AML in Private Equity and AML for Venture Capital (2026)

Why do criminals use private equity and venture capital funds?

A private equity or VC fund is often not the party that runs the AML checks. Under UK AML rules, the AML responsibilities "may reside with either the general partner of the private equity fund or with the private equity firm" (JMLSG Part II, June 2023, updated December 2025, para 13.3).

Under Türkiye's AML rules, a venture capital investment fund has no legal personality (Communiqué III-52.4 art. 4(1)), so the obliged party is the portfolio management company that founds it. US advisers come later. FinCEN's rule gives them no SAR duty before 1 January 2028.

Anti money laundering (AML) checks matter because, says the UK's 2025 national risk assessment, criminals "could make substantial business investments" through private equity, venture capital and other funds and present the gains as "legitimate" income (para 5.43).

Treasury's 2024 Investment Adviser Risk Assessment counted $284 billion of equity in private funds run by registered advisers (end of 2022) owned by non US investors whom a chain of intermediaries hid from the adviser. It also cites Mark Scott, convicted in November 2019, whose fake British Virgin Islands private equity funds laundered about $400 million of OneCoin proceeds.

The JMLSG calls a fund investment "normally" low risk and fund investors "generally" low risk (13.8, 13.12): commitments are long, illiquid and repaid to the investor. First funds and less institutional investor bases call for adapted due diligence (13.13).

Who must comply in a fund: the GP, the manager, the AIFM or the administrator?

Where both the fund and its manager are in scope, the AMLR wants their measures to "reflect the allocation of tasks between the fund and its manager" (recital 23). The holding company limb is new; the Directive's definition (art. 3(2)(a)) has none.

What AML obligations apply to private equity and VC fund managers in 2026?

The owner row changes for funds on 10 July 2027, when AMLR art. 61 makes a beneficial owner of a fund anyone who holds 25 percent or more of its units, can define or influence its investment policy, or controls it by other means. On reporting, Luxembourg's AML Law asks for a report "without delay", and in its 2026 case the CSSF found that nine months was not that. Sanctions law sits outside the table because it binds everyone in its jurisdiction, whatever their AML status.

Can a fund outsource investor due diligence to its administrator?

Under today's Directive, a firm that relies on a third party keeps the ultimate responsibility (art. 25). From 10 July 2027 the EU answer is yes for the checks, after notice to the supervisor (art. 18(1)); the decisions need its approval.

AMLR art. 18(3) bars outsourcing of, among others, the customer's risk profile, the decision to accept a customer and the FIU report (save to another obliged entity of the same group in the same member state). Art. 18(7) makes one exception: a fund with no legal personality, or with only a board that has delegated subscriptions and the collection of funds to another entity, may outsource those three tasks to a service provider after notice and the supervisor's approval, which weighs the provider's AML resources, experience and knowledge of the fund's business.

The fund stays fully liable (art. 18(2)), as a UK firm relying on another "remains liable". AMLA owes outsourcing guidelines by 10 July 2027 (art. 18(8)).

What must US fund advisers do before 2028?

Nothing under the adviser AML rule yet. FinCEN's 2024 rule makes most registered and exempt reporting advisers financial institutions with a program and SAR duty, now from 1 January 2028. The adviser customer identification rule is still a 2024 proposal. Treasury counted about 2,000 exempt venture capital advisers on 31 July 2023.

Sanctions bind advisers today. In June 2025 OFAC imposed its statutory maximum, $215,988,868, on GVA Capital, a San Francisco venture capital firm. Funds also meet AML through the banks that hold their accounts, which identify a fund's control person under 31 CFR 1010.230 unless an SEC registered adviser or another excluded institution operates or advises it.

Which red flags point to laundering through a fund?

• Owners out of sight. Chains of intermediaries hide the owners (Treasury IA risk assessment).
• Nominee shields. An intermediary named as the investor acts as "a 'shield'" for hidden investors (Treasury).
• Proxies. A relative acts as proxy for a sanctioned person (OFAC, GVA Capital, 2025).
• Odd information requests. A state funded investor seeks technology detail that "a limited partner investor seeking only an economic return may not typically request" (Treasury).
• Walkaways. A prospect withdraws when asked about the origin of its funds and wealth (CSSF, CF Fund Services, 2026).
• PEP under investigation. Close links to a PEP under investigation for fraud and corruption (same case).
• High risk money. An investor based in, or paying from, a high risk third country (JMLSG 13.12).
• Third party payments. A distribution requested for someone other than the registered investor (JMLSG 13.7).
• Transfers routed around a refusal. A refused transfer to a relative goes through a third party instead (CSSF, CF Fund Services).
• Netted orders. An intermediary nets its customers' orders, hiding investors from the fund (FATF para 100).
• Opaque assets. Hard to value assets, opaque investments and complex structures (UK NRA 5.43).

How do you run investor due diligence and KYC for limited partners?

Picture a $25 million commitment (illustrative) from a Cayman Islands feeder fund. Its largest investor, at 40 percent, is a family office investing through a Jersey discretionary trust, and its administrator offers a letter saying the KYC is done.

The JMLSG's answer is to look through. Where a family office invests, the money usually comes from trusts, which the firm should identify and verify; the firm may have to decide whether it can rely on a representation from the family office's administrator or the trustees, or in appropriate cases on confirmation from a reputable professional services firm (13.24). The administrator or trustee is often a trust or company service provider with its own AML duties, which do not lift the manager's.

The LP file collects an ownership chart up to the beneficial owners on an enhanced KYB form for complex ownership and a beneficial ownership declaration signed by the feeder. The checks then follow the life of the commitment:

When must LP checks be complete?

Before the fund is bound. The JMLSG asks that identification be completed and the firm satisfied as to the source of funds "before any unconditional contractual commitment to accept the investor into the fund is made" (13.28). Capital calls arrive at short notice over years (13.7), so a check left until the first call comes too late.

Who is the beneficial owner of an LP that is a fund, a partnership or a trust?

For an LP that is a fund, AMLR art. 61's three tests apply from 10 July 2027. For a partnership other than an LLP, the UK counts anyone entitled to or controlling more than 25 percent of capital or profits, or of votes, anyone meeting a significant control condition for Scottish partnerships, or anyone with ultimate control over management (MLR reg. 5(3)); ADGM uses 25 percent or more (AML Rule 8.3.4). Ten partners at 10 percent each pass no ownership test, so partnerships with no 25 percent owner turn on control.

For a trust, the ultimate beneficial owners are its settlor, trustees, beneficiaries and anyone with control. In a closely held fund with few investors, each with a large interest, ADGM expects each beneficial owner identified and verified, depending on risk (guidance 2 after Rule 8.3.6). In the example, the trust holds 40 percent of the feeder, so its people go into the file.

Which portfolio company parties need checks?

On a new investment, the JMLSG asks a firm to consider due diligence on the portfolio company, potentially any newco formed for the deal, the sellers and, potentially, a co investor (13.30). The portfolio company's beneficial owners must be identified; where the deal funds an exit by existing shareholders, they are often the sellers (13.32).

A buyout through two newcos (illustrative) still needs due diligence on the target group's top company as it stood before the newcos (13.34), and the firm must understand the ownership of the whole portfolio group (13.35).

Which fund managers and administrators were penalized for AML and sanctions failures since 2024?

Eighteen CSSF fines hit registered AIFMs, several of them fund GPs, for paperwork never sent; Fonds AAA and Max Gain Capital were fined twice. In the CF Fund Services case, a prospect with close links to a PEP under investigation withdrew when asked about the origin of the funds and wealth, and the CSSF held that walking away does not cancel the duty to report. No AML fine on a UK, Turkish or UAE private equity or VC manager since 2024 turned up for this guide.

What changed in 2025 and 2026, and what comes next?

• 17 July 2025. The UK NRA finds "limited evidence" of laundering through UK established or managed private funds and hedge funds (para 5.42).
• 1 January 2026. Federal Decree by Law Nos. 32 and 33 of 2025 take effect, renaming the UAE's securities regulator the Capital Market Authority.
• 2 January 2026. A final rule (91 FR 36) pushes the adviser rule's start to 1 January 2028; FinCEN had proposed the delay on 22 September 2025.
• 10 April 2026. FinCEN proposes a new program rule.
• 16 April 2026. Member states apply Directive (EU) 2024/927 (art. 3): non EU AIFs marketed in the EU, non EU AIFMs authorized in the EU and third country depositaries may not be in an EU high risk third country (depositaries tested at appointment).
• 14 August 2026. FinCEN's final rule narrows Corporate Transparency Act reporting (91 FR 52508).
• 16 September 2026. ADGM's FSRA finalizes its funds framework, with a transition for venture capital fund managers to 31 March 2027.

Ahead: AMLA's outsourcing guidelines by 10 July 2027, when the AMLR applies; the US adviser rule on 1 January 2028; AMLA direct supervision of selected institutions from 2028 (Regulation (EU) 2024/1620).

What should a private equity or VC manager's AML program checklist hold?

complead, formerly Sanction Scanner, covers some of these thirteen lines with a named product; "outside the platform" marks the lines that stay with the firm.

Where does complead fit in a fund manager's AML program?

complead's AML for investment and wealth firms setup runs investor checks, screening and monitoring on one engine, so each investor and deal party carries one risk score. KYB and UBO verification leaves the call on a structure with the firm: "a determination for your compliance function and counsel".

Monitoring starts and stops per name through API triggers, so an investor who has exited stops being screened. Agents close the routine cases. Each closed case carries its evidence, a narrative and the work log, and every alert shows which rule fired and which signals matched. The MLRO decides and files; the record keeps who decided.

Before the next close, write down for each fund which party owns investor due diligence (the GP, the manager or the administrator) and who signs the decision to accept an investor. Reliance letters, outsourcing notices and the report route all depend on that name.

What the 2026 PDF adds. Four working templates come with the download beside this page: an LP due diligence grid by investor type, a look through decision card (AMLR art. 61, MLR reg. 5(3), 31 CFR 1010.230(e)(3)), a capital call and transfer checkpoint card and a report clock card by jurisdiction. Every rule and case on this page was checked against its primary text or the regulator's decision on 5 November 2026.