EU AML Reform for CSPs, Lawyers, Accountants & Tax Advisers

Professional gatekeepers will remain supervised primarily at national level, but the new EU AML framework raises the importance of risk-based client acceptance, ownership transparency, source-of-funds evidence and defensible compliance files.

For website publication. Prepared for business owners, investors, lawyers, tax professionals, accountants and corporate service providers.

The European Union’s new anti-money laundering and counter-terrorist financing framework is frequently described as a reform of the financial sector. That description is correct, but incomplete. The new framework also has direct practical relevance for the professional gatekeepers who form, administer, advise, audit and support business structures across the EU.

Trust and company service providers, lawyers, accountants, auditors and tax advisers are not peripheral to the AML system. In many cases, they are the professionals who first see the ownership chain, the purpose of a structure, the source of capital, the tax and commercial rationale, and the real decision-makers behind a company, trust or investment vehicle. For that reason, the new EU AML package should be understood as a professional services issue, not merely as a banking issue.

The direction of travel is clear. The EU is moving towards a more harmonised AML rulebook, more consistent supervisory expectations and a stronger evidential standard for customer due diligence, beneficial ownership assessment, ongoing monitoring and internal risk management. For professional firms, the practical question is no longer whether a client file contains KYC documents. It is whether the file explains the client, the structure, the risk and the professional judgement exercised by the adviser.

1. Why Professional Gatekeepers Matter in the AML System

Money laundering and terrorist financing risks rarely arise only at the point of a bank transfer. In corporate and investment structures, the relevant risk may appear much earlier: when a company is incorporated, when a nominee arrangement is proposed, when a trust or foundation is introduced, when funds are contributed to a structure, when a beneficial owner is changed, or when tax and legal advice is used to reorganise ownership.

This is why the EU framework applies not only to credit and financial institutions, but also to a range of non-financial businesses and professions. The European Commission explains that obliged entities must apply customer due diligence when entering into business relationships, including identifying and verifying clients, monitoring transactions and reporting suspicious transactions. AMLA’s own materials similarly emphasise that the non-financial sector includes a broad range of professions and businesses that may face money laundering or terrorist financing exposure.

Professional gatekeepers are important because they are often positioned at the entrance to the legal and financial system. They may establish companies, provide registered office and administration services, prepare accounts, advise on tax structures, support acquisitions, hold client information, assist with corporate reorganisations or certify documents used by banks, registries and other institutions. They are therefore expected to understand not only the formal documentation, but also the substance of the arrangement.

2. Who Is in Scope?

The new EU AML Regulation continues to treat a wide range of professional and business activities as AML-relevant. For the company services sector, the most obvious category is trust and company service providers. For professional advisory firms, the relevant categories include auditors, external accountants, tax advisers, notaries, lawyers and other independent legal professionals when they carry out specified activities.

For lawyers and other independent legal professionals, the scope is not unlimited. It generally concerns participation in, or assistance with, particular types of transactional activity. These include matters such as buying and selling real property or business entities, managing client money, securities or other assets, opening or managing bank, savings, securities or crypto-asset accounts, organising contributions necessary for the creation, operation or management of companies, and creating, operating or managing trusts, companies, foundations or similar structures.

For tax advisers, auditors and accountants, the practical exposure may arise when professional work goes beyond narrow technical filing and becomes part of a broader arrangement involving ownership, funds, assets, tax positioning, accounting records, management reporting or cross-border structuring. The new framework should therefore be read by professional firms as a reminder that AML obligations attach to the nature of the service and the risk of the relationship, rather than to the title printed on the adviser’s business card.

3. What Changes for CSPs?

For trust and company service providers, the new EU framework reinforces a point that serious CSPs already understand: incorporation is not the end of compliance. In many cases, it is the beginning of an ongoing compliance relationship. The CSP may be required to know the client, identify the beneficial owner, understand the source of funds and source of wealth, screen relevant parties, assess the risk profile and monitor whether the client’s activity remains consistent with the information originally obtained.

The practical change is likely to be one of depth, consistency and evidence. A CSP file should not merely contain passports, utility bills and corporate certificates. It should contain a clear ownership chart, reliable verification of beneficial owners, an explanation of control, an understanding of the business model, evidence supporting source of funds and source of wealth where appropriate, and a documented risk assessment. Where the structure is cross-border, layered or involves trusts, nominees, holding companies or high-risk jurisdictions, the reasoning must be more explicit.

CSPs should also expect greater attention to ongoing monitoring. A client accepted as low or standard risk at incorporation may become higher risk if ownership changes, a new jurisdiction is introduced, business activity changes, adverse media arises, sanctions exposure develops, or transaction patterns no longer match the stated business profile. Under the new environment, a periodic review should not be a mechanical document refresh. It should be an opportunity to confirm whether the original risk assessment remains valid.

4. What Changes for Lawyers?

For lawyers, the reform requires careful distinction between protected legal activity and AML-regulated transactional activity. The AML framework does not abolish legal professional privilege, nor does it remove the special role of lawyers in advising on legal rights, defending clients or representing clients in proceedings. However, where legal professionals assist with specified transactions, corporate structures, client assets or the creation and management of legal arrangements, AML obligations may arise.

The practical implication is that legal work connected with business structures should be assessed at the outset. A law firm advising on a corporate acquisition, a real estate transaction, a shareholder restructuring, the establishment of a holding company, a trust or foundation arrangement, or the opening of accounts should consider whether AML obligations are engaged and what level of due diligence is required.

The more sensitive issue for law firms is not merely client identification. It is the professional judgement required when a matter is technically lawful but commercially opaque. A transaction may have legal form, but still require questions about ownership, source of wealth, source of funds, control, purpose, tax rationale and economic substance. The new EU direction makes it increasingly difficult for advisers to treat AML as a separate administrative process detached from the legal substance of the matter.

5. What Changes for Accountants and Auditors?

Accountants and auditors frequently see information that other professional advisers may not. Accounting records, management accounts, trial balances, ledgers, invoices, payroll data, intercompany balances and audit evidence can all reveal inconsistencies between the client’s stated activity and its financial reality. For that reason, accountants and auditors are an important part of the gatekeeper framework.

The new AML environment will place greater emphasis on using accounting and audit knowledge in a risk-sensitive way. A professional firm should be alert to unusual related-party transactions, unexplained loans, unsupported capital contributions, payments without commercial rationale, inconsistent revenue patterns, transactions involving high-risk jurisdictions, nominee-like arrangements, and changes in the beneficial ownership or control of the client.

For auditors, the distinction between audit obligations and AML obligations must be properly managed. Audit work is not the same as AML supervision. Nevertheless, audit findings may give rise to AML concerns, and professional firms should have internal procedures for escalation, review and reporting where appropriate. For accountants providing bookkeeping, accounting or management reporting services, the position is similar. The firm may not control the client’s business, but it should not ignore information that creates suspicion or materially changes the risk profile.

6. What Changes for Tax Advisers?

Tax advisers are specifically relevant because tax advice can form part of legitimate planning, but may also be used to obscure ownership, move funds, create artificial documentation or present an arrangement as commercial when its underlying rationale is unclear. The EU framework recognises that persons providing material aid, assistance or advice on tax matters may fall within the scope of AML obligations where the activity is carried on as a principal business or professional activity.

The practical implication is not that tax planning becomes suspicious. Lawful tax planning remains a normal part of commercial life. The issue is whether the adviser can understand the client, the ownership, the funds and the purpose of the arrangement. Where a proposed structure involves multiple jurisdictions, unexplained funding, no clear commercial rationale, artificial intercompany transactions or an attempt to conceal the person who ultimately controls the arrangement, AML considerations become central.

Tax advisers should therefore integrate AML review into the acceptance and continuation of relevant assignments. It is not sufficient to view tax analysis as an isolated technical exercise. In the new EU environment, tax advice connected to corporate structures, investments, financing, asset holding, relocation, residence planning or cross-border reorganisations should be supported by adequate client due diligence and documented risk assessment.

7. From Formal KYC to Evidenced Professional Judgement

One of the main practical changes under the EU reform is the shift from formal compliance to evidenced compliance. In the past, many client files were judged by the presence of standard documents: passport, proof of address, corporate extract and engagement letter. Those documents remain necessary, but they are not sufficient on their own.

A defensible professional file should answer a series of practical questions. Who is the client? Who ultimately owns or controls the client? Why is the structure being used? Where did the funds originate? How was the wealth generated? What is the commercial activity? Which jurisdictions are involved? Are there sanctions, PEP or adverse media issues? Why was the client accepted? Why was the risk rating assigned? What has changed since onboarding?

AMLA’s developing work on customer due diligence, ongoing monitoring, business-wide risk assessment and supervisory methodologies confirms that the EU is moving towards more structured expectations across both financial and non-financial sectors. Professional judgement remains important, but it must be recorded. A conclusion that a client is acceptable should be capable of being understood by another competent professional, a compliance reviewer or, where required, a supervisor.

8. Practical Consequences for Clients and Referral Networks

The impact of the reform will also be felt by business owners, investors and referral partners. Clients should expect professional firms to ask more questions at the beginning of the relationship and at periodic intervals thereafter. These questions may concern beneficial ownership, control, the source of funds, the source of wealth, the commercial rationale for a company or trust, expected transactions, counterparties, geographic exposure and the client’s broader group structure.

This should not be interpreted as hostility to legitimate business. On the contrary, good AML procedures protect legitimate clients by distinguishing explainable structures from opaque or unsupported arrangements. A client who can provide a coherent ownership chart, clear corporate documents, proper accounts, contract evidence, bank records and an explanation of funding will usually be in a stronger position when dealing with CSPs, banks, auditors and tax authorities.

Referral networks will also need to adjust. A professional introduction is helpful, but it is not a substitute for the receiving firm’s own AML assessment. CSPs, lawyers, accountants and tax advisers should be cautious about relying on informal comfort, reputation or historic relationships where the underlying documentation is incomplete. In a more harmonised EU environment, the quality of the evidence will increasingly matter more than the seniority of the introduction.

9. What Professional Firms Should Review Now

Professional firms should use the transition period before the new framework fully applies to review their internal arrangements. This does not necessarily require a complete redesign of every AML procedure. It does require a serious gap analysis against the direction of the new EU framework.

The first area is client acceptance. Firms should consider whether their onboarding forms properly capture ownership, control, business activity, expected transactions, geographic exposure and source of funds. The second area is beneficial ownership verification. The file should not only identify the beneficial owner, but explain how ownership and control were determined. The third area is risk rating. A risk score should be more than a drop-down selection; it should be supported by reasons.

The fourth area is ongoing monitoring. Firms should define when a client file must be reviewed and what events trigger a reassessment. The fifth area is escalation. Staff should know when to involve compliance, MLRO functions or senior management. The sixth area is documentation. If a file cannot explain why a client was accepted or retained, the firm may struggle to defend the decision later.

The new EU AML framework should be viewed as a material development for professional services. CSPs, lawyers, accountants and tax advisers are not being asked to become law enforcement authorities. They are, however, expected to act as responsible gatekeepers when they provide services that can be used to create, administer, finance or explain legal and commercial structures.

The practical standard is therefore moving towards consistency, evidence and defensibility. A firm that knows its clients, understands the structures it administers, documents ownership and control, asks appropriate questions about funds and wealth, and records its risk decisions will be better placed to operate in the new EU environment. A firm that treats AML as a form-filling exercise may find the new framework considerably more difficult.

For business owners and investors, the message is equally clear. Legitimate structuring remains possible, but it must be explainable. Professional advisers will increasingly need to see not only the legal documents, but also the commercial logic, ownership trail and financial evidence that support the structure.

‍

Frequently asked questions

# Does the new EU AML framework apply only to banks?

No. Banks and financial institutions remain central, but the new EU AML framework also applies to a broad non-financial sector, including trust and company service providers, auditors, external accountants, tax advisers, notaries and legal professionals when they carry out specified activities.

# What is changing for CSPs under the EU AML reform?

CSPs should expect stronger emphasis on evidenced customer due diligence, beneficial ownership verification, source-of-funds and source-of-wealth assessment, ongoing monitoring and documented risk decisions.

# Are lawyers automatically subject to AML obligations for all work?

No. Legal professional privilege and protected legal work remain important. AML obligations generally arise where lawyers participate in specified transactional or structuring activities, such as company formation, client asset management, account opening or trust and company arrangements.

# Why are accountants and auditors relevant to AML compliance?

Accountants and auditors may see financial information that reveals unusual transactions, unexplained loans, unsupported capital contributions, related-party issues or inconsistencies between the client’s stated activity and financial records.

# What should tax advisers review?

Tax advisers should integrate AML review into relevant assignments involving structures, financing, asset holding, relocation, residence planning and cross-border reorganisations, particularly where ownership, funding or commercial rationale is unclear.

# What should clients prepare for professional advisers?

Clients should be ready to provide identity documents, ownership charts, corporate records, financial statements, contract evidence, source-of-funds information, source-of-wealth evidence where relevant and a clear commercial explanation of the structure.