The FCA is becoming the single AML supervisor for professional services, including the UK legal sector. The direction was confirmed by the Government in October 2025. Transition arrangements are being worked through across 2026 and 2027, with full implementation targeted for 2029. For firms that have spent decades being supervised by the SRA, CLC, Bar Standards Board and the other legal sector supervisors, the next three years are a transition into an enforcement environment that is more documented, more technology-literate and more accustomed to larger penalties than anything the sector has operated under before.
The good news is that this is not a surprise. The sector has had clear sight of the direction since late 2025, and the firms that have been preparing have time on their side. The firms moving now will meet FCA oversight on their own terms. The firms waiting will meet it under pressure.
That is the choice sitting in front of every UK legal firm’s compliance, risk and MLRO leadership heading into 2027.
To understand what the transition means, it helps to understand what is actually changing.
For most of the last decade, AML supervision of the legal sector has been delegated by Government to the professional body supervisors. The SRA supervises solicitors in England and Wales. The CLC supervises licensed conveyancers. The Bar Standards Board supervises barristers. The Law Society of Scotland and the Law Society of Northern Ireland supervise their respective jurisdictions. HMRC supervises firms that fall outside these regimes.
Under the new arrangements, the FCA becomes the single statutory AML supervisor for professional services. The professional bodies continue to have a role on broader regulation of their respective professions, but the AML perimeter moves to the FCA. HMRC continues to supervise firms not inside a professional body regime, though the strategic direction places the FCA as the lead voice on how UK legal firms are held to account for AML.
The Government’s stated rationale is consistency, consolidation and effectiveness. Twenty-two different AML supervisors across professional services (across the full UK, including accountancy and tax) has created inconsistent standards, variable enforcement and limited cross-sector intelligence sharing. A single supervisor fixes that at the regulatory level. For the sector it supervises, it also introduces a materially different enforcement standard.
The FCA has been running its existing regulated population under an enforcement standard that is well-documented and worth understanding.
In 2025, FCA AML fines across its existing regulated sectors reached over £23 million, with Barclays and Monzo (£21.1 million) absorbing the largest penalties of the year. Enforcement decisions have been published with greater clarity than the sector has been used to under professional body supervision. The FCA’s strategy, published in 2025, has been explicit that being a smarter regulator will not mean a lighter touch on AML. It will mean sharper supervisory judgement and faster enforcement decisions when controls are found to be inadequate.
Practically, FCA supervision will look different from SRA or CLC monitoring in several specific ways.
Documentation standards will be higher. The FCA expects that AML controls can be evidenced through documented processes, logged decisions, and audit trails that can be produced on demand. Good practice under current SRA supervision becomes baseline under FCA supervision.
Inspection-readiness will be continuous, not periodic. Legal firms have become used to preparing for monitoring visits on a known cycle. The FCA’s supervisory model is more continuous, with the expectation that firms can demonstrate control effectiveness at any point, not just when a visit is scheduled.
Enforcement decisions will carry more weight. The SRA has been intensifying its enforcement activity through 2025 (over 35 fines totalling more than £565,000 across the year, 137 internal enforcement outcomes up from 74 the year before, 14 SDT cases carrying £953,000 in combined fines). That signals the direction of travel. The FCA is likely to maintain or raise that pace.
Senior accountability will be sharper. The FCA brings a well-established approach to individual accountability for compliance failings. The specific form this will take for legal firms is still being developed, but the direction is unmistakable.
For well-run firms, none of this is a problem. For firms that have been operating AML as a compliance overhead rather than an operational capability, the step-change in supervisory expectation is going to land hard.
One of the questions coming up repeatedly in conversations with legal sector compliance leaders is what happens to the SRA’s role once FCA supervision lands.
The simple answer is that the SRA’s AML supervision function moves to the FCA, but the SRA continues as the broader regulator of solicitors in England and Wales. Professional conduct, client money, continuing competence, firm authorisation and public interest regulation all remain with the SRA. AML moves across, but the professional body supervisor does not disappear.
That matters practically for how legal firms think about their 2027 compliance operation. The SRA has been intensifying its AML focus throughout 2025 and 2026 precisely because it wants to hand over a sector that is in good shape. The SRA AML Annual Report published in October 2025 showed enforcement activity at the highest level in several years. Over 35 fines were issued in 2025, totalling more than £565,000. The Solicitors Disciplinary Tribunal heard 14 AML-related cases with £953,000 in combined fines. Specific firms named in enforcement decisions through 2025 included Simpson Thacher (£300,000), Taylor Vinters (£172,934), Tolhurst Fisher (£120,000) and Amphlett Lissimore (£114,006).
The SRA’s AML monitoring data also tells a specific story. Across its most recent round of firm monitoring visits, only 22% of firms were found to be fully compliant with their AML obligations. The specific weaknesses have been consistent: documented firm-wide risk assessments that have not kept pace with the current threat picture, customer due diligence that doesn’t extend fully into complex ownership structures, source of funds verification that has been treated as a form rather than an evidence trail, and ongoing monitoring that has been event-triggered rather than continuous.
None of this is new to any solicitor who has been through an SRA monitoring visit recently. The question is what happens to those weaknesses once the FCA inherits the supervisory baton. The honest answer is that the FCA will inherit the same weaknesses and will push harder on each of them.
For legal firms planning well for 2027, our 2026 Compliance Reality Check, which surveyed 1,000 senior decision-makers across UK regulated sectors, points to some specific focus areas.
On broader readiness, only 23% of legal leaders describe themselves as very confident in meeting their current NRA obligations. That is lower than the sector average and reflects the pressure the regulatory wave of the last 18 months has placed on legal compliance teams.
On operational capability, 54% of UK regulated firms (including the legal slice) are still conducting identity checks manually. 52% struggle to verify beneficial ownership in complex structures. For legal firms specifically, source of funds verification continues to be flagged by the SRA as a specific weakness, particularly on property transactions, trust and estate work and corporate instructions.
The capabilities that most distinguish firms that will absorb FCA supervision from firms that will struggle under it are specific.
Triangulated identity verification across multiple trusted data sources, which delivers up to 97% first-time pass rates against the 60-65% industry benchmark on single-bureau checks. Reducing the manual intervention rate on identity is one of the biggest operational levers for a legal compliance team.
Documented source of funds evidence trails, built around Open Banking-enabled verification where possible, turn source of funds from a form-filling exercise into an auditable evidence trail. The SRA has been flagging this as a weakness for three years. The FCA will treat it as a bar.
Beneficial ownership verification that extends into complex corporate structures, including nominee arrangements and layered share classes. This is where the sector’s compliance work most often breaks down in practice, and it is where the FCA’s documentation expectations will land hardest.
Ongoing monitoring across the full client base, not just event-triggered reviews. A point-in-time check at onboarding is no longer a defence. Daily or continuous monitoring is now the expected standard.
Explainable, audit-ready technology that produces evidence a supervisor can inspect without having to request it. The firms that can demonstrate their controls in minutes, rather than having to assemble the evidence over days, will find FCA inspection an easier experience than firms whose evidence sits in multiple systems and spreadsheets.
Our Compliance Reality Check data also shows that legal firms are accelerating capability investment in response to the regulatory wave. Spend on identity verification, source of funds verification and ongoing monitoring is rising across the sector, and firms that have moved early on integrated platforms are reporting faster onboarding, cleaner audit trails and lower per-matter compliance cost.
For legal firms heading into 2027, three specific moves distinguish firms getting ahead from firms waiting to be told.
Audit current AML controls against the FCA’s expected standard, not the SRA’s. The step-change in supervisory expectation is more significant than any single control weakness. A firm comfortable with its SRA monitoring position in 2025 is not necessarily comfortable with its position under FCA supervision in 2027. An internal audit against the FCA’s expected standard, or a specialist external one, is the single most useful 2027 planning exercise legal compliance leaders can commission now.
Fix the specific operational gaps that have been showing up in SRA monitoring. Source of funds, beneficial ownership verification in complex structures, firm-wide risk assessment currency, and ongoing monitoring coverage are the four areas the SRA has been flagging consistently. The FCA will inherit the same expectations and push harder. Investing in integrated technology that automates identity verification, standardises source of funds, holds beneficial ownership evidence trails in a single system and runs continuous monitoring is the move that closes these gaps at operational scale.
Build the inspection-readiness discipline now. Under the FCA’s continuous supervisory model, inspection-readiness is a discipline, not a project. Firms that embed the discipline of “could I demonstrate this control today?” into their everyday operation will find FCA supervision a manageable transition. Firms that still think about inspection-readiness as something to prepare for in the weeks before a monitoring visit will struggle.
The firms accelerating now will meet FCA oversight on their own terms. The direction of travel is clear. The time to move is now. Legal firms that treat 2027 as the year to lift their compliance infrastructure to FCA-grade will be the ones best positioned for the 2029 supervisory environment that follows.