🚀 Coming Soon — We're launching shortly. Book a demo to be first in line!

Compliance

AML Compliance for Letting Agents: A Complete Checklist

Navigate anti-money laundering regulations with confidence. This complete AML checklist covers everything UK letting agents need to stay compliant.

LettingGuru Team26 February 20269 min read

Why AML Matters for Letting Agents

Anti-money laundering regulations are not just for banks and financial institutions. Since the implementation of the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017 (as amended), UK letting agents who handle rent of 10,000 euros or more per month are subject to the same AML obligations as estate agents involved in property sales.

In practice, this captures a significant number of lettings, particularly in London and the South East where monthly rents regularly exceed this threshold. Even if your current portfolio falls below this level, understanding AML obligations is essential because your business may grow into scope, and because many of the underlying principles represent good practice regardless of legal obligation.

The consequences of non-compliance are severe. HMRC, which supervises letting agents for AML purposes, can impose substantial financial penalties, prosecute individuals, and publish details of enforcement action. Beyond the legal risk, a failure to identify money laundering activity can expose your agency to reputational damage that is difficult to recover from.

The Core AML Obligations

AML compliance for letting agents rests on several core requirements:

  • Risk assessment: You must carry out a documented, practice-wide risk assessment that identifies the money laundering and terrorist financing risks relevant to your business. This assessment should consider the types of landlords and tenants you deal with, the geographic areas you operate in, and the nature of the properties you manage.
  • Customer due diligence (CDD): Before establishing a business relationship with a landlord, you must verify their identity using reliable, independent sources. For individuals, this typically means checking a passport or driving licence and verifying their address. For companies, you must identify the beneficial owners and verify the company's registration.
  • Enhanced due diligence (EDD): In higher-risk situations, such as when dealing with politically exposed persons (PEPs), complex ownership structures, or landlords based in high-risk jurisdictions, you must apply enhanced measures. This may include obtaining additional documentation, understanding the source of funds, and applying greater ongoing scrutiny.
  • Ongoing monitoring: AML is not a one-off check. You must monitor the business relationship throughout its duration, keeping records up to date and being alert to any changes that might indicate suspicious activity.
  • Suspicious Activity Reports (SARs): If you know or suspect that a person is engaged in money laundering or terrorist financing, you must submit a SAR to the National Crime Agency. This obligation overrides client confidentiality, and it is a criminal offence to tip off the subject of a report.

Your AML Compliance Checklist

Use this checklist to assess your current compliance position and identify any gaps:

  • HMRC registration: Confirm that your agency is registered with HMRC for AML supervision. This is a legal requirement and must be in place before you begin operating.
  • Practice-wide risk assessment: Document your risk assessment and review it annually or whenever there is a material change to your business.
  • Written policies and procedures: Maintain written AML policies covering customer due diligence, record keeping, reporting, and staff training.
  • Nominated officer: Appoint a nominated officer responsible for receiving internal suspicious activity reports and making disclosures to the NCA.
  • Staff training: Ensure all relevant staff receive AML training at induction and at regular intervals thereafter. Training should cover the legal framework, your internal procedures, and how to identify suspicious activity.
  • CDD records: For every landlord, retain copies of identification documents, evidence of verification, and the date on which the check was performed. Records must be kept for five years after the end of the business relationship.
  • Screening: Screen landlords against sanctions lists and PEP databases as part of your CDD process.
  • Source of funds: Where required by your risk assessment, investigate and document the source of funds, particularly for high-value or overseas landlords.
  • Ongoing review: Schedule regular reviews of existing landlord relationships to ensure CDD information remains current.
  • SAR process: Establish a clear internal process for staff to report concerns to the nominated officer, and for the nominated officer to submit SARs to the NCA where appropriate.

Integrating AML Into Your Daily Workflow

The most common reason letting agents fall short of their AML obligations is that compliance is treated as a separate, standalone process rather than being embedded into everyday operations. When AML checks sit outside your main workflow, they get skipped under time pressure or forgotten entirely.

The solution is to integrate AML into your landlord onboarding process. When a new landlord instructs your agency, the system should automatically prompt for identity verification, trigger screening checks, and record the results before any tenancy activity can proceed. This is the approach taken by LettingGuru, where AML checks form a mandatory step in the landlord setup workflow.

Similarly, ongoing monitoring should be built into your regular review cycles. When a tenancy is renewed or a landlord's circumstances change, the system should flag the need to review and update CDD information.

Record Keeping and Audit Trails

AML regulations require you to retain CDD records for at least five years after the business relationship ends. This means you need a system that can store and retrieve documents reliably over extended periods, not scattered across email inboxes and desk drawers.

A digital record-keeping system provides several advantages. Documents are stored securely with timestamped audit trails showing when checks were performed and by whom. Searches can be conducted quickly in the event of an HMRC inspection. And automated reminders ensure that records are not inadvertently deleted before the retention period expires.

When HMRC conducts an inspection, they will want to see your risk assessment, policies, training records, and a sample of CDD files. Being able to produce these promptly and in good order demonstrates a culture of compliance and significantly reduces the risk of adverse findings.

Staying Ahead of Regulatory Changes

AML regulations continue to evolve. The UK government regularly updates the list of high-risk jurisdictions, and changes to the regulations can expand the scope of obligations or introduce new requirements. Keeping your policies and procedures up to date is an ongoing responsibility.

Subscribe to updates from HMRC and your professional body, attend relevant training sessions, and ensure that your nominated officer stays current with developments. Investing in software that is maintained and updated to reflect regulatory changes can also reduce the burden of keeping pace with a shifting landscape.

AML compliance is not just about avoiding penalties. It is about protecting your business, your landlords, and your tenants from the harm caused by financial crime. By building robust, integrated processes, you can meet your obligations efficiently and with confidence.

Ready to modernise your agency?

LettingGuru gives you everything you need to manage properties, tenants, compliance, and finances in one platform.