What Is AML? – NLS Academy

If you work in real estate in Spain, you are on the front line of one of the most important financial crime prevention systems in Europe. This is not optional. This is not a box-ticking exercise. Under Spanish law, you are a designated “obliged entity” — a sujeto obligado — and the law expects you to act as a gatekeeper against money laundering. This lesson will explain exactly what that means, why it matters, and what you need to do.

What Is Money Laundering?

Money laundering is the process by which criminals disguise the illegal origin of their money so they can use it freely in the legitimate economy. It is not a victimless crime. The money being laundered comes from drug trafficking, fraud, corruption, human trafficking, tax evasion, and organised crime. When that money flows into real estate, it distorts property markets, drives up prices for ordinary buyers, and turns communities into vehicles for criminal profit.

The process is traditionally described in three stages. Understanding these stages is essential because your role as a real estate agent places you at different points of intervention depending on the transaction.

Stage 1: Placement

This is the first and most vulnerable stage for the criminal. They need to introduce “dirty” cash into the financial system. In real estate, placement might look like this: a buyer appears with large amounts of cash and wants to purchase a property outright. Or a buyer uses cash to make a deposit, hoping the rest of the transaction will be handled through banking channels that won’t question the original source. Spain’s cash restrictions (which we will cover in detail) exist precisely to disrupt this stage.

Stage 2: Layering

Once money is inside the financial system, the launderer creates layers of transactions to distance the funds from their criminal origin. In real estate, layering is extremely common. A property might be purchased through a company registered in one jurisdiction, funded by a bank account in another jurisdiction, with the beneficial owner hidden behind nominee directors in a third jurisdiction. The property might then be sold, the proceeds moved to yet another account, and reinvested in a different property. Each transaction adds a layer of apparent legitimacy.

Another common layering technique in the Spanish market involves buying a property below market value, carrying out renovations (often with undeclared cash payments to contractors), and then reselling at a higher price. The profit appears to come from the renovation, not from criminal activity.

Stage 3: Integration

At this final stage, the laundered money re-enters the legitimate economy and appears clean. The criminal now owns a property — or the proceeds from selling one — that looks like a legitimate investment. They can rent the property and receive rental income. They can sell it and deposit the proceeds without raising suspicion. They can use the property as collateral for a loan. The criminal wealth has been successfully integrated into the legal economy.

Real estate is one of the most effective vehicles for integration because property is a universally accepted store of value. A person who owns a villa on the Costa del Sol looks like a successful investor, not a criminal — and that is precisely the point.

Why Real Estate Is a Target

Real estate is globally recognised as one of the highest-risk sectors for money laundering. The Financial Action Task Force (FATF), the international body that sets AML standards, has repeatedly identified property markets as a primary channel for laundering criminal proceeds. Here is why:

High transaction values: A single property purchase can move hundreds of thousands or millions of euros in one transaction, making it an efficient way to launder large sums.
Price opacity: Unlike publicly traded shares, property values are subjective. A property can be over- or under-valued without immediate detection, creating opportunities to move money through apparent price adjustments.
International capital flows: Cross-border property purchases are normal and expected, especially in Spain. This makes it harder to trace the origin of funds across multiple jurisdictions.
Complex ownership structures: Properties can be held through companies, trusts, and other legal entities that obscure who really owns and controls the asset.
Cash transactions: While Spain has strict cash limits, the historical prevalence of cash in certain segments of the property market — particularly in resale transactions and rural areas — means that cash-based laundering remains a real risk.
Limited gatekeeping (historically): Until relatively recently, real estate agents in many countries were not subject to AML obligations. Spain brought agents into the regulated framework, but enforcement is still catching up with the scale of the risk.

Spain’s Specific AML Risks

Spain faces a particular combination of factors that make its real estate market attractive to money launderers:

The International Buyer Market

Spain is one of Europe’s largest markets for international property buyers. The costas — Costa del Sol, Costa Blanca, Costa Brava — attract buyers from across Europe, the Middle East, Russia, China, and Latin America. This is a strength of the Spanish property market, but it also creates AML risk because verifying the source of funds from multiple jurisdictions is inherently more complex than dealing with domestic buyers.

The Golden Visa Program (Now Ended for Real Estate)

From 2013 until April 2025, Spain offered residency permits to non-EU nationals who purchased property worth at least €500,000. The Golden Visa program was criticised by EU institutions and anti-corruption organisations as a potential channel for money laundering, because it created a direct financial incentive for high-value property purchases by individuals from jurisdictions with weaker AML controls. The Spanish government ended the real estate route for Golden Visas in 2025, but the legacy of the program means that agents may still encounter clients who obtained residency through this route or who reference it in discussions.

Cash-Heavy Segments

While Spain’s cash restrictions are among the strictest in Europe, there remains a cultural legacy of cash transactions in certain property segments, particularly in rural areas and in the resale market. Any attempt by a client to introduce cash into a transaction above the legal limits must be treated as a serious red flag.

Proximity to High-Risk Jurisdictions

Spain’s geographic position — close to North Africa and with strong historical connections to Latin America — means that its property market can be exposed to funds originating from regions with higher levels of organised crime, corruption, and weak AML frameworks.

The Legal Framework: Your Obligations Under Spanish Law

As a real estate professional in Spain, you operate within a detailed and enforceable legal framework. Ignorance of these obligations is not a defence. Here is what you need to know.

Ley 10/2010 — The Primary AML Law

Ley 10/2010, de 28 de abril, de prevención del blanqueo de capitales y de la financiación del terrorismo is the cornerstone of Spain’s AML regime. Enacted on 28 April 2010, this law transposes EU directives into Spanish law and establishes the obligations of all persons and entities involved in preventing money laundering and terrorist financing.

The law sets out who is obliged to comply (the “sujetos obligados”), what due diligence measures they must apply, when and how to report suspicious activity, and what penalties apply for non-compliance. It applies across the financial sector, but critically for you, it extends well beyond banks and includes real estate professionals.

Article 2.1.m — You Are an Obliged Entity

This is the article that changes everything for real estate agents in Spain. Article 2.1.m of Ley 10/2010 specifically designates “promotores inmobiliarios y quienes ejerzan profesionalmente actividades de agencia, comisión o intermediación en la compraventa de bienes inmuebles” — property developers and those who professionally carry out agency, commission, or intermediary activities in the buying and selling of real property — as obliged entities.

In plain language: if you act as a real estate agent, broker, or intermediary in property transactions in Spain, you are legally obliged to comply with the full range of AML requirements. This includes individual agents, agencies, and anyone who professionally intermediates in property sales. It does not matter whether you are Spanish, British, Dutch, or any other nationality. If you carry out this activity in Spain, the law applies to you.

Being a sujeto obligado means you must:

Perform Customer Due Diligence on all clients
Identify and verify beneficial owners
Report suspicious activity to SEPBLAC
Maintain records for 10 years
Have written internal AML procedures
Receive AML training (this course is part of meeting that requirement)
Appoint or have access to an internal compliance function

Real Decreto 304/2014 — The Implementing Regulations

Real Decreto 304/2014, de 5 de mayo, provides the detailed implementing regulations for Ley 10/2010. Where the law sets out broad obligations, the Real Decreto specifies exactly how those obligations must be fulfilled. It covers the mechanics of client identification, the format and content of due diligence files, risk assessment procedures, and the operational requirements for internal control bodies. When you need to understand the “how” rather than just the “what,” this is the regulation to consult.

EU Directives: 4AMLD, 5AMLD, and 6AMLD

Spain’s AML framework exists within the broader framework of EU legislation. The key directives are:

4th Anti-Money Laundering Directive (4AMLD): Established the risk-based approach to AML, expanded the scope of obliged entities, and introduced beneficial ownership registers.
5th Anti-Money Laundering Directive (5AMLD): Enhanced transparency requirements, expanded access to beneficial ownership information, introduced regulation of virtual currencies, and strengthened cooperation between Financial Intelligence Units.
6th Anti-Money Laundering Directive (6AMLD): Harmonised the definition of money laundering offences across the EU, extended criminal liability to legal persons (companies can be prosecuted), and established a minimum prison sentence of four years for money laundering offences. Spain has transposed these requirements into national law.

The practical effect for you as an agent is that Spain’s AML obligations are regularly updated as new EU directives are adopted and transposed. You must stay current with your training and your agency’s procedures.

SEPBLAC: Spain’s Financial Intelligence Unit

SEPBLAC — the Servicio Ejecutivo de la Comisión de Prevención del Blanqueo de Capitales e Infracciones Monetarias — is Spain’s Financial Intelligence Unit (FIU). It sits within the structure of the Bank of Spain and the Ministry of Economy, and its role is central to the AML system.

SEPBLAC performs several key functions:

Receiving and analysing Suspicious Activity Reports (SARs): When you identify a suspicious transaction, your report goes to SEPBLAC. They analyse the intelligence, cross-reference it with other reports and data sources, and determine whether to refer the case to law enforcement or the public prosecutor.
Supervising obliged entities: SEPBLAC has the authority to inspect your AML procedures, request documentation, and verify that you are meeting your obligations. Real estate agencies can and do receive inspections.
Issuing guidance: SEPBLAC publishes guidance notes and typologies to help obliged entities understand emerging risks and meet their obligations.
International cooperation: SEPBLAC cooperates with FIUs in other countries, which is particularly important given the international nature of Spain’s property market.

You should think of SEPBLAC as the authority to which you are ultimately accountable for your AML compliance. They are not the police — they are the intelligence hub that connects your vigilance to the broader enforcement system.

Customer Due Diligence: What It Means for You

Customer Due Diligence — Diligencia Debida — is the practical core of your AML obligations. Articles 3 to 13 of Ley 10/2010 and the corresponding provisions of Real Decreto 304/2014 set out what you must do. Here is what CDD looks like in practice for a real estate agent.

1. Identifying the Client

You must formally identify every client before establishing a business relationship or carrying out a transaction. For individuals, this means obtaining and verifying an official identity document:

Spanish nationals: DNI (Documento Nacional de Identidad)
EU/EEA nationals: Passport or national ID card, plus NIE (Número de Identidad de Extranjero) if resident in Spain
Non-EU nationals: Passport, plus NIE

You must take a copy of the document and verify that it is genuine and current. Do not accept expired documents. Do not accept photocopies provided by the client — take the copy yourself from the original document. Record the document number, date of issue, and issuing authority.

For legal entities (companies, foundations, etc.), you must obtain the entity’s registration details, articles of association, and evidence of the legal representative’s authority to act.

2. Identifying the Beneficial Owner

This is one of the most critical steps, and the one most often done poorly. The beneficial owner (titular real) is the natural person who ultimately owns or controls the client entity. Under Spanish law, this means any natural person who directly or indirectly holds more than 25% of the capital or voting rights of a company, or who exercises control over the entity by other means.

When a property is being purchased through a company, you must look through the corporate structure to identify who really owns and controls that company. If the company is owned by another company, you must trace the chain until you reach the natural persons at the top. Spain’s Registro de Titularidades Reales (Beneficial Ownership Register) is a resource for verification, but you cannot rely on it alone — you must also make your own enquiries.

3. Understanding the Purpose and Nature of the Transaction

You must understand why the client is entering into the transaction. Is it a primary residence purchase? A holiday home? An investment? A purchase for renovation and resale? The purpose of the transaction should make economic sense in the context of what you know about the client. A retired teacher buying a two-bedroom apartment on the coast for retirement makes sense. The same person buying a portfolio of five commercial properties for cash does not.

4. Ongoing Monitoring

CDD is not a one-time event. If you have an ongoing relationship with a client — for example, you are managing multiple transactions for them or providing ongoing property management services — you must monitor the relationship and update your due diligence information as circumstances change.

Enhanced Due Diligence: When Standard CDD Is Not Enough

Enhanced Due Diligence (EDD) is required when the risk of money laundering is higher than normal. Under Spanish law and the risk-based approach mandated by the EU directives, you must apply EDD in the following circumstances:

Politically Exposed Persons (PEPs)

A PEP is a person who holds or has held a prominent public function — heads of state, senior politicians, senior government officials, judges of supreme courts, ambassadors, senior military officers, and members of the governing bodies of state-owned enterprises. The definition extends to their immediate family members and close associates. Under Spanish law, PEP status continues for a minimum of two years after the person leaves the public position, and in practice risk-based monitoring should continue beyond that.

If your client is a PEP, you must apply enhanced measures: obtain senior management approval for the relationship, take adequate measures to establish the source of wealth and source of funds, and conduct enhanced ongoing monitoring.

High-Risk Countries

When a client or the source of funds is connected to a country identified as high-risk by the FATF (the so-called grey list or blacklist) or by the European Commission, EDD is required. These lists are updated regularly, and you must be aware of the current designations. As of 2025, common high-risk jurisdictions include several countries in the Middle East, Africa, and Southeast Asia. Russia and Belarus are subject to extensive EU sanctions that go beyond standard AML measures.

Complex Structures

Transactions involving trusts, offshore companies, multi-layered corporate structures, or nominees require EDD. The more complex the ownership structure, the harder it is to identify the beneficial owner, and the higher the risk that the structure exists to conceal the true owner’s identity.

Unusual Transaction Patterns

Any transaction that is unusually large, unusually complex, has no apparent economic purpose, or does not match the client’s known profile should trigger EDD.

Simplified Due Diligence

The law does allow for Simplified Due Diligence (SDD) in cases where the risk of money laundering is demonstrably low. However, in real estate transactions, SDD is rarely appropriate. The high values involved, the frequency of international buyers, and the inherent opacity of property markets mean that most transactions will require at least standard CDD, and many will require EDD. Do not apply SDD unless your compliance officer has specifically approved it for a particular category of transaction.

Record-Keeping: 10 Years

Under Ley 10/2010, you must retain all CDD documentation and transaction records for a minimum of 10 years from the end of the business relationship or the completion of the transaction. This includes copies of identity documents, beneficial ownership information, correspondence, transaction records, and any internal analysis or risk assessments you prepared. These records must be available for inspection by SEPBLAC or other competent authorities at any time during the retention period.

Internal Procedures and the Organo de Control Interno

Every obliged entity must have written internal AML procedures — a manual that describes how the entity identifies clients, assesses risk, monitors transactions, escalates concerns, and files reports. These procedures must be approved by the entity’s management and kept up to date.

Additionally, obliged entities must designate an Organo de Control Interno (Internal Control Body or OCI) — a person or body responsible for overseeing AML compliance. For smaller agencies, this may be a single designated compliance officer. The OCI is responsible for ensuring procedures are followed, training is delivered, and suspicious activity reports are filed when necessary.

Training Requirements

The law requires that all staff of obliged entities receive appropriate AML training. This training must cover the legal framework, the entity’s internal procedures, how to identify suspicious activity, and how to escalate concerns. Training must be provided to new staff upon joining and updated regularly. This NLS Academy course is designed to meet this requirement, but your agency may also have additional internal training specific to its own procedures.

Penalties for Non-Compliance

The consequences of failing to meet your AML obligations are severe. Spanish law distinguishes between administrative and criminal penalties.

Administrative Sanctions

Under Ley 10/2010, breaches are classified as minor, serious, or very serious:

Minor breaches: Fines up to €60,000. These cover isolated procedural failures such as incomplete record-keeping.
Serious breaches: Fines from €60,001 to €1,500,000. These cover systematic failures in CDD, failure to have internal procedures, or failure to file suspicious activity reports.
Very serious breaches: Fines up to €1,500,000 or higher based on the benefit obtained. These cover deliberate non-compliance, obstruction of investigations, or systematic facilitation of money laundering.

In addition to fines, serious and very serious breaches can result in public reprimand, prohibition from practising, and removal of professional licences.

Criminal Liability

Article 301 of the Spanish Codigo Penal (Criminal Code) makes money laundering a criminal offence punishable by imprisonment of six months to six years and a fine of up to three times the value of the laundered assets. If the laundered funds originate from certain serious offences (drug trafficking, corruption, organised crime), the sentence can be increased. Under 6AMLD, criminal liability extends to legal persons — your agency itself can be prosecuted.

You do not need to be actively involved in laundering to face criminal liability. If you knowingly fail to report suspicious activity, or if you are wilfully blind to obvious red flags, you can be prosecuted as an accessory. “I didn’t want to know” is not a defence.

How The NLS Supports Your Compliance

The NLS platform is designed to help you meet your AML obligations in practice. The platform includes:

Verification workflows: Structured processes for collecting and recording client identification and due diligence documentation at the point of listing and at the point of offer.
Document storage: Secure storage for copies of identity documents, corporate documentation, and source-of-funds evidence, helping you meet the 10-year record-keeping requirement.
Transaction logging: Automatic recording of key transaction events, creating an audit trail that supports your compliance obligations.
Checklists and prompts: Built-in reminders for due diligence steps, so that no critical step is missed even in fast-moving transactions.

However, the platform is a tool — it does not replace your judgment. You are the person who meets the client, assesses the risk, and decides whether something feels wrong. Technology supports you, but the legal obligation sits with you.

Practical Advice: Day One with a New Client

Here is what best practice looks like when you first engage with a new buyer or seller:

Identify them immediately. Before discussing any property in detail, ask for their official identity document. Take a copy. If they are acting through a company, request the company’s registration documents and identify the beneficial owners.
Ask about the transaction. What are they looking to buy or sell? What is the budget? What is the purpose — investment, primary residence, holiday home? Does the answer make sense given what you can observe about the client?
Ask about the source of funds. Where is the money coming from? Savings? Sale of another property? Mortgage? Business income? Inheritance? You are not conducting a police investigation — you are asking reasonable questions that any professional should ask.
Document everything. Record the client’s answers. Store the identity documents. Note any concerns, even minor ones. If a concern arises later, your contemporaneous notes will be your best defence.
Assess the risk. Based on what you know, does this client present a standard, elevated, or high risk? Apply the appropriate level of due diligence.
If something feels wrong, escalate. Do not ignore your instincts. If a client’s story does not add up, if they are evasive about their identity or funds, if the transaction structure seems unnecessarily complex — escalate to your compliance officer immediately.

AML compliance is not about treating every client as a suspect. It is about being a professional who knows their obligations, asks the right questions, and acts when something is not right. The vast majority of your clients will be entirely legitimate. Your job is to identify the ones who are not — and to make sure that the Spanish property market is not used to clean dirty money.

In the next lesson, we will cover the specific red flags to watch for and exactly what to do when you encounter a suspicious situation.