AI agents for business finance: what they can and can't do
What AI agents can do in bookkeeping, close, collections and compliance today, where a person must stay in charge, and how to judge a product.
The short answer
A UK business needs anti-money laundering supervision if it carries out an activity covered by the Money Laundering Regulations 2017, such as estate or letting agency, accountancy or bookkeeping, trust or company services, or dealing in high value goods for large cash payments. If no professional body or the FCA supervises you, you register with HMRC before you start trading. Supervision brings duties: a risk assessment, customer due diligence, a nominated officer, training and records.
Who the Money Laundering Regulations cover
Most small businesses are not in scope. The Money Laundering Regulations 2017 apply to a defined list of sectors that are attractive to criminals moving money, and every business in those sectors must be supervised by someone. The common small-business categories are below.
| Activity | Usual supervisor |
|---|---|
| Estate agency and letting agency (lettings with high monthly rent) | HMRC |
| Accountancy and bookkeeping services | A professional body if you belong to one, otherwise HMRC |
| Trust or company service providers, including registered office services | A professional body, the FCA or HMRC |
| High value dealers accepting large cash payments for goods | HMRC |
| Art market participants for high value sales | HMRC |
| Money service businesses | HMRC |
| Solicitors and legal services in scope | The relevant legal professional body |
The thresholds that bring dealers and art businesses into scope are set in euros in the regulations, so check the current HMRC guidance rather than relying on a figure you remember. The key point is timing: HMRC says you must register before you start the regulated activity. Trading while unregistered is itself a breach.
What supervision asks of you
Registration is the start, not the end. Once supervised, a business is expected to run a small but real compliance programme.
- A written risk assessment of how your business could be used for money laundering, kept up to date.
- Policies, controls and procedures that match that risk.
- Customer due diligence before you take on a client, with enhanced checks for higher-risk cases such as politically exposed persons.
- A nominated officer who receives internal suspicion reports and decides whether to report to the National Crime Agency.
- Training for relevant staff, with a record of who was trained and when.
- Records of due diligence and transactions, generally kept for five years after the business relationship ends.
GOV.UK's guidance on nominated officers is clear that this person must have enough seniority and access to information to do the job. In a two-person firm that is usually the owner.
What an AI compliance agent can carry
Most of the load in a small firm is not the hard judgement. It is remembering, collecting and recording. Those tasks suit an agent.
- Holding the registration renewal date and the supervisor's annual fee in an obligations register.
- Running a due diligence checklist for each new client and refusing to mark onboarding complete while an item is missing.
- Screening new clients against sanctions lists and flagging possible PEP matches to a person.
- Keeping each client's documents, the date they were checked and by whom, with a retention date five years after the relationship ends.
- Reminding staff of training due dates and logging completion.
- Prompting a review of the risk assessment each year or when the business changes.
For a deeper look at screening limits, see our explainer on AI for KYC and AML monitoring.
Where a person must decide
The regulations put judgement on people, and an agent should not blur that. Whether a client's explanation of their source of funds is credible, whether to proceed with a higher-risk client, and above all whether to make a suspicious activity report are decisions for the nominated officer. An agent can assemble the file and the timeline. It should never decide that something is not suspicious, and it must not alert the client that a report is being considered, since tipping off is an offence.
Worked example
Example only. A two-person lettings agency in Leeds takes on a landlord who wants to collect rent for a property let at £11,000 a month. The agency is already registered with HMRC. The agent runs the onboarding checklist: identity verified, ownership of the property checked against the title, sanctions screening clear. The landlord asks for rent to be paid to a company in another country. The checklist requires the beneficial owner of that company, which is missing, so onboarding stays open. The agent raises it to the owner, who is the nominated officer, with the documents and a note of what is outstanding. She asks for the ownership details and decides what to do once she has them. Every step is logged.
Common gaps in small supervised firms
- A risk assessment written at registration and never updated, even after the firm took on new services or overseas clients.
- Due diligence done for the first client contact but not refreshed when a long-standing client's circumstances change.
- Identity documents stored in personal email accounts, so the firm cannot show what it checked or when.
- No record of training, even where training took place.
- Suspicions discussed informally and never written down, so there is no record of why the nominated officer did or did not report.
Each of these is a record-keeping failure rather than a failure of judgement, which is why they are the gaps an agent closes best. Supervisors look for evidence that the programme runs, not only that it exists on paper. A firm that can show a dated risk assessment, a completed checklist for each client and a training log is in a far better position at a supervisory visit than one that has to reconstruct them. The same register can hold the annual fee date and any action points from the last visit, so nothing raised by the supervisor goes unanswered.
Where Pryme fits
The Pryme Compliance agent keeps an obligations register, screens customers and counterparties, checks requests against the policies you load and records every refusal. Above its mandate it stops and a person decides, which is how AML judgements should be handled. Every action is recorded with its source; see audit trails for AI agents. It does not replace your supervisor or your nominated officer.
Questions people ask
Do I need to register before I start trading?
Yes. HMRC's guidance says businesses it supervises must register before they begin the regulated activity. If a professional body supervises you instead, follow its process.
Is a sole trader bookkeeper in scope?
Generally yes, if they provide accountancy or bookkeeping services to others. If they are not a member of a supervising professional body, HMRC supervises them.
Can an AI agent be the nominated officer?
No. The nominated officer must be a person with enough seniority to receive reports and decide whether to report to the National Crime Agency. An agent can prepare the file.
How long must due diligence records be kept?
The regulations generally require records to be kept for five years after the business relationship ends or the occasional transaction completes. Check the regulations and your supervisor's guidance.
Sources
- The Money Laundering Regulations 2017 (legislation.gov.uk) · accessed Oct 2026
- HMRC: Register with HMRC for money laundering supervision · accessed Oct 2026
- GOV.UK: Money Laundering Regulations, nominated officers and employee training · accessed Oct 2026
- HMRC: Understanding risks for estate agency and letting agency businesses · accessed Oct 2026
This article is general information, not financial, legal or tax advice. Products described are provided under the terms on this site and are subject to regulation and eligibility.