UK AML and compliance services.
Every Ltd company has obligations to Companies House. Anti-money laundering supervision, however, covers only certain activities. We assess the obligations that apply to your company.
- PSC notification for every company
- Companies House identity verification
- HMRC supervision only for certain activities
Obligations Applying to Your Company.
Companies House rules apply to every company. The anti-money laundering regulations, however, apply only to certain activities.
Companies House obligations
- Identity verification for directors and PSCs
- PSC (person with significant control) notification
- Annual confirmation statement
- Suitable registered address and email
Is your activity on this list?
- Accountancy services
- Company formation and address services
- Estate and letting agency
- Trade accepting cash payments of €10,000 or more
- Art market trading
- Money transfer and currency exchange
Additional obligations if listed
- Anti-money laundering registration with HMRC
- Customer due diligence
- Suspicious activity reporting
- Risk assessment, written policy and a responsible person
E-commerce, software and consultancy companies are mostly in the first group only.
Our AML and Compliance Services.
We assess the AML and regulatory obligations that apply to your business, and provide professional support in establishing and implementing the necessary policy, procedure, record-keeping and control processes.
Our service scope
- AML Compliance Assessment
- AML Risk Assessment
- AML Policies and Procedures
- KYC / CDD / EDD
- Sanctions and PEP Screening
- UBO and Corporate Compliance
- AML Training and Periodic Review
Outside our scope
- Legal representation, litigation and defence services
- Decisions and responsibility regarding suspicious transaction reporting
- Banks' independent account-opening and risk assessment decisions
- The client's own legal obligations and any sanctions arising from their breach
UK AML and Corporate Compliance Obligations.
Each heading sets out the scope of the obligation, when it applies and the support we provide.
Identity VerificationVerifying the identities of directors and persons with significant control with Companies House.Every company
- Obligation
- Identity verification is carried out through GOV.UK One Login or through an authorised corporate service provider (ACSP); at the end of the process, the person concerned is given a personal code.
- When it applies
- For newly formed companies, before the application. The obligation has been mandatory since 18 November 2025.
- Support from Ortac Global
- We provide support in determining the verification method suited to your situation and completing the steps of the process.
PSC NotificationIdentifying the people with significant control over the company and notifying the register.Every company
- Obligation
- The people who hold more than 25% of the shares or voting rights, who can appoint a majority of the directors, or who in practice control the company must be notified to Companies House.
- When it applies
- At company formation and within 14 days of a change being confirmed.
- Support from Ortac Global
- We prepare the notification and submit changes within the period.
Annual Confirmation StatementConfirming the company details held on the register once a year.Every company
- Obligation
- It must be confirmed to Companies House that the company's details are correct and that its activity is lawful.
- When it applies
- At least once a year.
- Support from Ortac Global
- We monitor the statement date and prepare the statement.
Registered Address and EmailThe address and email at which official correspondence can reach the company.Every company
- Obligation
- The company must have a suitable registered address in the United Kingdom and a registered email address; a PO box is not accepted.
- When it applies
- Continuously, from 4 March 2024.
- Support from Ortac Global
- We assess whether your registered address complies with the relevant rule.
Register of MembersThe record of ownership that the company keeps itself.Every company
- Obligation
- From 18 November 2025, separate registers of directors, secretaries and PSCs no longer need to be kept; the register of members remains mandatory.
- When it applies
- Continuously; updated on share transfers.
- Support from Ortac Global
- We provide support in setting up the register and determining the entries to be made on share transfers.
HMRC Anti-Money Laundering RegistrationThe supervision registration with HMRC for businesses operating in certain sectors.Depends on activity
- Obligation
- Accountants, company service providers, estate and letting agents, high-value cash dealers and art market traders that are not supervised by another body must register with HMRC.
- When it applies
- Before the activity begins.
- Support from Ortac Global
- We assess whether your activity falls within scope and provide support in preparing the application.
Customer Due DiligenceVerifying the identity of a customer with whom a business relationship is established, using documents.Depends on activity
- Obligation
- The customer's name, photographic official document, address and date of birth must be verified; where necessary, the beneficial owner must be identified.
- When it applies
- When a business relationship is established and when suspicion arises.
- Support from Ortac Global
- We provide support in establishing customer due diligence procedures and the record-keeping system.
Suspicious Activity ReportingAssessing suspicious transactions within the company and reporting them to the competent authority.Depends on activity
- Obligation
- Employees must pass a suspicious situation on to the company's nominated officer; the report is made to the National Crime Agency.
- When it applies
- When suspicion arises.
- Support from Ortac Global
- We provide support in putting the internal reporting process in writing. The decision to report rests with the company's nominated officer.
Risk Assessment and Record KeepingA written policy, staff training and keeping records for five years.Depends on activity
- Obligation
- A written risk assessment and policy must be established and staff must be trained; records are kept for five years from the end of the business relationship.
- When it applies
- Established when the activity begins; reviewed as the activity changes.
- Support from Ortac Global
- We provide support in preparing the policy and procedure documents to suit your activity.
PSC Definition and Scope.
The person taken into account in the notification is the individual at the end of the ownership chain.
- Threshold: more than 25%
The person who holds more than 25% of the shares or voting rights.
- Without a shareholding
A person who can appoint and remove a majority of the directors, or who in practice manages the company, is also treated as a PSC.
- Public register
PSC details are published on the Companies House register.
Customer Due Diligence and AML Control Process.
For activities within scope, every new customer goes through the same five-stage check. Banks and payment institutions also review your company in the same order.
Customer Information
The necessary information about the customer is obtained before the business relationship begins.
Identity Verification
Name, official document, address and date of birth are verified.
Sanctions Screening
The customer's name is screened against the UK financial sanctions list.
Risk Assessment
The risk level is determined according to country, activity and type of transaction.
Records and Retention
Documents are recorded and kept for five years.
Continuous AML Compliance Management.
Compliance is not a process completed at formation. Companies House obligations are met at four separate times.
- Before formationIdentity Verification
Directors and PSCs verify their identities and receive their personal codes.
- At formationPSC Notification
Controlling persons are notified to the register together with the application.
- On a changeNotification Within 14 Days
A PSC change is notified within 14 days of its confirmation.
- Every yearConfirmation Statement
Company details and the statement of lawful purpose are renewed.
Consequences of Non-Compliance with AML Obligations.
In the United Kingdom, some of these breaches may be a matter of criminal liability directly, rather than administrative sanction.
- Failure to Provide PSC Information
Refusing to provide information may constitute an offence; imprisonment of up to two years or a fine is provided for.
- Unregistered Activity
Carrying on an activity within scope without registering with HMRC may constitute an offence.
- Unverified Identity
A person who has not verified their identity cannot be registered as a director in a newly formed company.
- Striking Off the Register
A company that does not file its confirmation statement may be struck off the register.
Integrated Corporate Services.
AML and regulatory compliance are closely linked to your business's financial and corporate governance processes. At Ortac Global, we provide complementary professional services in accounting, banking, corporate advisory and company formation.
Frequently Asked Questions.
No. Registration is mandatory for those carrying on certain activities, such as accountancy services, company formation and address services, estate agency and high-value cash trading. PSC notification and the annual confirmation statement, however, apply to every company.
It is done online through GOV.UK One Login or through an authorised corporate service provider (ACSP). You do not need to live in the United Kingdom.
The individual who controls the company: a person who holds more than 25% of the shares or voting rights, who can appoint a majority of the directors, or who in practice manages the company.
Yes. In a single-owner company, the PSC is the company's owner, and the notification is still made.
Yes. The annual confirmation statement and the annual accounts are filed for companies with no activity as well.
It is notified to Companies House within 14 days of the change being confirmed. Once we are informed of the change, the notification process is carried out.
These institutions are also subject to anti-money laundering rules; they are required to verify the company's ownership structure and activity themselves.