HMRC ASA AML Supervision: Crucial Update for TCSPs and Payroll Providers

HMRC's New Mandate: Approved AML Supervision for Agent Services Account (ASA) Registration

A significant update from HMRC, issued on 2 October 2026, has introduced a critical new requirement for businesses interacting with the tax authority on behalf of clients. Firms must now hold **approved Anti-Money Laundering (AML) supervision** *before* they can successfully apply for an Agent Services Account (ASA). This change has profound implications for Trust and Company Service Providers (TCSPs), accountants, tax advisers, and particularly third-party payroll providers, who face an urgent deadline of 18 November 2026.

This isn't merely an administrative tweak; it's a fundamental shift designed to bolster the UK's fight against financial crime. HMRC explicitly states that applications for an ASA will be rejected if approved AML supervision is not already in place. For many firms, this means a re-evaluation of their compliance processes and potentially an accelerated path to securing the necessary supervision.

Understanding the New HMRC ASA AML Supervision Requirement

The core of HMRC's updated guidance is unambiguous: any business or individual paid to interact with HMRC on behalf of clients, and therefore requiring an ASA, must first be supervised for AML purposes by an approved body. This applies across a broad spectrum of services, from preparing tax returns and providing tax advice to managing payroll.

The requirement stems from the broader Modernising and Mandating Tax Adviser Registration (MMTAR) programme, which aims to create a single, legally required registration process for all tax advisers. The ASA is now the universal gateway for these interactions.

Approved supervision refers to oversight by either HMRC itself or one of the professional bodies recognised under Schedule 1 of the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017). These bodies include various accountancy and legal professional organisations, as well as HMRC for those not supervised elsewhere.

Who is Affected? TCSPs and Payroll Providers in Focus

While the new rule impacts a wide range of tax advisers, specific groups face immediate and direct consequences:

Third-Party Payroll Providers: If your firm exclusively provides third-party payroll services and interacts with HMRC on behalf of clients, your mandatory registration window opens on 18 November 2026. You then have three months, until 17 February 2027, to apply for an ASA with approved AML supervision in place.
Many payroll-only businesses may be new to formal AML supervision requirements, making this an urgent priority. Failure to comply could mean an inability to submit PAYE information or resolve tax queries for clients.
Trust and Company Service Providers (TCSPs): TCSPs, by their very nature, are already designated 'relevant persons' under MLR 2017 and are required to be supervised for AML. HMRC is the supervisory authority for TCSPs not supervised by the Financial Conduct Authority (FCA) or a professional body.
If your TCSP firm provides registered office addresses, company formation, or mail forwarding services, and also offers tax advice or interacts with HMRC for clients (e.g., submitting company tax returns), you must ensure your AML supervision is current and approved *before* any ASA application. This applies even if you already have an ASA; HMRC will contact existing ASA holders for this information from 31 December 2026 to 31 March 2027.
Other Tax Advisers and Accountants: The phased rollout of mandatory tax adviser registration began on 18 May 2026. Those with existing Self Assessment or Corporation Tax agent accounts faced a registration window from 18 August 2026. Firms new to practice or without existing accounts needed to register from 18 May 2026.
Regardless of your specific deadline, the prerequisite of approved AML supervision applies to all. HMRC will contact existing ASA holders to confirm compliance with these new conditions.

Achieving 'Approved Supervision' Status: Your Path to Compliance

To meet HMRC's new requirement, your firm must be under the AML supervision of a recognised body. The primary supervisory authorities in the UK under MLR 2017 include the Financial Conduct Authority (FCA), His Majesty's Revenue and Customs (HMRC), and a range of professional bodies.

Identifying Your Appropriate Supervisory Body

Your supervisory body will typically be determined by your primary business activities and professional memberships:

Professional Body Supervisors: If you are a member of a recognised professional body (e.g., ICAEW, ACCA, CIOT, AAT, Law Society), your AML supervision will generally be provided through your membership. These bodies monitor compliance with MLR 2017 for their members.
HMRC Supervision: If your firm's activities fall under the scope of MLR 2017 but you are not supervised by the FCA or a professional body, HMRC will be your AML supervisor. This commonly applies to many TCSPs, accountancy service providers not supervised by a professional body, and some money service businesses.

It is crucial to verify your supervisory status. If you are unsure, contact your professional body or refer to HMRC's guidance on who needs to register for money laundering supervision.

Steps to Secure or Evidence Approved Supervision

Conduct a Firm-Wide Risk Assessment: Before applying for AML supervision (especially with HMRC), you must complete a comprehensive anti-money laundering, terrorist financing, and proliferation financing risk assessment. This forms the foundation of your AML framework.
Implement Robust Policies, Controls, and Procedures (PCPs): Based on your risk assessment, establish and document effective PCPs to manage and mitigate identified risks. HMRC will reject applications if these are not in place.
Apply for Supervision (if not already supervised): If HMRC is your supervisor, use their online service to apply for money laundering supervision. Be aware that this process can take up to 45 days.
Gather Proof of Supervision: When applying for your ASA, you will need to provide evidence of your approved AML supervision. Acceptable forms include a digital copy of your supervision certificate, a renewal confirmation email or letter, proof of payment for supervision, or a screenshot showing your business listed on your supervisory body's public register.

The Critical Deadline: 18 November 2026 and Beyond

For third-party payroll providers, the 18 November 2026 deadline marks the opening of their mandatory registration window. This is not a suggestion; it is a legal requirement.

Consequences of Non-Compliance: Failure to register for an ASA with approved AML supervision by the relevant deadline will prevent your firm from interacting with HMRC on behalf of clients. This means you could be blocked from submitting returns, corresponding with HMRC, or resolving client tax matters. Continued attempts to interact while unregistered may lead to formal stop notices, bans from registration, and significant financial penalties, starting at £5,000 for a first breach and £10,000 for repeat offences.

Even if your firm already has an ASA, HMRC will eventually require you to confirm your AML supervision details. They will contact existing agents via their ASA from 31 December 2026 to 31 March 2027 to request this information. Keep your contact details updated.

Practical Steps for TCSPs: Ensuring Uninterrupted HMRC Access

To navigate these new requirements effectively and avoid disruption to your services, TCSPs should take immediate action:

Verify Your AML Supervision Status: Confirm who your current AML supervisory body is and ensure your registration is active and up-to-date. If you are not yet supervised, initiate the application process with HMRC or the relevant professional body without delay. Remember, approval can take time.
Review and Update Your AML Framework: Ensure your firm-wide risk assessment is current, comprehensive, and tailored to your specific business activities, including any TCSP compliance checklist items. Your policies, controls, and procedures must effectively address identified risks, including client due diligence and ongoing monitoring.
Prepare Evidence of Supervision: Have readily accessible copies of your AML supervision certificate, renewal notices, or other proof of registration. This will be required during your ASA application or when HMRC requests it.
Communicate Internally: Ensure all relevant staff, particularly MLROs, compliance officers, and operations teams, are aware of these new requirements and deadlines. Emphasise the importance of adhering to updated procedures.
Monitor HMRC Guidance: Stay informed of any further updates from HMRC regarding ASA registration and AML supervision. The landscape of tax adviser regulation is evolving.

TCSP Action Checklist for HMRC ASA AML Supervision

Confirm AML Supervisory Body: Identify if it's HMRC or a professional body.
Verify Active Supervision: Ensure your AML registration is current.
Review Firm-Wide Risk Assessment: Is it up-to-date and specific to your services?
Validate PCPs: Are your AML policies, controls, and procedures robust?
Gather Proof of Supervision: Have certificates/evidence ready for ASA application.
Mark 18 November 2026: Critical deadline for payroll-only providers.
Prepare for HMRC Contact: If you have an existing ASA, expect HMRC to request AML supervision details from 31 Dec 2026.
Educate Staff: Ensure everyone understands the new requirements and their role.

Leveraging Technology for Robust AML Compliance and HMRC Interaction

The increasing complexity of regulatory requirements, coupled with the need for demonstrable compliance, highlights the value of technology for TCSPs. Digital solutions can significantly streamline your AML processes and provide the audit trails necessary to satisfy HMRC's scrutiny.

For instance, managing client communications, registered office address rules, and identity verification processes through a dedicated platform ensures consistency and creates an immutable record. A robust digital mail handling system, for example, can provide clear audit trails for all client correspondence, demonstrating effective communication and record-keeping, which are vital components of AML compliance (MLR 2017 Regulation 19 mandates record retention for five years).

Similarly, using integrated platforms for client onboarding and ongoing due diligence helps ensure that you meet your obligations under MLR 2017, including verifying beneficial owners and conducting enhanced due diligence where necessary. The ability to quickly retrieve and present comprehensive audit trails of your compliance activities can be invaluable during an HMRC compliance check, demonstrating that your firm understands its money laundering risks and has implemented proportionate controls.

Conclusion: Proactive Compliance is Key to Uninterrupted Service

HMRC's updated guidance on **HMRC ASA AML supervision** is a clear signal of the government's intensified focus on raising standards and combating financial crime within the tax adviser sector. For TCSPs and payroll providers, understanding and acting on these requirements is not optional; it's essential for maintaining your ability to interact with HMRC and serve your clients effectively.

The 18 November 2026 deadline for payroll-only providers is fast approaching, and all firms needing an ASA must ensure their approved AML supervision is in place beforehand. Proactive engagement with these new rules, coupled with leveraging modern compliance technology, will safeguard your firm against service disruption, penalties, and reputational damage. Ensure your firm is not just registered, but truly ready for robust AML supervision.