UK AML Amendments 2026 Explained: Full Breakdown of MLR Changes

UK AML Amendments 2026 Explained: Full Breakdown of MLR Changes

 

Regulation Name: Money Laundering and Terrorist Financing (Amendment) Regulations 2026
Date Of Issue: 25 Mar 2026
Region: United Kingdom
Agency: UK Parliament

UK AML Regulatory Overhaul 2026: Full Breakdown of Amendments to the MLR 2017

The Money Laundering and Terrorist Financing (Amendment) Regulations 2026 mark one of the most comprehensive upgrades to the UK’s AML/CFT framework since the 2017 MLRs.

This draft statutory instrument introduces targeted but high-impact amendments across:

  • Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD)
  • Cryptoasset regulation
  • Trust transparency
  • Supervisory cooperation and data-sharing
  • Risk definitions aligned with FATF
  • Operational flexibility for crisis scenarios (e.g., bank insolvencies)

For AML leaders, this is not incremental—it is a systemic recalibration toward risk precision, digital finance oversight, and enforcement readiness.

Here is a line-by-line regulatory change tracker tailored for AML compliance, legal, and implementation teams. It maps each amendment → what changed → what it means → what you must do.

Line-by-Line Regulatory Change Tracker (Implementation Ready)

PART 1: GENERAL & COMMENCEMENT

Regulation

Change

What It Means

Action Required

Reg 1

Staggered implementation (incl. crypto in 2027)

Phased compliance timelines

Build multi-phase implementation roadmap (2026 vs 2027 readiness)

PART 2: CORE MLR 2017 AMENDMENTS

  1. DEFINITIONS & INTERPRETATION

Regulation

Change

Impact

Action

Reg 3

Introduces “cryptoasset business”; replaces € with £

Aligns AML with UK + crypto scope

Update policy definitions, screening logic, thresholds

  1. BUSINESS RELATIONSHIP SCOPE

Regulation

Change

Impact

Action

Reg 4

Adds new services (incl. off-the-shelf firms)

Expands onboarding scope

Update CDD triggers for TCSP clients

  1. APPLICATION & COVERAGE

Regulation

Change

Impact

Action

Reg 8

Pooled accounts brought into AML scope

New risk category

Identify all pooled accounts across business lines

  1. SECTOR-SPECIFIC SCOPE CHANGES

Regulation

Change

Impact

Action

Reg 10

Excludes reinsurance

Narrows AML scope slightly

Update product classification logic

Reg 12

Adds “off-the-shelf firm” definition

Targets shell structures

Enhance UBO + company lifecycle checks

Reg 13–14

€10k → £10k thresholds

Currency shift

Update transaction monitoring rules

  1. EXCLUSIONS

Regulation

Change

Impact

Action

Reg 15

Expands exclusions + £1,000 threshold

Minor scope recalibration

Review exemption logic

  1. RISK LANGUAGE MODIFICATION

Regulation

Change

Impact

Action

Reg 19 & 19A

“Unusually complex or unusually large given nature”

Contextual risk-based AML

Re-tune scenario models & alerts

  1. FCA REPORTING OBLIGATIONS

Regulation

Change

Impact

Action

Reg 23

Mandatory update within 30 days for changes/inaccuracies

Continuous compliance

Build regulatory reporting workflows + alerts

CUSTOMER DUE DILIGENCE (CDD)

  1. THRESHOLDS & TRIGGERS

Regulation

Change

Impact

Action

Reg 27

€1,000 → £800; other threshold updates

More transactions captured

Adjust CDD trigger engines + onboarding rules

  1. POOLED ACCOUNTS (MAJOR CHANGE)

Regulation

Change

Impact

Action

Reg 29

Full CDD + risk assessment + recordkeeping for pooled accounts

High-risk intermediary structures now transparent

 
 

Must identify underlying clients + UBOs

Removes opacity layer

Build look-through capability

 

5-year recordkeeping requirement

Audit trail enforcement

Enhance data retention systems

 

Law enforcement access mandatory

Increased disclosure obligations

Create rapid response workflows

  1. SIMPLIFIED DUE DILIGENCE

Regulation

Change

Impact

Action

Reg 37

SDD linked with pooled account controls

SDD becomes conditional

Re-define low-risk classification logic

TIMING & EXCEPTIONS

  1. INSOLVENT BANK CUSTOMERS (NEW REGIME)

Regulation

Change

Impact

Action

Reg 30ZA (new)

Allows onboarding before full CDD

Crisis flexibility

Create exception onboarding workflows

Reg 30 & 30A

Delay verification + discrepancy reporting

Reduced friction during insolvency events

Add scenario-based compliance playbooks

ENHANCED DUE DILIGENCE (EDD)

  1. FATF ALIGNMENT

Regulation

Change

Impact

Action

Reg 33

“High-risk third country” → FATF Call for Action

Dynamic risk lists

Integrate real-time FATF list feeds

  1. CRYPTO CORRESPONDENT EDD (CRITICAL)

Regulation

Change

Impact

Action

Reg 34A (new)

Full EDD for crypto correspondent relationships

Crypto = banking-level scrutiny

 
 

Requires: reputation checks, AML controls, senior approval

Governance upgrade

Implement crypto onboarding frameworks

 

Prohibits shell bank exposure

High-risk restriction

Add counterparty screening rules

 

Requires downstream CDD assurance

Indirect risk visibility

Build KYCC (Know Your Customer’s Customer) capability

ELECTRONIC MONEY & CRYPTO TRANSFERS

  1. THRESHOLD ADJUSTMENTS

Regulation

Change

Impact

Action

Reg 38

€ thresholds → £150 / £50

Minor adjustment

Update e-money monitoring rules

Reg 64C / 64G

Crypto transfer threshold → £800

Travel Rule tightening

Update crypto transaction monitoring

TRUST TRANSPARENCY

  1. TRUST REGISTRATION EXPANSION

Regulation

Change

Impact

Action

Reg 42, 45, 45ZA

Pre-2020 land-owning trusts now in scope

Backdated transparency

Conduct retrospective trust reviews

 

New deadlines (e.g., Sept 2027)

Compliance window

Build remediation plan

  1. TRUST ACCESS & CLASSIFICATION

Regulation

Change

Impact

Action

Reg 45ZB

Adds Type C trusts

Broader access

Update data access controls

  1. EXCLUDED TRUSTS EXPANSION

Regulation

Change

Impact

Action

Schedule 3A

Low-value + temporary trusts excluded

Reduced burden

Reclassify low-risk trusts

SUPERVISION & DATA SHARING

  1. REGULATORY COOPERATION

Regulation

Change

Impact

Action

Reg 50

Adds Companies House (Registrar)

Stronger corporate transparency

Integrate Companies House data feeds

  1. DISCLOSURE EXPANSION

Regulation

Change

Impact

Action

Reg 52

Adds Financial Services Act investigator

Broader intelligence sharing

Update data-sharing policies

  1. CONFIDENTIALITY FRAMEWORK

Regulation

Change

Impact

Action

Reg 52A

Extends to crypto firms + aligns with FSMA

Crypto under full AML secrecy regime

Update confidentiality policies

Reg 52B

Easier defence (either condition sufficient)

Legal risk recalibration

Update legal advisory frameworks

CRYPTO REGULATORY TRANSFORMATION

  1. CHANGE IN CONTROL (SCHEDULE 6B)

Area

Change

Impact

Action

Ownership thresholds

≥10%, 20%, 30%, 50% triggers

Formal control regime

Build ownership monitoring systems

FSMA alignment

Crypto treated like regulated firms

Regulatory parity

Align governance frameworks

FCA oversight

Mandatory notifications

Increased scrutiny

Create regulatory notification workflows

Criminal liability

Non-compliance penalties

Enforcement risk

Strengthen compliance controls

PRIMARY LEGISLATION AMENDMENTS

  1. TERRORISM ACT 2000 & POCA 2002

Change

Impact

Action

Currency updates (€ → £)

Consistency across AML laws

Align enterprise-wide thresholds

Off-the-shelf firms included

Corporate misuse prevention

Enhance corporate onboarding checks

FINAL IMPLEMENTATION PRIORITIES (FOR TEAMS)

Immediate (0–3 Months)

  • Threshold updates (£ conversions)
  • FATF list integration
  • FCA reporting workflows
  • Policy updates (definitions, crypto inclusion)

Medium-Term (3–9 Months)

  • Pooled account frameworks
  • Trust registration remediation
  • Enhanced transaction monitoring recalibration

Long-Term (2027 Readiness)

  • Crypto correspondent EDD
  • Change-in-control governance (Schedule 6B)
  • KYCC and network analytics capabilities

Bottom Line for AML Leaders

This is not just a regulatory update—it is an operational transformation blueprint:

  • CDD → Contextual & deeper
  • Crypto → Fully regulated
  • Transparency → Expanded across trusts & accounts
  • Supervision → Data-driven and interconnected

Detailed Explanation

Part 1: Foundational Structural Changes
  1. Legal Basis and Scope Expansion

The regulation is introduced under the Sanctions and Anti-Money Laundering Act 2018, reinforcing its alignment with UK sanctions and global AML frameworks.

Key Implementation Timelines:

  • General provisions: 21 days post-enactment
  • Crypto EDD (Regulation 34A): 1 February 2027
  • Crypto control regime (Schedule 6B): phased until October 2027

Strategic Insight:

This staggered rollout signals regulatory prioritisation of crypto oversight while allowing institutions time to adapt.

Part 2: Core Amendments to the MLR 2017
  1. Currency Standardisation: Euro → Sterling Shift

A major structural change replaces euro-denominated thresholds with sterling equivalents (1:1 conversion) across the regime.

Examples:

  • €10,000 → £10,000
  • €1,000 → £800 (risk-calibrated adjustment in some cases)

Why It Matters:

  • Aligns with post-Brexit regulatory independence
  • Ensures FATF compliance while recalibrating thresholds to UK risk context
  1. Expansion of Scope: “Off-the-Shelf Firms”

Amendment:

Trust or Company Service Providers (TCSPs) now explicitly include:

  • Selling off-the-shelf firms (inactive or minimally active companies)

Risk Impact:

  • Addresses shell company misuse
  • Closes loopholes in corporate structuring for ML/TF
  1. Clarification of Complex Transactions

Language updated from:

  • “complex or unusually large” →
  • unusually complex or unusually large given the nature of the transaction

Impact:

  • Introduces contextual risk assessment
  • Forces institutions to adopt risk-based, not rule-based monitoring
Part 3: Customer Due Diligence (CDD) Overhaul
  1. Revised CDD Thresholds

Key Changes:

  • Occasional transaction threshold reduced: €1,000 → £800
  • Other thresholds aligned to £12,000 / £10,000 depending on use case

Implication:

  • More transactions fall under CDD scope
  • Increased operational burden but improved detection
  1. Pooled Accounts: New AML Risk Category

New Requirements (Regulation 29):

Financial institutions must:

  • Understand purpose and usage
  • Verify consistency with customer risk profile
  • Apply risk-based controls
  • Maintain auditability and documentation

Customers must:

  • Provide beneficial ownership details
  • Maintain 5-year transaction records
  • Share data with law enforcement upon request

Strategic Insight:

This is a major shift toward transparency in intermediary structures (e.g., law firms, brokers).

  1. Simplified Due Diligence (SDD) Recalibration

SDD now explicitly incorporates:

  • Pooled account risk considerations

Impact:

SDD is no longer “light-touch”—it becomes risk-adjusted simplification.

Part 4: Crisis-Based Flexibility – Insolvent Bank Customers
  1. Introduction of Regulation 30ZA

A completely new framework allows:

  • Account opening before full CDD completion for customers of failed banks
  • Mandatory:
    • Identity verification upfront
    • Full CDD as soon as practicable

Safeguards:

  • Transactions restricted if risk triggers emerge
  • Applies only within 30 days of insolvency event

Strategic Value:

Balances:

  • Financial stability
  • AML risk control
Part 5: Redefining High-Risk Jurisdictions
  1. “High-Risk Third Country” → FATF Call for Action

Key Change:

  • UK now directly references FATF “Call for Action” list

Why It Matters:

  • Moves from static lists → dynamic global alignment
  • Ensures real-time AML responsiveness
Part 6: Cryptoasset Regulation – The Biggest Shift
  1. New Regulation 34A: Crypto Correspondent EDD

Applies to:

  • Crypto exchanges
  • Custodian wallet providers

Mandatory Measures:

  • Full due diligence on counterparties
  • Reputation and supervision assessment
  • Senior management approval
  • Documented responsibilities
  • Verification of downstream customers

Prohibitions:

  • No relationships with shell banks
  • No indirect exposure to shell bank usage

Strategic Impact:

This aligns crypto with:

  • Traditional correspondent banking standards (FATF Rec 13)
  • Technology risk controls (FATF Rec 15)
  1. Crypto Ownership & Control (Schedule 6B Overhaul)

Major Changes:

  • Applies FSMA-style control thresholds to crypto firms:
    • ≥10% ownership
    • Voting power thresholds
    • Significant influence

Introduces:

  • Mandatory notification of control changes
  • Fit-and-proper tests
  • Criminal liability for non-compliance

Strategic Insight:

Crypto is no longer “lightly supervised”—it is entering full financial regulatory parity.

Part 7: Trust Transparency Expansion
  1. Expanded Trust Registration Requirements

Now includes:

  • Trusts holding UK land before Oct 2020 and still active

Additional Changes:

  • Expanded categories (Type C trusts)
  • Removal of SDRT trigger for registration
  • New deadlines (e.g., Sept 2027)
  1. Expansion of Excluded Trusts

New exclusions include:

  • Low-value trusts (<£2,000 assets, <£5,000 income)
  • Temporary post-death structures
  • Estate variation trusts

Impact:

  • Reduces administrative burden
  • Focuses compliance on material risk structures
Part 8: Supervisory Cooperation & Data Sharing
  1. Inclusion of Companies House (Registrar)

Regulation 50 now includes:

  • Registrar of Companies in AML cooperation framework

Implication:

  • Stronger corporate transparency enforcement
  • Integration with beneficial ownership data
  1. Expanded Disclosure Gateways
  • Inclusion of Financial Services Act investigators
  • Enhanced FCA information-sharing powers
  1. Confidentiality Framework Expanded

Now applies to:

  • Cryptoasset businesses alongside banks

Also:

  • Aligns with FSMA disclosure provisions
  • Loosens criminal defence requirements (either condition sufficient)
Part 9: Reporting, Accuracy & Governance
  1. Mandatory Updates to FCA

Firms must:

  • Report material changes or inaccuracies within 30 days

Impact:

  • Continuous compliance obligation
  • Reduces stale regulatory data risk
Part 10: Miscellaneous but High-Impact Changes
  1. Insurance Scope Narrowing
  • Reinsurance excluded from AML scope
  1. Electronic Money Threshold Adjustments
  • £150 / £50 limits updated
  1. Crypto Travel Rule Adjustments
  • Thresholds aligned to £800
  1. Professional Body Update
  • Updated supervisory authority list

Global AML Implications

This legislation positions the UK as:

  • A leader in crypto AML regulation
  • A pioneer in dynamic FATF alignment
  • A driver of data-sharing-based compliance ecosystems

Global Ripple Effects:

  • Multinational firms must harmonise UK AML with EU + FATF frameworks
  • Crypto firms face global standardisation pressure

Key Strategic Takeaways for AML Leaders

  1. Risk-Based Compliance is Now Enforced

Static thresholds are replaced with contextual judgement requirements

  1. Crypto is Fully Mainstreamed into AML

Expect:

  • Bank-level scrutiny
  • Regulatory parity
  1. Transparency is Expanding Rapidly

Focus areas:

  • Trusts
  • Beneficial ownership
  • Pooled accounts
  1. Supervisory Integration is Deepening

Data-sharing is no longer optional—it is structural

Conclusion

The UK AML Amendment Regulations 2026 represent a precision upgrade rather than a wholesale rewrite—but their impact is profound.

They:

  • Close structural loopholes
  • Strengthen enforcement readiness
  • Integrate crypto into core AML
  • Shift compliance toward intelligence and accountability

For AML professionals, the message is clear:

The future of compliance is real-time, risk-based, and deeply interconnected.

Read about the amendments here.

Read about the product: Transact Comply

Empower your organization with ZIGRAM’s integrated RegTech solutions – Book a Demo