Get audit-ready for UK AML
UK Anti-Money Laundering and Counter-Terrorist Financing Obligations · Money Laundering Regulations 2017 as amended in 2026, POCA 2002 and Terrorism Act 2000
Obligations the UK's money laundering regime places on regulated firms: scope, risk assessment, policies and training, customer due diligence including enhanced and simplified measures and politically exposed persons, reliance and record keeping, beneficial ownership information, supervisor registration and cooperation, transfers of funds and cryptoasset transfers, offences, disclosure duties under the Proceeds of Crime Act and Terrorism Act, and sanctions reporting. Items are set aside by the firm's sector. Law as at 30 June 2026; two items apply from later dates.
UK AMLWhat is UK AML?
Obligations the UK's money laundering regime places on regulated firms: scope, risk assessment, policies and training, customer due diligence including enhanced and simplified measures and politically exposed persons, reliance and record keeping, beneficial ownership information, supervisor registration and cooperation, transfers of funds and cryptoasset transfers, offences, disclosure duties under the Proceeds of Crime Act and Terrorism Act, and sanctions reporting. Items are set aside by the firm's sector. Law as at 30 June 2026; two items apply from later dates.
Who it applies to
Firms the regulations treat as relevant persons when they carry on business in the UK: credit and financial institutions, auditors, insolvency practitioners, external accountants and tax advisers, independent legal professionals, trust or company service providers, estate and letting agents, high value dealers, casinos, auction platforms, art market participants, and cryptoasset exchange providers and custodian wallet providers. Which duties apply depends on the sector.
How the standard is organised
Regulations grouped into parts on scope, risk assessment, policies and training, customer due diligence including enhanced and simplified measures, reliance and records, beneficial ownership, supervision and transfers of funds, summarised here as 81 obligation topics with the disclosure and sanctions reporting duties, each tied to its provision.
Framework names, marks and abbreviations (ISO, SOC 2, PCI DSS, TISAX, HIPAA, GDPR and others) are trademarks of their respective standards bodies and are used here only to describe what the Bitkosh Readiness Platform helps you track and prepare for. The badges shown are original Bitkosh artwork, not the official marks. Bitkosh Technologies is not affiliated with, sponsored by, or endorsed by ISO, AICPA, the PCI Security Standards Council, ENX/VDA, or any other framework owner, and using this platform does not by itself confer or guarantee certification — certification/attestation is granted only by the relevant accredited third-party body.
UK AML on the Bitkosh platform
The 81 UK AML controls sit in one workspace with gap assessment, evidence collection and your readiness score, and shared controls count towards the equivalent requirement in the other 47 ready frameworks at the same time — so a second framework costs a fraction of the first.
How the platform worksSample controls
Six controls from the platform's control library, chosen because they are the most specific to this framework.
- MLR reg 34ACryptoasset correspondent relationships (applies from 1 February 2027)
From 1 February 2027, a cryptoasset exchange or custodian wallet provider in a correspondent relationship with a similar third-country provider applies the extra regulation 34A measures, such as…
Enhanced due diligence and politically exposed persons - MLR reg 74BSkilled person reports: cryptoasset businesses
If the FCA requires a report from a skilled person on a cryptoasset business, arrange it and give the reviewer full access.
Supervisors and registration - MLR reg 14High value dealers, casinos and art market
Confirm whether the firm is a high value dealer, casino, auction platform or art market participant in scope, and which payment or value tests apply.
Scope and applicability - MLR Sch 6BChange of control of cryptoasset businesses: changes from 25 October 2027
From 25 October 2027, apply the change-of-control notice duties of the substituted Schedule 6B, which widen who must give notice to include a controller within the meaning of FSMA; parts already in…
Supervisors and registration - MLR reg 11Auditors, accountants and tax advisers
Confirm whether the firm acts as an auditor, external accountant, insolvency practitioner or tax adviser within the Regulations and record the conclusion.
Scope and applicability - MLR reg 29Extra measures for credit and financial institutions
Credit and financial institutions apply the additional measures the Regulations list, including the pooled-account measures of paragraph 10 onward as numbered in the revised text.
Customer due diligence
More financial & operational resilience frameworks
Frequently Asked Questions
Who publishes UK AML, and who does it apply to?
How is UK AML conformance demonstrated?
How is UK AML structured?
Ready to get audit-ready for UK AML?
See how the Bitkosh Readiness Platform gets you audit-ready for UK AML — and the other 47 ready frameworks — from a single control library.