by side. 

Digital ID belongs in the left-hand column.

Estate agents are responsible for addressing the much bigger picture on the right.

A passed ID check does not mean a passed AML check

Consider a seemingly straightforward buyer.

They successfully complete a digital identity check.

Their passport is genuine. Their face matches the document. Their address is verified.

Everything passes. But imagine you subsequently establish that part of the purchase price is being provided as a gift. The money has arrived from overseas.

The person providing the gift is connected to a company structure. Or there is a discrepancy between the customer's stated circumstances and the funds being used. The identity technology hasn't failed. It has done precisely what it was designed to do.

It has established identity.

What happens next is AML.

The agent now needs to understand the circumstances, assess the risk, obtain appropriate evidence, determine whether further due diligence is necessary and record the rationale behind the decision.

That's why treating a green ID result as a green AML result can create a dangerous false sense of security.

What does HMRC expect estate agents to do?

HMRC's current guidance makes clear that Customer Due Diligence is a collective term for the checks businesses carry out on customers and beneficial owners, and that the measures applied depend on the level of risk.

The objective is not simply to establish identity.

The measures taken should allow the business to understand the money laundering, terrorist financing and proliferation financing risks associated with the customer and to manage those risks appropriately.

HMRC's estate agency guidance also recognises the particularly important position estate agents occupy in property transactions. Agents can encounter both buyers and sellers early in a transaction and therefore have an important role in identifying suspicious activity.

That is why AML cannot realistically be reduced to uploading a passport and receiving a pass or fail result.

So what should estate agents ask their AML provider?

Rather than asking:

“Does your system perform digital ID checks?”

ask:

“What parts of my AML obligation are you actually taking care of?”

Some useful questions include:

• Who assesses the wider risk associated with the customer and transaction?

• Who investigates source of funds?

• Who determines whether enhanced due diligence is necessary?

• What happens when something does not look right?

• Who reviews complex cases?

• How are PEP and sanctions risks handled?

• How are changes in risk monitored?

• What evidence will we have if HMRC asks to inspect a file?

• Who helps us maintain our business-wide risk assessment and policies?

• How are staff trained?

• What remains the responsibility of our branch team?

If the answer to most of those questions is “you do”, you are probably buying a compliance tool rather than outsourcing AML compliance.

From AML software to a managed AML service

This is where Coadjute takes a different approach.

Coadjute provides a fully managed AML compliance service designed specifically for estate agents.

We combine technology, data and specialist compliance expertise to take the operational burden of AML away from agency teams.

That means we don't simply provide the technology to carry out an identity check and leave the rest with your negotiators.

Our service supports the wider AML process, including customer due diligence, risk assessment, PEP and sanctions screening, source of funds and source of wealth investigations where required, enhanced due diligence, ongoing monitoring, specialist case support and the governance framework agencies need around their AML activity.

The result is simple:

We do the AML work, so your team can spend more time being estate agents.

Digital ID is part of the answer - not the whole answer

Digital identity technology has an important role to play in modern AML.

It can make identity verification faster, more consistent and easier for customers.

But estate agents should be wary of confusing digital identity verification with complete AML compliance.

One establishes who someone is.

The other requires you to understand and manage the risks associated with the customer, their circumstances and the transaction - and to have the governance, evidence and processes to demonstrate that you have done so.

That's a much bigger job.

And it's exactly why Coadjute exists.

Frequently asked questions

Is digital ID the same as AML?

No. Digital identity verification can be used as part of Customer Due Diligence to establish and verify identity. AML compliance involves wider risk assessment, due diligence, monitoring, controls and governance.

Does passing an electronic ID check mean a customer has passed AML?

No. A successful identity verification establishes information about the customer's identity. Further AML work may still be required depending on the customer, transaction and associated risk.

Do estate agents need to check source of funds?

Source of funds may need to be understood and verified depending on the circumstances and risk associated with a customer or transaction. It is particularly relevant in higher-risk situations and Enhanced Due Diligence.

What is Enhanced Due Diligence?

Enhanced Due Diligence, or EDD, involves carrying out additional checks and obtaining additional information in higher-risk situations in order to understand and manage the increased money laundering or terrorist financing risk.

Can estate agents outsource AML?

Yes, they can. Estate agents can use fully managed services to complete their AML obligations. If an agent chooses to simply use software to help complete elements of their AML, they need to be fully aware of all the remaining tasks that remain their responsibility to fulfil.

What is a fully managed AML service?

A fully managed AML service goes beyond providing software or identity verification technology. It combines technology with compliance expertise to undertake and manage a broader range of AML activities on behalf of the estate agency.

Want to know whether your current AML process leaves any gaps?

Coadjute offers a complimentary AML compliance assessment for estate agents.

We'll review how your current process works, identify where responsibilities sit and highlight potential gaps between identity verification and wider AML compliance.

Book your complimentary AML compliance assessment.

Regulatory sources:

This article has been informed by current UK regulatory guidance, including:

• HM Treasury and Department for Science, Innovation and Technology, Using digital identities with the Money Laundering Regulations, February 2026

• HM Revenue & Customs, Anti-money laundering guidance for supervised businesses, July 2026

• HM Revenue & Customs, Sector Specific Guidance: Estate Agent Business Guidance, July 2026

• HM Revenue & Customs, Customer Due Diligence guidance, July 2026

• HM Revenue & Customs, Enhanced Due Diligence guidance, July 2026

• HM Revenue & Customs, Source of Funds & Source of Wealth guidance, July 2026

• The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, as amended

This article provides general information and is not legal advice. 

Back to top ↑