The UK AML strategy 2026 to 2029 funds enforcement now and consults on relief later

The UK AML strategy published on 15 September 2026 puts at least £550 million and more than 500 new officers behind enforcement, while every promised cut to firm-level burden arrives only as a consultation. Written by the Home Office and HM Treasury, it sets supervision, Money Laundering Regulations and suspicious activity report reform on a three-year timetable to 2029.

• The UK AML strategy is funded by at least £520 million from the Economic Crime (Anti-Money Laundering) Levy plus £30 million from the high streets package announced at Budget 2025.
• The number of AML supervisors falls from 25 to 3, with legal, accountancy and trust and company service providers moving to the Financial Conduct Authority.
• HM Treasury will consult in 2026/27 on stronger supervisory enforcement powers, including unannounced visits and holding directors accountable for MLR breaches.
• A decision on raising the Proceeds of Crime Act suspicion threshold does not arrive until 2027/28, after SAR volumes barely moved: 866,616 in 2024/25 against 872,048 the year before.
• Mandatory enhanced due diligence narrowed on 30 June 2026 to Financial Action Task Force (FATF) call for action countries, and new crypto correspondent duties start on 1 February 2027.

What does the UK AML strategy actually commit to?

The UK AML strategy commits at least £550 million and more than 500 new officers across three financial years to 2029, on three pillars: target, integrate and empower. The Home Office and HM Treasury published it on 15 September 2026 as command paper CP 1677. It pairs with the forthcoming Economic Crime Plan 2026 to 2029.

The ministerial foreword commits "at least £550m of investment" over the period. The document sets out what the current system delivered in 2025/26 as its baseline.

The strategy states it is "a realistic possibility" that more than £100 billion is laundered through and within the UK each year, around 10% of annual government spending. More than 90,000 businesses sit inside the supervised perimeter, every one of them running anti-money laundering controls the UK AML strategy proposes to re-aim.

How does the supervision timetable break down?

The structural change is consolidation. The UK AML strategy confirms the October 2025 decision to cut AML and counter-terrorist financing supervisors from 25 to 3: the FCA, HMRC and the Gambling Commission. Legal, accountancy, and trust and company service providers move to the FCA, which already hosts the Office for Professional Body Anti-Money Laundering Supervision (OPBAS).

The enabling primary legislation sits in the Financial Services and Markets Bill. Annex A is candid about the sequencing: everything that reduces work on firms sits behind a consultation; the enforcement build-out does not.

The sectors named for that consultation include property developers, offshore virtual asset service providers and football clubs, plus scope changes for letting agents and higher-risk high-value goods dealers. Relief and expansion share a clock: the same window meant to cut burden could widen the perimeter.

What does the UK AML strategy change for your obligations?

Nothing in the UK AML strategy changes a legal duty on its own. It is a policy document, not a statutory instrument. The duties that did change came from a separate instrument, S.I. 2026/621, in force in stages from 30 June 2026. The strategy tells you which duties are aimed at next, and in what order.

Customer due diligence. The joint HM Treasury and DSIT guidance published on 26 February 2026 confirms that a digital verification service certified against the UK trust framework and listed on the GOV.UK DVS Register can count as a reliable, independent source. That is the test regulation 28(18) builds into the definition of "verify", applied to electronic identification by regulation 28(19). The guidance is explicit that it "supplements but does not supersede obligations under the MLRs".

Enhanced due diligence. Regulation 19 of the Money Laundering and Terrorist Financing (Amendment) Regulations 2026 replaced "high-risk third country" in MLR regulation 33(1)(b) with "FATF call for action country", dropping the mandatory trigger for what the impact assessment counted as 20 increased-monitoring countries. The same regulation narrowed a second trigger, replacing "complex or unusually large" with "unusually complex or unusually large in each case given the nature of the transaction". Both are in force. The strategy dates that change to July 2026; the instrument actually commenced on 30 June 2026, 21 days after it was made.

Crypto correspondent relationships. Regulation 20 inserts regulation 34A. From 1 February 2027 a cryptoasset exchange provider or custodian wallet provider with a third-country respondent must understand that respondent's business and determine its reputation from credible public sources. It must also assess the respondent's AML controls, get senior management approval first, and document who is responsible for what.

Suspicious activity reporting. The defence against money laundering (DAML) threshold in POCA section 339A rose from £1,000 to £3,000 on 31 July 2025, an estimated 25,000 fewer requests and about £4 million a year saved. The reporting trigger itself is untouched: section 330 still bites where a person in the regulated sector "knows or suspects, or ... has reasonable grounds for knowing or suspecting" money laundering. Raising the bar to "reasonable grounds to suspect" would delete the bare-suspicion limb rather than add an objective one. The Home Office has committed to examine that evidence base and will decide whether to proceed in 2027/28.

Discrepancy reporting and directors. Regulation 30A still requires firms to report material beneficial ownership discrepancies to the registrar. The enforcement-powers consultation covers unannounced visits and searching premises for cash, director accountability for MLR breaches, direct MLR enforcement by the Gambling Commission, and whether the Insolvency Service should prosecute. Money service businesses are named as a sector where existing powers are considered inadequate.

What is still uncertain in the UK AML strategy?

The sequencing is the risk. Enforcement capability is funded and starts now; the relief is a consultation that reports in 2027/28 and then becomes a draft statutory instrument only "subject to consultation", with no date attached. Plan for three years of current obligations, not for relief.

The arithmetic is worth stating plainly. At least £520 million of the £550 million is levy money, roughly £173 million a year out of the regulated sector, against the £178.1 million a year the impact assessment attributes to the 2026 enhanced due diligence change. On the government's own figures the sector is funding the enforcement uplift at about the rate the deregulation repays it.

The levy falls only on firms with UK revenue above £10.2 million, while the saving spreads across more than 90,000 supervised businesses. The levy also pays the FCA's start-up costs for professional services supervision, and it previously funded 475 financial investigators, of whom 99% are now in post. Against that, 500-plus enforcement specialists is continuity at a higher run rate.

The saving is softer than the headline too. The impact assessment puts the range at £133.6 million to £222.6 million a year. It is the only measure in the instrument with enough evidence to monetise a benefit at all, and the assessment quantified no costs, because "it has not been possible to provide quantitative data on monetised costs" without a baseline.

The SAR evidence is thinner than the strategy implies. Volumes fell only slightly, from 872,048 in 2023/24 to 866,616 in 2024/25, and DAML requests actually rose about 1%, from 57,081 to 57,666. The £3,000 threshold only took effect four months after the period closed, so the 25,000 reduction remains a forecast rather than an outcome. The £100 billion framing is not a 2026 measurement either: footnote 7 traces it to a 2021 NCA assessment. The document is also loose with its own numbers: 4,085 convictions in one place, 4,058 in another.

Two structural doubts remain. The strategy itself admits that pressures in the criminal justice and courts system slow prosecutions and constrain asset recovery, which puts the bottleneck downstream of the enforcement it is funding. And supervisory consolidation depends on parliamentary time, with firms only moving to the FCA in 2028/29. The EU is running the opposite experiment, centralising supervision in the Anti-Money Laundering Authority (AMLA), whose first single-rulebook guidelines went to consultation this year, so multinational firms will manage both models at once.

What does this mean for digital identity and reusable checks?

The UK AML strategy is direct about proportionality. Paragraph 69 commits HM Treasury to making sure supervisors are able to "discourage blanket or excessive controls that disrupt legitimate customers", nine words that cut against a decade of defensive over-collection in customer onboarding.

HM Treasury and the Department for Business, Innovation, Science and Trade (BIST), which the strategy names in DSIT's place, will keep assessing whether further steps are needed to support digital ID for AML checks through 2026/27, with governance anchored in the Data (Use and Access) Act 2025. A certified digital verification service is an accepted route to regulation 28 compliance, which we covered when the DVS trust framework reached its earliest start date.

Supervisors are now told to police over-collection as well as under-collection, a real shift for anyone running customer onboarding checks at volume. The FCA will publish AI good and poor practice examples in 2026/27.

How should compliance teams respond?

Do one thing first: rewrite the enhanced due diligence trigger. It is already law. Re-scope mandatory enhanced checks to the FATF call for action list and document why anything broader is risk-based rather than habitual. The 2026 impact assessment expects some of those checks to continue where a firm's own risk assessment justifies them.

Second, cryptoasset exchanges and custodian wallet providers should scope regulation 34A correspondent due diligence now for the 1 February 2027 start. Third, legal, accountancy and trust and company service providers should treat FCA supervision as a 2028/29 certainty and evidence their risk assessment to FCA standards. Fourth, answer the MLR and enforcement-powers consultations in 2026/27, because the burden reduction the UK AML strategy promises goes to whoever turns up.

Zyphe helps with the proportionality half of this. Verification runs against an NFC chip read to ICAO 9303 and eIDAS standards, with two-step liveness and no image upload. Personal data is sharded across a decentralised storage network so no single node holds a complete record. The reusable credential lets a verified customer re-present rather than re-upload. If your answer to a supervisor asking about blanket controls is a screenshot, book a demo and we will show you the audit trail instead.

The bottom line

This is a well-funded enforcement plan with a deregulatory promise attached to the back of it. The capability arrives first, paid for largely by the firms it supervises, and the proportionality that would make compliance cheaper arrives as consultations that report after the midpoint.

Teams running KYC and AML in the UK should act on what is in force, answer the consultations that shape the rest, and resist reading a three-year plan as near-term relief.

Cited sources

• Anti-money laundering and asset recovery strategy: 2026 to 2029, Home Office and HM Treasury
• Anti-money laundering and asset recovery strategy 2026-2029, CP 1677, full text
• The Money Laundering and Terrorist Financing (Amendment) Regulations 2026, S.I. 2026/621 as made
• Impact assessment for the 2026 Money Laundering Regulations, HM Treasury and HMRC
• Money Laundering Regulations 2017, regulation 28, customer due diligence measures
• Money Laundering Regulations 2017, regulation 30A, reporting discrepancies in registers
• Proceeds of Crime (Money Laundering) (Threshold Amount) (Amendment) Order 2025, S.I. 2025/877
• Proceeds of Crime Act 2002, section 330, failure to disclose in the regulated sector
• Using digital identities with the Money Laundering Regulations, HM Treasury and DSIT
• Reform of the AML and CTF Supervision Regime: consultation response, HM Treasury
• National Strategic Assessment of Serious and Organised Crime 2021, National Crime Agency
• Suspicious Activity Reports Annual Report 2025, UK Financial Intelligence Unit
• Check if you need to register for the Economic Crime Levy, HMRC