FCA authorised · FRN 724952 0117 325 0027Quote & buy →
Aipedia: Bookkeepers
Bookkeepers can use automated ID verification and AI risk scoring for anti-money laundering checks, but the firm remains responsible for its own customer due diligence. A supervisor will judge the firm's controls, not the vendor's.
Part of: AI in Bookkeepers
In short
Every bookkeeper in business must be supervised for anti-money laundering by a professional body such as ICB or IAB, or by HMRC. Some may use apps that check identity documents, run electronic verification and score client risk. No AML supervisor guidance on AI-based ID verification was found in our research. ICB s.25(d) requires CDD and transaction records to be kept for six years. If a tool misses a risk, the firm still answers to its supervisor. Supervisory fines are generally not insurable under PI, though claims by clients for negligent work may be covered, subject to the policy terms.
Onboarding apps let a new client upload a photo of a passport or driving licence and a selfie. The software checks the document, matches the face, runs electronic database checks and screens for sanctions and politically exposed persons. Some add AI risk scoring based on business type, location and ownership, and monitor clients continuously. For a small practice, this replaces manual checks that were easy to skip.
Bookkeeping has no statutory regulator, but a bookkeeper in business must have an AML supervisor. ICB and IAB act as supervisors for their members, and HMRC supervises others. The IAB AML supervision page sets out its requirements, including proof of PI covering the services your practice provides. ICB members are bound by the ICB Professional Conduct Regulations, including:
AML supervision is also a condition of HMRC tax adviser registration; see HMRC's registration conditions. We found no AML supervisor guidance specifically on AI ID verification as at October 2026.
An ID app is a tool for carrying out CDD, not a substitute for the firm's judgement. The firm still needs to understand the client's business, identify beneficial owners, decide the risk level and decide what enhanced checks to make. A green tick from the app shows that a document passed the app's checks. It does not show that the source of funds makes sense or that the person you met is acting for themselves. Accountants face the same point; see AI client due diligence for accountants.
Illustrative scenario: a bookkeeper onboards a new limited company client through an automated ID app. The director passes the identity check, and the AI risk score is low. Nobody looks at the company's ownership, which runs through an overseas entity, or asks why a newly formed business has large cash takings. During a supervisory visit, the supervisor finds the risk assessment was left to the app and that the vendor's records cannot be exported for the full six years. The firm faces supervisory action.
A different failure is the false positive: a tool wrongly flags a client and the firm declines or delays work without human review. Where an individual is refused a service solely by automated means, the safeguards in UK GDPR Articles 22A to 22D, inserted by section 80 of the Data (Use and Access) Act 2025, may apply.
PI responds to claims by third parties for losses caused by negligence in your professional services. A fine or penalty imposed on the firm by its AML supervisor is a sanction against the firm, not a client's loss. Policies commonly exclude fines and penalties, and some may not be insurable as a matter of law. Some policies may contribute to legal costs of responding to a regulatory investigation, depending on the wording. See fines versus civil claims.
Apex arranges PI for bookkeepers, and a broker can review your cover against what your AML supervisor asks to see and explain what PI does and does not cover for regulatory matters. See the AI in bookkeeping hub and AI guidance for bookkeepers.
It can verify identity, but CDD is wider. The firm must also understand the client's business and ownership and assess risk. Supervisors judge the firm's overall approach, and we found no supervisor guidance saying an app alone is enough.
ICB s.25(d) requires CDD and transaction records to be kept for six years. Check that your ID provider lets you export and keep records for that period, including if you stop using the service.
Generally no. PI covers third-party claims arising from negligent professional services. Fines and penalties imposed on the firm are commonly excluded and may be uninsurable. Some wordings may help with legal costs in an investigation.
Yes. IAB says applicants for AML supervision "must provide proof of professional indemnity insurance, which covers the services your practice provides". It states no minimum limit.
Tell us about your firm and the work you do. A broker will review how your current PI treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.
Start a PI quote Request a callbackApex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.
