Money Laundering Regulations 2026: What Changed and What to Do Now

The Palace of Westminster in London, where the Money Laundering Regulations amendments were laid before Parliament
22 October 2026

Last reviewed: 22 October 2026. The Money Laundering and Terrorist Financing (Amendment) Regulations 2026 (SI 2026/621) amended the UK Money Laundering Regulations 2017 (MLRs) across most sectors. They followed an HM Treasury consultation that ran from March to June 2024 and drew 224 responses. This guide explains what changed, when each change applies, and what estate and letting agents, accountants, solicitors and financial advisers should do now.

The short version

  • Most changes have applied since 30 June 2026. Two cryptoasset provisions follow on 1 February 2027 and 25 October 2027.
  • Thresholds are now in pounds. For example, the letting agent threshold is a monthly rent of £10,000, and the general occasional transaction threshold is £12,000.
  • Mandatory enhanced due diligence (EDD) is narrower. It now applies to FATF call-for-action countries and to unusually complex transactions, but your own risk assessment can still require EDD.
  • Banks offering pooled client accounts have new duties, which may mean more questions for firms that hold client money.
  • The Trust Registration Service now covers more non-UK trusts with UK land, and there is a new exemption for low-value trusts.
  • No new digital ID rule in the law, but HMRC guidance now expects electronic ID providers to be on the government’s DVS register.

Timeline

DateWhat happens
9 June 2026SI 2026/621 made
30 June 2026Most changes in force: sterling thresholds, EDD changes, pooled client accounts, trusts, information sharing, off-the-shelf companies
1 February 2027New regulation 34A: enhanced due diligence for cryptoasset correspondent relationships
25 October 2027Remaining change-in-control provisions for registered cryptoasset businesses

If you are not a cryptoasset business, every change that affects you is already in force.

Thresholds now in pounds

The amendment replaced the euro amounts in customer due diligence triggers with sterling. HM Treasury’s explanatory memorandum describes a “one-to-one conversion except where that would risk misalignment with FATF standards”, which is why two figures fell rather than converting at face value.

Trigger (MLR regulation 27 and 13)BeforeFrom 30 June 2026
Occasional transactions (most regulated firms)15,000 euros£12,000
Occasional transfers of fundsover 1,000 eurosover £800
High value dealers, cash transactions10,000 euros£10,000
Letting agents, monthly rent10,000 euros£10,000
Art market participants10,000 euros£10,000
Casinos2,000 euros£2,000

The rules on linked transactions are unchanged: several payments that appear to be linked still count together towards the threshold. For letting agents, the £10,000 monthly rent test also defines whether the work is in scope at all. See our guide to AML checks for letting agents.

Enhanced due diligence: two narrower triggers

Regulation 33 lists when enhanced due diligence is mandatory. Two triggers changed:

  1. High-risk countries. The old wording referred to “high-risk third countries”. EDD is now mandatory where a business relationship or relevant transaction involves a person established in a FATF call-for-action country, the shorter FATF “blacklist”. Countries on the FATF increased-monitoring (“grey”) list no longer trigger EDD automatically.
  2. Complex transactions. EDD is now required where a transaction is “unusually complex or unusually large in each case given the nature of the transaction”, rather than for every complex transaction.

Do not read this as permission to drop EDD. Regulation 33 still requires EDD in any case your own risk assessment identifies as high risk, and in any other case that by its nature presents a higher risk. A client linked to a grey-list country, or a structure you cannot explain, can still call for EDD. The other mandatory triggers, such as politically exposed persons, are unchanged.

Pooled client accounts

Pooled client accounts are bank accounts that a firm, such as a solicitor or letting agent, holds for its clients’ money. The amendment changes the duties of the banks that provide them: they must understand how the account is used, assess and manage the risk, and keep records, and account holders must provide information on request.

Most consultation responses came from the legal sector on this point. The final rules clarify that an account holder does not have to provide legally privileged information, and that a disclosure does not breach a legal adviser’s duty of confidentiality. In practice, expect your bank to ask more about who you hold money for and why.

Trusts, company formation and information sharing

  • Trust Registration Service. Registration now extends to non-UK trusts that hold UK land or property acquired before 6 October 2020. A new exclusion covers low-value trusts that hold no UK land, have assets under £2,000, have never held more than £10,000 and have income of no more than £5,000 a year.
  • Off-the-shelf companies. Selling a ready-made company now falls within trust or company service provider activity, so customer due diligence applies to the buyer. This matters to accountants and formation agents who keep shelf companies.
  • Information sharing. AML supervisors can share more information with each other and with other public bodies, including Companies House.

What the amendment did not change

  • No digital ID requirement in the law. Neither the regulations nor the explanatory memorandum mention digital identity. HMRC’s guidance has moved, though: since its update of 13 October 2026 it says digital verification services certified against the UK digital verification services trust framework and listed on the DVS register are “a reliable and independent source of information”, and that a provider not on the register “cannot reliably be deemed suitable”. HM Treasury and DSIT also published guidance in February 2026, Using digital identities with the Money Laundering Regulations, which recognises certified services as a route for MLR checks without replacing your duties. If you use electronic ID checks, ask your provider whether it is on the register.
  • No change to supervisors. The government’s plan to make the FCA the single AML supervisor for professional services is a separate reform and is not part of this instrument.
  • Core duties stay the same. You still need a firm-wide risk assessment, policies and controls, customer due diligence, ongoing monitoring, training, a nominated officer and five-year record-keeping.

What to do now, by sector

Every regulated firm should update its policies, checklists and staff training to remove euro thresholds and the old “high-risk third country” wording, then review open matters against the new EDD triggers. Beyond that:

  • Estate agents: update the high-risk country check in your buyer and seller due diligence, and record why you apply EDD where your risk assessment calls for it.
  • Letting agents: check which tenancies meet the £10,000 monthly rent test and make sure you are registered with HMRC if any do.
  • Accountants and bookkeepers: apply customer due diligence to any sale of an off-the-shelf company, and prepare for bank questions about client money accounts.
  • Solicitors: expect more information requests on pooled client accounts, and check that your matter risk assessments use the new EDD wording.
  • Financial advisers: update country risk lists and complex-transaction escalation rules in your onboarding procedures.

How AML Buddy helps

AML Buddy’s checks screen clients against sanctions, PEP and adverse media sources and re-screen them daily, so a change in a client’s risk shows up between transactions. Each check produces a timestamped report you can keep as evidence of the due diligence you applied. You pay per check with no subscription; see pricing. AML Buddy supports your checks; your firm remains responsible for its own risk assessment and decisions under the MLRs.

Frequently asked questions

When did the 2026 Money Laundering Regulations changes come into force?

The Money Laundering and Terrorist Financing (Amendment) Regulations 2026 (SI 2026/621) were made on 9 June 2026. Most changes came into force on 30 June 2026. Two cryptoasset provisions follow on 1 February 2027 and 25 October 2027.

Do I still need enhanced due diligence for FATF grey-list countries?

Enhanced due diligence is now mandatory only where a party is established in a FATF call-for-action country. If your own risk assessment shows a higher risk, for example a link to a grey-list country, you must still apply enhanced due diligence.

What is the CDD threshold for occasional transactions now?

For most regulated businesses, customer due diligence applies to occasional transactions of £12,000 or more, replacing the previous 15,000 euros. High value dealers apply it to cash transactions of £10,000 or more.

Did the 2026 changes require certified digital identity checks?

The 2026 amendment itself does not mention digital identity. Separately, HMRC's guidance (updated 13 October 2026) says digital verification services certified against the UK digital verification services trust framework and listed on the DVS register are a reliable and independent source, and that a provider not on the register cannot reliably be deemed suitable. Electronic checks remain optional; document checks are still allowed.

Do I need to update my firm-wide risk assessment and policies?

Yes, review them. References to high-risk third countries, complex transactions and euro thresholds in your policies, checklists and training should now reflect the amended wording.

About the author
Stuart Watkins
Founder & CEO, Zenoo (the team behind AML Buddy)

Stuart Watkins is the founder and CEO of Zenoo, the UK compliance technology company behind AML Buddy. Zenoo builds identity verification, screening and onboarding technology for regulated businesses, and AML Buddy brings it to small UK firms on a simple pay-per-check basis.

Stuart Watkins on LinkedIn