Anti-money laundering (AML)

Why AML matters for lenders

Anti-money laundering (AML) is the set of controls a regulated firm uses to prevent its products and systems being used to disguise the proceeds of crime. For UK lenders, AML is not an optional compliance overlay; it is a legal obligation under the Money Laundering Regulations and the Proceeds of Crime Act, overseen by the FCA for the firms it supervises. A lending relationship moves money and creates a legitimate-looking financial history, which is precisely what those laundering illicit funds seek.

The obligations apply across the sector: banks and building societies, consumer lenders, SME finance providers and credit unions all need proportionate AML arrangements. The scale and sophistication of controls should reflect the firm's size and the money-laundering risk its products carry, but the underlying duty to identify, assess and manage that risk is common to all.

The core controls

AML in practice rests on a few recognised pillars. Customer due diligence (CDD) establishes who the customer is and verifies that identity. Ongoing monitoring watches account and payment behaviour for activity inconsistent with what is known about the customer. Where risk is higher, enhanced due diligence applies, for example for politically exposed persons or complex ownership structures.

• Customer due diligence and identity verification at onboarding
• Enhanced due diligence for higher-risk customers and relationships
• Ongoing transaction monitoring for unusual or unexplained activity
• Screening against sanctions and politically exposed person lists
• Suspicious activity reporting to the National Crime Agency

Where AML meets onboarding and data

For a lender, AML sits alongside the credit and affordability journey rather than apart from it. At onboarding, identity verification serves both AML and fraud-prevention aims, and the same data sources, including the electoral roll, documentary checks and increasingly Open Banking, can support each. This overlap is an opportunity to reduce friction: a single, well-designed identity step can satisfy regulatory know-your-customer requirements while also feeding the fraud and affordability assessment.

Transaction monitoring data is similarly dual-purpose. Patterns that raise money-laundering concerns, such as rapid movement of funds or payments inconsistent with a borrower's stated circumstances, can also be signals of fraud or financial difficulty. Treating these signals coherently, rather than in separate silos, gives a lender a clearer and more efficient picture.

Governance and accountability

AML responsibility cannot be delegated to a system. A regulated firm must appoint a nominated officer (often the Money Laundering Reporting Officer) responsible for receiving internal reports and liaising with the authorities, and senior management must own the firm's risk assessment and controls. Under the Senior Managers and Certification Regime, accountability for financial-crime systems and controls is assigned to a named senior individual.

Effective AML is therefore as much about culture and clear ownership as about technology. The controls must be documented, tested and kept current against evolving typologies, and staff must be trained to recognise and escalate concerns. For a lender, a credible AML framework protects the firm from regulatory and criminal exposure and protects the wider financial system it operates within.