The new reality of AML compliance
The new reality of AML compliance
For many UK tax and accountancy firms, anti‑money laundering compliance has traditionally been understood as a matter of professional judgement and good intent. If the appropriate checks were carried out and risks considered, firms could feel confident they were meeting their obligations.
That assumption is now being tested.
Across the UK supervisory landscape, AML enforcement is evolving in a way that is changing how firms are assessed. Regulators are moving away from asking whether firms intended to comply, and towards whether they can clearly demonstrate how decisions were made, applied and reviewed over time. In practice, AML compliance is becoming an evidentiary standard.
This shift has significant implications for accountancy practices of all sizes.
Evidence over intent
Recent enforcement activity across regulated sectors underlines a consistent message. Enforcement focuses on whether a firm’s systems, controls and records were reasonable and proportionate at the time decisions were taken, not just centred on proving that money laundering took place.
Supervisors increasingly look for firms to evidence their thinking. How was client risk identified? Why was that level of due diligence considered appropriate? What happened when circumstances changed? Crucially, can those decisions still be reconstructed months or years later?
Where firms find themselves exposed, it is often not because they ignored the rules. It is because decisions were made under pressure, documented inconsistently, or held in individuals’ heads rather than embedded into structured processes.
Why expectations are rising
Economic crime continues to be treated as a national priority in the UK, with professional services positioned as critical gatekeepers. For accountancy firms, this translates into closer scrutiny of how AML controls operate in practice, not just how they are described on paper.
Regulatory change is reinforcing this direction. HMRC continues to emphasise the importance of written, current risk assessments that actively inform firm behaviour. Companies House reforms, including the introduction of the Authorised Corporate Service Provider regime, increase expectations around auditable identity verification and filing activity undertaken by professional intermediaries. The Economic Crime and Corporate Transparency Act adds further weight to the concept of reasonable procedures that can be evidenced, not merely asserted.
Individually, these developments may feel incremental. Collectively, they signal a clear change in the standard firms are expected to meet.
The operational challenge facing firms
For many practices, your difficulty isn’t understanding what regulators expect, it is maintaining consistency when workloads are high and resources limited.
Supervisory findings frequently reference familiar gaps: outdated or generic firm‑wide risk assessments, inconsistent client risk profiling, insufficient documentation of professional judgement, and monitoring that effectively stops once a client is onboarded. Training may exist, but evidence that it is role‑appropriate and applied in day‑to‑day work is often weak.
These issues rarely reflect poor intent. They reflect the operational reality of busy practices balancing regulatory obligations with commercial pressures. However, under an evidence‑led enforcement approach, good intentions offer little protection.
What defensible AML looks like
Defensible AML is not about producing more paperwork for its own sake. Regulators are looking for clarity, proportionality and continuity.
In practical terms, firms are increasingly expected to demonstrate that their AML framework works under scrutiny. That typically means being able to evidence:
- A written risk‑based approach that genuinely shapes decisions
- Consistent, documented client onboarding
- Proportionate due diligence aligned to assessed risk
- Role‑appropriate training with clear records
- Ongoing monitoring that reflects changes in risk
- Records that allow decisions to be reconstructed later
The firms that cope best with regulatory scrutiny are often those with simple, repeatable workflows that reduce reliance on memory and individual discretion during busy periods.
Size does not remove responsibility
Smaller practices may assume evidentiary expectations primarily apply to larger firms. In reality, the standard applies across the sector. Owner‑managed practices often have deep client knowledge but limited capacity to document decisions consistently. Larger firms benefit from formal governance but can struggle with consistency across teams and service lines.
Regardless of size, the principle remains the same. If a firm cannot evidence why a decision made sense at the time, it will struggle to defend it later.
A defining shift for the profession
AML supervision in the UK has entered a new phase. For many firms, the key question is no longer simply whether they are compliant, but whether they could demonstrate that compliance clearly and confidently if challenged.
Recognising this shift requires a change in mindset. Moving from reactive compliance to defensible AML involves embedding evidence into everyday workflows, not treating it as a retrospective exercise. Firms that do so will be better placed to protect their reputation, maintain regulatory confidence and continue to serve clients with trust and credibility.
Our in‑depth special report examines how this evidentiary shift is reshaping AML expectations for UK tax and accountancy firms, and sets out a practical, regulator‑aligned roadmap for building defensible compliance.
Find out more about how the Digita AML solution can help reduce risk and optimise your operations.
 |