AML and KYC for Estate and Letting Agents: HMRC Rules

What estate and letting agents actually have to check, and how to clear identity fast

Estate agency and letting agency businesses in the UK are supervised by HMRC for anti-money laundering. You must register before trading and run customer due diligence on both parties: buyer and seller on a sale, landlord and tenant on qualifying lettings. Letting agents come into scope at a monthly rent of £10,000 or more.

Property is one of the most attractive routes for moving illicit money, which is why estate agent AML sits on HMRC's supervised list. For a compliance lead or MLRO inside a busy agency, the day-to-day reality is simpler to state than to run: every transaction brings people you have to identify and verify, often at speed, and often with a thin paper trail. Get that identity step wrong and the whole file is exposed.

Are estate agents regulated for money laundering in the UK?

Yes. Estate agency businesses are relevant persons under the Money Laundering Regulations 2017 and are supervised by HMRC for anti-money laundering. The obligations include a business-wide risk assessment, customer due diligence, ongoing monitoring, record-keeping, and suspicious activity reporting to the National Crime Agency. Estate agency work is defined by reference to the Estate Agents Act 1979.

Estate agency businesses were already within AML scope before 2020. That matters when you read older guidance: the widely quoted 2020 date applies to letting agents, not estate agents.

Do estate agents have to register with HMRC?

Registration is mandatory before you trade. You must register your estate agency business with HMRC before carrying on any estate agency activity, and you pay a registration fee and an annual supervision fee. Trading while unregistered, or after your registration has been cancelled, is a criminal offence.

Who must an estate agent verify: the buyer, the seller, or both?

Both. Customer due diligence applies to each party in the transaction, not only the person who instructed you. Once an offer is accepted, an estate agency business enters a business relationship with the seller and the buyer, and must identify and verify each of them. Verifying only your instructing client leaves half the transaction unchecked.

Are letting agents covered by the money laundering regulations?

Yes, for qualifying lettings. Letting agency businesses were brought into the Money Laundering Regulations on 10 January 2020. Below the qualifying threshold, a letting falls outside the regulated activity, but where a tenancy meets the rent and term test, the letting agent is a relevant person supervised by HMRC and carries the full customer due diligence duty.

What is the £10,000 rent threshold for letting agent AML checks?

A letting is in scope where the agreement runs for a term of a month or more, and the rent for at least part of that term is, or is equivalent to, a monthly rent of £10,000 or more. The threshold was set in sterling on a one-to-one basis with the previous euro reference by the Money Laundering and Terrorist Financing (Amendment) Regulations 2026, in force from 30 June 2026. Older guidance still showing a euro figure lags the current law.

Do letting agents have to check the landlord and the tenant?

Both parties. For a letting that meets the threshold, customer due diligence applies to the landlord and the tenant. As with a sale, the duty is not limited to the party who instructed the agency. A prospective tenant on a £10,000-a-month property may be new to the UK or recently arrived, which is exactly the profile that a document-only or single-source check tends to struggle with.

Who must you verify?

What customer due diligence must estate and letting agents do?

Customer due diligence starts with identifying each party and verifying that identity from a reliable source that is independent of the customer, as required by regulation 28 of the Money Laundering Regulations 2017. The identity step is where "2+2" comes in: an industry convention where you match at least two identity attributes against at least two independent, reliable data sources. It comes from HMRC and JMLSG guidance; the regulations themselves do not name it.

Identity is where CDD begins. Alongside it you hold a business-wide and client risk assessment, screening for politically exposed persons and sanctions, source of funds and source of wealth checks where the risk calls for them, ongoing monitoring, record-keeping, and reporting suspicious activity to the National Crime Agency. Enhanced due diligence applies to higher-risk cases, including overseas parties from high-risk jurisdictions and unusually complex transactions.

What happens if an estate agency business does not register with HMRC?

Trading without registration is a criminal offence, and HMRC can take civil and criminal action against unregistered businesses. Beyond the direct penalty, an unregistered or poorly documented agency risks having transactions unwound, facing reputational damage with lenders and conveyancers, and losing the audit trail it needs to show a supervisor. Registration and clean records are the baseline every supervised agency has to hold.

How can a small agency team verify identity quickly?

Most agency compliance teams are small, and the identity workload is lumpy: a run of completions, a batch of new tenancies, a handful of overseas buyers who cannot easily produce a UK utility bill. The parties who slow you down are usually the thin-file ones. A first-time renter or someone newly arrived in the UK often has little history at any single credit reference agency, so a CRA-only check returns no match and the file stalls in manual review.

Matching an identity across several independent data sources, rather than one, recovers many of those people at the first pass. Instead of asking for documents and waiting, you confirm name, address and date of birth against banks, mobile networks, public sector data and credit reference agencies in the configuration you choose. For the person being verified, it is a tap and a few seconds, with no document upload and nothing to post. For your team, only the genuine exceptions reach a human.

This is where OneID's KYC Match fits. It performs the identity-matching step and returns a configurable count of independent source matches, so you can meet and exceed the 2+2 convention, running in real time through an API or as a batch data wash across a back-book. It handles the identity match. Your firm keeps the rest of the programme: risk assessment, PEP and sanctions screening, source of funds, ongoing monitoring, record-keeping, and SARs.

In one Tier-1 gaming operator's data, a CRA-only check failed roughly 30% of new customers, and a second wash on those failures found matching data on more than half of them. That is a gambling result, so for property it reads as directional rather than a fixed recovery rate. The consistent finding across sectors is that multi-source matching recovers good customers a single source misses.

You can put the approach to your own numbers. Run 1,000 records through KYC Match at no cost and compare the results against your existing provider, side by side, by contacting OneID. It is the fastest way to see how many of your stalled buyers, sellers and tenants a multi-source check would have cleared at the first attempt.

Frequently asked questions

Do estate agents need AML registration?

Yes. Estate agency businesses must register with HMRC for anti-money laundering supervision before they start trading, and pay a registration fee and an annual supervision fee. Trading without registration is a criminal offence.

Are letting agents regulated for money laundering?

Letting agency businesses are regulated for qualifying lettings. They were brought into the Money Laundering Regulations on 10 January 2020, and must apply customer due diligence where a letting meets the rent and term threshold.

What is the rent threshold for letting agent AML checks?

A letting is in scope where the agreement is for a term of a month or more, at a rent that is, or is equivalent to, a monthly rent of £10,000 or more. The figure was set in sterling from 30 June 2026.

Does an estate agent check the buyer or the seller?

Both. Once an offer is accepted, the estate agency business must carry out customer due diligence on the seller and the buyer, not only on the party that instructed it.

Who supervises estate agents for anti-money laundering?

HMRC is the supervisory authority for estate agency businesses and for letting agency businesses where no other supervisor applies.

Is it a criminal offence to trade as an estate agent without registering?

Yes. Carrying on estate agency work without being registered with HMRC, or after registration has been cancelled, is a criminal offence.

Can estate agents verify identity without documents?

Yes. A party's name, address and date of birth can be confirmed electronically by matching them against independent, reliable data sources, so many customers clear the identity step without producing or uploading a document.