AML Screening for Professional Services Companies — UK Guide

Professional services firms are subject to the Money Laundering Regulations 2017 (MLR 2017) as amended by the Money Laundering (Amendment) Regulations 2019 and subsequent updates. The Regulations require Customer Due Diligence (CDD) for all new clients and Enhanced Due Diligence (EDD) where higher risks are identified. Beneficial ownership verification through PSC validation is mandatory. JMLSG guidance specifies that accountants, lawyers, and consultants must establish client identity, verify beneficial ownership, understand the purpose of engagement, and screen against sanctions lists. For professional services specifically, the FCA expects firms to maintain detailed AML risk assessments for each client, implement proportionate controls based on identified risk, and maintain comprehensive documentation. Failure to implement these controls can result in penalties exceeding £20 million and criminal prosecution of responsible individuals under POCA 2002 and the Terrorism Act 2000.

The elevated average PSC risk score of 14.4 reflects structural opacity within the sector—many professional services clients maintain complex beneficial ownership structures that obscure true decision-making authority. Firms should approach each PSC declaration with structured scepticism: verify the identity of named PSCs independently; confirm their understanding of their beneficial ownership stake and business purpose; cross-reference PSC declarations against alternative data sources (Companies House filings, corporate databases, adverse media); and identify inconsistencies between declared and actual control. Pay particular attention to PSC concentration—when a small number of individuals control >50% beneficial ownership, probe for undisclosed conflicts, nominee arrangements, or control transfer mechanisms. Consider whether PSC structures align with legitimate business models for the stated professional services activity, or whether complexity serves primarily to obscure beneficial ownership. Document all verification steps and maintain evidence of independent validation.

Recent formation (post-2020) represents elevated AML risk because these companies lack verifiable business history and may have been established specifically to facilitate illicit transactions. For recent-formation clients, professional services firms should implement Enhanced Due Diligence as standard rather than requiring specific risk triggers. Conduct independent verification of all founders and early directors through identity documents, historical background checks, and adverse media screening. Investigate pre-incorporation activities of key personnel—did they previously work together, and in what capacity? Verify funding sources and capitalisation—does funding match the company's stated business purpose and anticipated scale? Examine early transaction patterns: rapid client acquisition, unusually large engagements, or suspicious counterparties suggest potential pre-positioning for illicit activity. Establish continuous monitoring procedures to identify material changes to ownership, directors, or business activities. Consider enhanced monitoring of transaction patterns, particularly cross-border fund flows. Regulatory guidance specifically cautions that newly-formed professional services entities require heightened scrutiny because they present compressed timelines for bad actors to establish seeming legitimacy before deploying the entity for money laundering.

Managing director-level AML screening across 703,792+ records requires systematic, technology-enabled approaches. Firms should: (1) implement automated screening tools that check director names against consolidated sanctions lists and adverse media databases in real-time or during new client onboarding; (2) establish batch screening procedures to re-screen existing clients' directors and PSCs periodically (at minimum annually) to identify changes in sanctions status or adverse media; (3) utilise Companies House API integrations to automate capture of director information and track changes; (4) maintain structured databases of clients' directors and PSCs linked to verification evidence and screening results; (5) establish escalation protocols that identify suspicious patterns (e.g., single individual appearing as director across multiple professional services entities); (6) conduct sampling audits of screening procedures to identify control failures; (7) train compliance teams on red flag recognition at the director level. Given sector scale, manual screening is impractical—firms must leverage technology to achieve proportionate AML controls. Regulatory guidance accepts technology-enabled screening if firms maintain evidence of systematic procedures, periodic validation of screening tool accuracy, and appropriate override procedures for false positives that require human judgment.