AML for leasing companies: lessor checks and red flags

Three dates set the lessor's calendar. On 1 April 2025, Canada made financing and leasing entities reporting entities under its AML law. On 7 August 2026, the FCA's registration page began warning unregulated Annex 1 lending firms of increased scrutiny; UK financial leasing firms join the same register. On 10 July 2027, the EU's AML Regulation applies. With it comes a duty for financial institutions to report the transactions they handle in the purchase of high value cars, aircraft and vessels.

A lease gives the lessee the use of an asset for rentals while the lessor keeps title, often with an option to buy at the end. Money crosses a lease at six points, and each can carry criminal funds into the placement, layering and integration stages of money laundering. Like a lender, a lessor runs the checks of AML in lending; it also pays a supplier and owns the asset, and both carry risk a lender does not.

AML and leasing: which anti money laundering guidance applies to a leasing company?

The market and the lease decide it. A finance lease of business equipment is in scope in each market below apart from the US. Türkiye lists obliged parties by type, and financial leasing companies are among them (MASAK, Regulation on Measures, art. 4(1)).

FATF. The FATF Recommendations count financial leasing as a financial institution activity, with one carve out: the glossary leaves out financial leasing arrangements "in relation to consumer products".

EU. Financial leasing makes a firm a financial institution under the 2015 directive as transposed today and, from 10 July 2027, under Article 2(1)(6)(a) of the AML Regulation.

UK. Financial leasing is an Annex 1 activity, so a finance lessor registers with the FCA for AML supervision. A firm writing only operating leases falls outside the Money Laundering Regulations under JMLSG guidance.

US. Outside banks and residential mortgage lending, no federal rule makes a lessor run an AML program. The lessor still reports cash over $10,000 on Form 8300, and OFAC's FAQ on who must comply answers in one line: "All U.S. persons must comply with OFAC sanctions."

Canada. Since 1 April 2025, FINTRAC's rules for financing or leasing entities cover the financing or leasing, real property aside, of property for business purposes, property valued at $100,000 or more and passenger vehicles in Canada. A covered entity must implement a compliance program, verify identity, keep records and send FINTRAC suspicious transaction, listed person property, large cash transaction and large virtual currency transaction reports. Picture two leases (illustrative): a family car is caught as a passenger vehicle; a household washing machine is neither business property nor worth $100,000.

Whatever the market, AML checks for lending and leasing come down to four questions about the lease file: who the lessee is, who stands behind it, who is paid and who pays.

What changed for lessors in 2026?

• 20 March 2026. The FCA reminded regulated firms dealing with Annex 1 firms, financial leasing companies among them, to seek direct confirmation of their registration status. Around 1,200 Annex 1 firms are registered with it for AML purposes only.
• 31 March 2026. The first year in which FINTRAC put "emphasis on engagement, outreach and guidance activities" for the new sector ended (counted from 1 April 2025; FINTRAC announced no end date).
• 7 August 2026. The scrutiny section went onto the FCA registration page, telling Annex 1 lending applicants to expect decisions to take "longer than usual".
• 23 October 2026. The FCA announced restrictions on six unregulated lenders, all Annex 1 firms, after concerns about their AML policies, controls and procedures.
• Next. The AMLR applies from 10 July 2027.

How does a leasing deal work, and where can money be laundered?

Table 1. One lease, six money points (as of November 2026)

The leasing system works in four moves. The lessee picks an asset and a payment plan, often after its own procurement team has chosen the supplier. The lessor checks the file, signs the lease and buys the asset from a domestic or foreign supplier. The lessee uses the asset, carries its insurance and maintenance and pays rentals; at the end of the term it returns the asset or buys it.

Seen as money, the same flow runs both ways. A lessee can launder criminal funds through the deposit, the rentals or an early settlement and leave with a clean asset or a refund. Or the lessor's own money goes to a supplier the lessee controls, and the lease becomes the paperwork that makes the payout look like a purchase.

What are the know your customer (KYC) requirements for leasing?

KYC for a lease covers more people than the name on the contract. These checks run before the lessor pays for the asset:

1. Verify identity at onboarding. FATF Recommendation 10 asks for the customer and beneficial owner to be verified "before or during the course of establishing a business relationship", which for a lease falls before the payout.
2. Resolve a business lessee to its owners. FINTRAC requires a leasing entity to obtain beneficial ownership information and take reasonable measures to confirm it, since a company can hide the real user of the asset.
3. Check the signer's power to bind. For a corporation, FINTRAC wants the part of its corporate records that says who may bind it, plus the name, address, date of birth and occupation of each person who signs (record keeping for leasing).
4. Treat the guarantor as a party. A guarantor pays if the lessee defaults, so it is identified and screened like the lessee.
5. Record financial capacity. FINTRAC asks for "a record of the financial capacity" of the lessee. Rentals have to fit that income, and the record becomes the baseline for monitoring them.
6. Screen for sanctions and PEPs. Canada requires PEP determinations and listed person property reports; in the US the OFAC duty above reaches every lessor. A name checked only at signing goes stale, so the lessee, its owners and the guarantor stay under client screening and ongoing monitoring for the whole term.

Strengthen the AML compliance policy at this stage and every later check has a baseline: the capacity record for the rentals, the owner list for rescreening and the signer list for any change of control.

Why screen the supplier or dealer before the lessor pays it?

Because the supplier, not the lessee, receives the lessor's money. A supplier that is the lessee under another name turns the lease into a cash out, and a listed supplier can make the payout a sanctions breach. Before the first payout to a supplier:

1. Verify the entity. Registration number, status and address in an official register; a supplier no register knows is a shell until shown otherwise.
2. Match its owners against the lessee's. Shared owners, directors, addresses or phone numbers mean the price was not set at arm's length.
3. Screen it like a customer. Sanctions, PEP and adverse media checks on the company and its owners, when the supplier is first used and again before each payout.
4. Test the invoice against the asset. Model, serial number and price against the market; an inflated invoice moves value the way trade based money laundering does across borders.
5. Pay only the supplier's own account. In its name and its country; a request to pay a third party or another country holds the payout until explained.
6. Ask more of a foreign supplier. An imported asset adds a jurisdiction, a currency and customs papers, which should match the invoice and the delivery.

From 10 July 2027 the AMLR also makes persons trading in high value goods obliged entities (Article 3(3)(f)), so a dealer selling a car priced over €250,000 will run its own checks.

Which red flags show up in rentals, early buyouts and the end of term?

The IRS has a worked leasing case. In its Form 8300 reference guide, a farm equipment leasing firm rents out equipment at $1,000 a month for up to 24 months, and the lessee pays every rental in currency from 1 February 2015. The IRS answer is that the lessor "must file Form 8300 once more than $10,000 in installment payments are received" within 12 months. The 11th rental, on 1 December 2015, takes the total to $11,000, so a form is due by 16 December 2015; the count then restarts, and the next form is due by 16 November 2016.

Cash installments add up from the first payment, and the form is due within 15 days of the one that takes the total over $10,000. A lessor can also check box 1b to flag a suspicious transaction, and may file voluntarily when a suspicious one is $10,000 or less.

Canada records every payer. A leasing entity keeps a payment record for each payment it receives, with "the name of the person or entity that makes the payment" and the cash share, and it verifies that payer's identity when the record is created, unless the payer is a public body, a very large corporation or trust, or a subsidiary consolidated with one.

Once every payer is on file, most lease red flags are plain facts. Six recur: rentals from someone with no link to the lease; payers or accounts that change mid term; an early buyout soon after signing, with funds a source of funds check cannot explain; an overpayment followed by a refund request to another account; an end of term purchase by a stranger; and a lessee listing the asset on a rental platform without the lessor's approval, handing it to users nobody checked. Rules in monitoring software catch the patterns a lessor can name in advance, and anomaly detection against each lessee's own history and capacity record looks for the rest. Table 2 writes the named patterns as transaction monitoring rules.

Table 2. Rules for a lease book (thresholds illustrative)

What changes when the leased asset is a high value vehicle, aircraft or vessel?

A leased supercar, business jet or yacht outlives the lease and can leave the country, while leased plant mostly stays on one site. Recital 20 of the AMLR names "the ease with which such goods can be moved across or outside Union borders" as one reason these goods draw launderers.

Article 74 turns that into a reporting duty. From 10 July 2027, paragraph 1 has traders report sales of motor vehicles priced at least €250,000, and of aircraft and watercraft at €7,500,000 or more, when bought for private rather than commercial use. Article 74(2) then reaches the financiers: "Credit institutions and financial institutions that provide services in relation to the purchase or transfer of ownership of the goods referred to in paragraph 1 shall also report to the FIU all transactions they carry out for their customers in relation to those goods." The text does not say whether a lease with a purchase option is such a service, so a lessor of these assets needs its FIU's reading; the FIU also sets the reporting deadlines (Article 74(3)).

What should a lessor do with a high risk lessee?

Higher security deposits and extra guarantees protect the lessor's credit, and both still have to come from a clean source. For the laundering risk a lessor has five responses:

1. Ask for more. Enhanced due diligence, with the source of funds for the deposit and the rentals, and the source of wealth where the asset is large for the lessee's profile.
2. Look more often. A shorter review cycle and screening of every party for the whole term.
3. Move the decision up. Senior sign off before the lessor pays the supplier.
4. Refuse. When the source of funds or the ownership chain cannot be explained, decline the lease and record why.
5. Report. In Canada a suspicious transaction report goes to FINTRAC; a US lessor can check box 1b on Form 8300; elsewhere the report goes to the national financial intelligence unit.

How does a lessor run these checks in one place?

In complead, formerly Sanction Scanner, a company lessee or supplier goes through KYB and UBO verification: it "is confirmed against official registers and vetted sources", and the owners behind it are "followed up the chain until natural persons are reached". Ongoing monitoring starts and stops per name through API triggers, so a guarantor stays screened while the lease runs and drops out when it ends. DLL, the Rabobank owned asset finance company, screens customers on complead over the API in real time across every geography. Every name in the lease file is checked against complead's sources: 3,500+ sanctions, PEP and watchlists from 220+ jurisdictions, refreshed every 15 minutes.

Checks like these assume the companies in a lease are real businesses. Some are not. For each new business lessee one question comes before the rest: when the lessee is a company, how do you tell a trading business from a shell set up to take the asset?