How Are Small Firms Handling AML Checks?

AML onboarding is becoming a practical problem, not just a compliance problem

Across Ireland and the EU, smaller professional firms are facing a very practical question:

How are we supposed to handle AML checks in a way that is consistent, documented, and manageable — without turning every new client file into a manual paperwork chase?

For many firms, the problem is not a lack of awareness. Solicitors, accountants, tax advisers, estate agents, letting agents, and other regulated professionals know that anti-money laundering checks matter.

The challenge is operational.

A firm may be able to collect a passport, a proof of address, or a company document. But AML is not only about collecting documents. It is about being able to show a clear, repeatable process.

What was requested?
Why was it requested?
When was it received?
Where was it stored?
Was the client risk assessed?
Was the level of due diligence appropriate?
Could the firm explain the decision later?

That is where manual systems can become stressful.

Why manual AML processes become difficult for small firms

In smaller firms, AML checks are often handled through a mixture of email, shared folders, spreadsheets, document templates, and staff memory.

That can work for a while. But over time, the process becomes vulnerable to inconsistency.

One client file may be handled differently from another. One staff member may save documents in one place, while another uses a different folder or naming system. Risk assessments may be completed unevenly. Review points may not be clearly recorded. If a regulator, auditor, bank, or internal reviewer later asks what happened, the firm may have to reconstruct the process from scattered records.

The weak point is not always that the firm failed to collect information.

The weak point is often that the firm cannot easily evidence the full onboarding journey.

For small firms, this creates pressure on both sides.

The firm feels exposed because AML obligations are serious and the consequences of poor processes can be significant. The client may feel frustrated because they are being asked for sensitive information without always understanding why it is needed, what happens next, or how their data will be handled.

A better AML onboarding process should reduce that uncertainty.

AML is not just an ID check

One of the most common misunderstandings around AML is that it begins and ends with identity verification.

Identity checks are important, but they are only one part of a wider process.

A practical AML onboarding workflow may involve:

• • understanding who the client is;

• • assessing the level of risk;

• • identifying beneficial owners where relevant;

• • collecting and verifying appropriate documents;

• • applying customer due diligence;

• • deciding whether enhanced due diligence is needed;

• • keeping clear records;

• • knowing when the client or matter should be reviewed again.

The core issue is structure.

A firm does not only need documents. It needs a clear process that can be followed consistently and explained later.

Why this matters now: the EU’s 2024 AML package takes effect from 2027

The EU adopted a new anti-money laundering package in 2024, with key parts applying from 2027. A central part of this framework is Directive (EU) 2024/1640, which sets out obligations for Member States, national AML/CFT supervisors and Financial Intelligence Units.

It works alongside Regulation (EU) 2024/1624, the EU Anti-Money Laundering Regulation, which is designed to create more consistent AML/CFT requirements across Member States.

For a more accessible overview, the EU also provides an official EUR-Lex summary of the Directive. For Irish firms, the Central Bank of Ireland’s overview of the EU AML package is also a useful reference point, especially because it explains that the AML Regulation will be legally binding on obliged entities across the EU from July 2027, while the majority of the Sixth AML Directive must be transposed into national law by the same date.

The practical direction is clear: the EU is moving towards more consistency, stronger supervision, better cooperation between authorities, and clearer systems for preventing financial abuse.

For firms, the important point is not to wait until the rules feel urgent.

The better question is:

If AML processes are already difficult to manage manually today, how ready will the firm be when expectations become more harmonised and scrutiny increases?

What smaller firms should focus on now

A good starting point is to ask:

1. Is our onboarding process repeatable?
Does every relevant client go through a clear, structured process, or does it depend on who is handling the file?

2. Can we evidence what happened?
Can we quickly see what was requested, what was received, when it was completed, and why a certain level of due diligence was applied?

3. Are records stored securely and logically?
Are documents scattered across email inboxes and folders, or are they kept in a way that can be retrieved and reviewed?

4. Do clients understand the process?
Are clients told what is needed, why it is needed, and what happens next?

5. Are review points clear?
Does the firm know when a client, matter, or risk profile should be reviewed again?

These are practical questions. But they matter because AML failures often happen in the gap between having a policy and having a process that people can actually follow.

Where verification software can help

AML software should make the process feel lighter and clearer for both the business and the client involved.

For smaller firms, the value of a structured verification system is that it can reduce the need to chase documents manually, help standardise the onboarding process, and make records easier to manage.

The goal is to create clarity from the beginning:

• • what information is needed;

• • why it is being requested;

• • what the client needs to do next;

• • what the firm has already received;

• • what still needs to be completed;

• • where the verification record is stored.

This protects the firm, but it also improves the client experience.

When verification is clear, clients are less likely to feel accused, confused, or frustrated. The process becomes less about suspicion and more about creating a stable basis for working together.

Watch: What AML checks are and why they matter

For a deeper explanation, this video covers what AML checks are, who they apply to, and why they are an important part of client onboarding for regulated firms.