AML Compliance in Banking: What Expats and HNW Individuals Need to Know

Anti-money laundering compliance is the invisible architecture that governs every significant banking relationship in the United Kingdom. For most customers it is invisible: they open an account, answer a few questions about income, and proceed without incident. For HNW individuals and internationally mobile professionals, AML compliance is frequently the source of significant friction — accounts blocked, transactions delayed, relationships terminated — often without clear explanation.

Understanding the framework, why you may face enhanced scrutiny, and what your rights are when things go wrong is essential for any internationally mobile professional managing meaningful wealth through UK banking channels.

Important: AML regulations, OFSI guidance, and individual bank policies change frequently. This guide sets out the general framework as of mid-2026. Always obtain specific legal advice if you face an account restriction, SAR consequence, or de-risking action.

---

The UK AML Legislative Framework

UK anti-money laundering law rests on two primary pieces of legislation:

The Proceeds of Crime Act 2002 (POCA) is the primary criminal law instrument. It creates the principal money laundering offences — concealing, arranging, and acquiring criminal property — and establishes the civil recovery powers used against the proceeds of crime. Critically, it also creates the Suspicious Activity Report (SAR) regime: anyone in a regulated sector who knows or suspects that a transaction involves criminal property must file a SAR with the National Crime Agency (NCA) or face criminal liability for failing to do so.

The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017), which implement the EU's Fourth Anti-Money Laundering Directive into UK law (retained post-Brexit), impose the detailed compliance obligations on regulated firms: Know Your Customer (KYC) requirements, risk assessment, ongoing monitoring, and the appointment of a Money Laundering Reporting Officer (MLRO).

The NCA's Financial Intelligence Unit (UKFIU) receives SARs from regulated firms. In recent years UK regulated entities have submitted very large volumes of SARs — over 900,000 in 2021/22 and around 859,000 in 2022/23 — the vast majority from banks and financial institutions. The NCA analyses these reports for intelligence patterns and criminal investigation leads. Most individual SARs do not result in a criminal investigation; they are intelligence inputs into a much larger picture.

---

Know Your Customer: What Banks Must Establish

Every UK bank must conduct KYC checks before establishing a new customer relationship and at trigger points during an ongoing relationship. The standard KYC requirements are:

Identity verification: Government-issued photo ID (passport, national driving licence). Biometric identity verification is increasingly used by digital banks.

Address verification: Proof of residential address — utility bill, bank statement, HMRC correspondence — dated within the last three months.

The purpose of the relationship: What the account is for (personal current account, business account, savings, wealth management).

The expected nature of transactions: For a current account: monthly salary, routine outgoings. For a wealth management relationship: investment flows, international transfers, large deposits.

For the vast majority of customers — UK residents with straightforward employment income — the KYC process is completed once at account opening and then runs quietly in the background through transaction monitoring.

---

Enhanced Due Diligence: When Banks Look Harder

MLR 2017 requires firms to apply Enhanced Due Diligence (EDD) where the customer presents a higher risk. The specific triggers include:

Politically Exposed Persons (PEPs)

A PEP is a person who holds, or has held in the past 12 months, a prominent public position: a head of state or government, senior politician, senior government official, senior judicial official, senior military official, senior executive of a state-owned enterprise, or an ambassador or diplomat. The definition extends to close family members (spouse, partner, children, parents, siblings, in-laws) and known close associates (business partners, professional associates).

UK PEP status is treated differently from foreign PEP status under the FCA's 2023 guidance: UK domestic PEPs should not be subject to the same automatic enhanced scrutiny as foreign PEPs from higher-risk jurisdictions, provided there is no other risk factor. However, in practice many banks have been slow to update their approach, leading to the FCA issuing formal guidance in 2023 to remind firms that UK PEPs should generally be treated as lower risk than foreign counterparts.

Non-UK Residents and Non-UK Nationals

Banking a non-UK resident customer is treated as a higher-risk scenario by default, requiring additional KYC around the source of funds and the rationale for banking in the UK specifically. This is one of the most common friction points for internationally mobile clients.

Source of Funds and Source of Wealth

For significant account openings, large one-off deposits, or unusual transaction patterns, banks will ask two distinct questions:

Source of funds: Where did this specific money come from? The bank wants documentary evidence: a bank statement showing the transfer origin, a property sale completion statement, a dividend payment notice, a payslip.

Source of wealth: How did you accumulate your overall wealth? This is a broader biographical question — how was your business built, how was your inheritance received, what is your career? Evidence can include company accounts, professional references, tax returns over multiple years.

These questions feel intrusive, and some clients are offended by them. The legal and regulatory driver is clear: the bank has an obligation to ensure it is not facilitating the laundering of criminal proceeds, and for high-value relationships this means asking uncomfortable questions. The client who can answer these questions comprehensively and with documentation has a straightforward path. The client who cannot answer them — whether due to non-cooperation, complex structures, or genuinely opaque wealth origins — faces escalating scrutiny.

---

The SAR Consequence: What Happens When a Bank Files

If a bank forms a suspicion that a transaction may involve criminal property, it must file a SAR. If the transaction has not yet been completed, the bank files what is known as a "defence SAR" (a request for a Defence Against Money Laundering, or DAML) — seeking consent from the NCA to proceed. The NCA has seven working days from receipt of the SAR to grant or refuse consent. If the NCA consents — or does not respond within those seven working days — the bank can proceed.

If the NCA refuses consent, a moratorium period of 31 calendar days begins, during which the bank must not carry out the transaction. A senior law enforcement officer can apply to the court to extend the moratorium period in stages, up to a maximum of 186 days in total.

Throughout this process the bank cannot tell the customer why the transaction is delayed. Informing the customer that a SAR has been filed is the offence of "tipping off" under POCA, carrying a maximum penalty of five years' imprisonment. From the customer's perspective, a large international wire simply appears to be "processing" — and the bank cannot explain why.

In more serious cases, the moratorium period is extended by court order and the transaction remains blocked for months. In the most serious cases, accounts are closed permanently.

---

De-Risking: When Banks Exit Relationships

De-risking is the practice of banks terminating or refusing banking relationships with categories of clients or businesses deemed to present disproportionate AML compliance risk. Common de-risking targets include:

• Money service businesses (currency exchange, remittance companies)
• Cryptocurrency exchanges and businesses
• Non-profit organisations operating in high-risk jurisdictions
• Clients with significant connections to Russia, Iran, North Korea, and other high-sanctions-risk jurisdictions
• Non-resident clients with complex multi-jurisdictional structures

For a private client, de-risking typically manifests as a letter informing you that your account will be closed. Under rules in force from 28 April 2026, banks must generally give at least 90 days' notice before closing a personal account and provide a sufficiently detailed written reason — though where money laundering, fraud, or other financial crime is suspected, accounts may still be frozen or closed immediately without notice or a stated reason (providing detailed reasons in those cases risks tipping off if a SAR was filed).

---

Your Rights When Things Go Wrong

Request a written explanation: Ask the bank for its reasons for account closure or restriction. The bank may decline to provide specific reasons (for SAR-related closure), but it must provide at least a general indication of the policy basis for the decision.

Appeal to the Financial Ombudsman Service (FOS): If you believe your account closure was unjustified and the bank has not treated you fairly, you can complain to the FOS. The FOS can investigate whether the bank acted reasonably in the circumstances — but it cannot override a decision that is genuinely based on SAR filing, which is a legal obligation rather than a commercial choice.

Seek legal advice: If you believe you are the subject of an ongoing NCA investigation or that your funds have been restrained, specialist financial crime solicitors can engage with the NCA directly.

Document proactively: The best protection against AML friction is meticulous documentation of the source of your funds and wealth, maintained in a form you can produce quickly when requested. A well-organised client with clear documentation has a fundamentally different experience from one who is vague or uncooperative.

---

How Global Investments Can Help

Global Investments has extensive experience working with HNW and internationally mobile clients navigating complex banking relationships. We can help you prepare the documentation banks require, introduce you to private banking relationships experienced in handling sophisticated client profiles, and ensure your overall financial structure is transparent, well-documented, and positioned to withstand regulatory scrutiny.

If you are experiencing banking friction — account restrictions, enhanced due diligence requests, or de-risking — our team can help you understand your options and present your case to the relevant institution as effectively as possible.

This guide is for general educational purposes only and does not constitute legal, financial, or regulatory advice. Always seek independent legal advice specific to your circumstances if you face AML-related banking action.