AML checks for £10,000-a-month lettings: a letting agency workflow

A UK letting agency working on a tenancy or lease for at least one month must apply the anti-money laundering rules when the rent reaches £10,000 a month, or the equivalent in another currency, during any part of the term. The agency should identify the case before agreement, complete customer due diligence on both landlord and tenant, record its risk decision and route any suspicion through its nominated officer.

The threshold changed from €10,000 to £10,000 on 30 June 2026. The Money Laundering and Terrorist Financing (Amendment) Regulations 2026 made that sterling substitution. HMRC then published updated sector guidance in July 2026. The change is small on paper, but it is a useful reason to check that valuation gates, templates and staff instructions no longer rely on the old euro figure.

Decide whether the letting is in scope

Start with the proposed agreement, not the amount of money arriving on day one. HMRC's letting agent business guidance defines the relevant activity as work done in response to instructions from a prospective landlord or tenant where land is let for a month or more and the monthly rent is £10,000 or more during at least part of the term. It covers residential and commercial property, and instructions can come through a third party such as a joint agent or relocation agent.

Deposits, floats, management charges and several months of rent paid upfront do not turn a lower monthly rent into an in-scope letting. HMRC's sector examples use a £2,000 monthly rent with a £14,000 initial payment to show the distinction. The monthly rent is the test.

Shared accommodation needs the same agreement-level check. One agreement with a combined monthly rent of at least £10,000 may be in scope. Separate agreements are assessed separately; rents from several contracts are not simply added together. A short-term or serviced apartment can also qualify when its term is at least a month and its monthly rent reaches the threshold.

Put the threshold gate before agreement

The gate belongs where the agency can still stop the transaction from progressing. HMRC's customer due diligence guidance says due diligence applies to both the person letting the land and the person renting it. Its supervision handbook says it must be completed before the agreement is made.

Use a hard status rather than a diary note. An agreement should not move to signature while the landlord or tenant record is incomplete, a beneficial owner is unresolved, the risk assessment is awaiting approval or the nominated officer has placed a hold on the case. Record who can clear each state and the evidence they must see.

Treat the landlord and tenant as customers

Create a separate customer record for each side. For an individual, identify and verify the person using the methods set out in the agency's approved procedures. For a company, partnership, trust or other arrangement, establish the relevant ownership, control and authority. A representative's identity does not replace the underlying customer checks.

Record the purpose and intended nature of the relationship: the property, proposed term, rent, payment route and the parties' roles. If a relocation company, trustee, corporate occupier or joint agent is involved, state who gave instructions and on whose behalf. The operational record should make it possible for another trained colleague to understand the relationship without reconstructing it from email.

Customer due diligence is not the same as a Right to Rent check. Right to Rent is an England-only immigration control on residential occupation. These anti-money laundering duties apply across the United Kingdom to qualifying letting agency work and require checks on both sides of the letting. Use the separate Right to Rent guide for that process.

Make the risk decision specific to the case

HMRC's letting agent risk assessment says an agency must assess money laundering, terrorist financing and proliferation financing risk, taking account of customers, countries, services, transaction size and frequency, and the way services are delivered. Keep the business-wide assessment current, then apply it to the facts of each in-scope relationship.

Useful case fields include the customer type, ownership complexity, property and payment structure, source and destination of funds, geographic connections, remote onboarding and any mismatch between the stated purpose and observed behaviour. A factor should prompt proportionate enquiry, not an automatic allegation. Record the evidence considered, the conclusion and who approved enhanced due diligence where it was required.

Keep financial sanctions screening as a distinct control. It may apply even where the rent is below the letting-agency AML threshold. Likewise, the bank-detail change workflow deals with payment-diversion fraud; it does not satisfy customer due diligence or replace a sanctions check.

Keep a record that explains the decision

The file should show the threshold calculation, the customers checked and the agency's risk decision. Avoid a single “AML complete” tick. It hides which party was verified, when the evidence was reviewed and whether the conclusion still fits the relationship.

Restrict access to identity documents and risk material. The branch queue can show that a control is complete, due or blocked without exposing every document to every user. Retain the underlying evidence according to the agency's approved legal and retention policy, and preserve the audit trail when a record is corrected.

Monitor the relationship, not only the move-in

Set review triggers around facts the agency can observe. Examples include a new beneficial owner, a material rent change, an unexpected payer, a different payment route, a change in the customer's instructions or activity that conflicts with the recorded purpose. Link the alert to the customer and agreement so that the reviewer sees the original risk rationale.

A tenancy renewal or lease change should return to the scope gate. A legacy relationship should not be assumed to remain outside scope when the monthly rent or parties change. Portfolio reporting can surface approaching rent steps and overdue reviews, while the trained person remains responsible for the legal and risk judgement.

Give staff a confidential route for suspicion

Front-line staff need to know where to report knowledge or suspicion and what information to preserve. HMRC's suspicious activity guidancesays regulated businesses should set out their internal disclosure process in policies, controls and procedures. The nominated officer assesses the disclosure and, where the legal test is met, submits a suspicious activity report to the UK Financial Intelligence Unit as soon as practicable.

Do not place SAR decisions or sensitive internal disclosure material in routine tenancy notes visible to the customer or the wider branch. Staff training should also cover the risk of tipping off. The workflow needs a restricted escalation path, a case reference and a clear instruction on whether the commercial process can continue.

Turn the rule into a manageable agency queue

A useful portfolio view shows prospective agreements near or above the threshold, customers awaiting verification, enhanced checks awaiting approval, review triggers and restricted escalations. It should link back to the evidence rather than reducing the work to a green badge.

This is a distinct control from client money protection and redress membership. The client money protection guide covers those agency obligations. AML work asks a different question: whether a qualifying high-value letting has been identified, both customers have been checked and the risk has been understood before agreement.

The rules and HMRC guidance discussed here apply across the United Kingdom. An agency should test its own services, customer relationships and supervisory position against the current legislation and guidance, and take specialist advice on a difficult case. For a controlled multi-property process, see Tekniti's letting agency offering.