Why We Ask So Many Questions: Anti-Money Laundering, Explained Simply

If you have worked with Smallbizbod before, you will know we ask for a fair bit of information before we start: proof of who you are, proof of your address, and sometimes details about where funds are coming from or who owns your business. We recently received a reminder from HMRC about our obligations in this area, and it felt like the right moment to explain, in plain English, why we ask for all of this, what the law actually requires of us, and why it matters, not just to us, but to you too.

What is anti-money laundering, really?

Money laundering is the process of disguising money that has come from crime so that it looks like it came from a legitimate source. It is not just something that happens in films involving suitcases of cash; in reality, it happens through ordinary-looking businesses and transactions, including the kind of accountancy, bookkeeping, and business services we provide every day.

Because businesses like ours sit close to our clients' money and financial affairs, we are considered a "gatekeeper." That means the law expects us to check who we are dealing with and to be alert to anything that does not add up, rather than simply taking everything at face value.

The legal side: why this is not optional

Anti-money laundering, or AML, rules in the UK come from the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, which have been updated several times since, most recently with changes that took effect in June 2026. These regulations require certain types of business, including accountancy and bookkeeping service providers like Smallbizbod, to be registered with a supervisor and to follow a set of rules designed to prevent our services being used, knowingly or not, to launder money or fund crime.

Smallbizbod is supervised directly by HMRC. That means HMRC checks that we are a fit and proper business to operate, and it can inspect our records, our processes, and our compliance at any time.

This is not a box-ticking exercise we can quietly skip. HMRC has real enforcement powers, and it uses them; in one recent six-month enforcement period alone, HMRC issued £3.2 million in penalties to supervised businesses, largely for failing to carry out proper risk assessments and due diligence checks. Serious or deliberate breaches can also lead to criminal prosecution, with penalties of up to two years in prison, and trading without registration can see any income treated as the proceeds of crime. It is worth being clear-eyed about that.

Why it matters to me personally and professionally

Beyond the legal requirement, this matters to me because Smallbizbod exists to be a trusted operational partner, not just another service provider. Trust is the whole business. If I were careless about who I worked with or how money moved through our processes, I would be putting that trust, and the businesses of every client who relies on me, at risk.

There is also a very practical, personal stake. As the business owner, I am the one who has to satisfy HMRC's "fit and proper" test, keep our risk assessments and policies up to date, train myself and anyone who works with me, and be ready to answer for our processes if HMRC ever asks. A failure here would not just be a fine on a balance sheet; it would put my registration, my reputation, and the business I have built at risk. Meeting these obligations properly is part of what lets me sleep at night and look every client in the eye.

What we actually do to stay compliant

In practice, being an AML-compliant business means a few ongoing things happen behind the scenes: we carry out a written risk assessment of our business and the kinds of clients and transactions we take on; we have documented policies and controls that set out how we check clients and monitor for anything unusual; we keep records of the checks we carry out and the information we gather, for the length of time the law requires; and, if something genuinely does not look right, we have a duty to report it, confidentially, to the relevant authorities.

None of this is about suspicion as a default. It is about having a consistent, defensible process that protects the business, the client, and the wider system we all rely on.

Why we ask you to fill in those forms

This is the part clients usually want explained, and it is a fair question. When we ask you for a copy of your passport or driving licence, a recent utility bill or bank statement, or, if you run a limited company, your certificate of incorporation and details of who owns or controls the business, we are not singling you out, and we are certainly not suggesting we think you have done anything wrong. We ask every client, every time, because the law requires us to verify who we are working with before we act on their behalf, and being consistent about that is part of what keeps the process fair and quick for everyone.

There is a benefit to you in this too. These checks help protect you from becoming an unwitting victim of fraud or identity theft, they help keep the businesses and professionals you work with legitimate, and they are increasingly what banks, lenders, and other institutions expect to see evidenced when they work with you. Being able to show that your bookkeeping and business admin are handled by a properly supervised, compliant provider is, in its own quiet way, good for your business too.

So the next time you are asked to upload a photo ID or dig out a utility bill for us, I hope this gives some useful context: it is not paperwork for paperwork's sake, it is a legal duty I take seriously, and it is one small part of how I try to run Smallbizbod as a business you can genuinely trust.

If you would like to read the source guidance yourself, HMRC publishes it here: Anti-money laundering guidance for supervised businesses. And if you ever have questions about why we have asked for something specific, just ask; I am always happy to explain. You can call me on 01332 492568, or get in touch here.