Skip to main content

UK AML hub · Practical process

AML FAQ: 60 Questions Accountants Ask

Last updated:

What your process needs to cover

  • Define the scope, responsible person, required evidence, approval route and risk-based review trigger for the firm's actual clients and services.
  • Record the evidence considered, the decision reached, the responsible person and the date of the next risk-based review.
  • Follow the current Money Laundering Regulations 2017, CCAB guidance and any additional direction issued by the firm's own supervisor.
  • Escalate unusual facts and higher-risk relationships rather than forcing every client through the same generic checklist.

Six-stage workflow

A practical AML process your team can follow

  1. Stage 1

    Start with scope and ownership

    Confirm which clients and services are affected by aml faq, then appoint a named owner with authority to obtain information and escalate concerns.

  2. Stage 2

    Gather reliable evidence

    Collect the identity, ownership, purpose, source-of-funds and relationship information required by the risk. Use Remindoo's built-in digital ID verification and screening where electronic checks are needed.

  3. Stage 3

    Assess risk and explain the rationale

    Consider client, service, delivery-channel and geographic factors together. Record why the final rating is proportionate instead of relying on a score alone.

  4. Stage 4

    Apply proportionate controls

    Complete standard, simplified or enhanced work only where the law and the recorded risk support it. Obtain approval where the firm’s procedure requires it.

  5. Stage 5

    Keep one dated record

    Store the evidence, judgement, approval, communications and next action together so another authorised person can understand the file.

  6. Stage 6

    Monitor and re-assess

    Set a risk-based review date and trigger an earlier review when ownership, activity, geography, instructions or other relevant circumstances change.

Worked risk examples

Illustrative examples — apply your own risk-based judgement
LevelScenarioProportionate response
Lower risk exampleA familiar UK trading company with straightforward ownership and activity consistent with the information supplied.Apply documented, proportionate CDD and ongoing monitoring. Lower risk is not no risk, and the rationale still needs recording.
Medium risk exampleA remote client with a less familiar business model or cross-border element that is credible but needs additional explanation.Obtain enough corroborating evidence, resolve inconsistencies and set a more attentive review cycle.
Higher risk exampleA complex or unusually large transaction, opaque ownership, unexplained source of funds or another factor identified by law or guidance.Escalate, apply EDD where required, obtain appropriate approval and consider reporting duties without alerting the client.

Common monitoring findings

  • A generic risk assessment that does not match the firm or client
  • Missing evidence for identity, ownership, source of funds or the decision reached
  • Reviews completed late, with no trigger-based re-assessment after material change
  • Policies that describe controls the client files do not evidence
  • Staff unable to explain the internal escalation and SAR process

Keep AML work visible alongside every client

See manual risk records, recurring reviews and client evidence in one practice workflow.

Where Remindoo fits

Your AML process in the same place as your clients, tasks and deadlines — no separate system for risk assessments, records and reviews. Remindoo manages your AML risk assessments, records and review schedule. Electronic ID and AML screening are built in, charged per check.

AML plan inclusion: [CONFIRM WITH REMINDOO TEAM].

Free AML Essentials Kit

Put the process into practice

Download the matching editable resource through the existing secure resource flow. No email delivery is used.

Get AML Essentials Kit

Frequently asked questions

Who needs AML supervision?

Accountancy service providers in scope of the regulations must be supervised by an appropriate professional body or HMRC.

Does a sole practitioner need AML supervision?

Yes, if the sole practitioner provides regulated accountancy services and is not supervised through another qualifying route.

What is a firm-wide risk assessment?

It is the documented assessment of money laundering and terrorist financing risks across the firm's clients, services, delivery channels and geographies.

What is client due diligence?

CDD means identifying and verifying the client and relevant beneficial owners, understanding the relationship and applying risk-based monitoring.

When is enhanced due diligence required?

EDD applies in circumstances required by regulation and where the firm's risk assessment identifies a higher risk that needs enhanced measures.

Can simplified due diligence be automatic?

No. The firm must establish and record that the relationship presents a lower risk and still carry out appropriate monitoring.

What is a PEP?

A politically exposed person is an individual entrusted with a prominent public function, with specific treatment extending to defined family members and known close associates.

Do all PEPs present the same risk?

No. Apply the law and current guidance proportionately, including the relevant distinction in treatment and the person's actual circumstances.

What is a beneficial owner?

The regulations define beneficial ownership for entities and arrangements; firms must identify who ultimately owns or controls the client.

Can Companies House replace beneficial ownership checks?

No. It is useful evidence and a cross-check, but firms must take risk-sensitive measures and resolve relevant discrepancies.

What does an MLRO do?

The MLRO or nominated officer receives internal reports, evaluates suspicion, manages external reporting decisions and supports the firm's AML framework.

Does every firm need an MLRO?

The precise requirement depends on the firm's structure and regulations; document who performs the nominated-officer responsibilities and follow supervisor guidance.

What is a suspicious activity report?

A SAR is a report to the UK Financial Intelligence Unit within the National Crime Agency when the legal reporting threshold is met.

What is tipping off?

Tipping off concerns prohibited disclosure that may prejudice an investigation after relevant reporting; staff need clear escalation and confidentiality procedures.

Can I tell a client a SAR was filed?

Do not disclose information that could breach tipping-off or prejudicing-an-investigation provisions; seek appropriate advice where uncertain.

How long are AML records kept?

The regulations generally require specified CDD and transaction records for five years from the relevant end point, subject to the detailed rules and limited extensions.

Can records be deleted after five years?

Review the exact legal basis, other retention duties and any permitted extension; do not keep personal data indefinitely without a lawful reason.

How often should client risk be reviewed?

Use a documented risk-based schedule and review earlier when ownership, activity, instructions or relevant circumstances change.

Must every client receive an annual AML review?

There is no single universal interval for every relationship; follow risk, law and your supervisor's current guidance.

What is ongoing monitoring?

It means scrutinising the relationship and relevant activity so it remains consistent with what the firm knows, including keeping CDD information current.

What evidence proves an AML decision?

Keep the information considered, evidence checked, risk rationale, approvals, responsible person, dates and next action.

Is a passport enough for CDD?

No. Identity verification is one part; firms also need beneficial ownership, purpose, intended nature and risk-based understanding.

Can electronic ID replace professional judgement?

No. Electronic verification can provide evidence, but the firm remains responsible for evaluating the client and resolving inconsistencies.

Does Remindoo perform electronic ID checks?

Yes. Remindoo records AML assessments and evidence, and runs built-in digital ID checks.

Does Remindoo screen PEPs or sanctions?

Yes. Remindoo provides built-in AML screening with continuous monitoring available, charged per check.

Can Remindoo schedule AML reviews?

Yes. Firms can use recurring tasks, reminders and templates to organise review work.

Can Remindoo store AML notes and documents?

Yes. Client information, documents, notes and timeline entries can be kept with the client record, subject to permissions.

Does Remindoo make a firm fully compliant?

No software can do that. Compliance depends on governance, risk assessment, evidence, judgement, training and action.

Is Remindoo the cheapest AML software?

Remindoo does not make that claim. Compare total costs: AML risk assessment is included, and digital ID checks cost from £1 + VAT each.

Is AML included in every Remindoo plan?

[CONFIRM WITH REMINDOO TEAM]. Check the current pricing page or ask the team before relying on plan inclusion.

What should AML software cost comparisons include?

Include subscriptions, checks, monitoring, implementation, training, internal administration and the cost of disconnected record keeping.

What is source of funds?

Source of funds concerns the origin of money used in a particular relationship or transaction and should be understood where the risk requires it.

What is source of wealth?

Source of wealth concerns how a person's overall wealth was accumulated and is often relevant to higher-risk relationships and EDD.

Must accountants verify source of funds for every client?

Apply the regulations and a risk-based approach; the nature and depth of evidence should reflect the client and circumstances.

What is an AML monitoring visit?

It is supervisory review of whether the firm's policies and actual client files meet legal and supervisory expectations.

What do reviewers commonly ask for?

Expect firm-wide risk, policies, client files, training, governance, monitoring evidence and explanations from relevant staff.

How should a firm prepare for a visit?

Run a representative file review, correct gaps transparently, organise current documents and ensure staff can explain the procedure.

What happens after an AML monitoring visit?

Outcomes vary by supervisor and facts, from no action or improvement plans to follow-up, discipline or penalties.

Are AML penalties the same for every accountant?

No. HMRC civil penalties and professional-body disciplinary regimes differ; use the relevant supervisor's current material.

Can an AML breach be criminal?

Some failures and conduct can carry criminal consequences. Take legal advice on specific facts rather than relying on general guidance.

What AML training do staff need?

Relevant staff need appropriate, role-specific awareness of law, risk, red flags, internal reporting and data handling, with evidence retained.

How often should AML training be refreshed?

Refresh when needed by risk, role, legal or guidance changes and supervisor expectations; do not rely on an arbitrary date alone.

Do temporary staff need training?

If their work is relevant to prevention or detection, include them in an appropriate, role-specific training process.

Should training be tested?

Assessment or other evidence of understanding helps demonstrate that training was effective rather than merely attended.

What is a client risk assessment?

It is the recorded evaluation of risk factors for a particular relationship, the overall rating, controls and review plan.

Can every client use the same risk score?

No. A risk-based system needs meaningful differentiation and a recorded rationale grounded in actual facts.

What makes a client higher risk?

Relevant factors can include ownership complexity, geography, services, delivery channel, unusual activity and circumstances specified by law or guidance.

Does remote onboarding automatically mean high risk?

Treat delivery channel as one factor and apply the current regulations and guidance; do not replace holistic assessment with one label.

How should lower-risk clients be handled?

Complete the legally required measures, record why risk is lower and maintain proportionate ongoing monitoring.

Can an accountant act before CDD is complete?

The regulations contain timing rules and limited circumstances; do not start or continue simply for convenience. Follow exact law and supervisor guidance.

What if a client will not provide CDD information?

The firm may be unable to establish or continue the relationship and should consider reporting obligations without alerting the client.

Must existing clients be rechecked?

Apply CDD to existing clients at appropriate times on a risk-sensitive basis and when relevant circumstances or information change.

How do firms clear an AML backlog?

Prioritise by risk, stop further drift, assign owners and dates, document interim decisions and escalate cases that cannot be completed.

What AML checks apply to limited companies?

Identify and verify the company, relevant people acting, beneficial owners and purpose, and understand ownership and control.

What if the PSC register looks wrong?

Investigate and resolve material inconsistencies and follow applicable discrepancy-reporting requirements and current Companies House guidance.

Does Companies House identity verification satisfy AML?

No. Companies House requirements and a firm's CDD duties are related but separate obligations.

Will the FCA supervise accountants for AML?

Treat transfer proposals as future reform unless and until enacted and commenced. Current supervision remains in place meanwhile.

What changed under SI 2026/621?

The instrument has staged commencement. Check the made SI and commencement provisions before treating any particular amendment as in force.

Which AML guidance is authoritative?

Start with legislation, then current government, NCA, CCAB and your own supervisor's primary guidance.

Is this hub legal advice?

No. It is general guidance. Follow your supervisor's guidance and take appropriate legal advice on specific circumstances.

Build a calmer, review-ready AML process

Try Remindoo free for 60 days, or book a demo to see manual AML recording and recurring reviews.

Primary sources

Last updated 24 September 2026. General guidance, not legal advice. Follow your supervisor's guidance.

Why recording AML checks properly matters

UK accountants must follow the Money Laundering Regulations and their supervisor's guidance. If a check is not recorded, supervisors will generally treat it as not done.

Evidence for your supervisor

Dated ID checks and risk assessments on each client file are what a supervisor asks to see during a review.

Consistent risk scoring

A standard risk assessment means every client is judged the same way, whoever onboarded them.

Ongoing monitoring

Reminders for periodic reviews help keep checks current rather than done once and forgotten.

Faster onboarding

Built-in digital ID and AML checks in Remindoo reduce back-and-forth with new clients.

Practical tips from UK practice

  • Complete identity checks and a risk assessment before starting chargeable work.
  • Set review dates by risk level, with higher-risk clients reviewed more often.
  • Record the reason for each risk rating, not just the rating.
  • Check your supervisor's current guidance, as requirements can change.

Written and reviewed by Waqas Sagar ACA FCCA FMAAT, Chartered Accountant with 18+ years in practice. Founder and MD of Accotax, an ICAEW, ACCA and AAT regulated London practice that has served over 5,000 clients, and founder of Remindoo. Guidance is general; check current GOV.UK and professional body guidance for your firm.

What UK practices say about Remindoo

Read all reviews on Trustpilot
“With Remindoo, everything from the first enquiry to onboarding and ongoing client management is tracked in one place… It saves us hours and gives me, as a practice owner, complete visibility of where the firm stands.”
Shaz Israr
“The biggest benefit is having clients, tasks, deadlines, workflows, proposals and communication all organised in one place.”
Taxaccolega Chartered Accountants
“During my trial, the team were absolutely amazing. They helped onboard my clients, set up my settings and made sure everything was ready for me to use… they made the whole process completely stress-free.”
Afia Begum
“It brings client information, tasks, recurring deadlines, workflows and reminders together in one place, giving us much better visibility across the team.”
Premier Books Consultancy Ltd

Trusted by firms regulated by the following professional bodies