What to record when an AML review finds no client changes
Last updated: May 20, 2026
A scheduled AML review does not always lead to new document requests, a revised risk rating, or further client questions. In many cases, the review simply confirms that the existing AML position remains adequate.
That said, the record should still show why the firm was satisfied that no AML update was needed, so the decision can be understood later by staff, partners, or a supervisory body.
Contents
Key takeaways
- A no-change outcome is a recorded conclusion after a periodic review.
- The record should show what was reviewed, who reviewed it, and why no AML update was needed.
- Fresh ID, proof of address, or other documents are not automatically needed when existing evidence remains sufficient.
- Lower-risk clients may justify shorter records, provided the basis for the decision is clear.
- The review moves into update or follow-up territory if it identifies doubt, inconsistency, missing evidence, or client changes.
What a no-change AML review record has to prove
A periodic review is part of a firm’s ongoing control over an existing client file. Once it has been completed, the AML record becomes the evidence of that work.
When nothing material has changed, the record should still show that the existing AML position was actively considered. This is the difference between a no-change review and a silent file.
Per the Money Laundering Regulations, relevant firms must keep CDD information up to date, review existing records as part of ongoing monitoring, and retain supporting records that evidence the decision reached.
Therefore, the record should show enough of the review trail to explain the decision to a supervisor and defend why no AML update was made.
What to include in the no-change record
A defendable no-change record is typically short, but it should be specific enough for a reviewer to understand the judgement basis.
The record should show the information considered, such as the latest client contact and the work completed during the review period, supported by the existing CDD and risk assessment already held.
The note can then record that no material client change in circumstances was identified, without copying existing evidence again.
| A no-change record should show | Avoid turning the record into |
|---|---|
| Review date and reviewer | A statutory no-change template |
| Client or engagement reviewed | A full onboarding rerun |
| Information considered | A general CDD refresh checklist |
| Existing CDD and risk position checked | Duplicate copies of existing documents |
| No material change conclusion | A bare “no change” tick-box |
| Reason no update or follow-up was needed | A long legal memo |
The supporting evidence can sit in more than one part of the client AML record. A short review note, risk assessment update, or meeting record may all work if the conclusion is clear and retrievable.
For more comprehensive guidance on review notes beyond no-change outcomes, see our guide to what accountants should record in a client AML review.
How much evidence is enough when the client is unchanged
The level of evidence should match the client risk and the facts reviewed.
A straightforward, lower-risk client with stable services and no inconsistencies may only need a concise dated entry. However, a higher-risk client with a more complex structure or a file with previous concerns will usually need more detail. This is because the no-change conclusion carries more judgement.
HMRC guidance note: HMRC’s ongoing monitoring material recognises that firms can use existing information, dated review records, and relevant client contact as part of review evidence. It also supports avoiding duplicate document copies where nothing has changed. These examples show that no-change evidence can be proportionate, but the firm still needs to decide what is suitable for the client’s risk and the AML record being reviewed.
For example, a small practice may complete a periodic review for an owner-managed limited company that has used the same bookkeeping and year-end accounts service for several years. The client’s trading activity, ownership, and service scope remain unchanged, and recent contact has not raised any AML concerns.
In this situation, a dated review note or risk assessment entry may be enough, provided it shows what was considered and why no update was needed.
When a no-change note is no longer enough
A short no-change note only works when the review genuinely supports that conclusion.
If the file raises doubt about existing CDD evidence, the review has moved beyond a clean no-change outcome.
Later information may also point to a different client position, a changed service pattern, or a risk profile that needs further thought. In these cases, the file should record the issue and the next action rather than closing the review as unchanged.
Boundaries are especially important when the apparent change may affect the client’s AML risk.
A possible beneficial ownership change should move the review into the firm’s normal update or escalation process. So should unusual client activity, a new service line, or an inconsistency that cannot be explained.
In summary
A no-change periodic review still needs to leave a trace in the client AML record. A short, dated, and retrievable note may be enough for a simple unchanged client, while greater risk or uncertainty will need stronger support.
The safest approach is to explain the rationale behind the decision clearly, so the firm can defend the record if it is reviewed by a supervisor.
FAQs
The best practice is to make the note specific enough to show the AML review happened and who completed it. It should also identify the client or engagement reviewed, the information considered, and why no AML update was needed.
Fresh ID is not automatic if the evidence already held remains adequate and there is no relevant change, doubt, or inconsistency. The client AML record should show why that evidence still supports the current position, rather than collecting documents for their own sake.
A bare tick-box is weak if it does not show what was reviewed or why the conclusion was reached. A short note beside the tick-box may be enough where it identifies the information considered and confirms that no update or follow-up was needed.
Yes, where the meeting note contains relevant information and supports the review conclusion. It should be clear how the note links to the AML review, rather than leaving the connection to be guessed later.
The client file should not be closed as a clean no-change review until the inconsistency has been considered. If it affects the current CDD, risk rating, or client information, the AML record should move into follow-up or update territory.
References and Source Material
- Money Laundering Regulations 2017 (Regulation 27, 28, 40)
- HMRC, Economic Crime Supervision Handbook (ECSH33520, ECSH33375)
- HMRC, Your responsibilities under money laundering supervision
- ICAEW, Updating customer due diligence
- ICAEW, Simplified and enhanced due diligence: one size doesn’t fit all
- CCAB, Anti-Money Laundering Guidance for the Accountancy Sector
