Yes, in many cases, co-working spaces and business centres offering virtual office, registered office or business address services may need HMRC AML supervision as a Trust or Company Service Provider (TCSP) under the Money Laundering Regulations 2017.
This is one of the most common questions we hear from co-working operators, serviced office providers, and business centres looking to expand into virtual office services.
Many businesses are surprised to discover that offering registered office addresses or business address services can bring them within the scope of Anti-Money Laundering (AML) regulations.
The good news is that AML compliance does not need to feel overwhelming. With the right guidance, processes, and systems in place, virtual offices can become a valuable, scalable, recurring revenue stream for your business.
In this guide, we’ll break down:
• When AML registration is required
• What HMRC expects from virtual office providers
• How to apply for AML supervision
• Current HMRC AML registration fees
• How long the process can take
• Common compliance mistakes
• What happens if you do not register
• How an independent AML consultant can help
Why Are Virtual Offices So Popular For Co-Working Spaces?
Once physical offices are full, revenue growth can naturally slow down.
Virtual office services allow operators to continue generating recurring monthly revenue without requiring additional physical space.
For example:
- 50 virtual office customers at £35 per month could generate £1,750 per month recurring revenue
- 100 customers at £45 per month could generate £4,500 per month before additional service upsells
Additional services such as mail forwarding, meeting rooms, and call answering can increase this even further.
As remote and hybrid working continue to grow, demand for flexible business addresses remains extremely strong.
When Do Co-Working Spaces Need AML Registration?
Many co-working spaces and business centres may require HMRC AML supervision if they provide:
• Registered office services
• Business address services
• Directors’ service addresses
• Company formation services
These services can fall under the definition of a Trust or Company Service Provider (TCSP) under the Money Laundering Regulations 2017.
This means operators may need to:
• Register with HMRC for AML supervision
• Complete customer due diligence (CDD)
• Verify customer identities
• Conduct sanctions and PEP screening
• Carry out business risk assessments
• Maintain records and audit trails
• Monitor customers on an ongoing basis
• Train staff on AML procedures
It is important not to assume that simply offering mail handling or address services is “low risk” from a regulatory perspective.
How Do You Apply For HMRC AML Registration?
The registration process is completed through HMRC.
Businesses will typically need to provide:
• Business details
• Company information
• Details of directors, beneficial owners, officers and managers
• Information about services provided
• Policies and procedures
• Risk assessments
• Details of business premises
• Information on AML controls and monitoring processes
HMRC may also ask additional questions during the application process.
You can start the process here: HMRC AML Registration Guidance
How Much Does HMRC AML Registration Cost?
HMRC fees can vary depending on your business structure and services.
Current fees generally include:
• A one-off application fee of approximately £300
• An annual premises supervision fee of approximately £400 per premises
• Additional approval or fit and proper test fees for certain individuals and sectors
Small businesses with low turnover may qualify for reduced fees. (GOV.UK)
You can view the latest HMRC fee guidance here: HMRC AML Supervision Fees
How Long Does HMRC AML Registration Take?
Processing times can vary significantly.
Some businesses may receive approval within a few months, while others can experience delays depending on:
- Application quality
- Missing information
- Complexity of services
- Fit and proper testing requirements
- HMRC backlogs
It is important not to leave registration until the last minute if you are planning to launch virtual office services.
What AML Checks Do Virtual Office Providers Need To Complete?
Virtual office providers should typically have procedures covering:
Customer Due Diligence (CDD)
This may include:
- Identity verification
- Proof of address verification
- Beneficial ownership checks
- Understanding the nature of the customer’s business
- Risk assessments
PEP & Sanctions Screening
Businesses should screen customers against:
- Politically Exposed Persons (PEPs)
- UK sanctions lists
- International sanctions lists where appropriate
Ongoing Monitoring
AML compliance is not a one-time onboarding exercise.
Ongoing monitoring may include:
- Reviewing customer activity
- Monitoring changes to company ownership
- Reviewing high-risk jurisdictions
- Escalating suspicious activity
- Ongoing sanctions screening
- Maintaining audit trails and records
What Happens If A Business Does Not Register?
This is where many operators underestimate the seriousness of the regulations.
Failure to register when required can result in:
- Financial penalties
- HMRC enforcement action
- Public publication of penalties
- Reputational damage
- Increased regulatory scrutiny
For many business centres, reputational impact can be just as damaging as the financial penalties themselves.
Common AML Mistakes Virtual Office Providers Make
Some of the most common issues we see include:
• Assuming Companies House checks are enough
• No documented risk assessment
• No ongoing monitoring procedures
• Failing to identify beneficial owners
• No sanctions or PEP screening
• Poor record keeping
• Lack of staff training
• No escalation process for high-risk customers
Many businesses do not intentionally ignore compliance requirements. Often, they simply have not been given practical guidance on how to build a compliant framework.
How Can An Independent AML Consultant Help?
For many co-working operators, AML regulations feel unfamiliar because compliance is not their primary background.
An independent AML consultant can help simplify the process by supporting with:
- AML registration guidance
- Business risk assessments
- Policies and procedures
- Staff training
- Customer onboarding frameworks
- Ongoing monitoring procedures
- Mock HMRC audits
- Compliance reviews and gap analysis
The aim should not simply be “ticking boxes”, but building practical, proportionate processes that support long-term growth safely.
Virtual Office AML Compliance Checklist
Before launching virtual office services, ask yourself:
Business & Registration
☐ Have we confirmed whether HMRC AML registration is required?
☐ Have we identified whether we fall under TCSP regulations?
☐ Have we documented our business risk assessment?
Policies & Procedures
☐ Do we have written AML policies and procedures?
☐ Do we have escalation processes for high-risk customers?
☐ Do we have a record-keeping procedure?
Customer Onboarding
☐ Are we verifying customer identities?
☐ Are we screening for sanctions and PEPs?
☐ Are we identifying beneficial owners for companies?
Ongoing Monitoring
☐ Do we have ongoing monitoring procedures?
☐ Are we reviewing high-risk customers regularly?
☐ Are staff trained on AML responsibilities?
Flex AML Final Thoughts
Virtual offices can be an incredibly valuable opportunity for co-working spaces and business centres looking to increase recurring revenue without expanding physical space.
However, AML compliance cannot be treated as an afterthought.
The businesses that succeed long term are usually the ones that build strong compliance foundations from the beginning, protecting both their reputation and their customers.
At Flex AML, we help co-working spaces, serviced office providers, and virtual office operators simplify AML compliance in a practical, approachable, and commercially minded way.
Whether you are launching virtual office services for the first time or reviewing existing processes, getting the right framework in place early can make growth far safer and far easier long term.
Flex AML 