AMLR Changes the Rules for Real Estate — Is Your Business Ready?

For many real estate businesses, Anti-Money Laundering compliance has historically been treated as a collection of administrative obligations: identify the client, obtain documents, check a few databases, retain the file and report something if it looks suspicious.

AMLR changes that perspective.

Regulation (EU) 2024/1624 — the new EU Anti-Money Laundering Regulation — creates a much more harmonised AML framework across Europe. Unlike a Directive that requires national transposition, the Regulation will be directly applicable from 10 July 2027.

For the non-financial sector, and particularly real estate, this is important.

The challenge is no longer simply:

“Have we identified the customer?”

It increasingly becomes:

“Can we demonstrate that our entire business understands its AML risks, assesses each customer and transaction appropriately, applies the correct controls, monitors those risks and can prove all of this to a supervisor?”

That requires a different approach to AML.

1. From national differences towards one European rulebook

One of the biggest structural changes is harmonisation.

Until now, much of European AML compliance has been based on EU Directives implemented through national legislation. This has resulted in differences between Member States in interpretation, processes and supervision.

AMLR establishes directly applicable requirements for obliged entities across the EU.

For businesses operating internationally, this should ultimately provide greater consistency. But it also means that businesses cannot assume that compliance with an established local procedure automatically means that their processes are ready for AMLR.

What should businesses do?

Existing AML policies should be mapped against AMLR requirements rather than simply carried forward from the existing national regime.

That means reviewing the entire AML workflow: business risk assessment, customer acceptance, CDD, beneficial ownership, PEP controls, enhanced due diligence, transaction monitoring, suspicious activity reporting, record retention, training and internal controls.

2. AML compliance starts with the business itself

One of the most important concepts under AMLR is the Business-Wide Risk Assessment (BWRA).

Article 10 requires obliged entities to identify and assess the money laundering and terrorist financing risks to which their business is exposed.

This includes considering the business's customers, services, transactions, delivery channels and geographical exposure, together with European, national and sector-specific risk information.

The assessment must be documented, kept up to date and reviewed when relevant circumstances change.

For a real estate business, this means asking questions such as:

• Who are our typical buyers and sellers?

• From which countries do they originate?

• What types and values of properties do we handle?

• Do we regularly deal with companies, trusts or complex ownership structures?

• How frequently are transactions cross-border?

• What payment structures do we encounter?

• Do we work with investors, developers or other higher-risk customer profiles?

The company's own business model becomes the starting point for AML compliance.

This is why KYB — Know Your Business — should be treated as a fundamental part of an effective AML framework.

3. Risk assessment becomes part of the transaction, not just the customer file

Identifying a customer is not the same as understanding the AML risk.

Real estate businesses need processes capable of combining multiple risk dimensions.

A customer may appear perfectly normal in isolation, while the transaction itself raises questions.

Consider a property acquisition involving:

• a foreign corporate buyer;

• several layers of beneficial ownership;

• funds originating in another jurisdiction;

• a purchase price inconsistent with the apparent customer profile;

• an unusual financing arrangement; or

• a third party contributing funds.

None of these factors automatically means money laundering.

But together they may change the risk assessment dramatically.

AML compliance therefore needs to move beyond simple KYC towards risk-based CDD and Know Your Transaction (KYT).

4. Both sides of a real estate transaction matter

AMLR introduces an especially important provision for real estate agents.

For customer due diligence purposes, real estate agents are to consider both parties to the transaction as customers.

That makes AML controls considerably more transaction-oriented.

A real estate transaction cannot be properly understood by looking at only one side.

• Who is buying?

• Who is selling?

• Who ultimately owns or controls the entities involved?

• Where is the money coming from?

• Does the transaction make economic sense?

• Are third parties involved?

• Are there unusual relationships between the participants?

The AML file therefore needs to become a coherent transaction dossier, rather than simply a collection of identification documents.

5. Customer Due Diligence needs a defined workflow

AMLR also provides useful clarity concerning when CDD becomes relevant in real estate.

The Regulation recognises that it would be disproportionate to perform full CDD on every person who merely enquires about a property. For real estate services, the AML-relevant point can arise when there is a clear indication that the parties intend to proceed — for example when an offer to purchase or rent a property has been made and accepted.

This creates an operational challenge.

AML controls have to be embedded at the correct stage of the commercial process.

Too early, and the agency creates unnecessary work and processes personal information unnecessarily.

Too late, and the transaction may already have progressed beyond the point at which effective AML controls should have been performed.

Real estate businesses therefore need clearly defined AML checkpoints within their sales and transaction processes.

6. Beneficial ownership must be understood — not simply recorded

Corporate buyers and sellers are common in European real estate.

AMLR reinforces the need to understand who ultimately owns or controls a legal entity.

That means the process should not stop at obtaining a company registration document.

The ownership structure has to be examined, the relevant beneficial owners identified and their identities verified using appropriate sources.

Where structures become complex, the compliance process must be capable of documenting how the ownership and control conclusion was reached.

This becomes particularly important with foreign companies, holding structures, trusts and other legal arrangements.

7. PEP and sanctions controls need to be embedded into the process

Screening should not be an isolated search performed once and forgotten.

AMLR requires internal procedures for determining whether customers, beneficial owners and relevant persons are Politically Exposed Persons (PEPs), family members or known close associates.

Targeted financial sanctions are also explicitly incorporated into the internal risk-management framework.

Businesses therefore need structured screening procedures and clear escalation rules.

The question is no longer simply whether somebody appeared on a list.

The business must know what to do when a potential match occurs.

8. Ongoing monitoring becomes increasingly important

AML does not finish when the identity check has been completed.

AMLR requires ongoing monitoring of business relationships and scrutiny of transactions and activities.

AMLA's developing guidelines make the direction particularly clear: obliged entities need frameworks for keeping customer information current and detecting unusual or suspicious transactions or activities.

For real estate businesses, that means changes during a transaction matter.

• A different buyer appears.

• The purchasing company changes.

• The payment source changes.

• A third party suddenly provides the funds.

• The ownership structure changes.

• The transaction is substantially altered.

The AML assessment should be capable of responding to these events rather than remaining a static PDF produced at the beginning of the file.

9. AML becomes a management responsibility

Another major development is governance.

AMLR requires obliged entities to have documented internal policies, procedures and controls. It introduces defined compliance functions, including management responsibility for compliance and a compliance officer, subject to proportionality provisions based on the nature, size and risk of the business.

• Policies need management approval.

• Compliance functions need adequate resources, including staff and technology.

• Weaknesses must be identified and corrected.

• Compliance reporting to management becomes part of the framework.

• And internal controls must be tested, with provision for an independent audit function or, where applicable, testing by an external expert.

AML is therefore not simply the responsibility of the employee collecting passports.

It becomes part of corporate governance.

10. Training must correspond with the actual AML framework

Giving employees a generic AML presentation once a year is not enough to create an effective compliance environment.

Employees whose roles require it must understand the regulatory requirements, the company's Business-Wide Risk Assessment and the internal policies, procedures and controls applicable to their work.

For real estate agents, training should therefore be practical.

• What should I do when a corporate buyer appears?

• What is a beneficial owner?

• When should source of funds be investigated?

• What happens when a PEP is identified?

• Which transaction patterns are unusual?

• When should the compliance officer become involved?

• What information must be retained?

• And when should a suspicion be escalated?

The objective is not merely to complete training.

It is to make AML part of everyday professional decision-making.

This may ultimately be the biggest operational change introduced by AMLR.

A folder containing passports, company extracts and screening results is not, by itself, an AML system.

A supervisor needs to be able to understand the reasoning behind the decisions.

• Why was this customer classified as low, standard or high risk?

• Which risk factors were considered?

• Who is the beneficial owner?

• Were PEP and sanctions checks performed?

• Was the transaction assessed?

• Were unusual elements investigated?

• Was Enhanced Due Diligence required?

• Who approved the decision?

• What changed during the transaction?

• Were employees appropriately trained?

• Is the company's AML policy current?

That requires evidence.

And evidence requires structure.

This is exactly the challenge Immosurance is designed to address

How Immosurance fits like a glove

Immosurance turns AML compliance into a structured digital workflow specifically for the real estate profession.

Instead of treating AML as a disconnected collection of documents, Immosurance brings the relevant elements together within a structured compliance environment.

It supports the real estate business in building its Know Your Business assessment and AML framework, documenting internal AML policies and procedures, performing structured customer due diligence, assessing risk, carrying out PEP and beneficial-owner controls, documenting transactions and maintaining the information needed to demonstrate the compliance process.

It also integrates Plausibility & Monitoring into the AML approach.

This is critical.

Because in real estate, knowing who the customer is only tells part of the story.

Understanding what is happening in the transaction, who is involved and how the transaction is being funded is equally important.

Training is another integral component. AML knowledge and evidence of training can form part of the same overall compliance environment instead of being managed separately.

The result is a much more coherent AML dossier:

KYB → KYC → UBO → PEP/Sanctions → Risk Assessment → CDD/EDD → Plausibility → Monitoring → Documentation → Training → Audit Readiness

10 July 2027 is closer than it appears

AMLR does not mean that real estate suddenly becomes subject to AML.

Real estate professionals have already been part of the European AML framework for many years (since December 2001 to be precise).

What changes is the level of harmonisation, structure, governance, risk assessment, documentation and supervisory consistency surrounding those obligations.

And the new European supervisory architecture is developing rapidly.

AMLA is already working on technical standards and guidelines covering Customer Due Diligence, Business-Wide Risk Assessments, ongoing monitoring, suspicious-activity reporting and harmonised risk assessment of non-financial obliged entities.

The direction is clear:

AML compliance is moving from having documents to being able to demonstrate a functioning compliance system.

The businesses that begin now have time to integrate AML into their normal operations, train their people, establish their risk framework and identify weaknesses before the new framework becomes applicable.

AMLR readiness starts with understanding your business.

And from there, every customer and every transaction needs to tell a documented, explainable compliance story.

Immosurance — AML compliance built around the reality of real estate.

#AMLR #AMLA #AntiMoneyLaundering #AML #RealEstate #RealEstateCompliance #Compliance #KYC #KYB #PlausibilityMonitoring #CDD #RegTech #Immosurance