Most property dealers in Pakistan still think of anti-money laundering as "a bank thing". It is not. Since 2020, AML/CFT compliance for real estate agents, builders and developers has been a legal obligation supervised by the Federal Board of Revenue (FBR), and in August 2026 FBR tightened the definition of who counts as a real estate agent. If your agency books plots, your society sells files, or your company markets apartments, you are expected to know your customer, keep proof of it, report large cash deals and suspicious activity, and be able to show all of this to an inspector. This guide explains the obligations in plain language and how to keep records that do not depend on a drawer full of CNIC photocopies.
Editorial note (October 2026): This guide is general information based on publicly available laws, regulator notices and market reports as of October 2026. Rules, rates and procedures change — confirm current requirements with the relevant authority, your bank, or a qualified lawyer or tax advisor before acting. This is not legal, tax or investment advice.
Who is covered: real estate agents as DNFBPs
Pakistan's Anti-Money Laundering Act, 2010 was amended in September 2020, and FBR was designated as the AML/CFT regulatory authority for real estate agents, dealers in precious metals and stones, and accountants who are not members of ICAP or ICMAP. FBR confirmed this in its October 2021 press release on DNFBP supervision. These businesses are called Designated Non-Financial Businesses and Professions (DNFBPs), and FBR set up a dedicated Directorate General to register and supervise them.
The definition of "real estate agent" is wider than most people expect. Under FBR's AML/CFT Regulations for DNFBPs it already included builders, real estate developers and property brokers and dealers when they handle the purchase and sale of real property. In August 2026, S.R.O. 1439(I)/2026 amended those regulations and, according to ProPakistani's report on the amendments, the definition now expressly covers title transferring authorities as well. In practice that means:
- Estate agencies and individual dealers who negotiate sales, purchases or transfers.
- Builders and developers selling apartments, shops or houses directly to the public.
- Housing societies and private schemes that sell plots and files and run transfer desks.
- Bodies that process title transfers, which now sit clearly inside the framework.
The core obligations at a glance
| Obligation | What it means in a property office | Evidence an inspector will look for |
|---|---|---|
| Registration | Register with FBR as a DNFBP and keep registration details current | Registration certificate, updated particulars of owners and senior management |
| Risk assessment | Assess your own money laundering and terrorist financing risks and set policies approved by senior management | Written risk assessment, AML/CFT policy, named compliance officer |
| Customer due diligence (CDD) | Identify and verify buyers, sellers and beneficial owners before or during the transaction | CNIC/NICOP/passport copies, verification notes, source of funds where required |
| Sanctions screening | Check customers against proscribed and designated persons lists | Screening result saved against each customer file |
| Currency transaction reports (CTRs) | Report cash transactions at or above the notified threshold through goAML | CTR filing references matched to receipts |
| Suspicious transaction reports (STRs) | Report suspicion of money laundering or terrorist financing promptly, without tipping off the customer | Internal escalation log, STR references |
| Record keeping | Keep CDD and transaction records for the legally required period and produce them on request | Complete, retrievable files per customer and per transaction |
Step 1: Register with FBR and appoint a compliance officer
Every DNFBP must be registered with FBR, and FBR can ask for information such as details of senior management and beneficial owners when registering or updating a registration. FBR also launched a mobile app that supports registration, screening against proscribed and designated persons lists, and generating suspicious transaction reports.
Registration is not a formality. FBR has directed development authorities and housing societies not to process property business through real estate agents who are not registered as DNFBPs, and in 2021 it was reported that public sector authorities were told not to issue NOCs or approvals to housing schemes unless the sponsor was registered and had appointed an AML/CFT compliance officer. For a developer, an unregistered status can therefore become a project approval problem, not just a fine.
Appoint a compliance officer senior enough to stop a booking if needed, ideally someone in finance or legal rather than the sales head.
Step 2: Customer due diligence that actually holds up
CDD applies when you are involved in a transaction for a client concerning the buying or selling of real estate. For a Pakistani property office, a workable CDD file for each buyer and seller contains:
- Identity: CNIC, NICOP or passport (for overseas Pakistanis and foreign nationals), with the original sighted or verified through an accepted method.
- Contact and address details that match the documents, plus occupation or business.
- Beneficial ownership: if the buyer is a company, firm, trust or someone acting under a power of attorney, identify the natural person who ultimately owns or controls the purchase, and take reasonable measures to verify that person's identity using reliable, independent sources.
- Purpose and source of funds: proportionate to risk. A salaried buyer paying monthly installments from a bank account is low risk; a buyer who wants to pay a large sum in cash, or through several third parties, is not.
- Screening result against the proscribed and designated persons lists, saved with a date.
- Risk rating (low, medium, high) with the reason, and enhanced due diligence for higher-risk customers such as politically exposed persons.
A common gap: the file is opened for the original allottee, but nothing is collected when the file is transferred three times on the open market. Every transfer is a new transaction with a new buyer. If your transfer desk processes it, CDD applies again. Our guide to the legal risks of manual property transfers covers why paper-only transfer records create problems far beyond AML.
Step 3: Currency transaction reports (CTRs) through goAML
The Financial Monitoring Unit (FMU) requires reporting entities, including real estate agents, builders and developers, to file a CTR for cash transactions of Rs 2 million or more, as reported when FMU issued its CTR guidance. CTRs are filed electronically through FMU's goAML system, which all reporting entities have used since January 2020. Account-to-account bank transfers are not reported as CTRs; the rule targets cash. The 2026 amendments reportedly left the Rs 2 million threshold unchanged, but confirm the current notified figure before relying on it.
The practical challenge is that cash rarely arrives as one neat deposit: some at the site office, some at head office, some through a dealer. Unless every cash receipt is recorded against the same customer in one system, nobody notices the total crossing the threshold.
Step 4: Suspicious transaction reports (STRs)
An STR is not an accusation; it is a report that something does not add up. Section 7 of the AML Act requires reporting entities to report suspicious transactions to FMU, and the law prohibits tipping off the customer that a report has been made or is being considered. Red flags commonly cited for the property sector include:
- A buyer who insists on paying in cash and avoids banking channels without a sensible reason.
- Payments arriving from several unrelated third parties for one file.
- Rapid back-to-back transfers of the same file at prices far above or below market.
- A buyer unwilling to provide identity documents or using a nominee with no clear relationship.
- Requests to record a lower price on the sale agreement than the amount actually paid.
- Early cancellation and refund requests asking for the refund to be paid to a different person.
Write down a simple internal route: front desk or dealer flags the concern, the compliance officer reviews within a set time, and the decision (report or not, and why) is recorded. That written trail is what protects the business if an inspector later asks why a particular deal was or was not reported.
Step 5: Record keeping and producing records on request
The AML Act and FBR's regulations require CDD information and transaction records to be kept for a minimum prescribed period and produced promptly when FBR, FMU or a designated law enforcement agency asks. The August 2026 amendments add that records connected to litigation must be kept until the case is resolved, and longer if a court or competent authority requires. Check the current text of the regulations for the exact retention periods that apply to your business.
"Produce promptly" is where paper systems fail. If an inspector asks for every cash receipt above a certain amount for a block in the last two years, with the buyer's CNIC and the CTR reference, a manual office may need weeks. That is the same problem described in our guide to surviving an FBR audit, and the solution is the same: structured digital records.
Penalties: why this is not optional
FBR can impose monetary and administrative sanctions on reporting entities and, in some cases, their directors and senior management, under the AML Act and the AML/CFT Sanctions Rules, 2020. Dawn reported in 2021 that FBR had carried out a large number of onsite inspections and imposed penalties on real estate agents who failed to register. In 2023 FBR also issued regulations for recovering AML monetary penalties. Penalty amounts depend on the breach and the current rules, so we have not quoted figures here; the reputational and approval consequences are often more damaging than the fine itself.
A practical AML/CFT checklist for property offices
- FBR DNFBP registration is active and particulars are up to date.
- A compliance officer is named in writing and staff know who it is.
- A written risk assessment and AML/CFT policy exist and were approved by senior management.
- No booking or transfer is completed without identity documents uploaded to the customer record.
- Beneficial owners are identified for companies, firms and power-of-attorney purchases.
- Every customer is screened, and the result is saved with a date.
- Cash receipts are recorded per customer so cumulative totals are visible.
- CTR and STR references are stored against the relevant transaction.
- Staff and dealers receive basic training at least annually, with attendance recorded.
- Records can be retrieved by customer, plot, date range and payment method within minutes.
How a real estate ERP makes compliance practical
None of these obligations require software by law, but they are very hard to meet consistently with registers, Excel and WhatsApp. A real estate ERP such as CAPITALESTATEPK helps because the compliance data lives in the same place as the sales data:
- One customer record per buyer, with CNIC/NICOP/passport scans, contact details, nominee and beneficial owner information attached to every booking and transfer.
- Mandatory fields so a booking cannot be confirmed without identity documents, which removes "we'll collect it later".
- Payment method on every receipt (cash, cheque, pay order, IBFT, Raast), so cumulative cash per customer can be reported in seconds.
- Audit trail showing who created, edited or approved each booking, receipt and transfer, and when.
- Role-based access so sales staff and dealers see only what they need, while compliance can see everything. See role-based access control in real estate.
- Dealer portal submissions that carry customer documents into the system rather than leaving them in a dealer's phone.
Software does not file STRs for you or replace judgement, but it makes sure the evidence exists, is complete and can be found.
If your agency, society or development company wants buyer records, receipts and transfers in one auditable system, book a demo and we will walk through how CAPITALESTATEPK handles customer files, payment records and audit trails.
Frequently Asked Questions
Do small property dealers need to register with FBR as DNFBPs?
Yes. The obligation applies to real estate agents as a category, not only large firms. If you negotiate or facilitate property sales, purchases or transfers for clients, you should treat registration as mandatory and confirm your status with FBR's DNFBP directorate.
Are housing societies and developers covered, or only agents?
FBR's definition of real estate agent includes builders and real estate developers when they carry out purchase and sale of property, and the 2026 amendments expressly include title transferring authorities. Societies that sell plots and run transfer desks should assume they are covered.
Do I report every installment above Rs 2 million?
The CTR requirement is about cash transactions at or above the notified threshold. Bank transfers between accounts are not reported as CTRs. Suspicious activity must be reported as an STR regardless of amount or payment method.
Can I tell a customer that I have filed a report about them?
No. The law prohibits tipping off. Train front-desk staff and dealers to escalate concerns internally and not discuss them with the customer.
How long should we keep buyer KYC records?
For at least the minimum period prescribed by the AML Act and FBR's regulations, and longer where records relate to litigation or a court or authority requires it. Many businesses keep complete digital records for the life of the property relationship to be safe.