A law firm in South-East London has recently been fined £114,006 for failures in anti-money laundering or AML compliance.
The firm did not break the law. It simply failed to keep its AML paperwork and risk assessments in order. Yet, it got one of the largest fines ever issued by the Solicitors Regulation Authority (SRA).
This should be your wake-up call.
If you are an accountant, bookkeeper or tax adviser handling client funds, you are expected to follow AML rules and be able to prove that you are following all AML rules. Even if no crime is involved, sloppy documentation can still cost you thousands.
So, what exactly went wrong, and how can you avoid the same mistake? Let’s understand in detail.
What Exactly Does AML Compliance Failure Mean?
Well, in the case of this firm, the regulator found that it had failed to meet two core AML requirements: having proper Policies, Controls and Procedures (PCPs) and conducting Client and Matter Risk Assessments (CMRAs).
PCPs are your firm’s written rules for preventing money laundering. They explain how you check client duties, monitor transactions and respond to anything suspicious. These need to be kept up to date, reviewed regularly and followed in practice.
CMRAs are risk checks you carry out for each client or matter. You assess how likely it is that the client or transaction could pose a money laundering risk. This is not optional. Every case should have a documented risk assessment.
In this case, the firm did not have a CMRA form or process in place. Their PCPs were also not fully compliant with current rules.
What’s more, these problems were not spotted during a client complaint or criminal case. They were flagged during a desk-based review by the regulator’s supervision team. And it was enough to result in a six-figure fine.
The same expectations apply to you. Regulators are not just looking at what you do. Instead, they want to see how you document your AML efforts. And if you lack proper documentation of AML checks, you have no defence.
Regulators Are Cracking Down on AML Non-Compliance
This incident was not a one-off.
In recent months, several firms have been fined for similar AML compliance failures. The problems look familiar: no firm-wide risk assessments, outdated AML policies and poor or missing documentation. In most cases, these are firms that should have known better and were already part of well-known accreditation schemes.
Some of the firms fined are members of the Conveyancing Quality Scheme (CQS) or have Lexcel accreditation. Both require strong AML compliance as part of their standards. That did not stop regulators from issuing penalties. It shows that having a badge on your website is not enough if your processes are not effectively implemented.
The Solicitors Regulation Authority (SRA) is now taking a more proactive approach. It is not just responding to reports or client complaints. It is reviewing firms directly, checking how their AML systems hold up and acting where they fall short.
No one is immune. Whether you are in legal services, accounting or elsewhere, the message is clear: If you handle client money, you need to have your AML house in order. And you need to be ready to prove it. Accountants, since they handle money directly, should understand AML and KYC requirements in detail.
What’s Changing?
There has been a small but important change to the UK’s anti-money laundering rules.
From 31 July 2025, the threshold for submitting a Defence Against Money Laundering (DAML) report has increased from £1,000 to £3,000. This means if you suspect a transaction that involves criminal property under that amount, you no longer need to file a DAML request before proceeding.
A DAML report is a part of a suspicious activity report (SAR). It’s what you file when you suspect a client is trying to move dirty money and you want consent from the National Crime Agency before continuing the transaction.
With the new threshold, small routine payments are less likely to trigger this reporting process. For bookkeepers, this means you can now return small deposits or payments on account even if the relationship ends abruptly without filing a report, as long as the value is under £3,000.
But let’s be clear. This is not a free pass to ignore suspicious activity. AML compliance is still required at the entry level. You still need to check who you are dealing with, assess risk and document your decisions. The only change is that the rules are now slightly more flexible for low-value transactions.
In short, there is less paperwork for minor issues. But the overall responsibility is still the same.
A Smarter Way Forward: FigsFlow
AML compliance is no longer just spotting fraud. It is about proving that you have the right systems in place and that you take your responsibilities seriously.
Even firms that fully cooperate with regulators and take action after the fact have still been fined. The reason was that their processes were not up to standard when it mattered.
So, the best defence is to build AML checks into your daily workflow, so nothing gets missed and everything is recorded properly. This is where technology can help.
FigsFlow is soon launching a built-in AML module designed for accountants, bookkeepers and tax advisers. From client onboarding to risk assessments, everything will be logged in one place.
If you have not reviewed your AML policies lately, now is the time. Do it before a regulator asks for them. And choose the tools that make it simple to stay compliant from the start.