The UK property market remains one of the most attractive targets for financial crime, and compliance is no longer an optional extra for estate agents — it is a fundamental part of running a trustworthy, efficient business.
According to SmartSearch, HMRC requires estate agencies to carry out regular risk assessments to guard against money laundering, terrorist financing and proliferation financing.
SmartSearch recently discussed fraud, identity & compliance in the UK property market, as well as a complete guide for estate agents.
As the risk landscape grows more complex, agencies are now contending with identity fraud, sanctions exposure, impersonation and opaque ownership structures, alongside growing pressure to document how every compliance decision has been made.
SmartSearch’s 2026 compliance guide addresses these challenges head-on, outlining how digital verification, automation and stronger operational controls are reshaping know-your-customer (KYC) and anti-money laundering (AML) processes in a market where criminal activity is becoming increasingly sophisticated.
Why UK property remains a prime target
Real estate has long been attractive to financial criminals because of the large sums it can absorb and the ease with which transactions can be used to conceal the true identities of those behind them. The UK’s 2025 National Risk Assessment confirms that the sector remains vulnerable to illicit finance and money laundering, particularly where complex ownership structures and overseas entities are involved. HMRC’s estate agency risk guidance makes clear that property at all values and in all locations across the UK continues to attract criminal interest — not only super-prime London addresses, but also lower-value homes elsewhere in the country.
The same assessment notes that estate agency businesses now carry a medium money laundering risk rating, a slight increase from 2020. From the very outset of any transaction, agents need to understand who their client is, how the deal is structured and where the funds are coming from. HMRC expects businesses to assess customer risk, geography, service type, transaction size and frequency, and to document those assessments in a timely, up-to-date written record.
How compliance expectations are shifting
The era of keeping a few documents on file — a passport, a utility bill — and calling it due diligence is firmly over. HMRC’s AML guidance now requires firms to have documented procedures for identifying and verifying customers, carrying out due diligence and conducting ongoing monitoring. Those records must cover risk assessments, policies, controls, procedures and training records, and must generally be retained for five years after the end of a relationship or transaction.
What has changed most for estate agent compliance in the UK is the expectation of demonstrable reasoning. Agencies must be able to show not only what checks they carried out, but also how they handled red flags — whether that involved additional scrutiny of politically exposed persons (PEPs), unusual payment routes, connections to higher-risk jurisdictions or complex ownership arrangements. Since May 2025, letting agents have also been brought within the scope of UK financial sanctions reporting obligations as relevant firms, adding another layer of regulatory responsibility to their existing workload.
The key risks estate and letting agents must manage
Identity fraud is one of the most pressing concerns, with fraudsters increasingly difficult to detect through manual checks alone. Slow, inconsistent processes that are prone to human error are ill-equipped to handle sophisticated identity fraud, which is why digital identity verification is now considered essential during property onboarding. The UK’s 2025 National Risk Assessment also flags the use of artificial intelligence in fraud and impersonation, underlining why identity assurance matters across all customer onboarding, not only in property.
Source of funds and source of wealth present an equally significant vulnerability. A client file that looks clean on the surface does not eliminate transaction risk, and over-focusing on identity while neglecting the origins of money is one of the most common compliance weaknesses in the sector. HMRC guidance calls for risk-based scrutiny of transactions, including source of funds where appropriate, with enhanced due diligence required for higher-risk customers such as PEPs.
Complex ownership structures also continue to pose challenges, particularly in high-end and commercial markets where overseas entities and multi-layered arrangements obscure beneficial ownership. Agencies must establish who is genuinely behind a transaction and be confident in that assessment before proceeding. Sanctions screening is equally critical; the UK Sanctions List is maintained on GOV.UK, and since 14 May 2025, letting agents have been subject to financial sanctions reporting obligations as relevant firms.
For the lettings market specifically, risks should not be underestimated. Regulated letting agencies — those handling monthly rents of €10,000 or more, or managing client funds — are frequently exposed to high-risk persons and products, including PEPs and ultra-high-net-worth individuals. Risks include repeated rent payments using illicit funds, subletting arrangements, upfront rent refunds and complex tenancy structures. Agencies handling both sales and lettings must ensure compliance frameworks extend across both sides of the business.
What good AML compliance looks like in practice
Robust compliance is not about adding friction to every transaction — it is about applying the right checks at the right moments. A practical framework should include a documented, business-wide risk assessment; customer due diligence that goes beyond basic identity checks to cover beneficial ownership and the commercial logic of the transaction; and ongoing sanctions, PEP and adverse-media screening. One-time onboarding checks are no longer sufficient — HMRC expects continuous monitoring and thorough record-keeping throughout the client relationship. Critically, agencies should maintain clear audit trails that document what was checked, when, and what action was taken when concerns were identified.
Why digital identity verification now matters
Digital identity verification allows for deeper, more consistent checks that improve the overall quality of the compliance process. For estate agents in particular, it reduces avoidable delays at the point of instruction or offer, enables more consistent decision-making across teams and branches, and produces a stronger evidence trail for regulators, auditors and internal compliance leads. These are not marginal benefits — they are fundamental to demonstrating that an agency takes its obligations seriously.
Where the sector goes from here
With the property sector still exposed to fraud, illicit finance and identity risk, regulators now expect stronger risk-based controls across all agencies, including letting agents who face additional sanctions-related obligations. Scrutiny has shifted: it is no longer enough to show that a check was carried out — agencies must demonstrate that it was carried out thoroughly.
The agencies best placed to navigate this environment are those that stop treating compliance as a standalone function and start embedding it into the broader client experience. That means verifying identity robustly, understanding who is behind each deal, assessing the source of funds, screening for sanctions and PEP exposure, maintaining comprehensive records and using technology to reduce both manual workload and compliance blind spots. Moving beyond fragmented, manual workflows towards joined-up digital identity verification, AML screening and audit-ready monitoring is no longer aspirational — it is the standard expected of a professional, trustworthy agency operating in the UK property market today.
Read the full SmartSearch post here.
Copyright © 2026 FinTech Global









