Anti-money laundering compliance has become one of the defining operational pressures on UK accountancy practices, and the timing of this guide is not accidental. Three things are converging: enforcement is rising sharply, the Economic Crime and Corporate Transparency Act has introduced mandatory identity verification, and supervision itself is being restructured.
The enforcement data sets the scene. The Institute of Chartered Accountants in England and Wales found that 19.3% of supervised accounting practices — nearly one in five — were non-compliant with basic AML requirements in its latest quality assurance monitoring. HMRC’s AML fines rose 177% over four years. In the six months from April to September 2025 alone, HMRC issued 369 penalties totalling over £1.8 million across the sectors it supervises, including 134 penalties to accountancy service providers.
This guide covers what AML software for accountants actually does, how the leading UK options differ, what ECCTA now requires, and how the coming shift to a single professional-services supervisor should shape a buying decision made in 2026. It is written for practice principals, MLROs, compliance managers, and any accountant whose services bring them within the Money Laundering Regulations.
A note on who wrote this. This guide is published by OnBoardNow, which makes client onboarding software with built-in identity verification and AML screening for regulated UK firms, including accountants. We name other providers fairly and recommend them where they fit, and we have an interest in this market, which we have stated so you can weigh it. Read every vendor-published buying guide with that question in mind, this one included.
What Is AML Software for Accountants?
AML software helps an accountancy practice meet its obligations under the Money Laundering Regulations 2017: verifying client identity, screening against sanctions, PEP and adverse media lists, assessing and documenting risk, and maintaining the records a supervisor will inspect.
The category spans a wide range, and the range matters because buying the wrong type is common. At one end are single-purpose ID and AML checking tools that run a verification and a screening check and return a report. At the other are full client onboarding platforms that combine verification and screening with the wider intake process — engagement, document collection, and the risk assessment that ties it together. In between sit AML modules bundled inside practice management or tax software.
For an accountant, the right choice depends on whether the problem is a discrete checking task or the whole onboarding and compliance workflow. A firm that just needs to run an ID check on a new client wants a checking tool. A firm struggling with inconsistent risk assessments, incomplete records, and the documentation supervisors now scrutinise needs the workflow, not just the check.
The Types of AML Tool
| Type | What it does | Best for |
| ID and AML checking tool | Runs a verification and screening check, returns a report | Firms needing discrete checks, low volume |
| AML module in practice/tax software | Adds checks and records within an existing system | Firms already committed to that ecosystem |
| Client onboarding platform | Verification and screening within full intake and risk workflow | Firms fixing inconsistent process, not just checks |
| Risk assessment and policy tooling | Firm-wide and client risk assessment templates and tracking | Firms whose gap is documentation, not verification |
Many practices end up with a combination — a checking tool plus separate risk assessment templates plus manual record-keeping — and it is precisely that fragmentation the supervisors are now finding fault with. The direction of enforcement is toward the quality and consistency of the whole record, not the existence of an individual check.
Who Supervises Accountants for AML
Understanding your supervisor matters, because it determines the guidance framework, the inspection expectations, and increasingly the software features you need.
Accountancy firms are supervised either by a professional body or by HMRC. Professional body supervisors include ICAEW, ACCA, CIMA, CIPFA, AAT, ICAS and CAI among others. ICAEW alone supervises around 10,000 firms, making it the largest professional body supervisor in the UK. Firms providing trust and company services that are not supervised by a professional body fall to HMRC.
The obligation attaches to the service, not the job title. A bookkeeper providing tax advice faces the same requirements as a chartered accountant; a consultant helping with financial structuring must comply just as a traditional practice must. This catches many small firms that do not think of themselves as being in the AML regime at all.
A structural change is underway. HM Treasury has confirmed its intention to consolidate AML supervision for professional services under a single supervisor, with the Financial Conduct Authority designated to take the role. This would replace the current fragmented model of multiple professional body supervisors. The obligations under the Money Laundering Regulations 2017 do not change; the enforcement posture is expected to become more assertive and more data-driven. For scale, the FCA issued over £87 million in AML fines across all sectors in 2024, against HMRC’s £1.8 million across six months of its supervised population.
The ECCTA Change Every Accountant Must Act On
The Economic Crime and Corporate Transparency Act 2023 is the single most important recent development for accountants’ AML obligations, and it carries hard deadlines rather than general principles.
From 18 November 2025, all UK company directors and people with significant control must verify their identity with Companies House. This is a higher standard than the old tick-box AML check — it is identity verification held to Companies House standards. For accountants who form companies or file on behalf of clients, this reshapes onboarding directly.
ECCTA also creates the Authorised Corporate Service Provider regime. Accountancy firms that file with Companies House on clients’ behalf can register as ACSPs, and doing so brings specific obligations: mandatory registration with a UK AML supervisory body, rigorous client due diligence for all directors and PSCs, identity checks to the higher Companies House standard, secure storage of verification and AML records for seven years, and compulsory reporting of suspicious activity to the National Crime Agency.
The practical consequence is that identity verification for accountants has moved from a compliance nicety to a statutory requirement with a named date and a named standard. Software that performs ID checks to the old AML baseline may no longer be sufficient for firms acting as ACSPs — the Companies House standard is the one that now matters, and the November 2025 commencement means this is live, not forthcoming.
Companies House has also introduced features to help identify complex beneficial ownership structures, which is one of the harder parts of accountant CDD. Firms registering as ACSPs should factor both the obligation and these new tools into their software decision.
What Supervisors Are Actually Finding
Enforcement patterns tell you what to prioritise, and the pattern for accountants is specific.
ICAEW’s monitoring found 19.3% of supervised practices non-compliant with basic AML requirements. The recurring failures it and other supervisors identify are consistent: insufficient client due diligence that is not adequately documented, firm-wide risk assessments that are missing or not taken seriously, weak evidence, and outdated policies.
Regulation 18 of the Money Laundering Regulations 2017 makes a firm-wide risk assessment mandatory, yet supervisors repeatedly find practices treating it as a formality. The assessment must reflect the firm’s actual client mix, risk exposure, sectors and services, be written and version-controlled, updated at least annually, and capable of withstanding scrutiny.
There is an important nuance in the HMRC enforcement data that shapes where the real risk lies. The overwhelming majority of HMRC penalties — around 90% in the most recent period — were for trading without registration or failing to maintain registration, rather than for substantive failures such as inadequate due diligence. This means the businesses most at immediate penalty risk are often not those with weak procedures but those that failed an administrative step. For a practice, the lesson is twofold: register and maintain registration without fail, and separately ensure the substantive compliance is real, because professional body supervisors like ICAEW are scrutinising quality, not just registration.
Best AML Software for Accountants
The options most commonly evaluated by UK accountancy firms are below. Pricing reflects publicly available information as of July 2026; most vendors quote rather than publish, so verify directly.
| Platform | Type | Notable strengths | Pricing signal |
| IRIS Elements AML | AML within a practice ecosystem | Integrated with wider IRIS accountancy suite; ID and risk tools | Quote-based; often bundled |
| Thomson Reuters (Digita) AML | AML within tax/accountancy software | AI-assisted; integrated with Digita and tax workflow | Quote-based |
| FirmCheck | AML and compliance platform | Built for accountancy compliance workflow | Published/tiered |
| First AML | Onboarding and AML platform | End-to-end onboarding including complex structures | Quote-based |
| Amiqus | Client onboarding and verification | ID, AML and e-signature in one client journey | Published/tiered |
| OnBoardNow | Client onboarding and verification | ID with liveness, AML/PEP/sanctions, intake in one flow; ECCTA-relevant verification | Quote-based |
| Checking tools (various) | Single-purpose ID/AML checks | Fast discrete checks | Per-check |
A useful reference point when shortlisting: ICAEW runs a technology accreditation scheme for AML software, assessing products against the requirements of the regime. Accreditation is not an endorsement of fit for your firm, but it is a credible signal that a product has been independently assessed against the regulations — worth checking alongside reference calls with firms of your size.
A note on sources: most “best AML software” articles are published by vendors ranking themselves first, and some of the comparison sites in this space are themselves selling a product. We have listed OnBoardNow within the onboarding category alphabetically alongside its actual peers rather than at the top. Weight ICAEW accreditation, independent reviews, and reference calls above any vendor list, this one included.
Free AML Software for Accountants
“Free AML software for accountants” is a common search, and the answer needs honesty. There is no free product that performs genuine identity verification and sanctions, PEP and adverse media screening, because those checks draw on licensed, continuously updated data that carries a per-check cost no free tool can absorb.
What does exist at no cost: template firm-wide and client risk assessments, some published free by professional bodies and reputable firms, which address the documentation gap supervisors most often find. These are genuinely useful for a small practice getting its policies in order, and they cost nothing — but they are documents, not verification.
The distinction matters. A free risk assessment template helps you meet Regulation 18. It does not verify a director’s identity to the Companies House standard ECCTA now requires, screen a client against the sanctions list, or produce the seven-year verification record an ACSP must keep. For those, the check has a cost, and a product priced at zero cannot be performing them properly. Free trials of paid platforms, typically time-limited, are the sensible way to evaluate the real tools.
How to Choose
The questions that most change a shortlist, ordered by how decisive they are.
- Does it verify identity to the Companies House ECCTA standard, not just the old AML baseline? Decisive if you act as an ACSP.
- Is it ICAEW-accredited or independently assessed against the regulations?
- Does it handle your risk profile — firm-wide and client risk assessments, version-controlled and inspection-ready?
- Does it screen against sanctions, PEP and adverse media, and re-screen on an ongoing basis?
- Can it identify beneficial ownership for corporate clients, including complex structures?
- Does it produce a seven-year record in a form a supervisor would accept?
- Does the client experience create friction? Account creation and document faff cause drop-off.
- Does it integrate with your practice or tax software, or create a second system to maintain?
- What is the true cost — per check, per client, per user — at your actual volume?
- Where is data hosted, and what is the data processing agreement?
- Can you speak to reference firms of your size and supervisor?
Common Mistakes
Buying a checking tool when the problem is process. If your gap is inconsistent risk assessments and incomplete records — the things supervisors actually fine — a faster ID check does not fix it. You need the workflow.
Treating the firm-wide risk assessment as a formality. Regulation 18 makes it mandatory, supervisors find it missing or perfunctory constantly, and no software absolves you of getting it right. Tooling helps; it does not substitute for the thinking.
Verifying to the old standard after ECCTA. ID checks built for the pre-November 2025 AML baseline may not meet the Companies House standard now required of ACSPs. Confirm the standard, not just the presence of a check.
Forgetting registration. Around 90% of HMRC penalties are for trading without registration or failing to maintain it. It is the most common and most avoidable enforcement trigger.
Assuming professional body supervision is lighter. ICAEW’s 19.3% non-compliance finding shows professional body supervisors scrutinise quality closely. Membership is not cover.
Ignoring ongoing monitoring. CDD is not a one-off. Client risk changes, sanctions lists update, and a client who was low risk at onboarding may not stay so.
Underestimating client friction. A verification process that demands account creation and repeated uploads causes clients to stall, which tempts staff to cut corners — the origin of many documentation failures.
Implementation Roadmap
Implementing AML software in an accountancy practice runs 4 to 10 weeks depending on scope — a checking tool is quick; a full onboarding and risk workflow takes longer because the work is in defining process, not configuration.
- Week 1: Confirm your obligations. Establish your supervisor, whether you act as an ACSP, and what ECCTA requires of your specific services. This determines the verification standard you need.
- Week 2: Assess the gap honestly. Is the problem discrete checks, or inconsistent risk assessments and records? Buy for the actual gap, not the visible symptom.
- Week 3: Sort the firm-wide risk assessment. Whether via a template or the software, get Regulation 18 right first — it is the foundation everything else references and the thing most often found wanting.
- Weeks 4–5: Configure onboarding and verification. Set up the client journey, the verification standard, and the screening. Test with real client types including a corporate client with beneficial owners.
- Weeks 6–7: Pilot. Onboard real new clients through the system. Check the record it produces would satisfy your supervisor, not just that the check ran.
- Weeks 8–10: Roll out and set the standard. Move all new clients onto the process, set the internal rule that no engagement proceeds without completed onboarding, and diarise ongoing monitoring and annual risk assessment review.
Future Trends
FCA as single supervisor. The consolidation of professional-services AML supervision under the FCA is the largest structural change ahead. Expect more data-driven, assertive supervision and heavier documentation expectations. Choose systems that produce evidence, not just outcomes.
ECCTA identity verification embedding. With director and PSC verification mandatory from November 2025, the Companies House standard is becoming the reference point for accountant onboarding. Expect this to become the default expectation across the sector.
AI-assisted risk and validation. Supervisors and vendors are both exploring AI to validate AML data and flag inconsistencies. Expect assistive checks with human review, not autonomous decisions — the rationale must remain human-authored.
Ongoing monitoring replacing point-in-time checks. Perpetual KYC, where client risk is re-evaluated automatically as data changes, is moving from a bank concept toward professional services.
Consolidation of onboarding and compliance. The separation between winning a client and clearing them for AML is dissolving. Firms getting the most value treat onboarding and due diligence as one workflow.
Frequently Asked Questions
What is the best AML software for accountants?
There is no single best product; it depends on whether your need is discrete checks or a full onboarding and risk workflow, your supervisor, and whether you act as an ACSP under ECCTA. Options commonly evaluated by UK firms include IRIS Elements AML, Thomson Reuters Digita AML, FirmCheck, First AML, Amiqus and OnBoardNow, alongside single-purpose checking tools. A useful filter is ICAEW’s technology accreditation scheme, which assesses AML products against the regulations. Shortlist against your actual gap and speak to reference firms of your size.
Is there free AML software for accountants?
Not for genuine verification and screening. Identity verification and sanctions, PEP and adverse media checks draw on licensed, continuously updated data that carries a per-check cost, so no free product performs them properly. What is free and genuinely useful is template firm-wide and client risk assessments, which address the documentation gap supervisors most often find — but those are documents, not checks. For real verification, free trials of paid platforms are the sensible route.
What AML checks do accountants need to do?
Under the Money Laundering Regulations 2017, accountants must carry out client due diligence (verifying identity and, for companies, beneficial ownership), screen against sanctions and PEP lists, complete and document a client and matter risk assessment, maintain a firm-wide risk assessment under Regulation 18, monitor the relationship on an ongoing basis, and report suspicious activity to the National Crime Agency. Since November 2025, firms acting as Authorised Corporate Service Providers must also verify director and PSC identity to the Companies House standard under ECCTA, and keep verification records for seven years.
Who supervises accountants for AML in the UK?
Either a professional body or HMRC. Professional body supervisors include ICAEW, ACCA, CIMA, CIPFA, AAT and ICAS. ICAEW is the largest, supervising around 10,000 firms. Accountancy and trust-or-company service providers not supervised by a professional body fall to HMRC. The obligation depends on the services provided, not job title. HM Treasury has confirmed that professional-services AML supervision will consolidate under the FCA as a single supervisor, though the transition is gradual.
What does ECCTA mean for accountants’ AML?
The Economic Crime and Corporate Transparency Act 2023 introduced mandatory identity verification with Companies House for all UK company directors and people with significant control from 18 November 2025, to a higher standard than the old AML tick-box. It also created the Authorised Corporate Service Provider regime: accountants who file with Companies House on clients’ behalf can register as ACSPs, which requires supervised status, rigorous CDD for directors and PSCs, Companies House-standard identity checks, seven-year record keeping, and SAR reporting. In practice, ECCTA makes identity verification a statutory requirement with a named standard rather than a discretionary AML step.
How much does AML software cost?
Most AML and onboarding platforms for accountants are quote-based or priced per check or per client, because verification and screening carry per-use data costs. Single-purpose checking tools are typically priced per check. Full onboarding platforms may combine a per-user or per-client element with per-check charges. Budget beyond the headline for the internal time to set up risk assessments and the ongoing monitoring the regulations require. Ask specifically what a complete client onboarding costs at your volume, including any corporate client with beneficial owners.
AML compliance for accountants has moved decisively from background obligation to active operational risk. Nearly one in five practices failed basic requirements in ICAEW’s monitoring, HMRC fines have risen 177% in four years, ECCTA has made identity verification a statutory requirement with a hard November 2025 date, and supervision is consolidating under a regulator with a far larger enforcement appetite.
Two decisions determine whether software helps. First, buy for your actual gap: if the problem is inconsistent risk assessments and incomplete records — the things supervisors fine — a faster ID check will not fix it, and you need the workflow and the documentation. Second, verify to the standard the moment now requires: for firms acting as ACSPs, the Companies House ECCTA standard is the reference point, and a tool built for the old AML baseline may no longer be enough.
The through-line is evidence. Under both professional body scrutiny of quality and the coming FCA supervision, being compliant and being able to demonstrate compliance are different capabilities. Choose the system that produces a record which would survive an inspection, then make sure your firm-wide risk assessment is real. The practices that get caught are rarely the ones that did not care — they are the ones that could not show what they did.
Leave a Reply