How estate agents can tackle identity fraud and financial crime

fraud

The UK property market has long been an attractive target for financial crime, and the compliance burden on estate agents has never been greater.

According to SmartSearch, money laundering, terrorist financing, identity fraud and sanctions exposure are no longer peripheral concerns — they sit at the heart of how agencies must now operate.

SmartSearch recently discussed fraud, identity & compliance in the UK property market, as well as a complete guide for estate agents.

According to HMRC, estate agents are required to assess risks on a regular basis to prevent financial crime, and SmartSearch’s 2026 compliance guide sets out how the sector should be approaching this increasingly complex landscape.

The risk environment has shifted considerably. Agencies are no longer contending only with anti-money laundering (AML) obligations; they must also address identity fraud, complex beneficial ownership structures, sanctions screening and the mounting expectation that every compliance decision can be clearly documented and defended. Digital identity fraud is rising, and tools such as automated verification and stronger operational controls are now reshaping how know-your-customer (KYC) and AML processes work in practice.

Why the property market remains a prime target

Real estate continues to appeal to financial criminals due to the large sums of money involved and the ease with which true ownership can be obscured. The UK’s 2025 National Risk Assessment confirmed that the sector remains vulnerable to illicit finance, particularly where overseas entities and complex ownership arrangements are involved. HMRC’s estate agency risk guidance goes further, stating that property across all values and all areas of the UK remains attractive to criminals — meaning no part of the market is immune.

The same National Risk Assessment noted that suspicious activity has been identified across the full spectrum of the market, from ultra-prime London properties to lower-value homes in other regions. Estate agency businesses now carry a medium money laundering risk rating — a slight increase since 2020. Agents must therefore understand who their client is, how a deal is structured and where the funds originate. HMRC expects businesses to consider customer risk, geography, service type, transaction size and frequency, all reflected in a written, up-to-date risk assessment.

Why compliance expectations have risen

The days of holding a copy of a passport and a utility bill are well behind us. HMRC’s AML guidance now requires firms to maintain documented procedures covering customer identification and verification, due diligence, ongoing monitoring and clear records. Those records — including risk assessments, policies, controls, procedures and training logs — must typically be retained for five years from the end of the relationship or transaction.

Estate agent compliance in the UK has changed most fundamentally in how firms demonstrate their reasoning. It is no longer sufficient to carry out checks; agencies must be able to show what those checks were, how red flags were handled and what controls were in place. Enhanced scrutiny is expected for politically exposed persons (PEPs), unusual payment routes, high-risk jurisdictions and complex ownership structures.

Letting agents are now under even greater pressure. Since May 2025, they have been classified as “relevant firms” under UK financial sanctions reporting obligations, adding an additional layer of risk management to lettings workflows.

The key risks estate agents and letting agents must manage

Identity fraud is among the most pressing concerns. Manual checks are slow, inconsistent and increasingly vulnerable to sophisticated fraud. SmartSearch’s 2026 guide highlights how the rise in digital identity fraud is pushing the sector towards digital verification tools, a trend reinforced by the 2025 National Risk Assessment’s warning that AI is being used to facilitate impersonation and abuse onboarding processes across regulated sectors.

Source of funds and source of wealth risk is another area where compliance often falls short. A clean-looking customer file does not remove transaction risk. HMRC expects businesses to scrutinise transactions on a risk basis, including examining source of funds where appropriate, and questioning payments made from accounts not held in the customer’s name. For higher-risk customers, including PEPs, firms are expected to understand how assets and wealth have been accumulated and whether the evidence supports what the client has said.

Complex beneficial ownership structures also remain a significant challenge. The National Risk Assessment notes that layered arrangements — particularly in high-end and commercial markets — continue to obscure who is really behind a transaction. Agencies must establish who the true decision-maker and beneficiary is before proceeding.

PEP and sanctions exposure requires equally careful handling. PEPs are not prohibited clients, but enhanced due diligence is mandatory. Sanctions checks against the UK Sanctions List are a compliance requirement, and — as OFSI confirmed — letting agents have been subject to financial sanctions reporting obligations as relevant firms since 14 May 2025. Screening must account for ownership and control issues, not just the name presented at the point of instruction.

Lettings-specific vulnerabilities should not be underestimated. The National Risk Assessment sets out that regulated letting agencies are brought within scope where monthly rent reaches €10,000 or more, or where they handle client funds. These agencies tend to face higher exposure to PEPs and high-net-worth individuals, with risks including repeated rent payments using illicit funds, subletting arrangements, upfront rent refunds and complex tenancy structures. For agencies handling both sales and lettings, compliance cannot be siloed within the sales team — it must span landlords, tenants, beneficial owners, sanctions exposure and all associated payment flows.

What good AML compliance looks like in practice

A robust compliance framework does not mean introducing friction at every step — it means applying the right checks at the right moments. In practice, this involves maintaining a documented business-wide risk assessment that reflects the specific risks of that agency’s model; conducting customer due diligence that goes beyond basic identity checks to include beneficial ownership, commercial rationale and behavioural context; and applying enhanced due diligence where elevated risk is identified.

Sanctions, PEP and adverse-media screening should be built into the process, not treated as an afterthought. Ongoing monitoring matters just as much as initial onboarding — HMRC’s guidance is clear that risk profiles can change, and record-keeping must reflect this over time.

Why digital identity verification is now essential

Digital identity verification offers more than speed. It enables deeper, more consistent checks and creates a stronger evidence trail for regulators, auditors and internal compliance teams. For estate agents, the advantages are practical: fewer delays at instruction or offer stage, more consistent decision-making across branches and a clear, defensible record of what happened and when. These are not marginal benefits — they are increasingly the baseline expectation for any agency that wants to demonstrate compliance under scrutiny.

Where the sector goes from here

The UK property market’s exposure to fraud, illicit finance and identity abuse shows no sign of diminishing. Regulators expect risk-based controls that are proportionate, consistent and defensible — and the bar is rising for letting agents in particular, given their new sanctions-related obligations. The agencies best positioned to manage this environment are those that treat compliance not as a separate function but as part of delivering a better, safer property experience — one built on proper identity verification, source-of-funds scrutiny, sanctions and PEP screening, robust records and technology that reduces manual error and blind spots.

Read the full SmartSearch post here. 

Copyright © 2026 RegTech Analyst

Enjoyed the story? 

Subscribe to our weekly RegTech newsletter and get the latest industry news & research

Copyright © 2018 RegTech Analyst

Investors

The following investor(s) were tagged in this article.