AML software for law firms
Lawyers and notaries are inside anti-money laundering rules when they help clients buy property, manage money, or set up and run companies and trusts, because those are the transactions criminals most need a professional for. This guide explains the risks specific to legal work, what a firm's client due diligence programme needs, and how to choose software for it.
Why law firms carry specific risk
- Transactional work: property, corporate and trust matters move or structure large sums on a client's instructions.
- Client accounts: money passing through a firm's client account can lend it an appearance of legitimacy.
- Corporate clients: ownership structures can hide the person who really gives the instructions.
- Politically exposed clients: PEPs and their families and associates need enhanced due diligence, not refusal.
- Sanctions exposure: acting for, or receiving funds from, a designated person can breach sanctions even where no AML duty applies to the matter.
- Matter by matter: risk changes with each new instruction, so due diligence is not a one-off at intake.
What the AML programme needs
- 1
Assess the firm's risk
A firm-wide risk assessment covering practice areas, clients, jurisdictions and delivery channels, kept up to date.
- 2
Identify the client and its owners
Customer due diligence at matter opening, including the beneficial owners of corporate and trust clients.
- 3
Screen before acting
Sanctions, PEP and adverse media screening of the client, its owners and, where relevant, the other parties before the firm accepts instructions.
- 4
Apply enhanced due diligence
Source of funds and source of wealth checks, and partner approval, for PEPs and other higher-risk matters.
- 5
Monitor, record and report
Re-screening during the relationship, keeping the evidence of every check, and reporting suspicious activity through the firm's nominated officer.
Regulatory expectations
Under FATF Recommendation 22, lawyers, notaries and other independent legal professionals must apply customer due diligence, PEP measures and record keeping when they prepare for or carry out certain transactions for a client, such as buying and selling real estate, managing client money or assets, and creating or managing companies and trusts. Recommendation 23 extends suspicious transaction reporting to them, subject to legal professional privilege.
In the UK, independent legal professionals who take part in financial or real property transactions are within the Money Laundering Regulations 2017, and solicitors' firms are supervised for AML purposes by the Solicitors Regulation Authority. In the EU, notaries and other independent legal professionals are obliged entities under the EU anti-money laundering framework when they take part in such transactions. Sanctions apply to every matter, whether or not it is in scope for anti-money laundering rules. Public bodies, which are generally not obliged entities, also screen suppliers and counterparties against sanctions before contracting with or paying them.
How to choose AML software for a law firm
- Quick checks at matter opening: screening that runs from the portal for a single client or by API from the practice management system.
- Ownership checks: a company lookup that reaches the beneficial owners and directors of a corporate client.
- PEP coverage that reaches family and associates, as far as the data allows.
- Adverse media in categories: so an allegation can be told apart from a conviction during review.
- Re-screening of existing clients when lists change, with alerts only on changes.
- A file you can show the supervisor: who screened whom, when and with what result.
on8.ai
Client screening for law firms with on8.ai
on8.ai provides the screening layer of a firm's client due diligence: sanctions, PEP and adverse media screening with explained matches, ownership checks for corporate clients, and checks on new enquiries before a matter is opened. Each customer gets a dedicated deployment, and no large language model or external API sits in the decision path. The firm decides whether to act and whether to report.
Sanctions screening
Screen clients and other parties to a matter before accepting instructions.
Learn morePEP screening
Identify politically exposed clients, and their family members and close associates where the data allows.
Learn moreKYB and ownership
Look up a corporate client and screen its owners and directors, with the OFAC 50 Percent Rule applied.
Learn morePre-KYC checks
Email, phone and IP risk checks on new enquiries before time is spent on a matter.
Learn morePassporter
In developmentRemote client identity verification.
Learn moreFAQ
Frequently asked questions
Do law firms need AML software?
Firms that carry out work within anti-money laundering rules must perform client due diligence and keep records of it. Software is not required in itself, but it is how most firms screen clients consistently and produce the file a supervisor asks for.
Does all legal work fall under AML rules?
No. The rules generally reach transactional work such as property, client money, and company and trust services, rather than all legal advice or litigation. Sanctions, however, apply to every client and matter.
Do government bodies need sanctions screening?
Public bodies are generally not obliged entities under anti-money laundering law, but sanctions apply to them too. Many screen suppliers, grant recipients and counterparties before contracting with or paying them.
Can I try on8.ai screening for free?
Yes. The free sanctions search on on8.ai screens a person or company against sanctions and PEP sources and emails you the full report as a PDF.
Keep reading
Related guides
See it on your own data.
Run a free sanctions and PEP check now, or book a demo to walk through screening on your own cases.