Money Service Businesses

---

Money Service Businesses (“MSBs”) play an essential role in the UK financial ecosystem, providing customers with access to international money transfers, foreign currency exchange, cheque cashing, and other payment-related services. They also sit squarely within one of the highest-risk sectors for money laundering, terrorist financing, sanctions evasion, fraud, and wider financial crime.

HM Revenue & Customs (“HMRC”), as the UK’s anti-money laundering supervisor for many MSBs, expects firms to operate robust, risk-based financial crime controls, maintain effective governance, and demonstrate that financial crime risk is understood and actively managed.

At The AML Practice, we help money remittance firms, bureau de change operators, and wider money service businesses build practical, regulator-ready compliance frameworks designed to meet HMRC expectations.

Under the UK Money Laundering Regulations, a Money Service Business generally includes businesses operating by way of business as:

• Money transmitters or remittance providers  (also known as Authorised or Small Payment Institutions)
• Bureau de change or currency exchange businesses 

HMRC’s guidance confirms that businesses undertaking these activities by way of business must generally register for money laundering supervision unless already supervised by another authority such as the Financial Conduct Authority in respect of relevant activities. 

Money Service Businesses frequently deal with:

• high transaction volumes 
• cross-border fund flows 
• cash-intensive customer relationships 
• rapid movement of funds 
• customers with limited traditional banking access 
• transactions involving higher-risk jurisdictions 

These characteristics make the sector attractive to criminal actors seeking to move, disguise, or integrate illicit proceeds.

HMRC therefore expects MSBs to apply enhanced scrutiny and demonstrate that risk is being actively identified, assessed, monitored, and mitigated. HMRC’s published MSB guidance specifically focuses on customer due diligence, record keeping, suspicious activity reporting, and risk-based controls. 

Bureau de change businesses frequently receive large cash deposits, creating an opportunity for criminals to introduce illicit cash into the financial system.

Common indicators include:

• repeated transactions just below identification thresholds 
• customers exchanging unusually high volumes of low denomination notes 
• inconsistent explanations regarding source of funds 
• use of multiple branches or agents to fragment transactions 

Criminals may deliberately break transactions into smaller amounts to avoid triggering customer due diligence or enhanced scrutiny.

Typical examples include:

• multiple linked remittances to the same beneficiary 
• transactions conducted by family members or associates 
• repeated use of different branches or agents 

Money remittance businesses are increasingly targeted by organised criminal networks using third parties to move criminal proceeds.

Indicators may include:

• multiple senders using identical beneficiary details 
• high volumes of first-time customers sending to the same recipient 
• inconsistent occupation or income information 
• transactions that appear inconsistent with customer profile 

Some remittance channels are used to settle informal trade arrangements, particularly involving cash-based import/export activity.

Indicators may include:

• repeated payments with vague commercial explanations 
• business payments structured as personal transfers 
• transfers to jurisdictions unrelated to stated business activity 

Terrorist financing often involves relatively low-value transfers rather than large transactions.

Risk indicators may include:

• repeated transfers to conflict regions 
• transfers to non-profit or informal intermediaries with limited transparency 
• unusual urgency or secrecy around payment purpose

Geopolitical sanctions risk continues to increase.

Common red flags include:

• payments routed through third countries 
• spelling variations of names 
• use of family members or nominees 
• repeated transactions involving high-risk corridors 

Some MSBs may unknowingly facilitate hawala-style activity or informal settlement arrangements.

Indicators include:

• customers unable to explain recipient relationships 
• little economic rationale for transfers 
• repeated offsetting transactions between corridors 

Most UK MSBs that are not otherwise supervised must register with HM Revenue & Customs for anti-money laundering supervision before trading. HMRC explicitly states that businesses applying after January 2020 must not operate until registration has been approved. 

Registration typically involves:

• online application to HMRC 
• disclosure of business ownership and control structure 
• fit and proper testing of beneficial owners, officers, and managers 
• disclosure of all trading premises 
• payment of relevant supervision fees 
• ongoing annual renewal and declarations 

HMRC may also conduct:

• desktop compliance reviews 
• onsite compliance inspections 
• thematic reviews 
• enforcement investigations 
• civil penalties or criminal referrals where serious failings are identified 

HMRC’s published guidance makes clear that MSBs must implement proportionate, risk-based anti-money laundering controls. This typically includes:

Firms must document and maintain an assessment of their exposure to:

• customer risk 
• product risk 
• geographic risk 
• delivery channel risk 
• transaction risk 

Firms must maintain written AML policies covering:

• customer onboarding 
• customer due diligence 
• enhanced due diligence 
• ongoing monitoring 
• sanctions screening 
• suspicious activity reporting 
• record retention 
• training 
• escalation and governance 

HMRC expects firms to:

• verify customer identity 
• understand ownership and control 
• understand source of funds where appropriate 
• identify politically exposed persons 
• conduct sanctions screening 
• apply enhanced due diligence for higher-risk relationships 

MSBs must monitor transactions for:

• unusual patterns 
• linked activity 
• velocity anomalies 
• corridor risks 
• behavioural changes 

Where suspicion arises, firms must make reports to the National Crime Agency and maintain internal reporting procedures.

Staff must receive ongoing AML and financial crime training relevant to their role.

HMRC expects firms to retain customer, transaction, and due diligence records for the required statutory period.

HMRC’s official MSB guidance expressly identifies customer due diligence, record keeping, suspicious activity reporting, and risk-based policies as core supervisory expectations. 

In our experience, common weaknesses include:

• outdated or generic business-wide risk assessments 
• inadequate source of funds enquiries 
• weak sanctions screening controls 
• insufficient transaction monitoring 
• poor documentation of suspicious activity decisions 
• training records not maintained 
• compliance frameworks copied from unrelated sectors 
• weak oversight of agents or introducers 

These weaknesses can result in remediation notices, financial penalties, or ultimately deregistration.

For many money service businesses, anti-money laundering compliance is not simply a regulatory obligation—it is fundamental to the continued survival of the business.

HMRC has significant enforcement powers under the UK Money Laundering Regulations. Where HMRC identifies serious weaknesses in a firm’s anti-money laundering framework, governance arrangements, customer due diligence processes, transaction monitoring, record keeping, or suspicious activity reporting procedures, it has the ability to take increasingly serious supervisory and enforcement action.

This may begin with:

• formal remediation notices 
• compliance improvement directions 
• enhanced supervisory monitoring 
• compulsory information requests 
• unannounced compliance visits 
• civil financial penalties 

However, where HMRC concludes that a business presents an unacceptable money laundering risk, or where deficiencies are repeated, systemic, or left unaddressed, HMRC can go much further.

HMRC has the power to:

• refuse a new registration application 
• suspend an existing money laundering registration 
• cancel or remove your AML registration 
• prohibit beneficial owners, directors, or senior managers from operating in the sector 
• issue significant financial penalties 
• publish enforcement action publicly 
• in the most serious cases, pursue criminal investigation or prosecution 

For a money remittance business or bureau de change operator, loss of HMRC AML registration can be existential.

Without HMRC supervision, most money service businesses cannot legally continue to operate. In practical terms, this can mean:

• immediate cessation of trading 
• inability to onboard new customers 
• termination of banking relationships 
• loss of payment partners or correspondent relationships 
• contractual breaches with agents or commercial partners 
• reputational damage in the market 
• loss of enterprise value 
• in some cases, closure of the business altogether 

In our experience, by the time HMRC formally escalates concerns, the warning signs have usually been present for some time—outdated risk assessments, poor documentation, weak source of funds enquiries, inadequate sanctions screening, or management teams relying on generic “template” AML documents that do not reflect how the business actually operates.

The good news is that most AML failings can be identified and remediated before HMRC reaches that stage.

At The AML Practice, we help money service businesses identify weaknesses early, remediate control gaps, and build practical, regulator-ready frameworks designed not only to satisfy HMRC—but to protect your ability to continue trading.