AML is not (just) KYC

Too often, AML is reduced to a single step: checking identities against sanction lists. But verifying who someone is only tells you who — it says nothing about the risk they, the property, or the transaction actually carry. Under AMLR, that gap becomes a liability. The law-maker explicitly states that this is FAR FROM sufficient to comply with Real Estate AML obligations. It's actually just a starting point, an aid for Real Estate Agents to initiate the AML-process. From here onwards, Risk Assessment & Evaluation, continued (not just once), related to the clients, the property and the transaction itself. Ultimately it's how the Real Estate Agent interprets (and properly documents & motivates those interpretations) the findings and puts in into context with surrounding factors of each specific situation & transaction. Hence also KYT (Know Your Transaction) is an essential part of the process, one that no KYC-tool will provide.

UBO

Consider the Ultimate Beneficial Owner (UBO). Two clients can each hold "more than 10% ownership" — identical on paper. Yet one sits behind a transparent, verifiable structure and the other behind layered offshore entities, PEP exposure, and an unclear source of funds. Same identity check. Completely different risk. KYC finds the record. It does not tell you what the record means.

KYT

That interpretation — assessing, documenting and motivating the risk around the client, the property and the transaction — is the real substance of AML. And it doesn't stop at onboarding. It's continuous. Which is why Know Your Transaction (KYT) matters just as much as Know Your Customer, and why no KYC tool alone will ever make you compliant.

What You Should Know

A few realities professionals underestimate:

→ KYC tools are a starting point, not compliance. The lawmaker is explicit: identity and sanction checks are far from sufficient on their own.

→ Risk Assessment is never to be shared. KYC findings can be passed between parties in the same transaction to simplify onboarding — but Risk Assessment must be performed independently by every obliged entity. Never shared. No exceptions.

→ AMLR raises the bar. GDPR-compliant, certified data storage. Self-assessment (KYB) documentation. And full, instant auditability — imagine having to demonstrate anything and everything within one hour's notice.

Immosurance is the Answer

This is exactly why we built Immosurance — the first AML(R) solution designed for real estate, usable by every party in a transaction. In one secure environment:

• GDPR-compliant, closed environment with certified data storage for the full legal retention period

• Role-based access for Compliance Managers, agents and auditors — built for internal and external audits

• Full-circle KYB: internal policies, procedures, training & certification, central SAR/STR identification

• Premium KYC research: IDVerse for biometric & document verification, LexisNexis Risk for sanctions, PEP and adverse media (2,000+ sources)

• Real Estate Risk Module: pre-configured, calculated and self-assessed risk determination

• Compliant KYC sharing between parties within a transaction

• Report generation per client and per full dossier

• Complete audit trail across every activity

• Central file management, ready for QES (eIDAS Qualified Electronic Signatures)

• AI-integrated assistance and personal support — available in 14 languages, with more to come

Know your customer. Know your transaction. Know the real owner — and manage the risk.