Real Estate Money Laundering: The FATF Framework Every Property Professional Needs to Know

TL;DR. The Financial Action Task Force 2022 Guidance on the Risk-Based Approach for the Real Estate Sector identifies eight money laundering typologies that property transactions can facilitate. Real estate professionals in most jurisdictions are now designated reporting institutions, carrying three primary obligations: customer due diligence (CDD), record-keeping for a minimum of five years, and suspicious transaction reporting. The risk-based approach does not require refusing all high-risk clients. It requires proportionate checks, documented decisions, and escalation where the evidence warrants it.

Key Takeaways

• FATF’s 2022 Real Estate RBA Guidance names eight typologies, from all-cash purchases to professional intermediary exploitation.
• Estate agents, developers, lawyers, property managers, and mortgage brokers all carry AML obligations in most FATF-member jurisdictions.
• The minimum record-keeping period under FATF Recommendation 11 is five years from the end of a business relationship.
• The Transparency International OREO Index 2025 found that 10 of 24 assessed jurisdictions scored below 5 out of 10 on real estate ownership transparency.
• Australia brings approximately 90,000 new reporting entities into scope from 1 July 2026 under Tranche 2 of its AML/CTF Amendment Act 2024.

1. Why Is Real Estate the Asset Class of Choice for Money Launderers?

Property absorbs large sums in a single transaction. According to the UNODC, criminals may have laundered approximately USD 1.6 trillion globally in 2009, representing 2.7% of global GDP at the time (UNODC, October 2011 press release). That figure covers all money laundering, not real estate alone; UNODC has not published a sector-specific estimate. What the data does confirm is the scale of the underlying problem that real estate helps to solve.

The appeal of property is structural. A single residential purchase can move several million dollars through the financial system in one transaction, avoiding the pattern-detection problems that arise when criminals break large sums into small bank deposits. The title that results is a legal instrument, held in a public register, carrying all the legitimacy of a legitimate acquisition.

Price opacity creates a manipulable gap. Unlike publicly traded securities, property prices are not centrally quoted. The same apartment can sell for widely different prices depending on urgency, negotiating dynamics, and market conditions. That opacity makes it easier to justify an above-market or below-market price without triggering automatic suspicion.

Title persistence converts criminal proceeds into an appreciating asset. A criminal who successfully launders funds through property holds a legal instrument that may generate rental income, appreciate in value, and serve as collateral for further borrowing. The integration stage of the money laundering cycle is complete. The proceeds now have a paper trail that begins with a property sale, not a drug shipment.

Cross-border structures exploit jurisdictional gaps. A property in London can be held by a company in England, which is owned by a company in the British Virgin Islands, which is in turn owned by a trust in Jersey administered by nominees. The FATF RBA Guidance for the Real Estate Sector (July 2022) identifies this layering as one of the primary mechanisms by which beneficial owners conceal their identities from estate agents and land registries alike.

The Transparency International Opacity in Real Estate Ownership Index (OREO) 2025 assessed 24 jurisdictions and found that 10 scored below 5 out of 10 on a combined measure of AML framework quality and beneficial ownership data transparency (Transparency International, 2025). No jurisdiction achieved a perfect score. The worst performers included Australia, South Korea, and the United States.

The FATF RBA Guidance (2022) notes that 37% of countries assessed in mutual evaluations view real estate as a high money laundering and terrorist financing risk sector, and that 78% of assessed countries show poor understanding of the ML/TF risks present in their own real estate sectors (FATF, 2022).

global due diligence workflow

2. What Are the Eight Typologies FATF Identified in 2022?

The FATF Risk-Based Approach Guidance for the Real Estate Sector, published in July 2022, consolidates typology data from mutual evaluations, case studies, and the earlier FATF 2007 Real Estate Typologies Report. Eight distinct typologies emerge, each with its own mechanism and detection profile.

Typology 1: All-cash purchase

A property is bought outright with no mortgage or financing. This removes regulated lenders from the transaction chain entirely. Banks carry their own AML obligations and would trigger customer due diligence and transaction monitoring. A cash buyer eliminates that check point.

Detection signal: no lender in the chain; funds arrive by wire from an opaque or offshore source; buyer accepts the asking price without negotiation; no mortgage broker involved.

Typology 2: Shell companies and layered legal structures

Property title is held by a corporate vehicle, a trust, or a nested chain of legal entities with no evident commercial purpose. The structure is designed to conceal the natural person who ultimately benefits from the asset. The registered owner of the property is a company. Behind that company sits another company. And so on.

Detection signal: registered owner is a company with no operating history; nominee directors are named; the ownership chain passes through offshore secrecy jurisdictions such as the British Virgin Islands, Cayman Islands, Delaware, or Nevada.

Typology 3: Nominee or straw buyer

A person with no criminal record acquires the property in their own name on behalf of the actual beneficial owner. The buyer provides the funds and retains economic benefit but never appears in the transaction. The nominee is a clean face on a dirty deal.

Detection signal: buyer’s income and assets are inconsistent with the purchase price; funds originate from a third party not named on the contract; the buyer has an undisclosed prior relationship with the true owner.

Typology 4: Mortgage fraud and loan-back schemes

A criminal deposits illicit funds in an offshore account, then borrows them back through a controlled shell company mortgage. Repayments appear as legitimate business outgoings, cleaning the origin of the funds. A variant inflates the property valuation to extract a larger mortgage disbursement than the actual purchase price.

Detection signal: mortgage from an obscure or offshore lender; valuation significantly above comparable sales; abrupt financing change mid-transaction; loan repayments inconsistent with the borrower’s declared income.

Typology 5: Round-trip or flip transaction

Property is sold and repurchased in quick succession among related or associated parties, often at escalating prices. The apparent profit from each transaction is declared as legitimate capital gain, cleaning the criminal’s funds through a sequence of paper sales.

Detection signal: successive sales with unusual profit margins; buyers and sellers share directors, addresses, or beneficial owners; rapid resale with no renovation or improvement to justify the price uplift.

Typology 6: Price manipulation (over-valuation and under-valuation)

Property is sold above or below market value between colluding parties. Over-valuation extracts excess mortgage proceeds or inflates declared asset values. Under-valuation conceals true wealth in transfers between related parties. The FATF guidance notes that atypical commercial assets such as hotel complexes, golf courses, and shopping centres are especially susceptible because independent valuation is harder to establish.

Detection signal: price deviates significantly from comparable sales; the seller accepts the offer without counter-offer; the same valuer is used repeatedly in connected transactions.

Typology 7: Professional intermediaries as complicit gatekeepers

Lawyers, notaries, estate agents, accountants, and corporate service providers knowingly or negligently facilitate money laundering by incorporating shell companies, managing client funds, or processing transactions without conducting CDD or filing suspicious transaction reports. The professional becomes the mechanism, whether willingly or not.

Detection signal: the professional has no visible AML programme; advice is structured to avoid reporting thresholds; the professional holds large client funds without a clear transaction purpose.

Typology 8: Commingling

Illicit proceeds are mixed with legitimate rental income, development revenue, or construction costs to obscure their origin. A property management firm or a construction company provides a vehicle for blending dirty and clean funds. The criminal’s cash enters the business as a cash deposit “consistent with” normal operations.

Detection signal: cash-intensive property business; rental income inconsistent with occupancy or market rates; construction costs grossly inflated; frequent unexplained cash deposits with no supporting invoices.

3. Who Has AML Obligations in a Property Transaction?

The FATF 2022 Guidance and the underlying FATF Recommendation 22 intentionally cover a wide range of professionals. Coverage is broad because, as the Guidance states, “the sector includes a range of different professions that may each have a role in facilitating a transaction.” Reliance on any one gatekeeper is insufficient.

Real estate agents and brokers are covered from the point of engagement for a buyer or seller. The 2022 Guidance extends this explicitly to buyer’s agents, not only listing agents. If you represent any party to a property transaction, CDD obligations apply.

Property developers carry equivalent CDD obligations to estate agents when selling residential or commercial units directly to buyers. The developer-to-buyer sale is a full transaction for AML purposes.

Lawyers and notaries are covered when preparing, executing, or advising on a transaction to buy, sell, or transfer real estate, or when managing client funds connected to that transaction. In civil law systems including France, Germany, and Malaysia, the notary is the central conveyancing actor and carries primary CDD responsibility.

Accountants are covered when assisting in the planning or execution of a real estate transaction on a client’s behalf, or when managing client funds for that purpose.

Property managers are covered when managing rental property and handling rent receipts or maintenance payments. Those cash flows create a commingling risk. The manager who receives and disburses rental income is inside the AML perimeter.

Trust and company service providers (TCSPs) are covered when forming or managing legal entities used to hold real estate. A nominee director or nominee shareholder service that touches a property-holding structure carries FATF Recommendation 22 obligations.

Mortgage lenders and brokers are covered as financial institutions under FATF Recommendation 10 rather than Recommendation 22, but the practical obligations are equivalent. Mortgage fraud is a primary typology, and the lender’s CDD is the check point that a cash buyer deliberately bypasses.

Title insurers and conveyancers are covered in jurisdictions where they handle settlement and funds at the point where money and title transfer simultaneously.

The rest of this guide focuses on obligations at the estate agent level, because the agent is present in virtually every property transaction. Jurisdiction-specific coverage for Malaysia, Singapore, and the UK is in the linked guides below.

4. What Are the Three Core Compliance Obligations?

Every professional covered by FATF Recommendation 22 carries three primary obligations. They are not optional in high-risk situations. They apply to every business relationship.

Customer Due Diligence

CDD requires verifying the legal identity of every customer, mapping the ownership and control structure of any legal entity to the natural person beneficial owner, identifying politically exposed persons, and understanding the source of funds for higher-risk transactions.

The standard CDD trigger is the start of any business relationship or the execution of any transaction. For a property transaction, that typically means the point of mandate acceptance or when the buyer makes a formal offer. Verification must happen before the transaction completes, not after.

Simplified CDD applies in lower-risk situations. Publicly listed companies, government bodies, and other regulated financial institutions may qualify in some jurisdictions, but simplified CDD is not a blanket exemption. The agent must still document why the lower-risk determination was made.

Enhanced Due Diligence (EDD) is mandatory where standard CDD identifies elevated risk: politically exposed persons, customers from FATF grey-list or black-list jurisdictions, complex ownership structures, all-cash transactions, and purchase prices inconsistent with the customer’s known wealth. EDD adds senior management approval, deeper source-of-funds and source-of-wealth enquiry, and more frequent monitoring. Doing EDD does not mean the transaction cannot proceed. It means the professional has done proportionately more.

The 25% beneficial ownership threshold is common across UK, EU, and US frameworks. Malaysia uses a 20% threshold under the Companies Act 2016 and AMLATFPUAA. Singapore uses an “effective control” concept under the Companies Act, without a fixed numeric threshold. Practitioners should confirm the applicable threshold in their jurisdiction before setting CDD procedures.

Record-Keeping

The FATF minimum record-keeping period is five years from the end of the business relationship or from the date of the transaction, whichever is later. This is set in FATF Recommendation 11.

What must be retained: copies of all identity documents obtained during CDD; all transaction records; supporting documentation including the written reasoning for risk assessments; and any documented decision not to file a suspicious transaction report. Some jurisdictions extend the minimum to seven or ten years. Practitioners must check local law. The FATF five-year floor is the minimum, not the ceiling.

The record-keeping obligation is not a filing exercise. In the event of a regulatory enquiry or law enforcement request, the agent must be able to produce a coherent audit trail. A pile of unorganised PDFs does not satisfy the spirit of the requirement.

Suspicious Transaction Reporting

An STR must be filed with the national financial intelligence unit (FIU) when there are reasonable grounds to suspect that funds involved in a transaction represent proceeds of crime or are connected to terrorist financing. The standard is suspicion, not proof. Reasonable grounds for suspicion is a lower bar than the balance of probabilities.

The STR obligation does not replace a currency transaction report (CTR). These are distinct instruments. CTRs are threshold-based: they are filed automatically when a transaction exceeds a prescribed amount. STRs are suspicion-based: they are filed when the facts of the transaction, taken together, suggest something is wrong, regardless of the transaction amount.

Filing an STR is mandatory regardless of whether the transaction proceeds. If the agent decides to continue acting, they must file. If they decide to withdraw, they must still file. The tipping-off offence is separate: once an STR has been filed, the professional must not inform the subject. Good-faith STR filing provides a safe harbour from civil liability in most frameworks.

5. What Does the Risk-Based Approach Mean in Practice?

The risk-based approach is the mechanism that prevents the AML framework from becoming a blanket prohibition on transacting with anyone who carries any risk. According to the FATF RBA Guidance (2022), 37% of countries view real estate as a high ML/TF risk sector; the guidance simultaneously acknowledges that not all clients within that sector carry the same risk profile.

The core logic is proportionality. A first-time local buyer purchasing a modestly priced apartment with a standard bank mortgage carries far less AML risk than an offshore shell company buying a city-centre commercial property in cash. The same CDD procedures applied uniformly to both would be both wasteful and ineffective.

The practical decision sequence has four steps:

1. Identify the risk level (low, medium, or high) based on customer identity, transaction structure, source of funds, and jurisdiction.
2. Apply the appropriate CDD level: simplified for low-risk, standard for medium-risk, enhanced for high-risk.
3. Document the risk determination and the CDD steps taken.
4. Escalate to a senior compliance officer or file an STR if the evidence warrants it.

The “rice bowl” tension is real. Agents need to close transactions. Refusing every client who triggers an elevated risk flag would destroy business. That is not what the framework requires. The obligation is to do more, not to say no. A politically exposed person buying a property is a valid business relationship that can proceed through proper enhanced CDD, with a source-of-wealth declaration, senior sign-off, and ongoing monitoring.

The transaction that cannot proceed is a different category entirely. A sanctioned party is a hard block. Sanctions are not a CDD exercise. Transacting with a sanctioned individual or entity is a criminal offence in most FATF-member jurisdictions, regardless of how thorough the CDD might have been.

Malaysia PEP and enhanced CDD procedures

6. How Does Corporate Structure Data Support CDD?

When a buyer is a company rather than an individual, the CDD obligation does not stop at the company. It extends to the natural person who ultimately owns or controls that company. Identifying that person requires navigating company registries, and in some jurisdictions, dedicated beneficial ownership registers.

Malaysia: Suruhanjaya Syarikat Malaysia (SSM)

SSM registers all Malaysian companies and maintains an electronic Register of Beneficial Owners (e-BOS) as required under the Companies Act 2016. The beneficial ownership threshold is 20%, lower than the UK and EU standard of 25%. The e-BOS is not publicly accessible. Agents cannot search it directly. They must request disclosure from the corporate buyer and cross-reference against a formal SSM company search.

An SSM company search provides the registered name, registration number, company type, status, directors, and registered address. Shareholder information requires a more detailed extract. Director-level data is available through paid registry lookups. BusinessDataGuide’s Malaysia harness queries SSM directly, returning the registration number, entity type, registration status, and director list.

For detailed guidance on SSM search procedures and AML obligations for Malaysian estate agents, see the Malaysia RE AML guide.

Singapore: Accounting and Corporate Regulatory Authority (ACRA)

ACRA registers all Singapore companies and maintains the Register of Registrable Controllers (RORC). Singapore’s beneficial ownership framework combines a 25% shareholding threshold (the Companies Act definition of registrable controllers, adopted by the PMLPFTF Regulations) with an effective control test. A person holding more than 25% of shares or voting rights is a registrable controller. Additionally, any person who exercises significant influence or control over a company is registrable regardless of their formal shareholding percentage.

The RORC is not publicly accessible. Agents must request disclosure from the corporate buyer. An ACRA BizFile search provides registered name, registration number, status, directors, and shareholders for locally incorporated entities. BusinessDataGuide’s Singapore harness queries ACRA directly, returning the UEN, entity type, registration status, director list, and shareholding data for companies with 20 or fewer shareholders.

For Singapore-specific AML obligations for estate agents, see the Singapore RE AML guide.

United Kingdom: Companies House

Companies House maintains the Persons with Significant Control (PSC) register, which records beneficial owners above the 25% threshold for all UK companies. Critically, the PSC register is publicly accessible and free to search. This makes UK corporate-buyer CDD structurally different from Malaysia and Singapore: an agent can verify PSC information directly without relying on self-disclosure from the buyer.

BusinessDataGuide queries Companies House directly for UK company data, including PSC records, which are freely accessible to the public.

For UK estate agent AML obligations under the Money Laundering Regulations 2017, see the UK RE AML guide.

The offshore holding company gap

Registry data has limits. If the registered buyer is a company incorporated in the British Virgin Islands, Cayman Islands, or another jurisdiction with minimal public disclosure requirements, the corporate structure data available from public registries is largely absent. This is precisely where enhanced CDD escalation is warranted. The absence of verifiable data is itself a risk signal. An agent who cannot identify the natural person behind a corporate buyer through registry checks must rely on enhanced documentary due diligence from the buyer and, if those documents do not resolve the question, must consider whether to proceed.

7. How Do Four Key Jurisdictions Perform on Real Estate AML?

FATF mutual evaluations assess whether countries effectively implement their AML frameworks. The ratings for real estate vary significantly across jurisdictions, and the trend lines matter as much as the snapshot.

Malaysia: FATF Mutual Evaluation, December 2025

Malaysia’s 2025 Mutual Evaluation placed the country in “Regular Follow-Up” status, a rating shared by only 12 countries in the fourth round of evaluations. DNFBPs including estate agents are in-scope under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act (AMLATFPUAA), as amended in 2014. BOVAEP (the Board of Valuers, Appraisers, Estate Agents and Property Managers) has issued AML/CFT guidelines for registered agents.

Bank Negara Malaysia imposed MYR 18.9 million in AML/CFT penalties in 2024. Those penalties are not broken down by sector. The MER summary notes that risk awareness and controls are more advanced among larger institutions, while smaller estate agencies show weaker risk understanding. ML investigations are not consistently converting to prosecutions.

Singapore: FATF Mutual Evaluation, May 2026

Singapore’s May 2026 Mutual Evaluation noted that the Monetary Authority of Singapore’s supervision of financial institutions is a strength. Between 2020 and 2024, Singapore confiscated SGD 3.9 billion (approximately USD 2.9 billion) in assets. The August 2023 money laundering case, in which SGD 3 billion in assets including real estate was seized and 10 individuals convicted, remains the most significant single enforcement action in Southeast Asian AML history.

In July 2025, the MAS issued SGD 27.45 million in penalties against nine financial institutions for AML failures connected to that 2023 case (CNBC, 2025). The 2026 MER found that enforcement actions remain relatively low versus Singapore’s risk exposure, and that the system must be “sharper” and produce “more consistent risk-based results.”

United Kingdom: FATF Mutual Evaluation, 2018 (follow-up 2022)

The UK’s 2018 MER identified real estate and company service provider sectors as having monitoring deficiencies. HMRC supervises estate agents as their competent authority under the Money Laundering Regulations 2017. A significant weakness noted in the 2018 MER was the inconsistency of supervision across 22 legal and accountancy supervisors; DNFBP supervision remained below the risk level in the 2022 follow-up report.

The UK National Crime Agency National Money Laundering Risk Assessment 2025 estimates that up to GBP 10 billion may be laundered through UK property annually (NCA, 2025). The NCA characterises this as “a realistic possibility” with no published methodology. Transparency International has separately identified GBP 1.5 billion in UK property owned by Russians with known corruption links or Kremlin ties (Transparency International).

UK estate agent SAR submissions rose 21.7% year-on-year, from 780 in the April 2021 to March 2022 period to 950 in the April 2022 to March 2023 period, according to the NCA UKFIU SAR Annual Statistical Report 2023. The NCA SARs Annual Report 2024 records total UK SARs of 872,048 for 2023-24, a 1.5% increase, with estate agent submissions reportedly rising approximately 22%.

Australia: Gap Closed by Tranche 2, 1 July 2026

Australia’s 2015 MER found that real estate agents, lawyers, and accountants were not subject to AML/CTF obligations, despite being assessed as high-risk. The sector was rated non-compliant with FATF Recommendation 22. That gap persisted for a decade.

The AML/CTF Amendment Act 2024 (Tranche 2) brings real estate agents, lawyers, accountants, and property developers into scope from 1 July 2026. The Australian Department of Home Affairs estimates this will add approximately 90,000 new reporting entities (Australian Department of Home Affairs). Australia’s situation illustrates the global direction of travel: the question for most jurisdictions is not whether real estate professionals will carry AML obligations, but when.

The Transparency International OREO Index 2025 ranked Australia among the worst performers of the 24 jurisdictions assessed, reflecting the regulatory gap that Tranche 2 is designed to close.

8. What Penalties Apply for Non-Compliance?

The FATF framework itself does not set penalties. Penalties are set by national law in each FATF-member jurisdiction. What the FATF framework does set is the expectation that penalties are effective, proportionate, and dissuasive.

For exact penalty figures applicable to estate agents in each jurisdiction, the linked country guides provide the current legislative references:

• Malaysia: AMLATFPUAA penalties for estate agents under Malaysia RE AML guide
• Singapore: CDSA and MAS penalties under Singapore RE AML guide
• UK: MLR 2017 and HMRC enforcement under UK RE AML guide

What the MER data does confirm is that enforcement is escalating. HMRC supervision of UK estate agents is becoming more active following the deficiencies noted in the 2018 MER follow-up. Singapore’s MAS demonstrated its willingness to impose material penalties in July 2025. Australia’s Tranche 2 brings a large cohort of previously unregulated professionals into scope simultaneously, and AUSTRAC has signalled that it will supervise the new reporting entities actively from day one.

The FATF 2022 guidance also notes that the severity of penalties is precisely the reason the risk-based approach exists. Regulators do not expect perfect compliance; they expect documented, good-faith risk assessments. An agent who can show a reasoned CDD file, a documented risk determination, and where warranted a filed STR, is in a far stronger position than one who either ignored all checks or, conversely, applied maximum scrutiny to every client without discrimination.

9. Practical CDD Checklist for Property Professionals

This checklist covers a standard residential or commercial property transaction from client intake through to file closure. It applies to estate agents, brokers, and developers selling directly to buyers. It does not replace jurisdiction-specific training or legal advice.

1. Before the first meeting: confirm whether the prospective client is an individual or a legal entity. If a company, identify the jurisdiction of incorporation and run a company status check. If the company is offshore or in a high-risk jurisdiction, flag for enhanced CDD before proceeding.

2. At client intake: collect government-issued photo identification. For an individual: a national identity card or passport. For a corporate buyer: certificate of incorporation, memorandum and articles, and a current director list. Verify documents are current and not expired.

3. Identify beneficial owners: for any corporate buyer, request a declaration of all beneficial owners above the applicable threshold (20% in Malaysia, 25% in UK/EU, or “effective control” in Singapore). Cross-reference against available registry data. Document any gaps between declared owners and registry records.

4. PEP screening: screen all named individuals, directors, and declared beneficial owners against PEP databases and sanctions lists. Document the screening result. If a PEP is identified, trigger enhanced CDD: source-of-wealth declaration, senior sign-off, and file notation.

5. Sanctions check: screen against OFAC, UN Consolidated List, and any local sanctions list before proceeding. A positive sanctions match is a hard stop. Do not proceed and seek legal advice immediately.

6. Assess the transaction: note any elevated risk factors in the transaction structure itself. All-cash purchase? Buyer unfamiliar with the property? Funds from a third party not named on the contract? Price significantly above or below market? Each is a red flag that raises the CDD tier.

7. Source of funds and source of wealth: for any transaction that triggers enhanced CDD, request documentary evidence of source of funds (the specific funds used for this purchase) and source of wealth (how the buyer accumulated their overall assets). Bank statements, investment account records, and salary evidence are typical supporting documents.

8. Document the risk assessment: write a brief risk note for the file. It should record: the customer identity checks performed, the risk tier assigned (low, standard, high), the CDD steps taken, and the rationale for any decisions made. This document is your audit trail.

9. STR decision point: before the transaction completes, review the file. If any aspect of the transaction raises reasonable grounds for suspicion, an STR must be filed with the national FIU. Do not wait for certainty. Suspicion is the threshold. Document the decision either way.

10. Record-keeping: retain the CDD file, identity documents, transaction records, and risk assessment for a minimum of five years from the date the transaction completes or the business relationship ends. Check local law for any extended retention period.

11. Verify the corporate buyer’s company status: before the first meeting with a corporate buyer, run a company check to see registration status, directors, and where available, beneficial owners. For Malaysia companies, the BDG Malaysia harness queries SSM directly, returning registration number, entity type, registration status, and director list. For Singapore companies, the BDG Singapore harness queries ACRA directly, returning the UEN, entity type, registration status, director list, and shareholding data for companies with 20 or fewer shareholders. UK PSC data is publicly accessible via Companies House, which BusinessDataGuide queries directly. A clean registry result does not clear the client. A flagged result, such as a suspended company, a PEP director, or an offshore holding chain, informs how much enhanced CDD to apply.

SSM company search procedure

Frequently Asked Questions

Does every property transaction require full CDD?

Yes, where the professional is a designated reporting entity. The level of CDD (simplified, standard, or enhanced) varies by risk profile, but some level of CDD applies to every business relationship. A low-risk domestic buyer with a straightforward bank-financed purchase requires standard CDD. A corporate buyer with an offshore holding structure requires enhanced CDD. The agent must document which tier was applied and why. (FATF RBA Guidance, 2022)

What is the difference between an STR and a currency transaction report?

A suspicious transaction report (STR) is suspicion-based. It is filed when the facts of a transaction create reasonable grounds to suspect money laundering or terrorist financing, regardless of the amount involved. A currency transaction report (CTR) is threshold-based. It is filed automatically when a cash transaction exceeds a prescribed monetary amount, regardless of suspicion. Most real estate AML obligations centre on STRs. Some jurisdictions also require CTRs for large cash payments.

Can a transaction proceed after an STR is filed?

An STR does not automatically prohibit a transaction from proceeding. The professional may continue to act while awaiting guidance from the FIU. However, once an STR is filed, the tipping-off prohibition applies: the professional must not disclose to the subject that a report has been made. In practice, if the FIU issues a consent decision or a prescribed period elapses without objection, the transaction can proceed. Individual jurisdictions set different consent windows. Professionals should know the applicable window in their jurisdiction.

What happens if a beneficial owner cannot be identified?

If standard CDD steps, including registry checks and buyer-provided documentation, do not identify the natural person beneficial owner of a corporate buyer, the agent faces a choice. Enhanced CDD must be applied. If enhanced CDD still does not resolve the question, most frameworks require the professional to consider whether to proceed and whether an STR is warranted. Filing an STR based on inability to identify the beneficial owner is a valid and appropriate use of the reporting mechanism.

Does the risk-based approach allow an agent to decline a high-risk client?

Yes. The risk-based approach sets minimum obligations, not maximum ones. An agent may choose not to act for a client whose risk profile is too high, even if enhanced CDD would technically permit the transaction. The obligation is to apply proportionate controls where the agent does proceed. Where an agent declines, they should document the decision but are not automatically required to file an STR simply because they declined. An STR is required only where there are reasonable grounds for suspicion.

Conclusion

Real estate is a preferred vehicle for money laundering because it converts large sums into a legal, appreciating, titled asset in a single transaction. FATF’s 2022 guidance identifies eight typologies, from all-cash purchases to commingling through property management businesses, and covers a wide range of professionals as designated reporting entities.

The three core obligations are not optional. CDD applies before every transaction. Records must be kept for at least five years. STRs must be filed when suspicion arises, whether or not the transaction proceeds.

The risk-based approach is not a loophole. It is a calibration mechanism. An agent who applies simplified CDD to a low-risk buyer and enhanced CDD to a high-risk corporate buyer, documents both decisions, and files an STR when the facts warrant it, is meeting the standard that regulators expect. An agent who ignores the framework, or who applies maximum scrutiny to every client without discrimination and keeps no records, is not.

The global direction is clear. Australia brings approximately 90,000 professionals into scope in July 2026. Singapore’s MAS demonstrated in 2025 that enforcement penalties are material. UK HMRC supervision of estate agents continues to intensify. For property professionals who have not yet built a functional AML programme, the time to do so is now.

For jurisdiction-specific obligations, penalty structures, and registry access procedures, the country guides in this series cover Malaysia, Singapore, and the UK in detail:

• Malaysia RE AML compliance guide
• Singapore RE AML compliance guide
• UK RE AML compliance guide

comparing Malaysia and Singapore RE AML frameworks