Sanqto
home industries real-estate agencies
Industry page

For real-estate agencies and managers

Brokering the rental of a unit to a company whose UBO is on the list is a prohibited service. Liability sits with the broker and the property manager — regardless of who owns the property.

Works offline
GDPR-aligned
EU / UN / OFAC lists
Auditable reports
Legal status for this industry
The duty not to provide services or funds applies regardless of AML status. Brokerage, advisory, leasing, insurance — each is a "service" within the meaning of Reg. 269/2014.
Reg. 269/2014 · 833/2014 · Polish Act of 13.04.2022
Legal obligation

Does a real-estate agency have to run sanction screening?

Yes — and for two independent reasons. Real-estate brokerage is an obliged entity under AML law, and the sanctions ban applies to every company regardless of that status.

Two legal bases for the duty

First: Regulation (EU) 269/2014 prohibits making economic resources — and a property, along with brokerage of it, plainly falls within that — available to entities on the EU list. Second: real-estate agents are an obliged entity within the meaning of the Anti-Money Laundering Act of 1 March 2018, which imposes additional customer due diligence duties. Even without the second basis, the first is enough.

The broker and the manager, not just the owner

Liability rests with whoever provides the service. In long-term lettings, sale brokerage and letting management, that is the broker and the manager — regardless of who owns the unit. You have to check the principal, the target party to the transaction and the buyer's UBO, especially with offshore companies and non-resident clients.

Cash transactions and the notarial deed

Cash transactions and payments from foreign accounts are a particular flashpoint. With a notarial deed, the duty to verify falls on both the broker and the notary. Re-screening the UBO just before the deed is signed catches listings that appeared after the brokerage agreement.

What skipping the check risks

For making resources available to a listed party, the Act of 13 April 2022 provides for an administrative penalty of up to PLN 20M, while AML law adds separate sanctions for the absence of procedures. Directive (EU) 2024/1226 adds criminal liability for sanctions violations (in Poland, draft bill UC92). A documented screening is at the same time evidence of due diligence.

This material is educational and does not constitute legal advice. Legal status: May 2026. Basis: Council Regulations (EU) 269/2014 and 833/2014 and the Polish Act of 13 April 2022.

Risk scenarios

What this looks like in your work.

SCENARIO 01

Long-term office lease

Brokerage of a 600 m² lease to an "advisory firm" whose UBO is on the annex. A 5-year contract worth PLN 2.1M. The broker provides the service → liability.

SCENARIO 02

Cash sale of an apartment

Cash transaction above the EUR 10,000 threshold. Buyer — an individual on the OFAC list. Both the broker and the notary are liable.

Hot spots

Where the risk is highest.

  • 01
    Long-term office and unit leases
  • 02
    Brokerage of sales above thresholds
  • 03
    Letting management for non-resident clients
  • 04
    Cash and offshore-account transactions
Tailored workflow

When exactly to screen the customer.

1
On the brokerage agreement
Screen the principal and the target party
2
Before the notarial deed
Re-screen the buyer's UBO
3
Monthly for managed properties
Monitor the tenant portfolio
Mini-case

"Kwadrat Nieruchomości" agency, 280 transactions / year

Deployed in 3 days. Process integrated with the client file — screening mandatory before signing the brokerage agreement. Package: Business — 5 900 EUR one-time.

typical persona
Service-side SMB
1–20 staff · deployed in 7 days
Most-asked questions

Truth first, technology second.

Does this really apply to my industry?
Yes. The ban on making funds available or providing services to listed persons (Art. 2 of Reg. 269/2014) applies to all economic operators — regardless of whether the industry is formally under AML obligations. For sectors like travel or real estate, criminal and administrative liability already exists today.
What if the customer doesn't agree to be screened?
Screening uses data you already hold from the contract or invoice (first name, last name, company name, tax ID, optionally date of birth). It does not require customer consent — it is the business's discharge of a legal obligation (GDPR Art. 6(1)(c)).
What do I do when there's a hit?
The app flags the result red, generates a justified report, and surfaces the procedure: pause the service, freeze funds, notify the FIU within 24 hours. Nothing is reported automatically — the decision sits with you.
Are the reports accepted by the FIU and tax authority?
Each report carries a timestamp, the reference-list version, the operator identifier and a hash of the input file — a format aligned with regulator expectations. Local archival for 5 years (the required retention period).
How often are the lists updated?
Every hour, plus immediately after publication of changes in the Official Journal of the EU. The app pulls reference files itself — it never sends customer data the other way.
Does this integrate with my CRM?
Yes. The Business and Enterprise tiers expose a REST API and ship integrations for popular CRMs (Pipedrive, HubSpot, Salesforce, Bitrix). On Starter you use the manual form.
Where is my data physically?
Wherever you install the app — your machine, your server, your network. There is no "Sanqto cloud" for customer data. Consequence: no data-processing agreements, no third-country transfers.
What's the fine if I don't screen?
Up to PLN 20,000,000 in administrative fines (Art. 15(1)(2) of the Act of 13 Apr 2022) and criminal liability up to 15 years for making funds available. Liability sits with the business — not the customer.
Contact

Book a 20-minute deployment call.

No salesperson, no slide deck. We'll show the install and answer the legal questions.

We reply within 1 business day.
Demo on your data (locally, on your hardware).
30-day trial, no commitments.

By clicking, you consent to being contacted with our offer. Data does not leave the EEA.

See demo