The Joint Money Laundering Steering Group (JMLSG)

The Joint Money Laundering Steering Group (JMLSG) is a body composed of the UK’s leading financial services trade associations. It produces guidance on how firms should meet their obligations under the Money Laundering Regulations — translating requirements written in general terms into what a firm is actually expected to do.

It is not a regulator and has no enforcement power. Its guidance nonetheless carries legal weight, for a specific reason worth understanding.

What it is A body of UK financial services trade associations
What it produces Guidance on the Money Laundering Regulations, in three parts
Approved by HM Treasury
Legal effect Courts must consider it when assessing compliance
Supervisor Not one — the FCA and others supervise
Scope UK financial sector

Why Treasury approval matters

This is the mechanism that distinguishes JMLSG guidance from ordinary industry good practice.

The Money Laundering Regulations, and the Proceeds of Crime Act, provide that where a court considers whether a person committed an offence or took reasonable steps, it must have regard to guidance that has been approved by HM Treasury. JMLSG guidance is so approved.

The practical effect is a two-way ratchet. A firm that followed the guidance has a strong position when its conduct is examined. A firm that departed from it has not necessarily breached anything — the guidance is not law, and alternative approaches can be adequate — but it carries the burden of explaining why its approach met the requirement. In practice, most UK firms treat it as the baseline and document deviations deliberately.

The guidance is issued in three parts: Part I covers the general obligations applying across the sector, Part II addresses sector-specific issues for different business lines, and Part III deals with specialist topics.

Why it matters for identity verification

JMLSG guidance is where the UK’s abstract identification requirement becomes operational, and it is the reference a UK firm’s verification design is actually measured against.

The Money Laundering Regulations require a firm to identify the customer and verify that identity on the basis of documents or information from a reliable, independent source. That sentence does not tell anyone what to build. The guidance addresses what sources are considered reliable, how electronic verification can be used and what it should demonstrate, how to handle customers who cannot produce standard documentation, and what enhanced due diligence looks like in higher-risk situations.

Two of its themes bear directly on how verification should be designed.

Risk-based rather than prescriptive. The guidance does not set a single standard for every customer. The depth of verification should reflect the assessed risk, which means a firm has to be able to justify its standard rather than point to a checklist — and has to be able to apply different depths within one process.

Financial inclusion is treated as a compliance concern, not a separate one. The guidance is explicit that firms should not exclude customers who lack standard documentation, and discusses alternative approaches for people without a passport or driving licence, without a stable address, or otherwise outside the documentary mainstream. This matters because the easiest way to satisfy an identification requirement is to refuse anyone who is difficult, and the guidance closes that route off.

Where JMLSG sits among UK bodies

Body Role Binding on firms
JMLSG Writes Treasury-approved AML guidance No — but courts must consider it
FCA Supervises and enforces against firms Yes
HM Treasury Makes the Money Laundering Regulations; approves guidance Yes — the regulations are law
UKFIU (within the NCA) Receives suspicious activity reports Reporting is a legal duty
OPBAS Oversees the professional body supervisors Indirectly

What the JMLSG does not do

It does not supervise or enforce. No firm answers to the JMLSG. Supervision sits with the FCA, HMRC and the professional body supervisors.

It does not make law. The obligations come from the Money Laundering Regulations and POCA. The guidance explains how to meet them.

Following it is not a safe harbour. It is strong evidence of reasonable steps, not a guarantee against enforcement, and a firm that applies the guidance mechanically to a situation it does not fit has not met the requirement.

It does not cover the whole regulated population. Its focus is the UK financial sector. Other supervised sectors — legal, accountancy, estate agency — have their own guidance from their own bodies.

It does not apply outside the UK. A firm operating in several markets meets each regime on its own terms, as covered under AML regulators by country.

Frequently asked questions

Is JMLSG guidance legally binding?

Not directly. It is approved by HM Treasury, which means a court must have regard to it when deciding whether a firm took reasonable steps or committed an offence. Departing from it is permitted, and the firm then carries the burden of showing its alternative met the requirement.

Who is the JMLSG made up of?

The UK’s leading financial services trade associations, which is why the guidance reflects operational practice rather than only regulatory theory. It is produced by the industry and given weight by Treasury approval rather than by statutory authority.

Does JMLSG guidance say what ID documents to accept?

It addresses what makes a source reliable and independent, how electronic verification can be relied on, and how to handle customers without standard documentation — rather than issuing a fixed list. The approach is risk-based, so the firm must be able to justify the standard it applies.

How does JMLSG relate to the FCA?

They are separate. The JMLSG writes guidance; the FCA supervises firms and takes enforcement action. The FCA expects firms to have regard to the guidance, and failures assessed by the FCA are frequently measured against it.

Related reading

Discover Our Solutions

Exploring our solutions is just a click away. Try our products or have a chat with one of our experts to delve deeper into what we offer.

Report
Mapping the Rise of AI-Powered Identity Fraud

AI didn't just make fraud faster. It made it a system. We analyzed millions of identity interactions to map how identity attacks are evolving across regions, attack types, and sophistication levels — and what organizations need to rethink to keep pace.

See the Data