Enforcement headlines tend to focus on major banks, multinational companies and high-profile scandals. Smaller firms may assume they are unlikely to attract the same attention.
But the UK’s latest enforcement measures point to a different reality. The focus is increasingly reaching into local businesses, company structures and the professional relationships that allow money and commercial activity to move through the economy.
In May 2026, the Government announced £30 million of funding to tackle organised crime operating through high street businesses and established a new High Street Organised Crime Unit. The move builds on Operation Machinize, in which more than 450 companies were referred to Companies House for further investigation during the second phase in October 2025.
For smaller firms, the lesson is not that every business is a target. It is that size alone offers little protection from the consequences of weak controls, missed warning signs or inadequate records.
Small firms often operate with close client relationships and a strong understanding of their local markets. That can be a commercial advantage. But familiarity can also make it easier for assumptions to replace formal checks.
A client may have been known to the practice for years. A property transaction may appear routine. A company’s ownership may seem straightforward because the same individual has always been the point of contact.
Yet knowing a client socially or professionally is not the same as establishing who ultimately owns or controls a business, understanding the purpose of a transaction, or assessing whether the information provided is consistent.
The National Crime Agency’s Operation Machinize 2 demonstrates how enforcement can reach beyond large institutions. The operation involved 2,734 premises visited or raided and 924 arrests, with more than £10.7 million in suspected criminal proceeds seized. Businesses and premises were investigated in connection with a range of suspected offences, including money laundering, tax evasion and illegal working.
For property and accountancy firms, the significance is not that they will all face enforcement action. It is that the commercial environment around them is receiving greater scrutiny, and the quality of their own due diligence matters.
The Government’s new High Street Organised Crime Unit signals a more coordinated approach to identifying suspicious businesses, sharing intelligence and supporting enforcement. Meanwhile, the NCA’s 2026 National Strategic Assessment highlights the continuing role of corporate structures and professional enablers in concealing illicit finance.
Companies House reforms form part of the wider shift towards improving the reliability of company information and addressing the misuse of UK corporate structures. For firms working with companies, this reinforces the importance of looking beyond a registration record and understanding the people who own, control and benefit from the business.
There are also direct consequences when businesses breach other legal requirements. During Operation Machinize 2, 341 referral notices relating to illegal working and renting were issued. Employers found liable for illegal working can face fines of up to £60,000 per worker. This is a specific penalty linked to illegal working, not a general AML fine, but it illustrates the potential financial impact when compliance obligations are breached.
The broader point is that a small organisation can still be exposed to serious legal, financial and reputational consequences.
For many SMEs, compliance is not managed by a large specialist department. It sits alongside client service, transactions, billing and day-to-day operations. The same employee may be responsible for collecting identity documents, checking ownership details and keeping records up to date.
That pressure is reflected in SmartSearch’s UK 2026 Compliance Reality Check. More than a third of UK accountancy firms were reported as non-compliant with AML standards, based on ICAEW data cited in the report, compared with 18% across the rest of the financial services sector. The research also found that 54% of identity verification checks are conducted manually. In property, 29% of respondents identified the pace of regulatory change as their leading compliance pain point.
These findings reveal a practical challenge. Smaller teams may understand that requirements are changing but lack the time, systems or dedicated expertise to translate that awareness into consistent processes.
Manual checks are not automatically inadequate, and digital tools are not a substitute for judgement. The risk arises when processes are inconsistent, information is not properly assessed, or staff cannot demonstrate what checks were completed and why.
The answer is not necessarily to build a large compliance function. It is to make core controls clear, proportionate and repeatable.
Start with ownership and identity. Establish who the client is and, where relevant, who ultimately owns or controls the business. Investigate discrepancies rather than relying solely on information supplied at onboarding.
Understand the commercial picture. Consider whether a client’s activities, transaction values, source of funds and stated business purpose fit together. Unusual features should prompt proportionate enquiries, not automatic conclusions.
Make responsibilities explicit. Staff should know which checks they need to complete, when to escalate concerns and how to record decisions. Regular, role-specific training helps turn written policies into everyday practice.
Review relationships over time. Onboarding is only the beginning. Material changes in ownership, business activity or risk should trigger a fresh look at whether the original assessment still holds.
Reduce avoidable manual work. Digital identity verification and connected AML screening can help smaller teams apply checks more consistently and keep a clearer record of their work. The aim is to use technology to support sound decisions, not simply to process more checks.
For SMEs in property and accountancy, the current direction of travel is clear, enforcement is becoming more coordinated, the misuse of company structures remains a concern, and regulators expect firms to take their obligations seriously.
That need not be a reason for alarm. It is a reason to review whether existing processes are proportionate to the risks and robust enough to stand up to scrutiny.
SmartSearch helps regulated firms bring identity verification and AML screening into a more connected workflow, reducing dependence on fragmented manual processes and helping teams manage due diligence more efficiently.
For smaller businesses, good compliance is not about trying to look like a large institution. It is about knowing who you are working with, understanding the risks and being able to show how you reached your decisions.
The assumption that a firm is too small to matter is no longer a sound basis for managing compliance.