Ask Mat: "In Jersey, when doing CDD, who actually is 'the customer'?"

Today’s Ask Mat question:

• "Everyone in my firm uses the word 'customer' differently: the person who instructed us, the beneficial owner, the person paying, sometimes even the other side of the transaction.
• Is there an actual legal test for who counts as 'the customer' for CDD purposes in Jersey, or is it just judgement?"

Mats Reply

• This one comes up constantly, and the honest answer is: there is a legal test, but it's thinner than most people expect and the word "customer" doesn't mean the same thing every time it appears in the Money Laundering (Jersey) Order 2008 (MLO).
• Both of those facts trip firms up in different ways. Let's sort it out properly.

The statutory definition is almost nothing

• Article 1 of the MLO, the interpretation section, defines "customer" like this:
• "Customer" means a person.
• That's the entire definition:
• No further qualification, no list, no test.
• If you were expecting something more substantial, you're not missing anything; the Order genuinely leaves it there.

So where does the real limiting work happen?

• Not in "customer" in the two relational concepts built around it:
• "Business relationship" and
• "One-off transaction."
• Both only exist between a relevant person and a customer, and both require something to be happening between you and that person:
• "Business relationship" "a business, professional or commercial relationship between a relevant person and a customer, which is expected by the relevant person, at the time when contact is established, to have an element of duration."
• "One-off transaction" (Article 4) a transaction, not part of a business relationship, reaching the €15,000 threshold (or linked transactions reaching it; lower thresholds apply for money/value transfer services and casinos).

(NOTE:- The UK has converted its equivalent thresholds from euros to sterling (via the Money Laundering and Terrorist Financing (Amendment) Regulations 2026, largely effective 30 June 2026). The main occasional-transaction CDD trigger moved from €15,000 to £12,000, with other thresholds also restated in sterling (some adjusted slightly for FATF alignment). This is a UK-specific change and has no automatic application to Jersey)

• In practice, this means someone will generally be treated as "the customer"
• Where you are carrying out a transaction, or forming a relationship, for them, not simply because their money, name, or interests touch a file you're working on.
• Whether that threshold is actually met can itself require judgement on the facts, as the worked example below shows.
• Article 3(2) of the MLO backs this up: identification measures are for "identifying the customer", a concept that presupposes the relationship or transaction already exists.

The JFSC AML/CTF/CPF Handbook adds useful gloss, but it's still not law.

• The JFSC Handbook glossary fills in some of the texture the Order leaves out:
• A person with whom a business relationship has been formed or a one-off transaction carried out.
• Customer references also include, where appropriate,
• A prospective customer (a business applicant) with whom a business relationship is to be established, or a one-off transaction carried out...
• May also be referred to by Industry as a 'client'.
• Two things worth pulling out of that.
• First, it confirms that in industry usage, customer will often correspond to the client, the person you're acting for, though the two aren't invariably the same (more on that below, where a beneficial owner is involved).
• Second, it introduces "business applicant", someone who isn't yet your customer but is in the process of becoming one, which is why CDD timing rules (Article 13) require identification before the relationship or transaction is established, not just once it's live.
• But, and this matters, if you're ever relying on the point in an examination or in front of a court, the Handbook is a Code of Practice issued under Article 22 of the Proceeds of Crime (Supervisory Bodies) (Jersey) Law 2008.
• It's admissible in evidence and must be considered where relevant,
• But it isn't primary legislation, and it isn't a judicial construction of the word.
• If "customer" is ever genuinely disputed,
• A court would construe the MLO's own text; the Handbook glossary is strong persuasive material, not a substitute.

A worked example: Lawyers, real estate agent, and the buyer/vendor problem - Here's a typical illustration rather than a fixed rule; the answer can shift on different facts.

• Take a LAWYER acting for the seller in a property sale.
  • On a standard instruction, that lawyer isn't carrying out anything for the buyer: no instruction, no advice, no service.
  • The buyer's completion funds arriving in the client account of the vendor's lawyer are the mechanical result of a transaction being carried out for the vendor.
  • On those facts, the buyer wouldn't normally be treated as "the customer" of the vendor's lawyer; however, much money passes through the file, though a firm holding funds for the buyer's benefit, or acting for both sides, could find the analysis runs differently.
• Contrast the standard case with a REAL ESTATE AGENT, who acts for their customer (vendor - seller) who typically deals with the purchaser directly: viewings, negotiating the offer, sometimes holding a deposit
  • That direct dealing is precisely why COP176 needed to exist to pull the purchaser inside CDD scope for that sector specifically.

§   [COP176] Following FATF Recommendation 22, a supervised person that provides real estate agency services as defined in paragraph 19 of Part 3 of Schedule 2 to the Proceeds of Crime Law must comply with CDD obligations with respect to both purchasers and vendors of the property.

• Notice what that Code does:
• It names one specific supervised-person category — real estate agents under paragraph 19 — and expressly requires CDD on both sides of the deal.
• Lawyers fall under a different paragraph of Schedule 2 (legal services), and Section 20 of the Handbook has no equivalent wording extending the same dual-sided requirement to them.
• You Can Read More Here:- https://www.comsuregroup.com/news/ask-mat-im-a-jersey-lawyer-and-act-for-the-vendor-do-i-really-need-to-do-amlctfcpf-checks-on-the-buyer/
• The general rule doesn't reach the buyer on its own; COP176 is a deliberate:-
• Narrowly-targeted exception built for a sector that deals with the purchaser directly,
• Not a principle to read across into conveyancing more broadly.

"Customer" doesn't stay the same word throughout the Order.

• Here's the part that catches even experienced practitioners out:
• The MLO widens the meaning of "customer" in specific places, for specific purposes, and only there.
• Two examples worth knowing:
• Article 16 reliance.
• When relying on another obliged person's CDD, the Order defines "customer of the obliged person" to include:
• The customer themselves,
• A beneficial owner or controller of that customer,
• A third party for whom the customer is acting,
• A beneficial owner or controller of that third party, or
• A person purporting to act on the customer's behalf.
• That's a materially broader net than Article 1's bare definition, but it only applies to the reliance mechanics in Article 16, not to CDD generally.
• Article 15(2) enhanced risk states.
• A Money Laundering (Jersey) Amendment Order 2026 change (taking effect 31 October 2026) does something similar for enhanced CDD triggered by a connection to an enhanced risk state:
• For that purpose only, "customer" is expanded to include beneficial owners, controllers, third parties the customer is acting for, and people acting on the customer's behalf.
• Again, a purpose-specific widening, not a general redefinition.
• The lesson:
• Don't assume a widened "customer" definition you've seen used in one context relies automatically in a different context, like whether a counterparty needs identifying.
• Please check which Article you're applying for.

Customer vs beneficial owner where the real operational confusion sits

• These are two different, cumulative concepts, not two names for the same thing and conflating them is probably the single most common CDD error we see in practice.
  • The customer is the person (natural or legal) with whom you have the business relationship or one-off transaction;
  • The party you're actually contracting with or acting for.
• The beneficial owner or controller is a separate concept, defined in Article 2 MLO:
  • Broadly, an individual who ultimately owns or controls a customer that isn't itself an individual, a company, foundation, partnership, or other legal person or arrangement.
• Article 3(2)(c) requires you to:
  • Understand the ownership and control structure of a non-individual customer and
  • Identify its beneficial owners and controllers as part of CDD,
• But that's an additional identification requirement layered onto the customer relationship, not a substitute for it. It doesn't automatically make the beneficial owner "the customer" in the Article 1 sense.
• A beneficial owner only gets folded into the word "customer" itself where a specific provision says so:
  • Article 15(2) for enhanced-risk-state triggers
  • Article 15A for PEP screening
  • Article 16 for reliance
• Outside those named contexts, the beneficial owner remains someone you identify about the customer, not someone you form a relationship with.
• That distinction has real teeth in practice.
  • Take a Jersey company as your customer, with a single individual holding 100% of the shares.

• • • You identify and verify that individual as beneficial owner — full ID, address, source-of-wealth checks, the lot. None of that, on its own, completes your CDD file.
    • You still need to identify and verify the company itself separately: its incorporation details, registered office, directors, and the purpose and intended nature of the relationship you're forming with it.
  • Two different files, two different Handbook sections, two different pieces of evidence, and

• • • A firm that's thorough on the beneficial owner but thin on the company (or vice versa) has only done half the job, even though it feels like "we've done the CDD."
• The reverse gap is just as common, and arguably more dangerous: sanctions and PEP screening.

• Screening the corporate customer's name against the designations list doesn't screen the individual who actually owns and controls it, and the individual is exactly where sanctions hit, or PEP status is most likely to actually sit.
• If your screening process only runs the customer's name and stops there, you've ticked the "customer" box and left the beneficial owner box entirely empty, which is precisely the gap COP64 closes by naming beneficial owners and controllers as a separate, mandatory screening category in their own right, not an assumed by-product of screening the customer.
• COP64 says: A supervised person must undertake sanctions screening for all business relationships and one-off transactions. This screening must include the customer, any Beneficial owners and/or controllers and other associated parties.
• Read COP closely, and the structure matches the wider point:
• Three separate categories, named separately, all mandatory.
• The Handbook doesn't treat "screen the customer" as shorthand for "screen everyone connected to them" it spells out each category because leaving any one of them out is exactly the gap firms fall into.
• One more wrinkle worth flagging:
• A beneficial owner can independently become "a customer" too, on entirely separate facts, for example,
• If your firm goes on to provide that individual with their own personal services (a will, a trust, a property purchase in their own name), unconnected to the company relationship.
• That's not the beneficial-owner identification carrying over.
• It's a fresh business relationship or one-off transaction being formed with them directly, triggering Article 13, on its own timing, quite apart from anything you've already done for them as someone else's beneficial owner.
• Identifying the beneficial owner doesn't discharge your obligations to the customer, and vice versa; they're two boxes to tick, not one, and the file needs to show both have been ticked, not just one of them done thoroughly.

The practical test

• When you're not sure whether someone in front of you is "the customer," ask one question:
• Are you carrying out a transaction, or forming a relationship, for this person
• As opposed to merely dealing with money, documents, or instructions that happen to involve them?
• IF YES,
• They're your customer (or applicant for business) and Article 13 timing applies.
• IF NO,
• They're a counterparty, a payer, a beneficiary, or an incidental party.
• CDD doesn't reach them by default, though other obligations (sanctions screening, ongoing monitoring, suspicion-based reporting) may still apply on their own separate terms.

I hope the above helps. Please come back to me if you have any questions:

Warning:-

• This article reflects Comsure's interpretation of the legislation and JFSC AML/CFT/CPF Handbook (sections referenced carry effective dates clustering around 31 May and 30 June 2026) as at the date of publication. It is provided for general guidance only and does not constitute legal advice. The Handbook itself is a Code of Practice, not primary legislation, so firms should verify against the current legislation. je and jerseyfsc.org texts, check for any subsequent JFSC thematic findings or updated guidance, and take independent advice on their own facts. Note too that different sections of the Handbook carry different effective dates as they're updated on a rolling basis (recent versions cluster around 31 May and 30 June 2026); always check for the live version rather than relying on a single date.

Got a question for Ask Mat? Please get in touch with the Comsure team; chances are, if you're asking it, someone else is too.

References

1. Money Laundering (Jersey) Order 2008 Article 1 (Interpretation, "customer," "business relationship"), Article 2 (Beneficial ownership and control), Article 3 (Meaning of "customer due diligence measures"), Article 4 (Meaning of "one-off transaction"), Article 13 (Application and timing of customer due diligence measures), Article 15(2) (as amended by the Money Laundering (Jersey) Amendment Order 2026), Article 16 (Reliance "customer of the obliged person").

https://www.jerseylaw.je/laws/current/ro_20_2008

2. JFSC AML/CFT/CPF Handbook sections referenced carry effective dates clustering around 31 May and 30 June 2026; readers should check jerseyfsc.org for the current live version. Glossary ("customer(s)"); COP176 (Real estate agents CDD on purchaser and vendor).

https://www.jerseyfsc.org/industry/financial-crime/amlcftcpf-handbooks/amlcftcpf-handbook/

3. Proceeds of Crime (Supervisory Bodies) (Jersey) Law 2008 Article 22(6) (Legal status of Codes of Practice).

https://www.jerseylaw.je/laws/current/l_32_2008

4. Money Laundering (Jersey) Amendment Order 2026 (R&O.77/2026).

https://www.jerseylaw.je/laws/enacted/Pages/RO-077-2026.aspx

Further Reading

JFSC AML/CFT/CPF legislation page (full list of primary and subordinate legislation):

https://www.jerseyfsc.org/industry/financial-crime/amlcftcpf-legislation/