Money Laundering Regulations for UK Small Businesses
The Money Laundering Regulations 2017 (as amended) apply directly to a defined set of "regulated sectors" — most small businesses outside these sectors have no registration obligation at all, but if yours is affected, non-compliance carries real financial and legal risk.
Who Needs to Register
Registration is required for businesses in specific regulated sectors, including:
- Accountants, bookkeepers, and tax advisers
- Estate agents and letting agents (above certain rent thresholds)
- High-value dealers — businesses accepting cash payments of €10,000 or equivalent for a single transaction
- Trust or company service providers
- Money service businesses (currency exchange, money transfer)
- Casinos and certain gambling businesses
If your business doesn't fall into one of these categories — most retail, hospitality, professional services outside accountancy/legal, and online businesses — you generally have no registration obligation under these regulations.
Who Supervises Compliance
Supervision depends on your sector. HMRC directly supervises most regulated businesses that aren't covered by a professional body — including estate agents, letting agents, high-value dealers, and accountants not already supervised by a recognised accountancy body. Accountancy and legal professional bodies (such as ICAEW or the Law Society) often supervise their own regulated members instead. If you're unsure which applies to you, HMRC's guidance on money laundering supervision is the place to check.
What Compliance Actually Involves
For businesses that do need to register, the regulations require:
- Customer due diligence — verifying customer identity, scaled to the risk of the transaction
- A written risk assessment — documenting how your business assesses money laundering risk
- Policies, controls, and procedures — appropriate to the size and nature of the business
- Record-keeping — of due diligence checks and relevant transactions
- Staff training — ensuring relevant employees understand their obligations
- Reporting suspicious activity — via a Suspicious Activity Report (SAR) where required
Penalties for Non-Compliance
Penalties range from financial fines up to criminal prosecution for serious or deliberate breaches. A business required to register but operating without doing so is acting unlawfully in that regulated activity, and supervisors including HMRC can and do publish details of businesses penalised for non-compliance.