Is your gold business actually compliant —
or just hoping it is?

The compliance gap most gold businesses have

Compliance is not a policy document. It is a workflow problem.

In five years working with precious metals businesses, I have never audited one with a genuine gap in their written policy. The policy is usually fine. The problem is that the policy is not consistently followed in practice — because it has not been built into the actual workflow staff use every day.

When a busy cash-for-gold branch is processing six customers an hour, the transaction monitoring checklist that lives in a folder somewhere does not get consulted. The KYC documentation that should be collected for a high-value purchase does not always get collected. The suspicious activity that should trigger a report gets mentally noted and then forgotten. This is not negligence. It is the predictable result of compliance being an add-on rather than an integral part of operations.

The solution is not more training or better policy documents. It is building compliance triggers directly into the tools your staff already use — so the right documentation step happens automatically at the right moment, regardless of how busy the branch is.

What a properly integrated compliance workflow looks like

1. 1
   Transaction threshold triggers

   When a transaction reaches a defined value, the workflow automatically prompts the required KYC documentation step before the transaction can proceed. Staff do not decide whether documentation is needed — the system decides for them.
2. 2
   Customer identity verification at point of intake

   ID verification is built into the customer intake form, not treated as a separate step that can be skipped. Photo ID capture, address verification, and politically exposed person screening are integrated into the customer record from the first interaction.
3. 3
   Suspicious transaction flagging and SAR workflow

   Defined criteria for suspicious transactions are embedded in the system. When a transaction meets those criteria, an alert is raised for management review. The Suspicious Activity Report workflow — including submission to the National Crime Agency in the UK — is documented, templated, and fully auditable.
4. 4
   Consistent documentation across all branches

   For multi-location operations, every branch follows exactly the same compliance process because it is driven by the same system. A branch manager cannot make different decisions about what documentation is required. The process is consistent. The audit trail is complete.
5. 5
   Compliance audit reporting and staff SOPs

   A monthly compliance audit report generated automatically from your operational data — showing transaction documentation rates, flagged cases, and any process gaps. Plus fully written standard operating procedures for every compliance scenario, maintained and updated as regulations evolve.

Common compliance questions from gold business owners

• What compliance obligations do cash-for-gold businesses have in the UK?+

  UK cash-for-gold businesses must register with HMRC as a High Value Dealer if they accept cash payments of 10,000 euros or more, and are subject to the Money Laundering Regulations 2017. Obligations include AML policies, customer due diligence, transaction monitoring, suspicious activity reporting, and staff training. Obligations in the USA, UAE, and India vary but all impose meaningful requirements on precious metals buyers.

• How do you build AML compliance in without slowing down transactions?+

  The key is embedding compliance in your workflow infrastructure rather than treating it as a separate checklist. When identity verification, threshold checks, and documentation prompts are built into your CRM and point-of-sale workflow, compliance becomes automatic. Staff do not have to remember what each transaction requires — the system prompts them at the right moment, at the right stage.

• What is the real risk of inadequate AML compliance for a gold business?+

  HMRC can issue civil penalties of up to one million pounds for serious AML breaches. Beyond financial penalties, businesses face criminal prosecution, loss of operating licences, reputational damage, and rejection by banks and payment processors. For multi-location operations, inconsistent compliance across branches creates compounding risk — one branch with poor documentation can expose the whole business. The regulatory direction is toward stricter enforcement, not looser.