Category: Customer Due Diligence

Professional Intermediary

Also known as: Intermediary

Simply put

A professional intermediary is a person or firm that acts as a trusted middleman between a financial institution and another party in a transaction or business relationship. In an anti-money laundering context, financial institutions may rely on such intermediaries to help carry out certain customer-related processes, drawing on the intermediary's expertise and closer relationship with the underlying customer. The exact meaning and any specific obligations can vary depending on the jurisdiction and the applicable regulatory framework.

Formal definition

In its general sense, a professional intermediary is an entity that acts as an intermediary between two parties in a financial transaction. In a defined legal sense, one source describes a 'professional intermediary' as a person who carries on a business consisting of a specified activity and who holds himself out to the public as carrying on that activity; the precise scope of what constitutes a 'specified activity' depends on the applicable statutory or regulatory instrument and should be confirmed against that source. Within AML frameworks, professional intermediaries may function to streamline AML processes by permitting financial institutions to leverage the expertise and proximity of trusted third parties. Whether and to what extent an obliged entity may rely on such an intermediary for customer due diligence or related functions is determined by the specific regime applicable to that entity, and the intermediary's role does not transfer ultimate compliance responsibility unless the relevant rules expressly provide for it.

Why it matters

Professional intermediaries occupy a pivotal position in the customer relationship because they often sit between a financial institution and the underlying customer, giving the institution access to expertise and proximity that it may not have directly. This creates a practical tension in anti-money laundering programmes: reliance on an intermediary can streamline customer-related processes, but it can also introduce distance between the obliged entity and the party whose funds and activity ultimately need to be understood. Where an institution leans on an intermediary to perform or facilitate customer due diligence functions, the quality of the institution's risk understanding becomes only as reliable as the intermediary's own processes and integrity.

A central point for compliance professionals is that engaging a professional intermediary generally does not, by itself, transfer ultimate compliance responsibility away from the obliged entity. In many jurisdictions the rules permitting reliance on third parties are carefully bounded, and the accountability for meeting due diligence obligations typically remains with the institution unless the applicable regime expressly provides otherwise. Treating an intermediary's involvement as a substitute for the institution's own responsibility, rather than as a means of leveraging expertise, can leave gaps that undermine an AML programme's ability to detect and manage risk.

The term also carries meaning beyond AML compliance. The label 'professional intermediary' can have a defined legal sense in certain frameworks, such as a person who carries on a business consisting of a specified activity and holds themselves out to the public as doing so. Because the precise scope of that definition and any attaching obligations vary by jurisdiction and by the specific statutory or regulatory instrument, professionals should confirm the applicable meaning against the relevant source rather than assuming a single, universal definition applies.

Who it's relevant to

Compliance officers at financial institutions

Those responsible for AML programmes need to understand where reliance on a professional intermediary is permitted under their applicable regime, the conditions attached to that reliance, and the fact that ultimate compliance responsibility generally remains with the institution unless the rules expressly provide otherwise. This shapes how they design controls around intermediated relationships and assess the associated risk.

Financial intelligence analysts and investigators

Analysts assessing transactions or relationships involving an intermediary must recognise that the intermediary sits between the institution and the underlying customer. This distance can affect the visibility an analyst has into the ultimate party and should inform how they interpret and follow up on activity, without treating the presence of an intermediary as evidence of wrongdoing in itself.

Legal and regulatory professionals

Because 'professional intermediary' may carry a defined legal meaning in certain frameworks, and because the scope of that meaning and any obligations vary by jurisdiction and instrument, legal advisers need to confirm the applicable definition against the governing statutory or regulatory source rather than relying on a generalised understanding.

Risk professionals overseeing third-party reliance

Those managing third-party and outsourcing risk should evaluate the extent to which leveraging an intermediary's expertise and proximity introduces dependency on that party's own processes, and ensure the institution retains an adequate understanding of the underlying customer and the residual risk it continues to carry.

Inside Professional Intermediary

Gatekeeper Function

Professional intermediaries such as lawyers, notaries, accountants, trust and company service providers, and certain financial advisers occupy a gatekeeper position, facilitating access to the financial system and the formation or administration of legal structures. In many jurisdictions this gatekeeper role is what brings them within the scope of AML obligations when they undertake specified activities.

Designated Non-Financial Businesses and Professions (DNFBPs)

The FATF Recommendations bring certain professional intermediaries within the AML framework under the DNFBP category, typically covering activities such as forming companies, managing client assets or accounts, buying and selling real estate, or acting as or arranging for a nominee. The precise scope of covered activities and professions varies by implementing jurisdiction.

Triggering Activities

AML obligations for intermediaries generally attach to specific transactions or services rather than the profession as a whole. For example, obligations may apply when a lawyer or accountant participates in real estate transactions, the creation or management of legal entities or arrangements, or the handling of client funds, while purely advisory work may fall outside scope depending on the jurisdiction.

Customer Due Diligence Obligations

Where in scope, intermediaries are typically required to conduct customer due diligence (CDD), including identifying and verifying the client and, where relevant, any beneficial owner behind a structure, and to apply enhanced due diligence (EDD) in higher-risk situations. The exact requirements derive from the applicable regime, such as the EU AML framework, the UK Money Laundering Regulations, or FinCEN rules for covered entities.

Reporting and Legal Professional Privilege

In-scope intermediaries may be subject to suspicious activity or suspicious transaction reporting obligations (a SAR under the US BSA/FinCEN regime, or an STR/SAR in other regimes such as the UK under the Proceeds of Crime Act). Many jurisdictions carve out or qualify these obligations for information covered by legal professional privilege or professional secrecy, though the boundaries of that protection differ significantly across regimes and should be confirmed against local law.

Beneficial Ownership Considerations

Because intermediaries frequently establish or administer companies, trusts, and other legal arrangements, they are often positioned to identify the beneficial owner as distinct from the legal owner. Determining who ultimately owns or controls a structure is a recurring element of the intermediary's due diligence responsibilities where those obligations apply.

Common questions

Answers to the questions practitioners most commonly ask about Professional Intermediary.

Does being labelled a 'professional intermediary' mean the person or firm is suspected of wrongdoing?

No. The term describes a role or category of obliged entity, typically professionals such as lawyers, notaries, accountants, trust and company service providers, and other advisers who facilitate transactions or arrangements on behalf of clients. Categorising someone as a professional intermediary is a compliance and risk classification, not a criminal-law finding. Intermediaries may be exploited by clients seeking to obscure the source or ownership of funds, but the classification itself does not establish, imply, or prove any misconduct by the intermediary.

Is a professional intermediary the same as a beneficial owner or the client?

No. A professional intermediary generally acts on behalf of a client and should not be conflated with the underlying client or with the beneficial owner of funds or of a legal entity. Legal ownership held or administered by an intermediary is distinct from beneficial ownership, which concerns the natural person(s) who ultimately own or control the customer or on whose behalf a transaction is conducted. A core risk with intermediary relationships is that the intermediary's involvement can obscure the identity of the true beneficial owner, which is why identifying the person behind the intermediary is typically emphasised.

When an obliged entity onboards a professional intermediary, whose identity should be verified?

In many jurisdictions the customer due diligence expectation is to identify and verify both the intermediary acting in the transaction and, where the intermediary is acting on behalf of others, the underlying client and beneficial owner. Relying solely on the intermediary's own identity may leave the party on whose behalf they act unidentified. The precise requirements, including any thresholds and the extent of verification, depend on the applicable regime and the assessed risk, and should be confirmed against the relevant rules such as the applicable AML regulations or directives.

Can an obliged entity rely on a professional intermediary to have performed customer due diligence?

Some regimes permit reliance on third parties, including certain regulated professional intermediaries, to perform elements of CDD, subject to conditions. However, reliance typically does not transfer ultimate responsibility, which generally remains with the obliged entity that relies on the intermediary. Conditions often include the intermediary being subject to AML obligations and supervision, and the ability to obtain underlying documentation on request. The availability and terms of reliance vary by jurisdiction and should be checked against the applicable rules.

What risk factors are commonly considered when dealing with professional intermediaries?

Risk-based assessments may consider factors such as whether the intermediary is regulated and supervised for AML purposes, the jurisdiction in which they operate, the transparency of the arrangement, the complexity of structures involved, and whether the intermediary's involvement appears to add unnecessary layers between the funds and the beneficial owner. These considerations are aids to detecting, deterring, and managing risk rather than determinations of wrongdoing, and no single factor should be treated as conclusive.

How should suspicions involving a professional intermediary be handled?

Where an obliged entity forms a suspicion in the course of a relationship involving an intermediary, it generally follows its jurisdiction's reporting obligations, filing a suspicious activity report or suspicious transaction report to the relevant authority, as applicable. Filing such a report reflects a suspicion and does not establish that the intermediary or the underlying client has committed an offence. Obliged entities should also be mindful of any tipping-off restrictions and of professional privilege considerations that may apply to certain intermediaries under the relevant regime.

Common misconceptions

All professional intermediaries are always subject to full AML obligations regardless of what they are doing.

In most regimes, obligations attach to specific triggering activities rather than to the profession in general. A lawyer or accountant performing work that falls outside the designated activities may not be an obliged entity for that engagement. The precise scope depends on how the jurisdiction has implemented FATF standards or its own legislation and should be checked against the applicable rules.

Legal professional privilege never applies to AML reporting, so an intermediary must always report suspicions.

Many jurisdictions preserve legal professional privilege or professional secrecy and either exempt privileged information from reporting or narrow the reporting obligation accordingly. The scope of this protection varies considerably between regimes, and its precise limits should be confirmed against the applicable law rather than assumed.

Verifying the person who instructs the intermediary satisfies the beneficial ownership requirement.

Legal ownership or the instructing client is not the same as beneficial ownership. Where obligations apply, the intermediary generally must look through legal structures to identify the natural persons who ultimately own or control the arrangement, which may differ from the named client or legal owner.

Best practices

Map each engagement against the designated or triggering activities in the applicable jurisdiction to determine whether AML obligations apply, rather than assuming the profession is either wholly in or out of scope.

Apply risk-based CDD and, where indicated, EDD when establishing or administering companies, trusts, or other legal arrangements, and document the rationale for the level of due diligence chosen.

Distinguish legal ownership from beneficial ownership when acting on complex structures, and take reasonable measures to identify and verify the natural persons who ultimately own or control the arrangement.

Confirm how legal professional privilege or professional secrecy interacts with reporting obligations in the relevant regime before deciding whether a suspicious activity or transaction report should be filed.

Treat any suspicion, alert, or report as a trigger for further review rather than as proof of wrongdoing, and follow internal escalation and reporting procedures without tipping off the client where prohibited.

Keep due diligence, monitoring, and record-keeping current for the duration of the relationship, and periodically confirm exact thresholds, scope, and reporting requirements against the current applicable regulation, as these vary by jurisdiction and change over time.