Introducing complead. One AI-native platform for financial crime compliance. Read the story
New Ready Integrations available Check the new integrations

AML for Accountants, Tax Advisors and TCSPs (2026)

In short

AML for accountants depends on the rulebook. The EU, UK and Türkiye cover accountants as a profession, the FATF and UAE only for listed activities. TCSPs are caught except in Türkiye and the US, and US accountants have no AML program duty. Three duties: check owners before forming a company, report unless privilege applies, register where required. As of November 2026.

How do launderers use accountants and formation agents?

A common misreading of anti money laundering (AML) rules is that they cover every accountant everywhere. No US federal AML program rule names accountants. The FATF covers them only for transactions in five listed activities (R.22(d)). Türkiye names every self employed accountant, whatever the work.

The UK's national risk assessment of 2025 says money laundering risk for accountancy service providers "remains high" and TCSP risk "continues to be assessed as High" (paras 5.208, 5.223). A criminal who splits the work across several firms keeps each one from seeing the full picture (para 5.210). In one investigation, shell companies tied to frauds were registered to a very small West Midlands accountancy firm with a TCSP license (Box 5.M).

In the UAE, the 2024 national risk assessment put TCSPs at "Medium Risk for ML", the ministry's April 2026 TCSP guidance reports; its guidance for independent accountants and auditors rates them medium for inherent risk and "Medium-Low" after controls.

Does AML law cover the accountant, the service, or both?

RulebookLaw in force, November 2026SupervisorWho is caughtLimits and gaps
FATFFATF Recommendations (updated June 2026) R.22(d), (e); R.23(a), (c); INR 23National authorities, assessed in mutual evaluationsAccountants when they prepare for or carry out transactions for a client in buying and selling real estate, managing client money, securities or other assets, managing bank, savings or securities accounts, organizing contributions for companies, or creating, operating or managing legal persons or arrangements and buying and selling business entities; TCSPs for five services: formation agent, director or secretary, registered office, trustee, nominee shareholderOther accountancy work, audit included: extending the reporting duty to it is only "strongly encouraged" (R.23(a))
EUDirective (EU) 2015/849 art. 2(1)(3)(a), (c), as amended in 2018 and transposed by each state, until 9 July 2027; from 10 July 2027, art. 3(3)(a), (c) of Regulation (EU) 2024/1624 (AMLR)National supervisors; TCSPs licensed or registered (Directive art. 47(1))Auditors, external accountants and tax advisors, and anyone else giving "material aid, assistance or advice on tax matters" as principal business or professional activity; TCSPs for the same five services (Directive art. 3(7); AMLR art. 2(1)(11))No reporting duty for information obtained while ascertaining a client's legal position or in judicial proceedings (Directive art. 34(2); AMLR art. 70(2))
UK: AML in the UKMoney Laundering Regulations 2017 (MLR) regs. 8(2)(c), (e), 11, 12; TCSP register reg. 56The Schedule 1 professional body the firm belongs to (reg. 7(1)(b)), 13 of them for accountancy; HMRC for auditors, accountants and tax advisors no listed body supervises, and for TCSPs supervised by neither the FCA nor a listed body (reg. 7(1)(c)(iii), (iv))Statutory auditors, insolvency practitioners, external accountants, and tax advisors, including help given "directly or through a third party" (reg. 11); TCSPs, including the sale of an off the shelf company from 30 June 2026 (reg. 12(2)(ab))Accountants working in house: reg. 11 covers services "to other persons"
US: AML in the USBank Secrecy Act: 31 U.S.C. 5312(a)(2); 31 CFR 1010.100(t); 31 CFR 1010.330FinCEN; no AML supervisor for accountantsTrust companies, as financial institutions; Form 8300 from any business paid over $10,000 in cash in one or related transactions (1010.330)No accountant, tax advisor or formation agent category: no AML program, due diligence or SAR duty
Türkiye: AML in TürkiyeRegulation on Measures art. 4(1)(t), (u), (ş), as amended to 7 October 2026, issued under Law No. 5549MASAKSelf employed accountants, certified public accountants (SMMM) and sworn certified public accountants (YMM) not bound to an employer, with no activity limit (t); independent audit firms authorized to audit in financial markets (u); self employed lawyers for company formation and management among other listed work (ş, amended 25 December 2024)No TCSP category
UAE: AML in the UAECR art. 3(4), (5): Cabinet Resolution No. 134 of 2025, which implements Federal Decree by Law No. 10 of 2025Ministry of Economy and Tourism; covers the mainland and the commercial free zonesIndependent accountants, alone, as partners or within a firm, when they prepare, conduct or execute financial transactions for customers in the five activities (art. 3(4)); company and trust service providers for the five services (art. 3(5))Independent statutory auditors exempt from reporting information from legal position, court, arbitration or mediation work, or "other circumstances subject to professional secrecy" (art. 18(2))

The FATF sets the pattern: accountants and TCSPs are designated non-financial businesses and professions (DNFBPs). The EU and the UK name auditors, external accountants and tax advisors as such, and Türkiye names every self employed accountant, so there the title brings the duty. The FATF and the UAE keep the activity test.

The line for trust and company service providers reads almost the same in the FATF, EU, UK and UAE texts. Türkiye has no TCSP category; formation work is caught when an accountant or a lawyer does it.

Are bookkeepers, payroll agents and tax advisors covered?

In the UK, yes. HMRC counts professional bookkeeping, and payroll agents that give accountancy services or tax advice, as accountancy services (HMRC registration guidance).

Tax advisors are named in the UK (reg. 11(d)) and in the EU, where Directive (EU) 2018/843 also brought in anyone whose principal business is material aid or advice on tax matters. The FATF, Türkiye and the UAE do not name them, so an advisor is caught there only as an accountant. Where a client hides income, accountants may "knowingly or unknowingly facilitate" tax fraud and the laundering of its proceeds (NRA 5.217).

Are US accountants subject to AML rules?

Not as accountants. The Bank Secrecy Act lists trust companies and persons involved in real estate closings as financial institutions, but no accountant, tax preparer or formation agent (31 U.S.C. 5312(a)(2)). A US practice has no federal AML program, due diligence or SAR duty. Only one remains: cash over $10,000, in one transaction or related ones, goes on Form 8300 (31 CFR 1010.330).

Nor does the Corporate Transparency Act fill the gap: since 14 August 2026 only certain foreign companies registered to do business in the US report their non US owners (FinCEN).

Which eight AML rules bind an accountant or TCSP, and where are they written?

AML for accountants and TCSPs runs on eight rules. In the EU, Directive 2015/849 applies through national law until the AMLR takes over on 10 July 2027.

Rule, as in force in November 2026EU: Directive 2015/849 now, AMLR from 10 July 2027UK: MLRUSTürkiye: Regulation on MeasuresUAE: CR
When due diligence startsA business relationship, an occasional transaction of €15,000 or more, single or linked, a suspicion, or doubt about earlier data (Directive art. 11); from 2027 the occasional threshold is €10,000 (AMLR art. 19(1)(b)), and due diligence also starts when taking part in creating a legal entity or setting up a legal arrangement and, for accountants, tax advisors, lawyers and TCSPs, in a transfer of a legal entity's ownership, irrespective of value (AMLR art. 19(1)(c))Verify before the relationship or the occasional transaction (reg. 30(2)); it may finish during the relationship only when that avoids interrupting normal business, the risk is low and checks end as soon as practicable after first contact (reg. 30(3))No accountant ruleAny amount in a continuing relationship, on suspicion or on doubt about earlier data; 370,000 TL for single or linked transactions (art. 5(1)); identification comes before the relationship or transaction (art. 5(2))On starting the relationship, on suspicion of a crime, or when earlier identification data looks inaccurate or inadequate (art. 7(1))
Beneficial ownerA stake above 25% is an indication of ownership (Directive art. 3(6)(a)(i)); from 2027, 25% or more (AMLR art. 52), and nominees disclose their nominator to the entity, which reports it to obliged entities during due diligence (art. 66)More than 25%, or control (reg. 5(1)); register excerpt before the relationship (reg. 30A)No accountant rulePartners holding over 25% of a registered legal person, in a continuing relationship (art. 17/A(2))Ownership of 25% or more (art. 10(1)(a))
Politically exposed personsDirective art. 20 now; AMLR art. 42 laterReg. 35No accountant ruleThe Regulation has no PEP articleForeign PEPs always; domestic PEPs and international organization officials when the relationship is high risk (art. 16(1))
Suspicious reportPromptly, any amount (Directive art. 33(1)); where the state allows, through a designated professional body (art. 34(1)); AMLR arts. 69(1), 70(1) from 2027To the nominated officer or a person the NCA authorizes, as soon as is practicable (POCA s. 330(4))No SAR duty; Form 8300 for cash onlyWithin 10 business days of the suspicion (art. 28(2))"Immediately and without delay", any value (art. 18(1)(a))
Privilege limit on reportingInformation from ascertaining a client's legal position or from judicial proceedings (Directive art. 34(2)); from 2027 the exemption is lost when the accountant takes part, advises for laundering or knows the client seeks such advice (AMLR art. 70(2))Defense for a "relevant professional adviser", a member of a qualifying professional body, where the information came in privileged circumstances; none for information given to further a criminal purpose (s. 330(6)(b), (10), (11), (14))Not applicableNo accountant exemption in the Regulation; lawyers' carve out in art. 4(1)(ş)Among accountants, independent statutory auditors only (art. 18(2))
Reliance on another firmAllowed; ultimate responsibility stays with the firm that relies (Directive art. 25; AMLR art. 48(1) from 2027, on a supervised obliged entity applying equivalent due diligence)Allowed; the relying firm "remains liable" (reg. 39(1))Not applicableFinancial institutions only, relying on another financial institution (art. 21(1))Allowed on a regulated, supervised third party; responsibility stays (art. 20(1))
RecordsFive years after the relationship ends or the occasional transaction (Directive art. 40(1)); AMLR art. 77 laterFive years from the end of the relationship or the completed occasional transaction (reg. 40)Form 8300 rule onlyEight years (art. 46(1))Not less than 5 years from completing the transaction or ending the relationship (art. 25(1))
ProgramDirective art. 8 (risk assessment, policies, controls) until the AMLR's arts. 9 to 11 applyFirm risk assessment (reg. 18), policies and controls (reg. 19), internal controls (reg. 21); TCSP registration (reg. 56)NoneNo program article for accountants in the RegulationRisk assessment (art. 5); senior management approved policies (art. 21); a compliance officer at management level (art. 22)

Timing and privilege decide most files. From 10 July 2027 an EU accountant or TCSP runs due diligence when it takes part in creating a company or transferring a company's ownership, whatever the value. Privilege covers information from legal advice and proceedings, not ordinary accounts work, and in the UK only members of a qualifying professional body can claim it.

Collect a company client's details before you take it on.

The free Company KYB Form covers the registered details, directors, nominees and beneficial owners at 25 percent or more, with the EU AMLR article beside each question.

What AML checks does an accountant run before taking on a client?

KYC for accountants means three checks before the engagement: who the client is, who owns and controls it, and whether any of them is a politically exposed person (MLR reg. 35). In the UK, verification comes first unless reg. 30(3)'s exception applies, and for a company client you take an excerpt of the register of people with significant control, or confirm it holds nothing, before onboarding (reg. 30A).

A cash intensive client adds a source of funds question, since cash can disguise where money came from (NRA para 5.208). HMRC fined Gilmoora House Limited, a TCSP, £18,436 for seven failures, among them due diligence and the timing of verification (regs. 28, 30).

Must an accountant report a suspicion learned while giving advice?

Usually yes. The FATF exempts accountants only when they act as independent legal professionals and the information came under professional secrecy or legal privilege (INR 23 para. 1). The EU limits it to legal position and judicial proceedings (Directive art. 34(2)) and from 2027 lifts it when the accountant takes part, advises for laundering or knows the client wants such advice (AMLR art. 70(2)). The UK defense covers only members of a qualifying professional body and fails for information given to further a criminal purpose (POCA s. 330(11), (14)). In the UAE only independent statutory auditors are exempt among accountants (CR art. 18(2)), and in Türkiye none. Record the call. The suspicious activity report file should show who decided and why.

Who supervises accountants and TCSPs for AML?

About 50,000 UK accountancy service providers are supervised by one of 13 professional bodies or by HMRC (NRA para 5.207; MLR reg. 7). A TCSP with no other supervisor must not run its business until HMRC confirms its registration (HMRC TCSP guidance).

About 90 percent of TCSPs sit with legal or accountancy bodies, while HMRC supervises nine of the 10 firms behind about 80 percent of TCSP facilitated company registrations (para 5.222). OPBAS, based in the FCA, oversees the professional bodies and in 2025 publicly censured one of them for the first time (OPBAS report, March 2026).

Elsewhere: the UAE's Ministry of Economy and Tourism, MASAK in Türkiye, and none for US accountants.

What changes when the FCA becomes the UK's single professional services supervisor?

Only the supervisor. HM Treasury's response of 21 October 2025 moves every firm now supervised by a professional body, and every accountancy service provider and TCSP under HMRC, to the FCA. The reform "does not change firms' obligations under the MLRs" and needs primary legislation, so no start date is set; until then the current supervisors stay.

Which penalties have accountancy firms and formation agents paid since January 2024?

Public actions found from January 2024 to November 2026; HMRC's lists run to 30 September 2025.

PeriodRegulatorFirmOutcomeMain finding
1 January 2024 to 30 September 2025HMRC (lists for 2024 to 2025 and 2025 to 2026)387 accountancy service providers and TCSPs (393 penalties)£2,018,540 in civil penalties356 for failing to apply for registration on time (listed under reg. 56); largest £52,000, Churchill Knight Umbrella Limited, an accountancy service provider (2025 to 2026 list)
1 January 2024 to 31 March 2025HMRCEuropean Business Centre (Ww) Ltd (TCSP)£35,432Risk assessments, policies, controls and procedures, due diligence and record keeping (regs. 18, 19, 28, 33, 35, 40)
1 April to 30 September 2025HMRCGilmoora House Limited (TCSP)£18,436Risk assessments, policies, notifying HMRC of a material change, controls and procedures, staff training, due diligence and timing of verification (regs. 18, 19, 21, 24, 28, 30)
1 January 2024 to 31 March 2025HMRCUniwide Formations LTD (TCSP)£12,500Due diligence (regs. 27, 33)
1 April to 30 September 2025HMRCTAG Accountants (N.I.) Limited (accountancy service provider)£10,000Risk assessments and notifying HMRC of a material change (regs. 18, 21)
2024 to 2025 reporting yearLegal and accountancy professional bodies; all supervisors for TCSPs (HM Treasury supervision report 2024 to 2025)Supervised firms (aggregate)Professional bodies: 338 fines, over £2 million (para 4.37); TCSPs: 185 fines, about £1 million, 29 memberships suspended or revoked (para 4.7, table 4.B)Box 3.D: an accountancy business unregistered for around six years, fined about £4,000 and reprimanded for three years
24 July 2025Ministry of Economy and Tourism (UAE)Corporate service providers and auditors (unnamed), first half 2025 inspections95 penalties, over AED 4 millionPart of 1,063 violations across the four supervised DNFBP categories, fined over AED 42 million

Registration dominates. Of HMRC's 393 penalties, 356 were for applying late, as was the Box 3.D case. FinCEN has no accountant rule to enforce, MASAK names no one and no named EU accountant or TCSP fine was found, so those rulebooks have no rows.

RulebookMaximum for an accountant or TCSP, as of November 2026Basis
EUOnly for serious, repeated or systematic breaches: the national cap must reach at least twice the benefit, where it can be determined, or €1,000,000, and from 10 July 2027 the higher of the twoArts. 59(1), (2)(e) of Directive 2015/849; arts. 55(1), (2) of Directive (EU) 2024/1640
UKNo stated maximum for a civil penalty (reg. 76); on indictment, 2 years, a fine or both for a breach of the regulations, and 5 years, a fine or both for not disclosing a suspicionMLR regs. 76, 86; POCA s. 334
USForm 8300 only: a civil penalty per violation; for willful violations a fine up to $250,000, prison up to 5 years or both, rising to $500,000, 10 years or both alongside another US law violation or a pattern of illegal activity over $100,000 in 12 months31 U.S.C. 5321; 31 U.S.C. 5322
TürkiyeA base of 30,000 TL for each breach of the identification or continuous reporting duties (arts. 3, 6) and 50,000 TL for each breach of the suspicious transaction duty (art. 4(1)), as worded in 2020 and revalued each year (art. 28); doubled only for banks and other named financial institutions, not accountants; yearly total per duty capped (art. 13(5))Law No. 5549 art. 13(1)
UAEFrom AED 10,000 to AED 5,000,000 for each violation, plus warnings, sector bans, restrictions or license revocation, unless other legislation sets a more severe sanctionFederal Decree by Law No. 10 of 2025 art. 17(1)

Which client red flags should stop an accountant or formation agent?

Twelve flags cover a formation, an engagement and an audit. Most come from the UAE ministry's April 2026 guidance for TCSPs and for independent accountants and auditors, the rest from the UK's NRA. That guidance reads a flag as a sign that enhanced due diligence or further investigation may be warranted, and leaves the compliance officer to judge whether it is suspicious.

#SignalWhat it looks likeSource
1Hidden ownerRefuses to name the beneficial owner or explain the business and its historyUAE TCSP guidance s. 8.1; UAE accountants guidance s. 6.1.1
2Nominees to hideAsks for nominee directors or shareholders to hide ownershipUAE TCSP s. 8.1; NRA 5.234
3Bundled packageFormation, nominee director, nominee shareholder and registered office sold together, often to intermediaries in a supply chainNRA Box 5.N, 5.238
4Dormant turns activeA dormant company suddenly becomes active without a clear source of funds or business rationaleUAE TCSP s. 8.1.1; NRA 5.239
5Same directorsThe same individuals act as directors across an implausibly large number of companiesUAE TCSP s. 8.1.1; NRA 5.235
6Shared addressAn address linked to many unrelated companies, pointing to a mailbox serviceUAE TCSP s. 8.1.1; NRA 5.236
7RushPressure to finish incorporation fast while discouraging due diligenceUAE TCSP s. 8.1; NRA 5.233
8Narrow the auditRequests to accept management representations without evidence, or to exclude accounts, transactions or jurisdictions from scopeUAE accountants s. 6.1.1
9Cash without filingsA self employed, cash based or informal sector client who cannot provide verifiable tax filings, audited statements or reliable third party verificationUAE accountants s. 6.1.1; NRA 5.208
10Certificate for coverAn accountant's certificate of confirmation sought to support falsified accounts or invoicesNRA 5.208
11Ghost payrollPayroll for people who did no work, or payroll run as a standalone service or for a company the firm does not knowNRA 5.216
12Sanctions or secrecyClient or owner on a sanctions list, or funds through high tax secrecy jurisdictionsUAE accountants s. 6.1.1; UAE TCSP s. 8.1

How can a company formation hide the owner behind a structure?

Picture a formation agent (illustrative) that gets an order from an introducer abroad: a UK company, a nominee director, a nominee shareholder and a registered office, same day. Each service is lawful. Together they make the package in the NRA's Box 5.N, where a TCSP that sold such packages was fined for failing to identify and verify the beneficial owners of its corporate customers, most of them intermediaries.

The order carries three risks. The relationship may end at formation, so the agent sees the client once (NRA 5.229). An introducer in an offshore jurisdiction puts distance between agent and owner, a supply chain risk (5.211, 5.238). And a shelf company can give its buyer the look of a trading history, in some cases enough to work as a front company (5.239).

The UK has treated that sale as a TCSP service since 30 June 2026 (MLR reg. 12(2)(ab)), and from 10 July 2027 the formation trigger in table 2 applies across the EU.

Is a nominee director the beneficial owner?

No. The FATF Glossary rules it out: a nominee director "is never the beneficial owner" of the company it serves, and a nominee shareholder is not one "based on the shares it holds as a nominee". The search for the ultimate beneficial owner starts with the nominator. From 10 July 2027, EU nominees keep their nominator's identity and beneficial owners and disclose them to the company, which reports them to the central register and to obliged entities running due diligence (AMLR art. 66). A signed beneficial ownership declaration records the client's account; the register tests it.

What does Companies House identity verification change for formation agents?

Identity verification is a legal requirement for directors, people with significant control and Authorised Corporate Service Providers (ACSPs) (Companies House guidance, updated 1 June 2026). A serving director gives a personal code in the next confirmation statement, a new one on appointment or at incorporation. From 2025, alongside certain individuals, only ACSPs can form companies at Companies House, and an ACSP must be supervised under the MLR (NRA 5.236). A formation agent that files at Companies House now needs an AML supervisor first.

Which accountancy and TCSP dates matter from July 2025 to 2028?

  • July 2025. The UK risk assessment keeps accountancy risk high and TCSP risk High, and raises TCSP terrorist financing risk from low to medium (NRA 5.240).
  • 21 October 2025. HM Treasury names the FCA as future single supervisor.
  • 18 November 2025. Companies House identity verification becomes mandatory (Companies House, when you need to verify).
  • April 2026. UAE guidance for TCSPs and for independent accountants and auditors.
  • 30 June 2026. Selling an off the shelf company becomes a UK TCSP service (S.I. 2026/621).
  • 14 August 2026. FinCEN's final rule makes the exemption of US companies from beneficial ownership reporting permanent.

Next: the AMLR applies from 10 July 2027 with the formation trigger and the nominee duty; AMLA directly supervises only selected financial entities, from 2028. The FATF's mutual evaluation report on the UK is due in 2028 (HM Treasury supervision report 1.7).

What does a supervisor expect to find in an accountancy or TCSP AML file in 2026?

Thirteen controls answer what an AML supervisor asks a practice or TCSP, each with its source. Where complead, formerly Sanction Scanner, runs part of a control, the third column says which; the firm keeps the rest.

ControlSourceHow complead covers it
Business wide risk assessment naming each service lineDirective art. 8; AMLR art. 10 from 2027; MLR reg. 18Outside the platform
Registration with the right supervisor before tradingMLR reg. 56; HMRC TCSP guidance; UAE ministryOutside the platform
Due diligence before forming or serving a companyMLR reg. 30(2); AMLR art. 19(1)(c) from 2027KYB and UBO verification confirms the entity against official registers and vetted sources
Beneficial owner traced to a natural person, nominator behind every nomineeFATF Glossary; AMLR art. 66Owners followed up the chain until natural persons are reached; unresolved layers reported as unresolved
Register excerpt and discrepancy checkMLR reg. 30AOutside the platform for the excerpt; shareholding, directors, status and filings monitored continuously after onboarding
PEP and sanctions screening of client, owners and directorsMLR reg. 35; CR art. 163,500+ sanctions, PEP and watchlists from 220+ jurisdictions, refreshed every 15 minutes
Source of funds for cash intensive and offshore clientsNRA 5.208; UAE accountants guidance s. 6.1.1Outside the platform
Shelf company sales logged and checkedMLR reg. 12(2)(ab)Outside the platform
Intermediary and supply chain checksNRA 5.211, 5.238Every party screened against sanctions, PEP, watchlists and adverse media
Privilege decision recorded before not reportingPOCA s. 330(6)(b); Directive art. 34(2); AMLR art. 70(2); CR art. 18(2)Outside the platform
Report clock per jurisdictionTable 2Reporting support within case management
Reliance documented, responsibility keptDirective art. 25; MLR reg. 39; CR art. 20Outside the platform
Records kept 5 years (8 in Türkiye)Directive art. 40; MLR reg. 40; Regulation art. 46Each screening search logged with who ran it, what was searched, when, and the outcome, no match results included

Which lines of that file can complead hold?

KYB and UBO verification confirms a client company against official registers and vetted sources, then traces its owners layer by layer to the natural persons at the top and reports any layer it cannot resolve; whether a structure is blocked stays "a determination for your compliance function and counsel". Client screening and ongoing monitoring checks the client, its owners and its directors against sanctions, PEP data and watchlists, and an API trigger stops monitoring a one time formation client.

Every party also goes through adverse media screening. A routine case is closed by an agent, with its evidence, narrative and work log attached, and any alert can be traced to the rule behind it. Your MLRO decides and files from a case with reporting support within case management, and the record keeps who decided.

The decision on each order stays with you: form or serve the company only once the person behind it is identified and verified, and if that person cannot be found, decline the work and consider a report.

What the 2026 PDF adds. The page holds the whole guide. The PDF in the form beside it adds four templates: a new client due diligence sheet by service line with the formation trigger, a nominee and nominator declaration, a beneficial owner worksheet for companies and trusts with the register excerpt and a discrepancy note, and a privilege decision record (facts, rule, decision, reviewer).

Lead on compliance.

Join 800+ companies that trust complead to detect risk, prevent fraud and stay compliant.

One Platformall compliance, risk & fraud requirements in a platform

Frequently asked questions

Do accountants need to register with HMRC for AML supervision?

Only if no professional body supervises them. An auditor, external accountant or tax advisor not supervised by one of the bodies in Schedule 1 of the Money Laundering Regulations is supervised by HMRC (reg. 7(1)(c)(iv)). A firm that also offers trust or company services must be correctly registered for both, the UK risk assessment says, and HMRC says a TCSP without another supervisor must not run its business until its application succeeds. Most HMRC penalties on these firms are for applying late.

What is OPBAS?

OPBAS is the Office for Professional Body Anti-Money Laundering Supervision, based in the FCA. It oversees the legal and accountancy professional bodies that supervise firms under the Money Laundering Regulations, rather than the firms themselves. In 2025 it used its power of public censure against a professional body for the first time. HM Treasury plans to move professional services supervision to the FCA once primary legislation passes.

Is a company formation agent a TCSP?

Yes. Forming companies or other legal persons is the first TCSP service in the FATF Recommendations (R.22(e)), the EU texts (Directive art. 3(7); AMLR art. 2(1)(11)), the UK regulations (reg. 12(2)) and the UAE resolution (art. 3(5)). In the UK, selling an off the shelf company has also been a TCSP service since 30 June 2026. From 2025, only Authorised Corporate Service Providers, which must be supervised under the regulations, and certain individuals can form companies at Companies House.

Do tax advisors have AML obligations in the EU?

Yes. Directive 2015/849, as amended in 2018, names tax advisors beside auditors and external accountants, and adds anyone who gives material aid, assistance or advice on tax matters as a principal business or professional activity (art. 2(1)(3)(a)). The AMLR keeps that scope from 10 July 2027 (art. 3(3)(a)). Tax advisors share the reporting exemption for information obtained while ascertaining a client's legal position or in judicial proceedings (Directive art. 34(2); AMLR art. 70(2)).

Who supervises corporate service providers and auditors in the UAE?

The Ministry of Economy and Tourism, for the mainland and commercial free zones. Its April 2026 guidance reports that the 2024 national risk assessment put TCSPs at "Medium Risk for ML", and rates independent accountants and auditors medium for inherent risk and "Medium-Low" once controls are counted. In the first half of 2025 it imposed 95 penalties worth over AED 4 million on corporate service providers and auditors. Among accountants, only independent statutory auditors keep a reporting exemption for privileged information (CR art. 18(2)).

Can an accountant rely on another firm's customer due diligence?

In the EU, the UK and the UAE, yes, but the firm that relies keeps the responsibility. The Directive leaves ultimate responsibility with the relying firm (art. 25), as the AMLR will from 2027 (art. 48(1)); a UK firm "remains liable" (MLR reg. 39(1)); and the UAE requires a regulated, supervised third party (CR art. 20(1)). In Türkiye only financial institutions may rely on another financial institution (art. 21(1)), so an accountant runs its own checks.

Onur Taner
Written by Onur Taner Customer Success Manager

Onur Taner is Customer Success Manager at complead. Before joining in 2024, Onur spent more than eight years at Borda Technology, first as a PMO project engineer and then as customer success team lead. Onur writes about AML risk assessment, compliance costs and RegTech automation.

Originally published

Back to white paper