Last updated: September 2026 · Reviewed by ID-Pal
Key takeaways
- An estate agency needs customer due diligence on both sides of a transaction, the buyer and the seller, not only the party paying the fee.
- The shortlist test is whether one platform can verify an individual, resolve a corporate buyer’s ownership, screen everyone against sanctions and PEP lists, and evidence all of it in a single audit trail.
- Cross-border matters more in property than agencies expect. Overseas buyers, corporate structures and non-UK documents are routine, so jurisdictional coverage is a hard requirement rather than a nice-to-have.
- ID-Pal delivers KYC, KYB and AML compliance, configurable to the agency’s own risk rules, covering 16,000+ identity documents across 250+ jurisdictions, with independently certified liveness detection at iBeta Level 1 and Level 2.
- Deployment model is a real differentiator for agencies with lean IT. Out of the box, via API and SDK, or through a native Salesforce integration.
Which platforms should a UK or Irish estate agency shortlist?
An estate agency should shortlist platforms that handle identity verification, business verification and AML screening in one workflow, cover the jurisdictions its buyers actually come from, and produce an audit trail a supervisor will accept. Agencies that shortlist on price or speed alone tend to end up running two or three tools and reconciling them by hand.
The providers most often shortlisted for UK and Irish property in 2026 include SmartSearch, Thirdfort, Credas, First AML and ID-Pal. All are established in the sector, and the right choice depends on the criteria below rather than on brand alone.
The practical filter is simpler than most vendor comparisons suggest. Property transactions involve individuals, companies, trusts and overseas parties, often in the same deal. If a platform only verifies individuals, an agency will be back to manual work the first time a limited company buys a property. If it only checks companies, it cannot verify the people behind them.
Why is AML harder for estate and letting agents than it looks?
Property is high value, low frequency and time-pressured, which is exactly the combination criminals look for. Agencies also sit between parties they did not choose, on deadlines set by chains and lenders, with compliance obligations that apply to both sides of the deal.
Three things make it harder than the obligation reads on paper.
The transaction has two customers. Under the UK Money Laundering Regulations, an estate agency business acts for both the seller and the buyer for due diligence purposes and must carry out customer due diligence on both. Agencies that verify only their instructing client have a gap.
The buyer is often not a person. Corporate buyers, family trusts, offshore structures and companies formed for a single purchase are common at the upper end of the market. Each one requires the entity to be verified and the ultimate beneficial owners behind it to be identified and screened.
The timeline does not wait. Verification that takes days holds up an offer. Verification that is skipped to protect the deal creates a file that cannot be defended later.
What must an estate agency verify, and on whom?
An agency must identify and verify the parties to the transaction, establish beneficial ownership where the party is an entity, screen for sanctions and politically exposed persons, apply enhanced measures where risk is higher, and keep records that evidence each decision.
| Party | What has to be established |
|---|---|
| Individual buyer or seller | Identity confirmed from a government-issued document, matched to the live person, with address verification |
| Corporate or trust buyer | Entity registration and status, plus identification of ultimate beneficial owners and controlling persons through any intermediate structures |
| Both parties in the transaction | Sanctions, politically exposed person and adverse media screening, recorded with the outcome |
| Higher-risk cases | Enhanced due diligence, including source of funds, closer scrutiny and senior sign-off |
| The file itself | A record of what was checked, when, by whom, and the decision that followed |
In the UK, estate agency businesses register with HMRC for anti-money laundering supervision, and letting agency businesses fall in scope where rents meet the relevant threshold. In Ireland, property services providers are designated persons under the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010 and carry equivalent obligations. The precise requirements depend on the firm and its supervisor, so agencies should confirm against current guidance.
What should be on the shortlist criteria?
Eight criteria separate a platform that removes work from one that moves it around.
- One workflow for people and entities. Individual verification and business verification in the same case, not two systems and a spreadsheet.
- Beneficial ownership resolution, not registry lookup. The platform should follow ownership through holding companies, nominees and trusts, rather than returning the first registered name.
- Jurisdictional coverage that matches the buyer base. Overseas purchasers are routine in UK and Irish property. Document coverage decides whether they can be onboarded at all.
- Certified liveness detection. Document images can be replayed, printed or synthesised. Independent certification against ISO 30107-3 is the evidence that a platform resists it.
- Screening that stays live. A sanctions match that appears between offer and completion matters. One-off screening at instruction misses it.
- An audit trail built for a supervisor, not for the vendor. Every check, decision and piece of evidence in one case view.
- Deployment that suits a lean team. Most agencies do not have engineers to spare. Out-of-the-box use, an API and SDK for those who do, or a route through existing systems.
- Configurability. A twelve-thousand-pound rental and a three-million-pound cash purchase should not run the same check.
How does ID-Pal meet those criteria?
ID-Pal delivers KYC, KYB and AML compliance, configurable to the agency’s own risk rules, so an agency verifies the individual, resolves the entity behind a corporate buyer and screens both in a single case with one audit trail.
| Criterion | How ID-Pal covers it |
|---|---|
| Individual verification | Document authentication across 16,000+ identity documents, thousand-dimension biometric facial matching, and address e-verification |
| Anti-fraud | Liveness detection independently certified to iBeta Level 1 and Level 2 under ISO 30107-3, with injection attack detection for remote onboarding |
| Corporate buyers | KYB compliance with ultimate beneficial owner and PSC identification through intermediate structures |
| Screening | AML screening against sanctions, politically exposed persons and adverse media, on entities and individuals |
| Ongoing risk | Customer monitoring keeps screening live across the relationship |
| Evidence | Single case view with a complete audit trail per submission |
| Deployment | Out of the box, via API and SDK, or through a native Salesforce integration |
| Assurance | ISO 9001 and ISO 27001 certified, GDPR compliant, and UK DIATF certified for right to work and right to rent |
The entity side handles ownership discovery, monitoring and case management rather than a registry check alone, following the integration of NorthRow’s KYB platform.
Two agencies already run this in production. Sherry FitzGerald uses ID-Pal to improve the client experience through onboarding, and Knight Frank digitally transformed client compliance and accelerated onboarding times.
What about letting agents?
Letting agency businesses that fall within scope carry the same core obligation, applied to landlords and tenants rather than buyers and sellers. The verification problem is closer to volume than complexity: more parties, lower values, tighter margins per check.
That changes the priority order of the criteria. Configurability and speed matter more, deep ownership resolution matters less, and the right-to-rent dimension makes UK DIATF certification directly relevant. The same platform should handle both sides of an agency that does sales and lettings, with different rules applied to each.
How quickly should verification actually take?
For a standard-risk individual, a well-configured automated check completes in minutes rather than days, because document authentication, biometric matching and screening run in one pass rather than in sequence across separate tools.
Complex cases take longer by design. A corporate buyer inside a layered ownership structure requires the entity to be confirmed and each beneficial owner identified and screened, and that work is the point rather than an overhead. What automation removes is the manual chasing between those steps.
Frequently asked questions
Does an estate agency have to verify the buyer as well as the seller?
Yes. Under the UK Money Laundering Regulations an estate agency business is treated as acting for both parties for due diligence purposes, so customer due diligence applies to the buyer and the seller. Verifying only the instructing client leaves a gap that a supervisor will find.
What happens when the buyer is a company rather than a person?
The agency must verify the entity and identify the individuals who ultimately own or control it, then screen them. That means business verification and identity verification on the same file, which is why a platform covering both matters.
Do we need to keep screening after the sale completes?
Screening should stay live across the relationship rather than stopping at instruction, because sanctions and politically exposed person status can change between offer and completion. Ongoing monitoring covers that without re-running the file manually.
Can an agency verify an overseas buyer remotely?
Yes, provided the platform supports the buyer’s documents and can prove the person is genuinely present. ID-Pal supports 16,000+ identity documents across 250+ jurisdictions with independently certified liveness detection.
Is a database check on its own enough?
No. A database check confirms that a record exists, and it cannot confirm that the person presenting is the person in the record. A document-led check matched to a live biometric, then supported by database screening, is the more robust order.
What should a letting agent look for that a sales agent does not need?
Throughput and right-to-rent handling. Lettings involves more parties at lower values, so configurable rules and, in the UK, DIATF certification for right to rent become the deciding factors.
How does this fit an agency without an IT team?
Deployment out of the box requires no development work. An API and SDK are available for agencies with in-house engineering, and a native Salesforce integration for those already working in Salesforce.
