Money Laundering Regulations 2017
What this means for your business
- Applies to
- United Kingdom
- On this page
- 8 compliance obligations, 1 practical guide
What you must do
8 compliance obligations under this legislation — 8 can result in imprisonment.
Offences and prohibitions 8
Act as manager/officer or be beneficial owner without regulator approval
2 years imprisonmentIf you act as a manager, officer or beneficial owner of an auditor, solicitor, estate agent, high‑value dealer, art market participant or similar regulated firm, and you have not been approved (or do not have a pending approval application) by the relevant supervisory authority, you commit a criminal offence. On conviction you can be sentenced to up to three months in prison and a fine on summary conviction, or up to two years in prison and an unlimited fine on indictment.
Disclose confidential AML information
2 years imprisonmentIf you reveal information that is protected under the Money Laundering Regulations (i.e., you breach the confidentiality duty in regulation 52A), you commit a criminal offence. On a summary conviction you can be sentenced to up to three months in prison and an unlimited fine, while on conviction on indictment the maximum is two years’ imprisonment and an unlimited fine. The offence applies to any person who discloses the information, so businesses and their staff are both at risk.
Fail to comply with money‑laundering requirements
2 years imprisonmentIf you breach any AML requirement that applies to you – for example by not following FCA guidance or other supervisory guidance approved by the Treasury – you commit a criminal offence. On summary conviction (Magistrates’ Court) you can be sentenced to up to three months’ imprisonment, a fine or both; on conviction on indictment (Crown Court) the maximum is two years’ imprisonment, an unlimited fine or both. A defence is available only if you took all reasonable steps and exercised due diligence to avoid the breach.
Fail to notify FCA of acquisition or increase in control of a cryptoasset business
2 years imprisonmentIf you acquire or increase your control of a registered cryptoasset exchange provider or custodian wallet provider, you must give the FCA a notice as required by the Money Laundering Regulations. Not giving the notice (or breaching a restriction notice) is a criminal offence. On conviction you face an unlimited fine, and for the most serious breach up to two years’ imprisonment.
Make a false statement under oath (perjury)
2 years imprisonmentIf a person gives false testimony while under oath, they commit perjury under the Perjury Act 1911. A conviction can lead to imprisonment, an unlimited fine, or both.
Officer liable for corporate money‑laundering offence
2 years imprisonmentIf your company commits a money‑laundering offence, any officer who gave consent, turned a blind eye or was negligent is also guilty. The officer can be prosecuted and faces the same penalties as the firm itself.
Prejudice a money‑laundering investigation
2 years imprisonmentIf you knowingly disclose information or destroy/hide documents that are likely to prejudice an FCA, PRA, PSR or other appropriate officer’s investigation into a possible breach of the Money‑Laundering Regulations, you commit a criminal offence. Conviction can lead to up to two years’ imprisonment and an unlimited fine (on indictment) or up to three months’ imprisonment and a fine on summary conviction.
Provide false or misleading information or unlawful disclosure
2 years imprisonmentIf you give regulators false or misleading information when you think you are complying with the Money Laundering Regulations, or if you disclose information that you are not allowed to under those rules, you commit a criminal offence. On conviction you can be sentenced to up to two years in prison, an unlimited fine, or both. The offence can be tried either in the magistrates’ court or the Crown Court.
Penalties for non-compliance
8 penalties under this legislation. 8 can result in imprisonment. 8 carry an unlimited fine.
Act as manager/officer or be beneficial owner without regulator approval
Unlimited fine and/or 2 years imprisonment
Disclose confidential AML information
Unlimited fine and/or 2 years imprisonment
Fail to comply with money‑laundering requirements
Unlimited fine and/or 2 years imprisonment
Fail to notify FCA of acquisition or increase in control of a cryptoasset business
Unlimited fine and/or 2 years imprisonment
Make a false statement under oath (perjury)
Unlimited fine and/or 2 years imprisonment
Officer liable for corporate money‑laundering offence
Unlimited fine and/or 2 years imprisonment
Prejudice a money‑laundering investigation
Unlimited fine and/or 2 years imprisonment
Provide false or misleading information or unlawful disclosure
Unlimited fine and/or 2 years imprisonment
Practical guidance
Our guides explain how to comply with the requirements above.
Sections and provisions
148 classified provisions from this legislation.
Duties 48
- s.7 Supervisory authorities
- s.16 Risk assessment by the Treasury and Home Office
- s.17 Risk assessment by supervisory authorities
- s.18 Risk assessment by relevant persons
- s.19 Policies, controls and procedures changes
- s.20 Policies, controls and procedures: group level the relevant parent undertaking
- s.25 Supervisory action
- s.30 Timing of verification person purporting
- s.34 Enhanced customer due diligence: credit institutions, financial institutions and correspondent relationships
- s.37 Application of simplified customer due diligence
- s.41 Data Protection
- s.44 Trustee obligations
- s.45 Register of beneficial ownership of the individuals referred
- s.46 Duties of supervisory authorities
- s.47 Duties of supervisory authorities: information
- s.48 Duties of the FCA: guidance on politically exposed persons
- s.49 Duties of self-regulatory organisations
- s.50 Duty to co-operate
- s.51 Regulatory information
- s.54 Duty to maintain registers of certain relevant persons
- ... and 28 more duties
Offences and penalties 10
- Schedule 3 Relevant Offences
- s.26 Prohibitions and approvals
- s.79 Imposition of civil penalties
- s.86 Criminal offence
- s.87 Offences of prejudicing investigations
- s.88 Information offences
- s.92 Offence by bodies corporate, partnership or unincorporated association
- s.101 Recovery of charges and penalties through the court
- Obligation of confidentiality: offence Obligation of confidentiality: offence
- Schedule 6B Changes in Control of Registered Cryptoasset Businesses
Powers 14
- s.52 Disclosure by supervisory authorities and other relevant authorities
- s.55 Power to maintain registers
- s.57 Applications for registration in a register maintained under regulation 54 or 55
- s.59 Determination of applications for registration under regulations 54 and 55
- s.60 Cancellation and suspension of registration in a register under regulation 54 or 55
- s.67 Requests in support of other authorities
- s.69 Entry, inspection of premises without a warrant etc
- s.70 Entry of premises under warrant
- s.76 Power to impose civil penalties: fines and statements
- s.78 Power to impose civil penalties: prohibitions on management
- s.80 Injunctions
- s.96 Extensions of time
- s.103 Obligations on public authorities
- s.105 Disclosure by the Commissioners
Definitions 30
- Schedule 2 Listed Activities
- Schedule 4 Supervisory Information
- s.5 Meaning of beneficial owner: bodies corporate or partnership
- s.6 Meaning of beneficial owner: trusts, similar arrangements and others
- s.10 Credit institutions and financial institutions
- s.11 Auditors and others
- s.12 Independent legal professionals and trust or company service providers
- s.13 Estate agents and letting agents
- s.14 High value dealers, casinos, auction platforms and art market participants
- s.21 Internal controls
- s.24 Training
- s.27 Customer due diligence
- s.42 Application of this Part
- s.53 Interpretation
- s.61 Interpretation
- s.62 Transfer of funds supervisory authorities
- s.65 Interpretation
- s.66 Power to require information
- s.68 Requests to other authorities
- s.75 Meaning of “relevant requirement”
- ... and 10 more definitions
Exemptions 25
- s.15 Exclusions
- s.23 Requirement on authorised person to inform the FCA
- s.28 Customer due diligence measures
- s.29 Additional customer due diligence measures: credit institutions and financial institutions
- s.31 Requirement to cease transactions etc
- s.32 Exception for trustees of debt issues
- s.33 Obligation to apply enhanced customer due diligence
- s.35 Enhanced customer due diligence: politically exposed persons
- s.36 Politically exposed persons: other duties
- s.38 Electronic money
- s.39 Reliance
- s.40 Record-keeping
- s.43 Corporate bodies: obligations
- s.58 Fit and proper test
- s.72 Provision of information and warrants: safeguards
- s.73 Admissibility of statements
- s.74 Powers of relevant officers
- s.94 Offer of review
- s.106 General restrictions
- Access to information on the register Access to information on the register
- ... and 5 more exemptions