The Financial Conduct Authority (FCA) has announced increased scrutiny of Annex 1 firms, signalling a tougher regulatory approach towards sectors it believes may present heightened financial crime risks. The move is designed to strengthen anti-money laundering (AML) controls and ensure firms operating in these sectors have appropriate safeguards in place.
For organisations impacted by these changes, the message is clear: regulators expect robust, risk-based AML frameworks that are tailored to your business, not generic policies borrowed from elsewhere.
The FCA has raised concerns about risks within Annex 1 firms, particularly around the potential for financial crime and weaknesses in AML controls. The regulator specifically highlighted concerns where firms rely too heavily on procedures developed by parent companies or group entities, rather than implementing controls designed around their own risks, governance structures and business operations.
As part of its enhanced oversight, the FCA has confirmed that:
The regulator has also highlighted concerns surrounding unregulated lending conducted through complex corporate structures, including special purpose vehicles (SPVs), and is actively seeking to identify and disrupt financial crime risks within the sector.
Annex 1 firms include businesses such as:
These organisations are required to register with the FCA for anti-money laundering supervision purposes.
While these firms may not be subject to the same regulation as authorised financial services businesses, they are still expected to maintain effective AML controls and demonstrate that they understand and manage their financial crime risks appropriately.
With regulatory expectations increasing, firms should proactively review their compliance frameworks and identify any potential gaps before regulatory scrutiny arrives.
Many firms have grown rapidly or become part of wider groups. The FCA has made it clear that firms cannot simply rely on off-the-shelf or group-wide AML procedures if they do not reflect their specific business activities and risks.
Organisations should ensure policies are:
A risk assessment should not be a one-time exercise. Businesses need to understand:
A strong risk-based approach helps firms demonstrate to regulators that they understand and actively manage their exposure to financial crime.
Customer Due Diligence (CDD) remains a cornerstone of effective AML compliance.
Firms should ensure they can confidently:
The FCA has indicated it will be engaging more closely with Annex 1 firms and gathering additional information to understand business activities and risks.
Firms should be ready to demonstrate:
As regulatory scrutiny increases, firms need compliance processes that are both effective and efficient.
SmartSearch helps businesses meet AML obligations through a fully digital compliance platform that streamlines customer onboarding, due diligence and ongoing monitoring.
SmartSearch enables firms to verify individuals and businesses quickly while maintaining a robust audit trail. This reduces manual administration and helps organisations demonstrate their compliance efforts.
Through integrated identity verification, sanctions screening, PEP checks and adverse media monitoring, businesses can build a more comprehensive picture of potential risk at the point of onboarding.
By providing access to reliable customer intelligence and monitoring capabilities, SmartSearch helps firms apply appropriate controls based on risk rather than taking a one-size-fits-all approach.
As scrutiny increases, firms need confidence that they can evidence their compliance processes. SmartSearch helps create clear, auditable records that support regulatory expectations and internal governance requirements.
The FCA's announcement is another indication that financial crime prevention remains a key regulatory priority. For Annex 1 firms, the focus is no longer simply on having AML procedures in place; it's about demonstrating that those controls are effective, appropriate and tailored to the specific risks facing the business.
Organisations that take action now by reviewing their AML frameworks, strengthening customer due diligence processes and adopting technology-led compliance solutions will be better positioned to meet regulatory expectations and minimise risk.
For firms facing increased scrutiny, preparation today could make all the difference tomorrow.