AML Screening for Accounting Firms and Tax Advisers: Sanctions, PEPs and Related Parties

Accounting firms and tax advisers often maintain recurring client relationships while the people, companies, ownership information, services and jurisdictions around an engagement change. A client accepted for accounts preparation can later request company-formation support, appoint a new director, disclose a different beneficial owner or introduce a payment recipient that was not part of onboarding.

The central screening question is:

Which supplied party enters the accounting or tax engagement at each controlled event, what screening question follows, and who owns the separate CDD, professional and legal decisions?

Checklynx can screen supplied people, companies and supported identifiers against configured sanctions, PEP, wanted-list and adverse-media sources. It does not authenticate identity documents, discover every owner, perform accounting or tax work, monitor behavioural transaction patterns, decide whether activity is suspicious or make the final client-acceptance or legal decision.

Define the regulated service before the screening population

The profession name alone does not settle scope. A practice may provide statutory audit, external accountancy, tax advice, bookkeeping, payroll, company formation, trust administration or software support. Those services can fall under different rules and supervisors, and some may sit outside a particular regulated perimeter.

Document:

• the legal entity providing each service;
• the actual regulated activities and applicable supervisor;
• the customer and engagement types within the approved control;
• whether the firm also provides trust or company services;
• the identity, ownership and relationship data produced by upstream CDD; and
• the people authorised to resolve matches and make client, reporting or legal decisions.

In the United Kingdom, HMRC's accountancy-service-provider guidance includes auditors, external accountants and tax advisers, but it also distinguishes payroll-only and other limited activities that may not fall within that definition. Germany and Spain name particular accounting, audit and tax professions in their AML legislation. The UAE applies its current AML/CFT framework to relevant DNFBPs, while federal, DIFC and ADGM arrangements must not be collapsed into one supervisory model.

Keep screening separate from the wider professional control

Several controls can use the same client data but answer different questions.

Use the AML name-screening workflow for the generic matching process and the UBO and related-party guide for the handoff between ownership information and screening.

Use an accounting and tax engagement screening matrix

The matrix is a control-design model, not a universal obligation to screen every listed role.

Preserve the client ID, engagement ID and party role with each request. The same person can be a client representative in one engagement, an owner in another and a payment party later. That context explains why the check ran and which decision is pending.

Put checks where an engagement decision can still change

Useful control points can include client acceptance, entity or trust work, a material ownership update, appointment of a representative, expansion into a higher-risk service or jurisdiction, onboarding of a referral or outsourced provider and a payment event introducing a new named party.

Use the screening portal for analyst-led checks, CSV batch screening for an existing client population, the real-time screening API for repeatable onboarding and engagement events, and ongoing monitoring for maintained relationships. Where a payment event introduces an identified party, transaction screening can compare the supplied name and identifiers before value moves. It does not detect behavioural patterns or make the legal disposition.

Apply sanctions and PEP controls as different decision paths

A sanctions candidate can lead to identity resolution and then a separate analysis of the applicable regime, ownership/control, restriction, exception, licence, reporting route and handling of assets or services. The screen does not decide those legal questions.

A PEP candidate is different. PEP status is not a prohibition or evidence of wrongdoing. The firm determines whether the person meets the applicable definition, what level of risk applies and which approval, source-of-wealth, source-of-funds or enhanced-monitoring measures are required. Checklynx supplies source-backed PEP, former-PEP, family and known-close-associate evidence for that review; it does not perform the complete EDD process.

Treat supplied ownership information as an input, not a discovery claim

Accountancy and tax practices may obtain ownership and control information through CDD, company records, client documents or another upstream process. Keep the supplied relationship between the company, owner, controller, director, representative and trust or foundation role visible in the screening record.

Checklynx can screen those people and entities when their data is supplied. It does not independently establish the complete ownership structure, authenticate the evidence or decide whether an AML or sanctions ownership/control test is met.

Design recurring review around meaningful change

Recurring engagements do not justify a universal claim that every client must be screened continuously or at one fixed interval. Define approved triggers such as sanctions-source changes, PEP-profile changes, identity updates, ownership or control changes, new representatives, a materially different service or jurisdiction, and payment events introducing new parties.

Persistent party IDs and retained prior decisions help route a new source record to the correct client and engagement. A prior false-positive decision should remain limited to the screened identity and context; changed data can require a new review.

Apply the correct jurisdiction and supervisor

United Kingdom

UK government guidance identifies accountants, tax advisers and auditors among activities that may require AML supervision. HMRC supervises relevant accountancy service providers that are not already supervised for AML purposes by an appropriate professional body. HMRC's guidance also distinguishes limited payroll and software-support activities that do not by themselves make every provider an accountancy service provider.

The accountancy-service-provider guidance and accountancy-sector AML guidance support service- and supervisor-specific analysis. UK financial sanctions form a separate legal layer. The firm must determine its relevant UK nexus, restrictions, ownership/control analysis, licences and reporting route; the AML perimeter does not define the entire sanctions obligation.

Germany

Germany's Geldwäschegesetz names Wirtschaftsprüfer, vereidigte Buchprüfer, Steuerberater, Steuerbevollmächtigte and Lohnsteuerhilfevereine among the obliged professions. These are defined professional categories; vereidigte Buchprüfer must not be used as a generic synonym for ordinary bookkeeping providers.

The GwG framework covers customer due diligence, beneficial owners, risk management and enhanced measures. Sanktionsprüfung can support the handling of supplied identities, but it does not complete those duties or decide the effect of an EU restrictive measure.

Spain

Spain's Ley 10/2010 expressly includes auditores de cuentas, contables externos and asesores fiscales among the obliged subjects. Regulated status follows the actual activity, not a loose commercial label.

PBC/FT duties concerning identification, the titular real, ongoing due diligence and PEP treatment remain separate from the technical act of screening supplied identities. EU financial sanctions also have their own legal effect and analysis.

United Arab Emirates

The current federal baseline includes Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025. Relevant auditors and accountants can fall within the DNFBP framework, while the actual activity, regulator and location matter. The DFSA framework in the DIFC and ADGM's DNFBP framework should not be presented as identical to the federal/mainland perimeter.

The framework addresses customer and beneficial-owner controls, PEP risk and targeted financial sanctions. Checklynx can support screening of supplied identities and evidence retention. It does not perform complete DNFBP risk assessment, identity verification, UBO discovery, goAML reporting or the final freezing and reporting decision.

Preserve the review evidence and professional handoff

Another qualified reviewer should be able to reconstruct:

• the client and engagement, party role and triggering event;
• the supplied identity, company and relationship identifiers;
• the customer group, screening policy and source categories applied;
• the candidate records and secondary identifiers reviewed;
• the reviewer, notes, evidence, escalation and rationale;
• the authorised professional, compliance or legal owner receiving the handoff; and
• later changes, re-screening events and revised outcomes.

Checklynx case management connects assignments, evidence, notes, escalation, decisions and timestamps to the screening process. Use the sanctions-alert investigation guide for the detailed resolution record. Neither replaces professional judgement, legal analysis or regulatory reporting.

What Checklynx does not decide

Implementation checklist

Frequently asked questions

Do all accountants and bookkeepers need the same screening process?

No. Scope depends on the actual services, legal entity, jurisdiction, supervisor and approved risk framework. A professional title or commercial label does not create one universal screening population or cadence.

Does Checklynx perform customer due diligence for an accounting practice?

No. Checklynx can screen supplied clients, companies and related parties. The practice or its upstream providers remain responsible for identification, verification, beneficial-owner determination, client-risk assessment and other CDD or EDD work.

Must a firm reject a client who is a PEP?

No. PEP status is not a prohibition or evidence of wrongdoing. The firm determines the applicable definition, risk, approval and enhanced measures under its legal and policy framework.

Can Checklynx discover and verify a corporate client's beneficial owners?

No. It can screen owners, controllers and related parties when their identities and relationships are supplied. Discovery, verification and the legal ownership/control determination remain separate.

Is screening a payer or beneficiary the same as transaction monitoring?

No. Transaction-party screening compares supplied names and identifiers with configured sources at an event. Behavioural transaction monitoring analyses patterns of activity over time; Checklynx does not claim that capability.

Does a clear sanctions result prove that an engagement or payment is lawful?

No. A clear name result does not resolve ownership/control, programme-specific service restrictions, geographic measures, licences, exceptions, evasion or other facts requiring professional and legal analysis.

Which Checklynx workflow fits an existing accounting client book?

CSV batch screening can check a defined existing population, while ongoing monitoring can re-screen maintained records when configured source information changes. Portal and API workflows support individual and repeatable engagement events.

Explore Checklynx sanctions screening software and PEP screening software for the underlying screening controls.