{"id":33675,"date":"2025-12-26T07:14:53","date_gmt":"2025-12-26T06:14:53","guid":{"rendered":"https:\/\/figsflow.com\/us\/?p=33675"},"modified":"2026-01-14T05:59:05","modified_gmt":"2026-01-14T04:59:05","slug":"client-due-diligence-for-us-accounting-firms","status":"publish","type":"post","link":"https:\/\/figsflow.com\/us\/client-due-diligence-for-us-accounting-firms\/","title":{"rendered":"Client Due Diligence for Accounting Firms: Best Practices under USA AML"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

When Sarah Mitchell opened her small accounting practice in Chicago three years ago, she never imagined that a routine client engagement would teach her one of the profession’s hardest lessons. A seemingly legitimate restaurant owner approached her for tax preparation services, paying a hefty retainer in cash. Everything seemed normal until federal investigators knocked on her door six months later. Her client had been laundering money through multiple businesses, and Sarah’s lack of proper due diligence had unwittingly made her practice part of the scheme.<\/p>

Stories like Sarah’s are becoming all too common. In 2024 alone, global fines for AML-related deficiencies exceeded $19 billion, and accounting firms increasingly find themselves in the crosshairs of regulators. The message is clear: knowing your client isn’t just good business practice anymore, it’s a legal imperative that can make or break your firm.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

What Is Client Due Diligence?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

In professional services such as accountancy, client due diligence generally involves verifying the client\u2019s identity, understanding the nature and purpose of the engagement, and assessing money laundering or terrorist financing risk on an ongoing basis.<\/p>

In practice, client due diligence involves collecting and verifying key information-such as legal names, addresses, government-issued identification, and beneficial ownership for business clients-before accepting an engagement and on an ongoing basis throughout the client relationship.<\/p>

The purpose of client due diligence is not simply data collection, but risk management. Accounting firms must understand the nature and purpose of the business relationship and apply a risk-based approach, increasing scrutiny where higher-risk factors are present. Under US AML laws, including the Bank Secrecy Act and guidance enforced by FinCEN<\/a>, this approach helps firms meet regulatory expectations and avoid unwitting involvement in financial crime.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Client\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Understanding AML Obligations for US Accounting Firms<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Let’s be straight about something: accounting firms aren’t banks, but that doesn’t mean you get a free pass on anti-money laundering compliance. While you’re not subject to the exact same regulations as financial institutions, your unique position in the financial ecosystem creates significant responsibilities and exposure.<\/p>

The Bank Secrecy Act, passed back in 1970 and strengthened by the USA PATRIOT Act in 2001, forms the backbone of AML requirements in the United States. For accounting firms, the primary touchpoint comes through Form 8300 reporting requirements, but your obligations extend far beyond just filling out forms when clients hand you large stacks of cash.<\/p>

Here’s what keeps compliance officers up at night: the “should have known” standard. Courts have repeatedly held accountants liable for ignoring obvious warning signs in client transactions. When you’re providing tax planning, CFO services, or business valuations, you have visibility into transaction patterns that even banks might not see initially. That visibility comes with responsibility.<\/p>

Courts have repeatedly held accountants liable for ignoring obvious warning signs in client transactions, exposing firms to serious legal consequences<\/strong><\/a> if AML obligations are not met.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Form 8300 Reporting and Client Due Diligence Requirements<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

If there’s one form every accounting professional should know by heart, it’s Form 8300. This isn’t optional, and the penalties for getting it wrong are severe.<\/p>

You must file Form 8300 within 15 days whenever your firm receives more than $10,000 in cash in a single transaction or in related transactions. And yes, “cash” means more than just paper currency. It includes cashier’s checks, money orders, bank drafts, and traveler’s checks with a face value of $10,000 or less when they’re part of a transaction exceeding $10,000.<\/p>

Here’s where it gets tricky: related transactions. If a client makes three separate $4,000 cash payments over two months for the same engagement, those transactions are related, and you need to file. The IRS specifically looks for patterns where people are trying to stay just under the $10,000 threshold.<\/p>

The filing timeline is strict, 15 days from when you receive the cash that pushes the total over $10,000. Miss that deadline, and you’re looking at penalties starting at $100 per occurrence, potentially reaching $500,000 annually for firms making less than $5 million per year. And if the IRS determines you willfully ignore the requirements? That minimum penalty jumps to $25,000.<\/p>

But here’s something many practitioners miss: you also need to notify your client in writing by January 31 of the following year that you filed Form 8300 about their transaction. That notification must include your firm’s name, address, total cash received and contact information. The only exception is when you’re filing a suspicious activity reporting those cases, you specifically should not notify the client, as doing so could tip them off to an investigation.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Building a Risk-Based Client Due Diligence Framework<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Not every client presents the same level of risk, and trying to apply the same scrutiny to everyone is both inefficient and ineffective. Smart firms build tiered due diligence systems that match the level of scrutiny to the level of risk.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t