AML Obligations for Real Estate Agents in Spain

Scope of this article: This piece focuses on obligations when brokering purchase and sale transactions. Organisational AML duties of the brokerage itself (internal risk assessment, staff training, allocation of responsibilities) are not covered here and will be addressed in a separate article.

What does "obliged entity" (sujeto obligado) mean for real estate agents in Spain?

Under Art. 2.1(l) of Ley 10/2010, an obliged entity (sujeto obligado) is, in particular, anyone who professionally acts as an agent, broker, or intermediary in real estate purchase and sale transactions. Core obligations include: formal identification of the parties, determining the ultimate beneficial owner (UBO) when a company is involved, checking sanctions lists and PEP status, ongoing monitoring of the business relationship, documentation, and retention for a minimum of 10 years.

Does this apply regardless of the languages my office works in?

Yes. Ley 10/2010 applies to anyone professionally carrying out real estate brokerage in Spain, regardless of the languages spoken in the office or the nationality of clients.

A common misconception: assuming the check is ultimately the notary's or the gestoría's responsibility once the deed is drawn up. The agent's due diligence obligation is original and independent — it is neither replaced nor discharged by a later notarial or tax review.

What specific AML duties does Ley 10/2010 impose on real estate agents?

Ley 10/2010, together with its implementing regulation Real Decreto 304/2014, requires real estate intermediaries to, among other things:

1. Carry out formal identification of all parties — buyer and seller
2. Determine the ultimate beneficial owner (UBO) when a company is involved
3. Gather information on the purpose and nature of the business relationship — the background of the transaction, the economic activity of the parties, and, on a risk-sensitive basis, the intended payment and financing method
4. Check sanctions list entries and separately assess PEP status (politically exposed person) — two distinct checks, not interchangeable terms
5. Maintain ongoing monitoring of the business relationship and the course of the transaction — for example if the buyer structure, UBO, financing, payment method, or companies involved change
6. Internally review unusual circumstances (atypical payment routes, complex corporate structures, contradictory documentation) and, where the legal conditions are met, report to SEPBLAC
7. Document and retain records for a minimum of 10 years

When must the KYC check take place?

Identification should not be left until the notary appointment. Under Ley 10/2010, it must generally be carried out before establishing the business relationship or executing the transaction. The precise point within the brokerage process (viewing, offer, reservation, option contract) depends on the agent's specific role and the process followed.

Outlook: what changes with the EU's AMLR from 2027?

From 10 July 2027, the EU's AMLR (Regulation (EU) 2024/1624) will apply directly across all member states; its Art. 3(3) explicitly names real estate agents as obliged entities. Unlike a directive, an EU regulation is not transposed into national law but applies directly — Ley 10/2010 remains the relevant Spanish AML law in the meantime; the extent to which it is amended or continues to apply alongside the AMLR depends on the specific area of regulation. Several implementing technical standards (RTS) for the AMLR are at various stages of drafting; the detailed due diligence rules most relevant to real estate are not yet finalised. This article will be updated once they are published.

Is there a purchase price threshold that triggers enhanced checks?

No, there is no fixed price threshold that automatically triggers enhanced due diligence. The scope of the KYC check depends on an overall risk assessment — country of origin, PEP status, complex corporate structures, payment method. Purchase price can be one factor feeding into that assessment, but does not on its own create an obligation.

KYC steps for your brokerage

Step 1: Formal identification of both parties

Verify the identity document (passport, DNI/NIE) of both buyer and seller before the transaction proceeds.

Step 2: UBO determination for companies

When a company is buyer or seller, an older incorporation deed alone is often not enough — it doesn't reliably reflect the current ownership, control, and representation structure. Current registry and representation certificates, along with suitable documentation of the existing ownership and control structure, are needed to determine the ultimate beneficial owner.

Step 3: Sanctions and PEP screening

Carry out and document both checks separately — PEP status is not the same as a sanctions list hit.

Step 4: Documentation and retention

Document every step in a traceable way and retain records for at least 10 years. A missing record can itself constitute a compliance issue in an inspection — even if the transaction turns out to be unremarkable in substance.

Case study: when UBO identification starts too late

A property is sold through a Spanish family holding company. A family member acts as the point of contact — but the company has several individual and corporate shareholders, with holdings passed down across generations. If UBO identification isn't started early, incomplete documentation often surfaces just before the notary appointment — causing delays even though buyer, seller, and price have long been settled.

Practical lesson: UBO identification shouldn't begin only after all contract terms are agreed — it should be triggered as a fixed process step from the start.

This recurring process gap — observed in DC Finest's own brokerage practice in the luxury segment of southwest Mallorca, not from Doxario platform data — was one of the reasons behind building Doxario.

Christopher Deppe's perspective

After more than 15 years selling luxury property in southwest Mallorca, my observation is that most agents know Ley 10/2010 exists, but few manage to apply it consistently on every single transaction. The real risk isn't ignorance of the law — it's inconsistency: done carefully when there's time, skipped when things move fast, which is exactly when it matters most.

Common mistakes in AML compliance

• Assuming that an office operating internationally with foreign clients falls outside Spanish law
• Assuming due diligence can be delegated to the notary or gestoría
• Treating purchase price as the sole determinant of how much due diligence is needed
• Confusing the Ley 11/2021 cash payment limit with the KYC obligations of Ley 10/2010 — these are two independent rules with different purposes. Where a business or professional is party to a payment, cash payments of €1,000 or more are prohibited; the limit is €10,000 where the payer is a private individual not tax-resident in Spain and not acting as a business or professional. These limits concern the payment method, not the identification obligation itself
• Leaving UBO identification until the end of the process rather than the beginning

How Doxario supports KYC compliance day to day

Doxario helps agents consistently trigger the intended verification steps, document them, and track them throughout the transaction. In Doxario's intended workflow, identification is triggered at a defined point in the offer process, so it isn't left until shortly before the notary appointment — this trigger point is a Doxario product decision, not a statutory deadline. Sanctions and PEP checks are triggered automatically and documented separately. The goal isn't to replace the agent's professional judgment, but to ensure no step gets skipped under time pressure.

Doxario is a service of Blue Pepper S.L., a Spain-based company.

Want to structure and document your KYC process for real estate transactions in Spain in a traceable way? See the Doxario workflow →

Frequently asked questions about Ley 10/2010 for real estate agents

As an agent operating internationally in Spain, do I still need to carry out KYC checks? Yes. An office operating in Spain is subject to Ley 10/2010 regardless of the languages it works in or the nationality of its clients.

Do I need to identify both the buyer and the seller? Yes, the formal identification obligation covers both parties to the transaction.

When must the KYC check take place? Generally before establishing the business relationship or executing the transaction — not shortly before the notary appointment. The exact timing depends on the specific case.

Does the notary's or gestoría's review replace my own obligations as an agent? No. The agent's due diligence obligation is original and independent, and is not replaced by a later notarial or tax review.

At what purchase price do enhanced checks apply? There is no fixed threshold. Purchase price is one of several factors in the overall risk assessment.

What is an ultimate beneficial owner (UBO), and why do I need to identify one? The UBO is the natural person who ultimately owns or controls a company. Identification is mandatory whenever a party to the transaction is a legal entity — based on current documentation, not outdated incorporation deeds.

How long do I need to keep KYC records? A minimum of 10 years.

What happens if I don't comply with Ley 10/2010? SEPBLAC can identify breaches through its supervisory and inspection functions, which can lead to sanctions. Ley 10/2010 distinguishes different procedures depending on the nature and severity of the breach; the specific liability and fine amount depend on the individual case (Art. 56–58 Ley 10/2010).

About the author: Christopher Deppe is Managing Director of DC Finest Real Estate Mallorca and founder of Doxario, a KYC/AML compliance platform for real estate transactions in Spain. He has over 15 years of experience in the luxury property segment of southwest Mallorca. As founder of Doxario, he has a financial interest in the solution described in this article.

This article is for general information only and does not replace individual legal advice from a qualified lawyer. Article status: 3 August 2026. Editorial review: Hanns-Christopher Deppe. This article will be updated once the final AMLR implementing technical standards are published.

Legal sources

• Ley 10/2010, of 28 April, on the prevention of money laundering and terrorist financing (in particular Art. 2, 3, 5–7, 25, 56–58)
• Real Decreto 304/2014
• Ley 11/2021, on measures to prevent and combat tax fraud (cash payment limits)
• Regulation (EU) 2024/1624 (AMLR)
• SEPBLAC — sepblac.es